last executing test programs: 3m9.191478623s ago: executing program 32 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305839, &(0x7f0000000540)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000002140)=ANY=[@ANYBLOB="07000000000000000c080000000000009e000000000000003a060010000000008107000000000000ce0900000000000000000100000000df98070000000020000300000000000000331001c0000000000200000000000000000800000000000000640800000000000000000000000000004bc4005fd1873bdb648f08ad3376c2adf8b7b6b5625eadee7c51f18531f604fdd9a7c4318cbdb8dfb02d355e416fafe79af8c97439bd261dac62dce7ddaafa4f8efbf349d46edbda8e064436bbbd72db5691b2aad52c97ce11c0a48c12601e983733dbbbcaf6dba2d5e83db173da768ab6269a2c38db8006d266439e1170ecd95aada5031867d85836f7632176f146b92b3b688a820e261c3c7fbbbbd7ab878747e143d65c8711a7d6bb26996b87eb3ce14b433bcb74b4c50fe8cd27e8ec227e3ea1c0a31806353c730d16fac506bb5857614901f32cb2c2131471"]) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x2, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r4 = syz_open_pts(r2, 0x2000) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000100)={0xfffffffb}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x64, &(0x7f0000002100)=ANY=[@ANYRES8=r0], &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic={0x8000000, 0x7f, 0xb, 0x1, 0x0, [{0x6d, 0x0, 0x3e, '\x00', 0x9}, {0x1, 0x1c, 0x3, '\x00', 0x5}, {0x7, 0x1, 0x9, '\x00', 0x9}, {0xff, 0x5, 0xa, '\x00', 0x81}, {0xff, 0x30, 0x5, '\x00', 0x7}, {0x9, 0x6, 0x2, '\x00', 0x5}, {0xd, 0xbc, 0x4, '\x00', 0x35}, {0x4, 0x7, 0x7, '\x00', 0x80}, {0x40, 0x6, 0x7}, {0x4, 0x3, 0x1, '\x00', 0x4}, {0x3, 0x87, 0x1, '\x00', 0xfe}, {0x6, 0x10, 0xf7, '\x00', 0xff}, {0x26, 0xc, 0x6, '\x00', 0x7}, {0x7, 0x40, 0x3, '\x00', 0x9}, {0x9, 0x42, 0x7, '\x00', 0x6}, {0x9, 0x4, 0xf, '\x00', 0x7}, {0x2, 0x5, 0x8, '\x00', 0x5}, {0x6, 0xf, 0x1a, '\x00', 0x4f}, {0x80, 0x6, 0x9, '\x00', 0x9}, {0x7f, 0x40, 0x10, '\x00', 0xf9}, {0xfd, 0x1, 0x9, '\x00', 0xce}, {0xff, 0x4, 0xa, '\x00', 0x3}, {0x5d, 0xfe, 0x3, '\x00', 0xf7}, {0x0, 0x8, 0x7, '\x00', 0x2}]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x10000, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 2m47.86810402s ago: executing program 1 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) timer_create(0x3, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES32], 0x30}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2m47.84666629s ago: executing program 1 (id=544): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x77bf7d40, 0x9}) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0x1000800, 0x0, 0x1, 0xb, 0x0, 0x2}, 0x20) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) 2m47.82887217s ago: executing program 1 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, r0, 0x88983000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, r1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x101, 0x3, 0x3, 0xffff, 0x27}) ftruncate(r0, 0x1) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14, 0x80800) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000180)="377c2f060d85798f418082c70f7c505cb8f6c3cdbd822485db8b1186ff3379a230a935dbb5f9e64fc065fa85cee0a5cf7ce9a3dd50c4044d9c3743c4e017ee7fd913102995b75c6dd8e068c7fcbd9be63640b16491c14a3322053a7fa0bdaa44a850c9e2b973a8caec128bd9c68b8667", 0x70) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x13) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000080)) 2m47.720087312s ago: executing program 1 (id=546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r3, 0x99b33000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x13c, 0x10, 0x133, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_crypt={0x4b, 0x2, {{'ecb(cipher_null)\x00'}, 0x18, "ba4de5"}}]}, 0x13c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 2m47.692080983s ago: executing program 1 (id=549): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x100, 0x400, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000000140)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/122, 0x7a}], 0x1, 0x0) (async) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @local, 0x3}, 0x1c) (async, rerun: 32) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000f80)={'\x00', 0x7fff, 0x1ff, 0x400, 0x6, 0x6, 0x0}) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0}, &(0x7f0000001040)=0xc) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3800) r11 = fcntl$getown(r0, 0x9) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002180)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000002280)=0xe8) (async) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00>']) read$FUSE(r13, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000004200)={0x50, 0x0, r14, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r13, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r17 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r17, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r13, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x158, 0x0, 0x0, [{{0x0, 0x0, 0x4, 0xe1ab, 0x3, 0x7f, {0x0, 0x9, 0x6, 0x101, 0xc, 0x6, 0x2, 0x9, 0x3, 0x2000, 0x800, r15, r16, 0xe66, 0x9}}, {0x0, 0x4632, 0x2, 0x3, 'fd'}}, {{0x4, 0x3, 0x0, 0x6, 0xfffffff9, 0x8, {0x5, 0x100, 0xc1, 0xfffffffffffffff9, 0x9, 0x100000000, 0x4, 0x5, 0x1, 0x4000, 0x9, r18, r16, 0x2, 0xf6}}, {0x2, 0x5, 0xa, 0x2e, '/dev/cuse\x00'}}]}, 0x0, 0x0, 0x0}) r19 = fsmount(r0, 0x0, 0x80) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="e5f61d8092eaaf7b9e3473747a6aade0c69cae4e50f57612d37781086d57e75277d4c20d8a70a9750c2a30b11f470a0dd3e98c3c2eda3726bc38e1edd258ffe36b57cca5aead33461291de64ea47222309ab4822b5d11137397830f4b76c33b4f6f3776999b7f6cdf1274f7f9886cdab7d470716fe2acb881c060ed1fa88c654acbf37021f6bcab648b164dba88264d102c4a8c2f1428a2a9a5d07a9cfdf15a4132531976e458b6bdca8077b5f01b19238bbf5e6b8758fd0fd8732604c8832ce7a2fdf2f7e", 0xc5}, {&(0x7f0000000140)="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", 0xfc}, {&(0x7f0000000240)="bfd1e8409f4b1b42369b618a52e1ea56c91b33fc020a0d076d04d7c755703b39731baff83660071fec9f15e66f9a35124e9b55a3c0a5ae796e43eae7a9025364bfe6a99d0aeb41052212066a6eae6e72d3e7858d987d67700832815fa64660e6ea29215165259a3015d018221a9697fb49e02ad2e814c7149aa7abcc7a0e56dccf41a6", 0x83}], 0x3, &(0x7f0000000900)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}], 0x128, 0x200408c0}}, {{&(0x7f0000000a40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="a9e02329500a7a853337921a8b435fbf7c485810189f86e6a60ef06a6c1886913da825e9b74571ce5adbdcb9a7d83c4ba60b1026eb0515a954ec1df0520c36ed267804f11ee1d59eb496025402c4fdc1ca17a18d4e8ca98c9e484ceeebf023d912bbf54d6363d965b315a2a05e1af2e1ccf6e560ac176df349a8bf62e9d0abf5857b7cf91da9f38b1a20ca56210e56924585a9f6099808358bf8a4aab0197e1a0e7b", 0xa2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r7], 0x38, 0x10}}, {{&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000d40)="e3c1e486e934dd6468aca9a8af3c66e15d56248bc0161fbb0c2d327537875cca74ef1fbda31ab98df8878b079282e141c55b94144139a16dd4960e76dc3425b063e07fbd452d2eb2e2d832", 0x4b}, {&(0x7f0000001180)="0e608cf3e2d60dd43e7cabb26c50c237567c36e2d0c84c68a19201e4d9327c0bbe0767c211a5a899b2979769e7217f98daa97c9c1c2aeb374e93104a09adb2ca309c9010e94ad2cbcffdc54783f61758146f5adee11b6372e0589003bdb600c3349923839dd9c02054c735e4780a01373e99743a48ae9ea16e12c4509ad89494e45750ee6135db886199aded62409020ec666136aae78b917a3c0ed442528eb8956fb8bfc659e4be7707e0213f5910aa15271d5279eb01c1acc3b3ed16b39689104c8ad21b48f3ef691dcb68aefd641bf33edfddea86d43943cc12c7609d403d3545e54b9224a4a21d43ecbe3730b48b2a2699c76d4c9d823a016a0c5260f5d242e5451ac12c7bd74bfac55ad396555aba2f8d105814bba1107e9058fd242358bd295559add930585190b5e8072497462c6cb8277bd013b93204185104efd1f33fbcecdb54118b63157f3744ef658df86b21dac5bbb70d2e2187c1683acbe49278dfe8d9be41d65f3c95d1f7d3fca0bf61e6394863e5fef66f746e4f778943496cb5b1b025e9a4f2bf830869b6ff5a36ef8ba6a67bfe875e7f95399f07995ba0dcd11bf3fb70b5aa502cf07db0ff756d8453aac1e42033e8d9978910a8a0715262f355cfa62cef3e545ae7a23f914f241eaa3d01ee67e708344cc5e5be5e7dff4d76527195b6edb9dc8e3fdbb7676caa52576ac9ed9cee901873723c3d1e2732e989fd8d033c71f96c758120280fb7441d26a729a0aa61593bb3a76e0383d3bc3c1786b29b192bda5c1cabc2ce34ac7f223118741751f3e9e5491740ef99a67988f2c74c3cbc0ab427069a26c8e124f6a3a39d6c98993eba15f8576afc92c99c58f715bc9cc98b4caacc392eb8fc033b0fafc2b8a10ba977f13d7aab2a4f085fc7c9a84bed0c7eb18d06dd5571f7211ef2e852cedb1020f285d0cd111669c98ad3809b8ff04dca565c44dcbc951ff16f1036b0fc0e5fe29502e02fae33b0c3a907a8d6489aa44088b00f7b021ba9d8afebd72d9d7d44ce5e5119ab827ad426347b6f989e37caf049a1e13a28254f7f6966aeadfc58214868f5eb62812d461f011a0b173123d25b6597f895b2964ec93c5907db777804fe1dbc1f6397d3bf98c890a8f8c271939acb77071c566c679ec6fa1bf571386f526ea76fe40c600e72e2c5087daa98bbf3112dd2084f71a425d09f22b93599d93f44b59213ed87bdb366dce9bd5e9814718ab5db522a0151ec83cce6076dd1576b9cca3b253752dc55c16464097092d263fb07a62681cfc19635cb7ff0231b01c6b0b5a558e24442ea61dbdfc4a6df67743671bd14bd77a46134abad455747fd7bebde1dad17887ab16a4ff8106e3de5be1e2bd4d803abd470258f40f03a2d999aaffc1e5ff28b5ff345659d88528622378de159826181d40b15bf2215149cbe296fdeda8042c181f05c3b81a2a86c0ecb9894e6681281a3b3a455c4ccfb5157bb34fd21093e5207a02c2fafd681a468435377a4c2a22923e3b772ceaae72a599bce173decdbb5e966ec3d4c8c8a2825292ffde64a9c73ccb8c53930d16a47864c0c859f0e466d98d70e5a9dafbd720ad3abba37b23cfd3f01d18d83135e09fa6dad3e5c4955add40e289b5398a387fc32c7b976fef36cfe5c77f37cd820c186bb49451fe7161a753a1f2793cb2de026b5edb750cc20c469388d05794b5c3f1e218a2ec92811504040ba2cc169e221d34a26b8184c66138cb5c11911b1b179e75cb05ca57f0252b33337ee388bde47ab4b28b6da74d0e9ad7ee52eb76b6363a714bd5eaf6a98ca4a5fde955bb10562671585b4bb971661b2f00192eb7db0074fa3ce79c4949cc3454cbb4c2b0c679f92df6b44782425e82bb68c035d4d54c672c6946c22263c7750575f260b6ce1b21aa33daf5265122a3552cd9aea49e5ab708d1e1b5f6878e293ced3d05062f43da2ece4051b51a59437d53115361528c270278fcb1dcf86fb96079279864685f2a3c5e5b45ab3b6bc4c9b084490c4d113d96bda379d825f02dee1227f702771dcb597e81c4d6e59bb3f46da41e1c86506206b6b7fcb3d53de78d01476c3d7e471b1a8d66581f329633dc40da0342e3b3a8c6f1461dd4f9e42684e192622814383dde2645783274fc3e9e8feb6df5ba7df0d5c00ce0ebcb912d30f59c4f25d4bcbd7de867b726de23c2b7f0a8cdbb3f903de52f3a262d22090131d40f9a259bb96c66ecfa351c74071336bdcfb3d653a013a42db89a36baf84db701c298bb0d376fe00a7edee84a711826517813c1f09a0db8a8118309426941b918d4f3c92b6f3770922048472e91b953724989c4cb34bf8d7e9050e59a4ac356305e1ebb7ba9005c39f348dc0f8aadf4d7960236d70df8e71dd22a135689f2338d855d01bedf73c0968c08139f52bbba41a5251db6ef828c11d882a94dcf2924ea177f19f3a6fdacc25a232073a92e0495d988a21e1dedf5ee633afd6a1fe7166606039d8b5376d54288b60d1bc9d9ee04196ff4343c93f2727843f9942c5fe081092820d3cce95fb14509a2f81224a6114d2104e9d69ec620c4fa384bd237de5accbf6bdd4cc4d040a0befc8e5ad46d53651ab54d3a2f376cb75235419f3a56a5a15871bace64c62f9b5fd73555d03c19ed395ef147b8bbb5e5758874ef17060fb7233428270b5603f3caf46f6d9851c2378cded9a06974682e69921352f6850844fa504eb462a641c62293441cf63c167622e407e2c579930c25aca3748023f7485cd051f8a82cb213087b3609df1f1d3c29eb6c65d855b25c828fa1b89fa8e746bb4461911e40cc638d9d02914c7c464d78d1961ab976a974272b803d09a72c3e3de0f1384a4c41241e66593ed9979aaf0250beb8fa3478bc60dbfd39b7ec15fb2bd701ff861284375f39854820bd849f25ae7145c39007bdf8eee0df9f25ed8d7aaf4c04e12c3c78e43cde7fbe88b86e0fa31f8613c6266e85b8d0a4efb60fb59d3efd8b08457cd4e9c721703dca42139702ffaba424d300772b785296c5c859131e0baeb591137d1c43ac47a717bedd7262c4560c3a903a10fd0d60af6c516c6d28883607466ead4add992689a454cc2b5df05258906eebfcdd9b91c407febf21302b67c2dff861f4601dbbaae19c0b0a5d6a6fb1504e351c5ad477c2f7f400f5554a93e66a75fa93b1215b1c11e2610b7689111e9ce12d5927e7c5e78cca5508f47aa666f379e25036a63e31e14d3e7514feea1f681e6b3774f05b72671cf7b0b120228990c070dff03eb8f3f9913b18d2c6847b97fb06e0ad08ae7d0ad503b919556ee285ea3ade7c881ed434ff762f88bd29facf9f77664e4cb586148ecbfb9b06865b664edc6b9172ba92f3cf6fa9c16b917d7acdc0ce8de38150bed36a346adfd90b5579dcb36f3d9d08a802f95e0cf49a74e6661da55825e42601d47e394fbf99364cdb5f269f47d1ddf2c17c11ba52a77d740db0d28c7cd37d3f45ad4dd62c5518882bbec322336bcdddf5380e2277d41388c56dea695f34b1aaa8cf4f227475c5b54419397bb87cd9853f80dfdf05b4085e98ef8ca70417e02466ecb15a3afbc7605303c09d34ee020df2fd3900d7402ff9ff9f8ef3ab365229299a0ec71da706d17b26e67d8edf7a9f9346d31d2708883bed52f071b8ce61db305c8f7a63e4d537fb88a3e33e451ac3484dd55f241ee58c0a11566ea991b600633d5710c107763bf3adedcf8d264d20c3812cba4400cac422afa868db2aa6a8fefb46bbb0f1b401b21cfa43c6044ee55df918b5a09369030362cb944edcb2f6257d98aa01d5c6b15f4a5a73d7e46cde6fe41148c5d35f5cbb510807343797dda86eab1f355afcea48e788040caa9dbf52ecb04d81d089eb9892ea3b84ca219637084609c13d7536f5e1b196b0f65c60881b22138870a055ef550646ec57d92af19ca968150cfa76fbd3cd25dd9dcc34f0824ab1ac938c364c4fe15c2f08e5f0bd243d6468aa20186be40f9cbf4627ee3433e77936cef755169771caf541c76e90989c2db11d630e36810421dcd4d0544c4bd3189b8271c66544a08bb925c1e518413250059b025f6e5a480c9cdb72f33ee842560ae06f94a72b22de1b0f8d6a1874424cdcdda18b3502afe711cf1447e407ce0d303c89af0892c9f2f2431f13e907027e249329534de1df43a31301b26c550655c3fca55628c59897395df8ebaa6b7f27df11399e3916f27ac1d72b673d522016a0b2d5cabb17656b856d696119975780168d25f3c84c0217c88d62348f95053aa44613db54ab49e77ae6f820deb16ae1acbecd8ba515e45e28ba5aaa970346fc0f82710827de6049f94add01e24e586706b52ba7e50f7214c7fcd6eb28bb46a5488c32e586465d5ed160f0c0bd73566bfefc843b6e40032a37ced6f6ef706791e1b97bfbedc3381839cd0947310d960e0462e2d4ca25e1d569bb23b4e2514219902584f1eefd5df332eef49c9d4dbf6ffd11b1eabb8d98a1bd859f10a0fb91795565199ede358468b5739a5494637231e215648527ac85f8480d066751ce56368d0a1f2364944088d5692374efb375c75d4a3898f4068515cd768ecc7cc715c33899e56c4de18fcda568701a52740de11854b487e7b56b3b7fc442b76a224d08238f90396683d050f48b7397a2283f07106af76315af2f11cbe7c56814fffa20b4fc1b78ecbd1d2885b087f30942228c470c7cc9efbfe26ce4970a3fee928bea3790a0b44acf3b06eef9831df37ec517d2bdc328d737ed0e452dd178ebef86eeec9f4273806496ff8210e9c89388d88caedc3077dfaae905b5f5f1f9c97bbf32a190993f14bb8210ee5fbbd0e91fc5bac3b03de0e5ee8a0d496add38c084b6e62ee466c8722d488df374f43fa94d294286b863501fe267513d95c7e690678c1dc453dbd9d9c8383f2e09f22ea8941e6bc19f698d8dbc90ed54485c525d320970b7ccdedfc416e490255ae0a730cf13f2a0da252a6efdc8918cb9b0642220813e1d91f3cd2aa1b85d8e9ee83bbe7ca0719b5cd2de2b45d78363f63deffcb87e0303c5b12028ae46587fc4c36fc39427d941ee9a449fdf27deffb117c5553958c34f2cc737e1551b77ca5e0813c7362292676d8468f05ce6f394412e12a2f8a9695df68917d4111f57f53d5ea03a46c133adaa2af78974b2bfa9dcbb70dbea74e81f2fe468463fe4e2408307d44811e2c5f7cd388e3e96d04a0dc53ae49c2fb50e36f6a5b437333d6b6e4a3b8abc26e0a5d2a32fc5188557804cca6bd3a010df0b0bf2b4411347fa912e36dd08e426758070b728a5ffbbad91fa41ced48ffaadbe815681487adbbfd3cc58e4f9a00ca2068269b78a5d5cc89225b46b81a2d2386957ba68f36fe3567e05271e54d7a462635382272b79a099f06a84f639fa14b32d8baa7047726bcebcec977b2d93628fdb4d3c5eb536bdc403defe814026e9575063374ad8261f9cdd477fdb7a49531a6127f3a4aeed5c909b4c1d056246143e4621f7a6eafcc0addb7f17e8d03ae20fc9d44569aeb6f322eb3fba9563a02477762fb92307a4a69d486031dfb4b2fe66cbf48bf9d418389cd9894ab2e676c3fc1a569871834d699dbf4390d32e53513797bc0a2f8cfc144182894fc3176a4305dd451526b039af74d99126930f6c88ad8de74c6a83fc0c4da09710309674a369272119e64d6171cc8be1a622a7e445b5717ecf47773704e8f94e9991a57e56f2d0eaf93239a7a5dacc1719e414cedc24cf11bb1a88d5c7448413dd0daecc53b226c72f5bf0f3a1efb80a5cb3aece1", 0x1000}, {&(0x7f0000000dc0)="ce5380e040349130548f9c86facd337982c0c12dc1b5de95ebf95c21f3adc083a8851b9c5feb12996f7d40d9ada9128032bc0df4095aa1f3a2448c3dee685d9a304d5c220c45411d1bcf7d", 0x4b}, {&(0x7f0000004940)="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", 0x1000}, {&(0x7f0000000e40)="ee1aff6145edbda26e6856e987def4e68f82f126f0aa80c24bf907ed78b3a6c59640ed60c1d8546419ea19002ebe02829ed80d67caa169c78ab75e546c92e282b16ced79be161fa3fc426d44a69b408aa906e7c96007715253de06a310a3c41d106cfdab468d9b8e46fdfceea37b44a494e6fea9f1aa42dea27e9d2798e2846e92cc94134fd183737c8fc9c574ba525f4b48ae285e7bf4dca8e0517b4ad6a23d8d76067b8684f4033182887c34", 0xad}], 0x5, &(0x7f00000022c0)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r16}}}, @rights={{0x18, 0x1, 0x1, [r0, r19]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x88, 0x4000}}], 0x3, 0x20000801) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m47.627914504s ago: executing program 1 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x2b09d000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x2b09d000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x42, 0x8, 0x5}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x4) (async) r8 = mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x5c, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/152, 0x98, 0x2, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x8, 0x2, 0x23}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}}, @acquire_done, @register_looper], 0x7a, 0x0, &(0x7f0000000500)="1a108a0ed4afbd71a0fdfbf8adef1e536b7478e4b92af8d11f4df8b93e1b5e9a6c1238cbdc8211503fd4c34fd25f735243cc6fbf36123356b7a4d4453b5854a113ead5a985350844842dae0a2dc47ac5ab4ccf7e6a0f32c1fda6aee9be657e9cf5429b43133c93dde5402ef95ac1dce6ae592b3ecb9d4d3687ed"}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3}, 0x10) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @local, 0xffffffff}}, {{0xa, 0x0, 0x40, @local}}}, 0x108) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xb, @any, 0x4dd6, 0x2}, 0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000b40)=0xf7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7fffd}}}, 0x108) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, 0x0) 2m32.556127648s ago: executing program 33 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x2b09d000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x2b09d000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x42, 0x8, 0x5}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x4) (async) r8 = mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x4) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0x5c, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/152, 0x98, 0x2, 0xc}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fda={0x66646185, 0x8, 0x2, 0x23}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}}, @acquire_done, @register_looper], 0x7a, 0x0, &(0x7f0000000500)="1a108a0ed4afbd71a0fdfbf8adef1e536b7478e4b92af8d11f4df8b93e1b5e9a6c1238cbdc8211503fd4c34fd25f735243cc6fbf36123356b7a4d4453b5854a113ead5a985350844842dae0a2dc47ac5ab4ccf7e6a0f32c1fda6aee9be657e9cf5429b43133c93dde5402ef95ac1dce6ae592b3ecb9d4d3687ed"}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3}, 0x10) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @local, 0xffffffff}}, {{0xa, 0x0, 0x40, @local}}}, 0x108) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0xb, @any, 0x4dd6, 0x2}, 0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000b40)=0xf7) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7fffd}}}, 0x108) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, 0x0) 1m33.999477238s ago: executing program 4 (id=1705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYRESOCT], 0xffdd) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r1, &(0x7f0000000300)="89", 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x872, 0x0, 0x7f}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0xfffffffffffffffd, 0x2, 0x36}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000280)={0x0, 0x20, 0x48}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0x8, 0xfff, 0x4, 0x399, 0x80, 0x600b, 0x7eb, 0x2, 0x101, 0x3, 0x7, 0x1ff, 0x1, 0xc, 0xedd, 0x2], 0xdddd0000, 0x280480}) 1m33.8641448s ago: executing program 4 (id=1706): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40060904000702b95fc30309058803200006020409050302"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) setsockopt$inet_udp_int(r2, 0x11, 0x2, &(0x7f0000000000)=0x9, 0x4) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m30.881125075s ago: executing program 4 (id=1770): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0xffffffff, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x7e, 0x5f, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003940)={0x20, 0x11, 0x1, 0x0, 0x2, {0x1d}, [@nested={0xc, 0xe3, 0x0, 0x1, [@nested={0x8, 0x22, 0x0, 0x1, [@nested={0x4, 0x12b}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_eee={0x33, 0x2, 0x1, 0x28000, 0x4, 0x1000, 0x10, 0xfffffffb, [0x0, 0x9]}}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000020001c0000000000000000000000000fc7ac7f1690d0e77dd066a604ee029b7c80dae8a002a50568b9bc181a0640629f577b81117b965814088830100010000000000029f7db4b54f2282926c615a67fc04bede29d8cb632c6731955cd8aca244ba40823557f2bd4751371297623c43b76790ac0bfb4deb62d12f8f2b5361c5ac195679add7bb7ef424bf86addabd5ae14fbbb6892127a24667b761a28cac5c773f8e469c5c8f69937c100eac5da2307c1aedc14fabdbcb6fd93809"]) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x804480, &(0x7f0000000080)={[], [{@seclabel}]}) ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000000)) 1m30.619018539s ago: executing program 4 (id=1779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') connect$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x1, 0x0, 0x1, 0xff, 0x6, @random="a57ffd49b48d"}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0xfffff000}, 0x8000) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000480)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040)={0x1}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000200)=@arm64={0xc, 0xbc, 0xe2, '\x00', 0xc}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) lseek(r2, 0x14, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r9 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7840, 0x7, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @multicast1}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r10, 0x99b33000) 1m30.54394472s ago: executing program 4 (id=1782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) lseek(r1, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xb4, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}, @dead_binder_done, @acquire_done={0x40106309, 0x2}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m30.183663355s ago: executing program 4 (id=1786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f0000000100)={[{@xino_on}, {@index_on}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@nfs_export_on}, {@xino_auto}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_measure}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder0\x00'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x200a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x0, 0x16}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x51, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) 1m30.151951035s ago: executing program 34 (id=1786): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100000, &(0x7f0000000100)={[{@xino_on}, {@index_on}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@nfs_export_on}, {@xino_auto}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_measure}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder0\x00'}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@weak_binder={0x77622a85, 0x200a}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2}, @fda={0x66646185, 0x8, 0x0, 0x16}}, &(0x7f0000000500)={0x0, 0x18, 0x40}}}], 0x51, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) 44.095484043s ago: executing program 2 (id=2404): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000800)=@migrate={0xa0, 0x21, 0x1, 0x70bd24, 0x25dfdbfb, {{@in6=@private0, @in=@multicast1, 0x4e23, 0x38b6, 0x4e22, 0x100, 0x2, 0x20, 0xa0, 0x87}, 0x6e6bb7}, [@migrate={0x50, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, @in=@multicast1, @in6=@mcast1, 0xff, 0x3, 0x0, 0x3505, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x24040010) mlockall(0x0) sendmsg$nl_generic(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1000000020000c4892e1ad010026bd7000ffdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 44.053112693s ago: executing program 2 (id=2407): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,uid=', @ANYRESHEX=0x0, @ANYBLOB]) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000100000,user_id=\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x7, 0x0, '\x00', {0x2000, 0xa2a, 0xd32, 0x8000, r4, r5, 0x8000, '\x00', 0x801, 0x2, 0x2, 0x2, {0x8003, 0x8}, {0x3, 0x10001}, {0x8, 0x9}, {0x100000004, 0xa00}, 0x4, 0xb, 0x4, 0x3}}}}) write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x0, 0x2, 0x0, 0x1000}}, 0x50) prctl$PR_SET_VMA(0x21, 0x0, &(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x80000000000000) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @empty}, 0x1, 0x2, 0x4, 0x4}}, 0x2e) 43.984319564s ago: executing program 2 (id=2409): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x68800, 0x141) 43.984114134s ago: executing program 2 (id=2410): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x800, 0x400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x4004) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x400, 0x80) chdir(&(0x7f0000000080)='./cgroup\x00') 43.977679325s ago: executing program 2 (id=2411): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0xf5345000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r3, 0x0, 0x0, 0x400001) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) getsockopt$inet_int(r4, 0x0, 0x15, 0x0, &(0x7f0000000e80)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x8, 0x8c4a, 0x320, 0x9, 0x7}) r7 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) fspick(r7, &(0x7f0000000a80)='./file0\x00', 0x1) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) fcntl$addseals(r3, 0x409, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(r5, 0x10001, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000005c0)={0x6, 0x5, 0x5, 0x32ef55cf, 0xd6}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r8}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/20, 0x14, 0xfffffffffffffffe, 0x28}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) 43.772422847s ago: executing program 2 (id=2417): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0xe}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x200, 0xb, 0xf78, 0x500, 0x5, 0x1000000}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 43.709215408s ago: executing program 35 (id=2417): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0xe}, @empty, @ipv4={'\x00', '\xff\xff', @empty}, 0x200, 0xb, 0xf78, 0x500, 0x5, 0x1000000}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 35.726552336s ago: executing program 0 (id=2492): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000040), 0xffffffffffffffb6, 0x0, &(0x7f0000000140)="f3"}) 35.715331866s ago: executing program 0 (id=2493): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f000058d000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0xf5345000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r3 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r3, 0x0, 0x0, 0x400001) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) getsockopt$inet_int(r4, 0x0, 0x15, 0x0, &(0x7f0000000e80)) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x8, 0x8c4a, 0x320, 0x9, 0x7}) r5 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) fspick(r5, &(0x7f0000000a80)='./file0\x00', 0x1) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000c00), 0x1, 0x0) fcntl$addseals(r3, 0x409, 0xc) openat$procfs(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/crypto\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000005c0)={0x6, 0x5, 0x5, 0x32ef55cf, 0xd6}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r6}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/20, 0x14, 0xfffffffffffffffe, 0x28}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @register_looper], 0x0, 0x0, 0x0}) 35.644070967s ago: executing program 0 (id=2494): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0xfffffe16) listen(r0, 0x0) r2 = socket(0x28, 0x2, 0x6) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close_range(r1, r0, 0x0) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000894) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) 35.636308777s ago: executing program 0 (id=2495): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000240)={&(0x7f0000000140)=""/96, 0x60}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0, 0x0) r3 = dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xc8, 0x0, &(0x7f0000000400)=[@clear_death={0x400c630f, 0x3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0xa, 0x2}, @fda={0x66646185, 0x8, 0x2, 0xd}, @fda={0x66646185, 0x7, 0x2, 0x11}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}, @clear_death={0x400c630f, 0x1}, @increfs_done={0x40106308, 0x3}, @release={0x40046306, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/166, 0xa6, 0x2, 0xb}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}}, @enter_looper], 0x40, 0x0, &(0x7f0000000340)="8b72e43806467b5321b72ff76ce39e98776fd8e00d7e9c1e5fb266e314c7d18e5e0bf442bf3c80ddaff7fbedafc2841aa3769e41aa8c7d35fa3fbd8e87a33158"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x200a}, @flat, @fda={0x66646185, 0x404, 0x0, 0x18}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 35.631360917s ago: executing program 0 (id=2497): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000001240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 35.531847629s ago: executing program 0 (id=2500): fsmount(0xffffffffffffffff, 0x0, 0x20) r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @rand_addr=' \x01\x00', 0x14}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110) io_submit(0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0xf, 0x7, 0xe, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7800, 0x4, 0x5}}) lseek(r1, 0xacd8, 0x0) getdents(r1, 0x0, 0x0) getdents(r1, 0x0, 0x0) r3 = dup2(r0, r0) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0xfffd, {0x0, 0x0, 0x2000000000000, 0x2, 0x6, 0x10001, 0x0, 0x986, 0x1004a}}, 0x43) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x20) (async) socket$inet6(0xa, 0x3, 0xff) (async) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @rand_addr=' \x01\x00', 0x14}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110) (async) io_submit(0x0, 0x0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0xf, 0x7, 0xe, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7800, 0x4, 0x5}}) (async) lseek(r1, 0xacd8, 0x0) (async) getdents(r1, 0x0, 0x0) (async) getdents(r1, 0x0, 0x0) (async) dup2(r0, r0) (async) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0xfffd, {0x0, 0x0, 0x2000000000000, 0x2, 0x6, 0x10001, 0x0, 0x986, 0x1004a}}, 0x43) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) 35.531059878s ago: executing program 36 (id=2500): fsmount(0xffffffffffffffff, 0x0, 0x20) r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @rand_addr=' \x01\x00', 0x14}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110) io_submit(0x0, 0x0, 0x0) r2 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0xf, 0x7, 0xe, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7800, 0x4, 0x5}}) lseek(r1, 0xacd8, 0x0) getdents(r1, 0x0, 0x0) getdents(r1, 0x0, 0x0) r3 = dup2(r0, r0) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0xfffd, {0x0, 0x0, 0x2000000000000, 0x2, 0x6, 0x10001, 0x0, 0x986, 0x1004a}}, 0x43) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x20) (async) socket$inet6(0xa, 0x3, 0xff) (async) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x80, 0x0, @rand_addr=' \x01\x00', 0x14}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x110) (async) io_submit(0x0, 0x0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0xf, 0x7, 0xe, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7800, 0x4, 0x5}}) (async) lseek(r1, 0xacd8, 0x0) (async) getdents(r1, 0x0, 0x0) (async) getdents(r1, 0x0, 0x0) (async) dup2(r0, r0) (async) write$P9_RSTATFS(r3, &(0x7f0000000240)={0x43, 0x9, 0xfffd, {0x0, 0x0, 0x2000000000000, 0x2, 0x6, 0x10001, 0x0, 0x986, 0x1004a}}, 0x43) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) (async) 32.826391628s ago: executing program 6 (id=2540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040010) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x2}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/149, 0x95) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x38}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x54}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMKID={0x14, 0x55, "9aca3d71edbd74f3036fdb1b5a11b81c"}, @NL80211_ATTR_PMKID={0x14, 0x55, "c50cba023f2ad906c74dab4cb8c5d84b"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6ce905811389"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x800}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xedc2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x21}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8045}, 0x801) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) socketpair$tipc(0x1e, 0xc9df69f1533e56f3, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}}}, 0x10) syz_usb_connect(0x5, 0x6b3, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x30, 0x4b, 0x21, 0xff, 0x13d3, 0x3490, 0x27fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a1, 0x3, 0xf, 0xc, 0xf0, 0x0, [{{0x9, 0x4, 0xde, 0x3, 0x3, 0x6c, 0x30, 0x9, 0x80, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xeb06, 0xa, 0x9}, {0x6, 0x24, 0x1a, 0x6f6, 0x20}, [@country_functional={0x10, 0x24, 0x7, 0x8, 0xce, [0x5, 0x101, 0x20f4, 0x1, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x0, 0x8, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0xda, 0xf4, 0x8}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x104, 0x24, 0x13, 0x7, "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"}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "cf"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x5, 0x5}, {0x6, 0x24, 0x1a, 0x6, 0x20}, [@dmm={0x7, 0x24, 0x14, 0x101, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0xb, 0x7f, 0xf, 0x2}, @dmm={0x7, 0x24, 0x14, 0xc23d, 0xf1}]}], [{{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x9, 0x6, 0x0, [@generic={0xfe, 0xf, "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"}]}}, {{0x9, 0x5, 0x7, 0xa3f44cdcc0a00d3c, 0x400, 0x0, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}, @generic={0x25, 0x6, "42a5a553fb5a4b300a2ec38735fa0172893eba4d8b20e7d8209f895cd59e197192eed5"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x1, 0xfc, 0x5, [@generic={0x4e, 0x11, "509a4b97fad496b6dbbf221c564551e0caab40d466392f674c1bc52c1160e65ce8d8739db818bcf6e6410497977d4d4f71f3104cd6718de6671511db8a90c9d2d713fad1d454495ef98c1c25"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}]}}, {{0x9, 0x4, 0x4, 0xe, 0xf, 0x4c, 0x88, 0xe3, 0x0, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b1c56914071a"}, {0x5, 0x24, 0x0, 0xedda}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x0, 0x100, 0xd}, [@network_terminal={0x7, 0x24, 0xa, 0x48, 0x4, 0x40, 0xb6}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x5, 0x6}]}], [{{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5, 0x7, 0xff}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x4, 0x60, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x10}]}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x2, 0xec, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x59, 0x8000}]}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x8, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x7}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x80, 0x3, 0x8}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0x862954e9bbaf153b, 0x200, 0xb, 0x2, 0x7}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x6, 0x3, 0x5, [@generic={0x95, 0x21, "5c79548d231b9dcdef6126a1bbfcba2f3796a7fee36bf1e5d7ce45a5472bb28194183ed37088f1cf0e5f3f65f9d0b899cb2e9a535e39d03146af1884d953af8c74a611a06ccaf69333ef84220d1b8372b1b72df0b1bb89541fd4c64b024e0cf04a3c0def3eba841f057485d1a10328e811ab728bf73a303592174f6db02ca0d0710fb337631e852822ea10a7ae112b94ecbdb7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x8001}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x6, 0xa, 0xf}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0xee, 0xff, 0xb5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x86, 0xe}, @generic={0x5d, 0x2, "91ae583af53db3c42c1e9ed64f73f73d17978b453ed2b4d059d7c024a1644b21cdcbee460dbce18824887f04d5ccbf3b13d95be44b8bed4d8e079f5fd425f2a1d26c1777f0734966444af761261768d867104df5ecb7c67398da38"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0xd, 0x0, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x50, 0x6c, 0x8, 0x81}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x6, 0xb2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfe, 0x1}]}}, {{0x9, 0x5, 0xd, 0x2, 0xab2c534dd530ce61, 0xd, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x0, 0x91, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xe}]}}]}}, {{0x9, 0x4, 0xff, 0x6, 0x3, 0xfe, 0xdc, 0x62, 0xe8, [@hid_hid={0x9, 0x21, 0x6, 0xe8, 0x1, {0x22, 0x6bc}}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "a5552f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x8, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xb, 0x0, 0xf1, 0xa2}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x38, 0x4}]}], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x1e, 0x7, 0x5}}, {{0x9, 0x5, 0x8, 0x10, 0x60, 0x74, 0x4, 0x0, [@generic={0xb1, 0x21, "671a9fb7eade8de305c76369e6a7b67e2cf7a9e83e04409217052ae3d004a64ebb06fd5f190acf8f3fd461d1a32a3989b3e47d45fdf7616aeda640fea207b28fc03e741565f935e04744d7876dc05352d8ee78f1e7a2b4281e7592b99585b3f5281e080afb3926445f20b1da5100ff7a5e4008d91c907f4dbd93aad4545edf4b6d72bcc2ad80e4f41c49c0a854f1d06abd77ab72c4d4787857f8cb8b64342cff4eb84cf76c8f1cc37196eec8125300"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x20, 0x80, 0xe, 0x1, [@generic={0x44, 0x23, "528d890b6093db3fe7984d851fb926263c3ec5eef4b8c1004a5cbae928efec4e183310362b4a5cf36e1bead49e540df30a05702fccf85f2791701270f25c4c9e359f"}, @generic={0x4b, 0x23, "6d5200e1f8166889d293aa301ad503de0242a1d0fed04e21bf52e501991bc077fd2db37d33601d15878b9417dfae491747aa436882a4911e6a1087f9653680bbb32db6bbefaf115a12"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x300, 0x3, 0xa, 0xbc, 0x10, 0xe6}, 0x88, &(0x7f0000000c80)={0x5, 0xf, 0x88, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x7fffa6d, 0xff0f, 0x2, [0x3f00, 0xffc0, 0xc0, 0x7f8000, 0xf]}, @ptm_cap={0x3}, @generic={0x2b, 0x10, 0xb, "49f29d363e29e39ca1a9f1b81df6a659071e019cce6755454754937642e2b655c7e7b7187e4ffeda"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x0, 0x10, 0x19}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x10001, 0x11f00, 0xff, [0x6000, 0xff000f, 0x0, 0xffc0, 0x600f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x3, 0x1ff}]}, 0x6, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000d80)=@string={0x4, 0x3, "4588"}}, {0x66, &(0x7f0000000dc0)=@string={0x66, 0x3, "534baa5443a3f29bb175b21a93ab67ab4fd8b95e23168056cef71867f0ba7f46c887af49e5ce7e50598bf2384e984da2d82d80a98f5752d978de96e90ac55aed55339071040c1eed7be672a21becad8b9d6df95048a80846c40a2074641a6aba0ead46a9"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x413}}, {0x7b, &(0x7f0000000ec0)=@string={0x7b, 0x3, "62b864b442347c99824c26d549f200a27b7ac6980ed0b782fb55767ca743dba405b6bd1b5ac2e8a1f564519ae085f486c09122040b1182550c918f6aa9a8f8a9c54b883ac11d760cb786e6975adc3032cf7319f96a01d96fd2ee6efd24dc80448f25449e30ea3c0dbefa435badc416ef28777135998562d78d"}}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000001ac0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001040)={0xa18, r5, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffff001, 0x16}}}}, [@NL80211_ATTR_IE={0x16a, 0x2a, [@fast_bss_trans={0x37, 0x9b, {0x11, 0x2, "8e7958227aeb2329b986e6d024336525", "bb5c8d89797ef299273cb2f1530a8da2684e5a0fb7c6a8a8af3d23564211e8c2", "2f51b0698f5670010a598cddada6e06bbac366e8c87e3baa1d9821d3ceb7106d", [{0x1, 0x20, "bb0c850211da66f0f33f2021834978972879cddee0b32c24e443920f42716288"}, {0x2, 0x25, "97b2fbf00f4092fd62d4c91eaf244b55e55ac64c2e0d2cf993c7da302f8ce26a28a11495a2"}]}}, @mic={0x8c, 0x10, {0x3a5, "8f5ff2745136", @short="b179709d25547431"}}, @measure_req={0x26, 0x93, {0x5, 0x48, 0x55, "557cd54ccaa128b6e98a3b9d57123976b8495b456fb87eeb9fc2ea3f43df85999849f0da617e6e718ffe477381c62135eebfe0d6127b838d0dd2912467d758c110c74ad5ef38f024cdca53865fc872a9d885bacf3e148efe8e3057f922f1d4936b74b5145bb57df489960fff00595d3204bb4390ea3115b0bc1b58f03fb63b859dba40592c5a3375ee09b822836226cd"}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @rann={0x7e, 0x15, {{0x0, 0x1}, 0x9, 0x8a, @broadcast, 0x6, 0x6, 0x6}}]}, @NL80211_ATTR_BEACON_HEAD={0x4df, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @from_mac=@device_b, {0xb, 0x7}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0xb, @random=0x1, 0x100, @val={0x0, 0x1d, @random="f68c2f8566115a889c6c11964e518d7f8aabac51cfbd1dfdef355f2feb"}, @void, @void, @val={0x4, 0x6, {0xe8, 0xf1, 0x101, 0xf2ce}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x8a, {0x68, 0x78, 0xf1, "0cf71c8d273a681f52a4f08be8e7d78b27362fb314ea9b978c408c5564158d1d5817cde2a5d8260f16456a13d66cb46fe865ff862eba7a53b22a892023cf36d6190b44695993c98d72f974ff1c5ff89ab5f637c77a4a3133eb9bb4b4ed993ea490b23b9f40170fe4732e54df868810712b9895e258c3d4a148453995bffda0931c12fac732e3ba"}}, @val={0x25, 0x3, {0x1, 0x4, 0x8}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x9d, 0x2}}, @void, @void, @void, @void, [{0xdd, 0xdb, "c4bf2160af751f17936c570e1cc3c0fb947a6c58c901d6e748ed522e66f36b8364c19e6b0c9d9dcf9a8fb9b31a6e95752032626847335b0802a31df65f2726be4f958da29ebc52d10a67e7599afb99c96667c626b6ac1ed6976bfd48aa36a2f86d29b1a864ad252555672e0706d3caa5f1629ca432867f45392ab8a314152c49ababab4d7bf5b63aab8b2d67f9e64d1c609d72facd5d4f64b4dd46e068dc2b064d8cdbdb6bef7236f8e5e9df95d3b505189c95b1b70653082716a30f89b403c5c0081225f7e2d23b9eba5619dd283000428bfd567cd60fa38622e2"}, {0xdd, 0x96, "6e366da4ebb6c3bc9f0fa1974cf225cb86290679dd14829dea9eaa403eb510d60a3c41c75760370ef5f7e3286019c0199986e7fc17bc9a4b3464e44afc154012477daae4dc244f36cca5b0de2604922f7da03e530e6ed40329cd5400a0133bb6dba70c6e83f0e8d2de085ad2603af34f5c86ed3bf3ccb7a9b6a6779f130cf4421be1af983615264060abe635f7d47b9989960c006407"}, {0xdd, 0x65, "e0923ee074e69269c16a02979689823fc71dc0d160df32a2d7970a6ae206b4b62e47a2a8bb8f334e6d6f048dfde2b434da8bea0df9f55378c2938d19313f807d908f10b3cc856df9c51c5d06a98823bac3f08c16293e442e5778eb913348c719a854aaffbf"}, {0xdd, 0xd1, "be733bfffd73dccea9597c5aa91d4606a22209589fa35cfb439f54d3ec323cdb6a9c34cdbc9a0aad5bca43d5210ed3aaab848700ed1f35af8914f523284ba4d4b28f7ba5d2df2ebb8a3acf628818091fe2d10c302eec853695d84c3e7e651a425cbc5208a76c4926ae8fa141e29c5035b2e144d06b20a183bfcd6594034e80e621460e9ba241d6c04912ceae30d0b43eaf5c1bf10016fc28a99839645ec8e71ced57ab6c70a553ad666f4bf1fae37c078af3cc6adfc9e48a416a3bb6308706f0f26c24ad099e5885c1952efc43b628fdb5"}, {0xdd, 0x72, "43aa018bcb458933b830974ce5ec44357edf65a6d3f7bd17b9a04f13ea27b802392f0769f4eda9302a3e6a8eda0323380d28ff02c4348212f9a6c08e515be536cc5ac24182879f5dc386484c532ffde4c38f1692f329883368bfe842f40632e685c2ed13d4726d525fd612996bb396adf8d0"}, {0xdd, 0xcc, "436a0f01507ca4173e8dd122a8efd142ad1c725d5c87408d86bcc2f3eb8b94d82d243e6449eb4449d699668b4556e8d0efce5751b9a78c777a39a5087a169867e82e7e541de806ce1d5dcb35ee763ba5930fe3ee421831e99438404136e3a2d888bf3ef68d45875a4165194073ce200266105f2db1bf2314f877bc53b1a7ede513cb76a980e48ddd2d5ff064b355fffd61a93af085d20aac4e0b4b50840bac72013d5eae51b92e58e6504beb5caa453912d732fd4c0a117decbf4e8bbb6fcf87b4be09105ce14225e46e063e"}]}}, @NL80211_ATTR_PROBE_RESP={0x3ab, 0x91, "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"}]}, 0xa18}, 0x1, 0x0, 0x0, 0x20040044}, 0x15) r6 = add_key$keyring(&(0x7f0000001bc0), &(0x7f0000001c00)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_provisioning(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x1}, &(0x7f0000001b80)={0x1, 0x0, @d}, 0x18, r6) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000001c40)={0x42, 0x2, 0x3}, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x4000000) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x9c, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_REG_RULES={0x68, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfa}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x65}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x20040001) fallocate(r0, 0x8, 0x6, 0x800) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001f00)={'syzkaller1', 0x32, 0x33}, 0xd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) r8 = openat$incfs(0xffffffffffffffff, &(0x7f0000002000)='.log\x00', 0x10000, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$P9_RWSTAT(r8, &(0x7f0000002040)={0x7, 0x7f, 0x2}, 0x7) umount2(&(0x7f0000002080)='./file0\x00', 0x4) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000002100), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002240)={'erspan0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x80, 0x39, 0x6, 0x2, {{0x29, 0x4, 0x3, 0x6, 0xa4, 0x65, 0x0, 0xd8, 0x29, 0x0, @private=0xa010101, @broadcast, {[@timestamp={0x44, 0x14, 0x5, 0x0, 0x7, [0xc32, 0x505, 0x7, 0x9]}, @noop, @cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "1831f73ca0"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x12, 0x1, [{0x0, 0x3, "97"}, {0x1, 0x7, "2c6b47479c"}, {0x6, 0x2}]}, @lsrr={0x83, 0x1f, 0x54, [@multicast2, @broadcast, @loopback, @loopback, @broadcast, @remote, @broadcast]}, @cipso={0x86, 0x1e, 0x0, [{0x38ec5b3ae07b0b4e, 0xb, "05c75cbb5225e7a8e5"}, {0x1, 0xd, "6ccf41d269593c7bb88cc4"}]}, @end, @timestamp_prespec={0x44, 0x14, 0x5d, 0x3, 0x3, [{@multicast1}, {@local, 0x48e6}]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000002340)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r9, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x844) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r8, 0x4068aea3, &(0x7f0000002380)) 32.269132087s ago: executing program 6 (id=2545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x400101, 0x80, 0x14}, 0x18) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x6f, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) r6 = syz_clone(0x80000000, 0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001ac0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f00000006c0)}, {&(0x7f0000000780)}], 0x7, &(0x7f0000000b40), 0x0, 0x800}}, {{&(0x7f0000001000)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001480), 0x0, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r3, r1, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}], 0xc0, 0x800}}], 0x2, 0x4000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000040, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x101, 0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r7, 0x45809000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 32.199389777s ago: executing program 6 (id=2548): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100011c4500"}) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000003680)={0x24, @none={0x300, 0x3}}, 0x14) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000380)={{0x0, 0x4000, 0xb, 0x0, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x4, 0x10}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x8}, {0x2000, 0x5000, 0x4, 0x1, 0x7, 0x2, 0x0, 0x40, 0x0, 0x1, 0x7, 0xfc}, {0x3000, 0x80a0000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {0x1000}, 0xddf8ffdb, 0x0, 0x8000000, 0x0, 0x8, 0x7801, 0x0, [0x0, 0xfffffffffffffffc, 0x1]}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000080)={0x4000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, 0x0, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000adb000/0x3000)=nil, 0x3000}, 0x5}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x801) 32.132390928s ago: executing program 6 (id=2549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x198, 0x0, 0x4}]}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @register_looper, @acquire_done, @register_looper], 0xd5, 0x0, &(0x7f0000000080)="eaa9a7d06a8da0272037e3e6d9e5a155109d1bbf7e77593b43361513dbc725d061b558126d50b0d78fe48132c0603c661d5f8e576077766df2b97e7bd62e0c1eee01175ebdd82ebec2d4db126f8b374f1d4df103811e814619b126013b7a1772191fa0864467bc8e01fe8603300e489363c630e54d61466b1a72a66390cd72247a44034d757d2d3ffea443f7a62ef7c2f9011f30148f55d9908780a81ef74d101b1c3bbb5dd96040b154d422ba46abed4d995ddebbfe66d782c5a7280c937bd7f7acd6471ac8446ac6be9e9f873fecf9811e7f69cc"}) (rerun: 64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r6 = dup3(r1, r0, 0x0) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000240)) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x3}], 0xfffffffffffffe95, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) 32.122278169s ago: executing program 6 (id=2550): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) write(r1, &(0x7f00000000c0)="1d0000001e005f0214fffffffffffff8070000001d0000000000000008", 0x1d) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@md0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4000fffffffb) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x414680, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@filename='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x9, 0xf, 0x7, 0x6, 0x3, 0x7, 0x6, 0x3}) 31.791857634s ago: executing program 6 (id=2551): r0 = socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r6}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 31.789530733s ago: executing program 37 (id=2551): r0 = socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40004, 0x40, 0x5, 0x0, 0x35a, 0x40010020, r6}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000040)=0xef, 0x1) 30.991364835s ago: executing program 8 (id=2561): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x3, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x10}], 0x5b, 0x0, 0x0}) 30.899927167s ago: executing program 8 (id=2562): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet6(0xa, 0x80002, 0xa) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x199, 0x0, 0x7fffffffffffffd}]}) (async) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) (async) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080)={0x3a, @local, 0x4e24, 0x3, 'dh\x00', 0x3f, 0x3, 0x18}, 0x2c) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2, 0x4e21, @local}}, 0x1, 0x1, [{{0x2, 0x4e22, @broadcast}}]}, 0x110) 30.899067757s ago: executing program 8 (id=2563): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x47, 0x2, 0x20000004, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r3, &(0x7f0000000180), 0x12) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x10001}}, 0x30) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x80) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000002480)=""/4096) socket$inet(0x2, 0x1, 0xfffffff9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "3c444bdaacdcab4d", "7c09e3c444d2f0ff2495408ac00bc823", "13d4610e", "05d41a5b745d371f"}, 0x28) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r7, 0x0, 0x0) 30.898391717s ago: executing program 8 (id=2564): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x36002, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x8, {0x8, 0x4, "c46c32155d69"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000003c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 29.282842801s ago: executing program 8 (id=2576): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x0) r1 = eventfd(0x4) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_sfeatures}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x1e) syz_clone(0x1102080, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='rootfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="44efb8b95841918f5f0fd650e4ae", @ANYRESHEX], 0x18, 0x81}, 0x4801) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x1ff}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmmsg$unix(r8, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) write$P9_RREAD(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33000000750200270000006b71322fb46b5c6bf4442aacad67131005ce01f7a931f842446d64d459643a647d6768d82ef100"], 0x32) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x20, 0x5c}, {0xbd1, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {0xb, 0x2}, 0x1fffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0x7, 0xe, 0x0, 0x10000}}, 0xe8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 29.178491152s ago: executing program 8 (id=2578): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x5}}) syz_open_dev$usbfs(0x0, 0x204, 0x84642) socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="aacb00"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) r9 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) r10 = syz_pidfd_open(r2, 0x0) setns(r10, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, 0xffffffffffffffff, 0x4d75c000) 13.797802238s ago: executing program 38 (id=2578): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x5}}) syz_open_dev$usbfs(0x0, 0x204, 0x84642) socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="aacb00"], 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) r9 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) r10 = syz_pidfd_open(r2, 0x0) setns(r10, 0x24020000) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7, 0x0, 0x80000}, 0x20) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x12, 0xffffffffffffffff, 0x4d75c000) 13.414369503s ago: executing program 7 (id=2753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x4, 0x9, 0x7, 0x101, 0x34, @empty, @private0, 0x7, 0x1, 0xa}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x90, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0xb, 0xc}, {0x19, 0xfff3}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x50}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x44010}, 0x20008000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x2f, 0x7f, 0x3, 0x8, 0x1f, @mcast1, @mcast2, 0x8000, 0x0, 0xf, 0x2}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4, 0x0) alarm(0x80000001) alarm(0x80000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000200)="2400000001ac", 0x6) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x26b5a566, 0x2) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_INPUT(r7, &(0x7f0000001180)={0x8, {"b8be367ec40a436238388a35162cce8388b3846b90f48546866e8dc027d1ae7ab261a7279dd2a00cc1c5d94e9108b537686a5035930be2af242b557bd00e13c0b281a8582b1b26c1339ba18f1b45b939cb36e2924fa3966e04551afd5f936b938bbc87d2df58d604a5343f72cc1c2f96786e4a9e75061495ddeeeb8992d1fd74918a157a19c079781e50bbc79c8de1813e821309d212bf0e879634da87de76a35868b62e3bdaa29c1169c716d919066c127ecad1c70cd165bdc67e8b225ccfb728fab0193f3952563579ef009aa62f5e5899b25a876cb1bf31bfb512a39157fe15945e584d16fff2a80ed4806511dde971091b03780b447ee371aa5041bf5581b8627842e7460d7fd72b8c50110890d15aa6213e4262ed7daae51a8bdc727a33402f4265939eb516d0bad4bed9d2fb71cad5f39b8e4b0b9a27673147c3332b5a605d62007d1d186f489d4b143d91b4bfc8c03e910f86c90c54b933bcd3e0368f38db89ea50f6a03d0d84f601f2aaf09550b06558c44a360a9d746ddd6091fba9e38ff640a012406c3143bc640fad4d7840332243cd19dd8bc80c2ff578c84b16c5d690691faeb853029ac5cb96c3d749636462d28a05abeb0e89a3350ee304f5d99ccc5d98e7310bbc9b34ab299e413f00a27fac7bdd452576ff925afbb988463bd37c552388529dcb0a18004871f6b3e461ac2444757f8e1e2a07e2f82431354a9d7ff7bd6b9d8ddc34bd88e13421f16a5941fb8ead7d05a9d0f51f10cf6ef3a0d96f4a377f06d032c335fcfb1fd0421cf93609dda0c99428414488849272e91677511bd9f1710f7194986d968e52cc51374fbfb8c142bdbe9ef70deb5b5c6d7eff3e039c52e90145deee49e9a163bf43bc471aded53d27ab9a441ed2a125a3f7f8d8032b6557f7cf77c3fee616c9631334c4894c83c1649886be8c72226dfffae98c4e5ff3db1127699b4b3b3202164da869df0cb51cbda81d98245e02566305ea36422a600a501f4efb70523e7a7d63233a4264ac7c0ff9a824c67d2713d2c9151d986df455647532c72ee7dc3ac7c94fdc4f68e396da33ffe4a0debf144f1c9b8fe8fee61190f8e641e1fcfe9143b4156e47048fd15b535bbfe0e4b0ec4aec1a738134e104b37e98d08fc5402dc68d5334f7b7e83e378fe8d6d88e531de5d77a518320dc9272a2fdc1aa99617be3f2317ac9271d7055801be5d92cec0f0b2fc97a3706c5411ae84aee09167b2db6149f3e81668ad093e65f6acbbb63d5a4ee8622dab894eb0de180581ef1ce12ef78ea93664e36007f5f01be8631117029c1753442a765f20a02e49afb1e27e236bf387a9bd528002fca5a266f2b71c13af2d692b9d5adf32a419f1e8bcf4f98a6136b43fb8c616aa8c58c2b5c024de75d0c5964db55a419ae52b50c3473ca9f5406ec59eab14a801e70a52840f732f3009e59b8fbfe20369975f9ca7b63b60877b47e6d1aeea9d21f199c1c4fc401f36adf8172062e359a8ef68706e97f26efecec6bc6ef5e7a077ab310f3cc494e8768990aa8577f0a850942a8e81e4985060247839f95f89f6bb19caae0bacecb97c68072293835c5aa4d8a3ea4c60d4ede7a6571c509e484caeaeade69ffd8846fce9083ea75006d5a03571c5c65ea8ba6f19e248fff7a8229144f2609ddb063b72967ca066c58bf467214f76e551484dec1611135ed03e923b1a8faf186577a946135fe3c16eebe29450eb8a310118f3004f739f1718e12d59fc485bef12df4f28f9feb6e6f61e4583a1f888a1172cbb1fa91d0e2b05e1709b23410427e57e1ca993d933ab8dd8d5ba7880cf06372fa4940a80738c5b11bdddfb60e1e297dba190e62ebc0987af8faf16d150c6e8d3e7e578e1ac3d6b3ab4594361b4e841092f9b9020a0434e3b4de7dad7a3fdaa9831650b8765a103b16e4b9082748c7dd5ed5239ed76b9e7c092f6398dd8cdcb9600e4cdbefba2dc70620fea8491f8876f998ca94d9f2faeae8384982bb6e2f40064afd21c47ba25e3ea4e9ec2df5ebb808717d6cefa7b0dc0df5cc1111d0a33f2b46aa5ae2932e89c814c78ef9d09b4224900d8bdb483cb344030cfb970308018431a901747fa2a0bf5210a578845e74e6331f8a1a14aa06791fb7201da4afbf40e46b7a3252bca66164b83bde0fbc23e3f57270c6138a1651210c96cf0b61a53a178ad2b72f0fe0debc2602af7b1cd533343c173ac00e73a4451f7fd599ed7815612c7aa6e64df9e5a0c07d99710ebc749c8ab0f2f6197bcd59974a424fc24eb0e700a55bf4b67e64d34f23d6ba370d9c83b4aa7171583172af5ab2d3a2ac7de6d589a10cf159474e2948ffb42d51ddaccbeecd4ef5e96361951686af339eaf66e685365bc85175f263eb5a7587b77ec76fe407c91cfaace348e792d44c3f71bf0ab8000c85a04f47bf9176f2cb9f6ed7f2c71d841ac8f334159e0532bfdee9209ff57e50e42dc07d2fedea6596dc8c7052c12cecea7f0ffbc3a92c02dd6eea1ad8d2441a198f2c2f8e6fdd29fb541377694c35809faa7cecd378afaa33244101a45683a6b316733902c907885563dc3a9b4d880fce1ecd0a23cadfa6bf8cab06382c7608ac4e2048440aa53dc6c7e26ba50018e81548325220c04808aae4d96d6f2d5b93a35430857f8ea78cc1a7a3184a2493df13d243da0c5b5b13392c3257dd2bbbe33623730f516568d0fc206697f5387462a56b51423f965d0b23ba905c0459089125a995a9f6cb32d4334431a81fe88f3a8fac06546f11659a50313b9418275a62da5710919d510eda9c299d46e2a98f6baa01a97faa576f03cf84007d23cdb6d7b2e1cf1432bee824bb36d882eb33ce714acf15f8c7b2a95995d7e2d76d7385a88e48beb4e5afd622ed96765b9745c1eccbf59c21fba080aecc3b805a21c42ec8af287291b3617280457548d20f3031cce2665b7745fe600b9057e70de39cc107b16fdd1f1ac94263043473df25c3468ab2b2c840ff642749ec8607c6d61f326aa4bba9960a5b9e58c5cec7cfe0e0f36e1db9a65191165db3ee67e1bba21ddcc2eff3b0ff010e0ad6300f606793f4667bf1a9c7b92ed03a02bd7435c7c36fde5bb09e51f202bd2fcf19df2f2ce6b44cfeaaa077ee40400e829781f518a9c54384f00e10d9a393e71fd25ecebf48c298ccba0bc9c0eb4f24b087191073cf84b580c5f250d2c7aa0b9c54ad31cb6bf01bacc11643642ab86d1cc36a9cbe08228f97c2c0c179e422273111139e51bc753da2a23a2c069b778422615e5581149851478c1a3d5cb372924b4d3b1272213f484991a25d8830b994325f2f96e8c78e8016f9a3e48a653063f7e71cc73acf1088ab86c16aa1c847cb20d2ef4e4bb26ade5f19dfe256afdd8e239dfffe70120ba0d11521a87d0fba06d17c07d06c256486a68491f3a91b989eb216caa27d082a2caae1bcfdd4c9e0b4ca62dc1599930afd13c912f20cc3d30d01c99fdfdbc7dc57f4a3e2f171b24bc6dab3f34d9f594148ef53db25f67ce8cdd0293b9a3f3c3ca5565633e91d34fea7214c04b5abeb04a6cfef2e1b1b25531f20d0edb006ab44e65aec1634906925b52f57e40935257481405556bf39305c8da061f413bca7975c1f43c814318a49bc78624da8b77916d718f9b3cbc958aa51204cffa4372aa303fc493599e7b3227562d04db8353fd717fb2a61b6904618de4f6837b1821c96ffcbe50f9cab3c0e89f9cecaf435ae55b816f344754f509f69b8b6484be6917356a955b601def62f8b5a5e1d591f3541d44ffa87b25cdf813b4b47c5d9df9c5730690de00839a77ca32e09fed88519ca32de1abfdc189d0c44b9fed5bc3b5dd994afc69253f171eb1cfa88d066b6fbfa47fcb04d78fccd50a38ba87bc22e804caf66a9fa2db70dda9bbb370bf63d5c18ff944a0733ea2c3fd4d730ad6b499f527f9778b7e749ec6055dd9506b574758a9f96f93e09374d99f5cf0e8610efea71732ce1cc45ff793ede2422560cbc82ea1c4d2d54a1b7c471698ed6300cf07911e39223c373b7187c5ad93a5d7274bbdf24c8ee99086191bfbec90f011924265b83d8116ec5e148b435a2ba05f6b9a4ab2dc28ca78880cd643f9b0c6d1cb0abebf75b511f4b11c7d5c2cb170bc95f7ee2bbe2c49312b450887bd99670907b5f7e8a66f25810e21674b39a7adeada16d1d6d290cf16a6d690b748b4bd138a796a275b89f8560a560692c16a94d216ea63b39ae8fa8e802ceff0ebafa864179c29bcc5c1d58cb88b6d3221f9378e7e89206f334f79da3484fab8db286da88fe6889c3e05048dcfdcbe10a37b44647fe539c6549a96ac3ab1df9621f7d75e17d51cd7f4379eab0bb831474a9c35c2669313260c60707c3c1e7460f085fbc9549f9274172811771d6b66b93b6938cdbf8f520e0d2c03fde990b389d2bc6eb631eb8a23a11df232a728747ee15ae19373e98a89cd92ed0a7f53ed6549696cdc19d5101ca708aa0d813ca8adda2e8b42495c78303f10f1de8a3bb19f50ecbbb43f40382de04185d7bc6d7c6ea4b274ea6cf527679b5c7a9e857fbf4c31cd22c60c9376de85339a99da77cf30443554007e6fd4fb969fd15d5b144ca22e25ef433b2e2fce58f649087de32595a6dd854a676ba96ebc7e4d0b4ab09f11f69e56c58843fc270001400d64ac5f3da97b15e60a2c89a67de9f2d6179090f9b090d7082a4d8e84c2bdbfc5c34963af4eaefe42bdd7798ca2f90f2e67e0c26a01d24868aa6b6e0990ac134bed19c8302471355faf262f9bb8c7ab4019d168b43c364fed67b4a74b75989a889cafa611633327c5fd8a958383350e95a770b7c16fd9cbe0821af0bd47da673d021341dfa77eda38a43886d4ff8c52c589d853318b4d3f5a59ea7aa1527b483d4012016f2306b3e30fed4274bcd9e21bf0d859690fa4d4073cd2bd64e8a238d8a310c30967d21c9e50575652f74fac12a6b0bbc8e11b071f1b3d2f4aa0a8948279c86069539ee2853b2959ddfa9227745d767ae33f0de68cf05f445fdde1ff5b2ca1fbd8c9a47920ec6a1adec7df17f6e4056397f2669e906f6443e53076300d2c1e3362544562fdf28e01296dbd4c4ff2b33a5f4ef70305ded7844f5e8885c7a9d522e4633950c6e1cada91590a7647c0e7d293688219b54627b25da0cd456b1cd7f21c2f709abfd2918afbe61c44d53a6c45c8094a814f9b1a6289bb21d00a5dd8c7f26d959c3283a5410d2db846a35b86844255a3482ed846bc9e0d00f36030e0918eaab40afed9abe887dd666931ddf39be42b81bcf5ce9a10e392bf0c893465474ac3e13847e0b75c7af7c5acb83c90761c72d4be366370740d6ba15d3d4f4f5e95e77c6d507b837d5e5ba2872ece2b57c1561f5311d563474a2f7079d3d1c9e52fa5a3f8437227b6dfac487084dadbfe2d95ec6a85b46338a0025268e26ea335a7cd46771d00345fda7501c39b1178b051984388ae2c124c5a1fb6b5ca332848e12cc4317a71884640bdab83d07838f71982ba0ee90aedf1da929917eae410258c0e7e7813d1dfce303793a35d0bbdc1a2ad0688c4fd51164db9a5e2182eae1b9476f78d3f1704a70582ca4047eb1042c9c4b5fe469de1bed1b930f433bd13b6a8b39b02e754f7d26555a8511d41a994cdb4eaa162a370f76e1077eef5d174150f174347aa80641da4189144b409ec36b7148fc1ca62e164a4555f02becb8e702d8b4d1d626efa556389be76d7059280e9d326c6c74ae634cfd993dfc730cf9a8ac819f2530f17e7f414119c6aac2b32e4c479ab25263f8c9", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000000)=0x2) 13.314417725s ago: executing program 7 (id=2754): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xffffffffa003e45b, 0x700000000000000) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000040)={0x101, 0x3, 0x3, 0xffff, 0x27}) close_range(r0, 0xffffffffffffffff, 0x0) 13.175589347s ago: executing program 7 (id=2759): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r3, 0x0, 0x19, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r5, 0x2546c000) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000001500)='\x00\x00\b\x00\xff\xff\xf7\xff\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q\x00\x00\x00\x00\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a\x00\x80\xff\xff\xff\xff\xff\xff\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xc3\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a\xde]X1`d\x9d\x9e\xd0\n\xa1\xa9\x8cO\xb8p\"\xe7\xdb\xab\x0eAW&+\xe8\xf7p\v\x01\\\x98\xeey\xc4c\x18\x91\xd9\x00\x1c\xf0.\x9f\x1e?\xea\xea\'0\"\x94\xd1\xd3P\xa8\xc5wP`\xa6\xd5Q\x11\xc3o\x04\vat\xb9}\x83g\xca\xfe\xf4\xe6;\x18\xb9\xe7<\xcf\x96~\x0f\xb0\xd3\x1bl\x9e\xc2\xc6\xcc\xbe\x8c#\xd0\x9f\x050\x1csf\x84\x06Z\xf4\xd2!\a\x8a\xc8\xbe\xdb\xf6y\x94Z\xed0\xdbZ\x9b8~\xc0\xbbU\xd5I\x14\xb6\xeb\xa7V\x00\x18A%') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x63, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x141, 0x7e, 0xd0, 0xf8, 0x20, 0x5ac, 0x264, 0xfae9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6f, 0x7, 0x2, 0x3, 0x3, 0x2, 0x0, [], [{{0x9, 0x5, 0x5, 0x3, 0x200, 0xd, 0xff, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0xfe, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600), 0x803f, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000a40)={0x0, 0x2, [@link_local, @remote]}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30, 0x0, 0x0, 0xee01}, {0x2, 0xfffffffffffffffe, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0x0, 0x1, 0x1}, {{@in6=@local, 0x0, 0x6c}, 0x2, @in6=@remote, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9}}, 0xe8) r8 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f00000002c0)={@rand_addr=0x64010100, @rand_addr=0x64010101}) sendmmsg$inet6(r7, &(0x7f00000090c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x44804) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.542385796s ago: executing program 7 (id=2773): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=ANY=[@ANYBLOB="0600"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0800051201000000000000000000000000f9ff00000000000000196980a379ed04a0f61334c674a743cc5f9087b257e74af6b6c301d4b3b8bf7177e9fbc6ee104f80ca5e2c85fbdd0a25aea38ae1b7110d8f84aa7b628adc74eac674e206000000000000005c299809904cce588e22b1a237e0b51f824410b628278150388f09002f545f52d33cb66a09c09bceeacae1fb2be62f7fc6796a072caf09e4e740f354bca8d033de9ee2814ff2cd7ab04f4f74cb52ab1625c6"], 0x48}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001280)={{r1, 0x8, 0xe, 0x100, 0x2000000000007, 0x2000000001, 0x1, 0x6, 0x200, 0x80000001, 0x28977212, 0xd7b, 0xef0, 0x7, 0x200000008000}}) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x80000) r5 = fsopen(&(0x7f0000000080)='fuseblk\x00', 0x0) r6 = timerfd_create(0x6, 0x80000) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, 0x0, &(0x7f0000000140)) shutdown(r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) 11.704031349s ago: executing program 7 (id=2778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00313005e7b0000009de2b7fb00ef9d3c298561edae7c01005000000000000000000000000000000000000000001700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2]}}) ioctl$LOOP_CLR_FD(r2, 0x4c01) close_range(r0, 0xffffffffffffffff, 0x0) 11.702182849s ago: executing program 7 (id=2779): syz_usb_connect(0x0, 0x45, &(0x7f0000002d80)={{0x12, 0x1, 0x0, 0xc9, 0xd1, 0xc4, 0x8, 0x499, 0x500a, 0xe7b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x1, 0xd, 0xd5, 0xce, 0x0, [@uac_as={[@format_type_i_continuous={0x8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "a3f6d2fb5b"}]}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x41, 0x6, 0xcf}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r1], 0x20}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect$cdc_ncm(0x0, 0xa6, &(0x7f0000002a40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0xfd, 0x40, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "8f"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0xf3, 0x6, 0x1}, {0x6, 0x24, 0x1a, 0x5, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x1, 0x28, 0x2}, @obex={0x5, 0x24, 0x15, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xfff5, 0x4, 0xa, 0x2, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0x85, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x8, 0x0, 0x9, 0x0, 0xb3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x0, 0x1, 0x2, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x8, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x6, 0x7}}}}}}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002b00)={0xa, 0x6, 0x250, 0xe, 0x3, 0x5e, 0x20, 0xc2}, 0x31, &(0x7f0000002b40)={0x5, 0xf, 0x31, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x14, 0x0, 0x4, 0xec, 0x76}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "6c1120da0a69aca0880ca3191ec58a68"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x3, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000002b80)=@lang_id={0x4, 0x3, 0x42c}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', 0x400, 0x8, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002540)={0x0, 0x0}, &(0x7f0000002580)=0xc) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r8, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0, 0x0}, &(0x7f0000002600)=0xc) lstat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002700)={0x0, 0x0, 0x0}, &(0x7f0000002740)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002780)={0x290, 0x0, r3, [{{0x2, 0x0, 0x4, 0xfffffffffffffffb, 0xfffffff8, 0x3, {0x0, 0x8, 0x4, 0x0, 0xcbc9, 0x5, 0x7f, 0x80000000, 0x7, 0xc000, 0x0, r4, r5, 0x0, 0x8}}, {0x6, 0x5, 0x0, 0x4}}, {{0x1, 0x1, 0x800, 0x1, 0x8, 0x0, {0x4, 0x0, 0xe, 0x100000000, 0x8, 0x4, 0x7, 0x8, 0x4, 0x2000, 0x1, r6, r8, 0xd, 0xfffffff8}}, {0x2, 0x1, 0x13, 0xd, './binderfs/binder0\x00'}}, {{0x4, 0x3, 0x3e2f, 0x4, 0xd, 0xfffffe01, {0x4, 0x7fffffff, 0x3, 0x6, 0x2, 0x5, 0xa, 0x10001, 0xee3, 0x6000, 0x4, 0xffffffffffffffff, r9, 0x5, 0x5}}, {0x0, 0x3, 0x0, 0x4}}, {{0x4, 0x0, 0x7fffffffffffffff, 0xffffffff, 0x7, 0xfffffe01, {0x4, 0x8, 0x8, 0x8, 0x5, 0x1, 0x8001, 0x0, 0xffff, 0x4000, 0x1783, r10, r11, 0x25, 0x4}}, {0x0, 0x7c0, 0x8, 0xe, '{\'#}]#(.'}}]}, 0x290) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r13 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x3, 0x0, 0x7}) ioctl$USBDEVFS_ALLOC_STREAMS(r13, 0x8008551c, &(0x7f0000000040)=ANY=[]) ioctl$UI_BEGIN_FF_UPLOAD(r12, 0xc06855c8, &(0x7f0000000240)={0xa, 0x7, {0x57, 0x0, 0xc151, {0x2, 0x7}, {0x7f, 0xfc01}, @const={0xfffe, {0x3e7c, 0x4, 0x7, 0x6}}}, {0x54, 0x8, 0x3087, {0xfff9, 0x2}, {0x1, 0xfff}, @ramp={0x1ff, 0x49, {0x3d4, 0x7, 0x9}}}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@flat=@binder={0x73622a85, 0x1, 0x2}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 2.219251528s ago: executing program 5 (id=2915): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2.218857928s ago: executing program 5 (id=2916): r0 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x3}}, 0x2e) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) (async, rerun: 64) chdir(&(0x7f0000000280)='./file0\x00') (rerun: 64) creat(&(0x7f0000000440)='./bus\x00', 0x11d) (async) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r5, 0x2008002) (async) sendfile(r4, r5, 0x0, 0x80000001) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) 2.214955158s ago: executing program 3 (id=2917): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x6ac840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') getcwd(0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@ignoreqv}]}}) getresuid(&(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000440)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @dev}, &(0x7f0000000080)=0xc) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@rand_addr=0x64010101, 0x4e22, 0x0, 0x4e22, 0x7, 0xa, 0x0, 0x80, 0x3a, r7, r8}, {0xfffffffffffffff7, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0xffffffffffff4f4b, 0x6, 0x5}, {0xffffffffffffffff, 0x44, 0x3ff, 0x8}, 0x3, 0x6e6bbd, 0x0, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d5, 0xff}, 0xa, @in=@broadcast, 0x3502, 0x2, 0x1, 0x3, 0xa, 0x4, 0x3}}, 0xe8) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ab2000/0x4000)=nil, 0x4000}}) 2.202274408s ago: executing program 5 (id=2918): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0xfe71) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/222, &(0x7f0000000180)=0xde) close_range(r2, r2, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x22, 0xd) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) prlimit64(0x0, 0x8, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00001b5000/0x2000)=nil, 0x2000}, 0x3}) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000ac3000/0x3000)=nil, 0x3000, 0x200000b, 0x3b071, 0xffffffffffffffff, 0x52534000) dup3(r6, r5, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) unlinkat(r3, &(0x7f0000000100)='./file0\x00', 0x0) 2.168552469s ago: executing program 3 (id=2919): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x0, 0x1, 0x81}) close_range(r1, 0xffffffffffffffff, 0x0) 2.0640423s ago: executing program 3 (id=2920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r2, 0xffff) (async) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) lseek(r3, 0x1000008000931f, 0x2) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 2.06361491s ago: executing program 3 (id=2921): socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x99b33000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x8044, &(0x7f00000003c0)={0x11, 0x86dd, r1, 0x1, 0x7, 0x6, @random="eb68e3f58965"}, 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x310, 0x79, 0x1c, 0x72, 0x20, 0x45a, 0x5210, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x6, 0xb0, 0x4, [{{0x9, 0x4, 0xf2, 0x6, 0x0, 0xf5, 0xac, 0x2f, 0xaf, [@hid_hid={0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0xf76}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x44142, 0x0) sendfile(r3, r2, 0x0, 0x3895) unshare(0x44040200) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="10002abd7000fbdbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690031000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000081) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) 1.714557185s ago: executing program 9 (id=2927): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10d000, 0x0) setpriority(0x1, 0xffffffffffffffff, 0xd1f4) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0xea60}, 0x11, 0x1000, 0x2}], 0x18) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) 1.628068066s ago: executing program 9 (id=2928): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000800)=ANY=[@ANYBLOB='1-'], 0x31) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x160e) 1.627343226s ago: executing program 9 (id=2929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000500)=0xa, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0xff000000, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d1b19a790ce1409886f25ff89a9aad3c402809f73471b879787dfd838f8bbf32e5df893cdf09ab1ec296e3f22c432c8eca50cd2ec2e76a0472239df0eeb41aa21d52c7cf3556a12cc95d52799774a61406cfe696456e0b985f28011f98839b993", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_ENTRY(r3, 0x0, 0x3c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.559719718s ago: executing program 9 (id=2930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f000023d000/0x1000)=nil, 0x1000, 0x1000001, 0x11, r1, 0x0) (async) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1001, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/89, 0xfffffffffffffc96, 0x2, 0x2}, @fd, @flat=@binder={0x73622a85, 0x1000, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) 1.508793158s ago: executing program 9 (id=2931): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x2010, 0xffffffffffffffff, 0x45809000) getdents64(0xffffffffffffffff, 0x0, 0x20000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x6, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000000905030200"], 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003c00, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000140001030000000000f900655a"], 0x14}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f00000000c0)) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x6f}], 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r11, 0xae03, 0xd7) 1.312052061s ago: executing program 5 (id=2932): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x101080, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)=')}%!:\xb9+\xe4\x1f2\xba\xc3\x0ed\x93Z\xbf\xa6`\xa6\x84\xef\x18\x8d\x90@\x1bb\xff\x01\x8a%\xf6vl\x15GPFo\rAmW\xd7*F\xe6\az\x852\x92\x0e\xd9\x9a\x11\xd3\xa8\x96\xad\xcc\xf9\xb0\xcb\x8f\x1ao\xfd9\xa8\x03\xe0j\x81lM}\xf0\x1e\xfb\xd2\x84\xa0\xb1\xc0\x97\xc16\xf7@l%j\xc9\x11ll|\xc6x\xcdD\xd7\x94\xe2\x1c\x96\xa3\x88a\xd8?M\x8dA5q\x11Ou\xa0 LS\xff\x92Y\xee3\x8a0\b%\xe8:}\f\x14\x03\xc2S\x8a@\xf8w\xe1Z\xb7\xf5\x9c\xbbj\xb7g\xd1\x9dH\x18\x9a\x11\xc0f\xbd0\x9cD}\xf8\xff\x9d\x8b\xb2\xb2&\xbb(\xba\xe8f\xd6Qg\x9dT\xfa\xd01\xec\x12\xf4\xfb\xd4\xf1|/\xf3]\x03-\xe0\x93=O\xb3\xdcf:R\x11\t\x15\xc2\xfaV\x17\xc9b\x9b\x95\xd4@\xdb\xf0\xb5\x02\x8a\x91\xb0?\xc6g\x88\x1b\xd7\xd4!\x99\x02\x8b\xad \x90\xbciz\x99R\xa4\xca{H&\xa9\xd4C\xfd<,pAz\xf4_\x9d\xf8\x98\x8e\xd9M \xf4\x0f)O\xbf\x8d\xf9:$\f\xc7\xeb\x96Vpg\xb0\xea@q\x03\x87LZ\'\x93\x1e\xecY\xd3Lc\xfe\xbf\xafm_\aO\x96\x00\x89\xca\xb2\x0e9\x98\x8b\xbb\x84\xe0\xd8\xb2\xa1N\xd8o\xc0K\x85\x8f)\x00Lr\x00N!A\x86\xd4\xb2\x98\x86)Cr\x0e\xe4\x86\x970f\x9e\xba\xe9\xba\xd7\xb8W\xa5\xe9\xe3\xaf\x9fj0\n|\x8e\xbd\x9f\xef\xc7iq+\x0f\xcf\xd3\xb2>[2\x98\x7f\x14\x9c\x13\x83\x80\xf3xv\xd6\xd0]\xdb\x82S@\x92\xbb\x97\x8a\x850\x84\xd9~1l\x98\x90\xfb;\xde4\xba\xdc\x8a\xb7\x1f\x8f\x19Uz\x9c\xcc\a\x1e\x85=\xb3\x18s\xe2\xcf\x92\xc4\x05\xb6V\t\x06\x96\xfe\'x\x02ryX\xe6%U\x80;g\x0f\xa11\x12\xfb\xdf\x14\xff-b\x0f;\xb6\xf1R\xea\xfc\x97\x87\xbejB`\xa1\xe6,\xaa\xc4k\x02\xd5\xcc\x1bu\x96\x80\x81?\x87{\x06\xad:\x15\x93C\xab9\xb1\xaf\xd1\xcb\x8a\xeb\xdf\x9f+^\x7f\x06C\xe8\xc3\xbew6\x8f\xe7\xf0\x05x\xb7&p\xe0d\xea\x92DQm\t\xb9\xa8\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00$\xe4l\xb2\xc1.\xecu5f\xe1\xa4\xe1\xcf/\x00\xdfx\xa5\xc0\x83\xab\x1b\r\xc4\xd2\xb5\xd9\xbbs\x9a\xd8DG\xd1*t\x03\xaa\x1c\xa0Q\xd6a\xe7\xb64\r\xd9BH/\xa1\xfa/\xaa)\xe0\xdf1D\xd1\xb2\xd2\xabR\x9c\xdcrU\xf4M\xca^') mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (rerun: 32) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 32) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000000)="8e8f3c7391e0665835348bcadb2698067f390600b96828cf492d4737d2881d7282d45dd0a895d8934a844db7aec971c6", 0x30) (rerun: 32) 1.310702561s ago: executing program 5 (id=2933): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60e41, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000040)=0x4e72, 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4004, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000300)="08001efb3e6f0000", 0x8}, {&(0x7f0000000100)='D', 0x1}], 0x2, 0x0, 0x0, 0xe0000000}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000940)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x2, 0x7, {{0x44, 0x4, 0x1, 0x6, 0x110, 0x64, 0x0, 0x6, 0x2f, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x61, 0x1, [{0x6, 0x11, "6e342cd38bb64e82ab6ac43a6e97ed"}, {0x7, 0x6, "be238b9b"}, {0x6, 0x11, "f6a7a0ae0870a367dd584efd444fe7"}, {0x5, 0x7, "c065c79812"}, {0x2, 0x2}, {0x2, 0x6, "c5177bcf"}, {0x0, 0x7, "618600eab6"}, {0x2, 0x2}, {0x6, 0xe, "07f29b5dbd3e162bacf878f6"}, {0x1, 0xd, "f79c20fd23859c1cab2156"}]}, @cipso={0x86, 0x6a, 0x3, [{0x1, 0xc, "ae612560152b1d175232"}, {0x0, 0xc, "8e615fbc9a39c087d5a5"}, {0x7, 0xd, "3a5541b72856f499dc144e"}, {0x0, 0x6, "c6a0cd6a"}, {0x7, 0xb, "62b20ee7f0e84e3630"}, {0x1, 0x10, "dcea818d2813bb949d2f531a5648"}, {0x2, 0x6, "30ac09c2"}, {0x1, 0x12, "bdbf95c77e88c7a5ff85892931228e60"}, {0x0, 0x6, "8af5741c"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xc5, 0x0, 0x3, [0xabe, 0xde, 0x11b0, 0xffffffe0, 0x1, 0x800, 0x4]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x8, 0x9, 0x8, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x1, 0x6, 0x24, @mcast1, @mcast1, 0x7800, 0x40, 0x10001, 0x2000000}}) r10 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2a0, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1b8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',:\'(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&}\xa3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x10) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="a79ecba8", 0x4}, {0x0, 0xff95}], 0x2) 1.307237121s ago: executing program 5 (id=2934): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000380)) (async, rerun: 32) r1 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 32) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4bfa, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x2, 0x1000, &(0x7f0000001000/0x1000)=nil}) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x13, r1, 0x100000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="0c9c", 0x2}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="737461746358676c6f62616c2c6d61783d3030303030303030a777d6b830303030303030322c636f6e746578743d73797374656d5f752c00"]) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3813822, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_auto}, {@redirect_dir_follow}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@permit_directio}, {@seclabel}]}) (async, rerun: 32) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r9, &(0x7f00000029c0)={0x2020}, 0x2020) 760.492919ms ago: executing program 3 (id=2935): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x0) listen(r0, 0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) inotify_init() ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES8, @ANYRES8=r2]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) read(r1, &(0x7f0000000080)=""/93, 0xffffff6c) 427.114004ms ago: executing program 3 (id=2936): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x453, 0x4, 0x70bd2c, 0x25dfdbfc, "34e160"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @broadcast}, 0x10) mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) 0s ago: executing program 9 (id=2937): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x45806000) r1 = fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x28}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000001c0)={0x8000000000000000, 0x3, 0x5, 0xb18, 0x1, 0x0, [{0xd, 0x1, 0x1, '\x00', 0x600}]}) mmap(&(0x7f0000365000/0x1000)=nil, 0x1000, 0x1, 0x4010, r0, 0x5e0d1000) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) kernel console output (not intermixed with test programs): s suppressed [ 180.459965][ T36] audit: type=1400 audit(180.448:8290): avc: denied { create } for pid=6107 comm="syz.6.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 180.510387][ T6112] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 180.510406][ T6112] rust_binder: Error while translating object. [ 180.522828][ T6112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 180.529095][ T6112] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142 [ 180.695352][ T6120] 9pnet_fd: Insufficient options for proto=fd [ 180.789099][ T6127] input: syz1 as /devices/virtual/input/input27 [ 180.795466][ T6127] input: failed to attach handler leds to device input27, error: -6 [ 180.844721][ T36] audit: type=1400 audit(180.838:8291): avc: denied { map } for pid=6126 comm="syz.6.1943" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.912819][ T36] audit: type=1400 audit(180.908:8292): avc: denied { accept } for pid=6126 comm="syz.6.1943" path="socket:[38768]" dev="sockfs" ino=38768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 181.026196][ T36] audit: type=1400 audit(181.018:8293): avc: denied { name_bind } for pid=6132 comm="syz.0.1946" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 181.061373][ T36] audit: type=1400 audit(181.018:8294): avc: denied { node_bind } for pid=6132 comm="syz.0.1946" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 181.103781][ T6139] rust_binder: Error while translating object. [ 181.103813][ T6139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 181.110020][ T6139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 181.133942][ T36] audit: type=1400 audit(181.128:8295): avc: denied { associate } for pid=6140 comm="syz.6.1949" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.174898][ T6145] rust_binder: 6145: no such ref 0 [ 181.180077][ T6145] rust_binder: Write failure EINVAL in pid:164 [ 181.192216][ T6150] exFAT-fs (rnullb0): invalid boot record signature [ 181.205054][ T6150] exFAT-fs (rnullb0): failed to read boot sector [ 181.211595][ T6150] exFAT-fs (rnullb0): failed to recognize exfat type [ 181.232128][ T6150] netlink: 'syz.6.1951': attribute type 5 has an invalid length. [ 181.242432][ T9] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 181.260270][ T9] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.321263][ T313] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 181.341269][ T384] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 181.461245][ T313] usb 3-1: device descriptor read/64, error -71 [ 181.501238][ T384] usb 1-1: Using ep0 maxpacket: 16 [ 181.507394][ T384] usb 1-1: config 247 has an invalid interface number: 79 but max is 0 [ 181.515814][ T384] usb 1-1: config 247 has no interface number 0 [ 181.522345][ T384] usb 1-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 181.533310][ T384] usb 1-1: config 247 interface 79 altsetting 233 has a duplicate endpoint with address 0x9, skipping [ 181.544284][ T384] usb 1-1: config 247 interface 79 altsetting 233 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 181.555505][ T384] usb 1-1: config 247 interface 79 altsetting 233 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 181.566746][ T384] usb 1-1: config 247 interface 79 altsetting 233 has an invalid descriptor for endpoint zero, skipping [ 181.577875][ T384] usb 1-1: config 247 interface 79 has no altsetting 0 [ 181.585991][ T384] usb 1-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.00 [ 181.595228][ T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.603237][ T384] usb 1-1: Product: syz [ 181.607416][ T384] usb 1-1: Manufacturer: syz [ 181.612022][ T384] usb 1-1: SerialNumber: syz [ 181.651272][ T309] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 181.711271][ T313] usb 3-1: device descriptor read/64, error -71 [ 181.811239][ T309] usb 7-1: Using ep0 maxpacket: 16 [ 181.817359][ T309] usb 7-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 181.819446][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.828381][ T309] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.838609][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.847864][ T309] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 181.868422][ T309] usb 7-1: config 0 interface 0 has no altsetting 0 [ 181.875063][ T309] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 181.884174][ T309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.892814][ T309] usb 7-1: config 0 descriptor?? [ 181.971280][ T313] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 182.024875][ T6163] /dev/rnullb0: Can't lookup blockdev [ 182.052683][ T5598] tipc: Subscription rejected, illegal request [ 182.059151][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1957'. [ 182.069189][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1957'. [ 182.089276][ T36] audit: type=1400 audit(182.078:8296): avc: denied { getopt } for pid=6171 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.109356][ T313] usb 3-1: device descriptor read/64, error -71 [ 182.317985][ T309] magicmouse 0003:05AC:0269.002F: item fetching failed at offset 5/7 [ 182.326298][ T309] magicmouse 0003:05AC:0269.002F: magicmouse hid parse failed [ 182.333849][ T309] magicmouse 0003:05AC:0269.002F: probe with driver magicmouse failed with error -22 [ 182.351262][ T313] usb 3-1: device descriptor read/64, error -71 [ 182.461377][ T313] usb usb3-port1: attempt power cycle [ 182.520473][ T9] usb 7-1: USB disconnect, device number 4 [ 182.801261][ T313] usb 3-1: new low-speed USB device number 78 using dummy_hcd [ 182.822311][ T313] usb 3-1: device descriptor read/8, error -71 [ 182.952337][ T313] usb 3-1: device descriptor read/8, error -71 [ 183.201558][ T313] usb 3-1: new low-speed USB device number 79 using dummy_hcd [ 183.222359][ T313] usb 3-1: device descriptor read/8, error -71 [ 183.279951][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 183.352555][ T313] usb 3-1: device descriptor read/8, error -71 [ 183.368545][ T36] audit: type=1400 audit(183.358:8297): avc: denied { name_bind } for pid=6198 comm="syz.5.1971" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 183.432331][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.443914][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.454866][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 183.464717][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.477801][ T313] usb usb3-port1: unable to enumerate USB device [ 183.484650][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.485652][ T36] audit: type=1326 audit(183.478:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6205 comm="syz.5.1974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x0 [ 183.493910][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.525703][ T9] usb 7-1: config 0 descriptor?? [ 183.932960][ T9] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 183.943595][ T9] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 183.952772][ T9] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 184.070414][ T384] usb-storage 1-1:247.79: USB Mass Storage device detected [ 184.086445][ T384] usb-storage 1-1:247.79: Quirks match for vid 03eb pid 2002: 20 [ 184.136939][ T384] usb 1-1: USB disconnect, device number 26 [ 184.235529][ T6227] rust_binder: Write failure EINVAL in pid:112 [ 184.280765][ T6232] support for the xor transformation has been removed. [ 184.421320][ T309] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 184.581247][ T309] usb 3-1: Using ep0 maxpacket: 16 [ 184.588888][ T309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.597994][ T384] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 184.605635][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.613715][ T309] usb 3-1: Product: syz [ 184.617925][ T309] usb 3-1: Manufacturer: syz [ 184.622710][ T309] usb 3-1: SerialNumber: syz [ 184.772404][ T384] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.783600][ T384] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 184.792722][ T384] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 184.800879][ T384] usb 1-1: Manufacturer: syz [ 184.805541][ T384] usb 1-1: SerialNumber: syz [ 184.811036][ T384] usb 1-1: config 0 descriptor?? [ 184.817169][ T384] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 184.824125][ T384] usb 1-1: No valid video chain found. [ 184.831732][ T6211] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 184.842429][ T309] cdc_ncm 3-1:1.0: bind() failure [ 184.848400][ T309] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 184.855246][ T309] cdc_ncm 3-1:1.1: bind() failure [ 184.861462][ T309] usb 3-1: USB disconnect, device number 80 [ 185.019063][ T384] usb 1-1: USB disconnect, device number 27 [ 185.052869][ T6249] netlink: 'syz.5.1985': attribute type 63 has an invalid length. [ 185.060748][ T6249] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1985'. [ 185.359108][ T6261] binder: Bad value for 'max' [ 185.890316][ T6291] rust_binder: 6291: no such ref 0 [ 185.891452][ T6292] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1997'. [ 185.901283][ T6291] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 185.904432][ T6291] rust_binder: Read failure Err(EFAULT) in pid:125 [ 185.931936][ T6295] overlayfs: failed to clone upperpath [ 185.951228][ T36] audit: type=1400 audit(185.938:8299): avc: denied { create } for pid=6289 comm="syz.0.1998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 186.005752][ T36] audit: type=1400 audit(185.998:8300): avc: denied { create } for pid=6304 comm="syz.6.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 186.045413][ T309] usb 7-1: USB disconnect, device number 5 [ 186.534074][ T6365] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 186.567439][ T6367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.579980][ T6367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1202 [ 186.731549][ T6369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31762 sclass=netlink_route_socket pid=6369 comm=syz.0.2024 [ 186.776872][ T36] audit: type=1400 audit(186.758:8301): avc: denied { map } for pid=6370 comm="syz.2.2025" path="socket:[40360]" dev="sockfs" ino=40360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.861382][ T6374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=6374 comm=syz.2.2026 [ 186.999615][ T36] audit: type=1400 audit(186.988:8302): avc: denied { ioctl } for pid=6383 comm="syz.2.2030" path="socket:[39232]" dev="sockfs" ino=39232 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.311292][ T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 187.391244][ T309] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 187.461246][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 187.467426][ T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 187.478348][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.489330][ T10] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 187.502382][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.508986][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 187.518050][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.526673][ T10] usb 3-1: config 0 descriptor?? [ 187.551257][ T309] usb 1-1: Using ep0 maxpacket: 16 [ 187.557474][ T309] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.568444][ T309] usb 1-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.581389][ T309] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.588032][ T309] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 187.597137][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.605764][ T309] usb 1-1: config 0 descriptor?? [ 188.133897][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 188.139979][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.148912][ T10] usb 3-1: USB disconnect, device number 81 [ 188.175551][ T309] usbhid 1-1:0.0: can't add hid device: -71 [ 188.181641][ T309] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 188.190508][ T309] usb 1-1: USB disconnect, device number 28 [ 188.233287][ T6429] futex_wake_op: syz.5.2048 tries to shift op by -1; fix this program [ 188.243182][ T36] audit: type=1400 audit(188.238:8303): avc: denied { map } for pid=6428 comm="syz.5.2048" path="pipe:[40683]" dev="pipefs" ino=40683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 188.663832][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 188.695380][ T6440] rust_binder: 6440: no such ref 0 [ 188.701364][ T6440] rust_binder: Write failure EINVAL in pid:153 [ 189.339661][ T6461] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 189.551257][ T384] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 189.691089][ T36] audit: type=1400 audit(189.678:8304): avc: denied { execute_no_trans } for pid=6475 comm="syz.6.2063" path="/84/file0" dev="tmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 189.713859][ T384] usb 3-1: Using ep0 maxpacket: 16 [ 189.719992][ T384] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 189.730891][ T384] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.741854][ T384] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 189.754898][ T384] usb 3-1: config 0 interface 0 has no altsetting 0 [ 189.761522][ T384] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 189.770570][ T384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.779462][ T384] usb 3-1: config 0 descriptor?? [ 190.388242][ T384] usbhid 3-1:0.0: can't add hid device: -71 [ 190.397923][ T384] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.413467][ T384] usb 3-1: USB disconnect, device number 82 [ 190.439236][ T6482] overlayfs: failed to resolve './file1': -2 [ 190.446411][ T6484] rust_binder: 6484: no such ref 0 [ 190.458321][ T6484] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 190.473470][ T6484] rust_binder: Write failure EINVAL in pid:169 [ 190.473616][ T6484] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 190.502883][ T6484] rust_binder: Write failure EINVAL in pid:169 [ 190.545548][ T6486] tipc: Started in network mode [ 190.566764][ T6486] tipc: Node identity 4a0d9c94f77b, cluster identity 4711 [ 190.576907][ T6486] tipc: Enabled bearer , priority 0 [ 190.592616][ T6486] tipc: Disabling bearer [ 190.647530][ T6488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 190.647560][ T6488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 190.802151][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2072'. [ 190.881292][ T36] audit: type=1400 audit(190.868:8305): avc: denied { listen } for pid=6504 comm="syz.6.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.931605][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 190.957293][ T36] audit: type=1400 audit(190.948:8306): avc: denied { create } for pid=6513 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 190.957922][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2078'. [ 190.986728][ T6514] bridge_slave_1: left allmulticast mode [ 190.992451][ T6514] bridge_slave_1: left promiscuous mode [ 190.998208][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.020224][ T6514] bridge_slave_0: left allmulticast mode [ 191.027464][ T6514] bridge_slave_0: left promiscuous mode [ 191.033553][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.048243][ T36] audit: type=1400 audit(191.038:8307): avc: denied { accept } for pid=6513 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 191.181249][ T309] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 191.181507][ T36] audit: type=1326 audit(191.178:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6522 comm="syz.0.2082" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc24b58e929 code=0x0 [ 191.341233][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 191.347633][ T309] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 191.359441][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 191.370640][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 191.381834][ T309] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.390889][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.399927][ T309] usb 3-1: config 0 descriptor?? [ 191.405198][ T6509] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 191.413119][ T309] hub 3-1:0.0: USB hub found [ 191.613782][ T309] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 191.777721][ T6537] tmpfs: Unknown parameter ' [ 191.777721][ T6537] ' [ 191.818205][ T309] usbhid 3-1:0.0: can't add hid device: -71 [ 191.824225][ T309] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 191.851631][ T309] usb 3-1: USB disconnect, device number 83 [ 192.175053][ T6546] rust_binder: validate_parent_fixup: new_min_offset=14, sg_entry.length=0 [ 192.175081][ T6546] rust_binder: Error while translating object. [ 192.183967][ T6546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 192.190158][ T6546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 192.258302][ T36] audit: type=1400 audit(192.248:8309): avc: denied { shutdown } for pid=6550 comm="syz.5.2092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 192.331071][ T6565] overlayfs: failed to clone lowerpath [ 192.393711][ T36] audit: type=1400 audit(192.388:8310): avc: denied { execmod } for pid=6571 comm="syz.6.2099" path="/dev/rnullb0" dev="tmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 192.561306][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 192.711255][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 192.717541][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 192.728695][ T9] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.739706][ T9] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 192.752779][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 192.759378][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 192.768481][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.777061][ T9] usb 1-1: config 0 descriptor?? [ 193.032103][ T6613] netlink: 'syz.5.2114': attribute type 4 has an invalid length. [ 193.040374][ T6613] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2114'. [ 193.050994][ T36] audit: type=1326 audit(193.038:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6612 comm="syz.5.2114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x0 [ 193.384405][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 193.390499][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.399694][ T9] usb 1-1: USB disconnect, device number 29 [ 193.533278][ T6626] tmpfs: Unknown parameter 'grV#id' [ 193.539429][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 193.695979][ T6643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1252 [ 193.993215][ T36] audit: type=1326 audit(193.988:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x7ffc0000 [ 194.025285][ T36] audit: type=1326 audit(193.988:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x7ffc0000 [ 194.048095][ T36] audit: type=1326 audit(193.988:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f459db8e929 code=0x7ffc0000 [ 194.070824][ T45] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 194.071273][ T36] audit: type=1326 audit(193.988:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x7ffc0000 [ 194.101570][ T36] audit: type=1326 audit(193.988:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.5.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f459db8e929 code=0x7ffc0000 [ 194.222285][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 194.231488][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.240321][ T45] usb 3-1: config 0 descriptor?? [ 194.855489][ T6684] rust_binder: 6684: no such ref 7 [ 194.950077][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.958660][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.967270][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.975787][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.985192][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.993757][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.687621][ T6684] rust_binder: Read failure Err(EFAULT) in pid:212 [ 196.065415][ T6757] tmpfs: Bad value for 'huge' [ 196.203240][ T6780] netlink: 'syz.6.2177': attribute type 4 has an invalid length. [ 196.339696][ T6795] raw_sendmsg: syz.5.2184 forgot to set AF_INET. Fix it! [ 196.434093][ T6807] netlink: 1619 bytes leftover after parsing attributes in process `syz.5.2188'. [ 196.551035][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 196.551055][ T36] audit: type=1400 audit(196.538:8319): avc: denied { create } for pid=6825 comm="syz.5.2196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 196.717611][ T36] audit: type=1326 audit(196.708:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6645 comm="syz.2.2127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f61d8e929 code=0x7fc00000 [ 196.742640][ T45] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 196.754753][ T45] asix 3-1:0.0: probe with driver asix failed with error -71 [ 196.771079][ T45] usb 3-1: USB disconnect, device number 84 [ 196.781074][ T36] audit: type=1400 audit(196.768:8321): avc: denied { mount } for pid=6833 comm="syz.0.2198" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 196.887551][ T6845] rust_binder: Write failure EINVAL in pid:239 [ 196.887702][ T6845] rust_binder: Write failure EINVAL in pid:239 [ 196.897073][ T36] audit: type=1400 audit(196.888:8322): avc: denied { accept } for pid=6844 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.922372][ T36] audit: type=1400 audit(196.898:8323): avc: denied { read } for pid=6844 comm="syz.0.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 196.957069][ T6850] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 196.957080][ T36] audit: type=1400 audit(196.948:8324): avc: denied { relabelfrom } for pid=6849 comm="syz.0.2205" name="NETLINK" dev="sockfs" ino=41590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 196.990547][ T36] audit: type=1400 audit(196.958:8325): avc: denied { execute } for pid=6849 comm="syz.0.2205" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 197.021338][ T36] audit: type=1400 audit(196.958:8326): avc: denied { relabelto } for pid=6849 comm="syz.0.2205" name="NETLINK" dev="sockfs" ino=41590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:devpts_t:s0" [ 197.111281][ T45] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 197.241248][ T45] usb 3-1: device descriptor read/64, error -71 [ 197.451257][ T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.481245][ T45] usb 3-1: device descriptor read/64, error -71 [ 197.602345][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.613331][ T10] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 197.622403][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.631130][ T10] usb 1-1: config 0 descriptor?? [ 197.721253][ T45] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 197.851253][ T45] usb 3-1: device descriptor read/64, error -71 [ 198.038074][ T10] monterey 0003:0566:3004.0031: item fetching failed at offset 6/7 [ 198.046364][ T10] monterey 0003:0566:3004.0031: probe with driver monterey failed with error -22 [ 198.091250][ T45] usb 3-1: device descriptor read/64, error -71 [ 198.201328][ T45] usb usb3-port1: attempt power cycle [ 198.541241][ T45] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 198.562260][ T45] usb 3-1: device descriptor read/8, error -71 [ 198.692298][ T45] usb 3-1: device descriptor read/8, error -71 [ 198.735696][ T6873] 9pnet_fd: Insufficient options for proto=fd [ 198.931328][ T45] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 198.952322][ T45] usb 3-1: device descriptor read/8, error -71 [ 199.082259][ T45] usb 3-1: device descriptor read/8, error -71 [ 199.191698][ T45] usb usb3-port1: unable to enumerate USB device [ 199.624377][ T6889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=57 sclass=netlink_audit_socket pid=6889 comm=syz.5.2219 [ 199.637100][ T6889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=6889 comm=syz.5.2219 [ 199.664444][ T6891] batadv_slave_1: entered promiscuous mode [ 199.670735][ T6890] batadv_slave_1: left promiscuous mode [ 199.804785][ T36] audit: type=1400 audit(199.798:8327): avc: denied { listen } for pid=6894 comm="syz.2.2222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.866664][ T36] audit: type=1400 audit(199.858:8328): avc: denied { load_policy } for pid=6903 comm="syz.2.2225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 199.869014][ T6904] SELinux: failed to load policy [ 199.944836][ T6915] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2230'. [ 199.964935][ T6917] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 199.973230][ T6917] rust_binder: Write failure EINVAL in pid:1270 [ 200.047287][ T6922] tipc: Enabling of bearer rejected, failed to enable media [ 200.081386][ T6924] binder: Bad value for 'max' [ 200.133662][ T305] tipc: Subscription rejected, illegal request [ 200.169559][ T6931] kvm: pic: single mode not supported [ 200.169644][ T6931] kvm: pic: level sensitive irq not supported [ 200.175301][ T6931] kvm: pic: single mode not supported [ 200.181418][ T6931] kvm: pic: level sensitive irq not supported [ 200.186902][ T6931] kvm: pic: single mode not supported [ 200.192987][ T6931] kvm: pic: level sensitive irq not supported [ 200.198731][ T6931] kvm: pic: level sensitive irq not supported [ 200.205445][ T6931] kvm: pic: single mode not supported [ 200.211966][ T6931] kvm: pic: level sensitive irq not supported [ 200.217457][ T6931] kvm: pic: single mode not supported [ 200.223589][ T6931] kvm: pic: level sensitive irq not supported [ 200.231439][ T306] usb 1-1: USB disconnect, device number 30 [ 200.236979][ T6931] kvm: pic: single mode not supported [ 200.243490][ T6931] kvm: pic: level sensitive irq not supported [ 200.330577][ T6947] x_tables: duplicate underflow at hook 1 [ 200.511617][ T6975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1299 [ 200.511750][ T6975] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 200.534983][ T6979] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2253'. [ 200.553314][ T6972] 9pnet_fd: Insufficient options for proto=fd [ 200.559643][ T6972] overlayfs: failed to clone upperpath [ 200.701242][ T306] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 200.751655][ T6988] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 200.831883][ T7002] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2261'. [ 200.871259][ T306] usb 1-1: Using ep0 maxpacket: 16 [ 200.878337][ T306] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 200.886648][ T306] usb 1-1: config 0 has no interface number 0 [ 200.892899][ T306] usb 1-1: config 0 interface 225 has no altsetting 0 [ 200.903597][ T306] usb 1-1: New USB device found, idVendor=0b95, idProduct=1720, bcdDevice=23.b4 [ 200.916110][ T7019] fuse: Unknown parameter 'ootmode' [ 200.921242][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.929893][ T306] usb 1-1: Product: syz [ 200.936488][ T306] usb 1-1: Manufacturer: syz [ 200.942579][ T306] usb 1-1: SerialNumber: syz [ 200.951360][ T306] usb 1-1: config 0 descriptor?? [ 201.022487][ T7038] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 201.049989][ T7040] overlayfs: failed to clone upperpath [ 201.064270][ T9] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 201.078263][ T9] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.269979][ T7045] 9pnet_fd: Insufficient options for proto=fd [ 201.297985][ T7047] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 201.370638][ T7053] rust_binder: Error while translating object. [ 201.370670][ T7053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 201.376927][ T7053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1326 [ 201.421418][ T313] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 201.438817][ T313] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 201.452233][ T384] hid-generic 0007:0007:0007.0034: item fetching failed at offset 5/163 [ 201.461527][ T7059] fido_id[7059]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 201.462718][ T384] hid-generic 0007:0007:0007.0034: probe with driver hid-generic failed with error -22 [ 201.561826][ T306] asix 1-1:0.225 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 201.581410][ T306] asix 1-1:0.225: probe with driver asix failed with error -71 [ 201.594530][ T306] usb 1-1: USB disconnect, device number 31 [ 201.654833][ T7086] rust_binder: 7086: no such ref 0 [ 201.660345][ T7086] rust_binder: Write failure EINVAL in pid:1349 [ 201.674960][ T7088] rust_binder: Write failure EFAULT in pid:1351 [ 201.805725][ T7096] netlink: 'syz.2.2297': attribute type 12 has an invalid length. [ 202.125900][ T7103] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 202.324023][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 202.324042][ T36] audit: type=1400 audit(202.308:8339): avc: denied { append } for pid=7100 comm="syz.0.2299" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 202.434204][ T7125] rust_binder: Error while translating object. [ 202.434238][ T7125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 202.440473][ T7125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:274 [ 202.482122][ T36] audit: type=1400 audit(202.478:8340): avc: denied { connect } for pid=7133 comm="syz.2.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 202.564707][ T7141] SELinux: security_context_str_to_sid () failed with errno=-22 [ 202.670903][ T7156] cgroup: name respecified [ 202.679066][ T7156] rust_binder: 7156: no such ref 0 [ 202.689438][ T7156] rust_binder: Write failure EINVAL in pid:1376 [ 202.779028][ T7173] rust_binder: Error while translating object. [ 202.785452][ T7173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 202.791954][ T7173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1380 [ 202.848347][ T36] audit: type=1400 audit(202.838:8341): avc: denied { write } for pid=7182 comm="syz.6.2328" path="socket:[43400]" dev="sockfs" ino=43400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.881740][ T7190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1382 [ 203.003666][ T7199] /dev/loop0: Can't lookup blockdev [ 203.165700][ T36] audit: type=1400 audit(203.158:8342): avc: denied { read } for pid=7209 comm="syz.6.2336" path="socket:[43448]" dev="sockfs" ino=43448 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.331571][ T36] audit: type=1400 audit(203.328:8343): avc: denied { create } for pid=7225 comm="syz.5.2341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 203.715210][ T7241] SELinux: security_context_str_to_sid () failed with errno=-22 [ 203.777553][ T36] audit: type=1400 audit(203.768:8344): avc: denied { connect } for pid=7246 comm="syz.0.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 203.876651][ T7250] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 136, size: 255) [ 203.876670][ T7250] rust_binder: Error while translating object. [ 203.887275][ T7250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.893494][ T7250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 203.921244][ T31] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 204.081230][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 204.087501][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 204.098484][ T31] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.109496][ T31] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 204.122572][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 204.129203][ T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 204.138348][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.151194][ T31] usb 3-1: config 0 descriptor?? [ 204.191747][ T7260] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 204.324677][ T7280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7280 comm=syz.5.2363 [ 204.762504][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 204.768519][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 204.777228][ T31] usb 3-1: USB disconnect, device number 89 [ 204.871480][ T7286] tipc: Enabling of bearer rejected, failed to enable media [ 204.937156][ T36] audit: type=1400 audit(204.928:8345): avc: denied { read } for pid=7293 comm="syz.5.2368" name="/" dev="configfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.962068][ T36] audit: type=1400 audit(204.928:8346): avc: denied { open } for pid=7293 comm="syz.5.2368" path="/" dev="configfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.985897][ T36] audit: type=1400 audit(204.928:8347): avc: denied { setattr } for pid=7293 comm="syz.5.2368" name="/" dev="configfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 205.014639][ T36] audit: type=1400 audit(205.008:8348): avc: denied { create } for pid=7302 comm="syz.5.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 205.057112][ T7309] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 205.067875][ T7308] IPv6: Can't replace route, no match found [ 205.074129][ T7308] netlink: 393 bytes leftover after parsing attributes in process `syz.0.2372'. [ 205.122521][ T7318] fuse: Unknown parameter 'grot4|a5Nup_id' [ 205.301316][ T7335] overlayfs: missing 'workdir' [ 205.649398][ T7366] SELinux: security_context_str_to_sid () failed with errno=-22 [ 205.869681][ T7399] batadv_slave_0: entered promiscuous mode [ 205.876030][ T7398] batadv_slave_0: left promiscuous mode [ 205.909653][ T7401] fuse: Bad value for 'user_id' [ 205.914617][ T7401] fuse: Bad value for 'user_id' [ 205.953729][ T7407] FAT-fs (rnullb0): bogus number of reserved sectors [ 205.960574][ T7407] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 206.003834][ T4840] tipc: Resetting bearer [ 206.046847][ T4840] tipc: Disabling bearer [ 206.261261][ T313] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 206.391272][ T313] usb 1-1: device descriptor read/64, error -71 [ 206.423209][ T305] vlan0: left allmulticast mode [ 206.428099][ T305] veth0_vlan: left allmulticast mode [ 206.433612][ T305] vlan0: left promiscuous mode [ 206.438501][ T305] bridge0: port 3(vlan0) entered disabled state [ 206.445190][ T305] bridge_slave_1: left allmulticast mode [ 206.450830][ T305] bridge_slave_1: left promiscuous mode [ 206.456462][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.463904][ T305] bridge_slave_0: left allmulticast mode [ 206.469540][ T305] bridge_slave_0: left promiscuous mode [ 206.475262][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.535882][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.543071][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.550201][ T7418] bridge_slave_0: entered allmulticast mode [ 206.556925][ T7418] bridge_slave_0: entered promiscuous mode [ 206.564480][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.571810][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.578937][ T7418] bridge_slave_1: entered allmulticast mode [ 206.585224][ T7418] bridge_slave_1: entered promiscuous mode [ 206.593584][ T305] tipc: Left network mode [ 206.604173][ T305] veth1_macvtap: left promiscuous mode [ 206.609706][ T305] veth0_vlan: left promiscuous mode [ 206.631365][ T313] usb 1-1: device descriptor read/64, error -71 [ 206.713332][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.720407][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.727558][ T7420] bridge_slave_0: entered allmulticast mode [ 206.734044][ T7420] bridge_slave_0: entered promiscuous mode [ 206.740528][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.747678][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.754815][ T7420] bridge_slave_1: entered allmulticast mode [ 206.761242][ T7420] bridge_slave_1: entered promiscuous mode [ 206.806250][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.813337][ T7418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.820649][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.827706][ T7418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.865186][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.872287][ T7420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.879572][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.886636][ T7420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.894105][ T313] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 206.904354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.911868][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.919531][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.926945][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.938236][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.945320][ T5598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.956067][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.963155][ T5598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.985733][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.992813][ T5598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.002229][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.009281][ T5598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.029787][ T7418] veth0_vlan: entered promiscuous mode [ 207.041600][ T313] usb 1-1: device descriptor read/64, error -71 [ 207.056366][ T7420] veth0_vlan: entered promiscuous mode [ 207.062160][ T7418] veth1_macvtap: entered promiscuous mode [ 207.085893][ T7420] veth1_macvtap: entered promiscuous mode [ 207.291291][ T313] usb 1-1: device descriptor read/64, error -71 [ 207.401424][ T313] usb usb1-port1: attempt power cycle [ 207.407020][ T305] bridge_slave_1: left allmulticast mode [ 207.413129][ T305] bridge_slave_1: left promiscuous mode [ 207.418837][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.427148][ T305] O3c: left allmulticast mode [ 207.434796][ T305] O3c: left promiscuous mode [ 207.439752][ T305] bridge0: port 1(O3c) entered disabled state [ 207.600394][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 207.637182][ T7462] overlayfs: failed to clone upperpath [ 207.722201][ T305] veth1_macvtap: left promiscuous mode [ 207.761320][ T313] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 207.782543][ T313] usb 1-1: device descriptor read/8, error -71 [ 207.861242][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 207.913489][ T313] usb 1-1: device descriptor read/8, error -71 [ 208.021274][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 208.027541][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.038687][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.048474][ T31] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 208.057547][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.066268][ T31] usb 6-1: config 0 descriptor?? [ 208.151317][ T313] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 208.172391][ T313] usb 1-1: device descriptor read/8, error -71 [ 208.302429][ T313] usb 1-1: device descriptor read/8, error -71 [ 208.365290][ T7483] overlayfs: failed to clone upperpath [ 208.411333][ T313] usb usb1-port1: unable to enumerate USB device [ 208.473981][ T7459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.482556][ T7459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.491988][ T31] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 208.498926][ T31] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 208.505798][ T31] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 208.512693][ T31] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 208.519533][ T31] kone 0003:1E7D:2CED.0035: unknown main item tag 0x0 [ 208.527045][ T31] kone 0003:1E7D:2CED.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0 [ 208.701914][ T31] kone 0003:1E7D:2CED.0035: couldn't init struct kone_device [ 208.709451][ T31] kone 0003:1E7D:2CED.0035: couldn't install mouse [ 208.717871][ T31] kone 0003:1E7D:2CED.0035: probe with driver kone failed with error -5 [ 208.727548][ T31] usb 6-1: USB disconnect, device number 2 [ 209.362266][ T7502] FAT-fs (rnullb0): bogus number of reserved sectors [ 209.368979][ T7502] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 209.421301][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 209.571247][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 209.577759][ T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 209.588890][ T31] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.600096][ T31] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 209.613215][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.619842][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 209.628908][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.637641][ T31] usb 1-1: config 0 descriptor?? [ 209.671252][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 209.671281][ T1203] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 209.681411][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 209.684149][ T7452] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 209.841253][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 209.847553][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.858614][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.868471][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 209.881563][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.888286][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 209.897368][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.906155][ T9] usb 6-1: config 0 descriptor?? [ 210.045677][ T31] magicmouse 0003:05AC:0269.0036: item fetching failed at offset 5/7 [ 210.054046][ T31] magicmouse 0003:05AC:0269.0036: magicmouse hid parse failed [ 210.061625][ T31] magicmouse 0003:05AC:0269.0036: probe with driver magicmouse failed with error -22 [ 210.251506][ T313] usb 1-1: USB disconnect, device number 36 [ 210.340344][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 210.340366][ T36] audit: type=1400 audit(210.328:8360): avc: denied { getopt } for pid=7523 comm="syz.7.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.366752][ T7524] bpf: Bad value for 'gid' [ 210.439242][ T36] audit: type=1400 audit(210.428:8361): avc: denied { read } for pid=7530 comm="syz.7.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 210.505678][ T7533] rust_binder: Error while translating object. [ 210.505729][ T7533] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 210.512194][ T7533] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 210.512991][ T7509] exFAT-fs (rnullb0): invalid boot record signature [ 210.537525][ T7509] exFAT-fs (rnullb0): failed to read boot sector [ 210.545756][ T7509] exFAT-fs (rnullb0): failed to recognize exfat type [ 210.556363][ T7535] : renamed from lo (while UP) [ 210.794486][ T7539] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 210.804222][ T36] audit: type=1400 audit(210.798:8362): avc: denied { execmod } for pid=7538 comm="syz.0.2456" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.834497][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 210.965815][ T7546] /dev/nbd0: Can't lookup blockdev [ 210.977141][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2460'. [ 211.001346][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 211.003453][ T36] audit: type=1400 audit(210.998:8363): avc: denied { map } for pid=7549 comm="syz.0.2461" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 211.012356][ T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.042968][ T31] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 211.057043][ T31] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.066258][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.074322][ T31] usb 8-1: SerialNumber: syz [ 211.081793][ T31] usb 8-1: bad CDC descriptors [ 211.289079][ T7537] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 211.289106][ T7537] rust_binder: Error while translating object. [ 211.301641][ T7537] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 211.307919][ T7537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 211.331273][ T7559] IPv6: NLM_F_CREATE should be specified when creating new route [ 211.348173][ T7559] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.381251][ T31] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 211.471711][ T384] usb 8-1: USB disconnect, device number 2 [ 211.511304][ T31] usb 1-1: device descriptor read/64, error -71 [ 211.751327][ T31] usb 1-1: device descriptor read/64, error -71 [ 211.906663][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.906697][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.913235][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.919903][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.926499][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.933178][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.939666][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.946354][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.952846][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.959379][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.966016][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.972484][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.978939][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.985534][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.992248][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.999712][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.006643][ T31] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 212.017638][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.020997][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.027983][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.034597][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.041374][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.048005][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.054540][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.060986][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.067496][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.074008][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.080599][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.087086][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.093760][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.100205][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.106687][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.113167][ T7566] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.151258][ T31] usb 1-1: device descriptor read/64, error -71 [ 212.361235][ T313] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 212.397608][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 212.401283][ T31] usb 1-1: device descriptor read/64, error -71 [ 212.403693][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 212.421668][ T7597] rust_binder: 7597: no such ref 7 [ 212.426886][ T7597] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 212.426903][ T7597] rust_binder: Read failure Err(EFAULT) in pid:28 [ 212.428082][ T9] usb 6-1: USB disconnect, device number 3 [ 212.458023][ T7601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.490950][ T36] audit: type=1326 audit(212.478:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7606 comm="syz.5.2478" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83f258e929 code=0x0 [ 212.521583][ T31] usb usb1-port1: attempt power cycle [ 212.531311][ T313] usb 8-1: Using ep0 maxpacket: 16 [ 212.537483][ T313] usb 8-1: unable to get BOS descriptor set [ 212.544148][ T313] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 212.554318][ T313] usb 8-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64 [ 212.564085][ T313] usb 8-1: config 1 interface 0 has no altsetting 0 [ 212.572127][ T313] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.581153][ T313] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.589185][ T313] usb 8-1: Product: syz [ 212.593441][ T313] usb 8-1: Manufacturer: syz [ 212.598042][ T313] usb 8-1: SerialNumber: syz [ 212.603639][ T7589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 212.610835][ T7589] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 212.820037][ T7589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.828593][ T7589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.837470][ T7589] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.837840][ T7589] rust_binder: Error while translating object. [ 212.844354][ T7589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.850580][ T7589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 212.861443][ T31] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 212.863098][ T313] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 212.889111][ T313] usb 8-1: USB disconnect, device number 3 [ 212.892409][ T31] usb 1-1: device descriptor read/8, error -71 [ 213.032309][ T31] usb 1-1: device descriptor read/8, error -71 [ 213.271270][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 213.292307][ T31] usb 1-1: device descriptor read/8, error -71 [ 213.374171][ T7623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 213.401668][ T7625] SELinux: security_context_str_to_sid () failed with errno=-22 [ 213.422308][ T31] usb 1-1: device descriptor read/8, error -71 [ 213.531342][ T31] usb usb1-port1: unable to enumerate USB device [ 213.651335][ T306] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 213.781280][ T306] usb 8-1: device descriptor read/64, error -71 [ 214.021292][ T306] usb 8-1: device descriptor read/64, error -71 [ 214.053099][ T7633] exFAT-fs (rnullb0): invalid boot record signature [ 214.059701][ T7633] exFAT-fs (rnullb0): failed to read boot sector [ 214.066087][ T7633] exFAT-fs (rnullb0): failed to recognize exfat type [ 214.093149][ T309] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 214.101505][ T309] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.163833][ T7638] overlayfs: failed to clone upperpath [ 214.183220][ T7641] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2491'. [ 214.271268][ T306] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 214.282544][ T7650] binder: Bad value for 'max' [ 214.421249][ T306] usb 8-1: device descriptor read/64, error -71 [ 214.431884][ T7662] SELinux: security_context_str_to_sid () failed with errno=-22 [ 214.440875][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2502'. [ 214.511848][ T13] bridge_slave_1: left allmulticast mode [ 214.517511][ T13] bridge_slave_1: left promiscuous mode [ 214.523196][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.530718][ T13] bridge_slave_0: left allmulticast mode [ 214.536531][ T13] bridge_slave_0: left promiscuous mode [ 214.542225][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.632249][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.639310][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.646548][ T7666] bridge_slave_0: entered allmulticast mode [ 214.652836][ T7666] bridge_slave_0: entered promiscuous mode [ 214.659173][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.666303][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.673373][ T306] usb 8-1: device descriptor read/64, error -71 [ 214.673449][ T7666] bridge_slave_1: entered allmulticast mode [ 214.685956][ T7666] bridge_slave_1: entered promiscuous mode [ 214.695060][ T13] tipc: Left network mode [ 214.700592][ T13] veth1_macvtap: left promiscuous mode [ 214.706174][ T13] veth0_vlan: left promiscuous mode [ 214.781366][ T306] usb usb8-port1: attempt power cycle [ 214.788310][ T7666] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.795371][ T7666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.802674][ T7666] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.809688][ T7666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.830418][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.838031][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.847329][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.854397][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.863418][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.870456][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.898099][ T7666] veth0_vlan: entered promiscuous mode [ 214.909914][ T7666] veth1_macvtap: entered promiscuous mode [ 215.131238][ T306] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 215.162476][ T7709] virtiofs: Unknown parameter 'always' [ 215.162775][ T306] usb 8-1: device descriptor read/8, error -71 [ 215.169435][ T7709] virtiofs: Unknown parameter 'always' [ 215.214055][ T7703] tmpfs: Bad value for 'gid' [ 215.218768][ T7703] tmpfs: Bad value for 'gid' [ 215.322287][ T306] usb 8-1: device descriptor read/8, error -71 [ 215.431435][ T31] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 215.459819][ T36] audit: type=1400 audit(215.448:8365): avc: denied { connect } for pid=7721 comm="syz.6.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.493113][ T36] audit: type=1326 audit(215.488:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.6.2522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd41398e929 code=0x0 [ 215.571298][ T306] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 215.592508][ T306] usb 8-1: device descriptor read/8, error -71 [ 215.612618][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 215.620695][ T31] usb 6-1: not running at top speed; connect to a high speed hub [ 215.629148][ T31] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 215.637952][ T31] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 215.648090][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.658410][ T31] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.667522][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.675611][ T31] usb 6-1: Product: syz [ 215.679788][ T31] usb 6-1: Manufacturer: syz [ 215.684403][ T31] usb 6-1: SerialNumber: syz [ 215.722331][ T306] usb 8-1: device descriptor read/8, error -71 [ 215.831996][ T306] usb usb8-port1: unable to enumerate USB device [ 215.868772][ T7732] /dev/sg0: Can't lookup blockdev [ 215.873999][ T7732] /dev/sg0: Can't lookup blockdev [ 215.879131][ T7732] /dev/sg0: Can't lookup blockdev [ 215.884313][ T7732] /dev/sg0: Can't lookup blockdev [ 215.889422][ T7732] /dev/sg0: Can't lookup blockdev [ 215.894628][ T7732] /dev/sg0: Can't lookup blockdev [ 215.899855][ T7732] /dev/sg0: Can't lookup blockdev [ 215.905035][ T7732] /dev/sg0: Can't lookup blockdev [ 215.910163][ T7732] /dev/sg0: Can't lookup blockdev [ 215.911897][ T31] usb 6-1: 0:2 : does not exist [ 215.915817][ T7732] /dev/sg0: Can't lookup blockdev [ 215.925143][ T31] usb 6-1: USB disconnect, device number 5 [ 215.925838][ T7732] /dev/sg0: Can't lookup blockdev [ 215.936333][ T7732] /dev/sg0: Can't lookup blockdev [ 215.942084][ T7732] /dev/sg0: Can't lookup blockdev [ 215.947203][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 215.954099][ T7732] /dev/sg0: Can't lookup blockdev [ 215.972235][ T7732] /dev/sg0: Can't lookup blockdev [ 215.973505][ T7736] input: syz0 as /devices/virtual/input/input29 [ 215.977600][ T7732] /dev/sg0: Can't lookup blockdev [ 215.989024][ T7732] /dev/sg0: Can't lookup blockdev [ 215.994658][ T7732] /dev/sg0: Can't lookup blockdev [ 215.999885][ T7732] /dev/sg0: Can't lookup blockdev [ 216.005182][ T7732] /dev/sg0: Can't lookup blockdev [ 216.010383][ T7732] /dev/sg0: Can't lookup blockdev [ 216.015640][ T7732] /dev/sg0: Can't lookup blockdev [ 216.020818][ T7732] /dev/sg0: Can't lookup blockdev [ 216.026019][ T7732] /dev/sg0: Can't lookup blockdev [ 216.031251][ T7732] /dev/sg0: Can't lookup blockdev [ 216.036388][ T7732] /dev/sg0: Can't lookup blockdev [ 216.041537][ T7732] /dev/sg0: Can't lookup blockdev [ 216.046660][ T7732] /dev/sg0: Can't lookup blockdev [ 216.051868][ T7732] /dev/sg0: Can't lookup blockdev [ 216.057023][ T7732] /dev/sg0: Can't lookup blockdev [ 216.062278][ T7732] /dev/sg0: Can't lookup blockdev [ 216.067410][ T7732] /dev/sg0: Can't lookup blockdev [ 216.072636][ T7732] /dev/sg0: Can't lookup blockdev [ 216.077841][ T7732] /dev/sg0: Can't lookup blockdev [ 216.082963][ T7732] /dev/sg0: Can't lookup blockdev [ 216.088072][ T7732] /dev/sg0: Can't lookup blockdev [ 216.093282][ T7732] /dev/sg0: Can't lookup blockdev [ 216.098492][ T7732] /dev/sg0: Can't lookup blockdev [ 216.103658][ T7732] /dev/sg0: Can't lookup blockdev [ 216.108821][ T7732] /dev/sg0: Can't lookup blockdev [ 216.114001][ T7732] /dev/sg0: Can't lookup blockdev [ 216.119134][ T7732] /dev/sg0: Can't lookup blockdev [ 216.124313][ T7732] /dev/sg0: Can't lookup blockdev [ 216.129424][ T7732] /dev/sg0: Can't lookup blockdev [ 216.134589][ T7732] /dev/sg0: Can't lookup blockdev [ 216.139720][ T7732] /dev/sg0: Can't lookup blockdev [ 216.144915][ T7732] /dev/sg0: Can't lookup blockdev [ 216.150040][ T7732] /dev/sg0: Can't lookup blockdev [ 216.155288][ T7732] /dev/sg0: Can't lookup blockdev [ 216.160388][ T7732] /dev/sg0: Can't lookup blockdev [ 216.165649][ T7732] /dev/sg0: Can't lookup blockdev [ 216.170784][ T7732] /dev/sg0: Can't lookup blockdev [ 216.175991][ T7732] /dev/sg0: Can't lookup blockdev [ 216.181093][ T7732] /dev/sg0: Can't lookup blockdev [ 216.186238][ T7732] /dev/sg0: Can't lookup blockdev [ 216.191459][ T7732] /dev/sg0: Can't lookup blockdev [ 216.196601][ T7732] /dev/sg0: Can't lookup blockdev [ 216.202035][ T7732] /dev/sg0: Can't lookup blockdev [ 216.207177][ T7732] /dev/sg0: Can't lookup blockdev [ 216.212394][ T7732] /dev/sg0: Can't lookup blockdev [ 216.217528][ T7732] /dev/sg0: Can't lookup blockdev [ 216.222703][ T7732] /dev/sg0: Can't lookup blockdev [ 216.227753][ T36] audit: type=1400 audit(216.218:8367): avc: denied { shutdown } for pid=7740 comm="syz.5.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.247382][ T7732] /dev/sg0: Can't lookup blockdev [ 216.252742][ T7732] /dev/sg0: Can't lookup blockdev [ 216.258070][ T7732] /dev/sg0: Can't lookup blockdev [ 216.383596][ T7751] netlink: 37 bytes leftover after parsing attributes in process `syz.6.2531'. [ 216.591248][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 216.821265][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 216.828056][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.840799][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.851626][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.867396][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 216.878007][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.889046][ T9] usb 6-1: config 0 descriptor?? [ 217.101495][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.116364][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.430813][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0038/input/input30 [ 217.551719][ T36] audit: type=1400 audit(217.548:8368): avc: denied { nlmsg_read } for pid=7784 comm="syz.8.2542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 217.577171][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.586438][ T7779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.597059][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.602796][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0038/input/input31 [ 217.616249][ T7779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.626909][ T7747] overlay: Unknown parameter 'uid' [ 217.632494][ T9] kye 0003:0458:5011.0038: input,hiddev96,hidraw0: USB HID v9.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 217.648579][ T9] usb 6-1: USB disconnect, device number 6 [ 217.666121][ T7788] fido_id[7788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 217.698695][ T7794] overlayfs: failed to resolve './file1': -2 [ 217.811238][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 217.951290][ T309] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 217.962452][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.972633][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.982234][ T31] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.991417][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.999421][ T31] usb 9-1: SerialNumber: syz [ 218.081221][ T309] usb 8-1: device descriptor read/64, error -71 [ 218.212624][ T31] usb 9-1: 0:2 : does not exist [ 218.224328][ T31] usb 9-1: USB disconnect, device number 2 [ 218.274361][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.281578][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.288695][ T7817] bridge_slave_0: entered allmulticast mode [ 218.295274][ T7817] bridge_slave_0: entered promiscuous mode [ 218.301753][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.308818][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.315914][ T7817] bridge_slave_1: entered allmulticast mode [ 218.322132][ T7817] bridge_slave_1: entered promiscuous mode [ 218.331477][ T309] usb 8-1: device descriptor read/64, error -71 [ 218.375450][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.382523][ T7817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.389861][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.396916][ T7817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.417603][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.424916][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.434613][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.441675][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.450745][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.457820][ T5598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.483811][ T7817] veth0_vlan: entered promiscuous mode [ 218.495230][ T7817] veth1_macvtap: entered promiscuous mode [ 218.571385][ T309] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 218.607157][ T36] audit: type=1400 audit(218.598:8369): avc: denied { remount } for pid=7825 comm="syz.9.2554" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 218.607164][ T7826] devtmpfs: Unknown parameter 'nrqinodD<8' [ 218.632718][ T36] audit: type=1400 audit(218.618:8370): avc: denied { unmount } for pid=7817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 218.647961][ T7828] rust_binder: 7828: no such ref 0 [ 218.657915][ T7828] rust_binder: Write failure EINVAL in pid:8 [ 218.658191][ T7828] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2555'. [ 218.673727][ T7828] rust_binder: Read failure Err(EAGAIN) in pid:8 [ 218.695156][ T7833] /dev/rnullb0: Can't open blockdev [ 218.711284][ T309] usb 8-1: device descriptor read/64, error -71 [ 218.724107][ T7837] kvm: pic: non byte write [ 218.728620][ T7837] kvm: pic: non byte write [ 218.733206][ T7837] kvm: pic: single mode not supported [ 218.733219][ T7837] kvm: pic: level sensitive irq not supported [ 218.813257][ T7841] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 218.830667][ T7841] rust_binder: Write failure EFAULT in pid:24 [ 218.863817][ T31] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 218.881351][ T31] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.903708][ T7844] fido_id[7844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 218.961300][ T309] usb 8-1: device descriptor read/64, error -71 [ 218.975358][ T7846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 218.975393][ T7846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 218.984889][ T7846] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 218.993982][ T7846] rust_binder: Read failure Err(EFAULT) in pid:28 [ 219.071348][ T309] usb usb8-port1: attempt power cycle [ 219.267120][ T7859] overlayfs: cannot append lower layer [ 219.267479][ T7860] overlayfs: cannot append lower layer [ 219.301241][ T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 219.385583][ T7866] overlay: Unknown parameter 'euid<00000000000000000000' [ 219.421232][ T309] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 219.442183][ T309] usb 8-1: device descriptor read/8, error -71 [ 219.453046][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.463992][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.473798][ T9] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 219.482891][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.491745][ T9] usb 9-1: config 0 descriptor?? [ 219.503177][ T7871] tipc: Enabling of bearer rejected, failed to enable media [ 219.578552][ T309] usb 8-1: device descriptor read/8, error -71 [ 219.821267][ T309] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 219.842395][ T309] usb 8-1: device descriptor read/8, error -71 [ 219.898712][ T9] hid (null): unknown global tag 0xc [ 219.905657][ T9] steelseries 0003:1038:12B6.003A: unknown global tag 0xc [ 219.913128][ T9] steelseries 0003:1038:12B6.003A: item 0 0 1 12 parsing failed [ 219.920958][ T9] steelseries 0003:1038:12B6.003A: probe with driver steelseries failed with error -22 [ 219.972386][ T309] usb 8-1: device descriptor read/8, error -71 [ 220.081334][ T309] usb usb8-port1: unable to enumerate USB device [ 220.100457][ T7854] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 220.100481][ T7854] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:36 [ 220.162339][ T9] usb 9-1: USB disconnect, device number 3 [ 220.199842][ T36] audit: type=1400 audit(220.188:8371): avc: denied { write } for pid=7882 comm="syz.9.2573" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 220.743507][ T36] audit: type=1400 audit(220.738:8372): avc: denied { unmount } for pid=7666 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.856599][ T7899] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 220.881560][ T36] audit: type=1400 audit(220.878:8373): avc: denied { relabelto } for pid=7898 comm="syz.9.2580" name="file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 220.882287][ T7899] fuse: Unknown parameter 'group_OP'id' [ 220.921252][ T36] audit: type=1400 audit(220.878:8374): avc: denied { associate } for pid=7898 comm="syz.9.2580" name="file0" dev="tmpfs" ino=76 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 220.962446][ T36] audit: type=1400 audit(220.878:8375): avc: denied { mounton } for pid=7898 comm="syz.9.2580" path="/10/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 220.990314][ T36] audit: type=1400 audit(220.958:8376): avc: denied { read } for pid=7898 comm="syz.9.2580" name="file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 221.016115][ T36] audit: type=1400 audit(220.958:8377): avc: denied { open } for pid=7898 comm="syz.9.2580" path="/10/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 221.101236][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 221.134334][ T36] audit: type=1400 audit(221.128:8378): avc: denied { unlink } for pid=7817 comm="syz-executor" name="file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 221.251291][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 221.258752][ T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 221.269748][ T9] usb 8-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.290682][ T9] usb 8-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.307021][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 221.314861][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 221.330534][ T36] audit: type=1400 audit(221.318:8379): avc: denied { lock } for pid=7908 comm="syz.5.2584" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 221.361219][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.376321][ T9] usb 8-1: config 0 descriptor?? [ 221.482301][ T7917] rust_binder: Write failure EINVAL in pid:50 [ 221.482495][ T7917] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 221.495947][ T7917] rust_binder: Write failure EINVAL in pid:50 [ 221.581266][ T309] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 221.752722][ T309] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 221.761966][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.770713][ T309] usb 6-1: config 0 descriptor?? [ 221.799801][ T9] magicmouse 0003:05AC:0269.003B: item fetching failed at offset 5/7 [ 221.801243][ T45] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 221.810214][ T9] magicmouse 0003:05AC:0269.003B: magicmouse hid parse failed [ 221.823358][ T9] magicmouse 0003:05AC:0269.003B: probe with driver magicmouse failed with error -22 [ 221.971267][ T45] usb 10-1: device descriptor read/64, error -71 [ 221.979298][ T309] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 221.994006][ T309] asix 6-1:0.0: probe with driver asix failed with error -71 [ 222.004731][ T309] usb 6-1: USB disconnect, device number 7 [ 222.014262][ T9] usb 8-1: USB disconnect, device number 12 [ 222.211266][ T45] usb 10-1: device descriptor read/64, error -71 [ 222.451233][ T45] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 222.611242][ T45] usb 10-1: device descriptor read/64, error -71 [ 222.871274][ T45] usb 10-1: device descriptor read/64, error -71 [ 222.881552][ T7930] .mT2": renamed from lo (while UP) [ 222.983085][ T45] usb usb10-port1: attempt power cycle [ 222.994251][ T7936] rust_binder: Write failure EFAULT in pid:133 [ 223.031595][ T7939] rust_binder: 7939: no such ref 1 [ 223.071276][ T7939] rust_binder: Write failure EINVAL in pid:136 [ 223.091605][ T7940] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.091663][ T7939] rust_binder: 7939: no such ref 1 [ 223.121266][ T7939] rust_binder: Write failure EINVAL in pid:136 [ 223.331246][ T45] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 223.382221][ T45] usb 10-1: device descriptor read/8, error -71 [ 223.401222][ T1017] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 223.522242][ T45] usb 10-1: device descriptor read/8, error -71 [ 223.562279][ T1017] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.581218][ T1017] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 223.601964][ T1017] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.611047][ T1017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 223.633378][ T1017] usb 6-1: SerialNumber: syz [ 223.642796][ T1017] usb 6-1: bad CDC descriptors [ 223.761245][ T45] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 223.812216][ T45] usb 10-1: device descriptor read/8, error -71 [ 223.857308][ T1017] usb 6-1: USB disconnect, device number 8 [ 223.865471][ T36] audit: type=1400 audit(223.848:8380): avc: denied { mounton } for pid=7941 comm="syz.5.2596" path="/44/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 223.911265][ T36] audit: type=1400 audit(223.848:8381): avc: denied { relabelfrom } for pid=7941 comm="syz.5.2596" name="" dev="pipefs" ino=48963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 223.972226][ T45] usb 10-1: device descriptor read/8, error -71 [ 224.081388][ T45] usb usb10-port1: unable to enumerate USB device [ 224.681254][ T45] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 224.831272][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 225.185674][ T7965] netlink: 'syz.7.2603': attribute type 27 has an invalid length. [ 225.803567][ T7974] binder: Unknown parameter 'context' [ 225.983325][ T7992] rust_binder: 7992: no such ref 3 [ 226.090489][ T8004] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 226.099196][ T8004] rust_binder: Write failure EINVAL in pid:80 [ 226.386055][ T8020] .mT2": renamed from lo (while UP) [ 226.586830][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2626'. [ 227.228785][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 227.228806][ T36] audit: type=1400 audit(227.218:8992): avc: denied { append } for pid=8063 comm="syz.9.2636" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 227.462517][ T8095] fuse: Bad value for 'fd' [ 227.476346][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 227.491821][ T45] usb 6-1: too many configurations: 155, using maximum allowed: 8 [ 227.510408][ T45] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 227.529967][ T45] usb 6-1: can't read configurations, error -71 [ 227.666626][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2651'. [ 227.707400][ T8108] rust_binder: Write failure EINVAL in pid:152 [ 228.151254][ T45] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 228.312717][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.322655][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 228.335835][ T45] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 228.345077][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.357506][ T45] usb 6-1: config 0 descriptor?? [ 228.418635][ T8113] overlayfs: cannot append lower layer [ 228.781343][ T45] kovaplus 0003:1E7D:2D50.003C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 229.165674][ T45] kovaplus 0003:1E7D:2D50.003C: couldn't init struct kovaplus_device [ 229.176803][ T45] kovaplus 0003:1E7D:2D50.003C: couldn't install mouse [ 229.185376][ T45] kovaplus 0003:1E7D:2D50.003C: probe with driver kovaplus failed with error -71 [ 229.200860][ T45] usb 6-1: USB disconnect, device number 10 [ 229.649706][ T45] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 229.811214][ T45] usb 10-1: Using ep0 maxpacket: 16 [ 229.822404][ T45] usb 10-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 229.843563][ T45] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.864805][ T45] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 229.901235][ T45] usb 10-1: config 0 interface 0 has no altsetting 0 [ 229.910515][ T8134] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 229.918933][ T45] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 229.928342][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.957137][ T45] usb 10-1: config 0 descriptor?? [ 229.974811][ T8137] rust_binder: 8137: no such ref 0 [ 229.979974][ T8137] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 229.979994][ T8137] rust_binder: Read failure Err(EFAULT) in pid:160 [ 230.002846][ T8137] rust_binder: Write failure EINVAL in pid:160 [ 230.105759][ T8153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 230.373368][ T45] magicmouse 0003:05AC:0269.003D: item fetching failed at offset 5/7 [ 230.393591][ T45] magicmouse 0003:05AC:0269.003D: magicmouse hid parse failed [ 230.401470][ T45] magicmouse 0003:05AC:0269.003D: probe with driver magicmouse failed with error -22 [ 230.419320][ T8179] fuseblk: Bad value for 'fd' [ 230.576005][ T309] usb 10-1: USB disconnect, device number 6 [ 230.661957][ T8196] rust_binder: inc_ref_done called when no active inc_refs [ 230.661985][ T8196] rust_binder: Write failure EINVAL in pid:181 [ 230.718377][ T8198] rust_binder: Error while translating object. [ 230.737382][ T8198] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 230.751548][ T8198] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 231.345320][ T306] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 231.435329][ T8206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:189 [ 231.532620][ T306] usb 10-1: unable to get BOS descriptor or descriptor too short [ 231.570241][ T306] usb 10-1: not running at top speed; connect to a high speed hub [ 231.579169][ T306] usb 10-1: config 1 has an invalid interface number: 138 but max is 0 [ 231.592248][ T306] usb 10-1: config 1 has no interface number 0 [ 231.608639][ T306] usb 10-1: config 1 interface 138 has no altsetting 0 [ 231.617088][ T306] usb 10-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 231.626439][ T306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.646489][ T306] usb 10-1: Product: syz [ 231.650780][ T306] usb 10-1: Manufacturer: syz [ 231.661210][ T306] usb 10-1: SerialNumber: syz [ 231.878643][ T8209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.893513][ T8209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.920178][ T306] usb 10-1: USB disconnect, device number 7 [ 232.226406][ T36] audit: type=1400 audit(232.218:8993): avc: denied { getattr } for pid=8228 comm="syz.5.2696" path="cgroup:[4026532465]" dev="nsfs" ino=4026532465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 232.607197][ T8242] batadv_slave_0: entered promiscuous mode [ 232.783318][ T8250] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 232.867919][ T8263] fuseblk: Unknown parameter 'fh' [ 232.873853][ T8263] netlink: 1351 bytes leftover after parsing attributes in process `syz.9.2707'. [ 232.884363][ T8263] fuseblk: Unknown parameter 'fh' [ 233.151271][ T309] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 233.168577][ T36] audit: type=1326 audit(233.158:8994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8269 comm="syz.7.2709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74af8e929 code=0x0 [ 233.203755][ T8233] batadv_slave_0: left promiscuous mode [ 233.275189][ T36] audit: type=1400 audit(233.268:8995): avc: denied { mount } for pid=8269 comm="syz.7.2709" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 233.311271][ T309] usb 10-1: Using ep0 maxpacket: 16 [ 233.357460][ T309] usb 10-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 233.369415][ T309] usb 10-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.380823][ T309] usb 10-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 233.396985][ T309] usb 10-1: config 0 interface 0 has no altsetting 0 [ 233.403866][ T309] usb 10-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 233.413178][ T309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.427396][ T309] usb 10-1: config 0 descriptor?? [ 233.470345][ T8276] exFAT-fs (rnullb0): invalid boot record signature [ 233.477060][ T8276] exFAT-fs (rnullb0): failed to read boot sector [ 233.483428][ T8276] exFAT-fs (rnullb0): failed to recognize exfat type [ 233.840195][ T309] magicmouse 0003:05AC:0269.003E: item fetching failed at offset 5/7 [ 233.848671][ T309] magicmouse 0003:05AC:0269.003E: magicmouse hid parse failed [ 233.858050][ T309] magicmouse 0003:05AC:0269.003E: probe with driver magicmouse failed with error -22 [ 233.928331][ T36] audit: type=1400 audit(233.918:8996): avc: denied { relabelto } for pid=8288 comm="syz.5.2715" name="file0" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 233.930896][ T8289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.981212][ T36] audit: type=1400 audit(233.918:8997): avc: denied { write } for pid=8288 comm="syz.5.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 233.997222][ T8294] rust_binder: Error while translating object. [ 234.011453][ T8294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.017679][ T8294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:223 [ 234.039722][ T36] audit: type=1400 audit(233.958:8998): avc: denied { unlink } for pid=7418 comm="syz-executor" name="file0" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 234.041383][ T10] usb 10-1: USB disconnect, device number 8 [ 234.084728][ T8296] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2718'. [ 234.172163][ T8298] rust_binder: Error while translating object. [ 234.172201][ T8298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 234.178522][ T8298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:225 [ 234.260658][ T8309] ./file0: Can't lookup blockdev [ 234.741413][ T8329] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 234.891218][ T10] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 235.062387][ T10] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 235.070724][ T10] usb 10-1: config 0 has no interface number 0 [ 235.078804][ T10] usb 10-1: config 0 interface 41 has no altsetting 0 [ 235.087327][ T10] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 235.098135][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.106386][ T10] usb 10-1: Product: syz [ 235.110755][ T10] usb 10-1: Manufacturer: syz [ 235.121305][ T10] usb 10-1: SerialNumber: syz [ 235.128331][ T10] usb 10-1: config 0 descriptor?? [ 235.136061][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 235.162388][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 235.171504][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2736'. [ 235.194864][ T8345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 235.194900][ T8345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:251 [ 235.205428][ T8345] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 235.214740][ T8345] rust_binder: Read failure Err(EFAULT) in pid:251 [ 235.311358][ T36] audit: type=1326 audit(235.308:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8353 comm="syz.7.2741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74af8e929 code=0x0 [ 235.350021][ T36] audit: type=1326 audit(235.338:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8355 comm="syz.5.2742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83f258e929 code=0x0 [ 235.454130][ T8358] loop2: detected capacity change from 0 to 7 [ 235.748966][ T8327] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 235.749007][ T8327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:152 [ 235.760568][ T10] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 235.784435][ T10] usb 10-1: USB disconnect, device number 9 [ 236.246394][ T8365] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 236.246420][ T8365] rust_binder: Read failure Err(EFAULT) in pid:258 [ 236.263630][ T8365] rust_binder: got new transaction with bad transaction stack [ 236.270280][ T8365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 236.312013][ T8375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 236.353373][ T8377] __vm_enough_memory: pid: 8377, comm: syz.9.2749, bytes: 70373039144960 not enough memory for the allocation [ 236.481967][ T46] bridge_slave_1: left allmulticast mode [ 236.494279][ T46] bridge_slave_1: left promiscuous mode [ 236.500147][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.509883][ T46] bridge_slave_0: left allmulticast mode [ 236.518441][ T46] bridge_slave_0: left promiscuous mode [ 236.525276][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.671312][ T46] veth1_macvtap: left promiscuous mode [ 236.676880][ T46] veth0_vlan: left promiscuous mode [ 236.775309][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.782572][ T10] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 236.785755][ T8371] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.797422][ T8371] bridge_slave_0: entered allmulticast mode [ 236.803621][ T36] audit: type=1400 audit(236.788:9001): avc: denied { mounton } for pid=8408 comm="syz.5.2760" path="/93/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 236.819698][ T8371] bridge_slave_0: entered promiscuous mode [ 236.831779][ T36] audit: type=1400 audit(236.798:9002): avc: denied { unmount } for pid=7418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.838006][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.858689][ T8371] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.865627][ T8412] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2761'. [ 236.867592][ T8371] bridge_slave_1: entered allmulticast mode [ 236.882422][ T8371] bridge_slave_1: entered promiscuous mode [ 236.921225][ T10] usb 10-1: device descriptor read/64, error -71 [ 236.933603][ T8371] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.940636][ T8371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.947917][ T8371] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.954974][ T8371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.975241][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.982511][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.992075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.999141][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.007621][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.014686][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.046773][ T8371] veth0_vlan: entered promiscuous mode [ 237.058976][ T8371] veth1_macvtap: entered promiscuous mode [ 237.131032][ T8422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:286 [ 237.131064][ T8422] rust_binder: Read failure Err(EFAULT) in pid:286 [ 237.152054][ T8424] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2765'. [ 237.171282][ T10] usb 10-1: device descriptor read/64, error -71 [ 237.185738][ T36] audit: type=1400 audit(237.178:9003): avc: denied { mounton } for pid=8426 comm="syz.5.2766" path="/99/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 237.217712][ T8432] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 237.225172][ T8432] rust_binder: Write failure EINVAL in pid:4 [ 237.237033][ T8427] futex_wake_op: syz.5.2766 tries to shift op by -1; fix this program [ 237.304639][ T8448] rust_binder: 8448: no such ref 4294901757 [ 237.310763][ T8448] rust_binder: Write failure EINVAL in pid:20 [ 237.411241][ T10] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 237.471252][ T309] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 237.561621][ T10] usb 10-1: device descriptor read/64, error -71 [ 237.621243][ T309] usb 6-1: Using ep0 maxpacket: 32 [ 237.627631][ T309] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 237.636008][ T309] usb 6-1: config 0 has no interface number 0 [ 237.642182][ T309] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 237.652470][ T309] usb 6-1: config 0 interface 196 has no altsetting 0 [ 237.660671][ T309] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 237.669912][ T309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.678009][ T309] usb 6-1: Product: syz [ 237.682473][ T309] usb 6-1: Manufacturer: syz [ 237.687107][ T309] usb 6-1: SerialNumber: syz [ 237.693054][ T309] usb 6-1: config 0 descriptor?? [ 237.698344][ T8429] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 237.811254][ T10] usb 10-1: device descriptor read/64, error -71 [ 237.921355][ T10] usb usb10-port1: attempt power cycle [ 237.971272][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.112556][ T309] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 238.120088][ T309] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 238.122472][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.130009][ T309] usb 6-1: USB disconnect, device number 11 [ 238.140806][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.154911][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 238.166121][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 238.174196][ T9] usb 4-1: SerialNumber: syz [ 238.261292][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 238.271455][ T8469] binder: Unknown parameter '' [ 238.291245][ T8471] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.291312][ T10] usb 10-1: device descriptor read/8, error -71 [ 238.291608][ T8471] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 238.304175][ T8471] rust_binder: Error while translating object. [ 238.316837][ T8471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.323082][ T8471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299 [ 238.335133][ T8472] rust_binder: 8472: no such ref 3 [ 238.349891][ T8472] rust_binder: Write failure EINVAL in pid:299 [ 238.412339][ T8475] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.419201][ T8475] rust_binder: Error in use_page_slow: ESRCH [ 238.429514][ T8475] rust_binder: use_range failure ESRCH [ 238.436181][ T10] usb 10-1: device descriptor read/8, error -71 [ 238.448455][ T8475] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 238.448483][ T8475] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 238.456855][ T8475] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:303 [ 238.562135][ T8478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.571978][ T8478] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 128, size: 21) [ 238.578456][ T8478] rust_binder: Error while translating object. [ 238.592650][ T8478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 238.599100][ T8478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 238.691357][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 238.752265][ T10] usb 10-1: device descriptor read/8, error -71 [ 238.882338][ T10] usb 10-1: device descriptor read/8, error -71 [ 238.899111][ T9] usb 4-1: 0:2 : does not exist [ 238.933810][ T9] usb 4-1: USB disconnect, device number 17 [ 238.960264][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 238.960285][ T36] audit: type=1400 audit(238.948:9005): avc: denied { accept } for pid=8483 comm="syz.5.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 238.968589][ T8486] .mT2": renamed from lo (while UP) [ 238.993212][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 239.012580][ T10] usb usb10-port1: unable to enumerate USB device [ 239.028430][ T8488] /dev/rnullb0: Can't open blockdev [ 239.034901][ T36] audit: type=1400 audit(239.018:9006): avc: denied { ioctl } for pid=8487 comm="syz.5.2787" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 239.059974][ T8488] /dev/rnullb0: Can't open blockdev [ 239.071894][ T8488] /dev/rnullb0: Can't open blockdev [ 239.077370][ T8488] /dev/rnullb0: Can't open blockdev [ 239.083168][ T8488] /dev/rnullb0: Can't open blockdev [ 239.088638][ T8488] /dev/rnullb0: Can't open blockdev [ 239.094116][ T8488] /dev/rnullb0: Can't open blockdev [ 239.099588][ T8488] /dev/rnullb0: Can't open blockdev [ 239.105057][ T8488] /dev/rnullb0: Can't open blockdev [ 239.110534][ T8488] /dev/rnullb0: Can't open blockdev [ 239.116161][ T8488] /dev/rnullb0: Can't open blockdev [ 239.125198][ T8488] /dev/rnullb0: Can't open blockdev [ 239.130700][ T8488] /dev/rnullb0: Can't open blockdev [ 239.141921][ T8488] /dev/rnullb0: Can't open blockdev [ 239.147595][ T8488] /dev/rnullb0: Can't open blockdev [ 239.154128][ T8488] /dev/rnullb0: Can't open blockdev [ 239.166862][ T8488] /dev/rnullb0: Can't open blockdev [ 239.172382][ T8488] /dev/rnullb0: Can't open blockdev [ 239.177834][ T8488] /dev/rnullb0: Can't open blockdev [ 239.183443][ T8488] /dev/rnullb0: Can't open blockdev [ 239.188906][ T8488] /dev/rnullb0: Can't open blockdev [ 239.194616][ T8488] /dev/rnullb0: Can't open blockdev [ 239.201910][ T8488] /dev/rnullb0: Can't open blockdev [ 239.208403][ T8488] /dev/rnullb0: Can't open blockdev [ 239.213848][ T36] audit: type=1400 audit(239.198:9007): avc: denied { mount } for pid=8492 comm="syz.3.2789" name="/" dev="pstore" ino=903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 239.235999][ T8488] /dev/rnullb0: Can't open blockdev [ 239.241624][ T8488] /dev/rnullb0: Can't open blockdev [ 239.247987][ T8488] /dev/rnullb0: Can't open blockdev [ 239.253845][ T8488] /dev/rnullb0: Can't open blockdev [ 239.259312][ T8488] /dev/rnullb0: Can't open blockdev [ 239.265118][ T8488] /dev/rnullb0: Can't open blockdev [ 239.270586][ T8488] /dev/rnullb0: Can't open blockdev [ 239.276248][ T8488] /dev/rnullb0: Can't open blockdev [ 239.281852][ T8488] /dev/rnullb0: Can't open blockdev [ 239.316549][ T36] audit: type=1400 audit(239.308:9008): avc: denied { read } for pid=8495 comm="syz.5.2790" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.373942][ T36] audit: type=1400 audit(239.308:9009): avc: denied { open } for pid=8495 comm="syz.5.2790" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.414495][ T36] audit: type=1400 audit(239.338:9010): avc: denied { setattr } for pid=8495 comm="syz.5.2790" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.461039][ T36] audit: type=1400 audit(239.398:9011): avc: denied { map } for pid=8495 comm="syz.5.2790" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.492422][ T8500] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.507776][ T36] audit: type=1400 audit(239.398:9012): avc: denied { execute } for pid=8495 comm="syz.5.2790" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.521248][ T8500] rust_binder: Write failure EFAULT in pid:320 [ 239.633262][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2792'. [ 239.661630][ T8503] rust_binder: Write failure EINVAL in pid:159 [ 239.700786][ T8505] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.755085][ T8505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:323 [ 239.804110][ T36] audit: type=1400 audit(239.798:9013): avc: denied { relabelfrom } for pid=8508 comm="syz.9.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.851346][ T36] audit: type=1400 audit(239.798:9014): avc: denied { relabelto } for pid=8508 comm="syz.9.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 239.881222][ T8511] 8021q: VLANs not supported on ip6gre0 [ 239.919529][ T8515] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 240.081525][ T8517] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 240.331292][ T309] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 240.421280][ T384] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 240.502408][ T309] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.513531][ T309] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 240.523711][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.533933][ T309] usb 4-1: config 0 descriptor?? [ 240.541417][ T8525] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 240.589947][ T384] usb 10-1: config 17 has an invalid interface number: 250 but max is 2 [ 240.598504][ T384] usb 10-1: config 17 contains an unexpected descriptor of type 0x2, skipping [ 240.607787][ T384] usb 10-1: config 17 has an invalid interface number: 213 but max is 2 [ 240.621263][ T384] usb 10-1: config 17 has an invalid interface number: 3 but max is 2 [ 240.629499][ T384] usb 10-1: config 17 has an invalid interface number: 24 but max is 2 [ 240.641003][ T384] usb 10-1: config 17 has 4 interfaces, different from the descriptor's value: 3 [ 240.650452][ T384] usb 10-1: config 17 has no interface number 0 [ 240.657011][ T384] usb 10-1: config 17 has no interface number 1 [ 240.663563][ T384] usb 10-1: config 17 has no interface number 2 [ 240.669915][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 240.681537][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0xF has invalid maxpacket 1951, setting to 64 [ 240.693091][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 240.704621][ T384] usb 10-1: config 17 interface 250 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 240.716209][ T384] usb 10-1: config 17 interface 250 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 240.727664][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 240.739180][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 240.751125][ T384] usb 10-1: config 17 interface 250 altsetting 34 endpoint 0xC has invalid maxpacket 1552, setting to 1024 [ 240.762827][ T384] usb 10-1: config 17 interface 250 altsetting 34 bulk endpoint 0xC has invalid maxpacket 1024 [ 240.773439][ T384] usb 10-1: config 17 interface 250 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 240.784853][ T384] usb 10-1: config 17 interface 250 altsetting 34 has an invalid descriptor for endpoint zero, skipping [ 240.796614][ T384] usb 10-1: config 17 interface 250 altsetting 34 has a duplicate endpoint with address 0x2, skipping [ 240.807889][ T384] usb 10-1: config 17 interface 250 altsetting 34 has a duplicate endpoint with address 0x4, skipping [ 240.819166][ T384] usb 10-1: config 17 interface 213 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 240.830335][ T384] usb 10-1: config 17 interface 213 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 240.841514][ T384] usb 10-1: config 17 interface 213 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 240.852651][ T384] usb 10-1: config 17 interface 213 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 240.863981][ T384] usb 10-1: config 17 interface 213 altsetting 4 has an endpoint descriptor with address 0x6D, changing to 0xD [ 240.881930][ T384] usb 10-1: config 17 interface 213 altsetting 4 bulk endpoint 0xD has invalid maxpacket 16 [ 240.905062][ T384] usb 10-1: config 17 interface 213 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 240.916673][ T384] usb 10-1: config 17 interface 213 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 240.927935][ T8534] netlink: 'syz.5.2803': attribute type 63 has an invalid length. [ 240.935802][ T8534] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2803'. [ 240.944759][ T384] usb 10-1: config 17 interface 213 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 240.958587][ T309] hid-generic 0003:04F3:0755.003F: unknown main item tag 0x0 [ 240.967331][ T309] hid-generic 0003:04F3:0755.003F: unknown main item tag 0x0 [ 240.975200][ T384] usb 10-1: config 17 interface 3 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 240.986309][ T309] hid-generic 0003:04F3:0755.003F: unknown main item tag 0x0 [ 240.993801][ T384] usb 10-1: config 17 interface 3 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 241.004605][ T309] hid-generic 0003:04F3:0755.003F: unknown main item tag 0x0 [ 241.021239][ T309] hid-generic 0003:04F3:0755.003F: unknown main item tag 0x0 [ 241.028801][ T384] usb 10-1: config 17 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 241.052207][ T309] hid-generic 0003:04F3:0755.003F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 241.066979][ T384] usb 10-1: too many endpoints for config 17 interface 24 altsetting 186: 178, using maximum allowed: 30 [ 241.079768][ T384] usb 10-1: config 17 interface 24 altsetting 186 has a duplicate endpoint with address 0xF, skipping [ 241.090858][ T384] usb 10-1: config 17 interface 24 altsetting 186 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 241.102245][ T384] usb 10-1: config 17 interface 24 altsetting 186 has a duplicate endpoint with address 0x9, skipping [ 241.113558][ T384] usb 10-1: config 17 interface 24 altsetting 186 has a duplicate endpoint with address 0x3, skipping [ 241.124680][ T384] usb 10-1: config 17 interface 24 altsetting 186 has 4 endpoint descriptors, different from the interface descriptor's value: 178 [ 241.146751][ T384] usb 10-1: config 17 interface 250 has no altsetting 0 [ 241.153865][ T384] usb 10-1: config 17 interface 213 has no altsetting 0 [ 241.174086][ T384] usb 10-1: config 17 interface 24 has no altsetting 0 [ 241.192335][ T384] usb 10-1: Dual-Role OTG device on HNP port [ 241.198600][ T384] usb 10-1: New USB device found, idVendor=1fb9, idProduct=0400, bcdDevice=f4.37 [ 241.208074][ T384] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.216427][ T384] usb 10-1: Product: ハ蘏珲怲᩼ￍ唈팍ာ欅૶襵༾ᩭ祒滨ฑ뎹嶪扎冒䒐뾚䦶貫澚⟱觱⹭┩㏝䄂᪔꘩苸檅酟얧뻡줨질阶揋柯ള骱톦©卞燶࿃Ζ쨢ﵛ쾺䍰 [ 241.236635][ T384] usb 10-1: Manufacturer: ␉ [ 241.241494][ T384] usb 10-1: SerialNumber: 羛쎤즾⺎䅈ᱰ᪅䘪䴅棤十똎頨뽲阋୐䆻祮唋㾴紦酦꒳䏐诲೟핯꙳ꑟ㷜쉝嘲젧迩쇵宙ட꫑쩑醏鮥岙곤陜ﾘ၃Ҷ瞓뿛퀢䳣⍼鸉㠥뚳ꑽᴥ殕疥亘솀炔鄓戅題瘘ᨲ춙촘࠭貃ự턯ۍ눢쥞ഭᕫ혾瘌聵፦諁鋃鶻ꅕ땝鲶֜ꤠ増穰빥䲒☫颈书벒㾛ҝ逄ࢶ充ꢘ [ 241.276064][ T8527] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 241.283753][ T8527] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 241.301142][ T8527] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 241.361953][ T8556] input: syz0 as /devices/virtual/input/input35 [ 241.512491][ T8527] /dev/rnullb0: Can't open blockdev [ 241.533083][ T384] usb 10-1: USB disconnect, device number 14 [ 241.664885][ T8571] /dev/rnullb0: Can't open blockdev [ 241.878122][ T8581] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.878483][ T8581] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 4 [ 241.892568][ T8581] rust_binder: Write failure EINVAL in pid:379 [ 242.130096][ T8596] rust_binder: Error while translating object. [ 242.137491][ T8598] Invalid ELF header len 16 [ 242.151858][ T8596] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 242.151885][ T8596] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:392 [ 242.210530][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2827'. [ 242.220426][ T8600] binder: Bad value for 'stats' [ 242.246887][ T8602] input: syz0 as /devices/virtual/input/input36 [ 242.617094][ T8617] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 242.619497][ T8619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2835'. [ 242.661252][ T1017] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 242.822310][ T1017] usb 10-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 242.833737][ T1017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.842309][ T309] usb 4-1: USB disconnect, device number 18 [ 242.859856][ T1017] usb 10-1: config 0 descriptor?? [ 243.273850][ T1017] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 243.280987][ T1017] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 243.288802][ T1017] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 243.296186][ T1017] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 243.303335][ T1017] elecom 0003:056E:00E6.0040: unknown main item tag 0x0 [ 243.311566][ T1017] elecom 0003:056E:00E6.0040: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.9-1/input0 [ 243.487390][ T45] usb 10-1: USB disconnect, device number 15 [ 243.808437][ T8674] rust_binder: Write failure EFAULT in pid:73 [ 244.206509][ T8695] overlayfs: failed to clone upperpath [ 244.311216][ T1017] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 244.482379][ T1017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.493499][ T1017] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.503766][ T1017] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 244.513091][ T1017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.531552][ T1017] usb 10-1: config 0 descriptor?? [ 244.739651][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.753541][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.761519][ T8701] syzkaller0: entered allmulticast mode [ 244.767549][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.776158][ T8701] syzkaller0: entered promiscuous mode [ 244.783499][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.786812][ T8701] syzkaller0 (unregistering): left promiscuous mode [ 244.792845][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.807119][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.808129][ T8701] syzkaller0 (unregistering): left allmulticast mode [ 244.816554][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.830877][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.861214][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.873654][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.887146][ T1017] hid-multitouch 0003:1FD2:6007.0041: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 245.101973][ T45] usb 10-1: USB disconnect, device number 16 [ 245.712221][ T8720] rust_binder: Write failure EFAULT in pid:186 [ 245.887056][ T8725] binder: Bad value for 'max' [ 245.900872][ T8727] binder: Bad value for 'max' [ 246.024695][ T8737] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 246.229556][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 246.229575][ T36] audit: type=1400 audit(246.218:9023): avc: denied { execstack } for pid=8761 comm="syz.9.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 246.269028][ T8763] input: syz1 as /devices/virtual/input/input37 [ 246.275560][ T8763] input: failed to attach handler leds to device input37, error: -6 [ 246.476454][ T8791] rust_binder: Write failure EFAULT in pid:203 [ 246.721259][ T309] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 246.792956][ T36] audit: type=1400 audit(246.788:9024): avc: denied { mounton } for pid=8799 comm="syz.3.2894" path="/proc/117/task" dev="proc" ino=53149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 246.891236][ T309] usb 10-1: Using ep0 maxpacket: 16 [ 246.897810][ T309] usb 10-1: config 0 has no interfaces? [ 246.905187][ T309] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.914602][ T309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.922899][ T309] usb 10-1: Product: syz [ 246.927268][ T309] usb 10-1: Manufacturer: syz [ 246.932204][ T309] usb 10-1: SerialNumber: syz [ 246.941441][ T309] usb 10-1: config 0 descriptor?? [ 247.155864][ T8811] batadv_slave_1: entered promiscuous mode [ 247.163552][ T8811] batadv_slave_1: left promiscuous mode [ 247.315111][ T8828] batadv_slave_1: entered promiscuous mode [ 247.321507][ T8827] batadv_slave_1: left promiscuous mode [ 247.353571][ T309] usb 10-1: USB disconnect, device number 17 [ 247.370643][ T36] audit: type=1400 audit(247.358:9025): avc: denied { mount } for pid=8831 comm="syz.3.2905" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 247.422541][ T8837] netlink: 1619 bytes leftover after parsing attributes in process `syz.3.2907'. [ 247.422751][ T8838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:124 [ 247.593596][ T36] audit: type=1400 audit(247.588:9026): avc: denied { getopt } for pid=8850 comm="syz.3.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.751776][ T8866] incfs: Error accessing: ./file0. [ 247.761365][ T8866] incfs: mount failed -20 [ 247.857189][ T8873] rust_binder: 8873: no such ref 0 [ 248.044178][ T8885] rust_binder: Read failure Err(EFAULT) in pid:215 [ 248.100708][ T8891] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 248.111222][ T309] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 248.281210][ T309] usb 4-1: Using ep0 maxpacket: 32 [ 248.290263][ T8900] overlayfs: failed to resolve './file1': -2 [ 248.297211][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.311475][ T309] usb 4-1: config 3 has an invalid interface number: 242 but max is 0 [ 248.319685][ T309] usb 4-1: config 3 has no interface number 0 [ 248.332304][ T309] usb 4-1: config 3 interface 242 has no altsetting 0 [ 248.340515][ T8904] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 248.341279][ T309] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 248.349821][ T8904] fuse: Bad value for 'group_id' [ 248.363365][ T8904] fuse: Bad value for 'group_id' [ 248.368625][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.370282][ T8904] /dev/rnullb0: Can't open blockdev [ 248.388793][ T309] usb 4-1: Product: syz [ 248.393255][ T309] usb 4-1: Manufacturer: syz [ 248.397871][ T309] usb 4-1: SerialNumber: syz [ 248.404046][ T8906] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 248.404068][ T8906] rust_binder: Error while translating object. [ 248.418080][ T8906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 248.424324][ T8906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 248.661708][ T309] ums-karma 4-1:3.242: USB Mass Storage device detected [ 248.748115][ T309] usb 4-1: USB disconnect, device number 20 [ 248.754129][ T45] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 248.922497][ T45] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.933696][ T45] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 248.944068][ T45] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 248.954023][ T45] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 248.965687][ T45] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.975031][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.983275][ T45] usb 10-1: Product: syz [ 248.987558][ T45] usb 10-1: Manufacturer: syz [ 248.992457][ T45] usb 10-1: SerialNumber: syz [ 249.003817][ T45] cdc_mbim 10-1:1.0: skipping garbage [ 249.537933][ T36] audit: type=1400 audit(249.528:9027): avc: denied { audit_write } for pid=8925 comm="syz.3.2936" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 249.572016][ T36] audit: type=1107 audit(249.548:9028): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='4`' [ 249.791236][ T306] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 249.807673][ T45] cdc_mbim 10-1:1.0: bind() failure [ 249.814996][ T45] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 249.822187][ T45] cdc_ncm 10-1:1.1: bind() failure [ 249.828622][ T45] usb 10-1: USB disconnect, device number 18 [ 249.919133][ T36] audit: type=1400 audit(249.908:9029): avc: denied { map } for pid=8927 comm="syz.9.2937" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 249.920562][ T8928] BUG: unable to handle page fault for address: fffffffffffffff1 [ 249.949327][ T8928] #PF: supervisor read access in kernel mode [ 249.955331][ T8928] #PF: error_code(0x0000) - not-present page [ 249.961340][ T8928] PGD 72ac067 P4D 72ac067 PUD 72ae067 PMD 0 [ 249.967419][ T8928] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 249.971259][ T36] audit: type=1400 audit(249.908:9030): avc: denied { bind } for pid=8927 comm="syz.9.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.973524][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.9.2937 Not tainted 6.12.30-syzkaller-gc40c54e66959 #0 d09897295957ba49fce5d3909215422667ca3e4a [ 250.006188][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.010147][ T36] audit: type=1400 audit(249.908:9031): avc: denied { execute } for pid=8927 comm="syz.9.2937" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 250.016274][ T8928] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 250.016327][ T8928] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba 97 fa 55 b0 <45> 03 53 f1 74 02 0f 0b 2e e8 a0 95 43 1e 41 89 c7 31 ff 44 89 fe [ 250.061266][ T306] usb 4-1: Using ep0 maxpacket: 8 [ 250.064377][ T8928] RSP: 0018:ffffc900018b7920 EFLAGS: 00010283 [ 250.075497][ T8928] RAX: ffffffff81bcb3b9 RBX: 0000000000000000 RCX: 0000000000080000 [ 250.076152][ T306] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.083498][ T8928] RDX: ffffc90009de2000 RSI: ffffea0004d1f480 RDI: ffff8881185a0dc0 [ 250.083523][ T8928] RBP: ffffc900018b79e0 R08: ffffea0004d1f487 R09: 1ffffd40009a3e90 [ 250.083543][ T8928] R10: 00000000b055fa97 R11: 0000000000000000 R12: 1ffff92000316f28 [ 250.099184][ T306] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 250.101575][ T8928] R13: 1ffffd40009a3e90 R14: ffffea0004d1f480 R15: 0000000000000000 [ 250.101598][ T8928] FS: 00007f77508b16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.120603][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 250.126482][ T8928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.126506][ T8928] CR2: fffffffffffffff1 CR3: 000000014475c000 CR4: 00000000003526b0 [ 250.148854][ T306] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 250.154659][ T8928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.154681][ T8928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.174574][ T306] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 250.180807][ T8928] Call Trace: [ 250.180821][ T8928] [ 250.180834][ T8928] ? trace_android_vh_filemap_fault_start+0x130/0x130 [ 250.203406][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.205794][ T8928] ? folio_add_lru+0xc8/0x170 [ 250.231492][ T8928] ? filemap_add_folio+0x14d/0x2d0 [ 250.236666][ T8928] do_read_cache_folio+0x2b8/0x4d0 [ 250.241825][ T8928] ? down_read+0x79/0xe0 [ 250.246114][ T8928] read_cache_folio+0x54/0x90 [ 250.250834][ T8928] freader_get_folio+0x471/0x700 [ 250.255818][ T8928] freader_fetch+0xa4/0x590 [ 250.260369][ T8928] __build_id_parse+0x131/0x790 [ 250.265263][ T8928] ? build_id_parse_nofault+0x50/0x50 [ 250.270674][ T8928] ? futex_wake+0x63a/0x900 [ 250.275214][ T8928] ? find_vma+0xcd/0x110 [ 250.279498][ T8928] ? check_stack_object+0x107/0x140 [ 250.284747][ T8928] build_id_parse+0x2e/0x40 [ 250.289300][ T8928] procfs_procmap_ioctl+0x7f6/0xd10 [ 250.294540][ T8928] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 250.300303][ T8928] ? __fget_files+0x2c5/0x340 [ 250.305031][ T8928] ? bpf_lsm_file_ioctl+0xd/0x20 [ 250.310007][ T8928] ? security_file_ioctl+0x34/0xd0 [ 250.315171][ T8928] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 250.320932][ T8928] __se_sys_ioctl+0x132/0x1b0 [ 250.325665][ T8928] __x64_sys_ioctl+0x7f/0xa0 [ 250.330303][ T8928] x64_sys_call+0x1878/0x2ee0 [ 250.335021][ T8928] do_syscall_64+0x58/0xf0 [ 250.339479][ T8928] ? clear_bhb_loop+0x50/0xa0 [ 250.344193][ T8928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 250.350128][ T8928] RIP: 0033:0x7f774f98e929 [ 250.354595][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.365644][ T36] audit: type=1400 audit(250.358:9032): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 250.374236][ T8928] RSP: 002b:00007f77508b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.374267][ T8928] RAX: ffffffffffffffda RBX: 00007f774fbb5fa0 RCX: 00007f774f98e929 [ 250.374287][ T8928] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000007 [ 250.397366][ T306] hub 4-1:1.0: bad descriptor, ignoring hub [ 250.403874][ T8928] RBP: 00007f774fa10b39 R08: 0000000000000000 R09: 0000000000000000 [ 250.403896][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.414327][ T306] hub 4-1:1.0: probe with driver hub failed with error -5 [ 250.419856][ T8928] R13: 0000000000000000 R14: 00007f774fbb5fa0 R15: 00007ffebde5f8e8 [ 250.419887][ T8928] [ 250.445630][ T306] cdc_wdm 4-1:1.0: skipping garbage [ 250.448834][ T8928] Modules linked in: [ 250.448861][ T8928] CR2: fffffffffffffff1 [ 250.448882][ T8928] ---[ end trace 0000000000000000 ]--- [ 250.469433][ T306] cdc_wdm 4-1:1.0: skipping garbage [ 250.473160][ T8928] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 250.473199][ T8928] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba 97 fa 55 b0 <45> 03 53 f1 74 02 0f 0b 2e e8 a0 95 43 1e 41 89 c7 31 ff 44 89 fe [ 250.473223][ T8928] RSP: 0018:ffffc900018b7920 EFLAGS: 00010283 [ 250.515255][ T8928] RAX: ffffffff81bcb3b9 RBX: 0000000000000000 RCX: 0000000000080000 [ 250.523240][ T8928] RDX: ffffc90009de2000 RSI: ffffea0004d1f480 RDI: ffff8881185a0dc0 [ 250.531218][ T8928] RBP: ffffc900018b79e0 R08: ffffea0004d1f487 R09: 1ffffd40009a3e90 [ 250.539202][ T8928] R10: 00000000b055fa97 R11: 0000000000000000 R12: 1ffff92000316f28 [ 250.547178][ T8928] R13: 1ffffd40009a3e90 R14: ffffea0004d1f480 R15: 0000000000000000 [ 250.555167][ T8928] FS: 00007f77508b16c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 250.564095][ T8928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.570682][ T8928] CR2: fffffffffffffff1 CR3: 000000014475c000 CR4: 00000000003526b0 [ 250.578662][ T8928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.586639][ T8928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.594612][ T8928] Kernel panic - not syncing: Fatal exception [ 250.600818][ T8928] Kernel Offset: disabled [ 250.605159][ T8928] Rebooting in 86400 seconds..