last executing test programs: 6m3.85275907s ago: executing program 32 (id=2459): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0xda, {0x0, 0x0, 0x0, 0xb, 0x3, 0x0, 0x5, 0x4, 0x1, "1829c2cebb2f1f1a5023c954f8b6b2fa9a5e2e719c884860eb30aa09412f493f86afd6ae779ff165d84e830e78537e8a00be8b80b978e233e8535416ec8d29b1", "30d0840b2ac5c21c4520d4ae577852bd7db255c647191c712033611e831d65d0f79e1f506eda1cc79764f175645c94e91f002b8f3738f849ab26854eb81a138a", "a48af71800d2fe499026f27c86b744349f4b5f5297398ed05fd02cbfe61e6ff4", [0xbba, 0x2]}}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x4000040, &(0x7f00000002c0)={0x11, 0x0, r3}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) memfd_create(&(0x7f0000000300)='/\x00', 0x1) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000100)={0x24, @none={0x0, 0x2}}, 0x14) sendfile(r0, r0, 0x0, 0x7ffff000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0x1c) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000040)={0x1d, r3}, 0x10) 6m1.723211164s ago: executing program 33 (id=2622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x84c01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r1, &(0x7f0000000080)=""/87, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) fadvise64(r0, 0x7fffffffffffffff, 0x1000000400, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x40008004) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000000), 0xa4831, &(0x7f0000000100)=ANY=[@ANYRES64=0x0]) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc00) r5 = syz_clone(0x280000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x9, &(0x7f00000007c0)={0x0, 0x0, 0xffffffc0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x3, 0x8001, 0x7, 0x0, 0x0, 0xc, 0x3}, 0x1c) 5m55.740264168s ago: executing program 34 (id=2694): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x87]}}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3de80000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000200)='syzkaller0\x00') close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8"], 0xfdef) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 3m53.947349225s ago: executing program 35 (id=5113): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x8000000000000000}}, {@stats}, {@stats}], [{@flag='nomand'}, {@audit}, {@permit_directio}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x8000000000000000}}, {@stats}, {@stats}], [{@flag='nomand'}, {@audit}, {@permit_directio}]}) (async) 3m37.455575066s ago: executing program 36 (id=5456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents64(r2, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000140)={{0x2, 0x4e24, @broadcast}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x44, {0x2, 0x4e21, @rand_addr=0x64010101}, 'veth1_to_hsr\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0x200a00500, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff8, 0x0, &(0x7f0000000300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 2m35.714891378s ago: executing program 8 (id=6914): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000002440), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000080) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000540)=0x3, 0x4) r3 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000}}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, 0x0, 0x24000041) r5 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='vegas\x00', 0x6) keyctl$set_timeout(0xf, r5, 0x1000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000fc05d8817b26fca15872517ff9ac0393b6f97696f22af5216d81ef0423896f533e85292e1a32615f336d94be8ff63482054a7511c59145c423d734a9d1f38936e21c255e1d57da1a2769d4b818cbba60c12ea2d3e7badd37d4b695da16de89e9094f11d671bb09ba8000000000000000000000000000008f7de913106b000000000000d29e3e00ed3aedd167", @ANYRES16=r7, @ANYBLOB="000827bd7000fedbdf250d000000080005000c00000008000400feffffff"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x10) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x9) syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904000000"], 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r9, 0x2546c000) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') 2m35.156980517s ago: executing program 8 (id=6920): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x31, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = dup3(r3, r2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f00000053c0)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd}, 0x1c) setxattr$incfs_size(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=0x3e8, 0x8, 0x1) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xf) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000030000005800018044000400200001000a004e23000000004000000000000000000000000000000100000000200002000a00000000000000ff020000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) r10 = getuid() r11 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r10, r11) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40086315, {0x3, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m35.127582678s ago: executing program 8 (id=6921): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r4, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.261409872s ago: executing program 8 (id=6938): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{0xdddd0000, 0x5000, 0xe, 0xee, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x2, 0x7, 0x6}, {0x5000, 0xeeee0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0x9, 0x3, 0xc2}, {0xdddd0000, 0xe6e50002, 0x9, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x7, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x9, 0xf, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x4, 0x100000, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x8}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x0, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0xd6, 0x0, 0xf8}, {0xffff1000, 0x2000, 0xe, 0x5, 0x3, 0x3, 0xa, 0x49, 0x54, 0x6, 0x2, 0x8}, {0x80a0000, 0x5}, {0xdddd1000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x1, 0x0, 0xeeee0000, [0x2, 0x401, 0x7, 0x10800000000000c5]}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 2m34.204337253s ago: executing program 8 (id=6939): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000881, &(0x7f0000000140)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x3}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x8}}, {@no_bf_readahead}, {@no_bf_readahead}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@euid_gt={'euid>', r0}}]}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000280)={{0xdddd1000, 0x6000, 0xd, 0x4, 0x9, 0x9, 0x7f, 0x5, 0x3, 0xd, 0x5, 0x1}, {0x8080000, 0x0, 0x10, 0x2, 0x2e, 0xc8, 0x2, 0x2, 0x7, 0x8, 0xc, 0x5}, {0x5000, 0x8080000, 0xb, 0xfa, 0x8, 0x26, 0xc, 0x1, 0x2, 0x8, 0x3, 0x7d}, {0x10000, 0x2000, 0xa, 0x9, 0x40, 0x4, 0x7f, 0x2, 0x9, 0xf7, 0x1, 0x5}, {0x0, 0x8086000, 0x2, 0xad, 0x7, 0x0, 0xff, 0x14, 0x5, 0x0, 0x0, 0x5}, {0x6000, 0x1000, 0xd, 0x4e, 0x1, 0x47, 0x8, 0x7, 0x3, 0x1, 0x8, 0x40}, {0x3000, 0x10000, 0xf, 0xb2, 0x1, 0x52, 0x54, 0x40, 0x32, 0x4, 0x3, 0x11}, {0x2000, 0x8080000, 0x4, 0x5, 0x0, 0xd1, 0x0, 0x2, 0x57, 0x0, 0xff, 0x6}, {0x4, 0x5}, {0x0, 0x6}, 0x40, 0x0, 0xeeef0000, 0xc33b115190d078f5, 0x0, 0x800, 0xeeee0000, [0x1, 0x2, 0x7, 0x2]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f00000003c0)="66baf80cb8f08f258bef66bafc0cb84168422eef41ff8ef29b0000c74424005c000000c74424029e220000ff1c24b94d060000b800880000ba000000000f30c402fda88406f00000000f22e7c7442400f1000000c74424020f000000c7442406000000000f011c240f01c236440ff982e15109d52e470ffcfc", 0x79}], 0x1, 0x10, &(0x7f0000000480)=[@cstype0={0x4, 0xf}, @cstype0={0x4, 0x2}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0x7, @remote, 0x5}, 0x1c) r2 = signalfd4(r1, &(0x7f0000000500)={[0x9]}, 0x8, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000540)={0x4b46}) r3 = syz_open_dev$loop(&(0x7f0000000580), 0x3, 0x20440) close_range(r3, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a80)={'pimreg1\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)="655d89b7c367e841174cf3703fcf31a1f5777ce2f76a47489e3ada7c3a7026d0beee740246e592e1fc2c8a6908d9471faea547cf557e4c01c4691c2122b06716b7183820e0dd278ef3d69a974f587a71278cb521887ee7b0e3326fe99d86d80cca1278a04c2f7a2f40f66dc1bce3af9ffc08405fc939477cd00b1325974155b6a3f2e6cb25e06b781908455162bf1abb48f721bee676e50822293a733300c7021fb5f94c187466c284d8ff83d52d887d0eb7d36f17b637a123a37dec93b71865838f6168571365c4e8094ecb8d1f945581f0e7d5af06c0e32674736310fbd218423196", 0xe3}, {&(0x7f00000006c0)="562b641130e6bdb419d707972717eebc950046d2f67ba7cbb3414009592cbcfeb041a303cf22cdd7acf34d6ba2d090b26a619116e32cc128c34584a5af9f4c8fec93a4e00f4c4a45861914afe80445aa8f3dc082438d2afbf78dc5f90ee71e06ae0f3a65ada9eef0687789bea5be0c04d83c88182702724c4d9cc61fd56b8cdc55f07ad2f061f4dc717307c7d9ce3e6e6065d2486a83f11dbf5ef201045d523e2d7573c0cec3fadb0ab491948341e408486057117855559fb0f3", 0xba}, {&(0x7f0000000780)="08b7eb82a0c4d203d5c8f6706307bda5c3e5096e364382234062041c9055a31abe863f4e1f93276b9e29668928df75cf1f0ace6b270466a9f3689ff0ff77649de7d919bbba5bcf", 0x47}, {&(0x7f0000000800)="14114494bed26ef8e185ecd43f8d6bb649683e3de5c30706fed7b74299e4df69ba50599f06dc5e566fd1e13c4519921024c1e2ab09a389f14ce527f457da7dee7aafd43d0b7124cac7c34de986b73882aaf171a0a29da7e4f35be757a6e2b03b84abf72af5dce840ba405ca86240dfab24d4cdd513766825f445f0887b8867d1a4ee43134201cdd6d424f32a554e2bd11aad2f617cc920b4d1505d925db1735d383c6e0439d159dc9e", 0xa9}, {&(0x7f00000008c0)="8fe2f17462f2c1ccc9b4641f0c973c37f1a8c8aed010d87f3b46d0879e9b66d333bba05ca1033b76805ef1f36038af2db044e02412a318989602e3f8cebc1f2ba74d03e07f1d2d1bc541f4ff7546853049b80cb2825a39f69823835dbe22dee39642a97f711730f98d0bebe25ea409c5d4c263993fc677f51054dabd3da0fa5bbf8678978220d3e9016e3372bb34b9eb8b10a6b1a47a42d392de538fb1300c9c67bbea79c192f206d459e6df21f3285e1a6c74ed9c82f908c7ba8b637af4a1ba4d228a7befc5eb01832299e6f0fce35f77850db75717213977e3061a9055d7", 0xdf}, {&(0x7f00000009c0)}], 0x6, &(0x7f0000000ac0)=[@flowinfo={{0x14, 0x29, 0xb, 0x1817}}, @dstopts={{0xa0, 0x29, 0x37, {0x6, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x40, 0x68, "1320f0608bae7a578c39d0e1dcd97b807187c069f7481f545ff41b14fb6dd7f755a7d3acdc8f1638c495b07dcd150b034f4f9d6053c50bf7973435fde371951a9cf3542225432fdffa6a48deea33aec19e0725fd48d69e96a89f0eab6376e05e3ea0da6ee05fe7b1"}, @hao={0xc9, 0x10, @mcast2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7a9}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x8, 0x5, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x58, 0xa, [0x80000001, 0x4, 0xfffffffffffffffe]}}, @ra={0x5, 0x2, 0x3}, @enc_lim, @ra={0x5, 0x2, 0xe}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x38}, r4}}}, @hopopts_2292={{0x150, 0x29, 0x36, {0x21, 0x26, '\x00', [@pad1, @generic={0x5, 0xc2, "2add00d45300b84a2ee0e996c43f69287e59e7ac162110524e8c72244462c9d4647cf16503262b66b6c38526601a4cf0f745fb60aaa0e756dd986ce4f4b5aaae8ff6d9adb5afe8d19bddc6c5c0023e801af9227ea8d1cfba6b87f066cb2bfd7687cd6f036fb0b15869a90b916e3a5275cfebf6cff2621723bec2ebdfaad0ac00787603263195840d903f704ddfbc3bf51ca50e28780a46331a6c87c8aca32c4b9f4c9144502d00c298d0c938380bce67b21cf3c7a9d52a89db70ca3e2ffc4fc5c58a"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x34, 0x3, [0x0]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x7, 0x8, [0xd37, 0x6, 0x565, 0x6, 0x8, 0xb, 0x1, 0x2, 0x80, 0x554eb62a]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}], 0x2a8}}], 0x1, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000dc0), 0x8001, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, &(0x7f0000000e00)={0x3, 0x0, [{0x40000001, 0x0, 0x7, 0x7, 0x80000000, 0x400, 0x6f}, {0x180000038, 0x2, 0x0, 0x2, 0x7fff, 0x0, 0x7}, {0x80000008, 0xffffffff, 0xb, 0x80, 0x5, 0x2, 0x4}]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000e80)={[{0x5, 0x4, 0x5, 0x2, 0xff, 0x16, 0x0, 0x5, 0x7, 0x1, 0x6, 0x8, 0xc0e}, {0x2, 0x7, 0x81, 0x5, 0x5, 0x40, 0x2a, 0xfb, 0x7, 0x1, 0x8, 0x9, 0x6}, {0x7, 0x0, 0xfd, 0xd, 0x1, 0x7, 0xff, 0x5, 0x6, 0x40, 0x6, 0x3, 0x6}], 0x7fffffff}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000f00)={r1, 0x53, 0x6, 0x937}) ioctl$int_out(r6, 0x2, &(0x7f0000000f40)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f80), 0xa0602, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000fc0)={0x0, 0xeeee0000, 0x2, 0x2, 0x20}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000001000)={0x1854170, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7f, "bdc726dcb37832"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000002000)={r8, 0x0, "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", "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"}) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000003000)=@rnullb, r0, &(0x7f0000003040)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000003080)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003100), r6) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000003200)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x44, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfffc}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x44088) pread64(r1, &(0x7f0000003240)=""/202, 0xca, 0x6) openat$cgroup_ro(r2, &(0x7f0000003340)='cgroup.controllers\x00', 0x0, 0x0) r10 = dup3(r1, r7, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000003380)={0x2000}) 2m34.201516963s ago: executing program 8 (id=6941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x959028, &(0x7f00000001c0)={[{}]}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000400), 0xfffffffffffffff9, 0x101000) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) keyctl$chown(0x4, r0, r3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4099, 0x1003, 0xd33) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x5) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLERRORu(r4, &(0x7f0000000140)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x200}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x959028, &(0x7f00000001c0)={[{}]}) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000400), 0xfffffffffffffff9, 0x101000) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) keyctl$chown(0x4, r0, r3, 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4099, 0x1003, 0xd33) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x5) (async) pipe2$9p(&(0x7f0000000100), 0x80800) (async) write$P9_RLERRORu(r4, &(0x7f0000000140)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) (async) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x200}) (async) 2m33.976609047s ago: executing program 2 (id=6944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38b, 0x3}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000000100)={[{@name}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x3a, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d1"}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="40091c000000dffd8d6fc0f3aef3bd8f6dbc6a8eaf8ae27509000000d429828943dd"], 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x200, 0x40}}, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8f}, &(0x7f0000000980)={0x40, 0xb, 0x2, "3ea0"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x3752}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x1a, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x11) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfffffd16, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m33.489572904s ago: executing program 2 (id=6945): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r2, 0xffffffffffffffff, 0x0) 2m33.476678005s ago: executing program 2 (id=6946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0xff, 0x0, &(0x7f0000000080)="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"}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x3, 0xddd70000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r2 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x8100) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x18000}) preadv2(r1, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/167, 0xa7}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/123, 0x7b}], 0x7, 0xa8, 0x6, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0xc01, 0x80, 0x9}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', r3, &(0x7f00000007c0)='./file1\x00', 0x300) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x21c, 0x14, 0x8, 0x70bd2a, 0x25dfdbfc, {0x22, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "e5e9c33196b78fef4bc140b4e227179a3e42fc277aeb92dd62ddf7f0ab9b64118bb4c119ab6fe0c1c5b291a79dcc9e75291d07c42010f19d022c285b9f1612f9288a42cf27d6cd1413fc5f9b71893113c8bcb151c9db4aa4c93a5676dca74ae6ad3f19883d848ea467e7a5"}, @INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "d5764301cbfed10074d811f05e7d88dbba706538780df1ea0201259a88795568dea4062e547494ed9921a2cbae960ae3f39cddedb7acc2385b11e9e905631aeb345c77eace45a98231c9e8e6154496ff1cb5661f07bb5e1b1e970cb9ce3773d76bacff93f341"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "eb9f28c5b78e91517649cefe9b3897ce15a516dbd0abd5c729adc3c1f390b06ade26702cd11dbea4331c65112caa5621dd420c79b935096612c4aa6e755cf08a4f12140e7a00cad69f6b09bbd6dacb1c526e351d88c7526171ea5cb500f6c9326537db8cd2c038f058edf1b15ba05eba85ab744c47596a66e2c7c3949fe03305e766dac747af7f33472db5d70f61b866f271429a4167f4b496e11c9def31"}, @INET_DIAG_REQ_BYTECODE={0x37, 0x1, "5a6b43e20be13ee799c845f00befac075dbe33a16ddd0a85e83c363c354fc7aa97a8049e8d9eaf6fce5089a621df6130a8042c"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "aebca9f81d38ac1435bba5f92493e890e871fd04cf99207b2444a1dffda7339df1dcb1e496b749989e70a253ed53200e688c4f46e09ced135f8d7b88bc6d4205b94e1ae502b26051a1b16a2b"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4000001}, 0x200080c0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000b00)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) inotify_add_watch(r2, &(0x7f0000000b40)='./file0\x00', 0x800) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000f80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000bc0)={0x344, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {0x5, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "2e97cff13d57bbad3a1f8b54d3a8e46b0ff5675c03051836492ce50a6e82f006e583aebf6e4918835be972dfe83167e9c6452d31f1078da14a3041b1f7b260c7468053ea67c1830d23573787a4ca2408c0a2d9cf7a8cab5390e05dbcaed0e8a935c38b652a39ff96ee9ecdc517e8daed41b0333ae551c38f8af04c44274af4c953efa2537e00eee6bcc88b7fafd4cfeba1d4bdffef8e674ac4f2a40418b49412db6ad3a672318ca918813731ffb0292cd8b25264178c1a0f715532e534a294a4734e4fc8b08ce5fad36a7ab32487ed"}, @INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "8677f6555a98cef74e88b33cb59dcfe0ad6a4a9419de02e69f4088e1c5de126d31901e1d8d46c9d5cfe0666c9a1d5fc2002184beaebc844df00da6c5f8c9342919e48e6d730fe442c55a3f0b6dafed0877515f90b492c8d1321690e71889962548105f33db1cb90d9e08774b7eac1fa233a2cf083ee4d893145050f96a1f357cf7f5de79673a4269e2b2bdd00692e5be27940812c482cb9ab956d0e66c00c1b5f1e3963ef23d5a63c657a93ecb57541a46816b93b7595a3c08ea41"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "ad031c786e85a443bc5fd412d1c1cf89aee26f09938301bfe83204b81bb73d297b254888248b1e53d1379565019944b47a2e6efed0baa2a1e59a5dc26934cb62ec379b84d4a500de5fd84879a1042ae995037b51b7ee48eb92e5ce14ef5b841e19eceed2d70a59a826bc3d5a3d4267c41455ff8c781a60df0997e720a49369ec28b537482581afcbef5249a98ddf7f4e527f82084df85ac957babbfd0b50de99d661d780d5889ae4b7eae4aa74a619c965d4ce5d46e2"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "d376249f2afe2a1ba1783039e37ee7c95c5d8d37a430fd04bc0eeb4e4dc1b3386395ead75ddd35f8cef04d8bc03b53952b6e0ace753f7fb0d2258ccbb01dee6bfc485ca7e7cb9cd568510d9cd030c2cbfa005cf4c4d05b54"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "01ade14c4e7add3ec3cdc64254e9691ef6901e45f03dc069c3154e3b73f94112e8c89fe7ea0744051eba42f805976b388a0015e834ba49a90027048479cfc900ac0578909392345af61f56d0a3ddfe6d4fa2ba618d11c8316e2503d7ba82d4ff6e90be54cf81d385aa3272acbdf5847de636e855204ee6fc1fb2fb4a09"}]}, 0x344}, 0x1, 0x0, 0x0, 0x44040}, 0x2089) mount$bind(&(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000)='./file1/file0\x00', &(0x7f0000001040), 0x802014, 0x0) r4 = syz_open_dev$loop(&(0x7f0000001080), 0x9, 0x602000) ioctl$LOOP_CLR_FD(r4, 0x4c01) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000010c0)={{0xa, 0x4e20, 0x40b7772b, @dev={0xfe, 0x80, '\x00', 0x30}, 0x3}, {0xa, 0x4e22, 0xfffffffe, @mcast1, 0x80000001}, 0x1, {[0x2, 0x4, 0x8, 0x6403, 0x7, 0x5, 0xffff0, 0x2]}}, 0x5c) readv(r1, &(0x7f0000001240)=[{&(0x7f0000001140)=""/54, 0x36}, {&(0x7f0000001180)=""/146, 0x92}], 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001280)={0x8000}) unshare(0x80) r5 = gettid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000001740)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001700)={&(0x7f0000001340)={0x3b4, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3689, 0x1d}}}}, [@NL80211_ATTR_NAN_FUNC={0x12c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}]}, @NL80211_ATTR_NAN_FUNC={0x114, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x82, 0xb, "b70074af25dc2af278c9459ef39b795437baadc05280a872584808633aea10081b78cf542ff0180deb91c1ae862b76790478d90742905c212f80089bbb7db1ba1c4a4da0eaae508978fef72e38c4de953ef745e6837e098ac9a2fa4735fbe617e61f094acefa96bad0efbdeb7ce24fbe86807e250b46114474e1849d243e"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "f5552e4007fa"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "9f0bb97a82a7"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x68, 0xb, "b44b1e54bcf4250796d58f0c62788e8c5b2357f6ea1d0f662945d9627ccfc2de5580f26cd76a5c6c126424ee9166cf577433c982bc8a6c84ce88c5cd9c66ecc7325045eeecaf2c41b478eb5d6a51f47b2c8729f0c0bf7af0fa54bbae414558160e5280f1"}]}, @NL80211_ATTR_NAN_FUNC={0xf0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x21}, @NL80211_NAN_FUNC_SERVICE_INFO={0x9b, 0xb, "08b5036d55243868cc5a906e608ae0fe7d02f63d25b8aa747b12ed8a3b57785cdd2eb4bd4068b8cc1de2de52d340bdc2318221ee5c0d0fb7fece55b5ee768589082ceb6043b991335df8fc21933882d94ed7566bc9209cb88ed33010346046021f4d676376573a334420f878519f53bc2bda716c667b8bb1d87ce2477ae8eae312c6ae30939098bc920a0c04ce7cc1a6bcd6b5ce79be98"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xe6}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x38, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x9}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e8a595cac3ad"}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x40}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x7f4bc1680548aa31}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x4008850}, 0x4008000) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0xb0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x118}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xff}]}}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001980)='./file0\x00', 0x80, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000001900)='\x00', &(0x7f0000001940)='./file1/file0\x00', r7) getpeername$unix(r2, &(0x7f00000019c0)=@abs, &(0x7f0000001a40)=0x6e) sendmsg$unix(r2, &(0x7f00000042c0)={&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001b00)="0c75e297a6eb5e046ef07fa9e6f7db88ae34ff579789847a0bef94f2b2cc91a97afe5f54dde679f7c93a02d8e13babdfeb3a701cfa1ba13093bf755cb0f670e41fb44999342d8c84b85bb576a001f524602eaaadae043b7919b58b13264f3f66570709162966a06bef441ea82b106c85a46c0c147ed0d0a48670d80e484bfa16d7a4e042bc8811939a22", 0x8a}, {&(0x7f0000001bc0)="73b6c074051d2921db5c23b12dcec9c4cc1cb7994d6e7ead5f01bd3110d772b617ace52f56a1283c8e73b3ae864eefe6eeb7f050090f8ad2a246683b1c4613ace1f721a499b3a6e66450617427d6408bdf33c8005ad89e60ff4540517f8da553d379757196c21622c0a9cfa4ce7e66a07dbccbcc11e2490ac795008b042bcf8a2040b7521aac60806add9af8eaad088f4944ec92ba59f987f604d24a7b318e96adebc0fabbb2c9359b83771949faa7b3ff2e1d62dd89079def0b59363e1e37cee54ef65030d22ccb4c3b394bcf0e4f582c8e97ec35ede45ad2a361ed6e", 0xdd}, {&(0x7f0000001cc0)="9fb9096566e2d043b9cc64168ef11434128355566dabfcda3df82a9e566ff7014a23347787f5fc08920fdab87706d17bf5d017ed600d658ee52698ef2be7fb506f8b2a7f200cacd94a881911b52d6b4c9933e1fc0c92ebf1a0d8150cd4863d32420742c1ff5c921c9cacd0f4c5e69414a1bffb110ba8bb2bf1e6e35872340a5512c5520586e49d1326d0907bd46f98824b6c6d2e4d3fc9c6d2c9239c29c3b0ffd384984657814a5e5aacb17b5b469a468ae59130115b7be71e313d2b109ed25ecf3d005e26a77c70ba4cbc45d395e7044d", 0xd1}, {&(0x7f0000001dc0)="a373c310450eddb6a381876971fb7562258b9bd0a106e86e4bf834f70f705a6b33c879172951aa2aca78f5", 0x2b}, {&(0x7f0000001e00)="3dcbec8c846edf4dae518160619463483307c5bac0b6bcb1969e1866d350dff26f8fc78aa6187b6d8cea14b220ee722e42e9c1202a2a9517c7366deda7d2711a3145970dbc69ca5f3f4d7a3f0e4b8fd5e3318937361379b5785e2f5e587bb91ed74e082010bcc2455e86e5e2cf882c58dfe6a141181b2e3046f25655c408cb6134002e35ca9688149711273cf9d671ca5ea0730492fd15e401a0524725af2e319bc3cf767c58398577a9eb19a99fb6c3d4a156e2", 0xb4}, {&(0x7f0000001ec0)="c2e7cec16ff27b3dab892be4b841df3880a56502512ab191983d5a37c5087bb5fb9d3bd278e8bb7dc2082ceeba9684b914b2ab340a2105253dc887446f966366a191ed991a835437c6c375189448e3f5c44994d7d3073f8b2146f724e5147b72b1982a820ff60e802443eeba8ef05c3934cadf99bf1ad27ffd544c19ce279623d5a4ca084b81063c697e73bbeeec7766cf629645bd46d361080666327c688e0c2b4caefc42", 0xa5}, {&(0x7f0000001f80)="993b4914", 0x4}], 0x7, &(0x7f0000004240)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}], 0x70, 0x40801}, 0x4000890) 2m33.414830076s ago: executing program 2 (id=6947): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x3, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2m33.413914606s ago: executing program 2 (id=6948): ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x63fd7951, 0x3]) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x2, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000000c0)) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000100)=[@cpuid={0x2, 0x18, {0x9, 0x1}}, @uexit={0x0, 0x18, 0x9f72}, @uexit={0x0, 0x18, 0xce8}, @code={0x1, 0x61, {"0f20e035020000000f22e03e0f35c401c115dd48b800000100000000000f23c00f21f835020004000f23f865d9f7400f0766ba4200edf3420f0967652e8efeb9e1090000b850000000ba000000000f30"}}, @code={0x1, 0x69, {"b9800000c00f3235001000000f304f0fc72cf467f2400fd05bd00f07410f41948302000000c4e271ab2166baf80cb86a57f88bef66bafc0c66b8bcdc66ef670f013bc744240031000000c7442402f3000000ff1c24450f32"}}, @code={0x1, 0x3c, {"0f78d40f01cb8f299001e93ef3406f0f7983090000000f1ad5c481fa16033e0f0172080fc73666ba4100ed"}}, @cpuid={0x2, 0x18, {0x400, 0x1}}], 0x166}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000340)=r3, 0x12) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000380)=0xfffffffc, 0x4) r5 = syz_open_dev$loop(&(0x7f00000003c0), 0x3, 0x42) ioctl$BLKCRYPTOGENERATEKEY(r5, 0xc030128a, &(0x7f0000000480)={&(0x7f0000000400)=""/124, 0x7c}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e22, 0x82f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x960}, {0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1, {[0x7fffffff, 0xfc, 0x6, 0x6, 0x2, 0x0, 0x9e8, 0x2]}}, 0x5c) ioctl$BLKDISCARDZEROES(r5, 0x127c, &(0x7f0000000540)) r6 = socket$packet(0x11, 0x3, 0x300) fcntl$setown(r4, 0x8, r3) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) close_range(r1, r7, 0x0) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RRENAMEAT(r8, &(0x7f0000000600)={0x7, 0x4b, 0x2}, 0x7) pselect6(0x40, &(0x7f0000000640)={0x7fff, 0x5, 0x10000, 0x7, 0x9, 0x8a, 0x2, 0x9}, &(0x7f0000000680)={0x6, 0x1, 0x7, 0x5, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xd617}, &(0x7f00000006c0)={0x2, 0xe, 0x1, 0x134, 0xfee8, 0xbd7b, 0x64c0, 0x8000000000000000}, &(0x7f0000000700)={0x77359400}, &(0x7f0000000780)={&(0x7f0000000740)={[0x28000000]}, 0x8}) utimensat(r6, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={{0x77359400}, {0x77359400}}, 0x0) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000840), &(0x7f0000000880)={0x0, 0xfb, 0x15, 0x4, 0x41, "2d10e21c375f055e4913b2d4b82d16d0"}, 0x15, 0x1) fcntl$lock(r6, 0x25, &(0x7f00000008c0)={0x1, 0x1, 0x0, 0xd, r3}) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) cachestat(r9, &(0x7f0000000940)={0x2, 0x8}, &(0x7f0000000980), 0x0) r10 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x4, 0x10, r2, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r10, 0x20, &(0x7f00000009c0)="9fef52336797cfb7064bac462df3973aa146aa8a60b2e286", 0x0, 0x18) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000a00)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x4550, 0x200, 0x3955c0000000, 0xfffffffffffffffd, 0xc33, 0xebc}, {0x4, 0x5, 0xcbe9, 0x6, 0x9, 0x8}], ['\x00', '\x00', '\x00']}) 2m33.408561816s ago: executing program 2 (id=6949): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) brk(0x5d555ede6000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m19.351497676s ago: executing program 37 (id=6922): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000583000/0x2000)=nil, 0x2000, 0x7) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x101200) ioctl$EVIOCGMASK(r3, 0x80104592, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000180)='./file0/../file0\x00', 0x102) umount2(&(0x7f00000001c0)='./file0\x00', 0xa) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRESOCT=r4, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="bbac275a5d68273e00cb4c29d077357a814f8b66b2edd121216b3507015b33999c47c8e35401aba370b72d5ff7427aede90841f0b7d36b5d35d7230bca910fb78cdc307d4499ecc5b408e6bf93f8405e8a34aad70d"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) vmsplice(r6, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYRESDEC=r7]) unshare(0x44040200) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r8, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) 2m14.362980098s ago: executing program 38 (id=6942): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b000100000000090400000101"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r1 = socket(0x1e, 0x4, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x9, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e240"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x8}, @dmm={0x7, 0x24, 0x14, 0xf43, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xef, 0xff, 0x10}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x9c, 0x7, 0x8e, 0x20, 0x51}, 0x1b, &(0x7f0000000280)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x80, 0x7}, @wireless={0xb, 0x10, 0x1, 0xe, 0x8, 0x6, 0xf, 0x7}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}]}) (async) syz_usb_connect$cdc_ncm(0x0, 0x93, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x9, 0x10, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e240"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x3}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x8}, @dmm={0x7, 0x24, 0x14, 0xf43, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xef, 0xff, 0x10}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x9c, 0x7, 0x8e, 0x20, 0x51}, 0x1b, &(0x7f0000000280)={0x5, 0xf, 0x1b, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x80, 0x7}, @wireless={0xb, 0x10, 0x1, 0xe, 0x8, 0x6, 0xf, 0x7}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x7cc, 0x4, 0x386, 0x3}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="763d91dff23d5de04955531d9a87e65ce6bf0f528453e3a7327d947cfc48db3f9fa3d019da1d1d3901086a2af9dd65b3b2935b9a01c4c589f887fd3e44", 0x3d}], 0x1}}], 0x1, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') rename(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1d, &(0x7f0000000040)={@mcast2}, 0x14) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000100)) (async) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000100)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m14.296273529s ago: executing program 39 (id=6941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x959028, &(0x7f00000001c0)={[{}]}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000400), 0xfffffffffffffff9, 0x101000) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) keyctl$chown(0x4, r0, r3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4099, 0x1003, 0xd33) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x5) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RLERRORu(r4, &(0x7f0000000140)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x200}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x959028, &(0x7f00000001c0)={[{}]}) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) syz_open_dev$loop(&(0x7f0000000400), 0xfffffffffffffff9, 0x101000) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) (async) keyctl$chown(0x4, r0, r3, 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000000440)=""/4099, 0x1003, 0xd33) (async) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x5) (async) pipe2$9p(&(0x7f0000000100), 0x80800) (async) write$P9_RLERRORu(r4, &(0x7f0000000140)={0xd, 0x7, 0x2, {{}, 0x4}}, 0xd) (async) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x200}) (async) 2m14.27254948s ago: executing program 40 (id=6949): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) mlockall(0x7) brk(0x5d555ede6000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r2, 0x40049409, r1) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m8.235633598s ago: executing program 9 (id=6987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000100)="ff4b46831e2182e93e38556472b116c643d0db66a9dd670e6409fd7e25e3f25614d15294317551fe6ab728d718e04279b6cfc0418d907bc7398e63a2cb1af1681080e5963d231fc9dfa500441cfdb94888d2d7eed7af8a2c6a29780492ae3b8523d06fde43d390930021c31a3bc0f15d74441824302f4d76259f0d87c0cc02cd77ddbc60681878e7fc1c0f61f4608ab937c3659b23a379018daf285455efc72dbe8c10d5febac01d50e2a3", &(0x7f00000002c0)="9508e49c062cf6042afd78b64ef7d8a52f585e9d5282b70f07a71b7414dfcce7f6af6da9228b5523d3d592d26d2e15180f2c49e30aab22af17d802a213ad1f16a298d8bc4526660de1a59764a494e399caa81c0161e045173abcf13b6d48da4365fac5683279e110c10ef4af497cb711686d94801e4c08967a35be85eefb43dab5eef958fdee2f1111da4ace51c5f1dcb0"}}, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x488600, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x4, 0x0, @tid=r1}, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) gettid() setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.964147063s ago: executing program 9 (id=6995): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@access_any}, {@afid={'afid', 0x3d, 0x8}}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r1, 0x0, 0x80000000) 2m6.396540159s ago: executing program 9 (id=6996): ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x1, 0x800}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x12b941, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x1a, 0x15, 0x7, 0x17, 0x6, 0x7e4, 0x4, 0x16a, 0x1}}) r1 = dup3(r0, r0, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f00000000c0)={0xeb, 0x0, 0x4}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f0000000140)=0x6, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x64}) preadv(r0, &(0x7f00000032c0)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/159, 0x9f}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x5, 0x6, 0x2) r4 = fsmount(r1, 0x0, 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000003340)={0xc9, 0x0, 0xc}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f00000033c0)=""/4096, &(0x7f00000043c0)=0x1000) fchmod(r2, 0x20) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004400), 0x2, 0x0) write$FUSE_GETXATTR(r6, &(0x7f0000004440)={0x18, 0x0, 0x0, {0xff}}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r4, &(0x7f00000064c0)={0x18, 0xffffffffffffffda, r7, {0xffffffff}}, 0x18) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006500), 0x2, 0x0) write$FUSE_GETXATTR(r9, &(0x7f0000006540)={0x18, 0x0, r7, {0x9}}, 0x18) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000006580)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000006600)={{r9}, "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"}) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x31) ioctl$KVM_CAP_PTP_KVM(r10, 0x4068aea3, &(0x7f0000007600)) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000007680)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x0, '\x00'}}, 0x2a) r11 = openat$cgroup(r1, &(0x7f0000007740)='syz1\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f00000076c0)='./file0\x00', &(0x7f0000007700), 0x301008, &(0x7f0000007780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/rtc0\x00'}}, {@version_L}, {@directio}, {@cache_mmap}, {@fscache}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$)$&'}}, {@subj_user={'subj_user', 0x3d, '\\'}}, {@fowner_gt={'fowner>', r8}}]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 2m6.381774169s ago: executing program 9 (id=6997): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r3) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x68, 0xe0, 0x5, 0x2f, 0x0, @remote, @private=0xa0100fd}}}}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x22) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="c18000000000f966baa000ec0f01cf0f01d1c4e2f92aa300a00000b9b20200000f320fc75c1f062e0f019b020000008fc978d7e66464642e0fc73d00000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80b00, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80b00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000180)={0xa, 0x0, &(0x7f0000000080)=[@exit_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x1}], 0x11, 0x0, &(0x7f00000000c0)="c4ce7e00000100"/17}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x4) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @pic={0x9, 0x94, 0x2, 0x1, 0x6, 0x2, 0x1, 0xd, 0x8, 0x7f, 0x3, 0x3, 0x6, 0x5, 0x7f, 0x4}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r11, 0x8004ae98, &(0x7f0000000080)) sendfile(r1, r1, 0x0, 0x7ffff000) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 2m6.204093552s ago: executing program 9 (id=6998): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffe, 0x100000001, 0xc00, 0x2, 0x0, 0x0, 0xcaa, 0xb7, 0x10001, 0x4bb4, 0xfffffffffffffffb, 0x100000000, 0x6c69, 0x1, 0x48d2], 0x4000, 0x1}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000000c0)={[0x46, 0x6, 0x3b, 0xffff, 0x3, 0xfffffffffffffffa, 0x1, 0x9b65, 0x60, 0x10000, 0x65c, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x3], 0x5000, 0x1c0200}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000180)=0x15, 0x4) fcntl$addseals(r1, 0x409, 0x4) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f00000001c0)="bccd2fc5436cb2eb823c2547edb66dcc9ddfe8d5ea441c8e768edf18eb5442a0b4efcde0a87576b1554e75dba702b22c41775fd869ded16c1bfb27bcc3d359eb880049f2ad2b7b7ca069e80a9e3839a0a1e0905e8660d0b29339531cbe7e416208f470508f17821c1239717d7f9f5e30309efddc53d6709a740033ffb70af1f9d5c9593bac7f18ad059e078ba3cef79204b852fba33c2df7ea9f3cc4fb1a682b6ef3ddb736319e8934bdcb91f7", 0xad) r4 = epoll_create(0x51f) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)={0x3f8, 0x15, 0x10, 0x70bd2c, 0x25dfdbff, "", [@typed={0x73, 0x11e, 0x0, 0x0, @binary="5c71d6a8be1ada3edd97a557a7404b8ea94078ead0f56216b39442459047d60c0520a9fad031a03077ba7ebc0c680c41f8c6e9b56f38130079e4b50b97bb93e966de766d27165678b52bd1e5acb2fc32ead3e2ed139c0c911f65a233a5e910426b807d6bf871090f09d8e37490b045"}, @nested={0x173, 0x134, 0x0, 0x1, [@generic="3abdf09924dfe8e0485beff0ec00ea2d8ff67a444dbcfaa86c3d5c36869ee1a5a45970a5f173d8b67a7a8ca4430fb718301b20df46cfd707b97098907e55f172564bd3a163f79d0e57fee575aa34b63a0be05617fc4c3399c34b2ded389329a165825ea66913102ee85b597e59f3b328812fc91176b22d6d00c72d399606420e3d79314892ef75e27920fe08136c5998da0622d3fedfb54709476ec49b6af4931612799b32c17b7b13be26a398d15dc3e9cb9c0e2f3916cdcc994936dec907ff8d3b4fbeda7ce6740f5873280049943eb1c399d0238350f6eb437a794be64314e16fb39a0cd7d44bad062ed7", @generic="b4c7781ff1069b6dda02cdc904f0869f42c07589a7264d3298e0fc2e74d93a4b41d410a734b6b25576c0604743328cb4dafb6f9ff0baff11491e47e45fe8b2e058057dc24f765d8ed4de373d5ffe2f98b86122c84c5ac36f41efc40ed1ca1ff7d203b4d23372168bd66174bc64b60d3daaab5b6f6d9a185f6c0a41", @typed={0x8, 0xac, 0x0, 0x0, @fd=r4}]}, @nested={0x1f5, 0xd, 0x0, 0x1, [@generic="6e768ad9151e3d1c19703fda4d75913d5472881472129a3f8e6eb50e4a", @generic="564ce7533c6f42642f189cc4bef9b8c5ac7f1b28b734fbe1fdc073093442256ab3cebe372f4068454b09bbfffc61201f0ba7cc416bd12921121ea28d845f6f18f312f6a8caaec4b9c21adf64c28bd37e3f9b006b9e7a32448383ac92074e016e4f90dcbc6babe175122ae5d107d4be7686ab23d96ccd38167215183966d62d5a73d3a812ad55af6749011b58c96947e842cde25600dded41164272c048fd9c962afcb67e2582ad307c7e2b0b328ff34ef7135af6d3325164a964a03acca026a0bd2994c1cba96777516b2c0e68210fe7c7a8f0ba028aee8c5673276bf998a19c2218022a713d0c1ce951239b", @typed={0xb, 0x117, 0x0, 0x0, @str='},:,/.\x00'}, @generic="4b6355695c153b97c9c1bd23ccc446eec2ca3b5fad88297f61357804038247ae746dfda243a0b0503f7058b86353da0284f31eeb5c134ab33feebc7d1236a496d90b4ab58d72bc89d467519477a34d8e27e2ad78b1ce3838c368224d8aab1f429ec049cc7651cbc31e0a765cbe2382ca6e8f9909fc1ac5af47b16158582c1bd689c8674aa8f4c0b38387011c7cd01f428839efde3bbc58cda7f2319ce1b480be8644bd782e4e5f22b0220ab7ca6ce042372804aa69d0b7347a949735197a353c40175bbc3adddf138dc66004", @nested={0x4, 0xd6}, @nested={0x4, 0xb}, @nested={0x4, 0x119}, @nested={0x4, 0x49}]}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x3f8}, {&(0x7f0000000680)={0x160, 0x21, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@generic="58bfed6c59e19893b0c86b3fd866a7ffcf25e5f2ce5c718b5c2461832f583208cae1feed0480ed59369c0653d461c8a16802341ac1299657bfee45ad518e0804a69133086a14315cba85a3ea7936664b67ebeed05ad004e6dc8c8bef7ddb5df273a2846d45a1e0813f5bf3c0c7d4ef4ad9368b122a75dd2fe90382", @generic="9a3499fa4097c34cef88d1419fb8bdd32883d59def4aecaaaf6f80516397b3ea04cfe8328f7ad6c77c5c15ee5ccd262c407b36a1867ade90fe4654dd69b28be9ae63adc6c767c85d12157b859265117ca78dc41c4b0a79cc090f58714be25b63d713ccbb9390db7900f04d81059c6a296b14f4f765b002a0597ce6e1e7a0ec23f78888b70ad2d4ae893d7145185b4d48f720ac6cc3a033a7071279de941379790bc9d78d656d6aeff4c8ff2970c4d899b5474462abbfab274db29f245fd08e330f51cae7646992c52c189e6e62b3aaf3d1a8b4f6"]}, 0x160}], 0x2, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r7}}}], 0x40, 0x20000000}, 0x4) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000ac0)) syz_clone(0x0, &(0x7f0000000b40)="0567fcd4044879ac7b72b3c71363ad700317fcc2cf76e9717f277ff5bdbcba69bbe57844f897e0a1afe6834495b2623d179eb4f3df495af1dfc58504326565fa8f5f2fad2ebfb33c88ac39490241d498d1ab3ba3bf02e8b9ddf87fdc885f81a8e439e11b523c2b080833d837bc7cce56cb791df5f01772414bd454beb4ccf03f328b22bf670dd8f1bc1496f8a3ee6ac5ec4a894f7fd2c1cf33d52bfb1f3a4597326f2968a2632985fab6284da1fde1fcb163629f7b0cf939fe633f5f", 0xbc, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="3a33b2adeb7c6cad334e20d420573736e1eec0b62cba1ecbcfc07794d9f3d07ea7f17c3365845e3f7bc698ae872864b811372d37563f72b02cdf68154658075cf1069b140afbb85c7483a870193f6aac4f4132601673ef89ab5bb649403a820a37b1f7036739356107f9c094") mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000d00)={0xffffffffffffffff, 0x800, 0x4, 0xfffffffffffffffe}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x39) recvfrom$packet(r8, &(0x7f0000000d40)=""/102, 0x66, 0x22, &(0x7f0000000dc0)={0x11, 0x4, r5, 0x1, 0x5}, 0x14) close(r1) setsockopt$inet_group_source_req(r8, 0x0, 0x2b, &(0x7f0000000e00)={0x7, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x40) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f0000000f40)={0x9f, 0x0, 0x1}) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f0000000fc0)="867fef6ad2542c544cebef13fa87588bb7ddcdf6380e104e7558417513956fc2c8405dd4873ffcd6f0c98d2da9bdafd42b64e03a77239d99d61465bbb933ebf6bc91fa37e09a") r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x53, &(0x7f0000001040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000001080)=0x28) ioctl$KVM_CAP_HALT_POLL(r9, 0x4068aea3, &(0x7f00000010c0)={0xb6, 0x0, 0x1}) 2m6.144544792s ago: executing program 9 (id=6999): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x440, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x42c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x360, 0x3, 0x0, 0x1, [{0x2e0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x2c6, 0x2, '\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-$&}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/ashmem\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "388bb3aad263c96b4f3af80a956f3cab057f0c8a47f7b05b18b75ec7b37d9a9b050afb872a12f25533969a85a2c849aad8471f2e00a2b5613103c8c32567197cfab4a4671efbe4f1314a4ab19cdcfe6996d1acc1b75c8add538448698b6f2451fe4f0398dff977eb78fc252767fba07a31e04a936e983847e460a61509cbfe44edb959c7de4ed8e587175c98d1b771d33e87d9da02816c3887b6292e5769ac5f197e6144c575a0cd97c981bf7a8e026da5f08a4fae10e87db0ceb874b2"}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x10040800}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPKT(r5, 0x80045438, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m51.141973249s ago: executing program 41 (id=6999): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)={0x440, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x42c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x360, 0x3, 0x0, 0x1, [{0x2e0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x2c6, 0x2, '\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-$&}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/ashmem\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda}]}]}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc1, 0x4, "388bb3aad263c96b4f3af80a956f3cab057f0c8a47f7b05b18b75ec7b37d9a9b050afb872a12f25533969a85a2c849aad8471f2e00a2b5613103c8c32567197cfab4a4671efbe4f1314a4ab19cdcfe6996d1acc1b75c8add538448698b6f2451fe4f0398dff977eb78fc252767fba07a31e04a936e983847e460a61509cbfe44edb959c7de4ed8e587175c98d1b771d33e87d9da02816c3887b6292e5769ac5f197e6144c575a0cd97c981bf7a8e026da5f08a4fae10e87db0ceb874b2"}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x10040800}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x1ff) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPKT(r5, 0x80045438, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m30.744622683s ago: executing program 1 (id=7690): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r2, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3ff03e37d581270bad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "3209cc26f7061a74df34400700080000234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa58dc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x400000000007]}}) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 1m30.692558084s ago: executing program 1 (id=7691): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readahead(r0, 0x8001, 0x81) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x60}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000400)) (async) r5 = socket(0x1e, 0x2, 0x9) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f40100001500000827bd7000ffdbdf2520010000000000000000000000000001200100000000000000000000000000024e2104014e2100000200808000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) 1m30.692050584s ago: executing program 1 (id=7692): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x3, {[0xffff6bbc, 0x81, 0x400, 0x0, 0x1b, 0x6, 0x80000001, 0x4]}}, 0x5c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x80000000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = syz_clone3(&(0x7f00000003c0)={0x48008100, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0x1a}, &(0x7f0000000280)=""/126, 0x7e, &(0x7f0000000300)=""/121, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r0}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r8, 0x7, r2, &(0x7f00000004c0)={r2, r3, 0x3}) r9 = dup(r3) sendfile(r9, r3, 0x0, 0xfd8) getsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000500)={@ipv4={""/10, ""/2, @remote}}, &(0x7f0000000540)=0x14) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000005c0)={0x2, &(0x7f0000000580)=[{0x9, 0x2, 0x6, 0x3}, {0x9, 0x55, 0x10, 0x3ff}]}, 0x10) r10 = getpgrp(r8) syz_clone3(&(0x7f0000001800)={0x201281100, &(0x7f0000000600)=0xffffffffffffffff, &(0x7f0000000640), &(0x7f0000000680), {0xe}, &(0x7f00000006c0)=""/4096, 0x1000, &(0x7f00000016c0)=""/219, &(0x7f00000017c0)=[r7, r10, r4, r7, r6, r6], 0x6, {r1}}, 0x58) close(r5) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) openat$ashmem(0xffffffffffffff9c, &(0x7f0000001880), 0x40800, 0x0) r12 = syz_clone(0x800000, &(0x7f00000018c0)="f2604ab183b1d3c12b234b5b789b442a9104b32eb1325839ac78e1", 0x1b, &(0x7f0000001900), &(0x7f0000001940), &(0x7f0000001980)="0add7366b251a3724b38bac222adc3b22b2eb38760f99b29b4ecfaba6f7c7c0adcfa385dee673e851fb98c6e07c35db260d36b7c8ecb51855ef5513870f3df30fb2cea3964a70f029632a729760b5e2898d53180143143761615ea7793a3dfe1faef0d3b52138867917b2edfcb92f242285e41e5ee4f62029e9ba36aab79c2a3db8bb02a796eac7fe3f2aec32d871469893e505bd51640f8823da91b891a90e1e5612d037faf8e7c430048a207620ac971d3c18a683ec900a3beb8ae8134d4c70fab276df60b2c5980070aa0b211007f1e76d38cf5af848332628b4b6e5e411c34b74213121ff4165346d39f180ad013d415e65a6ca5380fd581da4ec9bfcd929377ce890c26dc5994b0a4b3d056fb6c72c5ff17ebf793d95de6e84f1acf89f3bb1989b63d77cc193e344056919c87328b0f8ac8b63c6371e4e60933c03d0c5fa2171c87aacc21b797ed57ef1230b09d025c623bd0258fc2c1896fd4cfafff3f3ca1042aa41113ea9034154f84acb5db4de7c2f7c0447544e7a0baf9ead08b66f81c13fab115881f8a88b228f1a8dd909fc81338a887fbacea3fe8da8e21a9126074b39611b7b8fc97bcd07c38cc29b16e95097dc89ae6546e0ce39405664f36c5fa43a0831f116cedd22fbddc96b1dba3c88ebc2f36dbab378afde57599df759a05be899e19f7f35cf6dc0f9ca50bfad84d8ceed9c9618ada06e42605a5ce1d7315966130967f3b9dcdef4de585caa0658569a962f9462e1a6f16149de004fdc5ac3dd74b6f4711b18f4aee49a3614e0cb355d87a730263989a25a2501996c0f9a702ea1367bf1444a5112c7e1bb6a7a4cda8213ad97d530fd099d0d05ec2ba7a75c3158c7397dbfb7c4b918292622a6eef2965243f3ac8d78aee84cb01b692d68645b05effc994fe730ec1bc4782eb3a6399a1c5029be714dcc0231cd1d9d9bd8a0178dfb88a91df92695ee5ec4941e791f4c8c8552ecf118133631f17ad24a17bd05c91500177cf9debaf27f7a9789407df31f0e521af07903cda379e3a8d6653f3072adcb6bf9de64e2b6c890369b4ea6093a0de127a31051265292d87f15c06510b9e6846a48b23a9ec88106f40f134a0ffa0f99723f9557c7182b94dda4c8df35fb58e52c7352510c9269d60237399393387cff27a743cdbb94d8ac096064ec768f86f8a55a96b3a3dac202d6ad5e0026f904c7795961ef3dbec4cad491f7356b54716321204b4846926cccb34807a8cae0c1f4df5c1e4cb66610b861e44f7a667dcf15879fd17e07f20533342a1604ffbedc170ad7a07a7cfffc9a7250356eb446ee6b932d46bcbd253cc6edb361fc6d29d6e7b4b1a4e67380ee52c86e3ecbc98d9db40be0327d1b810d4f3fa0c647391a00695e8188a96d67fb25da194a80191477804ac37b9b82d83142ed9567a8b9c8f2688a0fe86c0dd4c159b63dd6781724b59daa93601824a3153def68665841aa684bcb5b16fb7ae53d746343b34d4231eb16684f5291358083395f0a2da49239690398a52330b85630613fb283123d74d7ec24f70504b785e588598e4923da03259f9645b8e913fe37b3ea0806c4132050f871463856cd961b7ec12cf881cb8ae8e454d821bc8214a2ac990e0be52d71d5431fe850cd3140ac25993d199cf21dade54f11422b93099b7142de9a44b6262add6b5538c3426eab6714bf2ac78251dec3ac9036e3b9b311587e950f9345246354a76c766dfe9cb700f9a760d51e0d714a41748f1ab9db9c667c9805115d2906a9a935c274c531d029e98052e49c693e2601889f7dcd5fe5deeeb6458f26b551ab7683367e5a6ca965783f5d23049c87928ec2b6965a162de78807157c2156aa7fc8c529d1edea5fd50db3b1a66c40940606d1431044af742c1fb4396e274ff4c4fd770a05e780f6670c7e689c5c3b55ff9f35583b674a5e54ae19f359edb0878fe8587057b195052bc30d5216be12c9d33816adff7ee93ae91399fc3e8d14701557b7393e5efbeaa4e3c291af2d9a610cfa53b60c5209fcb595fe19802c8906434fd5c4e606651c622e90deb13dcafda426cd447682072970090be4961c03c50fe3f7d87d76267fc490763dca84072942b0b5b93cd40f4518e54921d742dd1308ea12e2971ccf1ed08092acf4d02940118159b03f64b1dc427a1eff073b7ad4d15348454ca30a16d38240b2a2a90d9d165d2b69a9ff38bf61d3b6fb26a0a2508372b13fc22757655d985e4e5e8621bff8f1517e9739e91039ee5833dabad3d0ded9727cd5f885f261c1775ce32719a88ed4d5e307daa8eabca4e2f67fb101d90082ff5d7cde7c884dbd047234f4460c42eb0f43fb3cff19686f765a9448a92922129ab7d38ff22289e3413e9e67e62818ba7ae7e1849f6d1a6766e4df13f5869603ff686d9247825643df11f3834228ac98f8cee8e44e19067a3564e1e19eb37eea5f24021c9d75faad019db02104e829e805b46a9228d318d2ac6b5b4c695a393b0172ea8d7034de460ee623e4e0c2621a2c4e85a0a84051af2ad7532b0af6ab66ca2cf29e1028e101a4e671690a3e81619a2c0f0fb462856891e3f7d71c623482d3895846a649b919448c092411fc91f801cbf9adb3bdd1e5ad6f9b878cdb693ec3c633c91a0309ba413cd033f909d26768f04a25de54d12806f6839888b52f020b543d74841e52ebf2060b0c48a457d33995a782fc640044d270939baeb5c51804d121e58cc4172c211cb6e4ecbf300365bb0c82f41e324e2caf55de5cbb259fc480cf628af67988cff3410a79f515db5c2acfb7e0ac207037290fb40ad200f51940807de969dc03cc4c2304ab61fb85885e92fb47869984a9401ad4a11a4fd1113403667ccdb6db745b88f5bd66449ce11dd4e48a25cadc6f8f02acfb340247ef0254facd1a6ef28dec052e18af2d78bb30af09c79021fce64af2753e1a22794a17a2258f89030b966c680ef05f12fa3c005d678bcf3ef24b1bcee6472ad6b4ea98e8c8bc944e6482a24fc4c7ae5cc2eef33af5956c7d28a958684b18da5d2aacb593544ca1e721dab99f91359f124a6bb5437623e5e219e728b6ad5ccc1719030bbcfef85a0c5e9330f6c54ba7b72686ac0b1b05c6b26f6ffbd79ab5cb88b2703ba3827555dfa9ab1fd67f86eb800b72dc6b784d379b6c8f3fb452e38a880528c9094c303e6934e26c2d45b05dbd0039048d7f9751d9425e6084cc3dcd74864d5bde951dd179dab337a800fcb9d4bac902c8a2d397351dc0437f8e7c436a43f54ea01c76d06999fe631254c597cd0b06c7e69313c39494577fcd93d197897caccd4d3c8fb23d338a966c076d67f2283db4a9caf8986bbf66f1a8c169398a247d169dddac6a053de86f00bfb8a9450303704981090e33794be5cd4acb730516efd1914b1e866e220f2ac172899a4be746bbb557b6d21a7915d280ac037a11f5d3c40bf9bfdd0f2695f04cd8a9fec418e50ca970bcca3fa9ce3eb88390b4d67aecca65151e0f7103ac303fd0949822f1a2ca6181e7568de6903eb85f34a5ed9b5fb040ef96a0239d728a4bfcf73b5dc19ac05c05b030834ba585f7dc0b8575c1e16aea1a43ae7dfa6f1545717b6dc0da3149eec2a3401f968a091604bc2249a93b986553994d2ff501015df973821ec67ec4f680c8a740a0c2fe172d26d68cd65b9745dffcefc750e08a7468f5dd2d11cb4fb894c31936e673a56b0d11ad49136c411b2698bf73e00affe75637add66b3251fb17f3674674cceb1bfbe3bae12405686b06ab77f0c1554103e5f9e8fbc0578edb58eb4073446d01a00f8cac1385fef8d134e0c9ddb0e57de1810b16744e06213b87b8eedf4a4264d693f380b3beb1cdc556050b3ec24c0df37021ed77b57e27b00a819b282a5c048b58aae1b2dfa7461eae33ce8858903fcffdfe46f04950a32664d578ca0ab62927a8b90e5460cd57bf445fbc9f167cac5b4373b2ac0c6dec75efd0f61dddf646a00b3d04204105e4dc542882f9caa65088ace04c3dcc859710b28b34a9af34c55431740b97378f780126cf21dc330cf033d78ae3e6c5ead906dd21d63225c16546b2366a536a6da9d4c6763cf3fa2e2ba667c6f668021634e3eebdcdcd34338a7e53a9a1f1cbb9d27e71e86d0134d7df4fd183b0c5f7fbfbfb7eca301c583122e4e57d7365a88da4cb5b1b1873fdeac9090d678ed4413aa8c3d9cd4c7944a28e4f4aba853ae164940ed7f1ce2cb7b943249f4d4883b72f0b5ece6448747aa81958bef3370467971f72de80efbd37451d8704e2e6d8f98b5cadc5804e479e3b20ebc368104cc41d5c9ce641d4af5ffb02f1d1978d27396d76c87c1e9f666d55252fec084a3d98c6d30193ff51f9ba0e362734935005c30b7766b3baa66999f95ebfbd52ddd79d7cc686a762aed22c2970b25b7cd1cd3207eb8db167426d81c904cc3f5cf0a5c820d4f34a8b9fd0a13b06e6c21ff74494b45c7c881695c37e034420629a109fa3aa8b887d3bedc2de358173f1e5b8686090a0633719390dd422ff0c66b81097118f31cbf86e9190fcd2a59beab29a8530e836499e74420ee7a345d62aaaa0a2408255cf6c89312c843489e476f880f06d436fac024f3832e9a2c53f184a3e6c892f9a01fa466509d9cbbc0f52a7eef75bf662685e1ef4341a38e52d13b1067cd7f26c918e8f5dff2d0c1ca1f6e9ec5e42e548e445d5112ee1c4d1a6f5525b3be90722dccd775d51b27b48a541d98fffbbb086dd832f277c55ce898ed226463fbd191a259a72330f09d9b94cae0443272830a33b5c202cb9984551297b59c1328a99c73fed7e0668ea3e14583ff2090d13a4a6c4c440996dc6f7db0213d640485a7980a0950b105079ce8be110bec7dd154abb4e03b1e58cf79399c2e7fd8cffe7e891d72258f57c1ac466c6875a9ed671ea960eedcea0b752622957c2451604f2dacd0cbfcb684c2d1359bdad2112b2c87566347d2a5665500eb2ed8e18ea5caa4fb1d1946f407d1ac8e2a6c2c9003668851b18dc3a52cd3afca0918cc60d878500b1cd837692f21ee341e284928547b770b6365ecb089291ab4b675c7c24ddc2d6e420d613f1c8e834e960f43dd6125ae455f13105fbd809cbc407a888ede796cb33556e72dc5eb173459e61c8ff4fbb19b6dfa5d8b9d13a2ab58cb4be41073474dd898d30cf8cb4ab3722b0f8810a900152334e7ce463ce0f5df0508a3f91d3e6b63ab4164a537bfd2f1fa563ec0343c1d0346b4b74aa49d88e4933fe865559ebc152a0b29401b67855e53fb9cacef7d366534e74c677352f90a61387f0570756dde09a8d9f51e26948fb77c999bab94f474523559ed64f6133bc47cdb0b65d53fde3605afd24aae172b4d346715aed4aa2e8fadd7d24a009c5595ee36021b59a5113877dcb4f9fd0988b54275b3e7fbb4a4031c5758a9554c97c9d2544d5da0d3012bf9ff78cd72b8fc26fed6c92112282e6701e46db6bbd7401bb229a6f31f4f65037a61fc593b5cb16af877049ddf933816462a6f697a690595f6835c73227ab356ef3d7d6dd56dcac76a11c83ec8d59235e9e5fb14186522c850c247a11c2de2fbaabce96df16b4afd9d089fb525ac44959eb829012058bf135fba3992c5df77ab69e5a7e7403253c4d7715be95fd271d72dd7c2c471791c14f00ec4558cf0343d144dda0a54977c0a82c95140bae1ba22133eb6649cd7b5cc1b801e42449ffec4033a618a4cb52547b0f9ad5f1189201a545e7e4c844a46aa2603669338f21c541e04987e906c05ca3fdb9e21c5ba93ee228251da1c") sched_setaffinity(r12, 0x8, &(0x7f0000002980)=0x3) r13 = pidfd_getfd(r11, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r13, &(0x7f00000029c0)={[{0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'net'}, {0x2b, 'perf_event'}, {0x2b, 'cpuacct'}, {0x2b, 'freezer'}]}, 0x31) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x8010, r3, 0x18cbb000) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000002a00), 0x8000, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a80), r9) sendmsg$IPVS_CMD_NEW_DEST(r14, &(0x7f0000002bc0)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x9201}, 0xc, &(0x7f0000002b80)={&(0x7f0000002ac0)={0x88, r15, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) 1m30.691177124s ago: executing program 1 (id=7693): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {0x0, 0x0, 0x0, 0x101}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4a, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x242b], [0x0, 0x1, 0x74e2, 0x0, 0x6, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000000)=r3) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x4) 1m30.686429354s ago: executing program 1 (id=7694): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38b, 0x3}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000000100)={[{@name}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x3a, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d1"}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x18}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000004c0)={0x40, 0x9, 0x1c, "dffd8d6fc0f3aef3bd8f6dbc6a8eaf8ae275dacab89fd429828943dd"}, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x200, 0x40}}, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8f}, &(0x7f0000000980)={0x40, 0xb, 0x2, "3ea0"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x3752}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x1a, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x11) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) 1m30.581133286s ago: executing program 1 (id=7695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, &(0x7f0000000100)=""/117, 0x75) getdents64(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, 0x0) lseek(r1, 0x10001, 0x0) 1m30.554613946s ago: executing program 42 (id=7695): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r0, &(0x7f0000000100)=""/117, 0x75) getdents64(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, 0x0) lseek(r1, 0x10001, 0x0) 1m4.216662838s ago: executing program 4 (id=8230): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = getpgrp(0x0) r2 = getpgid(0xffffffffffffffff) setpgid(r1, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000000000000070001c0"]) 1m4.216209018s ago: executing program 4 (id=8231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r6, 0x1, 0x48, &(0x7f0000000600)=0xdfa, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x54, 0x18, 0x0, &(0x7f0000000000)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m4.214210378s ago: executing program 4 (id=8232): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0xa000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}]}, 0x28}}, 0x8000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000005c0)={&(0x7f0000000300), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r4, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x200000d8) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000640), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, r12, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x48088) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r13, 0x4b67, &(0x7f0000000980)={0x9, &(0x7f0000000940)=[{0xa0, 0xc}, {0x101, 0xf463}, {0x1, 0x7}, {0x2, 0x2}, {0x400, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x100, 0x3ff}, {0xfffa, 0xf2}]}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r14, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r15}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x5c}, 0x1, 0x0, 0x0, 0x881}, 0x80) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r3, 0x100, 0x70bd28, 0x3, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x80) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r17 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r17, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x24048000) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40001) 1m4.213878848s ago: executing program 4 (id=8233): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000003200)='./file1\x00', &(0x7f0000003240), 0x0) 1m4.201803979s ago: executing program 4 (id=8234): syz_clone3(&(0x7f00000005c0)={0x11c103200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40242, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x21000, 0x8, '9P2000.u'}, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmmsg$inet(r3, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f80)="8c4bec0ebfefb01a3b26c938cdec576d920905939dffc66214c441907b87325dd5a689656934ea4c26056f13940f0145eb78a695047812f64b8bac9ecc855238aefafb83e615afb811f357866d44f612d4dab58853cd88c8f98c11be81f3fef61c88824093632dd29267e70d0dda6fe4912795c8409c25dbf0ba49c4cbc86105256695daa4b6571543e637fa4d4fe93cb3d68c5a2bfe914f363242bbec131bf606349aed09ff7c09a9473835810957803d89df82b44f20557235d21b163a09e5fedf0c49ca38d4a2514a64ff0827379ee153b2140c7e776719265c0a3e6810a102157fe82bd6178edf8d1aecb6429985371087", 0xf3}, {&(0x7f0000001080)="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", 0x415}], 0x2}}], 0x1, 0x4000004) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}]}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$BLKFLSBUF(r0, 0x1261, 0x0) 1m4.07637275s ago: executing program 4 (id=8235): r0 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='pstore\x00', 0xa1840c, 0x0) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x100, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) r3 = socket$key(0xf, 0x3, 0x2) accept$unix(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_dev$evdev(&(0x7f0000000280), 0x8, 0x2000) tkill(r8, 0x37) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x328, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "416f96f55a6981ecec9c6dbf5b97941094443dc914024061a134b2af"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "c11c89c6a02c9c96cd7e49bc1d2b02a146bccf8c3be06314ea093fd69ac009b55f216cbac25929f474b772f032b901d632c01bd483fd303c3a292151b9bf6aba8ae7288902a4b3179a6486cb990ed47de8c2f56ca0a3e91247239f814b5b4920d11eb7060c16d47adf21807c1631"}, @TIPC_NLA_NODE_ID={0x88, 0x3, "92df6b5ed67cd5cf3d82d5c4f4b1ce57bc4bbeecf1bdb2fd7915a58a6c1b8be031344308b1c1d9abf5d32eacc007ddf3ce7c565c0b8d4d00f57041391b89d8950a765f3dca4621c4f1ca432d874bdac190b270ee95207d62513773cf6a0aea136cc7390272d60fa1fc7da42eea146c705b75383fdeabc7b27cbf9bedf2fb65a1f62d75ce"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c04e2decf036afee4a20ab0d13eb7578e917f70c33c6d7751189348c82f933"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6ac5, @mcast1, 0x25}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200300"], 0x0}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r10, 0x770a, 0x0) 1m1.147819628s ago: executing program 7 (id=8273): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20702, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x30) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x4740bb6f90890264, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'bond_slave_1\x00', {0x8}, 0x5}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 1m1.03336817s ago: executing program 7 (id=8276): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mremap(&(0x7f0000044000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000044000/0x1000)=nil) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000740)={0x1, 0x1, 0x1a, 0x6, 0x13c, &(0x7f0000000340)}) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x200, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x5, 0x5, 0x3ff, 0x60, 0x5f2, 0x9, 0x2}, 0x1c) pselect6(0x40, &(0x7f0000000140)={0x1, 0x3, 0xf814, 0xc000000000000000, 0xffffffffffffffff, 0x3, 0x2, 0x100000001}, &(0x7f0000000200)={0x9, 0xfffffffffffffff9, 0x4, 0x7, 0x7fffffffffffffff, 0x3, 0x7, 0x1}, &(0x7f0000000240)={0x6, 0x0, 0x3, 0xffffffffffffff7f, 0x8, 0x7fff, 0x740}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x6]}, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1m1.00917121s ago: executing program 7 (id=8277): r0 = socket(0x11, 0xa, 0x0) getsockname$netlink(r0, 0x0, &(0x7f00000004c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1m0.804809644s ago: executing program 7 (id=8278): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x0, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0xd, 0x101, 0x400, 0xe}, {0x6, 0x24, 0x1a, 0x29e4, 0x12}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xf4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x2, 0x90, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xdc, 0x9, 0x3}}}}}}}]}}, 0x0) (async) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60, 0x80000) (async) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80) (async) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x2e, 0x1, 0x100}) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00') (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r2, 0x0, 0x800) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) (async) r7 = socket$packet(0x11, 0x0, 0x300) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f00000001c0)=0x1) pread64(r1, &(0x7f0000001b80)=""/4084, 0xff4, 0x7f) (async, rerun: 64) read$FUSE(r1, &(0x7f0000002b80)={0x2020}, 0x2020) (async, rerun: 64) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r8, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000007c0)=[@increfs={0x40046304, 0xfffffffd}], 0x133, 0x0, &(0x7f00000005c0)="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"}) 1m0.716573235s ago: executing program 7 (id=8279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x804) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65", 0x4) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000180)="51b2b4a2b380b48fb6c5ceafa4bc23819452", 0x12) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x88002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x110040) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f000011d000/0x3000)=nil, 0x3000, 0x8, 0x2010, r3, 0x78803000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 1m0.596755087s ago: executing program 7 (id=8281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x480c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="48b8de000000000000000f21f8350000c0000f23f80f2107c4235d6b150b0000008a0f015e00400f0f01b466460f35b9fd0200f3440fc7b60b00000032bb90ba6abca000ad45a000ad4507", 0x4b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 48.324909569s ago: executing program 43 (id=8235): r0 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='pstore\x00', 0xa1840c, 0x0) r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00\x00\xf2qE', 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x100, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000) r3 = socket$key(0xf, 0x3, 0x2) accept$unix(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) syz_open_dev$evdev(&(0x7f0000000280), 0x8, 0x2000) tkill(r8, 0x37) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote, 0xdd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x328, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "416f96f55a6981ecec9c6dbf5b97941094443dc914024061a134b2af"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "c11c89c6a02c9c96cd7e49bc1d2b02a146bccf8c3be06314ea093fd69ac009b55f216cbac25929f474b772f032b901d632c01bd483fd303c3a292151b9bf6aba8ae7288902a4b3179a6486cb990ed47de8c2f56ca0a3e91247239f814b5b4920d11eb7060c16d47adf21807c1631"}, @TIPC_NLA_NODE_ID={0x88, 0x3, "92df6b5ed67cd5cf3d82d5c4f4b1ce57bc4bbeecf1bdb2fd7915a58a6c1b8be031344308b1c1d9abf5d32eacc007ddf3ce7c565c0b8d4d00f57041391b89d8950a765f3dca4621c4f1ca432d874bdac190b270ee95207d62513773cf6a0aea136cc7390272d60fa1fc7da42eea146c705b75383fdeabc7b27cbf9bedf2fb65a1f62d75ce"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffff}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "c04e2decf036afee4a20ab0d13eb7578e917f70c33c6d7751189348c82f933"}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6ac5, @mcast1, 0x25}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x50}, 0x8000) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, '\x00\x00\x00'}, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="200300"], 0x0}) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r10, 0x770a, 0x0) 45.613590662s ago: executing program 44 (id=8281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/../file0\x00', 0x480c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="48b8de000000000000000f21f8350000c0000f23f80f2107c4235d6b150b0000008a0f015e00400f0f01b466460f35b9fd0200f3440fc7b60b00000032bb90ba6abca000ad45a000ad4507", 0x4b}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.196001611s ago: executing program 5 (id=8896): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6483, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r1, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) ioctl$BLKRRPART(r0, 0x125f, 0x0) 4.195691262s ago: executing program 5 (id=8897): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x480e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000100)=0x80000001) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x148) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000000000001000000000000310000000000000000"], 0x28) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000480), 0x4) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) setresuid(0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0xffffffffffff8000) 4.192951072s ago: executing program 5 (id=8898): umount2(&(0x7f0000000000)='./file0\x00', 0x1) unshare(0x20020080) userfaultfd(0x800) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x2d, {0x2d, 0x9, "d14c6e3838caecd609de38eb8e4ee3a06eab2ba3e0c88d625044fd46ea531f326b6a75e906eda5ae56869c"}}, &(0x7f0000000100)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "5f7a103f447a99194b358d9ce27c194a57c67205bc64e026d75dba5d13961c210dc4c756f6c426fa1f3255d9b6c2cd00e51fd4ba14cbe8555e88f6028269fa8f0fae87805bf87dc6e35261f94c747cd261020047552c585d2dce1a85228bf6267d70987d1f7641ce95f8a38f0b991a58d06b32513f9c184646fac356adc71f0d057307ae47f3e887c3"}}, &(0x7f00000001c0)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0xd, "2488d732"}, @main=@item_4={0x3, 0x0, 0x9, "54253a88"}, @main=@item_4={0x3, 0x0, 0xb, "a7a6dd0f"}, @local=@item_4={0x3, 0x2, 0x8, "ca25775c"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0xf0b}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x9, 0x34, "4a20257ac3ef3948210ee1a2fc159476e828dea84e6fff0a2ffef89dd4a2844eeeb5f980b7541899213516cc02b24e8e71bc55ec"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x1, 0xca, "01c64b4c90f7417397ff85a33a6aac350cca9199dcbb38d9e2f439f094f0696fd948a60d76f74252472448cf00459101c4e1bae27530978257a8d2d50d117669475c60b0860f12450c2b6dc18f65cd4e08b7ec58e7e4044d2458202cd78e8d31ba252e6bbc5618a98121079da268884e204ca2a658252131b6b196c4646c3e0e2ee923e99d630366ade040e5c11b6f81c47377cdb6f2e388add9d87bc9d38894a292875b359868190d0dd899d7603c8cd5b0f1e04022fd2417a16351328616e6b02aeae914a573b0d645"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x47}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3d) unshare(0x2000000) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x10000, &(0x7f0000000640)={[{@rlog_pages={'rlog_pages', 0x3d, 0x4}}, {@no_bf_cache}, {@no_bf_readahead}], [{@uid_eq={'uid', 0x3d, r2}}]}) r3 = syz_usb_connect$uac1(0x2, 0xe4, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x19, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xff, 0x55}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x2, 0x9}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x6, 0xf0, "a80c295929e3"}, @feature_unit={0xf, 0x24, 0x6, 0x4, 0x2, 0x4, [0x2, 0x9, 0x5, 0x2], 0x10}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x206, 0x4, 0x5, 0xa3e, 0x7, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x1, 0x1, 0x8, "57c8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfb, 0x2, 0x7, 0x56, "13", "477e85"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xf8, 0x18, {0x7, 0x25, 0x1, 0x2, 0x2, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x6, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x0, 0x2, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd0, 0x4, 0x2, 0x1, "f89cac8bb7"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x5, "a6f40808123421a739"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x1, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x310, 0x5, 0x2, 0x47, 0x20, 0xf7}, 0x10, &(0x7f0000000800)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0xd, 0xfd, 0x4, 0x0, 0x8}]}, 0x4, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x416}}, {0x6c, &(0x7f00000008c0)=@string={0x6c, 0x3, "bde8c87af0559e34137c0867b6fbf4bc702a324846953f989a14f5b57bc7be6544578344b90fa4aa3f2617c5872778a0d363c3cc858fe772065f00f82f27730eea59d859185cb2c7e0658e2b4360c4d8af10da52515f612a5a01891325ad36e8a49f421a14156b2917b7"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x3d4f89e1fd673016}}]}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8c0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001040)={0x7, 0x0, [{0xeeee8000, 0x9d, &(0x7f0000000b80)=""/157}, {0x4000, 0x83, &(0x7f0000000c40)=""/131}, {0x5000, 0x92, &(0x7f0000000d00)=""/146}, {0x0, 0x7f, &(0x7f0000000dc0)=""/127}, {0xeeee0000, 0x50, &(0x7f0000000e40)=""/80}, {0x4, 0xf3, &(0x7f0000000ec0)=""/243}, {0x2, 0x6b, &(0x7f0000000fc0)=""/107}]}) syz_io_uring_setup(0x3264, &(0x7f0000001140)={0x0, 0xe6b4, 0x20, 0x1, 0x260, 0x0, r4}, &(0x7f00000011c0), &(0x7f0000001200)) read$FUSE(r0, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r1, 0x26, &(0x7f0000003280)={0x1, 0x2, 0x200, 0x0, r5}) syz_usb_connect$cdc_ncm(0x3, 0x89, &(0x7f00000032c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0x1, 0x81, 0x60, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b1"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x4, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xfffa, 0x0, 0xf, 0x4, 0x200, 0xe}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x1ff, [0x7, 0x2, 0x9, 0x8]}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x7f, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x5, 0x3}}}}}}}]}}, &(0x7f0000003540)={0xa, &(0x7f0000003380)={0xa, 0x6, 0x110, 0x40, 0xd6, 0x3, 0x10, 0x8}, 0xf9, &(0x7f00000033c0)={0x5, 0xf, 0xf9, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "963cf4e33cee71ff781724f3df9db1ab"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x7, 0xf7, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "702f68398cf4bf88dc7897ec7c1029d8"}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xab, 0x1, 0x401, 0xf000, 0x50f6, [0xf]}, @generic={0xaf, 0x10, 0x2, "fade65d32ceeb22a5f4326098351f9c1fc82cf90d56b4777f0263f3fcf6f33f31636008dd8b6b31cc76a31383ac566eafa798590ecfc45f84b2dde12ec6ef0963a47f822c568868c937fde8b82ebf3db293b1c8a205943ee896c0d223cb688057cfca0b622491d799273d7edeff218befc179a00f22324f8f2ba03eb2379f73eefa156d63fb852c0242f25737ebca03d338744844445d346ef68ecb3a8dce04b6e66a8032ec6ded7026389d9"}]}, 0x2, [{0x26, &(0x7f00000034c0)=@string={0x26, 0x3, "79794aa47a95f744053b946d5aecfe7eda618778d77ca7e9b4df808e0131f00d2e2629d7"}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x810}}]}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000003580)) r6 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000035c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc082, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9e, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x9, {0x9, 0x21, 0x3, 0xef, 0x1, {0x22, 0x94b}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x2, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000003980)={0xa, &(0x7f0000003600)={0xa, 0x6, 0x300, 0x7, 0xc0, 0x2, 0x8, 0x5}, 0x20, &(0x7f0000003640)={0x5, 0xf, 0x20, 0x1, [@generic={0x1b, 0x10, 0xb, "b7fb0338df43efab84a0053ce43919811d03d41c18727793"}]}, 0x8, [{0x4, &(0x7f0000003680)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f00000036c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x7b, &(0x7f0000003700)=@string={0x7b, 0x3, "513793abfa32c2ce5ad69318d40b6319901ec234a52d25d33f9ce0eac37b1ea3a89cceae8f8b11be4efb2764904944e6fcdf038e246cf386d2d9ecda5458694d9f3dc625424054401483969a1cb211b0bdfb8caeb356fd08f87195cfff1307581f0d966c237ea56fe9f600425174d5de7e37b8b7c44f24ed88"}}, {0x4c, &(0x7f0000003780)=@string={0x4c, 0x3, "cfee9022c1fe0a3589c8ccdb78d38821a5c83fa02cfb0044247ac2c3ee732dcd59529b48f08ebd2bf432e5627189a84dd55ddbea45c20113591ddd710518a80c9c8ae386d882ea16acda"}}, {0x4, &(0x7f0000003800)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000003840)=@lang_id={0x4, 0x3, 0x100a}}, {0xbf, &(0x7f0000003880)=@string={0xbf, 0x3, "daa1f1e4717d37d5ba534018816d3ccdc3a738c048a21e7d2f1e3290015ae0bd8ea45e48a7908290bc56a5fed7845291545ab8462153ef690672f5c8f93ac272d909c431e4b07ceafe9ceee10a970dd91fc21d1744d875581e671d2282fe56276708b9a802daa8f2917a35f32b062d66a458ea572aa6f3ff921364ec68fb0a76112213ae3a78054c8ad3fc1e48ab2d654bf73d3d354d7649fe5035349b1754adde2581a63b437fb270f1be71ddf3ea1e566276fde9ceb30a7c45527d23"}}, {0x4, &(0x7f0000003940)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_control_io$hid(r6, &(0x7f0000003b40)={0x24, &(0x7f0000003a00)={0x20, 0xb, 0x42, {0x42, 0x22, "c4638e022f448169eb43b1f48ebdb7a3df28a2c630742ec0741b5ffba19e081a0af4efd4a03c7c51bba2c43bf1621382e0865c5f23ddf7b185f3e1a472335f2c"}}, &(0x7f0000003a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000003ac0)={0x0, 0x22, 0x4, {[@global, @local=@item_012={0x2, 0x2, 0x2, "ccac"}]}}, &(0x7f0000003b00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x6a7}}}}, &(0x7f0000003d80)={0x2c, &(0x7f0000003b80)={0x40, 0xa, 0xc0, "d14aa35479c651112fff835b2cb436bc1f2607d4124810559b0d12a1c2883b3a608089d6abd6f7c064090d35027788412f828d8a9eb7cc1985f4659b8014f63d39df7cea42524c11afa4631ae17d505a8b1f36d91e1f10f167a1f9d2034aa6e0bf9c747ccea0d4c8f757ee9e756b185712dc3450eac3220b74c9e4904349bc0567c04292124b665f7ac96aa47fe8b31831588009a49362a20a88648e005867309afda6aea32279179b0ff365792ce0af208e2619612835bec2305e3d50c5d74e"}, &(0x7f0000003c80)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000003cc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003d00)={0x20, 0x1, 0x1c, "1f34f64d9f0448c9f212d2afcda6dc10a94d5aab3924745b42f9bcb0"}, &(0x7f0000003d40)={0x20, 0x3, 0x1, 0x2}}) syz_usb_control_io(r6, &(0x7f0000003fc0)={0x2c, &(0x7f0000003dc0)={0x116c91f528f2363e, 0xc, 0x7d, {0x7d, 0x10, "701805c86882fa6358e64f7731c54073ce9e14fca345c9dfbec930672d67b4170a07e5ba5508dc9be8c9afdd8e20d38c7bbc5ed54286cf46fe10609abe3d4bad9e866eb2ee56701ca8367bb194782f5984c37cd05a720de878457657769366422c4a19a4a2d1bdb0fd345ff6ddc3b51fd8b64d8b4dc0cd277b6f7c"}}, &(0x7f0000003e80)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "77e7b34fac4eff0f6e95b5561bdd60f33fbd00a5550545561ba4e2f123d5e9085a80d059644b3711978c10e71533b10315ad82b816d8587b1339eed603d2c0b0cf56b8236eb9888db744bab12e"}}, &(0x7f0000003f00)={0x0, 0xf, 0x2b, {0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x3a, 0xd, 0x1, 0x0, 0xf4}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "b6e4dfeaf29e076376fe17e312dea06a"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x8, 0x4}]}}, &(0x7f0000003f40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x60, 0x2, 0x6, "ecd06c4a", "23e8aa76"}}, &(0x7f0000003f80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x74, 0x3, 0xf9, 0x6, 0x4, 0x6}}}, &(0x7f0000004400)={0x84, &(0x7f0000004000)={0x40, 0x0, 0x30, "670d4401ec11c04b4c35c5e2ca987282c6ebcc40f6f8f53c72bb5e1446e776d40a21a77be8a6f0cb741c3f18bda64b39"}, &(0x7f0000004040)={0x0, 0xa, 0x1, 0xbf}, &(0x7f0000004080)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000040c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000004100)={0x20, 0x0, 0x4, {0x9e0, 0x2}}, &(0x7f0000004140)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000004180)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000041c0)={0x40, 0xb, 0x2, "f746"}, &(0x7f0000004200)={0x40, 0xf, 0x2, 0x12eb}, &(0x7f0000004240)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000004280)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000042c0)={0x40, 0x19, 0x2, "87eb"}, &(0x7f0000004300)={0x40, 0x1a, 0x2, 0xc84f}, &(0x7f0000004340)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000004380)={0x40, 0x1e, 0x1, 0x28}, &(0x7f00000043c0)={0x40, 0x21, 0x1}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000004540)={0x14, &(0x7f00000044c0)={0x40, 0x23, 0xb, {0xb, 0x9, "1ba5e20ece7e73f47b"}}, &(0x7f0000004500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004700)={0x1c, &(0x7f0000004580)={0x0, 0x6, 0xfa, "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"}, &(0x7f0000004680)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000046c0)={0x0, 0x8, 0x1}}) syz_usb_control_io(r3, &(0x7f0000004980)={0x2c, &(0x7f0000004740)={0x40, 0x6, 0x7e, {0x7e, 0x24, "d146ee0e6a15a6416dbc49492cec4078ed06e0cf282d62fca748009e85bd3262d3d3f04b6deeb090e8908d188f3e210d9b7f59d9a0ca7b0e70a9e21cbca04ce068c5f36797b4c985f0e8203908098b18c52c573bfe638ac9f4dca22a997e107076b1637dbef406e182d1e880d8c7a3fd78f1d92ad1a25307f8fc68f1"}}, 0xfffffffffffffffe, &(0x7f0000004800)={0x0, 0xf, 0xe4, {0x5, 0xf, 0xe4, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x2}, @generic={0xd8, 0x10, 0xb, "234f8bba1c3d21ab766736f9bfe26b0ef844efa1cc5e08d0ecd022eb955c3d53e9e8fbc732a409e2631e79950dc15066a0dd6bcfba1db850ac7f9cdf9a5d676fd1fbf82c080c809c84c721f61768d54cec4ae5cbb97dc2fde2cb5a9ceadf6ad097490a8e74c8d706e67f1def25e5754f634bd2a638ea91b3605cb8bc6d85efe57555503da3ebce1071cb25bbf4190fc08f44ae541375b8c324223f3345364541701011b5757c39d4fbf67b96477df336cfa4cda83de080069b7cafec20aa14ac61fde3329cf28474ae4b499e9d73e61477393b1a45"}]}}, &(0x7f0000004900)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x0, 0x33, "46c862d9", "9c824be5"}}, &(0x7f0000004940)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x4, 0x5, 0xc, 0x80, 0x7, 0x200}}}, &(0x7f0000004e00)={0x84, &(0x7f00000049c0)={0x0, 0x15, 0x62, "07ed866d4b7e840db4e908ae3beef5198cc79169b2a225d01734e1151a318cfba809e35b0a51c9596fb788899b20f3034f7f5f6ff1a71533da6577b7e3e627e57fa3d31dfe92de8c1aad5be9ab9e3122399a45c2ce5c1dc2e06bad99331e96829fca"}, &(0x7f0000004a40)={0x0, 0xa, 0x1}, &(0x7f0000004a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000004ac0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000004b00)={0x20, 0x0, 0x8, {0x200, 0x80, [0x0]}}, &(0x7f0000004b40)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000004b80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000004bc0)={0x40, 0xb, 0x2, "180d"}, &(0x7f0000004c00)={0x40, 0xf, 0x2, 0xfff3}, &(0x7f0000004c40)={0x40, 0x13, 0x6, @local}, &(0x7f0000004c80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000004cc0)={0x40, 0x19, 0x2, 'H\f'}, &(0x7f0000004d00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000004d40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000004d80)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000004dc0)={0x40, 0x21, 0x1, 0xf7}}) syz_usb_connect$cdc_ecm(0x4, 0x55, &(0x7f0000004ec0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0xff, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0x1d, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x7be}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x7, 0x2, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd8, 0x4, 0x87bb}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x2, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x7, 0x40}}}}}]}}]}}, &(0x7f0000005240)={0xa, &(0x7f0000004f40)={0xa, 0x6, 0x110, 0x4a, 0x0, 0x0, 0x20, 0x3}, 0x8, &(0x7f0000004f80)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xd8, &(0x7f0000004fc0)=@string={0xd8, 0x3, "f80b772f203e3f9a52e9276dc90d1784c5dabcccc6a406e61d2c14337e08f360e3eba5819e29dac64c42b24001331a358d959f3efc41f86d2e76e9f2f7e858fa0ca006c559dc1639e3be008cda511e614c9846b0a0eb58e84c851c2443c3163049a51a5d0ee585d06ba8d81146e41800d825211d2339a4195aec95875e54b5ed081efd28653546787126251d8377897f326979b502f87e6497fea576d637eeb02382daabc6f08b20efe3e950f5833b3d081414a6a6b7d5608d5a2263289e234cab21ec2a134d1d3cd9bf748da1a205e8b2d144a6f7ce"}}, {0xe9, &(0x7f00000050c0)=@string={0xe9, 0x3, "7dac35a20a95634af5eae357b6a65442ae5bd66bca6f5c8eefed122a47da17ad29eb49e0ac4faaa2be66f1fc32b21ad0bfd4cae8ca33a3a9a8525ad9855c2145452fa979c41ef9f8534f656f5aec8536600691ce6830c4a1cfcc8587c0e4ee495828adb0f0015489369faf91dbb28d46b990ab9659e3c7f86dfe0dafe2722ba29855fbcb2678e0745a0327accc40127d34322e50b098275875276367a2c7b78ffc6bec2dff4b03acaa526c46dacf07ae389de950433e57fc9f6aa32289e1b6838304151f541da52ae5064ec854939a9854dfa583b198e39d3bbbe810ea5a62b6e7547d222543e0"}}, {0x59, &(0x7f00000051c0)=@string={0x59, 0x3, "18e33c4f882543b03e475dc4429ecb5c02c0b0fc23b44856178ecb51f23e1483a2951dfe666fa2f044819491e315ad01933b71d29777446973dfb314ec049cd810dd43c737aa2e1c8913a859e7ef1c5d7128bbaebedbb4"}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_gettime(0x0, &(0x7f00000052c0)={0x0, 0x0}) ppoll(&(0x7f0000005280)=[{r0, 0x5000}, {r4, 0x8000}, {r0, 0x200}, {r1, 0x8012}, {r0, 0x4001}], 0x5, &(0x7f0000005300)={r7, r8+60000000}, &(0x7f0000005340)={[0x1]}, 0x8) syz_usb_connect$cdc_ncm(0x6, 0x75, &(0x7f0000005380)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x6, 0x10, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x195d, 0x2, 0x8, 0xb9}, {0x6, 0x24, 0x1a, 0xfffd, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0xfe, 0x5, 0xf}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x1, 0xb8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7, 0x1e, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x81, 0x9}}}}}}}]}}, &(0x7f0000005580)={0xa, &(0x7f0000005400)={0xa, 0x6, 0x300, 0xf7, 0xc0, 0x33, 0x8, 0x7f}, 0x25, &(0x7f0000005440)={0x5, 0xf, 0x25, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf7, 0x0, 0x1}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0xc7, 0x0, 0x3ff, 0x2fdb751f5da1a634, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x1, 0xb, 0x7293}]}, 0x1, [{0xda, &(0x7f0000005480)=@string={0xda, 0x3, "670f88e38034222edfe9fa6cc8fff70f502f527c8454b3b160962c1d701059e4f0cd996e2584ac68d296bb92e42dabed87a2b4110bb5398f737a2110ecf76497fb40e58b27532c0c15443dd8c55227c5575697f3e0a1ba88cb33860cc22470417239900f19e72dc0fd98b7f82a4ca157c98c3e89851afb0da14c8a9ae554b70b9280188c13c8e025f729ddf3f39a005020394eb6d90f8caccdc01f3e1b3e7c3646594afd59b375a82e5e8e5cea0db3fae7a2691707b8207592223fe10f25732c291d5027b0cbd9cbc995049b65eba7a089286dd4890749e7"}}]}) 1.384683298s ago: executing program 6 (id=8956): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000140)="0f20db269e66baf80cb840721d81ef66bafc0cec0f20d835080000000f22d866ba420066b8003066ef26f3400f09dbe13e430f22862e660ffadcb9351001c00f32", 0x41}], 0x1, 0x4, &(0x7f0000000200)=[@cstype0={0x4, 0x3}], 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000240)={0x1, 0x9, 0x9}) syz_usb_connect(0xd132e5a1789f9763, 0x3da, &(0x7f0000000280)={{0x12, 0x1, 0x211, 0xc, 0x79, 0xf3, 0x20, 0x19d2, 0x412, 0xebb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c8, 0x2, 0x9, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x4, 0x10, 0x3, 0xbc, 0x75, 0xca, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "47431e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x5, 0x3}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xfd, 0xb7b}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x18}, @dmm={0x7, 0x24, 0x14, 0x9, 0x80}]}], [{{0x9, 0x5, 0xa, 0x4, 0x10, 0x4, 0x1, 0x81, [@generic={0x42, 0x3, "e0720caad64ab5f4d7ce6f2b885c5b30d5b83fd8f3ba339a24e1a12dc7c86bb7841b45f8d716ade5863ac2b055168fc2034e74d6bd50eda77848a5dde24cc69a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x5}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x4, 0x3, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x8}, @generic={0xdc, 0x23, "9e45ead83f5d334cec5b03b6e99b4ef955eb6cb9f9e1cee5891085646a36fc739c2a50b8869a6e938f9b6e362bc796cc987ae24603cb5f7d35fc00d85af8ac0ebb73df1936180a2f07db145f8b6ced89d7041cb1995b8b3b332e1073131953ad53dcf61d3787e6bd6f595321424670e6416a8a18d5e203909e8c3b283b53aee2c852542fa908f7d877f821985f5ce49a3f1171477327b337786ec133ed337c87e80a4411b82338c64279125b3d7ecb1c2a4dd648f13fcb0c2e320f479fea812d1bba3e984a073af4e274e014f51ea32c0001f5e290bbbb59e923"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x44, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x7ff}]}}]}}, {{0x9, 0x4, 0x1, 0x1, 0x4, 0x82, 0xc2, 0x3d, 0x3, [@hid_hid={0x9, 0x21, 0x42, 0xc, 0x1, {0x22, 0x59c}}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "d8feee70"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x380}, [@dmm={0x7, 0x24, 0x14, 0x3, 0xb}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x81, 0xd, 0x3}, @obex={0x5, 0x24, 0x15, 0x7ef7}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x401}]}], [{{0x9, 0x5, 0x17, 0x0, 0x400, 0x40, 0xf0, 0xb5, [@generic={0x85, 0x22, "478f4285ce2dc9bd4e483fd79fe2fb8dbe7d8bff8b841c04323ba39f0c5ef1dc5b283dea571ac7e67e3aade7d1df15daae32eda834673b014bd0700da2aab969a35f4e829a97b47cbd776d91caadae1482e14abcfb285210e8305811277354ff1e03213d8eb9d3ea8ea3b18ce8c1a5c2972e265bdc63b18f293ddbcbec403f1a0d2dc2"}, @generic={0x68, 0x24, "28bab6232c65c5942f0d6b1df5c65adfef4c5054179632f8d21635f5b255286f0464b0fc8a25e334528180913f4b2cf7c2545842c8eb794a7a369ea02d125fea92f1e46b8652949c92b6decea49fdd59764024c846abfa3a5c5ae7d3a7e9d2ab85f04e249b99"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x94, 0x101}, @generic={0x6d, 0x2, "6a02e6191eba2e5b264568382d62b9254a46db19e027b5c52f5f09627200850985c5538283beaf87468b4f848f7a443778d156b441be461948aa1f82e9cacbb139c7e045b3e0d5c4c0b55e23287173faa1cfb87a67cd242c2cd6e1dcd2b12b902d27face574385f49b9a6b"}]}}, {{0x9, 0x5, 0x463e6a2b480940c9, 0x0, 0x20, 0x0, 0x9, 0xff}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x95, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7fff}, @generic={0x41, 0x22, "66ed84fdcae1e51e9986a28d835e9bed4b4fad710253e8d3bd0f361cc4e55c1b293947ce806c6e35119aeacba72e012261e73cfadab2deeb9da183c75a2913"}]}}]}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x4, 0x0, 0x8, 0x20, 0x9}, 0x23, &(0x7f00000006c0)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "063ec9cb5a7c4d4dc88c77507138b0cf"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x7, 0x2}]}, 0x4, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}, {0xaf, &(0x7f0000000740)=@string={0xaf, 0x3, "88c0e6e4431e3402d0a7e81d2c12de1c615d8af275c5746eff4d6491cc19c041625976d9c177fbb5608277b61b71a0391f3cb180befe9895f28019b671d27af333913f18039a0dd1a0e34a8e23757753236113a9b65cc40714a78ab47ef46673ba051b30c2b3fc548e38f8b5f363ff9e47dad35437a669534e4f8249bca8b0736b013348cbe7a5d4b1c7fd2a91c1f207cc6d8e8f774494ca6b4622a4b49f54b7d5bf9eb7b02613defc211b556e"}}, {0x72, &(0x7f0000000800)=@string={0x72, 0x3, "0a0eb2fc6329eef8fc66af0454b4b666e7cfbf1121ecc792b0e0523b664f62b11532674b619af18932c90c2f96d24e9990b7c91952053a741567093bf2f2f965ea62436ae33adaa3343af482a280c04508abb623377d499ddc82c155bd4d6337482c7092a2c37c15df61ee82c71fdba7"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0xc0a}}]}) connect$vsock_stream(r2, &(0x7f0000000940)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$TIOCNOTTY(r2, 0x5422) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000980)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000a00)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000a80)={0x1, &(0x7f0000000a40)=[{0x40, 0xe, 0x2f, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000ac0)) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000b80)={0x3, 0x8, '\x00', 0x0, &(0x7f0000000b40)=[0x0]}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000bc0)={{r2}, "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"}) ioctl$UI_DEV_CREATE(r2, 0x5501) flistxattr(r2, &(0x7f0000001bc0)=""/212, 0xd4) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000001d00)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)='veth1_vlan\x00', 0x8001, 0x7fff, 0x2}) fsopen(&(0x7f0000001d80)='minix\x00', 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) statx(r2, &(0x7f0000001f00)='./file0\x00', 0x400, 0x200, &(0x7f0000001f40)) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000002040)=""/239) listen(r2, 0xeb6) dup3(r3, 0xffffffffffffffff, 0x0) 1.179144981s ago: executing program 5 (id=8957): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close_range(r0, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 1.172153751s ago: executing program 5 (id=8958): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = fsmount(r2, 0x0, 0x83) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) write$FUSE_NOTIFY_RETRIEVE(r1, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x23, &(0x7f0000000240), 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000280)=0x55, 0x1) (async) ioctl$EVIOCGSND(r0, 0x8040451a, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1.120444172s ago: executing program 5 (id=8959): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(&(0x7f0000000200)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='pipefs\x00', 0x100000, &(0x7f00000002c0)='./binderfs/binder1\x00') ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000001c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000180000000000000004dbdf251d01190047"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r2, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/4107, 0x100b}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4cafcd48928a3d4a76498900000014"], 0x18c0}}, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x201, 0x26, 0xa6, 0x9, 0x8, 0x7a6, 0x7c2, 0x3712, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0xf9, 0x10, 0x4, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x6f, 0xaa, 0xd}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x16, &(0x7f0000001080)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x80, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0xf, 0x5aec}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480), 0x8400, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r4) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x34, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb6}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) recvmsg$unix(r7, 0x0, 0x121) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000500)={{0x2, 0x4e20, @multicast2}, {0x1, @random="bb3c2f7dbece"}, 0x4, {0x2, 0x4e20, @multicast1}, 'ip6gretap0\x00'}) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='smb3\x00', 0x80000, &(0x7f0000000180)='./binderfs/binder1\x00') 1.117187962s ago: executing program 0 (id=8960): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_blocks=E']) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000005}) epoll_pwait(r2, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "5fd7edd6346f6664", "d96e12bf97710d716d676d3654b39d4b219d121d5f8766638fc9252eb43236b4", "a6c5e81b", "06238ee08fcd5ec4"}, 0x38) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 996.406694ms ago: executing program 6 (id=8961): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xbb8}, 0x1, 0x0, 0x0, 0x801}, 0x44804) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000001040), 0x282d) 984.223384ms ago: executing program 6 (id=8962): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@default_permissions}], [{@permit_directio}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000324000/0x4000)=nil, 0x4000}, 0x5}) syz_usb_connect(0x0, 0x4ed, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x90, 0x5d, 0x34, 0x20, 0x2537, 0x1068, 0x940a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4db, 0x3, 0x6d, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x51, 0x6, 0x2, 0xf4, 0x90, 0x6e, 0xeb, [], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x6, 0xd, 0x3}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x4, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x9}, @generic={0x33, 0x1, "c62801945eb6653ce2be9730b19eec202ab63413a58d7db6d1a7dfa6e76b3e2122bde2601193f3ec0948ba334b86d0e883"}]}}]}}, {{0x9, 0x4, 0x58, 0xfc, 0x2, 0xff, 0xff, 0xff, 0x85, [], [{{0x9, 0x5, 0x80, 0xc, 0x20, 0x5, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x60, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x4, 0x2, 0x8, [@generic={0x7d, 0x21, "6d4e27c1b05d8350489ec8814b157718f12aaeea7009a2ac027262fc589aef1d665b9faba4a388fe2f0e788017a106e326724f3af27394c5d592147d77bc09fc6088fe8128ef2b8604376231a845a8ca592d94c08ec8a107f925cb685e1d1051fbda298c5f135a685842fc2ecbc4de9285221e94f20a38537a54b1"}]}}]}}, {{0x9, 0x4, 0x92, 0x7, 0xf, 0x6d, 0xaa, 0x23, 0x8, [@generic={0xaf, 0x4, "bdc108cbc54c7efaa7ec53699e08a6da4588813ecf72e6b44202b7cee569aaf613ae7fa00be85ed3dd4b6adf381ace5c9907797451e84f9c070573ce99651844a128183fe51a72be3f52390cf51e71888be63ee85938a5ad0aab5c67d2a7f55f77223c4b4979cf4522a69d75497f331ad6ef3d4c0e93f0c5b42dae833b9cd8364084af4d05eb589ca70677ee1234af77874223bf82cfd423a691925f35b0dfb9a9624aa1eda6416483655ef5d7"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, '=/'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x3b, 0x1, 0x7}, [@country_functional={0x6, 0x24, 0x7, 0xe, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x3, 0xfbff}]}], [{{0x9, 0x5, 0x4, 0x1, 0x40, 0xa, 0x8, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x6, 0xb2, 0x6, [@generic={0x5e, 0xf, "5556a2fe76e1542909db02e017e57f22a01193e0cc7985c1d6ea380b8199ee8828302a03ac0aa6c158f9c01e8b02defc6175f7ef5630057c77f086a38d842c7df22e8daaa973a086aed07bbd8986473134bd2f9ef8dd4a7c45e20318"}]}}, {{0x9, 0x5, 0x6, 0xc5923badea82349f, 0x20, 0x8, 0x1}}, {{0x9, 0x5, 0x4, 0x1, 0x5bf, 0x3, 0xd, 0x1f, [@generic={0x102, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0xf2ed}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x25, 0xf, 0x34}}, {{0x9, 0x5, 0x3, 0x14, 0x400, 0x7, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x20, 0x9, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa3, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x200}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x44, 0xb, 0x1}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0xcf, 0x3, 0x5, [@generic={0x6, 0x23, "194f6f6c"}, @generic={0x6, 0x7, "7b372f03"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x24, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xb, 0x1}]}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x4c, 0x9, 0x0, [@generic={0xb3, 0xb, "9d38afc181246173c861af0230f0d98f5dcea1494c2a09523c347270186a91d7f7608e7e47ebfa8c7a81f77cc1021b8150f7963cd194f240df22366b9123dd8c292561ac83963ce22e81b9c236b80c4324d992e5a53f5e8a60df52f816d2ac1b0eaa2292d1632a35dcbe8f17c77c4491b9b1e202ff38de388847e7acb2075a39fc6c60048acdd3aa4c584b19bf722d28c4d1a2e535a24b94a08f4025f745f66141951507816ae4268530ce2863074f0410"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x6, 0xf1, 0x4}}, {{0x9, 0x5, 0xf7f7a74b561f234d, 0x0, 0x3ff, 0x8, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7}]}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x96, 0x8, 0xe}}, {{0x9, 0x5, 0x5, 0x1, 0x20, 0x0, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x981f}, @generic={0x21, 0x22, "d1956d1e99b212595e7f5a209bb65f4a998958183750591958ec1ff52647f4"}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xfffffd05, 0x6, 0x110, 0x47, 0x9, 0x8c, 0x8, 0x9}, 0x24a, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1, [{0x53, &(0x7f0000000180)=@string={0x53, 0x3, "02b84c4112f2bd0e73f28cb91973fcaf4d8d7918e3c635cc22c597c3c83fd31801f35673c7a2e99f5363548a4489260c1636236316a6acd53c197771466d73e670558b93c4efc861cd060e12008dc90723"}}]}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000845000/0x4000)=nil, &(0x7f0000137000/0xa000)=nil, 0x4000}) lseek(r0, 0x40000000010001, 0x0) 785.955377ms ago: executing program 3 (id=8973): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r2, 0x6, 0x2, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'erspan0\x00'}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xfefffffe) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xffffffff, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x4e20, 0xfffe, 0xa, 0x0, 0x80, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@mcast1, @in=@local, @in=@empty, @in=@empty, 0x2b, 0x3, 0x0, 0x3502, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x66000) 784.404297ms ago: executing program 3 (id=8974): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38b, 0x3}) (async, rerun: 32) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (rerun: 32) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x401, &(0x7f0000000100)={[{@name}]}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x3a, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d1"}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = epoll_create1(0x80000) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x18}, 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r4, 0xc018480d, 0x0) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="400e1c000002dffd8d3d6ae3aef3bd8f6dbc6a8eaf8ae275daca789fd429828943f6989ace2f27c1c4d686cbb9c5279f92000000000000000000000000a1b829a863aa321735bb0feac9868bbe994c7001c7bb1073a2763f2996497ae800c5589c97b880913895ca1e795e2874f94811d08bdc9e5e78da0ac72cd20691a77d565a752f7efe7d2308aee32ce90ec46d7129fc05671402b91876d7fcf239809b36ee30cc56529a632780fe215a77e34e611682b751e0c666c8936bea8c74262361b52275da"], 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x200, 0x40}}, 0x0, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x8f}, &(0x7f0000000980)={0x40, 0xb, 0x2, "3ea0"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x3752}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x1a, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x3}}) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x11) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 720.529799ms ago: executing program 3 (id=8975): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x16}, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x5, 0x0, 0x1, 0x0, 0x3}, {{@in=@rand_addr=0x64010100, 0x1, 0x6c}, 0x0, @in6=@remote, 0x0, 0x2, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) modify_ldt$write(0x2000, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(r4, 0x0, 0x0) r5 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='attr/exec\x00') sendmmsg$inet(r3, &(0x7f0000005200)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x24008084) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x3, 0x9, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x11, 0x10, 0x9, 0x9}}) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='o0\x00']) epoll_create1(0x0) 550.363561ms ago: executing program 3 (id=8976): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0xb) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="f2a49ca7581c300000001900150000000000fffffffe0a000000020200200000000014000980f7ffffffe42509000800308004004f803039e020619dc2a9c4f1743a87d87185058930679002536c7fec30aa9fbb7a19f64bb5fc3e58a7b66a846d90ddf62e0ec80db425956ccfef386a3d410e4e041b81b77ef837ea829cafa1bd4e4aa914f3d7c1d56de78fefb376b47d7d1f7790a5b55eee1c98340f5f7d14af9d1eec9c876055f437e848dbb6b02c7de651825c62e5bdeb75b281b7ea0bc857e098f6d1e9"], 0x30}], 0x1}, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 512.688372ms ago: executing program 3 (id=8977): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x428481, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r1, r4, 0x0, 0x1ff) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 436.548173ms ago: executing program 3 (id=8978): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x1, 0x10, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x4, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x249, 0xe, 'E'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x1, 0x38, {0x7, 0x25, 0x1, 0x0, 0x82}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0xf3, 0xa9, {0x7, 0x25, 0x1, 0x0, 0x5f, 0x9}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x44c}}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000380)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000180)) tkill(r2, 0x16) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r4 = open(&(0x7f0000000080)='./file0\x00', 0x131041, 0x1f3) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000200)={r3, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x5, 0x1b, 0x15, "54c870a8634edc745dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6fdffffffec68114b5aba1c98915951ba72296d56740d00042f0434ab3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b8757e5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x94]}}) io_setup(0x3, &(0x7f0000000000)=0x0) r6 = socket$unix(0x1, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xb899, r6, &(0x7f0000000040), 0x0, 0x4}]) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 435.483373ms ago: executing program 6 (id=8979): timer_getoverrun(0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 435.210113ms ago: executing program 6 (id=8980): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00008ac000/0x4000)=nil, &(0x7f00002c4000/0x2000)=nil, 0x4000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mlock2(&(0x7f00002b6000/0x3000)=nil, 0x3000, 0x0) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 414.051254ms ago: executing program 6 (id=8981): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x1004, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x3, 0xfffffffd, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e6d2763", 0x4}], 0x1}, 0x4000001) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r3, 0x8923, &(0x7f0000000200)="943a") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x100}) ioprio_set$uid(0x3, 0x0, 0x0) r5 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) syz_usb_connect(0x5, 0x6a, &(0x7f0000002380)={{0x12, 0x1, 0x300, 0x36, 0x5b, 0xe5, 0x20, 0x2912, 0x1, 0x5fc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x9, 0xb2, 0x30, 0xed, [{{0x9, 0x4, 0x13, 0x6, 0x0, 0x93, 0x63, 0xd1, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8c8, 0x6666, 0x88, 0x16}, {0x6, 0x24, 0x1a, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x84}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x4, 0xfff0}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xef30, 0x8, 0xe, 0xdc}, [@call_mgmt={0x5, 0x24, 0x1, 0x2}]}]}}]}}]}}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) sendfile(r5, r5, 0x0, 0x800000007) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffe}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x600}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71}, 0x58) 235.749837ms ago: executing program 0 (id=8982): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(0x0, 0x182) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) 152.478178ms ago: executing program 0 (id=8983): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffa) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{0x3}], 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f00000003c0)="25d7196c03045396b9eff784", 0xc, 0x8014, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f00000003c0)) close_range(r0, 0xffffffffffffffff, 0x0) 151.912568ms ago: executing program 0 (id=8984): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) getsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000017200)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 1.114701ms ago: executing program 0 (id=8985): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000001f80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x45833af92e4b39ff, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x47, &(0x7f0000000080)={0x2, 0x3, 0xfffe, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x64, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x80000000, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}}, 0x800) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101042, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) (async) recvmmsg(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001880)=""/147, 0x93}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f0000000580)=""/133, 0x85}, {&(0x7f0000002d80)=""/254, 0xfe}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x40000000, 0x0) (async) sendfile(r6, r5, &(0x7f0000001000)=0x7fffffffffffffff, 0x7) 0s ago: executing program 0 (id=8986): r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x2, &(0x7f00000014c0)=0x0) (async) pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x1, &(0x7f0000001b80)=[&(0x7f0000001640)={0x0, 0x0, 0x0, 0x7, 0x2, r0, 0x0, 0x0, 0x5, 0x0, 0x1, r2}]) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x101, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x8, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x30, 0x91, 0xfe}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}]}) lsm_set_self_attr(0x30, 0x0, 0x8, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0x8b, 0x6b, ""/107}, &(0x7f00000000c0)=0x8b, 0x1) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x240, 0x0) (async) syz_usb_control_io(r4, &(0x7f00000001c0)={0x2c, &(0x7f0000000180)={0x0, 0x31, 0x8, {0x8, 0x0, "b1a7dca36060"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x10005, 0x400], 0x7}, 0x10) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x11, 0x0, 0x20000000, 0x0, 0x3, 0x900, 0x9000}}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) listen(r6, 0x204) (async) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) close(r5) (async) socket$packet(0x11, 0x3, 0x300) (async) bind$can_raw(r3, 0x0, 0x39) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r8 = socket(0x2, 0x3, 0x5) getsockopt(r8, 0xff, 0x100000000000001, 0x0, 0x0) kernel console output (not intermixed with test programs): , failed to enable media [ 351.526902][T20324] overlayfs: failed to clone upperpath [ 351.546044][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6739'. [ 351.555370][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6739'. [ 351.903026][T20395] cgroup: Bad value for 'name' [ 351.908140][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6751'. [ 352.790694][T20474] netlink: 'syz.8.6783': attribute type 25 has an invalid length. [ 352.909534][T20496] cgroup: Bad value for 'name' [ 352.915783][T20498] cgroup: Bad value for 'name' [ 352.950855][T20507] overlayfs: failed to clone upperpath [ 353.189254][T20517] /dev/loop0: Can't lookup blockdev [ 353.202718][T20519] 9pnet_fd: Insufficient options for proto=fd [ 353.759895][T20596] overlayfs: failed to clone lowerpath [ 353.774324][T20596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14305 sclass=netlink_route_socket pid=20596 comm=syz.5.6823 [ 353.931814][ T36] kauditd_printk_skb: 23534 callbacks suppressed [ 353.931833][ T36] audit: type=1400 audit(8000000345.795:68975): avc: denied { name_bind } for pid=20611 comm="syz.8.6829" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 354.515509][T20629] overlayfs: failed to clone lowerpath [ 354.713556][T20675] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 354.722317][T20675] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 354.733933][T20675] overlayfs: missing 'lowerdir' [ 354.773024][T20686] __nla_validate_parse: 1 callbacks suppressed [ 354.773041][T20686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6854'. [ 355.159796][T20724] overlayfs: failed to clone upperpath [ 355.562605][T20732] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6869'. [ 355.797601][T20775] incfs: Options parsing error. -22 [ 355.802862][T20775] incfs: mount failed -22 [ 355.832840][T20760] cgroup: Need name or subsystem set [ 356.004995][T20808] tipc: Enabling of bearer rejected, failed to enable media [ 356.114315][T20810] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6897'. [ 356.114416][T20811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6897'. [ 356.123270][T20810] 0M: renamed from gretap0 (while UP) [ 356.138685][T20810] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 356.244273][T20823] tmpfs: Unknown parameter 'quota' [ 356.776270][ T36] audit: type=1400 audit(8000000348.645:68976): avc: denied { relabelto } for pid=20833 comm="syz.5.6906" name="file0" dev="tmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 356.823861][ T36] audit: type=1400 audit(8000000348.695:68977): avc: denied { unlink } for pid=14573 comm="syz-executor" name="file0" dev="tmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 357.211854][T20868] 9pnet_fd: Insufficient options for proto=fd [ 357.821989][T20895] batadv_slave_1: entered promiscuous mode [ 357.831926][T20895] sock: sock_timestamping_bind_phc: sock not bind to device [ 357.848865][T20894] batadv_slave_1: left promiscuous mode [ 357.872281][T20900] netlink: 'syz.5.6925': attribute type 16 has an invalid length. [ 357.880242][T20900] netlink: 'syz.5.6925': attribute type 3 has an invalid length. [ 357.888197][T20900] netlink: 64054 bytes leftover after parsing attributes in process `syz.5.6925'. [ 357.933505][T20898] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=20898 comm=syz.5.6925 [ 358.026576][T20909] fuse: Bad value for 'user_id' [ 358.036939][T20909] fuse: Bad value for 'user_id' [ 358.211608][ T13] tipc: Subscription rejected, illegal request [ 358.223479][T20921] 9pnet_fd: p9_fd_create_unix (20921): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 358.690216][T20957] cgroup: Bad value for 'name' [ 359.262712][ T36] audit: type=1400 audit(8000000351.125:68978): avc: denied { lock } for pid=20965 comm="syz.2.6948" path="socket:[71828]" dev="sockfs" ino=71828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 378.267104][ T5126] bridge_slave_1: left allmulticast mode [ 378.272768][ T5126] bridge_slave_1: left promiscuous mode [ 378.279262][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.293460][ T5126] bridge_slave_0: left allmulticast mode [ 378.303740][ T5126] bridge_slave_0: left promiscuous mode [ 378.309573][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.388506][T20951] overlayfs: failed to clone upperpath [ 378.697911][ T5126] tipc: Left network mode [ 378.920322][T20973] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.928603][T20973] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.943716][T20973] bridge_slave_0: entered allmulticast mode [ 378.950016][T20973] bridge_slave_0: entered promiscuous mode [ 378.965093][T20973] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.972119][T20973] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.993708][T20973] bridge_slave_1: entered allmulticast mode [ 379.000519][T20973] bridge_slave_1: entered promiscuous mode [ 379.214597][T20980] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.221656][T20980] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.233368][T20980] bridge_slave_0: entered allmulticast mode [ 379.240788][T20980] bridge_slave_0: entered promiscuous mode [ 379.270147][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.283690][T20980] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.290751][T20980] bridge_slave_1: entered allmulticast mode [ 379.304406][T20980] bridge_slave_1: entered promiscuous mode [ 379.312366][T20973] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.319415][T20973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.326688][T20973] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.333718][T20973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.374469][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.381709][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.402690][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.409773][T20981] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.423906][T20981] bridge_slave_0: entered allmulticast mode [ 379.430199][T20981] bridge_slave_0: entered promiscuous mode [ 379.444591][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.451620][T20981] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.463722][T20981] bridge_slave_1: entered allmulticast mode [ 379.470258][T20981] bridge_slave_1: entered promiscuous mode [ 379.527223][T20982] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.543698][T20982] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.551275][T20982] bridge_slave_0: entered allmulticast mode [ 379.557601][T20982] bridge_slave_0: entered promiscuous mode [ 379.589121][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.596192][ T5538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.634387][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.641444][ T5538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.668501][T20982] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.675568][T20982] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.682616][T20982] bridge_slave_1: entered allmulticast mode [ 379.704130][T20982] bridge_slave_1: entered promiscuous mode [ 379.801877][ T5126] bridge_slave_1: left allmulticast mode [ 379.807568][ T5126] bridge_slave_1: left promiscuous mode [ 379.813164][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.834086][ T5126] bridge_slave_0: left allmulticast mode [ 379.839749][ T5126] bridge_slave_0: left promiscuous mode [ 379.846157][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.073851][T20973] veth0_vlan: entered promiscuous mode [ 380.137169][ T5126] tipc: Left network mode [ 380.154831][ T5126] veth1_macvtap: left promiscuous mode [ 380.259574][T20973] veth1_macvtap: entered promiscuous mode [ 380.328336][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.335408][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.344277][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.351311][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.375534][ T36] audit: type=1400 audit(8000000372.235:68979): avc: denied { mounton } for pid=20973 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 380.394599][T20982] veth0_vlan: entered promiscuous mode [ 380.438236][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.445282][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.481189][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.488247][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.527026][T20997] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 380.574638][T20982] veth1_macvtap: entered promiscuous mode [ 380.594742][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.601774][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.634029][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.641081][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.654721][T21003] rust_binder: Read failure Err(EAGAIN) in pid:11 [ 380.685099][T20980] veth0_vlan: entered promiscuous mode [ 380.779689][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.779717][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.786967][T20980] veth1_macvtap: entered promiscuous mode [ 380.805108][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.805130][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.814259][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.835830][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.835995][T20981] veth0_vlan: entered promiscuous mode [ 380.842250][T21010] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 380.889046][T20981] veth1_macvtap: entered promiscuous mode [ 380.984314][T21018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6958'. [ 381.074988][T21024] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 381.119753][T21030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6960'. [ 381.169122][ T36] audit: type=1400 audit(8000000373.035:68980): avc: denied { remove_name } for pid=21026 comm="syz.3.6960" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.233101][ T36] audit: type=1400 audit(8000000373.035:68981): avc: denied { unlink } for pid=21026 comm="syz.3.6960" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.262037][T21046] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 381.276067][T21049] FAT-fs (rnullb0): bogus number of reserved sectors [ 381.289270][T21046] rust_binder: Write failure EINVAL in pid:7 [ 381.291404][T21049] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 381.322085][T21053] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 381.332320][T21053] rust_binder: Write failure EINVAL in pid:10 [ 381.332761][ T5126] bridge_slave_1: left allmulticast mode [ 381.350256][ T5126] bridge_slave_1: left promiscuous mode [ 381.362410][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.377821][ T5126] bridge_slave_0: left allmulticast mode [ 381.389891][T21058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6965'. [ 381.400591][ T5126] bridge_slave_0: left promiscuous mode [ 381.408121][T21063] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 381.408671][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.511445][T21071] cgroup: Bad value for 'name' [ 381.535285][ T5126] tipc: Disabling bearer [ 381.540399][ T5126] tipc: Left network mode [ 381.544789][ T5606] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 381.553411][ T5126] veth0_vlan: left promiscuous mode [ 381.693918][ T5606] usb 1-1: Using ep0 maxpacket: 32 [ 381.700425][ T5606] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 381.708841][ T5606] usb 1-1: config 0 has no interface number 0 [ 381.716719][ T5606] usb 1-1: config 0 interface 184 has no altsetting 0 [ 381.726590][ T5606] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 381.735722][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.743727][ T5606] usb 1-1: Product: syz [ 381.747882][ T5606] usb 1-1: Manufacturer: syz [ 381.752467][ T5606] usb 1-1: SerialNumber: syz [ 381.764132][ T5606] usb 1-1: config 0 descriptor?? [ 381.772192][ T5606] smsc75xx v1.0.0 [ 381.821290][T21084] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.823887][ T5610] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 381.832292][T21084] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 381.846402][T21084] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 381.854440][T21084] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 381.893713][ T5607] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 381.928196][T21084] IPv4: Oversized IP packet from 127.202.26.0 [ 381.962035][T21090] rust_binder: Write failure EFAULT in pid:31 [ 381.974846][ T5610] usb 5-1: device descriptor read/64, error -71 [ 382.809248][ T5606] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 382.820134][ T5607] usb 4-1: Using ep0 maxpacket: 8 [ 382.828165][ T5606] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 382.840683][ T5606] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 382.851031][ T5606] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 382.859598][ T5607] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 382.868682][ T5607] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 382.877344][ T5607] usb 4-1: config 162 has no interface number 0 [ 382.883573][ T5607] usb 4-1: config 162 has no interface number 1 [ 382.889824][ T5607] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 382.902875][ T5607] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 382.913727][ T5607] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 382.925693][ T5607] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 382.937160][ T5607] usb 4-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 382.947682][ T5607] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 382.960917][ T5607] usb 4-1: config 162 interface 79 has no altsetting 0 [ 382.967831][ T5607] usb 4-1: config 162 interface 183 has no altsetting 0 [ 382.976062][ T5607] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 382.985128][ T5610] usb 5-1: device descriptor read/64, error -71 [ 382.991438][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.999431][ T5607] usb 4-1: Product: syz [ 383.003578][ T5607] usb 4-1: Manufacturer: syz [ 383.008168][ T5607] usb 4-1: SerialNumber: syz [ 383.073712][ T5602] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 383.214428][T21080] /dev/rnullb0: Can't open blockdev [ 383.221799][T21080] 9p filesystem being mounted at /11/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 383.225019][ T5602] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 383.232163][ T5610] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 383.243164][ T5602] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 383.252922][ T36] audit: type=1400 audit(8000000375.125:68982): avc: denied { write } for pid=21079 comm="syz.3.6972" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 383.269876][ T5602] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 383.282922][ T5607] pl2303 4-1:162.79: required endpoints missing [ 383.292458][ T5602] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 383.300223][ T5607] pl2303 4-1:162.183: pl2303 converter detected [ 383.312058][ T5602] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 383.318111][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 383.326829][ T5602] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 383.335265][ T5607] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 383.342982][ T5602] usb 10-1: SerialNumber: syz [ 383.351666][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 383.364339][T21096] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 383.371673][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 383.373053][ T5602] cdc_acm 10-1:1.0: Control and data interfaces are not separated! [ 383.380189][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 383.396161][ T5607] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 383.404679][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 383.412986][ T5607] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 383.422112][ T5607] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 383.430522][ T5610] usb 5-1: device descriptor read/64, error -71 [ 383.437160][ T5607] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 383.445670][ T5607] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 383.454790][ T5607] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 383.464067][ T5607] usb 4-1: USB disconnect, device number 7 [ 383.473877][ T5607] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 383.481871][ T5607] pl2303 4-1:162.183: device disconnected [ 383.587921][ T36] audit: type=1400 audit(8000000375.455:68983): avc: denied { create } for pid=21095 comm="syz.9.6978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 383.588980][ T5602] usb 10-1: USB disconnect, device number 2 [ 383.673721][ T5610] usb 5-1: device descriptor read/64, error -71 [ 383.783827][ T5610] usb usb5-port1: attempt power cycle [ 383.802425][T21103] binder: Unknown parameter 'w' [ 384.126305][ T5610] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 384.154674][ T5610] usb 5-1: device descriptor read/8, error -71 [ 384.315675][ T358] usb 1-1: USB disconnect, device number 9 [ 384.331020][T21121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6985'. [ 384.378805][ T5610] usb 5-1: device descriptor read/8, error -71 [ 384.540845][ T36] audit: type=1400 audit(8000000376.405:68984): avc: denied { remount } for pid=21127 comm="syz.4.6988" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 384.542469][T21128] binder: Unknown parameter 'contextfs/binder1' [ 384.602054][T21130] input: syz1 as /devices/virtual/input/input16 [ 384.668183][T21141] netlink: 'syz.4.6992': attribute type 3 has an invalid length. [ 384.676209][T21141] netlink: 944 bytes leftover after parsing attributes in process `syz.4.6992'. [ 384.706298][ T358] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 384.706530][T21143] /dev/rnullb0: Can't open blockdev [ 384.714874][T21144] /dev/rnullb0: Can't open blockdev [ 384.865139][ T358] usb 1-1: config 0 has an invalid interface number: 73 but max is 0 [ 384.873348][ T358] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.883519][ T358] usb 1-1: config 0 has no interface number 0 [ 384.891252][ T358] usb 1-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64 [ 384.900387][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.908399][ T358] usb 1-1: Product: syz [ 384.912608][ T358] usb 1-1: Manufacturer: syz [ 384.917213][ T358] usb 1-1: SerialNumber: syz [ 384.922308][ T358] usb 1-1: config 0 descriptor?? [ 384.993699][ T5607] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 385.003796][ T318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 385.123747][ T5610] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 385.135099][T21121] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 385.143705][ T5607] usb 10-1: Using ep0 maxpacket: 8 [ 385.149198][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 385.155368][ T5607] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 385.163751][ T5607] usb 10-1: config 179 has no interface number 0 [ 385.170078][ T5607] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 385.181217][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.192333][ T318] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.201492][ T5607] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 385.212874][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.221043][ T5610] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.229082][ T5607] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.240616][ T318] usb 4-1: config 0 descriptor?? [ 385.245703][ T5610] usb 5-1: config 3 has an invalid interface number: 255 but max is 0 [ 385.253960][ T5610] usb 5-1: config 3 has no interface number 0 [ 385.260075][ T5610] usb 5-1: config 3 interface 255 altsetting 6 endpoint 0xE has invalid maxpacket 471, setting to 64 [ 385.271234][ T5607] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 385.283815][ T5610] usb 5-1: config 3 interface 255 has no altsetting 0 [ 385.290704][ T5607] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 385.304114][ T5607] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 385.313296][ T5607] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.322590][T21147] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 385.329824][ T5610] usb 5-1: New USB device found, idVendor=0499, idProduct=5006, bcdDevice=14.93 [ 385.339007][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.349229][ T5610] usb 5-1: Product: syz [ 385.353488][ T5610] usb 5-1: Manufacturer: syz [ 385.358139][ T5610] usb 5-1: SerialNumber: syz [ 385.472972][ T318] usbhid 4-1:0.0: can't add hid device: -71 [ 385.479020][ T318] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 385.487805][ T318] usb 4-1: USB disconnect, device number 8 [ 385.746217][ T5602] usb 10-1: USB disconnect, device number 3 [ 385.746242][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 385.760805][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 385.913720][ T358] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 386.064071][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 386.070310][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.081216][ T358] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 386.090262][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.099846][ T358] usb 4-1: config 0 descriptor?? [ 386.302399][T21152] rtc_cmos 00:00: Alarms can be up to one day in the future [ 386.516417][ T358] hid-generic 0003:04D8:00DD.0012: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 386.911910][T21148] loop7: detected capacity change from 0 to 7 [ 386.918416][ C1] blk_print_req_error: 1 callbacks suppressed [ 386.918431][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.933645][ C1] buffer_io_error: 1 callbacks suppressed [ 386.939380][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 386.947291][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.956418][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 386.964327][T21148] loop7: unable to read partition table [ 386.965058][T21167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.971214][T21148] loop_reread_partitions: partition scan of loop7 (Cj̖P=}Xp %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 386.978928][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 386.992494][T21167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.000870][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.017066][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.017447][T21148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.026206][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.027541][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.034967][T21148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.042405][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.084044][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 387.093617][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.102784][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.124198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.133338][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.141311][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.150431][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.158364][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.167490][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.175335][T21148] loop7: unable to read partition table [ 387.180995][T21148] loop_reread_partitions: partition scan of loop7 (m8?c) %dby=r<]_Az(B=e) failed (rc=-5) [ 387.184300][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 387.203480][ T318] usb 4-1: USB disconnect, device number 9 [ 387.214579][ T109] loop7: unable to read partition table [ 387.338090][ T358] usb 1-1: USB disconnect, device number 10 [ 387.498043][T21177] binder: Bad value for 'max' [ 387.680371][ T5610] snd-usb-audio 5-1:3.255: probe with driver snd-usb-audio failed with error -2 [ 387.687751][T21191] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 387.693308][ T5610] usb 5-1: USB disconnect, device number 5 [ 387.708639][T21099] udevd[21099]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.255/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 388.053721][ T5610] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 388.188992][ T5610] usb 5-1: device descriptor read/64, error -71 [ 388.433707][ T5610] usb 5-1: device descriptor read/64, error -71 [ 388.662895][ T36] audit: type=1400 audit(8000000380.525:68985): avc: denied { read } for pid=21206 comm="syz.3.7013" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.686133][ T36] audit: type=1400 audit(8000000380.525:68986): avc: denied { open } for pid=21206 comm="syz.3.7013" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 388.698950][T21209] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 388.709798][ T5610] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 388.768835][T21222] cgroup: Bad value for 'name' [ 388.775843][T21224] FAT-fs (rnullb0): bogus number of reserved sectors [ 388.782573][T21224] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 388.798042][T21226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7021'. [ 388.853699][ T5610] usb 5-1: device descriptor read/64, error -71 [ 389.093711][ T5610] usb 5-1: device descriptor read/64, error -71 [ 389.203830][ T5610] usb usb5-port1: attempt power cycle [ 389.553702][ T5610] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 389.574881][ T5610] usb 5-1: device descriptor read/8, error -71 [ 389.704821][ T5610] usb 5-1: device descriptor read/8, error -71 [ 389.953727][ T5610] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 389.979812][ T5610] usb 5-1: device descriptor read/8, error -71 [ 390.114746][ T5610] usb 5-1: device descriptor read/8, error -71 [ 390.223931][ T5610] usb usb5-port1: unable to enumerate USB device [ 390.740481][T21261] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 390.748721][T21261] rust_binder: Write failure EINVAL in pid:41 [ 390.774091][T21265] rust_binder: Write failure EINVAL in pid:45 [ 390.805444][T21270] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9v [ 390.964252][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7037'. [ 390.974620][T21282] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7037'. [ 391.084660][T21290] rust_binder: Write failure EFAULT in pid:70 [ 391.341231][T21302] binder: Bad value for 'max' [ 391.376533][ T36] audit: type=1326 audit(8000000383.245:68987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21306 comm="syz.3.7047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc104b8e9a9 code=0x0 [ 391.471265][T21312] /dev/md0: Can't lookup blockdev [ 391.573589][T21322] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 391.573610][T21322] rust_binder: Read failure Err(EFAULT) in pid:115 [ 391.797428][T21342] sit0: entered promiscuous mode [ 391.809777][T21342] netlink: 'syz.0.7060': attribute type 1 has an invalid length. [ 391.822426][T21342] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7060'. [ 391.926030][T21346] fuse: Bad value for 'fd' [ 391.959687][T21351] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 391.967108][ T36] audit: type=1400 audit(8000000383.825:68988): avc: denied { relabelto } for pid=21350 comm="syz.4.7062" name="file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 392.013021][T21351] rust_binder: Write failure EINVAL in pid:78 [ 392.013504][T21351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 392.049549][T21351] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 392.063590][T21351] rust_binder: 78: no such ref 0 [ 392.271936][T21372] netlink: 'syz.3.7071': attribute type 6 has an invalid length. [ 392.280157][T21372] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.806671][ T36] audit: type=1400 audit(8000000384.665:68989): avc: denied { unlink } for pid=20980 comm="syz-executor" name="file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 393.154059][T21419] overlayfs: failed to resolve './file1': -2 [ 393.219067][T21423] /dev/sr0: Can't lookup blockdev [ 393.253148][ T36] audit: type=1400 audit(8000000385.115:68990): avc: denied { map } for pid=21424 comm="syz.0.7088" path="socket:[75327]" dev="sockfs" ino=75327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 393.295084][T21427] rust_binder: Failed to allocate buffer. len:4104, is_oneway:true [ 393.295108][T21427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 393.313303][T21427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:91 [ 393.463733][ T5607] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 393.480658][ C0] blk_print_req_error: 60 callbacks suppressed [ 393.480677][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.492569][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.495964][ C0] buffer_io_error: 58 callbacks suppressed [ 393.495983][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 393.505070][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 393.510854][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.518803][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.526428][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 393.535545][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 393.544639][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.552399][ C1] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.560194][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 393.569276][ C1] Buffer I/O error on dev loop7, logical block 5, async page read [ 393.593967][ C1] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.603053][ C1] Buffer I/O error on dev loop7, logical block 6, async page read [ 393.611149][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.611548][ C1] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.620296][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 393.629376][ C1] Buffer I/O error on dev loop7, logical block 1, async page read [ 393.644969][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 393.654078][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 393.661935][T21432] loop7: unable to read partition table [ 393.667889][T21432] loop_reread_partitions: partition scan of loop7 (m8?c) %dby=r<]_Az(B=e) failed (rc=-5) [ 393.687066][ T109] loop7: unable to read partition table [ 393.690971][ T5607] usb 4-1: not running at top speed; connect to a high speed hub [ 393.701475][ T5607] usb 4-1: config 1 interface 0 altsetting 71 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.716517][ T5607] usb 4-1: config 1 interface 0 has no altsetting 0 [ 393.724567][ T5607] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.733602][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.742278][ T5607] usb 4-1: Product: 《 [ 393.748502][ T5607] usb 4-1: Manufacturer: И [ 393.753107][ T5607] usb 4-1: SerialNumber: И [ 393.759138][T21421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.168118][ T5607] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 394.371245][ T318] usb 4-1: USB disconnect, device number 10 [ 394.413580][T21458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32767 sclass=netlink_route_socket pid=21458 comm=syz.4.7100 [ 394.431476][T21458] rust_binder: Error while translating object. [ 394.431508][T21458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 394.437759][T21458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:107 [ 394.573487][T21464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 394.582672][T21464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 394.601407][T21466] rust_binder: 115: no such ref 1 [ 394.615837][T21466] rust_binder: 115: no such ref 2 [ 394.678426][T21473] fuse: Bad value for 'fd' [ 394.729662][T21477] kvm: user requested TSC rate below hardware speed [ 394.740206][T21477] pic_ioport_write: 1 callbacks suppressed [ 394.740217][T21477] kvm: pic: single mode not supported [ 394.746272][T21477] kvm: pic: non byte read [ 394.756049][T21477] kvm: pic: non byte write [ 394.760480][T21477] kvm: pic: non byte read [ 394.764949][T21477] kvm: pic: non byte write [ 394.769392][T21477] kvm: pic: non byte read [ 394.773847][T21477] kvm: pic: non byte write [ 394.778296][T21477] kvm: pic: non byte read [ 394.782680][T21477] kvm: pic: non byte write [ 394.787138][T21477] kvm: pic: non byte read [ 394.791545][T21477] kvm: pic: non byte write [ 394.796068][T21477] kvm: pic: non byte read [ 394.800476][T21477] kvm: pic: non byte write [ 394.804937][T21477] kvm: pic: non byte read [ 394.809337][T21477] kvm: pic: non byte write [ 394.813818][T21477] kvm: pic: non byte read [ 394.818232][T21477] kvm: pic: non byte write [ 394.822665][T21477] kvm: pic: non byte read [ 394.827107][T21477] kvm: pic: non byte write [ 394.831556][T21477] kvm: pic: non byte read [ 394.836007][T21477] kvm: pic: non byte write [ 395.035434][T21496] futex_wake_op: syz.3.7114 tries to shift op by -1; fix this program [ 395.053290][T21498] binder: Unknown parameter 'co' [ 395.071788][ T5538] Bluetooth: hci0: Frame reassembly failed (-84) [ 395.094223][ T36] audit: type=1400 audit(8000000386.965:68991): avc: denied { map } for pid=21505 comm="syz.3.7118" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 395.121886][T21511] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 395.130127][T21511] rust_binder: Write failure EINVAL in pid:175 [ 395.230287][T21515] 9pnet_virtio: no channels available for device syz [ 395.587790][T21536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 395.587830][T21536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:123 [ 395.693703][ T358] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 395.854746][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.864936][ T358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.874637][ T358] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.883972][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.891985][ T358] usb 4-1: SerialNumber: syz [ 396.099282][T21531] 9pnet_fd: Insufficient options for proto=fd [ 396.533978][T21547] rust_binder: 128: no such ref 0 [ 396.539075][T21547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 397.103725][T21502] Bluetooth: hci0: command 0x1003 tx timeout [ 397.103742][ T440] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 397.275157][T21559] binder: Bad value for 'max' [ 397.314281][T21564] Bluetooth: hci1: Frame reassembly failed (-84) [ 397.320932][ T5119] Bluetooth: hci1: Frame reassembly failed (-84) [ 397.583216][T21580] overlayfs: failed to clone upperpath [ 398.472466][ T358] usb 4-1: 0:2 : does not exist [ 398.482302][T21591] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 398.482481][T21591] cgroup: Bad value for 'name' [ 398.494979][ T358] usb 4-1: USB disconnect, device number 11 [ 398.501635][T21099] udevd[21099]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 398.863750][ T358] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 399.014764][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.025411][T21607] 9pnet_fd: Insufficient options for proto=fd [ 399.025741][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.042880][ T358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.055980][ T358] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.065131][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.077054][ T358] usb 4-1: config 0 descriptor?? [ 399.202278][T21637] incfs: Can't find or create .index dir in ./bus [ 399.208797][ T36] audit: type=1400 audit(8000000391.065:68992): avc: denied { mounton } for pid=21636 comm="syz.0.7162" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 399.230959][T21637] incfs: mount failed -1 [ 399.235788][T21637] incfs: Can't find or create .index dir in ./bus [ 399.242332][T21637] incfs: mount failed -1 [ 399.343729][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 399.349791][ T440] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 399.484740][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.501332][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.519012][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.526445][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.543812][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.551441][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.558894][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.573825][ T358] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 399.583537][ T358] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 399.606285][ T358] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 399.721017][T21659] tipc: Started in network mode [ 399.733408][T21659] tipc: Node identity 7, cluster identity 4711 [ 399.744072][T21592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.750530][T21659] tipc: Node number set to 7 [ 399.752576][T21592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.807855][T21663] netlink: 'syz.4.7169': attribute type 4 has an invalid length. [ 399.823608][T21662] netlink: 'syz.4.7169': attribute type 17 has an invalid length. [ 400.265277][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7173'. [ 400.274466][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7173'. [ 400.318605][T21683] fuse: Bad value for 'group_id' [ 400.323580][T21683] fuse: Bad value for 'group_id' [ 400.706249][T21691] __vm_enough_memory: pid: 21691, comm: syz.3.7177, bytes: 8589934592 not enough memory for the allocation [ 400.832713][T21700] overlayfs: missing 'lowerdir' [ 401.475621][ T5607] usb 4-1: USB disconnect, device number 12 [ 401.485423][T21724] rust_binder: 194: no such ref 0 [ 401.704446][T21731] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.711510][T21731] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.728548][T21731] bridge_slave_0: entered allmulticast mode [ 401.741185][T21731] bridge_slave_0: entered promiscuous mode [ 401.754829][T21731] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.772110][T21731] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.779383][T21731] bridge_slave_1: entered allmulticast mode [ 401.785843][T21731] bridge_slave_1: entered promiscuous mode [ 401.838170][T21731] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.845245][T21731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.852514][T21731] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.859562][T21731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.882507][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.889777][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.913878][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.920932][ T5538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.932955][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.940008][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.976179][T21731] veth0_vlan: entered promiscuous mode [ 401.989059][T21731] veth1_macvtap: entered promiscuous mode [ 402.046594][T21742] cgroup: Bad value for 'name' [ 402.072248][T21747] rust_binder: Write failure EINVAL in pid:7 [ 402.072833][T21747] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 148) [ 402.079549][T21747] rust_binder: Error while translating object. [ 402.090475][T21747] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 402.097229][T21747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 402.122148][ T36] audit: type=1400 audit(8000000393.992:68993): avc: denied { getattr } for pid=21748 comm="syz.1.7196" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=77177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.182651][T21730] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 402.182678][T21730] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 402.298842][T21762] 9pnet_fd: Insufficient options for proto=fd [ 402.410201][ T5599] rust_binder: 21759: removing orphan mapping 0:1048 [ 402.437613][ T36] audit: type=1400 audit(8000000394.312:68994): avc: denied { associate } for pid=21778 comm="syz.1.7206" name="core" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 402.444583][T21777] rust_binder: Write failure EFAULT in pid:23 [ 402.534858][ C0] blk_print_req_error: 89 callbacks suppressed [ 402.534878][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.556273][ C0] buffer_io_error: 88 callbacks suppressed [ 402.556290][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.576182][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.585345][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 402.593173][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.602310][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 402.610145][ C0] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.619294][ C0] Buffer I/O error on dev loop7, logical block 3, async page read [ 402.627136][ C0] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.636275][ C0] Buffer I/O error on dev loop7, logical block 4, async page read [ 402.644109][ C0] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.653223][ C0] Buffer I/O error on dev loop7, logical block 5, async page read [ 402.661066][ C0] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.670188][ C0] Buffer I/O error on dev loop7, logical block 6, async page read [ 402.678353][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.687508][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 402.695353][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.704479][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 402.712305][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 402.721442][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 402.729542][T21783] loop7: unable to read partition table [ 402.735436][T21783] loop_reread_partitions: partition scan of loop7 (m8?c) %dby=r<]_Az(B=e) failed (rc=-5) [ 402.755745][ T109] loop7: unable to read partition table [ 402.867805][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7214'. [ 402.914031][ T36] audit: type=1400 audit(8000000394.792:68995): avc: denied { mounton } for pid=21809 comm="syz.1.7218" path="/proc/35/cgroup" dev="proc" ino=77337 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 402.956668][T21818] binder: Bad value for 'max' [ 403.325259][T21841] cgroup: Bad value for 'name' [ 403.400852][T21844] netlink: 'syz.4.7228': attribute type 13 has an invalid length. [ 403.409306][ T36] audit: type=1326 audit(8000000395.282:68996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21843 comm="syz.4.7228" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa750d8e9a9 code=0x0 [ 403.462776][ T36] audit: type=1400 audit(8000000395.332:68997): avc: denied { read } for pid=21843 comm="syz.4.7228" path="socket:[76595]" dev="sockfs" ino=76595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 403.623713][ T358] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 403.774749][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.785954][ T358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.795689][ T358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 403.808575][ T358] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 403.817714][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.827243][ T358] usb 4-1: config 0 descriptor?? [ 403.857160][ T36] audit: type=1326 audit(8000000395.732:68998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.1.7230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb378e9a9 code=0x0 [ 404.228210][T21856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21856 comm=syz.0.7231 [ 404.241978][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.255016][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.262670][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.271518][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.279256][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.286848][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.288510][T21865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21865 comm=syz.4.7234 [ 404.294291][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.308316][T21865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=21865 comm=syz.4.7234 [ 404.317395][ T358] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 404.336281][ T358] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 404.353845][ T358] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 404.482741][T21880] overlayfs: failed to clone upperpath [ 404.721844][T21891] veth0_to_hsr: entered allmulticast mode [ 404.734221][T21894] veth0_to_hsr: left allmulticast mode [ 404.746949][ T36] audit: type=1326 audit(8000000396.622:68999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21895 comm="syz.1.7242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bb378e9a9 code=0x7fc00000 [ 404.772542][ T5607] usb 4-1: USB disconnect, device number 13 [ 404.840807][T21912] cgroup: Bad value for 'name' [ 405.338100][T21917] 9pnet_fd: Insufficient options for proto=fd [ 405.346190][T21920] /dev/rnullb0: Can't open blockdev [ 405.461082][T21937] overlayfs: failed to resolve './file0': -2 [ 405.596472][T21969] tipc: New replicast peer: 255.255.255.255 [ 405.602520][T21969] tipc: Enabled bearer , priority 10 [ 405.693715][ T5607] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 405.854697][ T5607] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 405.864580][ T5607] usb 4-1: config 0 interface 0 has no altsetting 0 [ 405.872388][ T5607] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 405.881462][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.889458][ T5607] usb 4-1: Product: syz [ 405.893642][ T5607] usb 4-1: Manufacturer: syz [ 405.898253][ T5607] usb 4-1: SerialNumber: syz [ 405.903301][ T5607] usb 4-1: config 0 descriptor?? [ 405.909360][ T5607] usb 4-1: selecting invalid altsetting 0 [ 405.935391][T21990] 9pnet_fd: Insufficient options for proto=fd [ 405.969754][T21994] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7275'. [ 405.994312][T21998] overlayfs: conflicting options: userxattr,verity=require [ 406.127007][T22019] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.135637][T22020] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 406.195316][ T358] usb 4-1: USB disconnect, device number 14 [ 406.755859][ T5607] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 406.763914][T22033] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7290'. [ 406.773199][ T5607] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 406.831523][ T36] audit: type=1326 audit(8000000398.702:69000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.0.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4eb8e9a9 code=0x7fc00000 [ 406.862015][ T36] audit: type=1326 audit(8000000398.702:69001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.0.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef4eb8e9a9 code=0x7fc00000 [ 406.890814][T22033] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7290'. [ 406.891042][ T36] audit: type=1326 audit(8000000398.702:69002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21995 comm="syz.0.7276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4eb8e9a9 code=0x7fc00000 [ 406.955815][T22049] /dev/rnullb0: Can't open blockdev [ 407.028807][T22059] 2N: renamed from vcan0 (while UP) [ 407.213713][ T5603] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 407.274089][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 407.274114][ T36] audit: type=1400 audit(8000000399.152:69017): avc: denied { setattr } for pid=22066 comm="syz.4.7302" name="" dev="pipefs" ino=77732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 407.406127][ T5603] usb 4-1: config 127 has an invalid interface number: 54 but max is 0 [ 407.414441][ T5603] usb 4-1: config 127 has an invalid descriptor of length 32, skipping remainder of the config [ 407.421507][T22077] cgroup: noprefix used incorrectly [ 407.426206][ T5603] usb 4-1: config 127 has no interface number 0 [ 407.433867][T22077] cgroup: noprefix used incorrectly [ 407.443714][ T5603] usb 4-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 407.463732][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.494026][ T36] audit: type=1400 audit(8000000399.372:69018): avc: denied { create } for pid=22082 comm="syz.0.7307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 407.615134][T22091] IPv4: Oversized IP packet from 172.20.20.170 [ 407.621520][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 407.627759][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 407.634688][T22091] IPv4: Oversized IP packet from 172.20.20.170 [ 407.641004][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 407.647236][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 407.654318][T22091] IPv4: Oversized IP packet from 172.20.20.170 [ 407.660785][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 407.688379][T22096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7311'. [ 407.799716][ T5538] tipc: Subscription rejected, illegal request [ 407.877745][T22112] overlayfs: failed to clone upperpath [ 407.902738][T22112] 9pnet_fd: Insufficient options for proto=fd [ 408.286869][T22146] /dev/loop0: Can't lookup blockdev [ 408.303594][ T36] audit: type=1400 audit(8000000400.172:69019): avc: denied { relabelto } for pid=22144 comm="syz.0.7328" name="ptmx" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=file permissive=1 [ 408.418810][T22151] IPv6: syztnl2: Disabled Multicast RS [ 408.897316][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7336'. [ 408.929489][T22174] 9pnet_fd: Insufficient options for proto=fd [ 409.265774][T22195] /dev/loop0: Can't lookup blockdev [ 409.432515][T22217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7351'. [ 409.432732][T22218] netlink: 'syz.4.7354': attribute type 2 has an invalid length. [ 409.782709][ T36] audit: type=1400 audit(8000000402.644:69020): avc: denied { audit_write } for pid=22225 comm="syz.0.7357" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 409.980052][ T5603] usb 4-1: string descriptor 0 read error: -71 [ 409.992494][ T5603] usb 4-1: Found UVC 0.00 device (1b3f:2002) [ 409.999442][ T5603] usb 4-1: No valid video chain found. [ 410.006124][ T5603] usb 4-1: USB disconnect, device number 15 [ 410.086962][T22243] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.069561][ C1] blk_print_req_error: 90 callbacks suppressed [ 411.069580][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.090706][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.091314][ C1] buffer_io_error: 88 callbacks suppressed [ 411.091327][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 411.100395][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 411.106977][ C1] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.130896][ C1] Buffer I/O error on dev loop7, logical block 2, async page read [ 411.138739][ C1] I/O error, dev loop7, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.147884][ C1] Buffer I/O error on dev loop7, logical block 3, async page read [ 411.155727][ C1] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.164859][ C1] Buffer I/O error on dev loop7, logical block 4, async page read [ 411.172678][ C1] I/O error, dev loop7, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.181812][ C1] Buffer I/O error on dev loop7, logical block 5, async page read [ 411.189659][ C1] I/O error, dev loop7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.198797][ C1] Buffer I/O error on dev loop7, logical block 6, async page read [ 411.212855][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.222034][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 411.229891][ C0] I/O error, dev loop7, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.239024][ C0] Buffer I/O error on dev loop7, logical block 1, async page read [ 411.243571][T22284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.246866][ C0] I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 411.247287][T22282] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.253286][ C0] Buffer I/O error on dev loop7, logical block 2, async page read [ 411.253920][ T109] loop7: unable to read partition table [ 411.349164][T22303] rust_binder: Read failure Err(EAGAIN) in pid:283 [ 411.349367][T22303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 411.356617][T22303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283 [ 411.366914][T22303] fuse: Unknown parameter 'group_td' [ 411.417205][T22310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7386'. [ 411.526525][T22323] cgroup: Bad value for 'name' [ 411.650195][T22329] 9pnet_fd: Insufficient options for proto=fd [ 411.942955][T22352] /dev/rnullb0: Can't open blockdev [ 411.963474][T22355] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 411.989689][T22358] incfs: Error accessing: ./file0. [ 412.002648][T22358] incfs: mount failed -20 [ 412.010209][T22358] rust_binder: 308: no such ref 2 [ 412.015350][T22358] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 412.022413][T22358] rust_binder: 308: no such ref 3 [ 412.027461][T22358] rust_binder: 308: no such ref 3 [ 412.032513][T22358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:308 [ 412.242959][T22371] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 412.252360][T22371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:321 [ 412.279812][T22380] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 412.299524][T22382] /dev/rnullb0: Can't open blockdev [ 412.317528][T22384] /dev/loop0: Can't lookup blockdev [ 412.481128][T22402] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.7416'. [ 412.956758][ T36] audit: type=1400 audit(8000000405.824:69021): avc: denied { append } for pid=22423 comm="syz.3.7424" name="001" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 412.969341][T22427] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 412.982467][T22427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 412.988923][T22427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:340 [ 413.015743][T22430] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000003 not found [ 413.033136][T22430] rust_binder: Write failure EINVAL in pid:342 [ 413.034948][T22433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7428'. [ 413.064356][T22437] tmpfs: Unknown parameter 'B^TRW*RX-KvH?v}Vžn Z<>5⋗q)W)b/˵EGBI$)I(1+B(B;Ms(0{fVwt~u~^Q)h#:FV˻AEF]{DZsf @#}9IxRpKցia*寈0[Q)/D#SJC+Vti iB\C)~2񸼶Yez0r/*_/ܥ*q6󤒂;D}ܻ/Wy+' [ 413.167321][T22451] overlayfs: missing 'lowerdir' [ 413.293714][ T358] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 413.412364][T22481] overlayfs: failed to clone lowerpath [ 413.443720][ T358] usb 4-1: Using ep0 maxpacket: 16 [ 413.450233][ T358] usb 4-1: unable to get BOS descriptor or descriptor too short [ 413.458722][ T358] usb 4-1: config 1 has an invalid interface descriptor of length 4, skipping [ 413.467634][ T358] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.477739][ T358] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.486902][ T358] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 413.500911][ T358] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.509976][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.517963][ T358] usb 4-1: Product: syz [ 413.522097][ T358] usb 4-1: Manufacturer: syz [ 413.526723][ T358] usb 4-1: SerialNumber: syz [ 413.744668][ T358] usb 4-1: 0:2 : does not exist [ 413.751819][ T358] usb 4-1: USB disconnect, device number 16 [ 413.761519][T21099] udevd[21099]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 413.780346][T22501] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7451'. [ 413.984519][T22512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22512 comm=syz.4.7455 [ 414.112137][T22527] cgroup: Bad value for 'name' [ 414.125648][T22527] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7460'. [ 414.322544][T22531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.324228][T22531] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.343870][T22531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:348 [ 414.465098][ T358] hid-generic 0001:70BD2C:25DFDBFF.0016: hidraw0: HID v0.0c Device [syz1] on syz0 [ 414.614253][T22540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7465'. [ 414.779084][T22568] cgroup: Bad value for 'name' [ 414.880619][T22593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.881184][T22593] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 414.899595][T22593] rust_binder: Error while translating object. [ 414.903999][T22600] 9pnet_fd: Insufficient options for proto=fd [ 414.906344][T22593] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 414.918783][T22593] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:364 [ 414.930022][T22602] overlayfs: failed to clone upperpath [ 414.948259][T22602] tmpfs: Unknown parameter 'no' [ 415.203718][ T5603] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 415.227730][T22665] netlink: 'syz.4.7506': attribute type 2 has an invalid length. [ 415.248700][ T36] audit: type=1326 audit(8000000408.114:69022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22673 comm="syz.1.7514" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bb378e9a9 code=0x0 [ 415.318125][T22684] netlink: 'syz.0.7517': attribute type 2 has an invalid length. [ 415.354791][ T5603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.364947][ T5603] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 415.373958][ T5603] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.388342][ T5603] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 415.397482][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.405515][ T5603] usb 4-1: Product: syz [ 415.409737][ T5603] usb 4-1: Manufacturer: syz [ 415.414381][ T5603] usb 4-1: SerialNumber: syz [ 415.421157][ T5603] usb 4-1: config 0 descriptor?? [ 415.664318][ T5599] usb 4-1: USB disconnect, device number 17 [ 416.119119][T22767] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7544'. [ 416.145914][T22773] cgroup: Bad value for 'name' [ 416.158774][ T36] audit: type=1400 audit(8000000409.024:69023): avc: denied { read } for pid=22777 comm="syz.0.7547" name="ptmx" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=file permissive=1 [ 416.181626][ T36] audit: type=1400 audit(8000000409.024:69024): avc: denied { open } for pid=22777 comm="syz.0.7547" path="/dev/ptmx" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=file permissive=1 [ 416.260717][ T36] audit: type=1400 audit(8000000409.124:69025): avc: denied { ioctl } for pid=22777 comm="syz.0.7547" path="/dev/ptmx" dev="tmpfs" ino=88 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=file permissive=1 [ 416.530686][T22785] /dev/rnullb0: Can't open blockdev [ 416.544972][T22788] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 416.554743][T22792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2138 sclass=netlink_route_socket pid=22792 comm=syz.3.7551 [ 416.584013][T22795] rust_binder: 382: no such ref 3 [ 416.824497][T22812] netlink: 'syz.3.7557': attribute type 10 has an invalid length. [ 416.874931][T22819] proc: Unknown parameter '0x00000000ffffffff' [ 416.927082][ T36] audit: type=1400 audit(8000000409.794:69026): avc: denied { mounton } for pid=22827 comm="syz.3.7561" path="/139/file0" dev="configfs" ino=1143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 416.967591][ T36] audit: type=1400 audit(8000000409.834:69027): avc: denied { unmount } for pid=20982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 417.339942][T22867] can0: slcan on ptm1. [ 417.356081][T22867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3178661629 (203434344256 ns) > initial count (186443752768 ns). Using initial count to start timer. [ 417.383957][ T5602] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 417.452036][T22866] can0 (unregistered): slcan off ptm1. [ 417.839339][ T36] audit: type=1326 audit(8000000410.704:69028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.1.7591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bb378e9a9 code=0x7dff0000 [ 417.916428][T22951] overlayfs: failed to clone lowerpath [ 418.095101][ T36] audit: type=1326 audit(8000000410.964:69029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22957 comm="syz.3.7595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc104b8e9a9 code=0x7fc00000 [ 418.215549][T22972] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.7596'. [ 418.224769][T22972] netlink: 280 bytes leftover after parsing attributes in process `syz.1.7596'. [ 418.388533][T22975] /dev/rnullb0: Can't open blockdev [ 418.574146][ T318] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 418.588543][ T318] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 418.655487][T22986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:451 [ 418.663585][T22988] /dev/nbd3: Can't lookup blockdev [ 418.687073][T22991] rust_binder: 456: no such ref 1 [ 418.692116][T22991] rust_binder: 456: no such ref 2 [ 418.695005][T22992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.697343][T22992] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 418.697694][T22991] rust_binder: inc_ref_done called when no active inc_refs [ 418.721753][T22996] net_ratelimit: 89 callbacks suppressed [ 418.721770][T22996] TCP: out of memory -- consider tuning tcp_mem [ 418.747876][T22996] binder: Bad value for 'stats' [ 418.795739][T23007] tipc: Started in network mode [ 418.800686][T23007] tipc: Node identity , cluster identity 4711 [ 418.806874][T23007] tipc: Failed to obtain node identity [ 418.812336][T23007] tipc: Enabling of bearer rejected, failed to enable media [ 418.829199][T23008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=23008 comm=syz.0.7612 [ 418.833281][T23007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=23007 comm=syz.0.7612 [ 418.854275][T23008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=23008 comm=syz.0.7612 [ 418.855477][T23007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=23007 comm=syz.0.7612 [ 418.879890][T23008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=23008 comm=syz.0.7612 [ 418.880345][T23007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=23007 comm=syz.0.7612 [ 419.633785][T23060] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7632'. [ 419.790236][T23079] 9pnet_fd: Insufficient options for proto=fd [ 419.826212][T23089] 9pnet_fd: Insufficient options for proto=fd [ 419.878570][T23098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23098 comm=syz.1.7645 [ 419.891698][T23098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23098 comm=syz.1.7645 [ 419.906002][T23098] 9pnet_fd: Insufficient options for proto=fd [ 419.924814][T23102] netlink: 'syz.1.7647': attribute type 15 has an invalid length. [ 419.932741][T23102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7647'. [ 419.943270][T23104] binder: Unknown parameter 'dont_appraise' [ 420.600309][T23144] overlayfs: failed to clone upperpath [ 420.606093][T23143] overlayfs: failed to clone upperpath [ 420.650816][T23147] netlink: 'syz.1.7661': attribute type 27 has an invalid length. [ 420.681537][T23147] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.688749][T23147] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.871141][T23164] tipc: Started in network mode [ 420.876313][T23164] tipc: Node identity ac14140f, cluster identity 4711 [ 420.883339][T23164] tipc: New replicast peer: 255.255.255.255 [ 420.889680][T23164] tipc: Enabled bearer , priority 10 [ 420.896021][T23163] tipc: Enabling of bearer rejected, already enabled [ 420.904402][T23163] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 420.905463][T23164] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 421.083716][ T5602] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 421.255443][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 421.256059][T23190] netlink: 'syz.0.7675': attribute type 27 has an invalid length. [ 421.264107][ T5602] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.280855][ T5602] usb 4-1: config 1 interface 0 has no altsetting 0 [ 421.290468][ T5602] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 421.299548][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.307684][ T5602] usb 4-1: Product: syz [ 421.311853][ T5602] usb 4-1: Manufacturer: syz [ 421.316439][ T5602] usb 4-1: SerialNumber: syz [ 421.588431][ T5602] usbhid 4-1:1.0: can't add hid device: -71 [ 421.594447][ T5602] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 421.603407][ T5602] usb 4-1: USB disconnect, device number 19 [ 421.793544][ T36] audit: type=1400 audit(8000000414.654:69030): avc: denied { lock } for pid=23206 comm="syz.0.7680" path="socket:[82001]" dev="sockfs" ino=82001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.960347][T23238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7691'. [ 422.003714][ T5602] tipc: Node number set to 2886997007 [ 422.204726][ T5126] bridge_slave_1: left allmulticast mode [ 422.210963][ T5126] bridge_slave_1: left promiscuous mode [ 422.216689][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.224182][ T5126] bridge_slave_0: left allmulticast mode [ 422.229835][ T5126] bridge_slave_0: left promiscuous mode [ 422.235957][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.305006][T23251] cgroup: Bad value for 'name' [ 422.310010][T23251] rust_binder: 489: no such ref 2 [ 422.330663][T23247] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.337716][T23247] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.344917][T23247] bridge_slave_0: entered allmulticast mode [ 422.351032][T23247] bridge_slave_0: entered promiscuous mode [ 422.357535][T23247] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.364624][T23247] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.371771][T23247] bridge_slave_1: entered allmulticast mode [ 422.378322][T23247] bridge_slave_1: entered promiscuous mode [ 422.416274][ T36] audit: type=1400 audit(8000000415.284:69031): avc: denied { create } for pid=23258 comm="syz.0.7700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 422.430816][T23261] fuse: Bad value for 'fd' [ 422.476627][T23247] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.483679][T23247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.490911][T23247] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.497925][T23247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.516990][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.524694][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.534475][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.541496][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.549243][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.556288][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.577767][T23247] veth0_vlan: entered promiscuous mode [ 422.587968][T23247] veth1_macvtap: entered promiscuous mode [ 422.603856][ T5599] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 422.641794][ T36] audit: type=1400 audit(8000000415.504:69032): avc: denied { map } for pid=23268 comm="syz.7.7703" path="/proc/4/task/5/mounts" dev="proc" ino=82234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 422.693595][T23278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=23278 comm=syz.7.7706 [ 422.728947][T23285] input: syz0 as /devices/virtual/input/input19 [ 422.739418][T21099] udevd[21099]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory [ 422.765149][ T5599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.776184][ T5599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.787731][ T5599] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.800648][ T5599] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.809967][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.818581][ T5599] usb 4-1: config 0 descriptor?? [ 423.531492][T23303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7715'. [ 423.635748][T23316] overlayfs: failed to clone upperpath [ 424.705163][T23330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7726'. [ 425.366300][ T5599] usbhid 4-1:0.0: can't add hid device: -71 [ 425.372521][ T5599] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 425.384175][ T5599] usb 4-1: USB disconnect, device number 20 [ 425.435374][T23376] cgroup: Bad value for 'name' [ 425.440883][T23376] netlink: 393 bytes leftover after parsing attributes in process `syz.0.7742'. [ 426.094852][T23388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 426.147584][T23388] rust_binder: Error while translating object. [ 426.154149][T23388] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 426.160411][T23388] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:27 [ 426.240194][T23393] binder: Bad value for 'max' [ 426.302408][T23397] rust_binder: Write failure EFAULT in pid:498 [ 426.318715][T23401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7750'. [ 426.334245][T23401] binder: Unknown parameter './binderfs' [ 426.368014][ T36] audit: type=1326 audit(8000000419.234:69033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23405 comm="syz.7.7752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97fa78e9a9 code=0x0 [ 426.556534][T23425] 9pnet_fd: Insufficient options for proto=fd [ 426.559592][T23427] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7760'. [ 426.584744][T23433] 9pnet_fd: Insufficient options for proto=fd [ 426.659954][T23451] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7768'. [ 426.669118][T23451] gre0: entered promiscuous mode [ 427.500498][T23510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.500526][T23510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.525182][T23517] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 427.575931][ T5603] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 427.603935][ T5603] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 427.913712][ T358] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 428.064755][ T358] usb 4-1: not running at top speed; connect to a high speed hub [ 428.073347][ T358] usb 4-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.087359][ T358] usb 4-1: config 1 interface 0 has no altsetting 0 [ 428.095504][ T358] usb 4-1: New USB device found, idVendor=222a, idProduct=0001, bcdDevice= 0.40 [ 428.105869][ T358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.114071][ T358] usb 4-1: Product: syz [ 428.118386][ T358] usb 4-1: Manufacturer: syz [ 428.123009][ T358] usb 4-1: SerialNumber: syz [ 428.134359][T23535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 428.155900][T23541] xt_NFQUEUE: number of total queues is 0 [ 428.231027][T23544] 9pnet_fd: Insufficient options for proto=fd [ 428.558125][ T358] usbhid 4-1:1.0: can't add hid device: -71 [ 428.564167][ T358] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 428.572795][ T358] usb 4-1: USB disconnect, device number 22 [ 429.019144][T23572] overlayfs: conflicting options: userxattr,verity=require [ 429.041190][T23572] netlink: 'syz.0.7813': attribute type 33 has an invalid length. [ 429.049099][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7813'. [ 429.116003][ T5126] Bluetooth: hci1: Frame reassembly failed (-84) [ 429.138279][T23611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23611 comm=syz.4.7824 [ 429.193720][T23631] tipc: Enabling of bearer rejected, already enabled [ 430.355242][T23664] sock: sock_timestamping_bind_phc: sock not bind to device [ 431.183723][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 431.183728][ T440] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 431.239940][T23680] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 431.268775][T23685] overlayfs: failed to clone upperpath [ 431.299120][ T36] audit: type=1400 audit(8000000424.164:69034): avc: denied { accept } for pid=23691 comm="syz.3.7849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 431.336894][T23696] netlink: 'syz.3.7850': attribute type 12 has an invalid length. [ 431.345435][T23698] netlink: 124 bytes leftover after parsing attributes in process `syz.4.7852'. [ 431.369879][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.369907][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.377027][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.387674][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.389883][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.396462][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.402795][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.409285][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.415788][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.422320][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.428960][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.436698][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.442199][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.448573][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.456218][T23700] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 431.489699][T23711] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556 [ 431.509326][T23713] input: syz0 as /devices/virtual/input/input21 [ 431.665619][T23720] rust_binder: 61: no such ref 1 [ 431.670640][T23720] rust_binder: 61: no such ref 2 [ 431.767237][T23722] rust_binder: 23721 RLIMIT_NICE not set [ 432.326405][ T36] audit: type=1400 audit(8000000425.194:69035): avc: denied { unmount } for pid=20982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 432.411199][T23780] 9pnet_fd: Insufficient options for proto=fd [ 432.413007][T23782] rust_binder: 561: no such ref 3 [ 432.423122][T23782] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 432.423147][T23784] rust_binder: 561: no such ref 3 [ 432.503897][ T5610] rust_binder: 23719: removing orphan mapping 0:1048 [ 432.538977][T23795] cgroup: subsys name conflicts with all [ 432.589869][T23798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 432.653816][T23803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7890'. [ 432.767211][T23812] overlayfs: failed to clone upperpath [ 433.278446][T23825] batadv_slave_0: entered promiscuous mode [ 433.289847][T23824] batadv_slave_0: left promiscuous mode [ 433.299007][T23831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7902'. [ 433.496339][T23847] 9p filesystem being mounted at /295/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 433.527557][T23850] overlayfs: failed to resolve '/߾nXL;': -2 [ 433.554616][T23852] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7906'. [ 433.634396][T23857] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 433.734505][T23866] overlayfs: failed to clone upperpath [ 433.939406][T23887] cgroup: Bad value for 'name' [ 433.952826][T23887] cgroup: Bad value for 'name' [ 434.174092][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7925'. [ 434.332979][T23918] support for cryptoloop has been removed. Use dm-crypt instead. [ 434.505457][T23931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7935'. [ 434.514545][T23931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7935'. [ 434.523936][T23931] futex_wake_op: syz.4.7935 tries to shift op by -1; fix this program [ 434.541539][T23940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7937'. [ 434.598343][T23954] netlink: 'syz.0.7942': attribute type 4 has an invalid length. [ 434.657890][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7947'. [ 434.694740][T23977] bpf: Bad value for 'mode' [ 434.797729][T23988] batadv_slave_0: entered promiscuous mode [ 434.899112][T23998] cgroup: Bad value for 'name' [ 434.934178][T23988] batadv_slave_0: left promiscuous mode [ 434.992064][T24011] overlayfs: missing 'workdir' [ 435.000660][T24011] futex_wake_op: syz.0.7962 tries to shift op by 144; fix this program [ 435.009624][ T36] audit: type=1400 audit(8000000427.884:69036): avc: denied { map } for pid=24010 comm="syz.0.7962" path="/316/bus" dev="tmpfs" ino=1753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 435.034212][T24017] tipc: Enabling of bearer rejected, already enabled [ 435.244949][T24056] overlayfs: failed to resolve './file1': -2 [ 435.262912][T24056] netlink: 'syz.4.7978': attribute type 16 has an invalid length. [ 435.881362][T24094] incfs: Options parsing error. -22 [ 435.886664][T24094] incfs: mount failed -22 [ 436.003486][T24103] 9pnet_fd: Insufficient options for proto=fd [ 436.191464][T24110] overlayfs: failed to clone upperpath [ 436.212302][T24112] IPv4: Oversized IP packet from 172.20.20.170 [ 436.218693][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.224934][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.232107][T24112] IPv4: Oversized IP packet from 172.20.20.170 [ 436.238460][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.244704][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.251819][T24112] IPv4: Oversized IP packet from 172.20.20.170 [ 436.258165][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.264450][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 436.290653][T24112] IPv4: Oversized IP packet from 172.20.20.170 [ 436.328130][ T36] audit: type=1326 audit(8000000429.194:69037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc104b8e9a9 code=0x7ffc0000 [ 436.351729][ T36] audit: type=1326 audit(8000000429.194:69038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc104b8e9a9 code=0x7ffc0000 [ 436.375423][ T36] audit: type=1326 audit(8000000429.194:69039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc104b8e9a9 code=0x7ffc0000 [ 436.408096][ T36] audit: type=1326 audit(8000000429.194:69040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc104b8e9a9 code=0x7ffc0000 [ 436.453707][ T36] audit: type=1326 audit(8000000429.194:69041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc104b908c7 code=0x7ffc0000 [ 436.482120][ T36] audit: type=1326 audit(8000000429.194:69042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc104b9083c code=0x7ffc0000 [ 436.510075][ T36] audit: type=1326 audit(8000000429.194:69043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc104b90774 code=0x7ffc0000 [ 436.533911][ T36] audit: type=1326 audit(8000000429.194:69044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24119 comm="syz.3.8000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc104b90774 code=0x7ffc0000 [ 436.756280][T24147] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8009'. [ 437.089946][T24155] overlayfs: failed to clone upperpath [ 437.109974][T24159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8014'. [ 437.119338][T24159] cgroup: Bad value for 'name' [ 437.183485][T24164] netlink: 'syz.4.8016': attribute type 11 has an invalid length. [ 437.658369][T24175] overlayfs: failed to clone upperpath [ 438.595481][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 438.595498][ T36] audit: type=1400 audit(8000000431.464:69101): avc: denied { map } for pid=24196 comm="syz.7.8028" path="/dev/usbmon8" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 438.632873][T24201] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 438.652491][ T36] audit: type=1400 audit(8000000431.514:69102): avc: denied { map } for pid=24202 comm="syz.7.8031" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 439.551959][T24290] overlayfs: failed to resolve './file0': -2 [ 439.774045][T24298] fuse: Bad value for 'fd' [ 439.836792][ T36] audit: type=1107 audit(8000000432.704:69103): pid=24299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 440.147195][T24320] overlayfs: failed to clone upperpath [ 440.312903][T24329] overlayfs: failed to clone upperpath [ 440.893432][T24360] overlayfs: failed to clone upperpath [ 442.241397][T24377] 2q>wv: renamed from lo (while UP) [ 442.757957][T24429] 9pnet_fd: Insufficient options for proto=fd [ 442.870419][T24448] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8093'. [ 442.886782][T24450] netlink: 'syz.3.8094': attribute type 1 has an invalid length. [ 442.949750][T24466] overlayfs: failed to clone upperpath [ 442.987742][T24469] incfs: Options parsing error. -22 [ 442.993110][T24469] incfs: mount failed -22 [ 443.006660][T24474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=24474 comm=syz.0.8101 [ 443.019205][T24474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=24474 comm=syz.0.8101 [ 443.032325][T24474] netlink: 'syz.0.8101': attribute type 27 has an invalid length. [ 443.070063][ T36] audit: type=1326 audit(8000000435.934:69104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24483 comm="syz.0.8104" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef4eb8e9a9 code=0x0 [ 443.099518][T24486] 9pnet_fd: Insufficient options for proto=fd [ 443.512449][ T36] audit: type=1400 audit(8000000436.374:69105): avc: denied { validate_trans } for pid=24507 comm="syz.7.8113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 443.529509][T24506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8112'. [ 444.057436][T24546] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 444.603734][T24558] 9pnet_fd: Insufficient options for proto=fd [ 444.638370][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8132'. [ 444.659970][T24569] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8133'. [ 444.779541][T24574] overlayfs: failed to clone upperpath [ 444.786810][T24574] overlayfs: failed to clone upperpath [ 445.136578][T24577] cgroup: Bad value for 'name' [ 445.746549][T24643] overlayfs: failed to clone upperpath [ 445.874510][ T36] audit: type=1400 audit(8000000438.744:69106): avc: denied { link } for pid=24659 comm="syz.7.8163" name="#1d" dev="tmpfs" ino=336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 445.925357][T24663] fuse: Bad value for 'user_id' [ 445.930245][T24663] fuse: Bad value for 'user_id' [ 445.975686][T24668] /dev/rnullb0: Can't open blockdev [ 446.002583][T24673] overlayfs: failed to clone upperpath [ 446.248994][T24695] overlayfs: failed to clone upperpath [ 446.255928][T24695] overlayfs: failed to clone upperpath [ 446.275546][T24700] overlayfs: failed to clone upperpath [ 446.595285][T24714] overlayfs: failed to clone upperpath [ 446.652727][T24728] vcan0: entered allmulticast mode [ 446.658185][T24728] vcan0: left allmulticast mode [ 446.738827][T24742] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8191'. [ 446.752499][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8191'. [ 446.763628][T24742] tipc: MTU too low for tipc bearer [ 446.808912][T24751] overlayfs: failed to clone upperpath [ 446.940423][T24758] net_ratelimit: 87 callbacks suppressed [ 446.940445][T24758] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 446.965931][T24755] netlink: 'syz.3.8195': attribute type 27 has an invalid length. [ 446.987559][T24755] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.994780][T24755] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.065247][T24766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8197'. [ 447.088909][T24768] overlayfs: failed to clone upperpath [ 447.095683][T24768] overlayfs: failed to clone upperpath [ 447.166943][T24787] overlayfs: failed to resolve './file1': -2 [ 447.193501][T24796] __vm_enough_memory: pid: 24796, comm: syz.7.8207, bytes: 8589934592 not enough memory for the allocation [ 447.790611][T24814] overlayfs: failed to resolve './file1': -2 [ 448.126795][T24834] overlayfs: failed to resolve './file0': -2 [ 448.140757][T24836] cgroup: Need name or subsystem set [ 448.169327][T24842] netlink: 'syz.3.8226': attribute type 4 has an invalid length. [ 448.177138][T24842] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8226'. [ 448.211798][T24847] cgroup: Bad value for 'name' [ 448.454990][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8231'. [ 448.481974][T24859] overlayfs: failed to resolve './file0': -2 [ 448.497656][ T36] audit: type=1400 audit(8000000697.372:69107): avc: denied { name_bind } for pid=24860 comm="syz.4.8234" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 448.742490][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8237'. [ 448.977457][T24880] overlayfs: failed to resolve './file0': -2 [ 449.431303][ T5126] bridge_slave_1: left allmulticast mode [ 449.443420][ T5126] bridge_slave_1: left promiscuous mode [ 449.453518][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.481311][ T5126] bridge_slave_0: left allmulticast mode [ 449.493392][ T5126] bridge_slave_0: left promiscuous mode [ 449.498998][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.653475][ T5126] tipc: Disabling bearer [ 449.658977][ T5126] tipc: Left network mode [ 449.666595][ T5126] veth1_macvtap: left promiscuous mode [ 449.672189][ T5126] veth0_vlan: left promiscuous mode [ 450.260833][T24902] overlayfs: failed to resolve './file0': -2 [ 450.271855][T24905] netlink: 'syz.0.8252': attribute type 4 has an invalid length. [ 450.386705][T24911] rust_binder: 192: no such ref 3 [ 450.396554][T24911] rust_binder: Read failure Err(EAGAIN) in pid:192 [ 451.224285][ T36] audit: type=1400 audit(8000000700.102:69108): avc: denied { ioctl } for pid=24952 comm="syz.0.8269" path="socket:[88364]" dev="sockfs" ino=88364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 451.532702][T24961] overlayfs: failed to resolve './file0': -2 [ 451.553757][ T36] audit: type=1400 audit(8000000700.432:69109): avc: denied { relabelfrom } for pid=24962 comm="syz.7.8273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 451.573889][ T36] audit: type=1400 audit(8000000700.432:69110): avc: denied { relabelto } for pid=24962 comm="syz.7.8273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 452.073264][ T36] audit: type=1400 audit(8000000700.942:69111): avc: denied { setattr } for pid=23247 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.242075][T24985] overlayfs: failed to resolve './file1': -2 [ 452.375712][T24993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8285'. [ 453.268895][T25052] overlayfs: failed to resolve './file1': -2 [ 454.113772][T25064] fuse: Bad value for 'fd' [ 454.130484][ T36] audit: type=1400 audit(8000000703.002:69112): avc: denied { setattr } for pid=25063 comm="syz.0.8312" name="ptmx" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=file permissive=1 [ 455.242483][ T36] audit: type=1326 audit(8000000704.113:69113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25078 comm="syz.0.8317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef4eb8e9a9 code=0x7fc00000 [ 455.582358][T25108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8328'. [ 456.014159][T25138] overlay: ./file0 is not a directory [ 456.375027][T25164] incfs: Options parsing error. -22 [ 456.380290][T25164] incfs: mount failed -22 [ 456.394043][T25166] overlayfs: failed to clone upperpath [ 456.604251][T25187] overlayfs: failed to clone lowerpath [ 457.401746][T25199] cgroup: Bad value for 'name' [ 458.054008][T25207] batadv_slave_1: entered promiscuous mode [ 458.104337][T25207] batadv_slave_1: left promiscuous mode [ 458.113109][T25209] overlayfs: failed to clone upperpath [ 458.118979][T25207] 9pnet_fd: Insufficient options for proto=fd [ 458.193330][T25220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8369'. [ 462.412136][T25295] overlayfs: missing 'lowerdir' [ 464.573183][T25314] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.601565][T25314] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.608652][T25314] bridge_slave_0: entered allmulticast mode [ 464.631290][T25314] bridge_slave_0: entered promiscuous mode [ 464.657788][T25314] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.665006][T25314] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.681700][T25314] bridge_slave_1: entered allmulticast mode [ 464.688044][T25314] bridge_slave_1: entered promiscuous mode [ 464.806583][T25314] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.813668][T25314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.820940][T25314] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.827996][T25314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.868373][T23265] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.882062][T23265] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.900325][T23265] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.907409][T23265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.924473][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.931540][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.962451][T25314] veth0_vlan: entered promiscuous mode [ 464.975211][T25314] veth1_macvtap: entered promiscuous mode [ 465.036309][T25320] netlink: 'syz.6.8401': attribute type 27 has an invalid length. [ 465.056020][T25320] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.063269][T25320] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.491395][T25335] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 465.500145][T25335] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 465.547282][T25344] /dev/loop0: Can't lookup blockdev [ 465.752851][T25349] /dev/nbd6: Can't lookup blockdev [ 465.790904][T25354] tc_dump_action: action bad kind [ 465.796753][T25354] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 466.083475][T25362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 466.245145][T25378] netlink: 'syz.0.8421': attribute type 1 has an invalid length. [ 466.259473][T25378] netlink: 'syz.0.8421': attribute type 3 has an invalid length. [ 466.316846][T25380] overlayfs: missing 'lowerdir' [ 466.947922][ T36] audit: type=1400 audit(8000000715.814:69114): avc: denied { ioctl } for pid=25389 comm="syz.6.8426" path="/8/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 466.974200][T25390] binder: Bad value for 'max' [ 467.001924][T25392] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8427'. [ 467.035308][T25397] IPv6: NLM_F_CREATE should be specified when creating new route [ 467.122352][ T36] audit: type=1400 audit(8000000715.994:69115): avc: denied { listen } for pid=25398 comm="syz.6.8429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 467.192989][ T5126] bridge_slave_1: left allmulticast mode [ 467.198643][ T5126] bridge_slave_1: left promiscuous mode [ 467.204459][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.212090][ T5126] bridge_slave_0: left allmulticast mode [ 467.217740][ T5126] bridge_slave_0: left promiscuous mode [ 467.223617][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.243714][T25414] overlayfs: failed to clone upperpath [ 467.292102][T25403] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.299153][T25403] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.301020][T25423] overlayfs: failed to clone lowerpath [ 467.306284][T25403] bridge_slave_0: entered allmulticast mode [ 467.318031][T25403] bridge_slave_0: entered promiscuous mode [ 467.326821][T25403] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.333894][T25403] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.341025][T25403] bridge_slave_1: entered allmulticast mode [ 467.347682][T25403] bridge_slave_1: entered promiscuous mode [ 467.363213][ T5126] veth1_macvtap: left promiscuous mode [ 467.368745][ T5126] veth0_vlan: left promiscuous mode [ 467.424031][T25426] overlayfs: missing 'workdir' [ 467.460099][T25430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8440'. [ 467.477234][T25403] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.484298][T25403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.491571][T25403] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.498592][T25403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.517916][T23265] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.525130][T23265] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.534227][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.541282][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.550056][T23265] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.557152][T23265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.579599][T25403] veth0_vlan: entered promiscuous mode [ 467.592638][T25403] veth1_macvtap: entered promiscuous mode [ 467.618893][T25434] cgroup: Bad value for 'name' [ 467.911226][ T318] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 468.055156][T25452] overlayfs: missing 'workdir' [ 468.072206][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.083968][ T318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.097796][ T318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 468.111174][ T318] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 468.130782][ T318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.132927][T25458] overlayfs: failed to resolve './file0': -2 [ 468.147112][ T318] usb 6-1: config 0 descriptor?? [ 468.292265][T25475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=25475 comm=syz.6.8455 [ 468.451682][T25510] fuse: Bad value for 'fd' [ 468.502910][ T36] audit: type=1400 audit(8000000717.374:69116): avc: denied { create } for pid=25516 comm="syz.6.8466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 468.562295][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.571188][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.578615][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.586105][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.595210][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.602667][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.610057][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.617534][ T318] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 468.626905][ T318] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 468.645956][ T318] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 468.730605][T25544] overlayfs: failed to clone upperpath [ 469.074448][ T5610] usb 6-1: USB disconnect, device number 3 [ 469.103551][T25578] 9pnet_fd: Insufficient options for proto=fd [ 469.134463][T25584] overlayfs: failed to clone upperpath [ 469.165249][T25588] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 469.205270][T25595] netlink: 'syz.6.8491': attribute type 27 has an invalid length. [ 469.435814][T25612] No source specified [ 469.440025][T25614] fuse: Bad value for 'fd' [ 469.457441][T25617] overlayfs: failed to clone lowerpath [ 469.475638][T25619] sock: sock_timestamping_bind_phc: sock not bind to device [ 469.764041][T25645] netlink: 'syz.5.8508': attribute type 4 has an invalid length. [ 469.771973][T25645] netlink: 'syz.5.8508': attribute type 5 has an invalid length. [ 469.779819][T25645] netlink: 'syz.5.8508': attribute type 1 has an invalid length. [ 469.780145][T25647] overlay: Unknown parameter 'uid' [ 469.789267][ T36] audit: type=1400 audit(8000000718.664:69117): avc: denied { mounton } for pid=25644 comm="syz.5.8508" path="/3/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 469.816549][T25645] 9pnet_fd: Insufficient options for proto=fd [ 469.832350][ T36] audit: type=1400 audit(8000000718.704:69118): avc: denied { unmount } for pid=25403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 469.928551][T25674] Invalid ELF header len 16 [ 469.938319][T25671] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.938738][T25672] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.945332][T25671] rust_binder: Write failure EINVAL in pid:18 [ 469.951980][T25671] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 470.138222][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.144472][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.150615][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.156819][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.163012][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.169268][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.175636][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.181883][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.188030][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.194199][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.200325][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.206492][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.212635][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.218735][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.224931][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.231063][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.237162][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.243331][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.249445][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.255608][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.261845][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.267953][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.274112][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.280246][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.286430][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.292561][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.298673][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.304840][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.311010][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.317196][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.323330][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.329479][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.335683][T25692] 9pnet_fd: Insufficient options for proto=fd [ 470.351153][T25695] incfs: Options parsing error. -22 [ 470.356401][T25695] incfs: mount failed -22 [ 470.541921][T25719] overlayfs: failed to clone upperpath [ 470.653531][T25750] overlayfs: failed to clone upperpath [ 470.747422][T25775] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.8554'. [ 470.813763][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8558'. [ 470.851050][T25789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.851243][T25789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 470.858185][T25789] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 470.881940][T25795] netlink: 1100 bytes leftover after parsing attributes in process `syz.6.8562'. [ 471.000784][T25809] overlayfs: failed to clone upperpath [ 471.080190][T25821] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.106670][T25827] /dev/rnullb0: Can't open blockdev [ 471.134275][T25829] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.206152][T25835] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.213446][T25835] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 471.226985][T25835] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 471.510832][ T5599] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 471.598452][T25848] overlayfs: failed to clone upperpath [ 471.660716][ T5599] usb 6-1: Using ep0 maxpacket: 32 [ 471.667612][ T5599] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 86, changing to 10 [ 471.678586][ T5599] usb 6-1: config 1 interface 0 has no altsetting 0 [ 471.686504][ T5599] usb 6-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 471.695724][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.703727][ T5599] usb 6-1: Product: ⼨釵ड़舍䢉ｮ鴬ﳠ礨契ῦ榳᫇ⓚ蕬㛞̆㳱磟ቃﺈ锏䃍Ჷ▉賓䐆䛵룰 [ 471.715121][ T5599] usb 6-1: Manufacturer: ࡠ [ 471.719712][ T5599] usb 6-1: SerialNumber: 籮뢅鎕魽瘝鬾㚲痧㤚黚꟰睨떎蜴펫形鱌ᥐ찧梐溕젬懇ࢌ纰谓柀緭䉟ᬢ㩞ꄑ鰫꼽䔠谇猞ꉓ↝沕侯ꁪቜ݂能䔸즃ꥉ紺詒籉 [ 472.082648][ T5599] usbhid 6-1:1.0: can't add hid device: -71 [ 472.093996][ T5599] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 472.105851][ T5599] usb 6-1: USB disconnect, device number 4 [ 472.129618][T25866] rust_binder: Write failure EFAULT in pid:62 [ 472.138442][T25870] rust_binder: 66: no such ref 1 [ 472.149529][T25870] rust_binder: 66: no such ref 2 [ 472.188935][T25871] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 472.454543][T25887] fuse: Bad value for 'fd' [ 472.588248][T25892] cgroup: Bad value for 'name' [ 472.617802][T25885] __vm_enough_memory: pid: 25885, comm: syz.5.8595, bytes: 8589934592 not enough memory for the allocation [ 472.641860][T25895] /dev/rnullb0: Can't open blockdev [ 473.185598][T25925] tipc: Enabling of bearer rejected, media not registered [ 473.194672][T25925] 9pnet_fd: Insufficient options for proto=fd [ 473.247791][T25939] cgroup: Bad value for 'name' [ 473.247870][T25940] cgroup: Bad value for 'name' [ 473.718577][T25966] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.718967][T25966] rust_binder: Error while translating object. [ 473.725512][T25966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 473.731743][T25966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 473.764658][T25968] input: syz1 as /devices/virtual/input/input23 [ 474.457409][T25999] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8637'. [ 474.683979][T26020] netlink: 'syz.0.8644': attribute type 4 has an invalid length. [ 474.696943][T26022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8645'. [ 474.767545][T26032] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 474.769190][T26034] rust_binder: Error in use_page_slow: ESRCH [ 474.775643][T26034] rust_binder: use_range failure ESRCH [ 474.781995][T26034] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 474.787455][T26034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 474.795492][T26034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:141 [ 474.936625][T26044] 9pnet_fd: Insufficient options for proto=fd [ 474.990297][ T36] audit: type=1326 audit(8000000723.855:69119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25859 comm="syz.6.8587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de18e9a9 code=0x7fc00000 [ 474.998299][T26046] cgroup: Bad value for 'name' [ 475.313812][T26055] overlayfs: failed to clone upperpath [ 475.328459][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8656'. [ 475.337414][T26057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8656'. [ 475.370654][T26065] overlayfs: failed to resolve './file0': -2 [ 475.386531][T26067] overlay: Unknown parameter 'uid>00000000000000000000' [ 475.518414][T26081] overlayfs: failed to clone upperpath [ 475.546668][T26087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8668'. [ 475.624558][T26095] 9pnet_fd: Insufficient options for proto=fd [ 475.651055][T26101] cgroup: Bad value for 'name' [ 475.789168][T26111] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.789390][T26110] rust_binder: Error in use_page_slow: ESRCH [ 475.795857][T26110] rust_binder: use_range failure ESRCH [ 475.801913][T26110] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 475.807367][T26110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 475.815080][T26110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:161 [ 475.881123][T26116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 475.881942][ T36] audit: type=1400 audit(8000000724.755:69120): avc: denied { shutdown } for pid=26115 comm="syz.5.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.956378][ T36] audit: type=1326 audit(8000000724.825:69121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 475.980048][ T36] audit: type=1326 audit(8000000724.825:69122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.003685][ T36] audit: type=1326 audit(8000000724.825:69123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.027304][ T36] audit: type=1326 audit(8000000724.885:69124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.050974][ T36] audit: type=1326 audit(8000000724.885:69125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.074751][ T36] audit: type=1326 audit(8000000724.885:69126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.098354][ T36] audit: type=1326 audit(8000000724.885:69127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.110949][T26128] overlayfs: failed to clone upperpath [ 476.122054][ T36] audit: type=1326 audit(8000000724.885:69128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26122 comm="syz.5.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd14578e9a9 code=0x7ffc0000 [ 476.211046][T26143] bpf: Bad value for 'mode' [ 476.248039][T26147] netlink: 165 bytes leftover after parsing attributes in process `syz.3.8688'. [ 476.290077][T26158] overlayfs: failed to clone upperpath [ 476.390251][T26168] 9pnet_fd: Insufficient options for proto=fd [ 476.900980][T26200] binder: Unknown parameter '0xffffffffffffffff' [ 476.939209][T26203] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.011447][T26195] tipc: Enabling of bearer rejected, failed to enable media [ 477.044762][T26210] netlink: 'syz.0.8712': attribute type 27 has an invalid length. [ 477.118351][T26233] cgroup: Invalid name [ 477.162962][T26243] rust_binder: Read failure Err(EAGAIN) in pid:198 [ 477.184216][T26249] tipc: Started in network mode [ 477.195581][T26249] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 477.204435][T26249] tipc: Enabling of bearer rejected, failed to enable media [ 477.229608][T26254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8725'. [ 477.249930][T26260] overlayfs: failed to clone upperpath [ 477.280683][T26269] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.283080][T26269] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 477.299824][T26274] overlay: Unknown parameter 'subj_role' [ 477.317173][T26276] overlayfs: failed to resolve './file0': -2 [ 477.336301][T26284] cgroup: Bad value for 'name' [ 477.877736][T26303] netlink: 'syz.6.8745': attribute type 32 has an invalid length. [ 478.015636][T26330] 9pnet_fd: Insufficient options for proto=fd [ 478.380720][T26369] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8767'. [ 478.401799][T26369] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 478.678301][T26396] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.718664][T26405] rust_binder: Read failure Err(EAGAIN) in pid:248 [ 478.790396][T26409] /dev/rnullb0: Can't open blockdev [ 478.887151][T26411] /dev/rnullb0: Can't open blockdev [ 479.079619][T26450] overlayfs: failed to clone upperpath [ 479.231191][T26478] cgroup: Bad value for 'name' [ 479.312020][T26482] : renamed from bridge0 (while UP) [ 479.330746][T26486] overlayfs: failed to clone upperpath [ 479.861373][T26513] overlayfs: failed to clone upperpath [ 479.885907][T26517] cgroup: Bad value for 'name' [ 480.404204][T26537] overlayfs: failed to clone upperpath [ 480.755040][T26546] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8825'. [ 480.763997][T26546] 0{X: renamed from gretap0 [ 480.769427][T26546] 0{X: entered allmulticast mode [ 480.774859][T26546] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 480.820536][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 480.820552][ T36] audit: type=1400 audit(8000000731.695:69144): avc: denied { lock } for pid=26549 comm="syz.5.8827" path="socket:[93324]" dev="sockfs" ino=93324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 481.436921][ T36] audit: type=1326 audit(8000000732.305:69145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.8835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef4eb8e9a9 code=0x0 [ 482.217235][T26595] overlay: Unknown parameter 'posixacl' [ 482.231470][T26597] overlayfs: failed to clone upperpath [ 482.252766][T26600] netlink: 'syz.5.8846': attribute type 4 has an invalid length. [ 507.336228][T26638] overlayfs: missing 'lowerdir' [ 507.937676][T26687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8870'. [ 507.965355][T26687] netlink: 'syz.3.8870': attribute type 3 has an invalid length. [ 508.080824][T26703] overlayfs: failed to clone upperpath [ 508.127020][T26709] netlink: 'syz.0.8882': attribute type 1 has an invalid length. [ 508.419226][T26738] overlayfs: failed to clone upperpath [ 508.433067][T26740] overlayfs: failed to clone upperpath [ 508.455713][T26747] netlink: 1351 bytes leftover after parsing attributes in process `syz.5.8895'. [ 508.479931][T26751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8897'. [ 508.655545][T26770] x_tables: duplicate underflow at hook 4 [ 508.678813][T26776] overlayfs: failed to clone upperpath [ 508.714854][T26785] 9p filesystem being mounted at /524/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 509.338176][T26811] cgroup: Bad value for 'name' [ 509.349574][T26816] cgroup: Invalid name [ 510.633508][T26867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32522 sclass=netlink_route_socket pid=26867 comm=syz.0.8938 [ 511.092494][T26899] overlayfs: failed to clone upperpath [ 511.112936][T26903] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 511.125802][T26903] 9pnet_fd: Insufficient options for proto=fd [ 511.708117][T26936] overlayfs: failed to resolve './file2': -2 [ 511.775676][ T36] audit: type=1400 audit(8000000762.645:69146): avc: denied { sys_resource } for pid=26947 comm="syz.3.8967" capability=24 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 511.908693][T26971] cgroup: Bad value for 'name' [ 512.780521][ T37] INFO: task syz.9.6999:21166 blocked for more than 122 seconds. [ 512.788277][ T37] Not tainted 6.12.30-syzkaller-gfc2476d0896a #0 [ 512.795322][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.804108][ T37] task:syz.9.6999 state:D stack:0 pid:21166 tgid:21163 ppid:20973 flags:0x00004006 [ 512.814423][ T37] Call Trace: [ 512.817699][ T37] [ 512.820783][ T37] __schedule+0x132b/0x1e00 [ 512.825297][ T37] ? __sched_text_start+0x10/0x10 [ 512.830478][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 512.835940][ T37] ? _raw_spin_unlock+0x45/0x60 [ 512.840961][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 512.846773][ T37] schedule+0xc6/0x240 [ 512.851029][ T37] __fuse_simple_request+0xdb1/0x1980 [ 512.856413][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 512.862395][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 512.868470][ T37] ? __kasan_check_write+0x18/0x20 [ 512.873733][ T37] ? _raw_spin_lock+0x8c/0x120 [ 512.878500][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 512.883852][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 512.889929][ T37] ? fuse_lock_owner_id+0x154/0x190 [ 512.895299][ T37] fuse_flush+0x909/0x1d50 [ 512.899722][ T37] ? arch_stack_walk+0x10b/0x170 [ 512.904816][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 512.909668][ T37] ? stack_trace_save+0x9d/0xe0 [ 512.914681][ T37] ? stack_depot_save_flags+0x38/0x800 [ 512.920263][ T37] ? x64_sys_call+0x1686/0x2ee0 [ 512.925119][ T37] ? do_syscall_64+0x58/0xf0 [ 512.929708][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 512.935990][ T37] ? __kasan_check_write+0x18/0x20 [ 512.941261][ T37] ? task_work_add+0x258/0x3f0 [ 512.946032][ T37] ? __cfi_task_work_add+0x10/0x10 [ 512.951315][ T37] ? __kasan_check_write+0x18/0x20 [ 512.956431][ T37] ? _raw_spin_lock+0x8c/0x120 [ 512.961369][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 512.966574][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 512.971622][ T37] filp_close+0xbd/0x160 [ 512.975873][ T37] __close_range+0x50e/0x6c0 [ 512.980649][ T37] ? __cfi___close_range+0x10/0x10 [ 512.985771][ T37] ? __secure_computing+0xef/0x2b0 [ 512.991056][ T37] __x64_sys_close_range+0x7e/0x90 [ 512.996178][ T37] x64_sys_call+0x1686/0x2ee0 [ 513.001010][ T37] do_syscall_64+0x58/0xf0 [ 513.005427][ T37] ? clear_bhb_loop+0x50/0xa0 [ 513.010283][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 513.016184][ T37] RIP: 0033:0x7fa08c18e9a9 [ 513.020795][ T37] RSP: 002b:00007fa08cf8d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 513.029211][ T37] RAX: ffffffffffffffda RBX: 00007fa08c3b6080 RCX: 00007fa08c18e9a9 [ 513.037373][ T37] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 513.045458][ T37] RBP: 00007fa08c210d69 R08: 0000000000000000 R09: 0000000000000000 [ 513.053655][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.061730][ T37] R13: 0000000000000000 R14: 00007fa08c3b6080 R15: 00007ffefcf70ea8 [ 513.069700][ T37] [ 513.072950][ T37] NMI backtrace for cpu 1 [ 513.072967][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-gfc2476d0896a #0 e1e9364838a23ddd1cd40ddd4d9250930b5d8506 [ 513.072995][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.073008][ T37] Call Trace: [ 513.073015][ T37] [ 513.073023][ T37] __dump_stack+0x21/0x30 [ 513.073050][ T37] dump_stack_lvl+0x10c/0x190 [ 513.073073][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 513.073098][ T37] dump_stack+0x19/0x20 [ 513.073120][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 513.073142][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 513.073163][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 513.073189][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 513.073209][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.073236][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.073264][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 513.073299][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 513.073329][ T37] watchdog+0xd8f/0xed0 [ 513.073352][ T37] ? __cfi_watchdog+0x10/0x10 [ 513.073371][ T37] ? __kasan_check_read+0x15/0x20 [ 513.073392][ T37] ? __kthread_parkme+0x138/0x180 [ 513.073414][ T37] ? schedule+0xc6/0x240 [ 513.073434][ T37] kthread+0x2c7/0x370 [ 513.073450][ T37] ? __cfi_watchdog+0x10/0x10 [ 513.073470][ T37] ? __cfi_kthread+0x10/0x10 [ 513.073486][ T37] ret_from_fork+0x64/0xa0 [ 513.073508][ T37] ? __cfi_kthread+0x10/0x10 [ 513.073524][ T37] ret_from_fork_asm+0x1a/0x30 [ 513.073551][ T37] [ 513.073560][ T37] Sending NMI from CPU 1 to CPUs 0: [ 513.228386][ C0] NMI backtrace for cpu 0 [ 513.228398][ C0] CPU: 0 UID: 0 PID: 27007 Comm: syz.6.8981 Not tainted 6.12.30-syzkaller-gfc2476d0896a #0 e1e9364838a23ddd1cd40ddd4d9250930b5d8506 [ 513.228425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 513.228435][ C0] RIP: 0010:kasan_check_range+0x15/0x2a0 [ 513.228456][ C0] Code: cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 c4 01 00 00 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 68 02 00 00 49 89 [ 513.228470][ C0] RSP: 0018:ffffc90000eaf5d8 EFLAGS: 00000202 [ 513.228484][ C0] RAX: f3f3f304f1f1f101 RBX: ffff8881335832bc RCX: ffffffff8587c9df [ 513.228497][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff8881335832bc [ 513.228508][ C0] RBP: ffffc90000eaf5e0 R08: 0000000000000003 R09: 0000000000000004 [ 513.228519][ C0] R10: dffffc0000000000 R11: fffff520001d5ec4 R12: 1ffff920001d5ec0 [ 513.228531][ C0] R13: 1ffff110236e7126 R14: ffffc90000eaf620 R15: dffffc0000000000 [ 513.228543][ C0] FS: 00007f34def5c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 513.228557][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.228569][ C0] CR2: 00007ffcab1bbd08 CR3: 000000014a652000 CR4: 00000000003526b0 [ 513.228584][ C0] Call Trace: [ 513.228590][ C0] [ 513.228597][ C0] __kasan_check_write+0x18/0x20 [ 513.228616][ C0] _raw_spin_lock+0x7f/0x120 [ 513.228632][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 513.228648][ C0] ? unix_stream_read_actor+0x7f/0xd0 [ 513.228670][ C0] unix_stream_read_generic+0xcd2/0x22d0 [ 513.228695][ C0] ? unix_stream_read_actor+0xd0/0xd0 [ 513.228716][ C0] ? __schedule+0x1333/0x1e00 [ 513.228733][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 513.228756][ C0] ? selinux_socket_recvmsg+0x284/0x380 [ 513.228777][ C0] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 513.228796][ C0] unix_stream_recvmsg+0x16c/0x1c0 [ 513.228818][ C0] ? __cfi_unix_stream_recvmsg+0x10/0x10 [ 513.228840][ C0] ? __cfi_unix_stream_read_actor+0x10/0x10 [ 513.228863][ C0] ? bpf_lsm_socket_recvmsg+0xd/0x20 [ 513.228878][ C0] ? security_socket_recvmsg+0x3a/0xf0 [ 513.228898][ C0] ? __cfi_unix_stream_recvmsg+0x10/0x10 [ 513.228920][ C0] sock_recvmsg+0x219/0x270 [ 513.228935][ C0] ____sys_recvmsg+0x1ca/0x460 [ 513.228956][ C0] ? __sys_recvmsg_sock+0x60/0x60 [ 513.228976][ C0] ? import_iovec+0x81/0xb0 [ 513.228991][ C0] ___sys_recvmsg+0x1b6/0x510 [ 513.229011][ C0] ? __sys_recvmsg+0x280/0x280 [ 513.229030][ C0] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 513.229048][ C0] ? __fget_files+0x2c5/0x340 [ 513.229071][ C0] __x64_sys_recvmsg+0x1e8/0x2c0 [ 513.229091][ C0] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 513.229112][ C0] ? __kasan_check_write+0x18/0x20 [ 513.229130][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 513.229145][ C0] ? switch_fpu_return+0x12/0x20 [ 513.229161][ C0] x64_sys_call+0xdb5/0x2ee0 [ 513.229181][ C0] do_syscall_64+0x58/0xf0 [ 513.229197][ C0] ? clear_bhb_loop+0x50/0xa0 [ 513.229217][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 513.229236][ C0] RIP: 0033:0x7f34de18e9a9 [ 513.229249][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.229262][ C0] RSP: 002b:00007f34def5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 513.229278][ C0] RAX: ffffffffffffffda RBX: 00007f34de3b5fa0 RCX: 00007f34de18e9a9 [ 513.229290][ C0] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000004 [ 513.229301][ C0] RBP: 00007f34de210d69 R08: 0000000000000000 R09: 0000000000000000 [ 513.229312][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.229322][ C0] R13: 0000000000000000 R14: 00007f34de3b5fa0 R15: 00007fff99c32bc8 [ 513.229335][ C0] [ 514.531062][ T36] audit: type=1326 audit(8000000765.405:69147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26924 comm="syz.5.8959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd14578e9a9 code=0x7fc00000