last executing test programs: 5m48.592601795s ago: executing program 32 (id=319): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000140)={0x14}, 0x14) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x3, 0x7, 0x7, 0x0, "f799dbc24035b8d8ec5187f930117216a64c16948c62b6996d945a73dcfd12fa"}) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "0fde6126"}]}}, 0x0}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) 5m35.228809887s ago: executing program 1 (id=608): symlink(&(0x7f0000000040)='./file0\x00', 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x147342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 5m34.427908272s ago: executing program 1 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x60}, 0x20000000) 5m34.348634624s ago: executing program 1 (id=632): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(r0, r0, 0x0, 0xd) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/custom0\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x57, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r6) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={0x2c, r7, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000040}, 0x24004084) (async) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f0000000080)={0xe001, 0x184000}) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000180)={0x1, 'dummy0\x00'}, 0x18) (async) sendmmsg(r2, &(0x7f0000000240), 0x0, 0x44840) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="2c6f3d00000000e8d8050000000000000084702383645eadce53103f31c2e8e22ae18313dfaf6d24d89c741f2d01", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 5m34.317641405s ago: executing program 1 (id=633): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) personality(0x5400004) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000580)='ns/ipc\x00') mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x120000, &(0x7f0000000400)={[{@readahead}, {@rlog_pages={'rlog_pages', 0x3d, 0xc}}, {@rlog_pages={'rlog_pages', 0x3d, 0x5}}, {@rlog_pages={'rlog_pages', 0x3d, 0xdaf}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x1}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@fsname={'fsname', 0x3d, 'ns/ipc\x00'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role', 0x3d, 'mountinfo\x00'}}]}) setreuid(r1, r1) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 5m34.277958175s ago: executing program 1 (id=634): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000400)=@ethtool_cmd={0x4d, 0x2, 0xffbf, 0xffff, 0x7, 0x6, 0x40, 0x80, 0x5, 0xb4, 0x5, 0x81, 0x6, 0x2c, 0x40, 0x8, [0x8, 0xc]}}) prctl$PR_SET_SECCOMP(0xe, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x7d}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a000000000c0000000c00008008"], 0x20}}, 0x40816) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1, 0xf, 0xd3, 0x3}, {0x1000, 0x6, 0xb, 0xfffffffb}, {0xbe8e, 0xdb, 0xb5, 0xfffffe01}, {0x1, 0x0, 0x1, 0x6}, {0x2, 0xfd, 0x81, 0x5}, {0x1, 0x7, 0x64}]}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 5m34.164483398s ago: executing program 1 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000140)={0x1, 0x0, 0x9, 0xff, 0x2d9a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 5m34.162101617s ago: executing program 33 (id=635): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000140)={0x1, 0x0, 0x9, 0xff, 0x2d9a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xffffffffffffff8b, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x2, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x138}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 4m4.06672136s ago: executing program 3 (id=2424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x1002, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m4.002995711s ago: executing program 3 (id=2425): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="3b2870e850238bc7845f688246c7bec46c1abe7a65948a32577ee23e16b770cafd550e52053bc3083cc0a19d2669fe90d34e14b5d3bb9f9915bdcc7c58ca29b90c937df5fbafda37a71dafb6eec650122a731126bf09845cee7abb15d92345c6028c1d7c0c4bd07d1146a5eb404fa80e41804551844a0a7c404712e46dab19c568dee57844a42c14e3af19bc41486a42cae5a8a17083fcdd40d87994f96dc2ab9531d4cef0b0dac14f42b3450fec7920a200de4b0530c812996846f1"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x81, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', r4, 0x29, 0x7, 0x3, 0x7, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x7800, 0x400, 0x6435b98f}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x29, 0x2, 0x0, 0x2, 0x1b, @mcast1, @local, 0x8, 0x700, 0x3, 0x2}}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x18, r10, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) (async) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) syz_io_uring_complete(0x0) r11 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r13 = dup(r11) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r13, @ANYBLOB="2c61636365737304426c69656e742c6b"]) 4m1.021296967s ago: executing program 3 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x64000600) r1 = syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2503000000180001801400020077673000000000801d00000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r4 = fsopen(&(0x7f0000000580)='tracefs\x00', 0x0) r5 = fcntl$dupfd(r4, 0x404, r4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000000)=ANY=[]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'batadv0\x00', 0x2}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="ea47eb8159414943ab27634e5951fc6ee89df0c847c62a751213f4d2fc9b199303cae1353c1c037908f0722893ed124b9991c538353d1ab7625d5fc818021e6cebc00111ddcd11f4186d4d6b7600a0060762f6edafc0ab171b43e364c966203530f3a4d1df2da2d057c7e7b26f95cc7ab1ccde8675d07c34c85ffa4eab808a1a34cc7626146431978a569673e6ef88d83655cfd0175bb16ceda66b2f66ca35d313cf08738b5b2ebd73275144844449dc7703b987e6e1e562612aab5921a4af0610bcced886171be12d"], 0xffe) getuid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x8, 0x0, 0x0, 0x0) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$selinux_user(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x32) 4m0.939818548s ago: executing program 3 (id=2451): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000000c0)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0x5, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0xa0c, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000540)={0xa00, 0x87, 0x15}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000540)={0xa00, 0x87, 0x15}, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000180)) (async) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0102fcdbdf250c000008042003801800819e26c099beab8301801400020076659eaa78faf0f8c7087468315fb8db616e0000000000005de5fb78faf1219e81ea9ee0bfb634739100dcb580cd98f499ed73fbaf573c1be6ad358769855d81f23615fc5756904b12ca4b79965a11fe7259885600000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) 4m0.85667051s ago: executing program 3 (id=2452): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x59d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x20}, 0xffffff97}], 0x1, 0xf00) 4m0.821011161s ago: executing program 3 (id=2453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) close(0x3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4m0.787746361s ago: executing program 34 (id=2453): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) close(0x3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3m56.048727571s ago: executing program 2 (id=2512): r0 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff07, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 3m56.046952561s ago: executing program 2 (id=2513): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="f1d75b3d0b5f829538ccdfa01ff0c5cde5666db923bf454458c0f8f2902f3ea5fa75dee0f9e162c2e001c281da3ae6a7cdbee2e7b533aee7b8da7ea092a484733f990987c9fc0dca2df3fae188c4302c4c02046bb745523cc1127f91834065c67060caeaaf1291f7bd7534e6cfc30251ac69f99643ba64586b1f2566d6180ed48089dd4e264179ddc537f4ef8071a56860fdecf726939ed6ed6dec8ecb03676e624be8336d947ad526c65967d41983fe644877d6acc19fdef51d181ad230e1bc54f93cbecfd2f682961804304fac954b1d24d7c0b503761e27e9ee29e6691b02c53ce1465235833dfc334c15b49af5a74151c1b1f6524ffe46d877586654d967f8e244bac7aefc1166117a3ca118e9870bd68c4e07f3fef574f6b4b6e7fbff344cdc88508465603fa04b87a983ddf1fcd64004729d407ceba71cb44be23b53de3e3146fe41939a1cf946e771386dc664da398472dda5ccf00aef8c29e2632571302e59d6d9e8bd3af0228d7deccf08cb165a76b62ba38356e2be120b3b5b228880afda8f440003c25e594795b09c7dee05d1352a387a111397cc4409adcd1036c28d557d65649c473a5cb131703fa9fc2adca9e0be4e3443e9836451f2a205a59abc7f3c7e0bf31e6d2a6a56c8868bca4bcd3579d1d1eb6f7e806371a580102f27e6ab9449db0fa63ba8602c22c44f7589fac931504f57f2983534805bed02453efe316381f7b62c32acf41a1b19ed3ea30f91fc01bd8c97fef4ae33f7494e1c1959abc7602f208728602d4f2b5c0e2788a24b17ac2527e50a97ba1697910dacfe03d0755b86bc7a482cddd713cf6d70dd1a02b8797b43f7fda38e7d64ffecb83b36778fd1603b04bdea90ac1aa7310bd89ee87c951f2c15fae8141ead2b750340f53b6f988d656457a540ed452102f04663968fc3f3e7bb9cddfad93a3410bc880e59fe2746453f0792aeccceddf95c38c7f80cc2b8a15e5ab9ee3472d5061a5cf4c658f25045f1b91e693414f4f4b20f9352c3f6e2645f3e9390416fd75a0c54281b5bbb4baeb0a67370e4e34be9702d13ddd228e7b1fc1427372c308a32b1c1722d36c5ca257db8f29c0999deec678eb6d4de2421d6ac494bc7c64bfdd54238e0ce60cef83f23af0225fddf8c956b41f11960cbd74e4770178a14b9465ed4646ae89e4d2f63241856ad6fb08c384efebfb4c6c7aa840352c085432bed36655222d4ca67768daa0877df2f954d86f78fc8847f83d055affb72a078a819db7de760ee6ce2f65fcd60829298fc9f284b444468d9b014790d800cf12328990041228d62d8235d10e101844e33470199eaf60c8037a4f437502e94bb9030f44f298a919dd2f47ff39180e737da037ba01c75d2abf1fc75a628afcb29a48f377d7461e92397c3f9a4c3b9852941ddecc660de895354d6cc5f457cea7d1db2f381acfe82914337c42feb59c559a76bd9875c8d6a52eb85f90e0f011d438eab9f8487230ef252ea183f43d6b3a18f4dd6c7210f6e5a9f31ba67bea31374cb7eefbcbc52ed85623cda7d89f0d143add808bce8ce2e9b38eda421fb594dd7085db3d1774c302336bd7ed7b6af47dba05d192cda75e41ed587f40d8b9fb6abd679e46a9f513a90e4aea3577e1029c1ccd4b641641f33789a920adb69641b98292a094c264e14b9c35f6c8fc1395de404f2950ade5b2546db5467540d858f01b23233bad5216d9c5297dff9f43bbf40d537610027c7730e33f12195ed7a9506e406797ee112b042437e61d9fecdefb96fc59228c3d7f879e68babb540a0b35f6376eda94e6e37877a9a1c0b66d72ab74cfaab50b973f68f53fbd82389a547f9cb7d72f4e35154c3453ccbeac72d6a5158839f51941b76d1e9354e777ed667f41066a8e31c492bca15ebe06a0e3213f858166760e9cf2fbfae4aeed691b027fd74370aba7d5bfb6460031322daeef55671e74a1b602d210e4857932a2001770e269e325b64ba4345edcdc717bd8ec5b48b630e50ab916a9b5bbbfcebc8959a3d7b13", 0x59d}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00'], 0x20}}], 0x1, 0xffd) 3m56.046761981s ago: executing program 2 (id=2514): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x60) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6e74657874ccf0d4f05b379200ee000000000000000007c92e93c31fddfe210a7dce7f4826"]) 3m56.027648821s ago: executing program 2 (id=2516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/37, 0x25}], 0x1}}], 0x1, 0x400120a0, 0x0) sendmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501e, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000240)={0xa8, 0x0, 0x3}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x7c1a80, 0x0) ioctl$TIOCCONS(r3, 0x541d) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) 3m55.814269355s ago: executing program 2 (id=2517): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000000)={0x5e, 0x2, 0x2, 0x81, 0x0, [@loopback]}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x2040, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/237, &(0x7f0000000080)=0xed) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x4, 0xfd, 0x81, 0x2}, {0x3, 0x2, 0x3, 0xe78}, {0x2, 0x2, 0x6, 0x8}, {0x2, 0x18, 0xe0, 0xffff7fff}, {0x8, 0x4, 0x9, 0x5}]}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) 3m55.688709428s ago: executing program 2 (id=2518): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 3m55.688443268s ago: executing program 35 (id=2518): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffff1) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0xffffffffffffffff, 0xee00) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0xa03c0000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 3m4.796745619s ago: executing program 5 (id=3294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48041) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) setuid(0xee01) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) 3m4.796576799s ago: executing program 5 (id=3295): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00003f1000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m4.656560832s ago: executing program 5 (id=3300): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r1, 0x0, 0xab4, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b"], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de98000040"]) close_range(r2, 0xffffffffffffffff, 0x0) 3m4.012711374s ago: executing program 5 (id=3321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa9501a, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r1, 0xfffffffffffffc01, 0x0) tee(r0, r1, 0x60000000000, 0x0) openat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x4000, 0x85) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 3m3.207998599s ago: executing program 5 (id=3327): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) syz_clone3(&(0x7f00000005c0)={0xc2140000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)=ANY=[@ANYBLOB="6405745e8e8c7c0267"]) 3m2.910630305s ago: executing program 5 (id=3330): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x31, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000040)=0x888b, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m2.866385976s ago: executing program 36 (id=3330): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xffff1000, 0xe, 0xf0, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x4000, 0xa, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0x3000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x5, 0x8, 0x2, 0x6, 0x5}, {0x8000000, 0x5000, 0x8, 0xfc, 0x1, 0x46, 0x2, 0x11, 0x6, 0x70, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0xf9, 0x5, 0x44, 0xe, 0xc}, {0x2, 0xeeee8000, 0xe, 0x7, 0x3, 0xa1, 0x1, 0xff, 0x4, 0x80, 0x1, 0xf8}, {0x6000, 0xf000, 0x6, 0x9d, 0x3, 0x0, 0xe, 0xb, 0x5, 0x80, 0x0, 0x78}, {0xffff1000, 0x8000000, 0x10, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x8080000, 0x6}, {0x2, 0x6}, 0x40010000, 0x0, 0x5000, 0x300, 0xb, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x3, 0x5, 0xc5]}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0x31, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f0000000040)=0x888b, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m47.979111037s ago: executing program 6 (id=3577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) 2m47.978909627s ago: executing program 6 (id=3578): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0xfffffffffffffffa) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000100)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000003c0), 0x6) (async) writev(r1, &(0x7f0000000040), 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom1\x00', 0x801, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f00000002c0)=""/6) (async) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000000000407f04ffff0000000009040000150300000009acfcbb8c01220f000905", @ANYRESDEC=r2], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f0000000100)={0x2, 0x0, 0x200, 0xfffffffc, 0xfffffffe}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)) (async, rerun: 64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) (async, rerun: 64) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r7, &(0x7f0000000200), r8, 0x0, 0x808, 0x0) (async) setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000240)=0x3ee, 0x4) (async) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x6680, 0x0) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000380)={0x5, &(0x7f0000000300)=[{0x2}, {0xf0, 0x9}, {0x0, 0x1}, {0x101, 0x7fff}, {0x8, 0x5}]}) (async, rerun: 32) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) (rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) (async) syz_usb_disconnect(0xffffffffffffffff) sendmmsg$inet6(r9, 0x0, 0x0, 0x4001c00) (async) close_range(r2, 0xffffffffffffffff, 0x0) 2m44.957937084s ago: executing program 6 (id=3612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x801, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001d0001160000f356fc1de90007"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m44.905542155s ago: executing program 6 (id=3613): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000180)) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x74, 0x0, 0x48}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000046b000/0xd000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB='2']) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xde) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setuid(0x0) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61783d307f00000000000000303030313737b85f27bf373737372c00"]) mount$bpf(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000), 0x88c800, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r1, @ANYBLOB=',mode=00000000000000000000000,gid=', @ANYRESHEX=r2, @ANYBLOB=',uix=', @ANYRESHEX=r1, @ANYRES64, @ANYRES8=r1, @ANYBLOB=',ui~r', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 2m44.778237168s ago: executing program 6 (id=3614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = syz_clone(0x101000, &(0x7f0000000000)="08f931748fd99cc0d088931b2dcae1c9455996374a852b12ce7440cffe09b5918dc23372be906740ead33a578b9bdb2135a01afd110d759f8a2b8f1a8fa5d93dd33a451d0c557117fa9cb7d9c05aa12850b7bfef8678ff27abe5e5e4a90ffd9c2f83ca68edf93ed430c9e7350d08bccdd5ce92c5c996b9e0dbab", 0x7a, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000400)="bea0a76998706c83df93f71500b5a2076d8dfe734488985977da605c0f6966bd2f8cf01cd63871c1240d461d6e44e5cad1f50be44389549622d4063d1d6a203ede05ce5123ad9e2196aae5b77f070b302e3d0b3f7a8d8de7caba7ea7844a5bd57c21652ceeda907064af5ac18101b378c9c973cec1caf44f70488319b22cadac7bf6cdc4b964fad0bfae1129b6b67c7ca1bc5a41d4556502d1032cf2908cf12ebb7713cafb868fef778ee44a495ba37d15da03c605855bf0b7c5436f7f0b69938d8b5b73383000655032fde8435156801ff1c999074cb68f1068da61842d7cd177fee57cbaae64db90c2b5b8f034713404bdaad3fb6ae12f00") fcntl$setown(r3, 0x8, r5) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200039bd7000fcdbdf25010000000000000002410000001000137564703a73797a300000000080c355467d02b8d5685a55d0338de4e2706c0b8d8d4589a6a77a98c2e5762356ac78cd0cbf3813c5984429e6cc06f6ce603b355834"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xeead2e7116742c02) 2m44.523633682s ago: executing program 6 (id=3617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m44.470989553s ago: executing program 37 (id=3617): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xc, 0x81}, 0x2404c840) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 18.382149715s ago: executing program 7 (id=5590): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000440)={0x4, 0x80000001, 0x2000, 0x2000, &(0x7f0000112000/0x2000)=nil}) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$incfs(r1, &(0x7f0000000480)='.log\x00', 0xc203, 0x70) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000000), 0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r3 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x7, 0x1, 0x1, 0xdd, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x2, 0xe, 0xf6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x15, 0x3, 0x8a, 0x20}, 0x6b, &(0x7f0000000080)={0x5, 0xf, 0x6b, 0x5, [@generic={0x29, 0x10, 0x3, "afc3a6d185d7a9f437b00ad449231448ce071d201da055c3f7073440d44334da534564623fb3"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8c6b63e85b41056b4c4b25c17454ab1e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0x6, 0x7, 0xc, 0x1}, @generic={0x1b, 0x10, 0x3, "9bf9007a5132235b7b7cb227ee3755a6cf620da74216b840"}]}, 0x6, [{0xb8, &(0x7f00000001c0)=@string={0xb8, 0x3, "7e6541372d4f92f4a12a611bfd60c967b6a1854ea46690ba99b2bf4f5d62263ec1de72a06becc2f1b3c24cc8c60c34fc22bb72b5b76d0abecbb408a75456a5b127560e300a375a0bef41d10d3861ff99a727e25b41fce55d81b999eabe80a694a9c46e10ab4ccb486572806bf79a167d0cc88e362153fd87bc7153529bffc2f576eaebd7a55358fa66cffe96d6b2b01cb8370b172a493938bce45e6261098900f78a5cda2e049057680f29423814a52fc24c8b2187f5"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x140c}}, {0x75, &(0x7f0000000380)=@string={0x75, 0x3, "656e47c2521f1af8eee93bab78ca71f7dd335d9d3a125d259f1e12ac1745b7a820e2b12bc439084e57d2d87bfbfe77cd088f36e66331fd22e03904c39bd3350aa94700d1e53360206a046286a370a29acf59fe07553846f3f78567c72afdf8ab6b7997dc17f61910662d85c5f3f2951a538c04"}}, {0x2, &(0x7f0000000400)=@string={0x2}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc0a}}, {0xfe, &(0x7f0000000480)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000800)={0x14, &(0x7f0000000600)={0x20, 0x3, 0xf2, {0xf2, 0x10, "83161dde983c7ee0a84e817f0ba579bad88ad73cbb856105944d917c9a4d79d10830ae12ed4d417ca11691a52f996f6578c967423bd9833d63f0b2143aef7cb1b7e95da6a0e5043daad0c26393d975d3e8b1c278de994eff20bf1b5126bd4150baa6795e9b27dd4c5adc3e62683839530005dc5d0a9cd5f94e968873e7f543de201822ad45aa3df5c54d491f35baedec6e97b6fb03d1c3fa5e036676af26e2e2008f1e6699545c2f985f61d7059e93d4419b722b83f1200598c44cb1c67973d0542913d9e9d131d70ffed940a2f9cd3b7e79a9bdb8e544ac5276f579796cf451e7e703fd455d59e344f37e24c904af74"}}, &(0x7f0000000700)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "c285d8a155b00b62991adb0da47100b9b0d16887cffc6541aa022c4f2c5e1daf7e6fdf001252e405af161b54a7e3d64311bda8f88bd2f943c54a717c73a946ee05435a8d0843166a228b057fcb566bb49f4df46bbea4658ece4ba59741dccbc273e510a7719af49b2fffb12cbe2b11ac949ba7ef72f84dcd97fb0a482a0f78fab23939444e4b88746b8ac4f864ce14755b3dd4f8a084af298c78301a0a4651fa154a4fec74d87b40b2fded8790671f3fcb9777256e5815809ee1efb53749ea03e9cadbec412faf52d8f80406da37fe5530746e28992ad6fc0a830de539e187f68a9af763bce142938ea56f7b8f92a3db"}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000980)={0x20, 0x17, 0xbc, "76402f2cbb8089379ab95694bd4aef9d39225c35c9f2bb43f1e7451d48152b9a0221aa9aa0bb47783ca0cdeea11767c522f14342d8f7ec3fe0450ee69f20ecf350061dca2f11080aa8bf6301193b9a377ca792be584038bfeee132ce6227e7499ea30b1f043bb7cc3db4948613cebcb41f740741538e5e29f0a69a15ead73b03fbe7960d9a30f481ef939a4769033af73cfdc53b2eda4fd5f37b21e4d0038d5fa609edf898a1c4abb4bf9fa63d301977b1e636ff52f520aed76c54b5"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x87}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000900)={0x20, 0x0, 0x10, {0xe, "952f95e511e13525b72aa398e88b"}}, &(0x7f0000000a80)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000ac0)={0x20, 0x0, 0x1, 0x4}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xfffffffffffffffe, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 17.259376057s ago: executing program 7 (id=5599): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {0x10000}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0x16) 17.12330947s ago: executing program 7 (id=5603): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x8000000, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x4008) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$netlink(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000002280)={0x11d4, 0x3a, 0x400, 0x70bd25, 0x25dfdbfe, "", [@nested={0x30, 0x145, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0x17, 0xd0, 0x0, 0x0, @str='./binderfs/custom1\x00'}, @nested={0x4, 0x64}, @nested={0x4, 0x10f}, @typed={0x4, 0x7c}, @typed={0x4, 0x79}]}, @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @pid}]}, @generic="450ea2246970ec0a67e989f9f284996518e44759c1ae46345e98ae562ec04497b4f650b27c19fffdc815faeffa6dd3e4c21d3e361604512cc8e42df4b256e66ac4493472aebcf163d3fbbb1540fffd72e9b0e8405465ca454de6e738637d45a2e842fbb1330282a9935f8430f172786bd5cc86ef128ca1d3ae3a81faa44fb018638bc2a34bde7683923697c152fa13b7696e78778e710689b6139b93d02132bf02cf1253c88fb7ecc97da850ddd4179a6ebbb6992f09fb10f78630783880d1104fa368bb9bfad3cb191b44baabdbf191f92d", @nested={0x10b3, 0x4b, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @ipv4=@local}, @generic="d4864a92ed323e5c3cb163ac1efeaeb30af45dc9969a9f3da3322009d01e6909750ff0c426fc52c54246adf2f37d1079453f1533b83ec2a4950a9c51ea2b03a450262bcfc18fb974ad953a728fbcf95473add1b0c26ada917a87a0b2ce3f50df3026b2319ef6e76f9d7044511afe9ab5ad02ae979522ea6a5b31c5306c6840ef0d75de209452ee72666533e1b918ae87fa3e0ccd43daacbb8315274076e7868e06c4b9ade39c500e64fb29755978365b2197c8c9cf5f441a9cdecc41976e5908919599c427bb18d7b26ec1aa883791c077f613fc45d7a22c239ce6cac263ef2c123c29f7b9da19045e16639235e92d9a847c9d5a7e9e9df056fe83648e7f97285c3e215ae124dec94f8ff7e97cf45d3207c1d43bd243654303ecc5d7e2ed7acb18e7fcbb2437609cec0a591f39a4c29149ed082aedc834797a91c830213550495a21915185708ce99e863410869d9a75c48c73d40a154faba79388d1a417b6f5d99ca96abcf379c3a0b45460da6aefa963036cc1d4c35f575ba8d72eda13f11e4e131a92deeee399b1908f5ddfc3960134a529d57146ce0872632d48dba8131b5bde012a0c7af1b10dafde0c6e6a99dc74708903e2554a0d00c7cf25316fb83558938079b110b3a9e4e12bb228cfd2d64e337edcbfd9ef1b5a5c01202fb9290339e2ccdf8234ea2ecdf64a214bbc073fdd2a9fb4ba5d26f77ae2a89a29f73c28ad3be60bd2f52d0ff6dfb496ff224fb85b1c41f16d34ec6d813b597591cdd13149a1308ff16c726e3e13e34b085a26fb9c28369f24dfd25a6fb8247464f34f9d82dae736efb637521853ed7b7c511a05b8fa2d194ae7f3bcb93ea71e12e04d6efc0e1f610649728c5d0b3fa7d053cbc1e937663f045b301cf5c0be247e437364b953c792be2789a29d099acaaceb8d365e6446d2d1a19279a34ee27989e267e7275f74ea652bbb7c9eacd6bd05d5fd86c82c8ec495e70b6b38ad62ad4bbf4ac90327a227f9c9c5e87d4518e924cb246537062a159c9c7a0fdbaa12981b69bfdf4c2d54122eae4c55818e3dba39dd41234245b010ba2ff06d44f537c108d24b0e0396d882500a6b8af2a458021360525dc07605b56a1610c9edc3214b05582ae14ef5e068ac850c9fdb42e6e1ac228d49285c9d75679398960b25dea5aff8863837c520ef7a3de43071d34a595e928dd31a1f3565d48da68e519cb77cfa147a7743da550e3e28b1424bb127231270125430d04af1a46b8c757822e222944a1ee3a8e5f38a7764f71c274fe0f7c941d5bc52c17eb45af2a003346539bb00fc34e858efb5cb435e8a3100d85e681623582c749b337f00b4d7630f277d7ad5bbcbd62371974bb70eaaab208c0e3c173a68adcc70e876eb592120905473f2fd15ea7379529909047f352c9f6a07f15cb16af3847602c558fdb6beb9afd619624cf89c024370bc8aabe0fd1d2201a52ca2aec07f8d99bad79b176c51c2c98971cb95abf141efb6c61ec0f5ab19764a1bd72f7915ccd1a0429ca166fbdd63169bd626c62bf53b20aa51c2658d56472a62b7376362d77ada4ca0345e12196e74509aba3b0f012b085b019c9d6e0532b79e4accd59385cbc2432a95337ea426b8f1e4a25bf660603b5e17dacb895b6eea7dbb46bb0cdf85176a49bf67d44bc444eb18de579739f76e6a9245b85621e1b50d1a02ede28608ffb3371a436fa7f671486492553b94fc3ac97241346e4fce4dcda07db40e89b19ba7e72ba06cdfb18d808b9f21019302a79d74fbbf2a2b1f20de8a4c48d7bf256baa96f8d97a81e391d4c3999253f96168f01479556b8f6ddbef5fd3c1c9910705a4951718ab7fcf4c65766cb2e721b493849c8394b16aabee559631cdb11b578b53412d9b9fbeb191b3dbb67ca669de004e8ef122f439979df3dcf9680cdc05f6509abf065ac5174ffcadc53bfa3a59cae4b82b27026a1c81d4a3f87bb114b6951f6ccb8a608f513810c82b1acb74ee78484fca71766486d3db7f2dcab894d5c7cef6aee6f167011ee204f37e812cce00544e7a303b1fa422d779ecf977cd9fccfc112096540e9edbc9879245c738954628657966f496cb09e25bb8c2268585a1a656e7b95751726298ec84269a011428009e0352f04cd77ace5548f2e37f485d993e78302563e71f1c1272a4378d8b68c934c7f8b1d9e9fab52df00d2d8778611dc777897ce80a4297ba36f73260dcbe144e4138a5babbe787cd233822d098a0eca5bd14e9255ca8033f09aa1f4b245b0b896dcc06a7af0d421ecf3bf2a92f37fd054dabd1cb52faeaec79fbab7c998fa23098dc295b6b44f2ab6d44c894f53166fb247de9ccf48e4d6a4ee9bca1cb7cb3df6177a3d7d96d0f3f4140e79c153014e9b6c64ed97a21a9014559bff4b58019915b3c3c389163d51a675655fb061aa089ad8d49a993f5bd91b4fcfaa2d5fbce98ae8f9c87c53c25965d26cb92fad871be98f80a1b4fbced84b7af2286c0e4b981217115c53cef1edfa790051f187e72bf06d89db491c393adade02bdbeeb2f0def6ce520619f43a1f00552b408d3f9fe47737a0a84b325e47822ba12ac141d45efce6d84a36d8e2156e4581e4fb84a63fefad1857473c7327ef24cc25773614e864e73f08453a324f87e16a44b6cff10462e74ee93884d1dcb023345311204b765bb83b3ea7425abeae428db3823d24b949445bf8a8d0ba5e5d55667d2779ceea90d6e795ba4a257e370005132d1ebde07b003655688d48c5bce8a9c59c64bf060cab00e6776efea3695235c5ea051bd898b60154888d119a556291afc5ebd3ccb1b0f8662a6898b50d6610b138f4679a230f1eeebfd50550b1289ab90b43273c2f0e5c91ee2a3b1b4f6f44f84d8fda686713d816e31ff3125d28bdd31f6dcdecef41f742d7683c80a625adcba8eac410754bddf0e1e37ccc65c78dc086b5a4194a6cce6bb22d8e1709a8b027cb6897bc1753374aadcfc5673b0846950dfc22a992dffaefd11591bb19d3a4158211748c18894b2628624da5f4bf6ef6ad7f03b9fd14c137e4edb1c2e9deaaadb52ee8c3ffd7a146813efc91b5e1a26a71968c66f2eefe17e0309ede977f26fe1d141f8cfe79fc443dbe892e29574b2a6e39a82bad81a8e663abab1801ae91d9fc996a0cb2dd7653e0615b779e15cfcf548c35b4b5c1126c987a397edf1ef687e12ce7f7499a7cecf477d3e69fc908db2eebd4c812c6e7f85bcf15479098c5b0ea1f2ddd027ee8d7b3972c81740f63f978672036a4a44b6a79b9395b68b323c4eec0f67a7a39ea8b3894faf17ca1c783c67683739f12d3a22c0679daf2305a8899f8743d1155871d28a0b145c62c2e700b84e9b92d2d19733acbaf6cf841285f147fbb298130948cb365c23f9c45ae93c772f06b5b6a90641b62814dfa1ffffc354d647bf09dbd0c6a423534ed8b086cee898de4a9d822d71f63536ad637c59eee17d67b140a45455353578d0364a59e3532fc84733d81427f700e1110939c01f9603d0a13fb6be06a35875c3b3501a2f94810c5c4ed1c1d953b1f09ba2cc9510c79467ff810baba3d53d896d4459b1d00af1677ce3030373619f60ae6a4dc35faeccc50c9481c4f85a495d12f3a5e6214a926398803646046b13a96d3aad44efe9440b8eca6f8d3f88a548fbdfa62e9afc18ca72a72a015f3d04a07578c53ff782d10a683be00937831572a028dea65cbc034a34b6ee6754864bb00b40b247cffe6ed50cc0643fd922ddd0c95b51447cce26cab6a79736bf5efe569644a10567d8c8365b7395b7147972ee61588e085b1da66aee7be096f39f85a3fdd9db3d3d58645a437e023cfa7e4cb8f731cccd29a11c1685b0ffa175be50f7161a77927b0aabf150ebf64a9a4cc1502d07e894981fc193b1fd43350ce1cf7713ae6e3b7d1e10c109c65349d5c91ccd5ea5c963be798df386df7289aeadb317016fb44b9321f3b14f0ca746df5c0481f6231ce4a6fa21779d2712e7ffa30bc9680c0135bfc7eb5d817ff5645c1a229d9aca37928da3448f57afe13914d310933adb481431696b9d642a75f958dc6b7ead15f6881eb4df6236d6ab65b628e78e8c3c83dd485f89e372234469a0d74e6301018049de4201c91f41870bcb6cc8846c0b9790308c35de6e55504ab00f0e0610b2bcdd7cd01ff23788adb8778c17120176f10797d251778046fdc320feb3e216b0b0ebf58be4073d250545d9b5650c3d09b7be152563a4398ef9bad7c1e24abb60f3a419aa0151b809e237f0c261a0f22d07bbf96e5770ad9dce19d920450e4fd4253d1405ec5b5e8be3d5301b0fca20cb0fb8452bd14f343b33d7bee426934d4bb9a79eb2ea3af52720cf4dd03d159b3fe33c7abacad2b743e5298b4828cf8cc82630ca30c437ac5331deb81e1ace30675f486a221b3400634b850e526c7de7848d282f32c0e880772de95af84d19e8fad95636eb79dbf6b89b93bfff75fa722212a517dab31273a87948d4c480ab9dae466033124d90837edeb68470a5b464023a329c5956a8758856bf87b4bf838ee5e2b4504dea882e2781e53b8cfec74ae01d5db3ab2c963e7ebe52596caecf32c90880da5450e0d79154ee78a7863e578e5e348c3bf02a5bc0b5b919d628889f5c766b8cd1e06cc54db0f6b173a0d309703562c99fd945fc9e34b1b96ec432d81b01628588603fd960b8ee437cc3f70bfd9839695142670023ecb9861fdb3cadc4de34a23ab44b26eb71cb1c0f206a2d73d47b5c4c4e8cdffa78e20b5abf4c6dfaf3935eeaf1ce0dff9d1797d4db797409cb0dc1f815a21382ecfa32b1797dedabd0204a12e41ff537ce0d456f7a434d05df80406863070309908b46cbc8ee068367c26d03383492690cd562f7522b65c540d4138791953074b7f3999513d08fac267b9c07f6bad2fb71af9bf3335c99757e01692fb0115ec98d380e231b7af3cebd55bd4d8e9ec972e85f2997cfafc0c302e6c2dc1d70325e9d204b313bf239ff2e9eb0b20a5e7fbc1b65b817dc493b5c39e34b9cc427e572f62882c895b249fa87cd452b07698cea6155a06d50daf3990706fe698f9d54eeb68293b878f100b3bbad6eccf58be5f9eec48b786a869da178f7eeb39c6c450923728d8db02297252fdde9a3ccfc1a9e14521250690f10932817993b365059f1c4cd2297af0c3473b20039934759dd575aabde5954c6b9a7436ed3245de94716070bdd7285058320325a3b1b4b1a5ae8332bd37f8b55a62cc43203214ad497c437c4e37dc59282c51dbaf62ecba1f88c09b6460612fb651cc445ae5ce0772200d4dc97d91d1c4762cbb4ece30ba6c9fa5d4d37841d9dad1673d5306060024732cbbd13ba436d5e17334609107ca0ff11051190e0f5a0047421cae8076a8fe6d66b932a679b5b3f1e009a312624e24f675831b5719fe09257584b6861c135e83b3cbac25f3c83940c29d15b4f5a672ea9cd2f3a29f6d08f5ef837e95ef7515cabb2f89aa3f0f9e3041cf5c9df1061a9f60fd4e63e50b9a2cc87f96dc2f9b99a4f5fcdc0d683312a2205bd90097b1fb102d01849f69eaaf9dcbd2b617c0a478dca00e0cba985f28b97dbf5a9877f74d4b8e1131b0deca28957ab8ea689981b14c3da4e7692bbf940a9b0131d04ff48d434dbdfa9bee7399c4dc2dfa31bd0df24e5863c77cf73f097354d1e68927ce5bef00e2a4c121c5a1226f31c1d4ffa0eb06a85a4090062241104d8d0d878a4f26b54082eb475d5b932aeeb46cdaaa5ad15a714aeb6a4c1855c2aefbdc2dec23d7b687607965dc424d0ad1", @generic="0630c1aad19b04967805002e9203b2daa9db1519dbf296c932114d2b28023940db11e51bc4e3623fd37c2a9c039c702e55df92d9975983709526d75e8abba3a21c312bcdd935d9f925dfa1a5af4d50fd6091495a3b5603e742e51310bff014c7402c506cfafd1d587f7b8cfcacb6145ed56a565903342049092148f48bc7aff8c0fbc370f19ee881ed91dcd15b3bc48a0053b04f7427d63168f06fed39065818b03d0000000000"]}]}, 0x11d4}, {&(0x7f0000000d80)={0x34c, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="c461cf758928df6f5d4a02e82ad7be09ab42a89cd24752c76a3fba5003b11b186da2128f4172f96dffe779573d0c2f7af6ea58a1be86707e0417c8e8c5926302394048fcaa945f3b48df82b7ea0cb3073d7b93595326375a2a92925ec9eef91cc9c68b1595e5355493aa9020e7748bb2bbd5e5dfc72fa75ae368f815495cc863d97daa41042c68bb40bb5fbebacc1279f7a54812e27585a44f6e396591394561840d546dc02234d4cc6a318ebac7a18587e5059e175894cae391f5d6aa4c9a0369210609e1ab355e44e50351dd0a37a0b97a", @generic="cc598117e0919d6ea725e899a1324fd75f8f937bd748dae10960f6d1479fcfc0d2a29bebdcaed6af9561610a4f178d5b04483943d790b3bd2abc21c4a56a7287eb770466d2ce1d3f43d5c72f20c65f23ee5ab04b1e0a6675f67a55593040274437186c589bb96df9dc793770e56dd636aefb8548bf47519304a201337a10a4999b9a79dba8ddd11acf174d3306fb293582c2d1ff208e6e6c31220bbee92165162d963165c1ab14bf505f3b4f86a79bf787d41f37837704d0e2bcf11c573d05da7b23b507ce", @typed={0xed, 0x3a, 0x0, 0x0, @binary="1075e396a5f208abba4942b410d30578bdab26d99c3d39d6c73170944e7faa2a6747ee669985ef7d8ec3a64e26d20bc4d864193ed912a5eb48b77153c28d8c65dcc955842855f12edca9b4f983c2ccaceb5d0e4dedd2a573089c47ccab0058c98de6e8305b275e4346a871cee1a5fe13bfedba6073ee817fbc894f908cfe7bdb766f7e8696d7dc665204ab6f70f0d2e58b6791278097a04909320f60bdc1912f4a07116f27849793b07c5fd1dbe34cce96180a233da0666138046c242d315a4b01686860c402b19ca72952b017e07407ecc82b5b8fd6fbae2c0aebc9a3e2a02e4f3e184a6dd330e5da"}, @generic="0f863e0f16c2171a272c2aa93a3b4a631200cfd46687193bf5bd52a28ca376bd", @generic="0879914e44c7a812ffcfd8c328ab87f4c56d4587bf3bd12e75ca67f9e72f40d662aeb648bc5933223f65f420c0fc0ba96b2d73f55c269941fcadb624b84af3bb47281fefcb370919996d0a2c959c07119b63b1c130c8346a4e0c10bc2bf21fef93f6063d54c46e9096e74fc0c85f0bffd031e4c9153c3f745b9f86324fc0fc7671856b5bc9d6f85801d7666302f099cd790b"]}, 0x34c}, {&(0x7f0000001140)={0x410, 0x2a, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x3c4, 0x111, 0x0, 0x1, [@generic="66216706d837ff6c3d9733e4f6316554e79939b76b948a85b79c219fd4b6a2cbb158b3d621c883eb", @generic="d9c19ff736a56b7364aa6ca73b0ea1b55bf6102f43da30762f49f011503e191a05652121fff719fac4ba4cad0281742578c77d0b3b8efc7969bdb4c125cd0a73d64f754e55ef620a367b207a4a14fbc3c4ecd9265e14643e361005eb33d1e5dcff17d82bc12b9ff1a56c05f31d1413503a2684f2b562d36b1c7a9252ce37dc9037a6b2ee7ac97e7f2772dd852fa678f18cb9975f9720dea16c1cc077ececd4d6bca9d549dc1b00beaac843ec7c932315239b0bcd757785447d71ca92fbcf4b7f9f09e3573cc6bbcb", @nested={0x4, 0xad}, @generic="7cf231d24c12c59a263b3b937e5f151cec4e987e50ff4239351771410aed8233b39214715c9f87b46fd3dab2cc00341a84d64157f2570e31d498abc15d4cd202a5ca6c17bcfa5f01f1ab7cb8ca3a61049667cd68162121d60b22bd5e26da723cb0cb881a3d711a0b608839db3db60af3b05a4ac7e2f38a034c426f84d493ff79cd4e9548a774bd36fe0f50ec272de9cbc64f4bfba88573727f76d5cb1854341882f3b0cd9b2f13e329fd4f3079a92741b0a43ace24fcaca6f7318ee22e502c2d356f2e37b851e5dde5ad79936b418c0c146179e7112ee8818de162203d986229de9a947af5962d901f5031a8d48613e9f6", @generic="c7661d58907c34d5772b59b2d175e90f89b17c6fea9d6b20f9f78eccd546086e11c16d6520598afb8ff5d19a8848186e76a90119a0981a61dbd7678e2b7870a47905786077ffaf7d803d887e479490b2e813de58c182692425355c6c98bea98501dce92b571653a51feca167ddcd6639a5ae5405cc3d871145bf1429a844560ed2da92b9df172b058d966ae11478de35a3f2bc5ac81a0cbb0301fba5963db9fe2cb59f8e3c91466a8987b51407bf1927fe00f1c3b9e2724f703338bed6dea84a1e8fedd85c7d23e33682927a05ab51116983", @generic="3aa62a3f07632339f5d057482a192c0f3e94c657a41914b6609c3ac2a079d8a197d4c3314ff8d2cfa1b34f0f558caba7098bbe752391fe64655f9b2f7083f56c7fe3d1915b63a856ea784bb414aacabfd3d7a8d080c21c1a4dacb9f70ae898650c244bdc890895e38db18f09e767b7a342e60ba8f13063899170caa3f655ff434bae9ff5ab8024affa18b501a2092881fd0340d898fae996bef45be6982a0ff6a3671690b37b63cb3495029abe25b5ac668fd9601ce4fff50b6c73c585186a5a57ec443c08c01492aeb09871aebcfb817062e1c026d95fca90f697c7760f6692a9d20434098db6754cb739e7", @generic="3d7e91ffc8f3c8bcbcb6b2ae598e018cbac9f705c1b1eeb756cfd18cb1"]}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}, @generic="2f2bdd75e6543b16ec491323a288d2d2911d15749f30ce189eeeda36fea1376115e1995967a16a596f8dfc"]}, 0x410}], 0x3, 0x0, 0x0, 0x8840}, 0x20000000) (async) sendmsg$netlink(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc, &(0x7f0000000500)=[{&(0x7f0000002280)={0x11d4, 0x3a, 0x400, 0x70bd25, 0x25dfdbfe, "", [@nested={0x30, 0x145, 0x0, 0x1, [@nested={0x4, 0xf0}, @typed={0x17, 0xd0, 0x0, 0x0, @str='./binderfs/custom1\x00'}, @nested={0x4, 0x64}, @nested={0x4, 0x10f}, @typed={0x4, 0x7c}, @typed={0x4, 0x79}]}, @nested={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @pid}]}, @generic="450ea2246970ec0a67e989f9f284996518e44759c1ae46345e98ae562ec04497b4f650b27c19fffdc815faeffa6dd3e4c21d3e361604512cc8e42df4b256e66ac4493472aebcf163d3fbbb1540fffd72e9b0e8405465ca454de6e738637d45a2e842fbb1330282a9935f8430f172786bd5cc86ef128ca1d3ae3a81faa44fb018638bc2a34bde7683923697c152fa13b7696e78778e710689b6139b93d02132bf02cf1253c88fb7ecc97da850ddd4179a6ebbb6992f09fb10f78630783880d1104fa368bb9bfad3cb191b44baabdbf191f92d", @nested={0x10b3, 0x4b, 0x0, 0x1, [@typed={0x8, 0x131, 0x0, 0x0, @ipv4=@local}, @generic="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", @generic="0630c1aad19b04967805002e9203b2daa9db1519dbf296c932114d2b28023940db11e51bc4e3623fd37c2a9c039c702e55df92d9975983709526d75e8abba3a21c312bcdd935d9f925dfa1a5af4d50fd6091495a3b5603e742e51310bff014c7402c506cfafd1d587f7b8cfcacb6145ed56a565903342049092148f48bc7aff8c0fbc370f19ee881ed91dcd15b3bc48a0053b04f7427d63168f06fed39065818b03d0000000000"]}]}, 0x11d4}, {&(0x7f0000000d80)={0x34c, 0x1e, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@generic="c461cf758928df6f5d4a02e82ad7be09ab42a89cd24752c76a3fba5003b11b186da2128f4172f96dffe779573d0c2f7af6ea58a1be86707e0417c8e8c5926302394048fcaa945f3b48df82b7ea0cb3073d7b93595326375a2a92925ec9eef91cc9c68b1595e5355493aa9020e7748bb2bbd5e5dfc72fa75ae368f815495cc863d97daa41042c68bb40bb5fbebacc1279f7a54812e27585a44f6e396591394561840d546dc02234d4cc6a318ebac7a18587e5059e175894cae391f5d6aa4c9a0369210609e1ab355e44e50351dd0a37a0b97a", @generic="cc598117e0919d6ea725e899a1324fd75f8f937bd748dae10960f6d1479fcfc0d2a29bebdcaed6af9561610a4f178d5b04483943d790b3bd2abc21c4a56a7287eb770466d2ce1d3f43d5c72f20c65f23ee5ab04b1e0a6675f67a55593040274437186c589bb96df9dc793770e56dd636aefb8548bf47519304a201337a10a4999b9a79dba8ddd11acf174d3306fb293582c2d1ff208e6e6c31220bbee92165162d963165c1ab14bf505f3b4f86a79bf787d41f37837704d0e2bcf11c573d05da7b23b507ce", @typed={0xed, 0x3a, 0x0, 0x0, @binary="1075e396a5f208abba4942b410d30578bdab26d99c3d39d6c73170944e7faa2a6747ee669985ef7d8ec3a64e26d20bc4d864193ed912a5eb48b77153c28d8c65dcc955842855f12edca9b4f983c2ccaceb5d0e4dedd2a573089c47ccab0058c98de6e8305b275e4346a871cee1a5fe13bfedba6073ee817fbc894f908cfe7bdb766f7e8696d7dc665204ab6f70f0d2e58b6791278097a04909320f60bdc1912f4a07116f27849793b07c5fd1dbe34cce96180a233da0666138046c242d315a4b01686860c402b19ca72952b017e07407ecc82b5b8fd6fbae2c0aebc9a3e2a02e4f3e184a6dd330e5da"}, @generic="0f863e0f16c2171a272c2aa93a3b4a631200cfd46687193bf5bd52a28ca376bd", @generic="0879914e44c7a812ffcfd8c328ab87f4c56d4587bf3bd12e75ca67f9e72f40d662aeb648bc5933223f65f420c0fc0ba96b2d73f55c269941fcadb624b84af3bb47281fefcb370919996d0a2c959c07119b63b1c130c8346a4e0c10bc2bf21fef93f6063d54c46e9096e74fc0c85f0bffd031e4c9153c3f745b9f86324fc0fc7671856b5bc9d6f85801d7666302f099cd790b"]}, 0x34c}, {&(0x7f0000001140)={0x410, 0x2a, 0x300, 0x70bd28, 0x25dfdbff, "", [@nested={0x3c4, 0x111, 0x0, 0x1, [@generic="66216706d837ff6c3d9733e4f6316554e79939b76b948a85b79c219fd4b6a2cbb158b3d621c883eb", @generic="d9c19ff736a56b7364aa6ca73b0ea1b55bf6102f43da30762f49f011503e191a05652121fff719fac4ba4cad0281742578c77d0b3b8efc7969bdb4c125cd0a73d64f754e55ef620a367b207a4a14fbc3c4ecd9265e14643e361005eb33d1e5dcff17d82bc12b9ff1a56c05f31d1413503a2684f2b562d36b1c7a9252ce37dc9037a6b2ee7ac97e7f2772dd852fa678f18cb9975f9720dea16c1cc077ececd4d6bca9d549dc1b00beaac843ec7c932315239b0bcd757785447d71ca92fbcf4b7f9f09e3573cc6bbcb", @nested={0x4, 0xad}, @generic="7cf231d24c12c59a263b3b937e5f151cec4e987e50ff4239351771410aed8233b39214715c9f87b46fd3dab2cc00341a84d64157f2570e31d498abc15d4cd202a5ca6c17bcfa5f01f1ab7cb8ca3a61049667cd68162121d60b22bd5e26da723cb0cb881a3d711a0b608839db3db60af3b05a4ac7e2f38a034c426f84d493ff79cd4e9548a774bd36fe0f50ec272de9cbc64f4bfba88573727f76d5cb1854341882f3b0cd9b2f13e329fd4f3079a92741b0a43ace24fcaca6f7318ee22e502c2d356f2e37b851e5dde5ad79936b418c0c146179e7112ee8818de162203d986229de9a947af5962d901f5031a8d48613e9f6", @generic="c7661d58907c34d5772b59b2d175e90f89b17c6fea9d6b20f9f78eccd546086e11c16d6520598afb8ff5d19a8848186e76a90119a0981a61dbd7678e2b7870a47905786077ffaf7d803d887e479490b2e813de58c182692425355c6c98bea98501dce92b571653a51feca167ddcd6639a5ae5405cc3d871145bf1429a844560ed2da92b9df172b058d966ae11478de35a3f2bc5ac81a0cbb0301fba5963db9fe2cb59f8e3c91466a8987b51407bf1927fe00f1c3b9e2724f703338bed6dea84a1e8fedd85c7d23e33682927a05ab51116983", @generic="3aa62a3f07632339f5d057482a192c0f3e94c657a41914b6609c3ac2a079d8a197d4c3314ff8d2cfa1b34f0f558caba7098bbe752391fe64655f9b2f7083f56c7fe3d1915b63a856ea784bb414aacabfd3d7a8d080c21c1a4dacb9f70ae898650c244bdc890895e38db18f09e767b7a342e60ba8f13063899170caa3f655ff434bae9ff5ab8024affa18b501a2092881fd0340d898fae996bef45be6982a0ff6a3671690b37b63cb3495029abe25b5ac668fd9601ce4fff50b6c73c585186a5a57ec443c08c01492aeb09871aebcfb817062e1c026d95fca90f697c7760f6692a9d20434098db6754cb739e7", @generic="3d7e91ffc8f3c8bcbcb6b2ae598e018cbac9f705c1b1eeb756cfd18cb1"]}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r0}, @generic="2f2bdd75e6543b16ec491323a288d2d2911d15749f30ce189eeeda36fea1376115e1995967a16a596f8dfc"]}, 0x410}], 0x3, 0x0, 0x0, 0x8840}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) faccessat2(r4, &(0x7f00000002c0)='./cgroup\x00', 0x20, 0x300) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f00000000c0)=ANY=[@ANYBLOB="26897a653d25382c00"]) link(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') (async) link(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') r5 = socket(0x10, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c005}, 0x24000000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c005}, 0x24000000) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001100)) socket$inet6(0x2d, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 16.967712802s ago: executing program 7 (id=5604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async, rerun: 32) r3 = socket$inet6(0xa, 0x800, 0x0) (rerun: 32) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) (async) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001000000000037d60e08a5b8de0e094bd09bb06c588806ffa5acb1eecf1b633a1f401143225cb7e5fd792e10827d00"/65], 0x20}], 0x1}, 0x4) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (rerun: 64) 16.808665306s ago: executing program 7 (id=5607): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @local=@item_012={0x2, 0x2, 0x0, 'm$'}, @main=@item_012={0x1, 0x0, 0xb, '@'}]}}, 0x0}, 0x0) listen(r1, 0xa) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f00000003c0)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)=""/76, 0x4c}, {&(0x7f00000009c0)=""/223, 0xdf}, {&(0x7f0000001bc0)=""/4110, 0x100e}, {&(0x7f0000000000)=""/248, 0xf8}, {&(0x7f0000000800)=""/139, 0x8b}, {&(0x7f0000000340)=""/78, 0x4e}, {&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000900)=""/144, 0x90}], 0x8}, 0x10001}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000003c0)=0x101, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000020007fafb72d13b2a4a2719302000000030b43016c26236925000a00fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 16.58117656s ago: executing program 7 (id=5612): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 16.504185572s ago: executing program 38 (id=5612): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905", @ANYRES32], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) 1.852609624s ago: executing program 0 (id=5718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000080)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001440)=ANY=[@ANYBLOB="0100000000000000f203000000000000000000000000000027a3d48df8c8c41ba7c2d26f5be2a1aabe8d7115652751447facdbdbe826af8a5166b230c523de268483cc6bd7316a49f1c1075e9cb83ae615aa03c4f944e90309a3afde387dc45775bd16a0d5cf415edf551bc52c50630bcafdc7de"]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r5, 0x1, 0x6, @random="b3bef56bcd32"}, 0x10) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) wait4(r6, 0x0, 0x80000000, 0x0) process_vm_readv(r6, &(0x7f0000000100)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, &(0x7f0000000140)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000000280)=""/95, 0x5f}, {&(0x7f0000000300)=""/110, 0x6e}], 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x44, 0x0, &(0x7f0000000380)="de547122bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 1.648578348s ago: executing program 8 (id=5719): add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r1) keyctl$setperm(0x5, r2, 0x90000) keyctl$search(0xa, r1, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', r3, 0x7, 0x80, 0x38db, 0xc42, {{0x6, 0x4, 0x3, 0x3f, 0x18, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @empty, {[@end]}}}}}) 1.621568589s ago: executing program 0 (id=5721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r0, 0xe9, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000040c41090ea00000000000109022400010000002009040000010300000009210000000122070009058103"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc000000000000000000000000000000ffffffff00000000000000000000000000000004000000000a006080", @ANYRES32=0x0, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) r5 = dup2(r0, r0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000540)={0x8, 0x2, {0x0, @usage=0x4, 0x0, 0x0, 0x8, 0x0, 0x3, 0x290c, 0x0, @usage=0x10, 0x24e, 0x8, [0x0, 0x1a3b, 0x100, 0xffffffff8cf28f05, 0x7, 0x6]}, {0x7, @struct={0x3, 0x8}, 0x0, 0x8, 0x2, 0x7, 0x7, 0x5, 0x0, @struct={0x4, 0x6ef}, 0xd, 0x1ff, [0x8000, 0x9, 0x813, 0x6508, 0x4, 0xedd8]}, {0xffff, @usage=0x9, 0x0, 0x8, 0x8, 0x4fe8, 0xb7dc, 0x0, 0x9, @struct={0x400, 0x5}, 0xffff, 0x9, [0x388, 0x8469, 0x5, 0x4, 0x9, 0x1000]}, {0xaff, 0x5, 0x3}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000940)={r6, 0x1cf, 0x1, [0x2, 0xfffffffffffff38c, 0x6, 0x21e, 0x8], [0x2, 0x5, 0x7, 0x200, 0x4, 0x6, 0x53, 0x8, 0x8e67, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x401, 0x4, 0x7, 0x5, 0x0, 0x2, 0xf, 0x9, 0x34e6, 0x10, 0xa, 0x8, 0x101, 0x3, 0x7, 0x4fd2, 0x8000, 0x2, 0x3, 0x9, 0x2, 0x1, 0x1, 0x7fff, 0x6, 0xda6, 0x6, 0x2, 0xfffffffffffffff3, 0x10001, 0x8, 0x4, 0x6a, 0x2, 0xd2a, 0x7, 0x7, 0x8, 0xe1b, 0x4, 0x7, 0x0, 0x2, 0x1aeb, 0x100, 0x6, 0x6, 0x6, 0x6, 0x3ff, 0xe, 0xb, 0x9, 0xb727, 0xfffffffffffffffd, 0x7, 0x7ff, 0x44, 0x8, 0x2, 0xa6, 0x3ff, 0x2, 0x100000000, 0x100000000, 0x91c, 0x81, 0x40, 0x7, 0x5, 0x4, 0x80000001, 0x95f, 0x80000001, 0x4, 0x7fffffff, 0x5, 0x8, 0x0, 0x3ff, 0xffff, 0x7, 0xb4, 0x10, 0x9, 0xffffffff, 0x4, 0xf, 0x4, 0x5, 0x36, 0x4, 0x80000001, 0x400000000000, 0x97fb, 0xfaf, 0xc, 0x1000, 0xa, 0x5, 0x6, 0x4, 0x2, 0x3, 0x3, 0xe, 0x0, 0x81]}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x8, 0x800, 0xf4) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fbdbdf2501000000100002800c000180080001000500000118005a138324a1ac9e87997e605ff042018014000200766c616e3000"/68], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000240)='net/sockstat\x00', 0x0, r0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000100)=r9) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2001d4"], 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x5a5142, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat\x00') ioctl$ASHMEM_SET_SIZE(r11, 0x40087703, 0x2) 1.54065598s ago: executing program 8 (id=5722): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x80800) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000480)={[0x3, 0x1, 0x40, 0x4, 0x6, 0x8001, 0x9, 0x2, 0x6, 0xebb2, 0x7, 0x0, 0x64, 0x2, 0x3, 0x3], 0x1000, 0x24204}) r1 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000007340)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x80008, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r3, @ANYBLOB="000000001f3f7afe92de0d44517b23474109000000ef72ad2a6d26438c387d3dd04b0ca33f29d3bad8f2bbbf109cf3c06356f289c993ef1c522439f30d12ab32e910bbc26c128f7f9f2410a5c4458d9fc1c87ee1c25f28414e7b9fbe604a306a"], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0xffffffff, 0x7, 0x8, 0x5, ' Vx', 0x2}}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r10, &(0x7f0000000080)=ANY=[@ANYRESOCT=r10], 0x200001d0) exit(0xffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001840)) 1.53004795s ago: executing program 9 (id=5724): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000040)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140)=0x2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00071d", @ANYRES16=r4, @ANYBLOB="10002bbd7000fedbdf25130000000500030006000000"], 0xfffffffffffffee1}, 0x1, 0x0, 0x0, 0x4048080}, 0xc086) connect$bt_rfcomm(r2, &(0x7f0000003780)={0x1f, @none, 0x7}, 0xa) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) (async, rerun: 64) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) (async, rerun: 64) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0xfffffffc, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x108) (async) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}) 1.490176731s ago: executing program 9 (id=5725): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) close_range(r0, r1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x2}}, 0x10) ioctl$KVM_GET_TSC_KHZ_vm(r2, 0xaea3) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="0a7217202225430589c7cc20445ac318d34901956895c380295d637dd6d11f67f7d6342ca8c62ac0d587450f1bddabf01cf3938191ae9f41ad120b69dfb7459b28d2727e11858be2c0d7933ad9f9b1404cb800753860b12717b89ab460bbee44c0db0e593bca483243a917cc69605d6446249c4dc704455f52a314563cddddc4367648fd148364747c10c8e4c51c7599e476104dbb81a726041cc48b82dadd416f", 0xa1}, {&(0x7f00000001c0)="701a371c252f1a68df9fe1ab4b1a3ddd50b0a8b413bceb44c03a3f6552b9428bba3b5b666c1d37cd7e9f9a52bd9d85b142aceb298e83e77e096da5c8148b0eba8754dbc753f4dac48dc7ed4259ba6a08ba", 0x51}, {&(0x7f0000000240)="91d75a3e500789546158589dde62b88ebefedd07f6ae113c4ea6bf6428a5e94a60909306b371a9007eedae5cbc6a01d921f1360be493aa407865c8aae9745dab81bc04df6d89925d09696b3a8de51a889436e191781681a5cc5541f02d2538ee87c43e840eafff0f69f60056df01941f35ae4e193f3b9e685f2f27b32b7f68cc2340a0f50b65e2c8b638063c9d1245c3d3b3f11646422f53469b6a57cc2fff0ced3f32", 0xa3}], 0x3, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0x2, 0x0, 0x10, @local, @mcast1, 0x7, 0x7800, 0x9c, 0x6}}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x16}, r3}, 0x14) preadv(r1, &(0x7f0000000680)=[{&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/94, 0x5e}, {&(0x7f0000000640)=""/50, 0x32}], 0x4, 0x6, 0x8000) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000700)=[@textreal={0x8, &(0x7f00000006c0)="66b91409000066b8cc00000066ba000000000f30b8f90f8ed8baf80c66b86b12e08666efbafc0cec0f00150f01c8260f181f65f30f09b800008ee8670f357454", 0x40}], 0x1, 0x54, &(0x7f0000000740)=[@flags={0x3, 0x44}], 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000c80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)={0x440, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x8}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x85}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe9, 0x5, "496d0110de0321f145742d4321e738dc423096e82075f3d9f2bb222d1de6504a8d16ccff24237a3348c1494345b53060d4308362dbe2f751086dcdd2c9713dd2bc28d84f92cf51e542badccf9634e7fe1de9e7f08693cfc868cda5fde63f47e7d891d8560632d6489d0affbb8b52495a98f488d245c007c749d4ed7ca3aeb3a411b9959f1cfb073e4544d701c2f95847bd45651560682784477d06c5e929b77195e74f30abad67a846a115479984220588bb2f1989f3c9c67522408cbe9ea30d8b8c3ae83178daed2d8b249295ba3b06663b3d8cfb40878ddfb042b1d7dfad8fc46cc958ab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xa0, 0x5, "99c628c8907807eb517ac26bb4e97f867ccb437ec34a292e5ec4d2d91b99e94f45a648d4f503e30ad8be80ec18a3ca18abe1886acd8e2dcfd54cb9e1bd898e4e042fa1adb8fde1dbd233f6b12ea4befbb18046dc0bf221bcc132a5c5156ad1c9081c2eb5dc56a0b7a3a1d4ca4f8f307e6e16634ebe1a85f95f4c8838eba6b7c132036e1c0d3832bbdfbcdc4120ba544a6adfb0dd148e1df2aa86f882"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "820272f48033b218a5fe0957cbc8f8e930d027c5d4ab6683cb62e6fe0af7da1d913c4945fa1e791c043588b6fc7e5d4f4b217e63c59f5283cc681ebb94d8e3b14846931955895509648cedbb73192cf8d93505b3c47771aff2ff"}, @ETHTOOL_A_BITSET_VALUE={0x12, 0x4, "6d36df1514761887ec7b001fc6fe"}, @ETHTOOL_A_BITSET_VALUE={0xe1, 0x4, "de76c1d118f2465ed7b46647676d54a99b5b8186fadfdbde88261a7731f56ef562f17f2e90afc3492b2578f4319ac454970b8a9714ebf0540bf80dec88d81995aebd0ab15d9b5567aedbd4e7841e82c7bc80acf0fa07e833cff13ebc9496c2b32e4a8d882613dc1c83993d676c847ad8ddc4782f40df697481e3238d49f1345b535b6016b38b8677b0e42c1006a60d1fd8c0d6be72592a4648019a6c2dc8c379bcc9079f9548adbdfbdc828d894ccb2e041aef3e858d5c3e45c73d4032f2a570c9429c7fe1ed5f40279166ad80f6cee60c0b4167ca66ec40c11c9313cb"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "a895eccdd2198fc78d73e1d2088839a75ab82776bbf9289f2a3fed489541385c0e1e51d784db30ebc6"}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x440}, 0x1, 0x0, 0x0, 0x4}, 0x80) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000d00)='0\x00', 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000f00)={'tunl0\x00', &(0x7f0000000dc0)={'erspan0\x00', r3, 0x8, 0x8, 0xc, 0x2, {{0x39, 0x4, 0x0, 0x7, 0xe4, 0x67, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x7, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xa2, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@multicast2, 0x8}, {@broadcast, 0x3}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x9}]}, @lsrr={0x83, 0xf, 0x17, [@dev={0xac, 0x14, 0x14, 0x2e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @rr={0x7, 0x23, 0x41, [@empty, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x23, 0xce, [@loopback, @loopback, @private=0xa010101, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x43, [@dev={0xac, 0x14, 0x14, 0x37}, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}, @local]}, @lsrr={0x83, 0x1f, 0xae, [@loopback, @multicast2, @private=0xa010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}, @timestamp={0x44, 0x8, 0xae, 0x0, 0x3, [0x6]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000fc0)={'tunl0\x00', &(0x7f0000000f80)={'ip_vti0\x00', r3, 0x700, 0x8000, 0x1ff, 0x4, {{0x8, 0x4, 0x3, 0x21, 0x20, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xb, 0xd6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) getpeername$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002580)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000001080)={0x1498, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0xe0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/selinux/mls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x92-c\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x1184, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6e, 0x4, "8b6386b4f3cd9596fd7e7d3016c8f63062c8bd06572eb08936ade2726f45d60c93ed02ba900bb62d5569d287d875f7f0436d2dcdace015d4b19ed456d55c3b16ba09b54de17ffcca3e0fe3da105a5e584c774266747c67b4c2ee4a4dba91f820d11df52a241168c5d281"}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x22, 0x2, '/proc/sys/fs/binfmt_misc/syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "788c9bf8d8d19bc65626c7e1df07ba"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8cfd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/selinux/mls\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7591}]}, {0x4}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0xc, 0x4, "9b74e202b36a24dc"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x1498}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) pread64(r1, &(0x7f00000025c0)=""/202, 0xca, 0x4) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r11, &(0x7f0000005300)=[{{&(0x7f00000026c0)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002740)="81711db45e54407ae6c2e6454498933ff8608f4cbb46268aaff9939e9ca3782c0a484b42b9646febaa10fccfcb86ec63d43ded689e541345ad8c674a965f8c0af8b7198ce7afb859a47cf9269adf4d79c22a3cf4ec4f14defa7b385a77b6b515af0579ed2b1d6ee5ccae6b07ec54659820463ee98792ae8e4336080be812b67777495ed513a2f891e09b732422c6004c8e95a9f15546208999d5617142486f9f97f404cac916765b2c8c1f3cd9bbf2eff98e29b26c72acfa14a6fcddf0b681d44b641019df53ffe46f20a24bae739ee7a0039112a14576f51a58c8c15b80", 0xde}], 0x1}}, {{&(0x7f0000002880)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002900)="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", 0x1000}, {&(0x7f0000003900)="238336df41b9d6679d49c444f00de37d75a3081aad227f9d811fc9445321dea796ff", 0x22}, {&(0x7f0000003940)="673aaaf4cb9d93d19a4a8cb83b73ff6d22bf339d0d36e007ee194a0ff1c44791192c3d65cb7fa5a53049e6591baf32171097ff608c2a77301cf1cfd35bf165ece232e99fd32bedaab32c851f4b76a5fd4183e53360866d104bb23392ea0dcdb35f5c006eb3f5d5cb610d105f214977d74eb0c9f87f7d954d22f95a8efd097314e6f521a04aa3ee608b629cd2d563cc932c542573766f63ea6d07ad1bfd9407c2de4860348ba7a9df44aedb142889eeedaf6b05895c565bea23d5af17af9078857ac1fd3fc431eb3ba90e7976aa5a446c693934e1b17d1bcfb344de9541de66053e72882820dcca6e8cd43297d1", 0xed}, {&(0x7f0000003a40)="547cc4333cd3dba50bf551e84f2ccc25426b59f732b116e0b18762dafc524d305ee72fcb801d004cd1ad54350efb6e2b72c8e63e96ef3abdad12bf5806207c3fe118644392e3a307895ee635107559a684ab31d3aa1b7393c40248efeadddc965ec9e4c848bdd2dcbf7b9e86c4db18113533586a713c9ffdf801686d4a3b503fbdc5", 0x82}, {&(0x7f0000003b00)="21ba0241208ee13feca3afe457a794ff92589e72b40702c769c37ff930a766c215f8c7f88cb43020fbc1c3f33348d029469a6d128f7f35813a55215b9cbde555907398269464814f0b08839f96c70b4df91d5e3b180a02b0f08b35f8da0989", 0x5f}, {&(0x7f0000003b80)="81a793c12acbc00db169ecbb4a28a34c744b2d7ff31de8a9566ff6722de3880674f0bf3307d336ba3bb80e", 0x2b}, {&(0x7f0000003bc0)="f44768bbf0f1750a6e65febf9b24c918b0984c3f7859763cf3f0e4ef8ba81ca85adc8585ea4d7c502eea", 0x2a}], 0x7, &(0x7f0000003c80)=[{0x58, 0x116, 0x8, "8fe562351548b6ad08d7d3b0ea07d38a3e2b227c25222d509cee6f94726b99476e53ca43d009bdb066dc8f6c274c34daf9c3493ad168d065a051448e1642115a3291"}], 0x58}}, {{&(0x7f0000003d00)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000003d80)="f42c56a5b2e3d07a92b0bfacf37dabffa6c5f90247d967a8569756e61f452269434fedb47e5b0a70da2a5bd4a636f386cbc6e35733688f4788e3473f5895a6080b2305722a197a542d6e68b7e34466968e975439058f5f31ba8b8eb97cf9487d8825ab", 0x63}, {&(0x7f0000003e00)="2afed58d674b22ccd35b90c12469a7be98f89f85df6b3e6b07a10682f3dfbfbcdae9fb03eb415ab9ef03d18060591e246c599ac32a8fca64808e5ab73428306273c04477ed40f9536707075768b7b2da7cf381e37cdea63cef23b70a5064e77e1a6002b3cf201cd4469699bc84292a00d43ecd6728611a7c8242d568eebb03b7a66654da0ef1a0d59b177bafd1ae82d03ebd12e70c5149325d8a1eea18885f78b76250320b8877d8317240d0c2b46e97ab1838648d7e2891046fdbbed72e359f43d8e5f5944fe888b26da5938eab7ae2", 0xd0}, {&(0x7f0000003f00)="952c9df4341733726e76c7aedafc8edae181b9f45f986d72cfa3fea3d1803d6925356043977487914f5b486d4d5f887754f8a049fb2ec9b7de4706235bb57f8f48258edf874d22679944c3ff6fc9e6f2bde41a83496db89291b8ebb9c9455af1268593d41be3bbc4de32c946d96e94fde73876bc49579d77030da31ea39057484becdeff2c5a3a3ec19320c64e24a6e8c94c", 0x92}, {&(0x7f0000003fc0)="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", 0x1000}], 0x4, &(0x7f0000005000)=[{0x68, 0x6, 0xc, "a43a83b76ed7a432fa37a7f48562d7789511c12472e30b9b49b34791a9b1f34071033a6e1f0b2258636d561306003302339f8d68daa6f37306878149ad46d53331b200cdccd66998c7fc68e82ccdc856ea28a7de0f"}, {0x78, 0x3a, 0x5, "e110f8809c43e8445112d3151fba4f5eb853dbc1f46710be08a52a29c0c731505df0417df329ec26f26f2f2a33a023918c7494a19363315731f8fa513b793eb705ffd304f58175399c9aee53e51a6a385be3233d4ba104b49cb7581ce89c2c580a69d0"}, {0xb8, 0x115, 0x8, "a7322b79da22e980ccba5e912c3c9c3e1f4877cef5add9a18bb7b02f5ab5577b17eb33504c9b9257662534b62d7fc8597e8ab92553ce1db0f737f2a2b937fe284ca63ac3912fc9769db661afb8d1b84c99fbedd3d83b688d2bbbd7d43b469b4f05cc9360cee065fb7ae2067eddf41e32a39a0853fdbbace5ea016c998edb302812889d17b8441ba5151435f4efc2cf158b36ba845d59f30911a9be2eb2cebbe2dbf2b4ad"}, {0x20, 0x88, 0x3, "d3a79abbe82e20dd442bbbb3e64ca8de"}, {0x60, 0x115, 0x10, "242898aaf2705bf32e19a20b6ec9d78ff2698ab18e3ec376844ed2e6c19432350ef9a859b6511ac135f0e593894db6267fbbd37e500b2fd74f43e49bce4790a750b1c6c4edc656e83654cf"}, {0xc8, 0x10a, 0xb5, "8f474e5dcb13b588c8bee401959174aed5f4b65956d6862de155e3b90f372801a33ebf5ec2dbc9b7c4d4d28d00f045e981931dc15754e8ec2b73da0334ffe3e8f6fd74ae8190813188e0fd748728b83826b76ab719c9581c1c774c7928ba4b6835ad092f906657969d2bfe3d729edb8683dd41523cfb8a7cb947302c96b6547763af50961f7d65ec1d4507e2fa606594cf3226b1f072fe1bdb3f45968a24d9a8cebe1bcdad451ed1af26edd32928c6e9872a4f"}], 0x2e0}}], 0x3, 0x40) exit(0x1) write$P9_RMKDIR(r0, &(0x7f00000053c0)={0x14, 0x49, 0x2, {0x4}}, 0x14) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000005400)={0x1, 'gre0\x00', {}, 0x7}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000005440)={0x73622a85, 0x0, 0x1}) 1.03910332s ago: executing program 0 (id=5729): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x2, 0xae34}) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'erspan0\x00', r2, 0x40, 0x1, 0x80, 0x9, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @broadcast}}}}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x4, r3, 0xf, r1}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000001c0)={0x58d, 0x4bcbab92, 0x2}) (async) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) (async) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000280)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x4, 0x0, {{0xd, 0x4, 0x0, 0x3, 0x34, 0x66, 0x0, 0x10, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x8, "7f96e520df30"}, @ssrr={0x89, 0x17, 0x5e, [@multicast2, @private=0xa010100, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x41e15000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x1d, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000480)={'gre0\x00', &(0x7f00000003c0)={'gretap0\x00', r3, 0x7, 0x7821, 0xa, 0x8, {{0x1f, 0x4, 0x3, 0x20, 0x7c, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast2, @rand_addr=0x64010100, {[@ssrr={0x89, 0x7, 0x71, [@empty]}, @cipso={0x86, 0x4c, 0x0, [{0x7, 0x6, "b9e73f39"}, {0x1, 0xd, "ded8db565bc07e876bd6cf"}, {0x7, 0x10, "031635a1a39411ba66c4a2c4dfd3"}, {0x0, 0x12, "a2802949ab65b59d323e4345c76c183f"}, {0x2, 0x9, "361335dc3e3a17"}, {0x0, 0x8, "61076c6ed4d7"}]}, @timestamp={0x44, 0x10, 0x51, 0x0, 0x1, [0x4, 0x0, 0x0]}, @timestamp_addr={0x44, 0x4, 0x7e, 0x1, 0x2}]}}}}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x12}}) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000540)={@dev, 0x0}, &(0x7f0000000580)=0x14) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f00000005c0)={'ip6_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', r6, 0x7, 0x20, 0x1, 0x5, {{0x36, 0x4, 0x2, 0x8, 0xd8, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0x9, [{@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@loopback, 0xffffffff}, {@remote, 0x8000000}, {@private=0xa010100, 0x70}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x10}]}, @generic={0x82, 0x2}, @rr={0x7, 0x7, 0xa0, [@private=0xa010100]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x5, 0x10, "28f21e7f776a39924e476cd3cb16"}, {0x2, 0x9, "b7107f10f79a26"}, {0x5, 0xe, "05ac42fd1f87351d2eae43c3"}]}, @ssrr={0x89, 0x13, 0x9f, [@local, @broadcast, @broadcast, @local]}, @generic={0x94, 0x11, "a2efa3f0d8ec290175d1268680a1aa"}, @timestamp={0x44, 0x10, 0xa3, 0x0, 0x2, [0x1, 0x1231, 0x1]}, @end, @lsrr={0x83, 0x23, 0x48, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x31}, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000740)) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000780)) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6gre0\x00', r6, 0x29, 0x6, 0x7, 0xffffff80, 0x24, @mcast1, @dev={0xfe, 0x80, '\x00', 0xa}, 0x8000, 0x8, 0x1, 0xfffffff4}}) (async) socket$netlink(0x10, 0x3, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1a, 0x1c}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@multicast1}]}}) (async) linkat(r1, &(0x7f0000000980)='./file0\x00', r1, &(0x7f00000009c0)='./file0\x00', 0x1000) 983.356301ms ago: executing program 0 (id=5731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xcb\f\xa9\xd6\xae_\xaa\x93\x15\xfb\xc4-\xe2'}], 0xa, "1d95c73bc0d46bd2e2bf40aa0041160108c09018cfdb33a816146e8b7214d79f59eb71e561a96cddc20084b3f354a8e0257aecd88239ed39423d886b523b43605e22f884b28e711bcfc31c14b70e2ce80ae237ca37ea22ceb26d01373373f8e751c4e709bd6a7c7eb2dddeec00000000000000"}, 0x85) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000140)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$evdev(0x0, 0x4, 0x2e560) syz_usb_disconnect(r4) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000080)={0xd5, 0x0, 0x42}) ioctl$EVIOCRMFF(r4, 0x4004550d, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000004c0)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a3440f20c03588001d00445b66baf80c0f5591050000006066bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e168c4a4", 0x51}], 0x1, 0x7c, 0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000600)=0x1801, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_usb_connect$uac1(0x0, 0xa7, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110010000000888f60101400001020301090295000301ff40830904000000010100000a240108000202010205240403d609040100000102000009040101010102000008240201030409030724010800040008240201090268cc0a24020105030109256509240201010301da5a09050109400005760a072501810206000904020000010200000904020101010200000724010807050009058209000208800007250101f34f00"], 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0xc0046209, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 788.753875ms ago: executing program 4 (id=5733): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 32) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) (rerun: 32) 784.327065ms ago: executing program 4 (id=5734): socket(0x8000000010, 0x2, 0x0) (async) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f0000000600)="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", 0xfd) (async) write(r0, &(0x7f0000000600)="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", 0xfd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x80}, {0x6}]}) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) (async) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r5, 0x75e7f000) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f4, 0x0, 0x3ff000000}]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) socket(0x8, 0x800, 0x81) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r9, 0x0, 0x2, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000064000100000000020000000008000000", @ANYRES32=r11], 0x30}], 0x1}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3a93cd881e00210000000000000500000700000005000000000000000a00e4afe288e20000000000"], 0x28}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3a93cd881e00210000000000000500000700000005000000000000000a00e4afe288e20000000000"], 0x28}}, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r13, 0x6, 0x4, 0x0, &(0x7f0000000240)) (async) getsockopt$inet6_tcp_int(r13, 0x6, 0x4, 0x0, &(0x7f0000000240)) write$uinput_user_dev(r12, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xc, 0x9, 0x39, 0x747d5a13, 0xdc3, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0x800de, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0xffffffff, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x3, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0x7, 0x0, 0x7, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x5, 0x2, 0x1010001, 0x2007, 0x7, 0x4, 0xea, 0x9, 0x5, 0x8, 0xd9, 0x0, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x4, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0xfffffbff, 0x1, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r12, 0x5501) close_range(r8, 0xffffffffffffffff, 0x0) 737.430676ms ago: executing program 4 (id=5735): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000001c0)={0x0, 0xec, ""/236}) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000000301"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) timer_create(0xfffffffd, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r3, &(0x7f0000000080)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) inotify_init() (async) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000001c0)={0x0, 0xec, ""/236}) (async) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000000301"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async) timer_create(0xfffffffd, 0x0, &(0x7f0000000000)) (async) timer_settime(r3, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_gettime(r3, &(0x7f0000000080)) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) (async) 642.046837ms ago: executing program 4 (id=5736): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x2710, 0x80, 0x3c0, &(0x7f0000000340)=[0xfffffffffffffffa, 0x1, 0xd, 0x2, 0x6, 0x81, 0x7, 0x3e, 0x4, 0x4, 0x16, 0x19b, 0x3, 0xe, 0x10000, 0x577f000000000, 0x400, 0x5, 0x7fffffffffffffff, 0x0, 0x9, 0x8, 0x9, 0x66, 0x6, 0x3, 0x8000000000000000, 0x40, 0x40, 0x9, 0xe, 0x9, 0x1, 0x994, 0x7, 0x80, 0x9, 0x1bc, 0x10001, 0x7, 0xb51f, 0xca33, 0x7, 0x2, 0x47c3, 0xfffffffffffffffd, 0x4, 0x5, 0x8, 0x0, 0x6, 0x8000000000000001, 0x1aa, 0x12d, 0x2, 0x1ff, 0x84, 0x1, 0x40, 0x1ff, 0x0, 0x2, 0xfff, 0x9, 0x2, 0x8, 0x10001, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x2, 0x401, 0x28000000000, 0x101, 0x5, 0x5, 0xfffffffffffffffc, 0x2, 0x1, 0x6, 0x7ace, 0x7ff, 0x1da98427, 0x10001, 0xbd3, 0xff, 0xfffffffffffffff7, 0xcc9, 0x10000, 0x0, 0xe, 0x3, 0x3, 0x9, 0x6, 0x80000001, 0xffffffff, 0x2, 0x7fffffff, 0x5, 0x1, 0x200, 0x81, 0x2, 0x9f, 0x0, 0x1, 0x100000001, 0x1, 0x4, 0x80, 0x1, 0x47, 0x7fffffff, 0x10001, 0x0, 0x8, 0x1, 0x3, 0x80000001, 0x6, 0x8001, 0xfffffffffffffffa, 0xffffffff, 0xa, 0x819, 0x3ff, 0x4, 0x100000001]}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)=ANY=[@ANYBLOB="6e4f31d81a57d82e01e08205b31638ff7cf909125399f6fcd51f05a1be98ab7f2e3b6f828dd37ad2616b497e344589e615b4cab5eb815ae99a32fbfc648c6a2db2ff6c3b4f59b1a9991c40ad4c8d779f88583a2baa5b4fcc7bf8da91117ee7f3277e8b356f038dc178533b5b16606726e2d097d077e375531211660cae54548189512c620d2af0700e2699a47c29365d13d751cc2a469cfc78fc1a62fe06cc3a5f7722347a16fd5fe004a7f95a59616ab945061f29b8e05064", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000100000000000000000000000100"], 0x28) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs2\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000040)=ANY=[]) 631.587008ms ago: executing program 8 (id=5737): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0xa, 0x0, 0xc4, 0x7a, 0xb2, 0x2}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="6e032c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33d499c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868debc978db963715c55a278c6b994f2db89b546ce3da89cc84050dfd68f72f7c61535e76a0c0e83196e9879f3e94bf449bd8d4dfeb4a10fb19841ed036b5d681286aff2"]}]}) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0xfffffe28}], 0x2) 630.446068ms ago: executing program 4 (id=5738): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) (rerun: 64) flock(r0, 0x8) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x3) (async, rerun: 64) r1 = socket$inet6(0xa, 0x802, 0x0) (rerun: 64) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000180)={{r2, r3/1000+60000}, {r4, r5/1000+60000}}, &(0x7f00000001c0)) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) (async) sendto$inet6(r6, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) (async, rerun: 64) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) (async, rerun: 64) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) (async, rerun: 32) r9 = socket(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_link_settings={0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x6, 0x3dcf, 0xc, 0xfffffffb, 0x0, 0x0, 0x2]}}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000200004000000000060000000000000002000040"]) (async) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r13, 0xc008ae09, &(0x7f00000000c0)={0x6666666666666f6, 0x0, [{0x6, 0x0, 0x6, 0x0, 0x3, 0x9, 0x5}]}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 621.339868ms ago: executing program 9 (id=5739): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/123, 0x7b, 0x0, 0x36}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 589.788119ms ago: executing program 9 (id=5740): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x80) (async) r1 = syz_open_dev$loop(&(0x7f0000000140), 0xdb, 0x82842) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000001c0)={r1, 0x9, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x1, "908b67844a7c1747e0bf157473cf66ee6284235da7b29b18c3de5311de166b3958184169a742bb244c5b8d9d7fffa4f8ae93e3dff5d30822bb9435d254b29526", "0e60d168868e50da73876d71fcfd82ab318f810092bf44f6bdef8ac4be637e0b4ec3f3edd814a180bcffb5f2386bfebc18bc5e3503046b5a2e7006600ecc942d", "81ad93942fc1aa8ca4e5724803e888828f434913826fcff083df86aeac893a7a", [0x94dc, 0x10000]}}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 500.5401ms ago: executing program 4 (id=5741): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x8400, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xa87, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x7ff, 0x81, 0x1, {0x22, 0x91a}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x96, 0xff, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4e, 0xd4, 0x93}}]}}}]}}]}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x39) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xc30, @local, 0x6}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 500.292311ms ago: executing program 9 (id=5742): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000040)={0x1c, &(0x7f00000000c0)={0x40, 0x11, 0x6, "6a4acf754ab7"}, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r6, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0001410000001c001700000000000000006574683a73797a64616c6c65723000"/48], 0x38}}, 0x20000004) close_range(r0, 0xffffffffffffffff, 0x0) 233.210155ms ago: executing program 0 (id=5743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d", @ANYRES32=r3, @ANYBLOB="799577b09f79f0e19a8eb732a4f435"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 148.003087ms ago: executing program 8 (id=5744): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001400)={[0xffffffffffffffff]}, 0x8, 0x80000) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000013c0)={0x79, 0x0, 0x800000080003}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000040)={0x0, 'erspan0\x00', {0x300}, 0x4b5d}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x2, 0x3, {0xa, 0x4e22, 0x7, @local, 0xfff}}}, 0x32) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x489, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x3a) (async) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600010000000000000000000a0000730c00ca8008000b0002000000"], 0x20}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) (async) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000540)={0x0, 0x3, 0xffff, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002440)={{r10}, r11, 0xa, @unused=[0x7fffffff, 0xcb, 0x10000, 0x8000000009], @name="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"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000300)={0x6, 0x7, {0x10000, @usage=0x1, 0x0, 0x3, 0x80000001, 0xb, 0x3, 0x4, 0x40, @usage=0x8, 0x8, 0x1, [0x7fff, 0x3, 0x5, 0x9, 0x6]}, {0x8, @struct={0x2, 0x3}, 0x0, 0x40, 0xf, 0x7fffffff, 0x7, 0xdef, 0x1c, @struct={0x10000, 0x6ca}, 0x101, 0x6, [0x83ec, 0x400, 0x1, 0x1, 0xe50b, 0x5]}, {0x8, @usage=0xb, 0x0, 0x0, 0x400, 0x40, 0x5, 0x10001, 0x420, @usage=0xeafb, 0x81, 0x4, [0x6, 0xc, 0x7599, 0x1, 0x5, 0x5]}, {0xd, 0x0, 0x100000001}}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001440)={{r8}, r11, 0xe, @unused=[0x4, 0x0, 0x4, 0x7fff], @devid=r12}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) getsockopt(r8, 0x111, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 80.777959ms ago: executing program 0 (id=5745): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="7114ab983eae36f00c8d6974f8e7a83c31397e17c9aaf85d709d0a79d53faec274c942c97eacf67677a03f33af049b86e9fffed7e4e09f6484e9586cefe9f264ff50a5cf5a120f051339b4b51f38ab1e4c5d489b2696b93b649d88ac462c89e85769ee87cc22ead7634fde", 0x6b}, {&(0x7f00000001c0)="387b92e657fd2b7f3efe90926fce5cf17b2342cf719ac03a9148c98a0a178d32b615e514bfeacc179873dd5181028b47e5da3a641e3e81eca3e5e65069ff0761b7040ef31678dc196f849ac702fabc1eb8320f30d1ef9b1f6ba78067f50b82b7c47e650debd4199a3758f6208c0c818e2186977d7fc0e0b3568afdc3c4e88cc5cdcf9be487dd6b1097d1dadf", 0x8c}, {&(0x7f0000000280)="f9f56dc29d70a1f708a84517d41ce3e51e24509f142f1aa99858242a16b424a5538a7ada31f4a5709a427260e8ea68af85aee9de03853b758ed91c0419fffa0c4bfac0e1a5e85ea4a0abf7656e90f513317a1f595d93fb6c8db80f8149c4edccdee44acc5b716d7ec8eed5d573821cba2d2ac2a94ab6e4f87490fb08507daaa1b12cf56ef5654d47834fe0a3b724", 0x8e}], 0x3, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 80.534009ms ago: executing program 8 (id=5746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x100010, r0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) close(r0) 69.121339ms ago: executing program 8 (id=5747): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x5, 0x2800) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844674432,\x00']) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x1804010, &(0x7f00000002c0)={[{@huge_advise}, {@quota}], [{@smackfsroot={'smackfsroot', 0x3d, ')@)^'}}, {@dont_measure}, {@subj_role}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r3}}]}) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2010008, &(0x7f0000000000)=ANY=[@ANYBLOB='h,\x00'/18]) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = memfd_secret(0x80000) ftruncate(r7, 0x3) (async) ftruncate(r7, 0x3) (async) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) setsockopt$bt_hci_HCI_TIME_STAMP(r7, 0x0, 0x3, &(0x7f0000000200)=0x36, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x395b7a0214e8daea) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) lseek(r8, 0x4, 0x1) 0s ago: executing program 9 (id=5748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff00", 0x5}]) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000180)={r4, 0x1000, 0x2}) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') recvmmsg(r1, &(0x7f00000079c0)=[{{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/223, 0xdf}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000540)=""/231, 0xe7}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/189, 0xbd}, {&(0x7f0000000800)=""/192, 0xc0}, {&(0x7f00000008c0)=""/20, 0x14}, {&(0x7f0000000900)=""/31, 0x1f}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000a00)=""/60, 0x3c}], 0xa, &(0x7f0000000b40)=""/9, 0x9}, 0x8}, {{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/65, 0x41}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/119, 0x77}], 0x6, &(0x7f0000000f00)=""/32, 0x20}, 0xff}, {{&(0x7f0000000f40)=@qipcrtr, 0x80, &(0x7f0000003340)=[{&(0x7f0000000fc0)=""/25, 0x19}, {&(0x7f0000001000)=""/194, 0xc2}, {&(0x7f0000001100)=""/107, 0x6b}, {&(0x7f0000001180)=""/47, 0x2f}, {&(0x7f0000003280)=""/140, 0x8c}, {&(0x7f00000011c0)=""/66, 0x42}], 0x6, &(0x7f00000033c0)=""/190, 0xbe}, 0x4}, {{&(0x7f0000003480)=@x25={0x9, @remote}, 0x80, &(0x7f0000003700)=[{&(0x7f0000003500)=""/157, 0x9d}, {&(0x7f00000035c0)=""/116, 0x74}, {&(0x7f0000003640)=""/142, 0x8e}], 0x3, &(0x7f0000003740)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000004740)=""/47, 0x2f}, {&(0x7f0000004780)=""/245, 0xf5}, {&(0x7f0000004880)=""/199, 0xc7}, {&(0x7f0000004980)=""/168, 0xa8}, {&(0x7f0000004a40)=""/179, 0xb3}], 0x5, &(0x7f0000004b80)=""/104, 0x68}, 0x6}, {{&(0x7f0000004c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004c80)=""/130, 0x82}, {&(0x7f0000004d40)=""/24, 0x18}, {&(0x7f0000004d80)=""/34, 0x22}, {&(0x7f0000004dc0)=""/221, 0xdd}, {&(0x7f0000004ec0)=""/152, 0x98}, {&(0x7f0000004f80)=""/22, 0x16}], 0x6, &(0x7f0000005040)=""/250, 0xfa}, 0x2}, {{&(0x7f0000005140)=@isdn, 0x80, &(0x7f0000006600)=[{&(0x7f00000051c0)=""/203, 0xcb}, {&(0x7f00000052c0)=""/94, 0x5e}, {&(0x7f0000005340)=""/177, 0xb1}, {&(0x7f0000005400)=""/105, 0x69}, {&(0x7f0000005480)=""/63, 0x3f}, {&(0x7f00000054c0)=""/181, 0xb5}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/114, 0x72}], 0x8, &(0x7f0000006680)=""/20, 0x14}, 0x7}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f00000066c0)=""/187, 0xbb}, {&(0x7f0000006780)=""/239, 0xef}, {&(0x7f0000006880)=""/235, 0xeb}], 0x3, &(0x7f00000069c0)=""/4096, 0x1000}, 0x40}], 0x8, 0x120, &(0x7f0000007bc0)={0x77359400}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0xe0586f4}}, {@version_u}]}}) (async) io_submit(r3, 0x2, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x800, r0, &(0x7f0000000140)="5e8c781873e34b9e4f21cb23bb2c3eb3af2d5d154dcf46e51ccfab6f933136a9fb9a67dc238db69c4ac07d6adbc9c10baaede976f3f7a159a25ece28f309384e8b761cdcec410002f92c39082ef5d6a6712950f316a6e5b3b614773d88dababac54bd087733220d8d4b87c787bbf17bfb6c3d21a6f9026270346de7eb1c9c87feeb5cedd9fb633696adedebee24ada6dc73f62532b0f0d7d72dc6fe1cc8fe7e65909477bb7d292", 0xa7, 0xe96e, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000300)="e2c4e0707dc5a9756a8b19700712a1cec7555e548f4d1415ebf347cfcb8ec37e3b745056443b7ad71179ed4071318dc6882197f691c69c6f6f90ac3ba4f601d8a37ff441dd90f3800a0f7a4b52d9fecd1aad070bae0995012d15d252da76e272eaa92d1894e5339c7c51289ccb6c8a5853c12ee8099f60a3263b2517ee8101a71767197868d4fd067e0dd4fa39ffac7eac04a8e02e525caf43e3fe45aa379fcc5c00", 0xa2, 0x7, 0x0, 0x0, r7}]) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kernel console output (not intermixed with test programs): 0000000000000000000': -2 [ 287.836745][T13555] overlayfs: missing 'lowerdir' [ 287.952071][T13573] SELinux: security_context_str_to_sid () failed with errno=-22 [ 287.975213][T13575] overlayfs: missing 'lowerdir' [ 288.105251][T13588] rust_binder: Error while translating object. [ 288.105289][T13588] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 288.112021][T13588] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:508 [ 288.152520][ T36] audit: type=1326 audit(1776196076.432:1386): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13591 comm="syz.9.4551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5f98eec9 code=0x0 [ 288.300047][T13596] overlayfs: missing 'lowerdir' [ 288.318311][ T375] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 288.429361][T13602] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.437544][T13602] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 288.446281][T13602] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 288.454599][T13602] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 288.470155][ T375] usb 8-1: unable to get BOS descriptor or descriptor too short [ 288.479656][ T375] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.489710][ T375] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 288.501520][ T375] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.511232][ T375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.519401][ T375] usb 8-1: Product: ࡡ [ 288.523653][ T375] usb 8-1: Manufacturer: Ѓ [ 288.528322][ T375] usb 8-1: SerialNumber: 萊㋲ੋ㫚ᲁ쓸鉢笎ꠖ竤ᛔ䦨횅殦ཝ楿뿂앖膹ᆫ峹㧏￟ﵑ⌚跜ᐮ [ 288.560662][T13613] tipc: Cannot configure node identity twice [ 288.567792][T13613] UHID_CREATE from different security context by process 327 (syz.4.4560), this is not allowed. [ 288.602954][T13622] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 288.612005][T13622] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.647953][T13630] fuseblk: Unknown parameter 'rootmo000002ser_id' [ 288.700755][ T36] audit: type=1400 audit(1776196076.982:1387): avc: denied { mounton } for pid=13625 comm="syz.4.4563" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 288.925728][ T36] audit: type=1400 audit(1776196077.202:1388): avc: denied { write } for pid=13635 comm="syz.8.4566" name="file0" dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 288.942543][T13584] binder: Unknown parameter 'fscontext?}0' [ 289.006375][ T7345] Bluetooth: hci0: Frame reassembly failed (-84) [ 289.238826][T13651] overlayfs: failed to clone upperpath [ 289.264467][T13653] overlayfs: failed to resolve 'lowerdir=./file0/../file0/../file0': -2 [ 289.358719][T13658] tipc: Started in network mode [ 289.363852][T13658] tipc: Node identity c2f33ac3a079, cluster identity 4711 [ 289.371449][T13658] tipc: Enabled bearer , priority 0 [ 289.488224][T13661] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 289.488548][T13660] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 289.503436][T13661] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 289.527751][T13661] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 290.370529][T13703] 9pnet_fd: Insufficient options for proto=fd [ 290.437602][ T36] audit: type=1400 audit(1776196078.712:1389): avc: denied { accept } for pid=13706 comm="syz.8.4593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.488231][ T10] tipc: Node number set to 1653226179 [ 290.653298][T13719] overlayfs: failed to clone upperpath [ 290.675543][ T36] audit: type=1400 audit(1776196078.952:1390): avc: denied { read } for pid=13721 comm="syz.8.4597" name="file0" dev="tmpfs" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 290.698460][ T36] audit: type=1400 audit(1776196078.952:1391): avc: denied { open } for pid=13721 comm="syz.8.4597" path="/382/file0" dev="tmpfs" ino=2142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 290.799185][T13727] overlayfs: failed to clone upperpath [ 291.038160][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 291.038190][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 291.051628][ T375] cdc_ncm 8-1:1.0: bind() failure [ 291.059690][ T375] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 291.066976][ T375] cdc_ncm 8-1:1.1: bind() failure [ 291.074587][ T375] usb 8-1: USB disconnect, device number 43 [ 291.083444][ T36] audit: type=1400 audit(1776196079.362:1392): avc: denied { create } for pid=13739 comm="syz.7.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 291.102710][T13740] rust_binder: Write failure EFAULT in pid:1222 [ 291.104259][ T36] audit: type=1400 audit(1776196079.372:1393): avc: denied { name_bind } for pid=13739 comm="syz.7.4603" path="socket:[66433]" dev="sockfs" ino=66433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 291.157410][T13746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.166803][T13746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.388152][ T10] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 291.478156][ T375] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 291.559629][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 291.570999][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 291.585383][ T10] usb 10-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 291.595479][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.604777][ T10] usb 10-1: config 0 descriptor?? [ 291.610564][T13747] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 291.639670][ T375] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.650482][ T375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 291.662035][ T375] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 291.672443][ T375] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.685499][ T375] usb 8-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 291.695114][ T375] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.704262][ T375] usb 8-1: config 0 descriptor?? [ 291.710688][ T375] usb 8-1: MIDIStreaming interface descriptor not found [ 291.728215][ T45] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 291.880681][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.891175][ T45] usb 5-1: not running at top speed; connect to a high speed hub [ 291.902285][ T45] usb 5-1: config 1 has an invalid interface number: 132 but max is 0 [ 291.912166][T13767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.914814][ T45] usb 5-1: config 1 has no interface number 0 [ 291.923634][T13767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.929983][ T45] usb 5-1: config 1 interface 132 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 291.940868][ T449] usb 8-1: USB disconnect, device number 44 [ 291.951593][ T45] usb 5-1: config 1 interface 132 has no altsetting 0 [ 291.967767][ T45] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=b7.27 [ 291.977649][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.986197][ T45] usb 5-1: Product: syz [ 291.990620][ T45] usb 5-1: Manufacturer: syz [ 291.995251][ T45] usb 5-1: SerialNumber: syz [ 292.001334][T13757] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 292.021948][ T10] smartjoyplus 0003:0925:8866.0021: item fetching failed at offset 3/7 [ 292.031280][ T10] smartjoyplus 0003:0925:8866.0021: parse failed [ 292.037722][ T10] smartjoyplus 0003:0925:8866.0021: probe with driver smartjoyplus failed with error -22 [ 292.157714][T13773] overlayfs: failed to clone upperpath [ 292.211288][T13753] rust_binder: Error while translating object. [ 292.211342][T13753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 292.217902][T13753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:355 [ 292.301119][ T45] usb 5-1: USB disconnect, device number 35 [ 292.329254][T13785] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4622'. [ 292.371178][T13746] rust_binder: Write failure EFAULT in pid:518 [ 292.862133][ T36] audit: type=1400 audit(1776196081.142:1394): avc: denied { setattr } for pid=13794 comm="syz.4.4625" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 292.872724][T13795] x_tables: unsorted underflow at hook 2 [ 292.902251][T13795] rust_binder: Read failure Err(EAGAIN) in pid:359 [ 292.920565][T13801] overlayfs: failed to clone upperpath [ 292.949959][ T36] audit: type=1400 audit(1776196081.232:1395): avc: denied { getopt } for pid=13804 comm="syz.8.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 293.124880][T13823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.134134][T13823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.358150][ T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 293.452622][T13828] rust_binder: Write failure EFAULT in pid:1235 [ 293.486408][T13833] fuse: Unknown parameter 'fd}.780h>9JbC E3H9iW>yLK?Nte'Jsh*+7J@T:Lȸ:*rWpgӮOzd;X[PslQ8ث' [ 293.509477][ T45] usb 5-1: device descriptor read/64, error -71 [ 293.578251][T13840] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.587557][T13840] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 293.594866][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4643'. [ 293.597191][T13840] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 293.614791][T13840] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 293.643997][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4645'. [ 293.669130][T13850] overlayfs: failed to resolve './bus': -2 [ 293.748215][ T45] usb 5-1: device descriptor read/64, error -71 [ 293.938372][ T31] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 293.988146][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 294.078160][ T31] usb 8-1: device descriptor read/64, error -71 [ 294.118236][ T45] usb 5-1: device descriptor read/64, error -71 [ 294.160930][ T375] usb 10-1: USB disconnect, device number 24 [ 294.172919][T13874] rust_binder: Write failure EFAULT in pid:521 [ 294.318712][ T31] usb 8-1: device descriptor read/64, error -71 [ 294.358263][ T45] usb 5-1: device descriptor read/64, error -71 [ 294.468264][ T45] usb usb5-port1: attempt power cycle [ 294.568208][ T31] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 294.698200][ T31] usb 8-1: device descriptor read/64, error -71 [ 294.808161][ T45] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 294.829286][ T45] usb 5-1: device descriptor read/8, error -71 [ 294.938211][ T31] usb 8-1: device descriptor read/64, error -71 [ 294.960162][ T45] usb 5-1: device descriptor read/8, error -71 [ 295.048319][ T31] usb usb8-port1: attempt power cycle [ 295.198284][ T45] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 295.219262][ T45] usb 5-1: device descriptor read/8, error -71 [ 295.271910][T13905] overlayfs: failed to clone upperpath [ 295.349486][ T45] usb 5-1: device descriptor read/8, error -71 [ 295.369591][T13915] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 295.377972][T13915] rust_binder: Write failure EINVAL in pid:542 [ 295.388176][ T31] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 295.429145][ T31] usb 8-1: device descriptor read/8, error -71 [ 295.468252][ T45] usb usb5-port1: unable to enumerate USB device [ 295.560005][ T31] usb 8-1: device descriptor read/8, error -71 [ 295.808186][ T449] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 295.828190][ T31] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 295.849668][ T31] usb 8-1: device descriptor read/8, error -71 [ 295.958229][ T449] usb 10-1: Using ep0 maxpacket: 32 [ 295.964808][ T449] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.976134][ T449] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.987880][ T449] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.989392][ T31] usb 8-1: device descriptor read/8, error -71 [ 295.997387][ T449] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.012862][ T449] usb 10-1: Product: syz [ 296.017130][ T449] usb 10-1: Manufacturer: syz [ 296.025330][ T449] hub 10-1:4.0: USB hub found [ 296.108562][ T31] usb usb8-port1: unable to enumerate USB device [ 296.203849][T13925] __vm_enough_memory: pid: 13925, comm: syz.4.4670, bytes: 18014402804453376 not enough memory for the allocation [ 296.289138][T13934] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 296.289168][T13934] rust_binder: Error while translating object. [ 296.298641][T13934] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 296.305304][T13934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:376 [ 296.344631][ T36] audit: type=1400 audit(1776196084.622:1396): avc: denied { setattr } for pid=13935 comm="syz.4.4674" name="L2CAP" dev="sockfs" ino=68666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.386642][T13940] x_tables: duplicate entry at hook 1 [ 296.389954][T13941] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 296.493167][T13960] overlayfs: failed to clone upperpath [ 296.919232][T13996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13996 comm=syz.4.4697 [ 297.208167][ T10] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 297.358592][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 297.365398][ T10] usb 8-1: config 1 has an invalid interface number: 3 but max is 2 [ 297.374668][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.385833][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.396232][ T10] usb 8-1: config 1 has no interface number 1 [ 297.402763][ T10] usb 8-1: config 1 interface 3 altsetting 214 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 297.416364][ T10] usb 8-1: config 1 interface 3 has no altsetting 0 [ 297.425732][ T10] usb 8-1: New USB device found, idVendor=1d01, idProduct=0101, bcdDevice= 0.40 [ 297.436017][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.446102][ T10] usb 8-1: Product: syz [ 297.451164][ T10] usb 8-1: Manufacturer: syz [ 297.455958][ T10] usb 8-1: SerialNumber: syz [ 297.480664][T14003] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4700'. [ 297.674647][ T10] usb 8-1: 0:2 : does not exist [ 297.688384][ T10] usb 8-1: USB disconnect, device number 49 [ 298.266016][T14026] tipc: Started in network mode [ 298.271903][T14026] tipc: Node identity 069929f53772, cluster identity 4711 [ 298.279932][T14026] tipc: Enabled bearer , priority 0 [ 298.412790][ T449] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 298.438694][ T449] usb 10-1: USB disconnect, device number 25 [ 298.447110][ T36] audit: type=1400 audit(1776196086.722:1397): avc: denied { getopt } for pid=14036 comm="syz.7.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 298.547680][T14051] overlayfs: failed to clone upperpath [ 298.736345][T14067] binder: Unknown parameter 'YH!*ut7vcJa/]b00xXkMad%o18446744073709551615' [ 298.898191][ T449] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 298.937817][ T36] audit: type=1400 audit(1776196087.209:1398): avc: denied { map } for pid=14073 comm="syz.7.4724" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 299.028198][ T449] usb 10-1: device descriptor read/64, error -71 [ 299.208147][ T10] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 299.220911][ T36] audit: type=1326 audit(1776196087.499:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14084 comm="syz.8.4729" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891438eec9 code=0x0 [ 299.268207][ T449] usb 10-1: device descriptor read/64, error -71 [ 299.338177][ T10] usb 8-1: device descriptor read/64, error -71 [ 299.408145][ T375] tipc: Node number set to 837495285 [ 299.464184][ T36] audit: type=1326 audit(1776196087.739:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14088 comm="syz.4.4730" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f51f8eec9 code=0x0 [ 299.508153][ T449] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 299.578167][ T10] usb 8-1: device descriptor read/64, error -71 [ 299.648158][ T449] usb 10-1: device descriptor read/64, error -71 [ 299.818178][ T10] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 299.888176][ T449] usb 10-1: device descriptor read/64, error -71 [ 299.948256][ T10] usb 8-1: device descriptor read/64, error -71 [ 299.958315][ T1030] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 299.998304][ T449] usb usb10-port1: attempt power cycle [ 300.050297][T14105] overlayfs: failed to clone upperpath [ 300.082788][T14109] overlayfs: failed to clone upperpath [ 300.109781][ T1030] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 300.118711][ T1030] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.129103][ T1030] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 300.138685][ T1030] usb 5-1: config 1 has no interface number 1 [ 300.145076][ T1030] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 300.164751][ T1030] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.175731][ T1030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.185318][ T1030] usb 5-1: Product: syz [ 300.190428][ T1030] usb 5-1: Manufacturer: syz [ 300.195191][ T1030] usb 5-1: SerialNumber: syz [ 300.200175][ T10] usb 8-1: device descriptor read/64, error -71 [ 300.226683][T14115] netlink: 'syz.8.4738': attribute type 3 has an invalid length. [ 300.308306][ T10] usb usb8-port1: attempt power cycle [ 300.348143][ T449] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 300.379035][ T449] usb 10-1: device descriptor read/8, error -71 [ 300.412558][T14096] rust_binder: Error while translating object. [ 300.412599][T14096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 300.428328][T14096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:419 [ 300.451918][ T1030] usb 5-1: MIDIStreaming interface descriptor not found [ 300.479507][ T1030] usb 5-1: USB disconnect, device number 40 [ 300.493861][ T952] udevd[952]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 300.512644][ T449] usb 10-1: device descriptor read/8, error -71 [ 300.658153][ T10] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 300.689195][ T10] usb 8-1: device descriptor read/8, error -71 [ 300.758149][ T449] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 300.770974][ T36] audit: type=1326 audit(1776196089.049:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.8.4746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f891438eec9 code=0x0 [ 300.779495][ T449] usb 10-1: device descriptor read/8, error -71 [ 300.810969][ T36] audit: type=1400 audit(1776196089.089:1402): avc: denied { create } for pid=14140 comm="syz.8.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 300.819283][ T10] usb 8-1: device descriptor read/8, error -71 [ 300.939636][ T449] usb 10-1: device descriptor read/8, error -71 [ 301.048597][ T449] usb usb10-port1: unable to enumerate USB device [ 301.078507][ T10] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 301.110757][ T10] usb 8-1: device descriptor read/8, error -71 [ 301.111172][T14165] overlayfs: missing 'lowerdir' [ 301.152011][T14170] veth1: entered allmulticast mode [ 301.228185][ T31] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 301.249440][ T10] usb 8-1: device descriptor read/8, error -71 [ 301.358958][ T10] usb usb8-port1: unable to enumerate USB device [ 301.389787][ T31] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 301.399952][ T31] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 301.408762][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 301.419103][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 301.433359][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.449003][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 301.459354][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 301.477215][ T31] usb 5-1: string descriptor 0 read error: -22 [ 301.485207][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 301.496595][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.506579][ T31] usb 5-1: config 0 descriptor?? [ 301.520014][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 301.526532][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 301.624717][ T1030] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 301.644672][ T1030] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 301.733876][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.753106][T14155] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 301.811469][T14170] veth1: left allmulticast mode [ 301.965566][T14185] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 302.248278][ T36] audit: type=1400 audit(1776196090.529:1403): avc: denied { mount } for pid=14207 comm="syz.8.4770" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 302.338176][ T1030] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 302.489552][ T1030] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 302.506630][ T1030] usb 8-1: config 0 interface 0 has no altsetting 0 [ 302.514108][ T1030] usb 8-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 302.523733][ T1030] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.534652][ T1030] usb 8-1: config 0 descriptor?? [ 302.540731][T14188] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 302.751670][T14215] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 302.751699][T14215] rust_binder: Error while translating object. [ 302.760959][T14215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 302.768161][T14215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:570 [ 302.782393][ T1030] logitech-hidpp-device 0003:046D:C081.0023: hidraw0: USB HID v1.01 Device [HID 046d:c081] on usb-dummy_hcd.7-1/input0 [ 302.971907][ T1030] usb 8-1: USB disconnect, device number 54 [ 303.515157][ T36] audit: type=1400 audit(1776196091.789:1404): avc: denied { accept } for pid=14231 comm="syz.7.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 303.633071][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4781'. [ 303.646321][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 303.758182][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.758252][ T7287] Bluetooth: hci0: command 0x1003 tx timeout [ 303.878292][ T1030] usb 5-1: USB disconnect, device number 41 [ 304.668290][ T31] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 304.819662][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 304.832192][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 304.846407][ T31] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 304.856054][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.866022][ T31] usb 10-1: config 0 descriptor?? [ 304.876292][T14251] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 304.886276][ T31] usbhid 10-1:0.0: can't add hid device: -22 [ 304.893134][ T31] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 305.088195][ T449] usb 10-1: USB disconnect, device number 30 [ 305.151216][T14253] rust_binder: Write failure EINVAL in pid:434 [ 305.179881][ T36] audit: type=1326 audit(1776196093.459:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.8.4785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f891438eec9 code=0x0 [ 305.678168][ T396] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 305.685132][ T54] Bluetooth: hci1: command 0x1003 tx timeout [ 305.997300][T14266] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 306.028389][T14268] overlayfs: failed to clone upperpath [ 306.107994][T14272] overlayfs: missing 'workdir' [ 306.277928][ T36] audit: type=1400 audit(1776196094.549:1406): avc: denied { map } for pid=14279 comm="syz.8.4795" path="socket:[68603]" dev="sockfs" ino=68603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 306.499296][T14283] __vm_enough_memory: pid: 14283, comm: syz.4.4796, bytes: 18014402804453376 not enough memory for the allocation [ 306.531189][T14290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:597 [ 306.998187][ T1030] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 307.138198][ T1030] usb 8-1: device descriptor read/64, error -71 [ 307.378245][ T1030] usb 8-1: device descriptor read/64, error -71 [ 307.618165][ T1030] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 307.658171][ T449] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 307.748193][ T1030] usb 8-1: device descriptor read/64, error -71 [ 307.809514][ T449] usb 10-1: config 0 has an invalid interface number: 225 but max is 0 [ 307.818020][ T449] usb 10-1: config 0 has no interface number 0 [ 307.825945][ T449] usb 10-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 307.835945][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.844135][ T449] usb 10-1: Product: syz [ 307.848859][ T449] usb 10-1: Manufacturer: syz [ 307.853640][ T449] usb 10-1: SerialNumber: syz [ 307.859552][ T449] usb 10-1: config 0 descriptor?? [ 307.988152][ T1030] usb 8-1: device descriptor read/64, error -71 [ 308.098246][ T1030] usb usb8-port1: attempt power cycle [ 308.270481][ T449] asix 10-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 308.281179][ T449] asix 10-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 308.292563][ T449] asix 10-1:0.225: probe with driver asix failed with error -71 [ 308.301664][ T449] usb 10-1: USB disconnect, device number 31 [ 308.438211][ T1030] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 308.459363][ T1030] usb 8-1: device descriptor read/8, error -71 [ 308.589552][ T1030] usb 8-1: device descriptor read/8, error -71 [ 308.828163][ T1030] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 308.849408][ T1030] usb 8-1: device descriptor read/8, error -71 [ 308.979449][ T1030] usb 8-1: device descriptor read/8, error -71 [ 309.088268][ T1030] usb usb8-port1: unable to enumerate USB device [ 309.218192][ T375] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 309.348287][ T375] usb 8-1: device descriptor read/64, error -71 [ 309.479991][T14340] 9pnet_fd: Insufficient options for proto=fd [ 309.598753][ T375] usb 8-1: device descriptor read/64, error -71 [ 309.690167][T14346] overlayfs: failed to resolve './bus': -2 [ 309.718160][ T31] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 309.868198][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 309.875727][ T31] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 309.895683][ T31] usb 10-1: config 0 has no interface number 0 [ 309.903640][ T31] usb 10-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1 [ 309.917422][ T31] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 309.928815][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.937387][ T31] usb 10-1: Product: syz [ 309.941903][ T31] usb 10-1: Manufacturer: syz [ 309.947058][ T31] usb 10-1: SerialNumber: syz [ 309.952773][ T31] usb 10-1: config 0 descriptor?? [ 309.958432][T14340] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 309.966579][ T31] smsc95xx v2.0.0 [ 310.166899][T14340] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 310.579521][ T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 310.592026][ T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 310.602446][ T31] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 310.613823][ T31] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 310.624976][ T31] usb 10-1: USB disconnect, device number 32 [ 310.701346][ T36] audit: type=1400 audit(1776196098.979:1407): avc: denied { read } for pid=14359 comm="syz.4.4819" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 310.726011][ T36] audit: type=1400 audit(1776196098.979:1408): avc: denied { open } for pid=14359 comm="syz.4.4819" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 310.784714][T14367] rust_binder: 1331: no such ref 0 [ 310.790339][T14367] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 310.800425][T14367] rust_binder: 1331: no such ref 2 [ 310.806998][T14367] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 311.010516][T14373] /dev/sr0: Can't lookup blockdev [ 311.162931][T14380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 311.162960][T14380] rust_binder: Read failure Err(EFAULT) in pid:626 [ 311.244900][T14388] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4828'. [ 311.261254][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4828'. [ 311.570751][T14401] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 311.579925][T14401] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 311.592553][T14401] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 311.600235][ T449] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 311.627227][T14403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14403 comm=syz.7.4833 [ 311.755701][T14409] rust_binder: 1343: no such ref 7 [ 311.761193][ T449] usb 10-1: Using ep0 maxpacket: 8 [ 311.761211][T14409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1343 [ 311.769244][ T449] usb 10-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 311.790811][ T449] usb 10-1: config 1 interface 0 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 311.805012][ T449] usb 10-1: config 1 interface 0 has no altsetting 0 [ 311.806151][T14413] netlink: 'syz.7.4837': attribute type 4 has an invalid length. [ 311.814451][ T449] usb 10-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 311.829755][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.832167][T14413] netlink: 'syz.7.4837': attribute type 4 has an invalid length. [ 311.838384][ T449] usb 10-1: Product: ࠒ [ 311.838408][ T449] usb 10-1: Manufacturer: 覥␣漰暦蔂邭ᥥꞙ둣锦ﮄ෱̄⹨住臘鶲ň굵㗏쇲൒䗬 [ 311.838431][ T449] usb 10-1: SerialNumber: 釴餷콗ꋣ㖿ꉳ菶潖⩅⹔䋗溁ṅ鶊ꋁ콜쳶鬾៮魓廍匳㑯㛳ⱝ橻嵜괥۱᭑ڊ㭤牃鬕꺇➙䀵㬽덩쓡䣔㔐ﻝﱬ㣍흟耯ッ↉沸䂣쭤䲊玥䘜铋릊<㯚䗦য়셮멞㻯㭊ꢹ뜱㱁蜿胉椡픜蝇ᤫ岝磮밬ꂼ賁䷗痾䬋굅淣䙣峧偣芼鋼죅❩䧠㨕䋦弗칹뇧Ⴥ趐㚚餵긺䫲ꑏ仫帊䔗﷟묶 [ 311.956497][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.964849][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 311.998477][T14417] rust_binder: Write failure EINVAL in pid:478 [ 312.238345][ T31] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 312.310378][ T449] usbhid 10-1:1.0: can't add hid device: -71 [ 312.317147][ T449] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 312.326871][ T449] usb 10-1: USB disconnect, device number 33 [ 312.378369][ T31] usb 5-1: device descriptor read/64, error -71 [ 312.607817][T14419] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4840'. [ 312.618318][ T31] usb 5-1: device descriptor read/64, error -71 [ 312.621824][T14420] tipc: Enabling of bearer rejected, already enabled [ 312.679920][T14424] overlayfs: failed to resolve './file1': -2 [ 312.824837][T14429] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 312.824860][T14429] rust_binder: Error while translating object. [ 312.835101][T14429] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.842184][T14429] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:641 [ 312.863316][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 312.867830][T14431] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4844'. [ 312.998225][ T31] usb 5-1: device descriptor read/64, error -71 [ 313.216377][T14435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=14435 comm=syz.8.4845 [ 313.238602][ T31] usb 5-1: device descriptor read/64, error -71 [ 313.348638][ T31] usb usb5-port1: attempt power cycle [ 313.366894][T14441] overlayfs: failed to clone upperpath [ 313.688243][ T31] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 313.724670][ T31] usb 5-1: device descriptor read/8, error -71 [ 313.860324][ T31] usb 5-1: device descriptor read/8, error -71 [ 313.933658][T14458] netlink: 'syz.8.4855': attribute type 1 has an invalid length. [ 313.942426][T14458] netlink: 160 bytes leftover after parsing attributes in process `syz.8.4855'. [ 313.998611][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 313.998648][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 314.058332][T14468] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 314.098299][ T31] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 314.123867][ T31] usb 5-1: device descriptor read/8, error -71 [ 314.259724][ T31] usb 5-1: device descriptor read/8, error -71 [ 314.368613][ T31] usb usb5-port1: unable to enumerate USB device [ 314.428172][ T375] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 314.580823][ T375] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 314.591001][ T375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.595625][T14479] rust_binder: Error while translating object. [ 314.601402][T14479] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 314.601527][ T375] usb 8-1: Product: syz [ 314.608273][T14479] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:653 [ 314.618636][ T375] usb 8-1: Manufacturer: syz [ 314.641480][ T375] usb 8-1: SerialNumber: syz [ 315.051959][T14477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.065118][T14477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.108658][T14505] /dev/rnullb0: Can't open blockdev [ 315.115589][T14505] /dev/rnullb0: Can't open blockdev [ 315.154825][T14511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4871'. [ 315.219116][T14511] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4871'. [ 315.228722][T14511] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 315.690886][T14530] binder: Unknown parameter 'context[7' [ 315.700532][T14530] binder: Unknown parameter 'context[7' [ 315.758807][T14535] overlayfs: failed to clone upperpath [ 315.820632][ T375] rtl8150 8-1:1.0: couldn't reset the device [ 315.827406][ T375] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 315.845735][ T375] usb 8-1: USB disconnect, device number 61 [ 315.895674][T14547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14547 comm=syz.8.4883 [ 315.916232][T14548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14548 comm=syz.8.4883 [ 316.043169][T14569] fuseblk: Unknown parameter 'Nd' [ 316.150178][T14579] overlayfs: failed to resolve './file1': -2 [ 316.175985][T14581] fuse: Bad value for 'user_id' [ 316.181874][T14581] fuse: Bad value for 'user_id' [ 316.239980][T14586] can0: slcan on ptm0. [ 316.338136][ T375] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 316.368143][ T449] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 316.478270][ T31] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 316.488219][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 316.495922][ T375] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 316.505715][ T375] usb 5-1: config 0 has no interface number 0 [ 316.508295][ T449] usb 8-1: device descriptor read/64, error -71 [ 316.512885][ T375] usb 5-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 316.536037][ T375] usb 5-1: config 0 interface 200 has no altsetting 0 [ 316.546749][ T375] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 316.556936][ T375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.568035][ T375] usb 5-1: Product: syz [ 316.573318][ T375] usb 5-1: Manufacturer: syz [ 316.579076][ T375] usb 5-1: SerialNumber: syz [ 316.585229][ T375] usb 5-1: config 0 descriptor?? [ 316.629900][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.641545][ T31] usb 10-1: config 0 has no interfaces? [ 316.647447][ T31] usb 10-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 316.658146][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.667662][ T31] usb 10-1: config 0 descriptor?? [ 316.763085][ T449] usb 8-1: device descriptor read/64, error -71 [ 316.799129][ T375] usbhid 5-1:0.200: couldn't find an input interrupt endpoint [ 316.809131][ T375] usb 5-1: USB disconnect, device number 46 [ 316.875503][ T10] usb 10-1: USB disconnect, device number 34 [ 316.909119][T14586] can0 (unregistered): slcan off ptm0. [ 317.008289][ T449] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 317.148346][ T449] usb 8-1: device descriptor read/64, error -71 [ 317.335775][T14637] rust_binder: inc_ref_done called when no active inc_refs [ 317.388226][ T449] usb 8-1: device descriptor read/64, error -71 [ 317.508754][ T449] usb usb8-port1: attempt power cycle [ 317.848235][ T449] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 317.879482][ T449] usb 8-1: device descriptor read/8, error -71 [ 318.009286][ T449] usb 8-1: device descriptor read/8, error -71 [ 318.103943][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4910'. [ 318.248778][ T449] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 318.269469][ T449] usb 8-1: device descriptor read/8, error -71 [ 318.400227][ T449] usb 8-1: device descriptor read/8, error -71 [ 318.463003][ T36] audit: type=1400 audit(1776196106.739:1409): avc: denied { create } for pid=14699 comm="syz.4.4918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 318.518279][ T449] usb usb8-port1: unable to enumerate USB device [ 318.655230][T14711] overlayfs: failed to resolve './file0': -2 [ 319.153935][T14728] tipc: Enabling of bearer rejected, already enabled [ 319.211775][T14731] rust_binder: Error in use_page_slow: ESRCH [ 319.211806][T14731] rust_binder: use_range failure ESRCH [ 319.219173][T14731] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 319.248292][T14731] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 319.260264][T14731] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1376 [ 319.332686][T14734] /dev/rnullb0: Can't open blockdev [ 319.404509][T14748] kvm_intel: kvm [14746]: vcpu5, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x8900480001ff [ 319.445638][T14762] rust_binder: Write failure EINVAL in pid:716 [ 319.733093][T14789] rust_binder: Write failure EINVAL in pid:718 [ 319.740103][T14789] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 319.887238][T14803] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 319.887273][T14803] rust_binder: Error while translating object. [ 319.905272][T14803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 319.914921][T14803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1404 [ 319.971683][ T36] audit: type=1400 audit(1776196108.247:1410): avc: denied { bind } for pid=14809 comm="syz.7.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 320.019799][ T375] rust_binder: 14813: removing orphan mapping 0:4096 [ 320.053187][ T36] audit: type=1400 audit(1776196108.326:1411): avc: denied { nlmsg_tty_audit } for pid=14819 comm="syz.7.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 320.161544][ T449] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 320.243801][T14843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1430 [ 320.288701][ T36] audit: type=1400 audit(1776196108.565:1412): avc: denied { append } for pid=14846 comm="syz.4.4966" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 320.353025][ T449] usb 10-1: Using ep0 maxpacket: 32 [ 320.360798][ T449] usb 10-1: config 8 has an invalid interface number: 69 but max is 0 [ 320.371796][ T449] usb 10-1: config 8 has no interface number 0 [ 320.378411][ T449] usb 10-1: config 8 interface 69 has no altsetting 0 [ 320.387799][ T449] usb 10-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice= 6.d6 [ 320.397840][ T449] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.407394][ T449] usb 10-1: Product: syz [ 320.411893][ T449] usb 10-1: Manufacturer: syz [ 320.423770][ T449] usb 10-1: SerialNumber: syz [ 320.594899][ T375] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 320.636871][ T449] usb_ehset_test 10-1:8.69: probe with driver usb_ehset_test failed with error -32 [ 320.653428][ T449] usb 10-1: USB disconnect, device number 35 [ 320.758263][ T375] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 320.770616][ T375] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.789056][ T375] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 320.806799][ T375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.815774][ T375] usb 8-1: Product: syz [ 320.820592][ T375] usb 8-1: Manufacturer: syz [ 320.825433][ T375] usb 8-1: SerialNumber: syz [ 320.836817][T14856] overlayfs: missing 'lowerdir' [ 320.843204][ T375] rtl8150 8-1:1.0: couldn't find required endpoints [ 320.852101][ T375] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5 [ 321.049439][ T1030] usb 8-1: USB disconnect, device number 66 [ 321.216180][T14877] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 321.223975][T14881] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 321.282495][T14887] overlayfs: failed to clone upperpath [ 321.491903][ T375] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 321.589559][ T36] audit: type=1400 audit(1776196109.854:1413): avc: denied { ioctl } for pid=14897 comm="syz.8.4986" path="socket:[72065]" dev="sockfs" ino=72065 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.654889][ T375] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.666841][ T375] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.682094][ T375] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 321.692373][ T375] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.701977][ T375] usb 10-1: SerialNumber: syz [ 321.721677][T14910] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 321.814477][ T449] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 321.853514][T14918] netlink: 288 bytes leftover after parsing attributes in process `syz.8.4993'. [ 321.918319][ T375] usb 10-1: 0:2 : does not exist [ 321.927382][ T375] usb 10-1: USB disconnect, device number 36 [ 321.965541][ T449] usb 8-1: Using ep0 maxpacket: 32 [ 321.973647][ T449] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.987745][ T449] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 321.996968][ T449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.006892][ T449] usb 8-1: config 0 descriptor?? [ 322.166803][T14920] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.168677][T14920] rust_binder: Error in use_page_slow: ESRCH [ 322.175789][T14920] rust_binder: use_range failure ESRCH [ 322.182487][T14920] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 322.188317][T14920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 322.196914][T14920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:566 [ 322.438838][T14934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.511487][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5001'. [ 322.632280][ T36] audit: type=1400 audit(1776196110.887:1414): avc: denied { bind } for pid=14895 comm="syz.7.4985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.673395][T14946] x_tables: duplicate underflow at hook 1 [ 322.701066][ T10] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 322.723407][ T449] usbhid 8-1:0.0: can't add hid device: -71 [ 322.732682][ T449] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 322.746273][ T449] usb 8-1: USB disconnect, device number 67 [ 322.764212][T14953] overlayfs: workdir and upperdir must be separate subtrees [ 322.800579][T14956] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 322.855207][T14960] netlink: 57 bytes leftover after parsing attributes in process `syz.4.5009'. [ 322.880808][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.891782][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.905426][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 322.916693][ T10] usb 10-1: can't read configurations, error -71 [ 323.558281][T14999] rust_binder: 749: no such ref 4294967294 [ 323.565660][T14999] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 323.590243][T15001] overlayfs: missing 'lowerdir' [ 323.708965][T12022] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 323.823478][ T7345] Bluetooth: hci0: Frame reassembly failed (-84) [ 323.880957][T12022] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.892193][T12022] usb 8-1: config 1 has no interface number 1 [ 323.899666][T12022] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.917901][T12022] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.926329][ T36] audit: type=1326 audit(1776196112.167:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.9.5030" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f5f98eec9 code=0x0 [ 323.932298][T12022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.966794][T12022] usb 8-1: Product: syz [ 323.971664][T12022] usb 8-1: Manufacturer: syz [ 323.977175][T12022] usb 8-1: SerialNumber: syz [ 324.072591][T15026] /dev/loop0: Can't lookup blockdev [ 324.095927][T15029] overlayfs: missing 'lowerdir' [ 324.246805][T12022] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 324.258695][T12022] usb 8-1: USB disconnect, device number 68 [ 324.645421][T12022] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 324.777730][T12022] usb 8-1: device descriptor read/64, error -71 [ 324.836983][T15052] overlayfs: missing 'lowerdir' [ 324.884161][T15056] EXT4-fs: Ignoring removed check option [ 324.884464][ T36] audit: type=1400 audit(1776196113.120:1416): avc: denied { mounton } for pid=15055 comm="syz.9.5043" path="/263/file0" dev="tmpfs" ino=1508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 324.892137][T15056] No source specified [ 324.956128][T15059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 324.956163][T15059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:775 [ 325.058392][T12022] usb 8-1: device descriptor read/64, error -71 [ 325.219602][ T449] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 325.256075][T15066] fuseblk: Unknown parameter 'gvoup_id' [ 325.310296][T12022] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 325.372083][ T449] usb 10-1: config 0 has an invalid interface number: 199 but max is 1 [ 325.381571][ T449] usb 10-1: config 0 has no interface number 1 [ 325.388493][ T449] usb 10-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 325.400641][ T449] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 325.415042][ T449] usb 10-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 325.424935][ T449] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.433349][ T449] usb 10-1: SerialNumber: syz [ 325.439309][ T449] usb 10-1: config 0 descriptor?? [ 325.451358][T12022] usb 8-1: device descriptor read/64, error -71 [ 325.652145][T15062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.661403][T15062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.693241][T12022] usb 8-1: device descriptor read/64, error -71 [ 325.800634][T15073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15073 comm=syz.8.5049 [ 325.821648][T12022] usb usb8-port1: attempt power cycle [ 325.828486][ T449] usb 10-1: Found UVC 0.00 device (0002:0000) [ 325.837219][ T449] usb 10-1: No valid video chain found. [ 325.847450][T15075] overlayfs: missing 'lowerdir' [ 325.850873][ T449] usb 10-1: USB disconnect, device number 39 [ 325.884357][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 325.891258][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 326.176489][T12022] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 326.198394][T12022] usb 8-1: device descriptor read/8, error -71 [ 326.205382][T15090] SELinux: security_context_str_to_sid () failed with errno=-22 [ 326.328812][T12022] usb 8-1: device descriptor read/8, error -71 [ 326.386387][T15095] rust_binder: Write failure EFAULT in pid:787 [ 326.392197][T15095] fuse: Bad value for 'group_id' [ 326.407016][T15095] fuse: Bad value for 'group_id' [ 326.426344][T15097] overlayfs: missing 'lowerdir' [ 326.579329][T12022] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 326.615710][T15116] rust_binder: 615: no such ref 1 [ 326.622220][T15116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 326.623146][T12022] usb 8-1: device descriptor read/8, error -71 [ 326.832407][T12022] usb 8-1: device descriptor read/8, error -71 [ 326.852311][T15145] rust_binder: Write failure EFAULT in pid:801 [ 326.900569][ T36] audit: type=1400 audit(1776196115.126:1417): avc: denied { map } for pid=15150 comm="syz.8.5075" path="socket:[73907]" dev="sockfs" ino=73907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.936453][ T36] audit: type=1400 audit(1776196115.126:1418): avc: denied { accept } for pid=15150 comm="syz.8.5075" path="socket:[73907]" dev="sockfs" ino=73907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 326.942163][T12022] usb usb8-port1: unable to enumerate USB device [ 327.123113][ T10] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 327.214578][T15157] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.222301][T15157] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.229950][T15157] bridge_slave_0: entered allmulticast mode [ 327.238001][T15157] bridge_slave_0: entered promiscuous mode [ 327.245463][T15157] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.253680][T15157] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.261262][T15157] bridge_slave_1: entered allmulticast mode [ 327.268038][T15157] bridge_slave_1: entered promiscuous mode [ 327.296812][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 327.304936][ T10] usb 10-1: can't read configurations, error -61 [ 327.336040][T15162] overlayfs: conflicting options: userxattr,verity=require [ 327.399044][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.406717][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.416035][T15176] tmpfs: Unknown parameter '0x0000000000000003' [ 327.420411][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.430089][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.445360][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 327.458400][T15181] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.477717][T15157] veth0_vlan: entered promiscuous mode [ 327.499751][T15157] veth1_macvtap: entered promiscuous mode [ 327.619891][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 327.631030][ T10] usb 10-1: can't read configurations, error -61 [ 327.639485][ T10] usb usb10-port1: attempt power cycle [ 327.694088][T15198] rust_binder: 9: no such ref 3 [ 327.759647][T15202] veth1: entered allmulticast mode [ 327.817138][T15203] veth1: left allmulticast mode [ 327.898699][ T449] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 327.989195][ T10] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 328.012446][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 328.021921][ T10] usb 10-1: can't read configurations, error -61 [ 328.061377][ T449] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 328.074640][ T449] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 328.086647][ T449] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 328.098497][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.170421][ T10] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 328.195065][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 328.205882][ T10] usb 10-1: can't read configurations, error -61 [ 328.215480][ T10] usb usb10-port1: unable to enumerate USB device [ 328.320008][T15193] /dev/nullb0: Can't lookup blockdev [ 328.363598][ T449] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 328.372653][ T449] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input57 [ 328.387860][ T449] usb 5-1: USB disconnect, device number 47 [ 328.893100][T15224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 328.893816][T15224] rust_binder: Error in use_page_slow: ESRCH [ 328.903456][T15224] rust_binder: use_range failure ESRCH [ 328.910834][T15224] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 328.917601][T15224] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 328.928947][T15224] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:627 [ 329.056495][ T449] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 329.247747][ T449] usb 9-1: Using ep0 maxpacket: 8 [ 329.254772][ T449] usb 9-1: config 0 has an invalid interface number: 200 but max is 0 [ 329.263707][ T449] usb 9-1: config 0 has no interface number 0 [ 329.273613][ T449] usb 9-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 329.288582][ T449] usb 9-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 329.301864][ T449] usb 9-1: config 0 interface 200 has no altsetting 0 [ 329.312506][ T449] usb 9-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 329.322405][ T449] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.331024][ T449] usb 9-1: Product: syz [ 329.336114][ T449] usb 9-1: Manufacturer: syz [ 329.342162][ T449] usb 9-1: SerialNumber: syz [ 329.351389][T15234] input: syz0 as /devices/virtual/input/input58 [ 329.364998][ T449] usb 9-1: config 0 descriptor?? [ 329.511295][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 329.517959][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 329.579366][ T449] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.200/input/input59 [ 329.592501][ C1] usb 9-1: hanwang_irq - nonzero urb status received: -71 [ 329.594053][ T449] usb 9-1: USB disconnect, device number 4 [ 329.600411][ C1] usb 9-1: hanwang_irq - usb_submit_urb failed with result -19 [ 329.627685][T15240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 329.627902][T15240] binder: Bad value for 'stats' [ 329.781558][ T1030] usb 8-1: new full-speed USB device number 73 using dummy_hcd [ 329.888681][T15245] overlayfs: failed to resolve './bus/file0': -2 [ 329.911554][ T36] audit: type=1400 audit(1776196118.115:1419): avc: denied { nlmsg_write } for pid=15246 comm="syz.9.5105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 329.938122][ T36] audit: type=1400 audit(1776196118.115:1420): avc: denied { audit_write } for pid=15246 comm="syz.9.5105" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 329.939352][ T1030] usb 8-1: device descriptor read/64, error -71 [ 329.961517][ T36] audit: type=1107 audit(1776196118.115:1421): pid=15246 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 330.204217][ T1030] usb 8-1: device descriptor read/64, error -71 [ 330.345137][ T1561] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 330.445889][ T1030] usb 8-1: new full-speed USB device number 74 using dummy_hcd [ 330.496154][ T1561] usb 9-1: Using ep0 maxpacket: 8 [ 330.502613][ T1561] usb 9-1: config 2 has an invalid interface number: 231 but max is 2 [ 330.511177][ T1561] usb 9-1: config 2 has an invalid interface number: 225 but max is 2 [ 330.520707][ T1561] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 330.530058][ T1561] usb 9-1: config 2 has an invalid interface number: 218 but max is 2 [ 330.538583][ T1561] usb 9-1: config 2 has no interface number 0 [ 330.544966][ T1561] usb 9-1: config 2 has no interface number 1 [ 330.551578][ T1561] usb 9-1: config 2 has no interface number 2 [ 330.559038][ T1561] usb 9-1: config 2 interface 231 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 330.560962][T15254] 9pnet_fd: Insufficient options for proto=fd [ 330.570284][ T1561] usb 9-1: config 2 interface 231 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 330.588479][ T1561] usb 9-1: config 2 interface 231 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 330.600603][ T1561] usb 9-1: config 2 interface 231 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 330.606964][ T1030] usb 8-1: device descriptor read/64, error -71 [ 330.612036][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has a duplicate endpoint with address 0x1, skipping [ 330.629311][ T1561] usb 9-1: config 2 interface 225 altsetting 212 endpoint 0xE has invalid wMaxPacketSize 0 [ 330.639982][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has an endpoint descriptor with address 0x2B, changing to 0xB [ 330.652129][ T1561] usb 9-1: config 2 interface 225 altsetting 212 endpoint 0xB has an invalid bInterval 170, changing to 11 [ 330.663293][T15256] netlink: 'syz.4.5109': attribute type 25 has an invalid length. [ 330.664106][ T1561] usb 9-1: config 2 interface 225 altsetting 212 endpoint 0xB has invalid maxpacket 9482, setting to 1024 [ 330.686345][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 330.698692][ T1561] usb 9-1: config 2 interface 225 altsetting 212 endpoint 0x4 has an invalid bInterval 99, changing to 7 [ 330.703298][T15259] fuseblk: Unknown parameter 'subj_user' [ 330.710091][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has a duplicate endpoint with address 0xE, skipping [ 330.710125][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 330.738409][ T1561] usb 9-1: config 2 interface 225 altsetting 212 endpoint 0x5 has an invalid bInterval 226, changing to 7 [ 330.750372][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 330.762208][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has an invalid descriptor for endpoint zero, skipping [ 330.774203][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has a duplicate endpoint with address 0x5, skipping [ 330.785903][ T1561] usb 9-1: config 2 interface 225 altsetting 212 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 330.808961][ T1561] usb 9-1: config 2 interface 218 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 330.822497][ T1561] usb 9-1: config 2 interface 231 has no altsetting 0 [ 330.829802][ T1561] usb 9-1: config 2 interface 225 has no altsetting 0 [ 330.837902][ T1561] usb 9-1: config 2 interface 218 has no altsetting 0 [ 330.849713][ T1561] usb 9-1: New USB device found, idVendor=19d2, idProduct=0086, bcdDevice=7b.25 [ 330.860080][ T1561] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.868425][ T1561] usb 9-1: Product: syz [ 330.872940][ T1561] usb 9-1: Manufacturer: syz [ 330.877704][ T1561] usb 9-1: SerialNumber: syz [ 330.908932][ T1030] usb 8-1: device descriptor read/64, error -71 [ 331.020844][ T1030] usb usb8-port1: attempt power cycle [ 331.305639][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.329187][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.365171][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.376642][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.386317][ T1030] usb 8-1: new full-speed USB device number 75 using dummy_hcd [ 331.395835][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.405654][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.413795][ T1030] usb 8-1: device descriptor read/8, error -71 [ 331.416997][T15250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.429603][T15250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.536846][T15288] sit0: entered promiscuous mode [ 331.545004][ T1030] usb 8-1: device descriptor read/8, error -71 [ 331.547831][T15288] netlink: 'syz.9.5119': attribute type 1 has an invalid length. [ 331.560461][T15288] netlink: 9 bytes leftover after parsing attributes in process `syz.9.5119'. [ 331.784761][ T1030] usb 8-1: new full-speed USB device number 76 using dummy_hcd [ 331.806041][ T1030] usb 8-1: device descriptor read/8, error -71 [ 331.848031][ T1561] usb 9-1: USB disconnect, device number 5 [ 331.937404][ T1030] usb 8-1: device descriptor read/8, error -71 [ 332.046553][ T1030] usb usb8-port1: unable to enumerate USB device [ 338.427123][T15294] rust_binder: Error while translating object. [ 338.427180][T15294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.437010][ T46] Bluetooth: hci0: Frame reassembly failed (-90) [ 338.443505][T15298] rust_binder: Error while translating object. [ 338.465316][T15294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1479 [ 338.465420][T15298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 338.475596][T15298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1479 [ 338.759229][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5129'. [ 338.858367][T12022] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 339.019272][T12022] usb 5-1: Using ep0 maxpacket: 8 [ 339.025932][T12022] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 339.035048][T12022] usb 5-1: config 0 has no interface number 0 [ 339.042844][T12022] usb 5-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 339.046172][T15327] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 339.056456][T12022] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 339.065678][T15327] overlayfs: failed to get uuid (522/file1, err=-13); falling back to uuid=null. [ 339.077302][T12022] usb 5-1: config 0 interface 200 has no altsetting 0 [ 339.091632][ T36] audit: type=1400 audit(1776196127.237:1422): avc: denied { setattr } for pid=15326 comm="syz.7.5133" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 339.096249][T12022] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 339.127134][T12022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.135590][T12022] usb 5-1: Product: syz [ 339.140137][T12022] usb 5-1: Manufacturer: syz [ 339.145223][T12022] usb 5-1: SerialNumber: syz [ 339.151295][T12022] usb 5-1: config 0 descriptor?? [ 339.363941][T12022] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input61 [ 339.375892][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.383212][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.390631][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.398172][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.405893][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.413477][ C1] usb 5-1: hanwang_irq - nonzero urb status received: -71 [ 339.421190][ C1] usb 5-1: hanwang_irq - usb_submit_urb failed with result -1 [ 339.431320][T12022] usb 5-1: USB disconnect, device number 48 [ 339.514480][T15340] netlink: 182 bytes leftover after parsing attributes in process `syz.9.5138'. [ 339.900501][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5149'. [ 340.045217][T12022] usb 8-1: new full-speed USB device number 77 using dummy_hcd [ 340.135712][ T4422] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 340.197136][T12022] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 340.208405][T12022] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 340.221730][T12022] usb 8-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 340.231193][T12022] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.240290][T12022] usb 8-1: config 0 descriptor?? [ 340.245623][T15362] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 340.254004][T12022] usbhid 8-1:0.0: can't add hid device: -22 [ 340.260157][T12022] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 340.297959][ T4422] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 340.306671][ T4422] usb 5-1: config 179 has no interface number 0 [ 340.313084][ T4422] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 340.324673][ T4422] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 340.334749][ T4422] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 340.347649][ T4422] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 340.360489][ T4422] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 340.373899][ T4422] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 340.383361][ T4422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.392571][T15369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 340.401118][ T4422] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 340.412525][ T4422] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 340.457584][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.464215][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 340.477807][ T1561] usb 8-1: USB disconnect, device number 77 [ 340.510631][T15374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.511344][T15374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.520489][T15374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 340.548562][T15377] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.558424][T15377] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 340.564987][T15377] rust_binder: Error while translating object. [ 340.575943][T15377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 340.582229][T15377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 340.609614][T15379] rust_binder: 45: no such ref 1 [ 340.613611][T15369] netlink: 'syz.4.5148': attribute type 27 has an invalid length. [ 340.619275][T15379] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45 [ 340.631903][ T31] usb 5-1: USB disconnect, device number 49 [ 340.994681][T15392] rust_binder: Error while translating object. [ 340.994738][T15392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 341.001662][T15392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1501 [ 341.129940][T15404] overlayfs: failed to clone upperpath [ 341.142564][T15385] overlay: ./bus is not a directory [ 341.161974][T15405] overlayfs: failed to resolve './file0/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0': -2 [ 341.220721][ T36] audit: type=1400 audit(1776196129.355:1423): avc: granted { setsecparam } for pid=15412 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 341.408493][T15432] can0: slcan on ptm0. [ 341.419022][T15430] rust_binder: Write failure EFAULT in pid:684 [ 341.453305][T15436] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 341.502728][T15453] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 341.520775][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5168'. [ 341.635892][T15478] cannot load conntrack support for proto=3 [ 341.674421][ T4422] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 341.827355][ T4422] usb 8-1: config index 0 descriptor too short (expected 13083, got 27) [ 341.835880][ T4422] usb 8-1: config 51 has too many interfaces: 51, using maximum allowed: 32 [ 341.845015][ T4422] usb 8-1: config 51 has an invalid descriptor of length 0, skipping remainder of the config [ 341.856791][ T4422] usb 8-1: config 51 has 0 interfaces, different from the descriptor's value: 51 [ 341.866941][ T4422] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 341.877056][ T4422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.089405][ T1561] usb 8-1: USB disconnect, device number 78 [ 342.208123][T15432] can0 (unregistered): slcan off ptm0. [ 342.357459][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5188'. [ 342.366903][T15527] bridge_slave_1: left allmulticast mode [ 342.373284][T15527] bridge_slave_1: left promiscuous mode [ 342.378327][ T36] audit: type=1400 audit(1776196130.499:1424): avc: denied { listen } for pid=15524 comm="syz.8.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.379951][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.407916][T15527] bridge_slave_0: left allmulticast mode [ 342.413866][T15527] bridge_slave_0: left promiscuous mode [ 342.424529][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.424946][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.438533][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.439166][ T36] audit: type=1400 audit(1776196130.568:1425): avc: denied { ioctl } for pid=15525 comm="syz.4.5188" path="socket:[75949]" dev="sockfs" ino=75949 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 342.485311][ T36] audit: type=1400 audit(1776196130.608:1426): avc: denied { read } for pid=15525 comm="syz.4.5188" dev="nsfs" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 342.508541][ T36] audit: type=1400 audit(1776196130.608:1427): avc: denied { open } for pid=15525 comm="syz.4.5188" path="net:[4026532305]" dev="nsfs" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 342.533147][ T36] audit: type=1400 audit(1776196130.608:1428): avc: denied { create } for pid=15525 comm="syz.4.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.554624][ T36] audit: type=1400 audit(1776196130.628:1429): avc: denied { create } for pid=15533 comm="syz.8.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.576302][ T36] audit: type=1400 audit(1776196130.628:1430): avc: denied { create } for pid=15533 comm="syz.8.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.597397][ T36] audit: type=1400 audit(1776196130.628:1431): avc: denied { write } for pid=15533 comm="syz.8.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.690439][T15542] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 342.701853][T15542] overlayfs: missing 'lowerdir' [ 342.851900][T15553] netlink: 'syz.7.5193': attribute type 46 has an invalid length. [ 342.867673][T15553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1517 [ 342.869519][T15553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 342.879124][T15553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1517 [ 342.892501][T15553] veth1_macvtap: left promiscuous mode [ 342.901930][T15555] 9pnet: Could not find request transport: nt7Lt=iwdբ#{gV [ 342.901930][T15555] e80xffffffffffffffff [ 343.355762][T15561] /dev/loop0: Can't lookup blockdev [ 343.485155][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5202'. [ 343.593124][T15579] batadv_slave_0: entered promiscuous mode [ 343.685629][T15578] batadv_slave_0: left promiscuous mode [ 344.151038][ T36] kauditd_printk_skb: 217 callbacks suppressed [ 344.151059][ T36] audit: type=1400 audit(1776196132.269:1649): avc: denied { read write } for pid=7556 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.251820][ T36] audit: type=1400 audit(1776196132.309:1650): avc: denied { read write open } for pid=7556 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.299616][T15603] fuse: Bad value for 'fd' [ 344.339199][ T36] audit: type=1400 audit(1776196132.309:1651): avc: denied { ioctl } for pid=7556 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.422327][ T36] audit: type=1400 audit(1776196132.329:1652): avc: denied { read write } for pid=15599 comm="syz.7.5212" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.499823][ T396] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.550088][ T36] audit: type=1400 audit(1776196132.329:1653): avc: denied { read write open } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.690817][ T36] audit: type=1400 audit(1776196132.339:1654): avc: denied { ioctl } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.762311][ T36] audit: type=1400 audit(1776196132.349:1655): avc: denied { map } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.822842][ T36] audit: type=1400 audit(1776196132.349:1656): avc: denied { read } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.849251][ T36] audit: type=1400 audit(1776196132.349:1657): avc: denied { map } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.861273][T15626] rust_binder: Write failure EFAULT in pid:1537 [ 344.877671][ T36] audit: type=1400 audit(1776196132.359:1658): avc: denied { read } for pid=15599 comm="syz.7.5212" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 344.879459][T15626] rust_binder: Write failure EFAULT in pid:1537 [ 345.032656][ T4422] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 345.173438][ T4422] usb 5-1: device descriptor read/64, error -71 [ 345.414714][ T4422] usb 5-1: device descriptor read/64, error -71 [ 345.666126][ T4422] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 345.806758][ T4422] usb 5-1: device descriptor read/64, error -71 [ 346.017388][T15674] veth1: entered allmulticast mode [ 346.048383][ T4422] usb 5-1: device descriptor read/64, error -71 [ 346.082464][T15675] fuse: Bad value for 'fd' [ 346.159362][ T4422] usb usb5-port1: attempt power cycle [ 346.500420][ T4422] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 346.523118][ T4422] usb 5-1: device descriptor read/8, error -71 [ 346.654150][ T4422] usb 5-1: device descriptor read/8, error -71 [ 346.849429][T15673] veth1: left allmulticast mode [ 346.892414][ T4422] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 346.915740][ T4422] usb 5-1: device descriptor read/8, error -71 [ 347.056621][ T4422] usb 5-1: device descriptor read/8, error -71 [ 347.104021][ T375] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 347.171724][T15699] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5245'. [ 347.174517][ T4422] usb usb5-port1: unable to enumerate USB device [ 347.274751][ T375] usb 8-1: Using ep0 maxpacket: 16 [ 347.283873][ T375] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 347.294951][ T375] usb 8-1: config 1 has no interface number 1 [ 347.301391][ T375] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.313618][ T375] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 347.329412][ T375] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 347.346116][ T375] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.356140][ T375] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.364444][ T375] usb 8-1: Product: syz [ 347.370151][ T375] usb 8-1: Manufacturer: syz [ 347.374864][ T375] usb 8-1: SerialNumber: syz [ 347.616384][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 347.793858][ T375] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 348.614358][T15685] rust_binder: Write failure EFAULT in pid:1556 [ 348.614798][ T375] usb 8-1: 2:1: cannot get freq at ep 0x82 [ 348.648297][ T375] usb 8-1: USB disconnect, device number 79 [ 348.762689][T15297] udevd[15297]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 349.251250][ T36] kauditd_printk_skb: 509 callbacks suppressed [ 349.251271][ T36] audit: type=1400 audit(1776196137.343:2168): avc: denied { read write } for pid=7556 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.287434][ T36] audit: type=1400 audit(1776196137.343:2169): avc: denied { read write open } for pid=7556 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.322282][ T36] audit: type=1400 audit(1776196137.343:2170): avc: denied { ioctl } for pid=7556 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 349.378084][ T36] audit: type=1400 audit(1776196137.373:2171): avc: denied { create } for pid=15766 comm="syz.7.5269" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 349.403196][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5270'. [ 349.414636][ T36] audit: type=1400 audit(1776196137.373:2172): avc: denied { create } for pid=15766 comm="syz.7.5269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.439083][ T36] audit: type=1400 audit(1776196137.383:2173): avc: denied { create } for pid=15766 comm="syz.7.5269" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.462426][ T36] audit: type=1400 audit(1776196137.383:2174): avc: denied { create } for pid=15764 comm="syz.9.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.483318][ T36] audit: type=1400 audit(1776196137.383:2175): avc: denied { mounton } for pid=15764 comm="syz.9.5268" path="/340" dev="tmpfs" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.508690][ T36] audit: type=1400 audit(1776196137.383:2176): avc: denied { mount } for pid=15764 comm="syz.9.5268" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 349.539849][ T36] audit: type=1400 audit(1776196137.383:2177): avc: denied { write } for pid=15764 comm="syz.9.5268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.670585][T15787] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 349.727634][T15792] rust_binder: Error while translating object. [ 349.735700][T15792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 349.744054][T15792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1569 [ 349.790385][T15793] rust_binder: Error in use_page_slow: ESRCH [ 349.801439][T15793] rust_binder: use_range failure ESRCH [ 349.808661][T15793] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 349.814226][T15793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 349.823195][T15793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:705 [ 350.212692][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5290'. [ 350.327398][T15844] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 350.554947][T15854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=15854 comm=syz.9.5295 [ 350.728542][T15866] tipc: Enabling of bearer rejected, failed to enable media [ 350.788263][T15872] overlayfs: failed to clone upperpath [ 351.318367][T15916] overlayfs: failed to clone upperpath [ 351.325414][T15915] rust_binder: Write failure EFAULT in pid:1607 [ 351.428459][T15920] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 351.482424][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5319'. [ 351.510200][T15922] overlayfs: failed to clone upperpath [ 351.527093][T15922] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5319'. [ 351.963409][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5330'. [ 352.119941][T15958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5331'. [ 352.138465][T15958] erspan0: default FDB implementation only supports local addresses [ 352.238824][ T1030] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 352.410728][ T1030] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 352.447976][ T1030] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 352.480030][ T1030] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 352.505009][ T1030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.526414][ T1030] usb 5-1: config 0 descriptor?? [ 352.542923][T15952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 352.581815][ T1030] usbhid 5-1:0.0: can't add hid device: -22 [ 352.587871][ T1030] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 352.803404][T12022] usb 5-1: USB disconnect, device number 54 [ 352.973953][T15991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15991 comm=syz.9.5342 [ 353.163977][T16002] rust_binder: validate_parent_fixup: new_min_offset=12, sg_entry.length=0 [ 353.164007][T16002] rust_binder: Error while translating object. [ 353.192499][T16002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.205563][T16002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1629 [ 353.443341][T16016] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 344, limit: 1168, size: 18446744073709551614) [ 353.453699][T16016] rust_binder: Error while translating object. [ 353.466343][T16016] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 353.472890][T16016] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1634 [ 353.646035][T16030] /dev/rnullb0: Can't open blockdev [ 353.892317][T16046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16046 comm=syz.9.5363 [ 354.079744][T12022] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 354.134307][T16056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16056 comm=syz.9.5368 [ 354.252840][T12022] usb 5-1: config 14 has an invalid interface number: 21 but max is 0 [ 354.262198][T12022] usb 5-1: config 14 has no interface number 0 [ 354.271429][T12022] usb 5-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 354.286221][T12022] usb 5-1: config 14 interface 21 has no altsetting 0 [ 354.295344][ T36] kauditd_printk_skb: 732 callbacks suppressed [ 354.295374][ T36] audit: type=1400 audit(1776196142.369:2910): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.306735][T12022] usb 5-1: string descriptor 0 read error: -22 [ 354.330008][ T36] audit: type=1400 audit(1776196142.369:2911): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.359289][T12022] usb 5-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 354.367088][ T36] audit: type=1400 audit(1776196142.369:2912): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.379274][T12022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.407861][ T36] audit: type=1400 audit(1776196142.369:2913): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.419029][T16043] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 354.446895][ T36] audit: type=1400 audit(1776196142.369:2914): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.474425][T12022] usb 5-1: MIDIStreaming interface descriptor not found [ 354.498299][ T36] audit: type=1400 audit(1776196142.369:2915): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.525427][ T36] audit: type=1400 audit(1776196142.369:2916): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.558372][ T36] audit: type=1400 audit(1776196142.369:2917): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.584620][ T36] audit: type=1400 audit(1776196142.369:2918): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.610302][ T36] audit: type=1400 audit(1776196142.369:2919): avc: denied { ioctl } for pid=16041 comm="syz.4.5361" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 354.660451][T12022] usb 5-1: USB disconnect, device number 55 [ 354.839116][T16082] 9pnet_fd: Insufficient options for proto=fd [ 355.496346][T16109] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 355.717990][T16118] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 355.876581][T16135] binder: Unknown parameter 'fscontext?}' [ 356.333500][T16171] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 356.669040][T12022] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 356.819663][T12022] usb 8-1: Using ep0 maxpacket: 16 [ 356.824812][T16180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 356.828566][T12022] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 356.845414][T12022] usb 8-1: config 0 has no interface number 0 [ 356.857110][T12022] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 356.866516][T12022] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.874723][T12022] usb 8-1: Product: syz [ 356.879465][T12022] usb 8-1: Manufacturer: syz [ 356.889582][T12022] usb 8-1: SerialNumber: syz [ 356.898150][T12022] usb 8-1: config 0 descriptor?? [ 356.907591][T12022] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 356.920205][T12022] usb 8-1: No valid video chain found. [ 357.111382][T16190] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.115091][T16190] rust_binder: Error while translating object. [ 357.115757][T16176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.151389][T16176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.152947][T16190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 357.159453][T16190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:757 [ 357.162166][T16176] rust_binder: Write failure EFAULT in pid:1674 [ 357.195469][T12022] usb 8-1: USB disconnect, device number 81 [ 357.603152][T16220] rust_binder: Write failure EFAULT in pid:762 [ 357.704121][T16227] /dev/rnullb0: Can't open blockdev [ 357.875772][T16240] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 357.884757][T16240] rust_binder: inc_ref_done called when no active inc_refs [ 357.891377][T16240] rust_binder: 767: no such ref 3 [ 358.301301][T16266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.311194][T16266] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 358.335013][T16266] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1688 [ 358.789084][T16286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5445'. [ 358.841484][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 359.051611][T16289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5446'. [ 359.452410][ T36] kauditd_printk_skb: 1566 callbacks suppressed [ 359.452432][ T36] audit: type=1400 audit(1776196147.506:4486): avc: denied { create } for pid=16290 comm="syz.9.5447" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.483988][ T36] audit: type=1400 audit(1776196147.506:4487): avc: denied { write } for pid=16290 comm="syz.9.5447" name="file2" dev="tmpfs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.508168][ T36] audit: type=1400 audit(1776196147.506:4488): avc: denied { write open } for pid=16290 comm="syz.9.5447" path="/398/file2" dev="tmpfs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.533854][ T36] audit: type=1400 audit(1776196147.506:4489): avc: denied { ioctl } for pid=16290 comm="syz.9.5447" path="/398/file2" dev="tmpfs" ino=2233 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.573743][ T36] audit: type=1400 audit(1776196147.536:4490): avc: denied { unlink } for pid=10870 comm="syz-executor" name="file2" dev="tmpfs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 359.598975][ T36] audit: type=1400 audit(1776196147.566:4491): avc: denied { create } for pid=16292 comm="syz.9.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.641248][ T36] audit: type=1400 audit(1776196147.566:4492): avc: denied { create } for pid=16292 comm="syz.9.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.662176][ T36] audit: type=1400 audit(1776196147.566:4493): avc: denied { bind } for pid=16292 comm="syz.9.5448" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.683582][ T36] audit: type=1400 audit(1776196147.566:4494): avc: denied { node_bind } for pid=16292 comm="syz.9.5448" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 359.708669][ T36] audit: type=1400 audit(1776196147.566:4495): avc: denied { create } for pid=16292 comm="syz.9.5448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.006281][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'. [ 360.877269][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 360.882845][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.285080][T16371] netlink: 'syz.8.5473': attribute type 2 has an invalid length. [ 361.303983][T16371] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5473'. [ 361.429476][T16373] veth1: entered allmulticast mode [ 361.533967][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5474'. [ 361.869136][T16397] tipc: Enabling of bearer rejected, failed to enable media [ 361.958219][T16399] binder: Bad value for 'max' [ 362.238630][T16372] veth1: left allmulticast mode [ 362.450833][T16411] sel_write_load: 12 callbacks suppressed [ 362.450858][T16411] SELinux: failed to load policy [ 362.483078][T16422] tc_dump_action: action bad kind [ 363.277021][T16453] can0: slcan on ptm0. [ 363.371760][T16453] can0 (unregistered): slcan off ptm0. [ 363.648206][ T31] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 363.869137][ T31] usb 8-1: device descriptor read/64, error -71 [ 364.159333][ T31] usb 8-1: device descriptor read/64, error -71 [ 364.411203][ T31] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 364.512200][ T36] kauditd_printk_skb: 351 callbacks suppressed [ 364.512226][ T36] audit: type=1400 audit(1776196152.545:4847): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.575536][ T31] usb 8-1: device descriptor read/64, error -71 [ 364.713061][ T36] audit: type=1400 audit(1776196152.745:4848): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.800093][ T36] audit: type=1400 audit(1776196152.745:4849): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.842894][ T31] usb 8-1: device descriptor read/64, error -71 [ 364.882251][ T36] audit: type=1400 audit(1776196152.745:4850): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.965764][ T36] audit: type=1400 audit(1776196152.745:4851): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 364.981048][ T31] usb usb8-port1: attempt power cycle [ 365.050218][ T36] audit: type=1400 audit(1776196152.745:4852): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.054388][T16514] netlink: 'syz.8.5518': attribute type 2 has an invalid length. [ 365.135100][ T36] audit: type=1400 audit(1776196152.745:4853): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.189141][ T36] audit: type=1400 audit(1776196152.745:4854): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.244429][ T36] audit: type=1400 audit(1776196152.824:4855): avc: denied { ioctl } for pid=16452 comm="syz.7.5499" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 365.296226][ T36] audit: type=1400 audit(1776196152.874:4856): avc: denied { create } for pid=16511 comm="syz.8.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 365.374949][ T31] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 365.407902][ T31] usb 8-1: device descriptor read/8, error -71 [ 365.549708][ T31] usb 8-1: device descriptor read/8, error -71 [ 365.816662][ T31] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 365.859843][ T31] usb 8-1: device descriptor read/8, error -71 [ 365.996364][ T31] usb 8-1: device descriptor read/8, error -71 [ 366.117887][ T31] usb usb8-port1: unable to enumerate USB device [ 366.687430][T16562] netlink: 'syz.4.5534': attribute type 4 has an invalid length. [ 366.719304][T16562] netlink: 'syz.4.5534': attribute type 6 has an invalid length. [ 366.748665][T16562] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5534'. [ 367.173644][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.187995][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.196347][T16568] bridge_slave_0: entered allmulticast mode [ 367.203515][T16568] bridge_slave_0: entered promiscuous mode [ 367.211209][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.219370][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.227409][T16568] bridge_slave_1: entered allmulticast mode [ 367.234681][T16568] bridge_slave_1: entered promiscuous mode [ 367.504283][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.511527][T16568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.518949][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.526132][T16568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.716587][ T7345] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.731536][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.781288][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.789304][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.835244][ T7345] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.842552][ T7345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.260955][T16568] veth0_vlan: entered promiscuous mode [ 368.407328][T16568] veth1_macvtap: entered promiscuous mode [ 368.939760][T16645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 368.956841][T16645] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 368.997226][T16645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 369.544978][ T36] kauditd_printk_skb: 288 callbacks suppressed [ 369.545007][ T36] audit: type=1400 audit(1776196157.547:5145): avc: denied { create } for pid=16665 comm="syz.4.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.640461][ T36] audit: type=1400 audit(1776196157.636:5146): avc: denied { write } for pid=16665 comm="syz.4.5565" path="socket:[79556]" dev="sockfs" ino=79556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.706255][ T36] audit: type=1400 audit(1776196157.636:5147): avc: denied { write } for pid=16665 comm="syz.4.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.738729][T16667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.745492][T16667] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 369.754535][ T36] audit: type=1400 audit(1776196157.636:5148): avc: denied { write } for pid=16665 comm="syz.4.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.778279][T16667] audit: backlog limit exceeded [ 369.785937][T16667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.794908][T16667] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 369.803993][ T36] audit: type=1400 audit(1776196157.636:5149): avc: denied { write } for pid=16665 comm="syz.4.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.468139][ T36] kauditd_printk_skb: 217 callbacks suppressed [ 376.468162][ T36] audit: type=1400 audit(1776196164.453:5261): avc: denied { create } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.502354][ T36] audit: type=1400 audit(1776196164.453:5262): avc: denied { create } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.524853][ T36] audit: type=1400 audit(1776196164.453:5263): avc: denied { write } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.580901][ T36] audit: type=1400 audit(1776196164.453:5264): avc: denied { read } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.586888][T16701] netlink: 'syz.4.5575': attribute type 13 has an invalid length. [ 376.622963][ T36] audit: type=1400 audit(1776196164.453:5265): avc: denied { read } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.645674][ T36] audit: type=1400 audit(1776196164.453:5266): avc: denied { sys_module } for pid=16686 comm="syz.8.5571" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 376.667598][ T36] audit: type=1400 audit(1776196164.453:5267): avc: denied { write } for pid=16686 comm="syz.8.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.720374][ T36] audit: type=1400 audit(1776196164.483:5268): avc: denied { read write } for pid=16687 comm="syz.7.5572" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.744821][ T36] audit: type=1400 audit(1776196164.483:5269): avc: denied { read write open } for pid=16687 comm="syz.7.5572" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 376.782845][ T36] audit: type=1400 audit(1776196164.483:5270): avc: denied { create } for pid=16687 comm="syz.7.5572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 376.846904][T16712] tipc: Started in network mode [ 376.859120][T16712] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 376.889776][T16712] tipc: Enabled bearer , priority 10 [ 376.901443][T16714] rust_binder: 18: no such ref 1 [ 376.915634][T16714] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 377.329853][T16739] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 377.347550][T16739] rust_binder: Read failure Err(EFAULT) in pid:30 [ 377.371529][T16739] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 377.396203][T16739] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 378.009098][T12022] tipc: Node number set to 4269801494 [ 378.719610][T16784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=16784 comm=syz.7.5603 [ 378.719610][T16786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=16786 comm=syz.7.5603 [ 378.719647][T16784] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=16784 comm=syz.7.5603 [ 378.749661][T16786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=30 sclass=netlink_audit_socket pid=16786 comm=syz.7.5603 [ 378.791172][T16786] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=42 sclass=netlink_audit_socket pid=16786 comm=syz.7.5603 [ 379.327259][ T293] bridge_slave_1: left allmulticast mode [ 379.337622][ T293] bridge_slave_1: left promiscuous mode [ 379.373450][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.394662][ T293] bridge_slave_0: left allmulticast mode [ 379.400468][ T293] bridge_slave_0: left promiscuous mode [ 379.433617][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.665682][ T293] tipc: Disabling bearer [ 379.683368][ T293] tipc: Left network mode [ 380.037084][ T293] veth1_macvtap: left promiscuous mode [ 380.042858][ T293] veth0_vlan: left promiscuous mode [ 380.583451][T16845] lo: entered allmulticast mode [ 380.590305][T16844] lo: left allmulticast mode [ 381.383902][T16856] overlayfs: failed to clone lowerpath [ 381.578192][ T36] kauditd_printk_skb: 283 callbacks suppressed [ 381.578214][ T36] audit: type=1400 audit(1776196169.552:5554): avc: denied { create } for pid=16866 comm="syz.9.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.580089][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.586639][ T36] audit: type=1400 audit(1776196169.552:5555): avc: denied { mounton } for pid=16866 comm="syz.9.5628" path="/446/file0" dev="tmpfs" ino=2492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 381.607462][T16825] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.641841][ T36] audit: type=1400 audit(1776196169.612:5556): avc: denied { create } for pid=16869 comm="syz.8.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.642219][T16825] bridge_slave_0: entered allmulticast mode [ 381.666420][ T36] audit: type=1400 audit(1776196169.632:5557): avc: denied { create } for pid=16866 comm="syz.9.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 381.670182][T16825] bridge_slave_0: entered promiscuous mode [ 381.691576][ T36] audit: type=1400 audit(1776196169.642:5558): avc: denied { create } for pid=16866 comm="syz.9.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 381.696584][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.716055][ T36] audit: type=1400 audit(1776196169.662:5559): avc: denied { setopt } for pid=16869 comm="syz.8.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.722142][T16825] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.722238][T16825] bridge_slave_1: entered allmulticast mode [ 381.746422][ T36] audit: type=1400 audit(1776196169.712:5560): avc: denied { setopt } for pid=16869 comm="syz.8.5629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.753316][T16825] bridge_slave_1: entered promiscuous mode [ 381.795935][ T36] audit: type=1400 audit(1776196169.762:5561): avc: denied { sys_module } for pid=16825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 381.817673][ T36] audit: type=1400 audit(1776196169.762:5562): avc: denied { sys_module } for pid=16825 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 381.840589][ T36] audit: type=1400 audit(1776196169.762:5563): avc: denied { ioctl } for pid=16869 comm="syz.8.5629" path="socket:[79824]" dev="sockfs" ino=79824 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 381.939183][T16825] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.946646][T16825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.963086][T16825] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.970282][T16825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.020053][T16881] /dev/loop4: Can't lookup blockdev [ 382.047688][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.055430][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.074192][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.081508][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.095863][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.103443][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.252815][T16825] veth0_vlan: entered promiscuous mode [ 382.360673][T16825] veth1_macvtap: entered promiscuous mode [ 384.187483][T12022] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 384.270489][T16926] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5643'. [ 384.340446][T12022] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.356849][T12022] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 384.371581][T12022] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 384.388544][T12022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.407385][T12022] usb 1-1: config 0 descriptor?? [ 384.754009][T16938] netlink: 'syz.9.5648': attribute type 15 has an invalid length. [ 384.769386][T16938] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5648'. [ 384.857248][T16944] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5649'. [ 385.010075][T16958] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5654'. [ 385.050223][T16909] __vm_enough_memory: pid: 16909, comm: syz.0.5613, bytes: 18014402804453376 not enough memory for the allocation [ 385.806083][T16984] /dev/rnullb0: Can't open blockdev [ 386.011977][T16993] rust_binder: Failed to vm_insert_page(35184388861952): vma_addr:35184388857856 i:1 err:EFAULT [ 386.012018][T16993] rust_binder: Error in use_page_slow: EFAULT [ 386.046789][T16993] rust_binder: use_range failure EFAULT [ 386.087193][T16993] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 386.107477][T16993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 386.115625][T16993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8 [ 386.715168][ T36] kauditd_printk_skb: 641 callbacks suppressed [ 386.715208][ T36] audit: type=1400 audit(1776196174.682:6205): avc: denied { read write } for pid=16825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.805849][ T36] audit: type=1400 audit(1776196174.682:6206): avc: denied { read write open } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.877469][ T36] audit: type=1400 audit(1776196174.682:6207): avc: denied { ioctl } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 386.938180][ T36] audit: type=1400 audit(1776196174.912:6208): avc: denied { create } for pid=17002 comm="syz.8.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 386.992641][ T36] audit: type=1400 audit(1776196174.912:6209): avc: denied { write } for pid=17002 comm="syz.8.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 387.037466][ T36] audit: type=1400 audit(1776196174.912:6210): avc: denied { nlmsg_write } for pid=17002 comm="syz.8.5667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 387.087456][ T36] audit: type=1400 audit(1776196175.052:6211): avc: denied { create } for pid=17005 comm="syz.8.5668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 387.124295][ T36] audit: type=1326 audit(1776196175.052:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17005 comm="syz.8.5668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f197f98eec9 code=0x0 [ 387.364896][ T36] audit: type=1400 audit(1776196175.332:6213): avc: denied { read write } for pid=16825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.407470][ T36] audit: type=1400 audit(1776196175.352:6214): avc: denied { read write open } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.709657][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5673'. [ 389.238970][T17035] __vm_enough_memory: pid: 17035, comm: syz.0.5677, bytes: 18014402804453376 not enough memory for the allocation [ 389.915731][T12022] usbhid 1-1:0.0: can't add hid device: -32 [ 389.922665][T12022] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 390.427888][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'. [ 391.249232][T17071] 9pnet: Could not find request transport: j> [ 391.977027][ T36] kauditd_printk_skb: 203 callbacks suppressed [ 391.977048][ T36] audit: type=1400 audit(1776196179.937:6418): avc: denied { read write } for pid=16825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.010034][ T36] audit: type=1400 audit(1776196179.937:6419): avc: denied { read write open } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.043082][ T36] audit: type=1400 audit(1776196179.947:6420): avc: denied { ioctl } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.087983][ T36] audit: type=1400 audit(1776196180.057:6421): avc: denied { read write } for pid=16825 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.127819][ T36] audit: type=1400 audit(1776196180.057:6422): avc: denied { read write open } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.159338][ T36] audit: type=1400 audit(1776196180.057:6423): avc: denied { ioctl } for pid=16825 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 392.197300][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.218614][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.234777][T17092] binder: Unknown parameter 'stats18446744073709551615' [ 392.242114][ T36] audit: type=1400 audit(1776196180.157:6424): avc: denied { create } for pid=17091 comm="syz.0.5698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.263825][ T36] audit: type=1400 audit(1776196180.157:6425): avc: denied { write } for pid=17091 comm="syz.0.5698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 392.287457][ T36] audit: type=1400 audit(1776196180.157:6426): avc: denied { read write } for pid=17091 comm="syz.0.5698" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.312372][ T36] audit: type=1400 audit(1776196180.157:6427): avc: denied { read write open } for pid=17091 comm="syz.0.5698" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 392.529967][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5706'. [ 392.540112][T17114] bridge_slave_1: left allmulticast mode [ 392.559685][T17114] bridge_slave_1: left promiscuous mode [ 392.565513][T17114] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.575069][T17114] bridge_slave_0: left allmulticast mode [ 392.582055][T17114] bridge_slave_0: left promiscuous mode [ 392.591940][T17114] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.724800][T17139] fuse: Bad value for 'fd' [ 394.249940][T17157] netlink: 'syz.0.5721': attribute type 46 has an invalid length. [ 394.258634][T17157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5721'. [ 394.269763][T17159] /dev/loop0: Can't lookup blockdev [ 394.768837][T17179] netlink: 182 bytes leftover after parsing attributes in process `syz.4.5728'. [ 395.057081][T17197] netlink: 'syz.4.5734': attribute type 12 has an invalid length. [ 395.065629][T17196] netlink: 'syz.4.5734': attribute type 12 has an invalid length. [ 395.104412][T17201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5735'. [ 395.160013][T17207] fuse: Unknown parameter 'nO1W.8| S.;ozakI~4EʵZ2dj-l;OY@LwX:+[O{ڑ~'~5oxS;[`g&ЗwuSf TTQ' [ 395.246281][T17211] netlink: 'syz.4.5738': attribute type 12 has an invalid length. [ 395.769043][T17241] ------------[ cut here ]------------ [ 395.774702][T17241] WARNING: CPU: 0 PID: 17241 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 395.784775][T17241] Modules linked in: [ 395.788842][T17241] CPU: 0 UID: 0 PID: 17241 Comm: syz.8.5747 Not tainted syzkaller #0 c7e4dec9f57e28b28b7c5b5a7e08f57cef0edacc [ 395.800922][T17241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 395.811328][T17241] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 395.817439][T17241] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 22 1f ee 05 00 0f 85 be 00 00 00 c6 05 15 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 395.837386][T17241] RSP: 0018:ffffc9000659f880 EFLAGS: 00010246 [ 395.843964][T17241] RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000 [ 395.852490][T17241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000659f938 [ 395.860741][T17241] RBP: ffffc9000659f9a8 R08: ffffc9000659f937 R09: 0000000000000000 [ 395.868902][T17241] R10: ffffc9000659f920 R11: fffff52000cb3f27 R12: ffffc9000659f8c0 [ 395.877377][T17241] R13: dffffc0000000000 R14: 1ffff92000cb3f14 R15: 0000000000000000 [ 395.885990][T17241] FS: 00007f19807556c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 395.897130][T17241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.904317][T17241] CR2: 0000200000001000 CR3: 0000000114f40000 CR4: 00000000003526b0 [ 395.912947][T17241] Call Trace: [ 395.916613][T17241] [ 395.919817][T17241] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 395.926696][T17241] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 395.933038][T17241] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 395.938766][T17241] ___kmalloc_large_node+0x81/0x220 [ 395.944230][T17241] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 395.950027][T17241] __kmalloc_large_node_noprof+0x1e/0xe0 [ 395.955881][T17241] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 395.961764][T17241] __kmalloc_noprof+0x26d/0x450 [ 395.966657][T17241] incfs_realloc_mount_info+0xa7/0x4d0 [ 395.972303][T17241] ? incfs_add_sysfs_node+0x118/0x240 [ 395.977888][T17241] incfs_alloc_mount_info+0x479/0x600 [ 395.983318][T17241] incfs_mount_fs+0x3ca/0x960 [ 395.988380][T17241] ? __cfi_incfs_mount_fs+0x10/0x10 [ 395.993767][T17241] ? vfs_parse_fs_string+0x102/0x170 [ 395.999263][T17241] ? selinux_capable+0x38/0x50 [ 396.004270][T17241] legacy_get_tree+0x103/0x1b0 [ 396.009280][T17241] ? __cfi_incfs_mount_fs+0x10/0x10 [ 396.014963][T17241] vfs_get_tree+0xa1/0x290 [ 396.019920][T17241] do_new_mount+0x251/0xb40 [ 396.024643][T17241] ? security_capable+0xcf/0xf0 [ 396.029883][T17241] path_mount+0x688/0x1050 [ 396.034431][T17241] ? putname+0x113/0x150 [ 396.038753][T17241] __se_sys_mount+0x2bd/0x480 [ 396.043645][T17241] ? __x64_sys_mount+0xf0/0xf0 [ 396.048699][T17241] ? __kasan_check_write+0x18/0x20 [ 396.053948][T17241] ? fpregs_restore_userregs+0x11d/0x260 [ 396.060024][T17241] __x64_sys_mount+0xc3/0xf0 [ 396.065483][T17241] x64_sys_call+0x2021/0x2ee0 [ 396.070677][T17241] do_syscall_64+0x58/0xf0 [ 396.075419][T17241] ? clear_bhb_loop+0x50/0xa0 [ 396.080349][T17241] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 396.086470][T17241] RIP: 0033:0x7f197f98eec9 [ 396.090969][T17241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.111707][T17241] RSP: 002b:00007f1980755038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 396.120427][T17241] RAX: ffffffffffffffda RBX: 00007f197fbe5fa0 RCX: 00007f197f98eec9 [ 396.128677][T17241] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 396.136794][T17241] RBP: 00007f197fa11f91 R08: 0000200000000280 R09: 0000000000000000 [ 396.145034][T17241] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 396.153273][T17241] R13: 00007f197fbe6038 R14: 00007f197fbe5fa0 R15: 00007ffc689daee8 [ 396.162043][T17241] [ 396.165570][T17241] ---[ end trace 0000000000000000 ]--- [ 396.172134][T17241] incfs: Error allocating mount info. -12 [ 396.178059][T17241] incfs: mount failed -12