last executing test programs: 2m36.392833705s ago: executing program 0 (id=1455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x800) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x55555ede6001) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000000000000291001c0"]) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(0xffffffffffffffff, 0x8010af78, &(0x7f0000000340)) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r8, &(0x7f0000000080), 0x2000011a) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x6) ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f0000000380)={0x2, 0xe}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000001400)=[@release], 0x0, 0x0, 0x0}) 2m34.287058887s ago: executing program 0 (id=1520): mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) unshare(0x62040200) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = syz_open_procfs(r5, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x1000c06, 0x0) r7 = gettid() r8 = syz_open_procfs(r7, &(0x7f0000000040)='timerslack_ns\x00') setsockopt$inet6_int(r6, 0x29, 0x6, &(0x7f0000000140)=0x6, 0x4) write$binfmt_format(r8, &(0x7f0000000180)='1\x00', 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 2m34.179084099s ago: executing program 0 (id=1526): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffe) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRES16, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES32]) unlink(&(0x7f0000000000)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x56) listen(r3, 0x5) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) timer_settime(0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003140)=""/4088, 0xff8}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000004580)=""/4068, 0xfe4}], 0x4}, 0x7}], 0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000680)={[], [{@pcr={'pcr', 0x3d, 0x23}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x73f0}}, {@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '&@@+'}}, {@euid_eq}, {@appraise_type}]}) r5 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x41, 0x90}, 0x77) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc0000001b0001002dbd7000fddbdf2500008000000000000000000000000000ac1e00010000000000000000119e9c66c88d4a6a890000040a0000803200000040c635b46298eb01d2fcbfaa5208764bedac678c9255272ef1f9ca7891d5ddfa5cd01cb5b59b9b59cce84470510fde504d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080000000000008000000000000000f8ffffffffffffffff01000000000000010000000000000009000000000000000900000000000000000000008015010002000000000000000100000000000000fd0000000000000004000000000000000700000000000000000002030000000029000000000000000c000800"], 0xcc}, 0x1, 0x0, 0x0, 0x4048000}, 0x8010) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) setresuid(0x0, 0xee01, 0x0) 2m33.321029666s ago: executing program 0 (id=1532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) getpid() syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fcntl$dupfd(r1, 0x0, r1) (async) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) socket$inet6_udplite(0xa, 0x2, 0x88) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x304}, "bb2a8cacc0c644f5", "dd5d58ded0c97fffdd3c23a8351aa016", "4dc85d6b", "1826eeedf6f902ba"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2m33.151787329s ago: executing program 0 (id=1539): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xffffffffeed6b53c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x70, 0x1e, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x59, 0x1, 0x0, 0x0, @str='/dev/rnlb0\x00\xe1\xb6y\xe7\xa3\xd3o\x8a\x84\xb7@~Z\xb4t\x87\x19\x87\xa6u\x80\xe4\x81\xad\xe7\xb4 \xc9\xcd\xd5o\xb6V\xc3\xebs\x8f\xba\xd5\xc4wm6\xb5\x85\xa2\x89<\fY\xc6K\xef[\xd0\x9a($R[C\x1d\x13/\x93\xea\x9f\xd1\xf8r\xca:\x88\x8d'}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_int(r0, 0x29, 0x16, 0x0, &(0x7f0000000180)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f0000000100)=0x8, 0x4) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) ioctl$ASHMEM_SET_NAME(r3, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0xe) 2m33.095548241s ago: executing program 0 (id=1545): openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0xffffffffffffff7f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) close_range(r0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ptrace(0x10, r2) (async) ptrace$cont(0x9, r2, 0xffffffffffffff7f, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) 2m31.411766694s ago: executing program 32 (id=1571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = gettid() tkill(r1, 0x7) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x2) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 64) prlimit64(r1, 0x5, &(0x7f0000000040)={0x4, 0x90}, 0x0) (rerun: 64) recvfrom(r2, &(0x7f0000000180)=""/24, 0x18, 0x3a002, &(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40a}}, 0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) (rerun: 32) 2m27.548935541s ago: executing program 4 (id=1634): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) recvmmsg$unix(r3, &(0x7f0000002000)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/164, 0xa4}, {&(0x7f0000000680)=""/97, 0x61}], 0x7, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/152, 0x98}, {&(0x7f0000001a80)=""/58, 0x3a}], 0x2, &(0x7f0000001b00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)=""/213, 0xd5}, {&(0x7f0000001cc0)=""/195, 0xc3}], 0x2, &(0x7f0000001e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/183, 0xb7}], 0x1}}], 0x4, 0x40000020, 0x0) (async) accept(r4, &(0x7f0000002100)=@llc, &(0x7f0000002180)=0x80) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCMIWAIT(r9, 0x545c, 0x7cb7562f2d67) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f00000021c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESOCT=r8]) 2m27.459029153s ago: executing program 4 (id=1637): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001ff000009090585cfa9"], 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2d, 0x0, 0x8f, 0xd, 0x5f, @empty, @remote, 0x1, 0x7800, 0x10, 0x81}}) sendfile(r0, r0, 0x0, 0x7ffff000) 2m27.409187774s ago: executing program 4 (id=1639): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) setresgid(0xee00, 0x0, 0x0) (async) write$FUSE_INIT(r0, &(0x7f00000003c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x2000, 0xa68d7c519f008ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x980, 0x8) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 2m27.315921146s ago: executing program 4 (id=1640): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141741, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffee5) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141741, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xb6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x40401, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30a) (async) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0xfffffee5) (async) 2m27.272364477s ago: executing program 4 (id=1642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 2m27.238894777s ago: executing program 4 (id=1643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') setresgid(0xee00, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f008ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x8) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 2m17.972995152s ago: executing program 33 (id=1545): openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0xffffffffffffff7f, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) close_range(r0, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xa5, 0x4) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) ptrace(0x10, r2) (async) ptrace$cont(0x9, r2, 0xffffffffffffff7f, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) 2m11.814905374s ago: executing program 34 (id=1643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000240)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) read$FUSE(r1, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000280)='id:\x00\x00\x00\x00') setresgid(0xee00, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f00000003c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000, 0xa68d7c519f008ff1, 0xffbc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000deff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x6, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x8) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) 2m3.090204078s ago: executing program 6 (id=1948): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002efffffab14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = dup(r3) connect$inet6(r4, &(0x7f0000008900)={0xa, 0x4e21, 0x1, @local, 0x7}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r2], 0x1c}}, 0x804) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000440)=0x10, 0x4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000200)={{0x33, @empty, 0x4e20, 0x2, 'ovf\x00', 0x0, 0x8001, 0x2f}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4e21, 0x2000, 0x0, 0x200, 0x5}}, 0x44) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) write(r6, &(0x7f0000000080)="f3505e3616a81197427cdfb5947064decb05d4f57fb35b85c67b1b09746c5771f44ef47eff0a0c8190ea4d24d7365e082a7890c27736d2b39d595b9e1ef2cd", 0x3f) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffe2, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x100, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd}, &(0x7f00000001c0)={0x0, 0x4b, 0x38}}}], 0x0, 0x0, 0x0}) 2m3.042856359s ago: executing program 6 (id=1949): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000001010100000000000000000a0000073c0001802c000180140003002e24676f00000000000000000000000114000400fe8000000000000000000000000000bb0c0002"], 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x24000000) close_range(r2, r6, 0x2) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="0c0100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000040000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000200002b000000fc00000000000000000000000000000000030000000000000300000000000000020000000000d8bebbae56f1829900000000000000000000000400000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e0001000000000008001f000300"/196], 0x10c}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x8002) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076657468315f746f5f627269646765000800030003"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x306, @remote}, 0xa8, {0x2, 0x4e24, @empty}, 'veth1_macvtap\x00'}) socket(0x2a, 0xa, 0x64d) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x567142, 0x0) readv(r9, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) 2m2.927842241s ago: executing program 6 (id=1950): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="a632d1428982a252324f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b9792739343bf80dbc4659935a61e2b9a7fe3a4a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e2fa27537ff5b9ee7f54d19f8a6d5dcc1711be704ea7424b04854aa7ea52a67f412b25168797edb27644d2b8356bedb99f1fbe00567f2438cb4f205ad8c0c91d75385b90c102000000000000002c8bcbe34f9411542cc837ee91388dc51b9c9e60a52da69045f95ade368dc4d145513ea2260dc86d637b44376576648e7adca3e283860d34b8bcb6d16aa39d00000000", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000440)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000300), 0x5b0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x12, r0, 0x0) read(r0, &(0x7f0000000340)=""/116, 0x74) 2m0.420540781s ago: executing program 6 (id=1959): r0 = syz_clone(0x20002000, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(r0, 0x0) (async) syz_pidfd_open(r0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESDEC=r0]) 2m0.349870273s ago: executing program 6 (id=1960): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) setns(0xffffffffffffffff, 0x24020000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x1, 0x13, 0xf8, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x7}, {0xfffffff9, 0x4006, 0xdb, 0x0, 0x0, 0xf6, 0x3, 0x8, 0x4, 0xff, 0x7, 0x3, 0x800000000000000}, {0xffffff01, 0x31, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe(0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x3, 0x3b4f, {{0x5, 0x4, 0x3, 0x18, 0x14, 0x65, 0xe0, 0x5, 0x2f, 0x0, @private=0xa010102, @private=0xa0100fd}}}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x60, &(0x7f0000000080)=[@efer={0x2, 0x5400}], 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r8 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r8, 0x7, 0x2, r8}) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) 2m0.210750275s ago: executing program 6 (id=1961): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xa, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x7f}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0xbcdb09002141c66d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000030000000400000000c5d60000000000000016000000000000009600000000000000ac0400000000080003000000f7ffffff"]) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0x47) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7, 0x151442) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000280)={0x1, 0x1, 0xc, 0x365f, 0x95, 0x9da3, &(0x7f00000001c0)="ec68887128611d62bbed63f5f26a16836a32a83d6a30eb0f26277edcace1c1c340dcf87f407783f8e61496e313e56000d14525f1bb7e77dc7a05af00eca803c44ea2cc0289ec2db57c137328d43b4e7078607f4b831ee9e561e4c0fdbbba8a4fd746450450fe7cfdafbde27312ee8cdb13675e2ebf5bd1c59e0a297a34d747f958c6373f94fbad3e25423717c1a20030e20c1b6c27"}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x20000000, 0x9) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f00000002c0)={0x4, {{0x2, 0x4e20, @local}}}, 0x88) socket$packet(0x11, 0x3, 0x300) 1m44.672054365s ago: executing program 35 (id=1961): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xa, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x7f}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x59) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000031c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0xbcdb09002141c66d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b08010001000b0904c8020103010203090504"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000030000000400000000c5d60000000000000016000000000000009600000000000000ac0400000000080003000000f7ffffff"]) setsockopt$inet6_tcp_TCP_ULP(r6, 0x29, 0x1f, 0x0, 0x47) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x7, 0x151442) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000280)={0x1, 0x1, 0xc, 0x365f, 0x95, 0x9da3, &(0x7f00000001c0)="ec68887128611d62bbed63f5f26a16836a32a83d6a30eb0f26277edcace1c1c340dcf87f407783f8e61496e313e56000d14525f1bb7e77dc7a05af00eca803c44ea2cc0289ec2db57c137328d43b4e7078607f4b831ee9e561e4c0fdbbba8a4fd746450450fe7cfdafbde27312ee8cdb13675e2ebf5bd1c59e0a297a34d747f958c6373f94fbad3e25423717c1a20030e20c1b6c27"}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) pwritev(r10, &(0x7f0000000180)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x20000000, 0x9) setsockopt$inet_MCAST_LEAVE_GROUP(r10, 0x0, 0x2d, &(0x7f00000002c0)={0x4, {{0x2, 0x4e20, @local}}}, 0x88) socket$packet(0x11, 0x3, 0x300) 1m32.621849455s ago: executing program 5 (id=2287): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x7, 0x6, "77c83d77"}]}}}], 0x18}}], 0x1, 0x46000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f00000000c0)="673ef3a60f1a270fc75a002e0f2243362ec7f806003e0f20120fc7ab6700660f388024260f0966b8ea0000000f23c80f21f866350000c0000f23f8", 0x3b}], 0x1, 0x40, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_mreq(r7, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m31.737211273s ago: executing program 5 (id=2290): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x600442, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m31.723024473s ago: executing program 5 (id=2291): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xa8083) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0xffff, {0x2a00, 0x80010000, 0x0, 0x0, 0x2000000000020, 0x0, 0x6, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x0, 0x1ff]}}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6e) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 1m31.663945134s ago: executing program 5 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)={0x38, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x18, 0x12, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x38}], 0x1}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r2, &(0x7f0000003000)={0x2020}, 0x2020) sendmmsg$inet(r2, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="66854692", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r4 = epoll_create(0x5) epoll_pwait2(r4, &(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={[0x1]}, 0x8) 1m31.638590005s ago: executing program 5 (id=2293): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') flistxattr(r0, &(0x7f0000000240)=""/159, 0x9f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) r2 = syz_open_procfs(0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) syz_clone(0x22822400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000000704050026bd7000fcdbdf250100000485203802c9293414bd800bc2c680721f2404c49374197d8af32e8973e75b7a8b5bd64b698090d2d1d164e79128c7981b861cd67635bc7d5c446c01551657"], 0x64}, 0x1, 0x0, 0x0, 0x24000020}, 0x80) readv(0xffffffffffffffff, &(0x7f00000006c0), 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0xc181, 0x6, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x3, 0x5, 0x8000000000000000, 0x6, 0x0, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x1, 0x10, 0x0, 0x8000007, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0xf, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @empty, 0xfffffe01}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_buf(r6, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)={0x28, 0x37, 0x200, 0x70bd2a, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="e4"}]}]}, 0x28}], 0x1}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000200)={[{@uid={'uid', 0x3d, 0xee00}}]}) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r7, 0x0, &(0x7f0000000b00)) pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 1m31.596591805s ago: executing program 5 (id=2294): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00') (async) fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x12) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.558901576s ago: executing program 36 (id=2294): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) (async) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) unshare(0x62040200) (async) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00') (async) fremovexattr(r3, &(0x7f0000000180)=@known='security.apparmor\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r4, 0x400, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x12) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x41) close_range(r0, 0xffffffffffffffff, 0x0) 44.607280761s ago: executing program 2 (id=3053): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x3e, 0x9, 0x8d, 0x5, 0xff, 0x3, 0x3, 0xfc, 0x2, 0x4, 0xad, 0x5}, {0x0, 0x43c, 0x9, 0x7, 0x0, 0x4, 0xde, 0x1, 0x6, 0x3, 0x2, 0x7, 0x80000001}, {0x7fffffff, 0x8, 0x8, 0xb3, 0x4, 0xeb, 0x8, 0x9, 0x10, 0xfc, 0x9, 0x7, 0x1}], 0x7f}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000300)={[{0x10001, 0x8, 0x1, 0x5, 0x2, 0x7, 0x4, 0x5, 0x4, 0x3, 0x2, 0x0, 0xd}, {0x2, 0x5, 0xca, 0x60, 0x7, 0x0, 0xf9, 0xc, 0x3, 0x7, 0x6, 0x2, 0x8}, {0x2, 0x1ff, 0x0, 0xf, 0x8, 0x1, 0x9, 0x1, 0x8, 0x4, 0x7f, 0x0, 0x5}], 0x5}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000200)={0x1, 0x100205, 0x7d}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r4, &(0x7f0000000340)="00bffdf63d", 0x5, 0xd1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='selinuxfs\x00', 0x325285c, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x80, 0x0, 0xa3b, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x48000}, 0x44890) 44.545587292s ago: executing program 2 (id=3054): open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r5, &(0x7f0000000680)='N', 0x1) splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f00003ac000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) 44.545220122s ago: executing program 2 (id=3055): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_NAME(0x35, &(0x7f0000000000)=""/4096) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpriority(0x1, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000210001000000000000000000fe8000000000000000000000000000bbac1e0001000000000000000000000000000000040000fffe0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000001e00000010000000000000000000000000a0100ff000000000000000000000000fe8000000000000000000000000000aa3c000000000000000a0002002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{&(0x7f0000000100)={0xa, 0x4e1e, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000001400)=ANY=[], 0x18}}], 0x1, 0x4000084) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 44.541509912s ago: executing program 2 (id=3056): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616eb5e698cdbee07050f1f92c0000646e73c3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x000000007fffffff,\x00']) utimes(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)={{0x0, 0x2710}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) write$P9_RLERRORu(r1, &(0x7f0000000440)={0x15, 0x7, 0x2, {{0x8, '&\'#:,!%\xbc'}, 0x7}}, 0x15) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"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"}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090040000000000000000000000003000600002000000200000000000020000000000000000002000100000004d300000502000000e0030005003c00000002"], 0x60}, 0x1, 0x7}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 44.541283502s ago: executing program 2 (id=3057): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) 44.491743173s ago: executing program 2 (id=3058): clock_getres(0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = dup(r2) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) 29.495106512s ago: executing program 37 (id=3058): clock_getres(0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = dup(r2) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}]}}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002a00)={0x14, 0x24, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r5, 0x40046205, 0x0) 10.179911207s ago: executing program 8 (id=3530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x50, 0x0, &(0x7f0000000180)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xa, 0x1, 0x3e}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/72, 0x48, 0x2, 0x400000000002e}, @fd}, &(0x7f0000000140)={0x0, 0x20, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20d500, 0x4) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000240)=0x2c) 10.02234512s ago: executing program 8 (id=3533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) getgid() r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0xc4802, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r2, 0x8004af80, &(0x7f0000000540)) setresuid(0x0, 0xee01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000200)={'sit0\x00', 0x0}) r4 = signalfd(r1, &(0x7f0000000180)={[0x4]}, 0x8) ioctl$TIOCNXCL(r4, 0x540d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="1c0000005e0001010000000000230000080041008e9de9bf7c5079af10283e"], 0x1c}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x138, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@flat=@weak_binder, @fda={0x66646185, 0x3, 0x1, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x40000000000001c}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/38, 0x26, 0x1, 0x13}, @flat=@weak_handle={0x77682a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x400}, @release={0x40046306, 0x3}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0xa, 0x20000000000000}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/27, 0x1b, 0x1, 0x6}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x1, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/77, 0x4d, 0x2, 0x403d}}, &(0x7f0000000680)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x44, 0x0, &(0x7f0000000b40)=[@transaction={0x400c630f, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.974523961s ago: executing program 8 (id=3534): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="14000007000007000002"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x404000c) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, 0x0, 0x8000) 9.954437181s ago: executing program 8 (id=3535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/200, 0xc8}, {&(0x7f0000000600)=""/209, 0xe3}], 0x3, 0x2, 0x1) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) set_robust_list(&(0x7f0000000100)={0x0, 0x4}, 0x18) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setreuid(0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mlockall(0x7) close_range(r0, 0xffffffffffffffff, 0x0) 9.887775132s ago: executing program 8 (id=3536): open(&(0x7f0000000040)='./file0\x00', 0x4100, 0x100) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x36, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10201, 0x3, 0x0, 0x1000, &(0x7f00003ac000/0x1000)=nil}) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) 9.874105903s ago: executing program 8 (id=3537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000140)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, r5, {0x5}}, 0x18) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 9.827606094s ago: executing program 38 (id=3537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockname$tipc(r2, &(0x7f00000000c0)=@name, &(0x7f0000000140)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000200)={0x18, 0xfffffffffffffffe, r5, {0x5}}, 0x18) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1f000) 7.391778442s ago: executing program 1 (id=3568): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x22) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') getsockopt(0xffffffffffffffff, 0x200000000114, 0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='\f', 0x5bc}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_bt_hci(r3, 0x800448d4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r9, 0x0, 0x25a5, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000540)={0x0}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000080)={r11, 0x1, r12}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x11, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 6.565018648s ago: executing program 1 (id=3574): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffff8000) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f00000000c0)=@l2tp6, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/219, 0xdb}], 0x5, &(0x7f0000000640)=""/95, 0x5f}, 0xc}, {{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000740)=""/146, 0x92}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f0000000a80)=""/132, 0x84}, {&(0x7f0000000b40)=""/87, 0x57}, {&(0x7f0000000bc0)=""/169, 0xa9}], 0x8}, 0x10000}, {{0xfffffffffffffffc, 0xfffffffffffffe8e, &(0x7f0000001040)=[{&(0x7f0000000d00)=""/193, 0xc1}, {&(0x7f0000001240)=""/74, 0x4a}, {&(0x7f0000000e80)=""/138, 0x8a}, {&(0x7f0000000f40)=""/182, 0xb6}, {&(0x7f0000001000)=""/42, 0x2a}, {&(0x7f0000001180)=""/156, 0x9c}, {&(0x7f0000001100)=""/53, 0x35}, {&(0x7f0000003440)=""/4108, 0x100c}], 0x8, &(0x7f0000002200)=""/239, 0xef}}], 0x4, 0x40000042, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, &(0x7f0000000080)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async, rerun: 32) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) fcntl$getown(r2, 0x9) (async) socket$inet(0x2, 0xa, 0x9) 6.545379339s ago: executing program 1 (id=3575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001200010028bd7000fadbdf2500000000000000000000ffffac0000000000000000000000e98aec7dce61c116e7fe83c7a2e1cdb6515c0a7c883cbc6b8e279b6cec1c9a17d65a4524a5e32905dc729f2ca84fb0d0cf6b90f4982fb38b0df69a8bb1b49a5233ca91b7e6783509c7ad158c68436906aafca617c7ebfec8790f1b53f6a56a266b82d2393f375fc03771f9a59e3c5548632e77cf89e70382a72de5fa4030485c9e931f4f5d122d4aa3937f16ec49"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x240048d0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x810, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0xa9, 0x280) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x1, 0x6, 0x16, 0x10, "206d4f91479cbf83790faf183320dd38901cb4b8b9a55746c9aa99d66079bd4ce5ddfcfb83e90c088814cf62f61078b568523400f705b00ef753632645afbb87", "d0c885e14c88d40b003b392a9a36685a9f4442084b1cd0803195aa715be908ff", [0x2, 0x7]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x8000000, 0xe, 0x4, 0x7, 0xe, 0x8, 0xd, 0x2, 0x70, 0x3f, 0x9}, {0x100000, 0x80a0000, 0xe, 0xc, 0x8, 0x44, 0x0, 0x8, 0x39, 0x2, 0x8, 0x74}, {0xffff1000, 0x6000, 0x0, 0x4, 0x10, 0x7, 0xc8, 0x0, 0x4, 0x3, 0x5, 0x4c}, {0x8000000, 0x5000, 0x8, 0xe, 0x81, 0x8, 0x3, 0x0, 0x7, 0x80, 0xfb, 0x7f}, {0xd000, 0x80a0000, 0x1, 0x4, 0x81, 0x7, 0x40, 0x4a, 0x3, 0x11, 0x5, 0x8}, {0x1, 0x0, 0xd, 0x2, 0xe0, 0x7, 0xc, 0x3, 0x0, 0x7f, 0x4, 0x8}, {0x8080000, 0x0, 0x0, 0x8d, 0x3, 0x4, 0x40, 0x5, 0x37, 0x10}, {0x4000, 0x10000, 0x10, 0x8, 0x4, 0x5, 0xb9, 0x0, 0x1, 0x8, 0x20, 0xf}, {0x10000, 0x5}, {0x8080000, 0xff2d}, 0x20, 0x0, 0x1000, 0x160004, 0xb, 0x3900, 0x6000, [0x5, 0x8000000000000001, 0x8, 0x7]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)=[@acquire_done], 0x0, 0x0, 0x0}) 6.49712949s ago: executing program 7 (id=3576): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x2, 0x4, 0x9, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0xb0}]}, 0x20}}, 0x84) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = add_key$fscrypt_v1(&(0x7f0000002280), &(0x7f00000022c0)={'fscrypt:', @desc2}, &(0x7f0000002300)={0x0, "2a4cea898139e0e0c019a74d3ea26dd02e4c241b97774cc682857eed746418339edb88181d7a65049884e401847aef386af7be95cb8e40e633ea34c59d08c962", 0x27}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0x0, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="240000001a000100210000c8067896250200fc003a2a5c247b00000008001b803a"], 0x24}], 0x1}, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x2d, 0x0, &(0x7f0000000080)) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r6, &(0x7f0000000240)='./file0/../file0\x00', r6, &(0x7f0000000280)='./file0\x00', 0x70) (async) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000026c0), &(0x7f0000002700)=0x4) (async) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 6.49560171s ago: executing program 1 (id=3579): tgkill(0x0, 0x0, 0x22) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001840)={0x0, 0x0}, &(0x7f0000001880)=0xc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001"], 0xb0}}], 0x2, 0x0) dup(r5) waitid(0x0, r0, &(0x7f0000000080), 0x137b9c0fa80d65b, &(0x7f0000000100)) ioprio_set$pid(0x1, r0, 0x2000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 6.49185389s ago: executing program 7 (id=3580): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xcb, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x4, 0x10, 0x4c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff}, [@extension_unit={0xb, 0x24, 0x8, 0x1, 0x2, 0x5, "fc8842ce"}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x2, 0x4, [0x7, 0x3, 0x2, 0x5], 0x2}, @feature_unit={0x9, 0x24, 0x6, 0x1, 0x5, 0x1, [0x8], 0x7f}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x1, 0x5, "38512d5457a5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x9, 0x7, "883834", "14f9"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xfc}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2c, 0x0, 0x40, {0x7, 0x25, 0x1, 0x0, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x10, 0x2, 0xec, 0x0, "181224d52e104c"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x94, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xba, 0x7, {0x7, 0x25, 0x1, 0x2, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x1, 0xd, 0x9, 0x40, 0x3}, 0x5b, &(0x7f0000000540)={0x5, 0xf, 0x5b, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "93b405962f0039d2f19f9b31a567062e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x3, 0x0, 0x2, 0xa4f, 0x7}, @generic={0x37, 0x10, 0x4, "b0436518ec4680c625aed236ca86685250e73609f0d002d60e7131271dcb471d96ad8f55055b7ef87e14d2d680f4254188a80339"}]}, 0x5, [{0xec, &(0x7f00000005c0)=@string={0xec, 0x3, "7435999f0995eff83759b1ffe24d02426fe6b417ef18345655e9fd3968592f1926ed6cde815723f0cdfe418f5b7e28b63d75fe20b70ed9ba9aa503769dc748006d229c2c5b01b3bb24dab4b086a39f3df2c94f4b24ac98d1de64f17bf031a7d8f0e75537e73a7f03a7421277dc71ee7abcb9f2d976d9af6f2222e50c384419b19e46b44aed3336cdd0ebb09324113fab13cb1c728d64623f062c6bf55f3ef209fee50880bca1a1e939e375d3616fa66a352ca3b710416d1b45337182d372bb4505f8fb234c921ea2a951106bdc127257cb47469c847891f56dcc676aeea17c6136d9d16d63b338cfe848"}}, {0x7d, &(0x7f00000006c0)=@string={0x7d, 0x3, "26975d590ee28e7460af3bd2afb06ac3caa315ef5397ab6c60c0651d3c8aebf8f0d168e321c202500f9e8ca5376362d8c9fc1dda228a2f60534886b79621a36d5517a15f21ccf96c6b1d8911010c0e39d80a9f7f705b6fc0671f9e2bdda1b0308cd783193f51da99d9a60e4f2671e5122a2a01fb1cabae4fb071ff"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x41e}}, {0x4f, &(0x7f0000000780)=@string={0x4f, 0x3, "635cd61ce8579f66cec1672fd871e38ab2f561f8a893873547bb3a4990cddd9a425c157114f005f0d418fdcc35e22774ac17c5454120643f908cf95c18e909ed0f7a44fbea71b1377e1d978c1a"}}, {0x4c, &(0x7f0000000800)=@string={0x4c, 0x3, "7e43940d5b2e286f71c14064d8fedaf7f4d4808410a6b878dfb67c9db0160e2bc977d03abe08ca905063825682f766da0b3f5553d3008eafe52875ff7e2a928953c766ebd000fd0d62a9"}}]}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000004580)=""/4096, 0x1000}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000dc0)=0x100) syz_usb_control_io$uac1(r1, &(0x7f0000000a40)={0x14, &(0x7f0000000900)={0x20, 0x6, 0x4a, {0x4a, 0x11, "21586c81005204a4917de328fd77cf53a5a8f381b03a7f90a76623797bc648c87ced13160318acde175c8b06b8eddc75006481b0480f22d7ea813adb45010c1db848e6ca921000c0"}}, &(0x7f0000000980)={0x0, 0x3, 0x91, @string={0x91, 0x3, "9a10b6130bc4e3a6055afcb2d19a35a2151091e1e5b4f90db656e0f6293f90e616e7e1ab6a043ab343398babe583834afef079c69e5dc92c38cab9a05bbc9c0928ab76bfd0c35d17208556ba81bda13409d15e25f7b5c3ff91b4c4af5b8e8507d6d57d9ce157f303307e1435a8b6daf1021eb224e4270b4d54fc574c9df1f627b07b3281b92dd91040ea74bfef8e55"}}}, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="400ae30000001155cfe035a4cd4a9a9435823004727fe0d564595ff04ae9a404f13373ddeed8511ec470e6ad9266a5d0fe776e1e6b0f801f60893451a1c0085c2c5099825e8a69c74910d82057ab0a6274c53feb5b8f822055aacddd300dabd0e270ae2d5f61d6792aacaee52edfba98f5681fb63723b1e288e572743341426b172b2dbcf01d553fef4d4474325dda521f1696c858ed0463189a8695573d1a2b6b5a516e172d5b16105bcd172fcaa13837703b88f12a866de7c60b23c8216e2073ce1798ee96c00aacc5590c34bafb139e1b9ef88286178b67f7ea3ba9953a6bdb504b65c5cf70f147"], &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c00)={0x20, 0x81, 0x3, "6a27d8"}, &(0x7f0000000c40)={0x20, 0x82, 0x2, "46fe"}, &(0x7f0000000c80)={0x20, 0x83, 0x1, 'z'}, &(0x7f0000000cc0)={0x20, 0x84, 0x3, "3f9442"}, &(0x7f0000000d00)={0x20, 0x85, 0x3, "9752f1"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@fda={0x66646185, 0x7, 0x1, 0x400}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/241, 0x0, 0x0, 0x3d}, @flat=@weak_handle={0x77682a85, 0x100b}}, &(0x7f0000000100)}, 0x2040}], 0xffaf, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0xfffffffffffffffd) 6.363763943s ago: executing program 1 (id=3581): setitimer(0x3, 0x0, 0x0) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x5, 0x2}}}}}]}}]}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, "ed"}, @global=@item_4={0x3, 0x1, 0x2, "2a9aad4f"}]}}, 0x0}, 0x0) syz_io_uring_setup(0x4e2a, &(0x7f0000000180)={0x0, 0x6499, 0x8000, 0x0, 0x354}, 0x0, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc5})\')&}*\xe9S\xe9\xaf\x9f\xb9\xc9\xce\xa55\x9d$]\xd0\x1e\xf5cM\xfaW\xd3m\x8d\xf4\x9c\xfalN\x9d\x05\x82\xed\'L0%\x89k\xc62+8U\xcb\xa7\x1c\x1e\xf8\xfb\xe9\x8b`H\xbf\"\xe0\xf1\x18y\x01eE\xec\xe6\x1el\xaaI\xf7\xe5\xba\xef\xcc\xa3\x1aO\x1c\xc3\xbei\xfcM\x05\xb1.e\x0f\xa8\x18\xa9G\n\x88\xe3\xe4\xfbKN\x7f\xb9\x02\xbfM\x10\x1e1\xed\xfdU\xfd\xaf/`\xeeHl\x86\x17S\xfc\xda\xe5\xf6\xb9\x82\x81vg\xf1Z\x84\xfc\n\xcb\x1a\x9f\x04', 0x3a, '', 0x3a, './file0'}, 0xbf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0xd, 0x3, 0xba52, 0x4000804, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x4, 0x1, 0xde, 0x8, 0x4, 0x1, 0x199d, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4000ffd, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0x200, 0x3, 0x0, 0x5, 0x1, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c33, 0x1, 0x8, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x2c2, 0x3], [0x401, 0x7554, 0xffff, 0xcd4, 0x7, 0x20, 0x6, 0x4, 0xb, 0x10, 0x5, 0xd, 0xe88, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x0, 0x4, 0xf, 0x9, 0xfffffffc, 0x5, 0x20000080, 0x3, 0x9, 0x47, 0x2, 0x80000003, 0x4, 0xf, 0xffffffff, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x4, 0x3, 0x88, 0x2, 0x6, 0x0, 0x50, 0x20000002, 0x75f, 0x1, 0x402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x8, 0x4, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x0, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x1, 0x200, 0x7, 0x6, 0x0, 0x5, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8955, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x84, 0x2, 0x0, 0x0, 0x22) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x36) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000080)='.-\x00') 4.845306633s ago: executing program 1 (id=3588): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x60e082ca, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000004200)="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", 0xe01}], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c1454cf507"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008850}, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) splice(r9, &(0x7f0000000200)=0x3, r0, &(0x7f0000000240)=0xfffffffffffffffd, 0xa, 0x6) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000740)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) 3.48046379s ago: executing program 7 (id=3599): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/37, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000040)={0x1, 0x1, 0x0, &(0x7f0000000580)=""/106, 0x0}) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x180}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x9, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000100)=0xfffffffc, 0x4) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/139, 0x8b}, 0x10020) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) pipe2$9p(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="58e8da48e298e23b3e600000400700000044240c2dde755a94a341a616ba1b27d3084cfe06e7e9a123932e771283ab5775975aff515f4c17a5373612ce8c1b5f45fe0e85d5f4ac3f4a9363f0e6407f776b535951c8cff25fc642b3772b198b851c1ac6b9ccae3085dd94fe88af4117a205e10263413ca912f8e43eb29427569e6ccb352d3ce484446052f7f4dbc21e96a4d5d53da34319dfcf029d0d57cf37ef19be0c3b4045d74b6c8c343957f295fdba8c6b84fca6b295f910e774238a267b358127db54beeff82210c17b8a86f9fd2c02582c3cc442faa03b23ff4228c1230151ebefccab6a0c541fd000"/250], 0x38}}], 0x78c, 0x46000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x3, 0x3a) close_range(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 3.423927071s ago: executing program 7 (id=3600): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x40000000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @loopback, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000000)={0x1}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) listen(r3, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0xffffffff, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/191, 0xbf, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.423353661s ago: executing program 7 (id=3601): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x301342, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00000524060001"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000844) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffff8000) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x33, 0x0, &(0x7f0000d23000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 2.930085781s ago: executing program 3 (id=3602): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010226bddf250c0000000400038018000180"], 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)={0x4, 0x0, [{0x1, 0x2, 0x2, 0x9, 0x4, 0x6, 0x401}, {0x80000000, 0x4, 0x1, 0x1, 0x80000000, 0xb3, 0x80000000}, {0xc0000000, 0x4, 0x6, 0x70ea61e6, 0xd, 0x5, 0x5}, {0xd, 0x6, 0x6, 0x3ff, 0xff, 0xfffffffa, 0x3}]}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000380)={0x5, 0x20, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) socket(0x11, 0x4, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x94b7777fd1709e3a, 0xffffffffffffffff, 0x2fde4000) close_range(r1, 0xffffffffffffffff, 0x0) 2.883263022s ago: executing program 3 (id=3603): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3000000, &(0x7f00000004c0)={[{@nfs_export_on}, {@redirect_dir_nofollow}]}) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000900)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1000000000007) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x8c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40c0}, 0x5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 2.819871643s ago: executing program 3 (id=3604): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000965d06403e131508667e0102030109021b0001000000000904000000ff872800090505f1ff00"], 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) socketpair(0xf, 0xa, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x1, 0x4, 0x0, 0x5}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x41, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) clock_gettime(0x766293fdc5a3d1b3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30) close_range(r0, 0xffffffffffffffff, 0x0) 1.819844643s ago: executing program 9 (id=3608): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0x200a00500, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) (async, rerun: 64) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff8100000008004500001800670000392f"], 0x6a) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async, rerun: 32) connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.45890907s ago: executing program 3 (id=3609): r0 = open(&(0x7f0000000140)='./file0\x00', 0x22edc0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmod0000100000,user_id=\x00'/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)=@x86={0x5, 0x1a, 0x1, 0x0, 0x3b8, 0x3, 0x7c, 0x5, 0x8, 0x3, 0x5, 0x2, 0x0, 0xc03a, 0x7b, 0x6, 0x1b, 0x4, 0x9, '\x00', 0x9, 0x20006}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r5, &(0x7f0000000540)="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", 0x142) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="0f0966b9800000c00f326635000800000f306667f0f653c5ba4000e1c10a730a7309670f07650f23e5f30f97200fc779f20f78770b", 0x33}], 0x1, 0x51, 0x0, 0x3c) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)={{0x4, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r8 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r8], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89b0, &(0x7f0000000a40)={'ip6_vti0\x00', 0x0}) read$FUSE(r1, &(0x7f0000007780)={0x2020, 0x0, 0x0}, 0x2066) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r9, {0x7, 0x1f, 0x20, 0x34808531, 0x7, 0xfffd, 0x3, 0x4, 0x0, 0x0, 0x10, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1, &(0x7f0000000740)=0x0) io_submit(r11, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x2, 0x0, r10, &(0x7f0000000100)='!', 0x1, 0x3000000000000000}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 927.917561ms ago: executing program 9 (id=3610): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0xb090e000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000240)=0xff, 0x4) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0xb090e000) (async) 921.367451ms ago: executing program 9 (id=3611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r2, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_TSC_KHZ_vm(r3, 0xaea2, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x7, 0x7, 0x2009, 0x7}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x5, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x20000000, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ab, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) pause() futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 398.491381ms ago: executing program 7 (id=3612): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0x57d, 0x3, 0x3ff, 0x240}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) (async) r2 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x121000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000380)="364af4f0e1f0f48c3a"}) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}}) 186.302016ms ago: executing program 3 (id=3613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="22ecdfbf2c4b8cc5d27d2c48c2102efbd9a4e55022eeea48965d01", @ANYBLOB="2fe42dbbb11c7ec8fe061f104eb3dd592298b5a39ea179b31eb0755a21569940da09b056301edef1ef93f45ec98156a217dc87027f9bc1917f43ccd11b43a270c9060ac8a7151dbed78386aa7bc0a19440d18678ea"], 0xfdef) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = inotify_init() ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x400) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x1a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="3500000005000000"], 0x35) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r11, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x15, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x138, r11, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xb4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xde97}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x94}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r12 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) write$cgroup_subtree(r12, &(0x7f0000000400)=ANY=[], 0x31) setsockopt$MRT_TABLE(r12, 0x0, 0xcf, &(0x7f0000000040)=0xfffffffd, 0x4) 63.740968ms ago: executing program 3 (id=3614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x5, 0x9, 0x0, 0xc, 0x0, 0x70bd26, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x3, @loopback, 0xbbc3}}, @sadb_sa={0x2, 0x1, 0xffffff7d, 0xb0, 0x0, 0x1, 0x1, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x60}}, 0x84) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000003400)=[@cpuid={0x14, 0x18, {0x1, 0x4}}, @wr_crn={0x46, 0x20, {0x0, 0xff}}, @wr_drn={0x6e, 0x20, {0x5, 0x1ff}}, @out_dx={0xaa, 0x28, {0xadd6, 0x4, 0x100000001}}, @out_dx={0xaa, 0x28, {0xe179, 0x3, 0x5}}, @cpuid={0x14, 0x18, {0x7, 0xfffffffb}}, @in_dx={0x82, 0x20, {0xfa0b, 0x7}}, @cpuid={0x14, 0x18, {0x6, 0x2}}, @rdmsr={0x32, 0x18, {0x88b}}, @uexit={0x0, 0x18, 0x1}, @uexit={0x0, 0x18, 0x4}, @in_dx={0x82, 0x20, {0x1526}}, @cpuid={0x14, 0x18, {0x7aa7, 0x1}}, @rdmsr={0x32, 0x18, {0xaf1}}, @code={0xa, 0x6c, {"0f01f8b8010000000f01d966baf80cb87838bc8eef66bafc0c66b8189866efd10cf8c744240037010000c7442402eafb7b07ff2c24c4a131f10dba3a0000650f01d1c422d19e3e66baf80cb827919286ef66bafc0cec66450f233f"}}, @out_dx={0xaa, 0x28, {0x618a, 0x4, 0x6}}, @code={0xa, 0x58, {"66440f38f86876c483315c6200bd450f01cb0fc79d00000000c441d5fa1d0900000036450f22c10f07660fe88479d700000066baf80cb8a4001c85ef66bafc0cedc4c1f9514ef9"}}, @uexit={0x0, 0x18, 0x3}, @wrmsr={0x1e, 0x20, {0x9dd, 0xfffffffffffffff0}}, @code={0xa, 0x77, {"66ba200066ed48b80080ffffffffffff0f23d80f21f835c00000900f23f80f20c035000000800f22c048b80c000000000000000f23c00f21f835010006000f23f866baf80cb8ad35bb8fef66bafc0cec0f07640f01c8c4e2150aedc4c22dbc0a660fdb7cfd88"}}, @out_dx={0xaa, 0x28, {0x7b47, 0x7, 0x4}}, @code={0xa, 0x4f, {"c4e2ed3db521000000c48289972f0fc73bc44259081066baf80cb826ecb188ef66bafc0cecf3450fffeb460f01c96564f3400f01b7106e00000f01c344ad"}}, @wr_drn={0x6e, 0x20, {0x0, 0x7}}, @in_dx={0x82, 0x20, {0x24d0, 0x3}}, @in_dx={0x82, 0x20, {0x4876, 0x1}}], 0x402}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0x80a0000}) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x14, 0x1e, 0xc20bc6c7745b97d7, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x6400c041}, 0x9080) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$FIONCLEX(r0, 0x5450) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2) 63.354618ms ago: executing program 9 (id=3615): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000000c0)={0x7fff, 0x3}) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x8001, @none}, 0xe) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x16, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0xb) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000240)="3900000013000347007831456ee5543f01000000010021c371314bf38f1d5d8af9aa1e1ca500005600000025000000190004000479e9fd", 0x37}], 0x1) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000240)) writev(r3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) io_destroy(0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x302) r6 = dup(r5) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$ASHMEM_SET_NAME(r7, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000340)={0xff, {{0x2, 0x4e20, @broadcast}}}, 0x88) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[]) 38.275669ms ago: executing program 9 (id=3616): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000000102e10400000000000000000a000000300001802c00018014000300fe80000000000000fb"], 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) syz_clone(0x80000, &(0x7f0000000100), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="1d3e2e7bfae6f928b719d932934fe14515c203144e0ad979118f66b21dfdf6c3a8e742eca9793664f715baf129093a118db5f418e9dfec2054f42b9b2a44bfe6459aad081d1a8f021434e6a80450e5a8f81244de39c93bcd193af430494e9f2bdd3a63abfbb7287a29a3036f60237674e92c8c9580a079228c0b72978fd9d5a5d4f292f134e95e0e94489d135144b220f9d8653e7cb08b24a7") (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x2, 'syzkaller1\x00', {0x8b90}, 0xb}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x4c, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x100}, @flat, @flat=@weak_handle={0x77682a85, 0x230a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 0s ago: executing program 9 (id=3617): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x31, 0x8, 0x7f, 0x0, 0x1e000000, 0xffffffff, "7d08bd785067737754f567dcfd9e3a823b3636663f1b8cfabbb87fe523ee73a21a8ff263a4e003d610145f14bfa7ddea95"}}, 0x149) r0 = socket$inet6(0xa, 0x800, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="d01c430fcb2474027736dc9b90fd017ac1f2264251188b31908d65bb27645b1dc80f70fa108bd7e4bbc3d8ca2fc9c2472008f761258619bc9c19b3a1b0dd3e849d4a5b463f364b4aee210b2f7cccb3793f0c7d8ccca42cb721735d9941219b466b7413b1", 0x64}, {&(0x7f0000000200)="cc0a6908b8fcb12e6909b7f0cea820d05f51bf7f8b591c0902bc55eb5c0ba8e3778218b121092d6841c7161dd6097634e0fe6c4d629939f3aa4060912a339bec56250cd476db5adbcaa3c232cec8750993e8d56d626e079fabd3155c5ec2d924516307f803140c74eee90664b8245ead626eae79c96f6bf3a91bacc080e4628d1431598e9e5a3262515c7baa253fac9c085eaad11a23069f3a4f7d0178a68938c9f1980d50400531", 0xa8}, {&(0x7f00000002c0)="b9105b2cc3bb96b08d0575eebc7f399e832616d7dffbc20d0997cfee96243bd0364d1e0ff4a1844a906deb0e65", 0x2d}, {&(0x7f0000000300)="9575c79c3be61256c48ec91efee3f8c1be6748652b8c818b61b31f951c7202bc7257f9410aced780a82daba99c0950b9473b87fb11f568d725708609d941f70cee882de96ab4d4a535797c13ae90d2fee6588404c9ff98fe7b0aa89a216d65644ac86dd1a9c6b85581a7444fe89219dd6073a0b9ccb3e4f045e268acc91a2f7e6701f3c03f474acf7ca2d308e88ea429e119b86a9f8cd42881a429a512bbeeb094f18f101405dfc5f28bcf5b48c764", 0xaf}, {&(0x7f00000003c0)="2dc33191606045c7d6024e1c37dc9a2ec5b33de7d17396098af08aeab4aecf32f6af47b019590b85a5356c0e4fcb683b4c92632afbb23d87c02d6da2a227112541a6c9439fa211dfa8e34daae3e3ad21e32b7263ff1f287110e927bfb4c6ddae8c83d9b46859eef7728982ce003b", 0x6e}, {&(0x7f0000000440)="bd68a2c35d26f1b0200fdd6528ffc46f85729b5b3c3bcf9107c76419c0b457c75fdfccb941a2543a4850fa49ef6e130f46a606ce8747e656bb974cda2e44268fcf4fb720a42ef7d65b136079e2f0176c9a88cb3a15eec3c9df9554062c8e206d4985d61deca842949716d2d2204c1021c31f9006c95ad5bfdd0ba5e48f86ecc29ce122a4854a8ad291e7dad1", 0x8c}, {&(0x7f0000000500)="67c4f012722c278cc5c3058928f60564091919579d35d62121b1cdf2df69ab62a3ce4725bd3ed505112a9b5eff100d920c1b00aab8125c209119245514b4848d9af9f5d1d9747bacf2b4d7884f63a7f587cfbbfb9c2e416b110b35aa268d09edce7f33d10ed13a4b77af24773cb63f8438c54cca4d75a92ffca4dbb0fcb94c2db65078ff5350629be06d9f487be84f169b4f8034a965d40abe272b023450", 0x9e}, {&(0x7f00000005c0)="bb00641749ae8d629febcea9df6436b04a2db85c92151004559f900e99958c8cba5cd04281584d8cf2cd151deb39ea587668604be3429a6c65e9e50e4e67151b7e3feead425d2e4c6dd80ddfc0a879f98c78f3353c43d7e86e6ddea3cae80af08b9b7a21208ff2", 0x67}], 0x8, &(0x7f00000006c0)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x87, 0xd, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x3, 0x55, "1e66896aa61dd6cdfd48e3183fcdeaccfc70476a9f22e21591f539e1a90ef9b83f88e02ac5fcaca8d4d239b785c6a3d51206a9a5139daeffd497cb004b073a7b3c6480d1d4b9b9611b5ce2f5186e60276c87c0bbce"}, @pad1, @ra={0x5, 0x2, 0x2}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @dstopts={{0x218, 0x29, 0x37, {0x6, 0x3f, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x0, [0x4, 0x8000000000000001]}}, @generic={0x3, 0x92, "20d7ba447cee0bd20fe6e271f2fed91e00833fbbbe778a5e9f94878df1b989fe95124b89889a87239fcbdf222249f45c1f2e6973096e9bcf333e1cb0a970ca12c49c86b2d4a133ca02a6c2a52e75fb4bf82f4f9797769d6822fc4ed4b7c09f92467b7c22999380ba480ce7f177d93f42bb1f4f17654d3854782e2f32418ff8dbc5be56b79d4b71025c4af4a9d7efa3aceaea"}, @generic={0x80, 0xbd, "578c6342721c5b4f0fa087199e9ccf0ecdec62dece4d591cc48917ad7ea61e8e470dd78dc17101be58c60f0dc3a33269e5dbeed311ff50330316ca3b5207d533225f9ce83124431baaecefd76199e9339ef55134292d7880798c688abec6df00f18e92b5eb54e82d3ccad7a0d65fa51783966077612f4e1926558724b5f89cefd0407231ab2cd1bd8b326e9b019b55d40bc5b606544b0bbb7b852c76371f58170cd972c2f3af6f910453760de44b1c8d334bf8f0ffbb29709171fbcd36"}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0xe, [0x2, 0x7]}}, @ra={0x5, 0x2, 0x94a8}, @generic={0x2, 0x56, "10abb20ac5562f925a2d471f7119aff19d5ec5375018db36a8589e27f80ff4f74267b819bd78fd58ef6de90ee97c16f9bdc2f283b71d62362965d52a3374652c2a2c9d1003b1bcd059e26872d0019638c34e40d24542"}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x81, 0x81, [0xac]}}, @jumbo={0xc2, 0x4, 0x20000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @dstopts={{0x30, 0x29, 0x37, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x378}}], 0x1, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) getpeername$packet(r0, &(0x7f0000000b00)={0x11, 0x0, 0x0}, &(0x7f0000000b40)=0x14) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000b80)=0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000cc0)={&(0x7f0000000bc0)=""/231, 0xe7, 0x9, 0x8ec2}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000d00)={r0, 0xfff, 0x5, 0x2}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x30, r2, 0xb92ea000) fstat(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xc4, r5, 0x108, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ed}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3af}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]]}, 0xc4}}, 0x8000) write$uinput_user_dev(r2, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x9, 0x4000, 0x5}, 0x42, [0x9, 0x1, 0x3ff, 0x200, 0x584, 0xfffffff8, 0x3, 0x4, 0x7, 0x6, 0xfffffcc1, 0x0, 0x7, 0x7f, 0x9, 0x10000, 0xc39, 0x5, 0x8, 0x6, 0x6, 0x2858f9d9, 0xc, 0x1, 0x2, 0x7f, 0x5, 0x6e9, 0x9, 0x5, 0x10, 0x2, 0x0, 0xfffffffe, 0x6, 0x4, 0x9, 0x9, 0x8, 0x1, 0x1ff, 0x3, 0x1, 0x7, 0x200, 0x3ff, 0x0, 0x2, 0x6, 0x8, 0x101, 0x4, 0x4, 0x45, 0x8, 0x1, 0x6, 0x1ff, 0xc70, 0x2, 0xd, 0x6, 0x6, 0x9], [0xc5, 0x3, 0x3, 0x54, 0x3, 0xff0, 0x2, 0x5, 0x7, 0x6, 0x0, 0x379c, 0x7, 0xf, 0xe, 0xd, 0x800, 0x10001, 0x5, 0x0, 0xeda, 0x6, 0x3, 0x1ff, 0x7f, 0x1, 0x400, 0x0, 0x9, 0xfff, 0x9, 0x7, 0x9, 0xa8, 0x4, 0x1ff, 0x3, 0x0, 0x10000, 0x44, 0xd3f, 0x1, 0x8, 0x5, 0x8bc, 0x0, 0x9, 0x7, 0xe7, 0x7, 0x7, 0x1, 0xff, 0x9, 0x80, 0x4, 0x3, 0x6, 0xc8, 0x4, 0x3, 0x401, 0xf59, 0x40], [0x94, 0x7, 0x887, 0x100, 0x3, 0x0, 0x0, 0x4, 0x7, 0x6, 0x3, 0x28, 0x14, 0x7, 0x4, 0x7, 0x92, 0x1, 0x38, 0x7, 0x9, 0x4, 0x81, 0x1, 0x7, 0x80000000, 0x8, 0x1, 0x6, 0xf, 0xff, 0x6, 0x7, 0x8, 0x0, 0x1, 0x6, 0x9, 0x401, 0xb, 0xc6, 0x1, 0x10000, 0x3, 0x2, 0x2, 0x8a, 0x0, 0xffffff0f, 0xd5cf, 0x985, 0x2, 0x0, 0x7, 0x9, 0x4, 0x7, 0xb9d, 0xffffffff, 0x0, 0x8cbf, 0x5, 0x8, 0x9], [0x9, 0x1f, 0x1e0c7705, 0x3, 0x200, 0xffff421e, 0x5, 0xd, 0x7fffffff, 0x7, 0x80, 0xf55, 0x80000000, 0x8, 0x7, 0x3, 0xfffffff7, 0x8e7, 0x8, 0xffff, 0x5, 0x2, 0x3, 0x3, 0x7, 0x5, 0xff, 0x60e, 0x7f, 0xba, 0x2, 0x1, 0x99ca, 0x2, 0xe, 0x9, 0x5, 0x1, 0x3ff, 0x1, 0xffff, 0x9, 0x37b, 0x5, 0x7, 0xb480, 0x5, 0x0, 0x9bf, 0x8000000, 0x80000000, 0x80, 0xc3b, 0x7, 0xfff, 0x8, 0x6600, 0xdbfd, 0x0, 0x6, 0x6, 0x7, 0x5, 0x1928]}, 0x45c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'syzkaller1\x00', 0x10}) r6 = dup(r2) r7 = accept$packet(r6, &(0x7f0000001480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000014c0)=0x14) accept$packet(r7, 0x0, &(0x7f0000001500)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001580), r2) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00000015c0)={@dev, 0x0}, &(0x7f0000001600)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001780)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xcc, r9, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) read$FUSE(r2, &(0x7f00000017c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r0, &(0x7f0000003800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000003880)=[r4, r4]) stat(&(0x7f00000038c0)='./file0\x00', &(0x7f0000003900)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000003980)=[r4, r4, r4, r4, r4]) write$FUSE_DIRENTPLUS(r6, &(0x7f00000039c0)={0x338, 0x0, r11, [{{0x4, 0x0, 0x9, 0x95, 0x686, 0xf, {0x1, 0x8000, 0xd, 0x9, 0xc, 0x3, 0x8, 0x80, 0x7f, 0xa000, 0x3, r3, r13, 0x8, 0x2}}, {0x0, 0x2, 0x7, 0xf, '^\\})6O%'}}, {{0x5, 0x3, 0x80, 0x2000000000, 0x7ff, 0xafc3, {0x5, 0x7ff, 0x8, 0x4, 0x8000000000000000, 0x5, 0x90, 0xfd27, 0x4, 0x4000, 0x7, r3, r14, 0x8, 0x2}}, {0x0, 0x1, 0x2, 0x7, '\'*'}}, {{0x2, 0x1, 0x2, 0x7, 0xffff, 0x6, {0x1, 0x7, 0x8, 0xc00, 0xacb, 0x6b7cfd77, 0x2f, 0x126, 0x6, 0x2000, 0x8001, r15, r4, 0xfff, 0x5}}, {0x4, 0x1e0, 0x3, 0x1, '-($'}}, {{0x5, 0x1, 0x4, 0x7, 0x7, 0x8, {0x4, 0x2, 0x944, 0x1, 0x71, 0x2714, 0x863, 0x6000, 0x9, 0x6000, 0x8, r3, r4, 0x8, 0x8}}, {0x1, 0x80, 0x3, 0x9, '!(]'}}, {{0x3, 0x1, 0x3bae, 0x6, 0x7, 0x0, {0x3, 0xffffffffffffff96, 0xfffffffffffffffc, 0x1, 0x7, 0xe, 0x3ff, 0x5, 0x4, 0xc000, 0x8, r3, r16, 0x80000000, 0xf}}, {0x3, 0x7, 0xa, 0xffff, '#),^,#!]{/'}}]}, 0x338) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000003e00)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x50, r9, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x50}}, 0x4804) getpgid(r12) kernel console output (not intermixed with test programs): puts found [ 163.979948][ T6859] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 163.979988][ T6859] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:263 [ 164.057892][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.074415][ T6863] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.081538][ T6863] bridge_slave_0: entered allmulticast mode [ 164.087963][ T6863] bridge_slave_0: entered promiscuous mode [ 164.094750][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.102302][ T6863] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.109857][ T6863] bridge_slave_1: entered allmulticast mode [ 164.116262][ T6863] bridge_slave_1: entered promiscuous mode [ 164.136814][ T884] usb 4-1: USB disconnect, device number 16 [ 164.189095][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.196198][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.203474][ T6863] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.210539][ T6863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.229864][ T6875] fuse: Bad value for 'user_id' [ 164.234881][ T6875] fuse: Bad value for 'user_id' [ 164.240782][ T6875] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 164.242057][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.258274][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.269034][ T2060] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.276158][ T2060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.285639][ T2057] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.292740][ T2057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.320339][ T6863] veth0_vlan: entered promiscuous mode [ 164.331745][ T6863] veth1_macvtap: entered promiscuous mode [ 164.508885][ T36] audit: type=1400 audit(1759008713.495:48027): avc: denied { lock } for pid=6884 comm="syz.7.2150" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 164.613551][ T6893] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 165.057945][ T6896] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 165.058311][ T6895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154 [ 165.065058][ T6895] rust_binder: 154: no such ref 0 [ 165.383740][ T338] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.433759][ T46] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 165.523735][ T338] usb 4-1: device descriptor read/64, error -71 [ 165.586350][ T46] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 165.595559][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.603579][ T46] usb 6-1: Product: syz [ 165.608002][ T46] usb 6-1: Manufacturer: syz [ 165.612621][ T46] usb 6-1: SerialNumber: syz [ 165.763776][ T338] usb 4-1: device descriptor read/64, error -71 [ 166.003775][ T338] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 166.030378][ T6909] syz.7.2158: attempt to access beyond end of device [ 166.030378][ T6909] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 166.043673][ T6909] EXT4-fs (loop7): unable to read superblock [ 166.143785][ T338] usb 4-1: device descriptor read/64, error -71 [ 166.383724][ T338] usb 4-1: device descriptor read/64, error -71 [ 166.494771][ T338] usb usb4-port1: attempt power cycle [ 166.566770][ T6914] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2160'. [ 166.834530][ T338] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 166.854921][ T338] usb 4-1: device descriptor read/8, error -71 [ 166.911873][ T46] rtl8150 6-1:1.0: couldn't reset the device [ 166.918064][ T46] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 166.984957][ T338] usb 4-1: device descriptor read/8, error -71 [ 167.223752][ T338] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 167.244730][ T338] usb 4-1: device descriptor read/8, error -71 [ 167.374758][ T338] usb 4-1: device descriptor read/8, error -71 [ 167.485443][ T338] usb usb4-port1: unable to enumerate USB device [ 167.626399][ T6939] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 167.634624][ T6939] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 168.156671][ T6961] binder: Unknown parameter 'context[7' [ 168.156907][ T6962] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 168.168534][ T338] usb 6-1: USB disconnect, device number 25 [ 168.194731][ T6964] rust_binder: Error while translating object. [ 168.194782][ T6964] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 168.201060][ T36] audit: type=1400 audit(1759008717.185:48028): avc: denied { create } for pid=6965 comm="syz.3.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 168.226109][ T6964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 168.247454][ T6972] random: crng reseeded on system resumption [ 169.085983][ T7009] 9pnet: Could not find request transport: xen [ 169.092450][ T7009] futex_wake_op: syz.7.2192 tries to shift op by 144; fix this program [ 169.121814][ T7013] rust_binder: Write failure EINVAL in pid:21 [ 169.121815][ T7011] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=54004 sclass=netlink_xfrm_socket pid=7011 comm=syz.2.2193 [ 169.141318][ T7014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 169.141596][ T7015] rust_binder: Write failure EINVAL in pid:21 [ 169.301559][ T7031] rust_binder: Write failure EFAULT in pid:37 [ 169.521983][ T7042] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 169.528263][ T7042] rust_binder: Error while translating object. [ 169.537520][ T7042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.543758][ T7042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 169.643727][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 169.674033][ T7045] bridge_slave_1: left allmulticast mode [ 169.679742][ T7045] bridge_slave_1: left promiscuous mode [ 169.685891][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.694048][ T7045] bridge_slave_0: left allmulticast mode [ 169.699949][ T7045] bridge_slave_0: left promiscuous mode [ 169.706069][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.154777][ T46] rust_binder: 7053: removing orphan mapping 0:112 [ 170.183727][ T337] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 170.333997][ T337] usb 6-1: Using ep0 maxpacket: 8 [ 170.341061][ T337] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 170.352314][ T337] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 56 [ 170.362233][ T337] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 170.373600][ T337] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.382735][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.390782][ T337] usb 6-1: Manufacturer: 늖 [ 170.395623][ T337] usb 6-1: SerialNumber: ఄ [ 170.602939][ T7052] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 171.003720][ T884] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 171.163749][ T884] usb 4-1: Using ep0 maxpacket: 16 [ 171.170865][ T884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 171.182988][ T884] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 171.193064][ T884] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 171.204588][ T884] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.213710][ T884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.221726][ T884] usb 4-1: Product: 勒ꬻ뺓蹀䅏䬆如鶭蟫螚縋淋嚭땀遠퀹メꛤ휛허垵鿉飃䏋핍㺤੡뀍귤쑸⓸魛ꪵ뢃Ⴂ몘ㅒ姉蓾䳜ᐴ瞐䷸庽뗶䶮뢯䜜㼔圓ﯶᾔퟫ㼭ౡ嵏ឤ웷㙂퉦䉫ﯨᄙ [ 171.245411][ T884] usb 4-1: Manufacturer: ࡃ [ 171.250061][ T884] usb 4-1: SerialNumber: 丝률ㅅ篽⻐飮㓋๖鷮繩﫚룏产涷뤈橭︄隸⊕Ⳛಔ⒊ะ闑㯥糒榱ର꼘✏輑表軆羌浺佾삋ㆱ夤 [ 171.292586][ T7078] incfs: Error accessing: ./file0. [ 171.297956][ T7078] incfs: mount failed -20 [ 171.308019][ T7078] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2215'. [ 171.473283][ T884] cdc_ncm 4-1:1.0: bind() failure [ 171.479929][ T884] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 171.486802][ T884] cdc_ncm 4-1:1.1: bind() failure [ 171.493154][ T884] usb 4-1: USB disconnect, device number 21 [ 172.192519][ T7101] netlink: 'syz.3.2223': attribute type 58 has an invalid length. [ 172.204240][ T7101] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 172.243775][ T7103] __vm_enough_memory: pid: 7103, comm: syz.3.2224, bytes: 18014402804453376 not enough memory for the allocation [ 172.288191][ T7107] rust_binder: Write failure EINVAL in pid:322 [ 172.603787][ T338] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 172.764842][ T338] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 172.773099][ T338] usb 4-1: config 0 has no interface number 0 [ 172.779410][ T338] usb 4-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 172.788632][ T338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.797564][ T338] usb 4-1: config 0 descriptor?? [ 172.900929][ T337] cdc_ncm 6-1:1.0: bind() failure [ 172.907644][ T337] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 172.914717][ T337] cdc_ncm 6-1:1.1: bind() failure [ 172.923409][ T337] usb 6-1: USB disconnect, device number 26 [ 172.928399][ T7129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 172.949110][ T7133] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 172.958459][ T7133] rust_binder: Error while translating object. [ 172.970601][ T7133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 172.976984][ T7133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:173 [ 173.005679][ T338] usb 4-1: string descriptor 0 read error: -71 [ 173.021573][ T338] usb 4-1: bad CDC descriptors [ 173.027483][ T338] usb 4-1: USB disconnect, device number 22 [ 173.194136][ T7139] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 173.218346][ T2060] tipc: Resetting bearer [ 173.242863][ T7142] rust_binder: Write failure EFAULT in pid:49 [ 173.261721][ T7144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.275124][ T2060] tipc: Disabling bearer [ 173.288617][ T7144] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 173.355014][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'. [ 173.367691][ T7149] netlink: 'syz.2.2240': attribute type 4 has an invalid length. [ 173.382938][ T7149] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2240'. [ 173.392318][ T2060] tipc: Left network mode [ 173.398560][ T2060] veth1_macvtap: left promiscuous mode [ 173.404342][ T2060] veth0_vlan: left promiscuous mode [ 173.528391][ T7158] can0: slcan on ttyS3. [ 173.533430][ T7158] rust_binder: Read failure Err(EAGAIN) in pid:331 [ 173.534130][ T7158] rust_binder: pid 7158 performed invalid decrement on ref [ 173.626052][ T7157] can0 (unregistered): slcan off ttyS3. [ 173.657123][ T7174] rust_binder: 333: no such ref 0 [ 173.691885][ T7179] syz.3.2246 (7179): /proc/7178/oom_adj is deprecated, please use /proc/7178/oom_score_adj instead. [ 173.878495][ T36] audit: type=1400 audit(1759008722.865:48029): avc: denied { execute } for pid=7190 comm="syz.5.2247" path="/dev/binderfs/binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.965193][ T7195] rust_binder: Write failure EINVAL in pid:184 [ 174.345476][ T7216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 174.351966][ T7216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:337 [ 174.478463][ T7218] binder: Unknown parameter 'stes' [ 174.712688][ T7234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.712907][ T7234] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 174.732991][ T7236] rust_binder: Failed copying remainder into alloc: EFAULT [ 174.741157][ T7236] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 174.748783][ T7236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 174.757428][ T7236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:358 [ 174.766028][ T7238] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 174.785001][ T7239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.812758][ T7243] can: request_module (can-proto-0) failed. [ 174.820153][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2268'. [ 174.858975][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2269'. [ 174.868067][ T7249] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2269'. [ 174.877297][ T7249] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 174.934527][ T36] audit: type=1400 audit(1759008723.925:48030): avc: denied { accept } for pid=7261 comm="syz.3.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 174.963214][ T7263] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.988483][ T7255] netlink: 'syz.5.2271': attribute type 27 has an invalid length. [ 175.003264][ T7255] rust_binder: Error in use_page_slow: ESRCH [ 175.003283][ T7255] rust_binder: use_range failure ESRCH [ 175.009381][ T7255] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 175.014951][ T7255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.022970][ T7255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:199 [ 175.065714][ T7265] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2274'. [ 175.203696][ T66] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 175.333769][ T66] usb 4-1: device descriptor read/64, error -71 [ 175.573761][ T66] usb 4-1: device descriptor read/64, error -71 [ 175.816536][ T7291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 175.823708][ T66] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 175.963755][ T66] usb 4-1: device descriptor read/64, error -71 [ 176.079796][ T7300] rust_binder: Write failure EFAULT in pid:210 [ 176.213720][ T66] usb 4-1: device descriptor read/64, error -71 [ 176.333863][ T66] usb usb4-port1: attempt power cycle [ 176.673740][ T66] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 176.694905][ T66] usb 4-1: device descriptor read/8, error -71 [ 176.824900][ T66] usb 4-1: device descriptor read/8, error -71 [ 176.917086][ T7308] rust_binder: Write failure EFAULT in pid:216 [ 177.075188][ T2060] bridge_slave_1: left allmulticast mode [ 177.087434][ T66] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 177.095104][ T2060] bridge_slave_1: left promiscuous mode [ 177.100784][ T2060] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.108915][ T2060] bridge_slave_0: left allmulticast mode [ 177.114741][ T2060] bridge_slave_0: left promiscuous mode [ 177.120408][ T2060] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.128710][ T66] usb 4-1: device descriptor read/8, error -71 [ 177.229926][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.237060][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.244258][ T7313] bridge_slave_0: entered allmulticast mode [ 177.250667][ T7313] bridge_slave_0: entered promiscuous mode [ 177.257815][ T2060] veth1_macvtap: left promiscuous mode [ 177.263335][ T2060] veth0_vlan: left promiscuous mode [ 177.274838][ T66] usb 4-1: device descriptor read/8, error -71 [ 177.311108][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.318404][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.325593][ T7313] bridge_slave_1: entered allmulticast mode [ 177.331946][ T7313] bridge_slave_1: entered promiscuous mode [ 177.383832][ T66] usb usb4-port1: unable to enumerate USB device [ 177.396006][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.403114][ T7313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.410453][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.417542][ T7313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.439834][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.447440][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.457319][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.464427][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.473953][ T2057] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.481030][ T2057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.508432][ T7313] veth0_vlan: entered promiscuous mode [ 177.520166][ T7313] veth1_macvtap: entered promiscuous mode [ 177.762622][ T7334] can0: slcan on ptm1. [ 177.824872][ T7334] can0 (unregistered): slcan off ptm1. [ 178.831883][ T7382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.831917][ T7382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:374 [ 178.832211][ T36] audit: type=1400 audit(1759008727.815:48031): avc: denied { create } for pid=7381 comm="syz.3.2305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 179.007969][ T36] audit: type=1400 audit(1759008727.995:48032): avc: denied { ioctl } for pid=7389 comm="syz.3.2309" path="socket:[38748]" dev="sockfs" ino=38748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 179.089513][ T7414] overlayfs: missing 'workdir' [ 179.237007][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2326'. [ 179.294865][ T7458] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 179.294896][ T7458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 179.302863][ T7458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:391 [ 179.414175][ T7463] rust_binder: Write failure EFAULT in pid:395 [ 179.419046][ T36] audit: type=1400 audit(1759008991.396:48033): avc: denied { write } for pid=7461 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.751957][ T7474] veth0: entered promiscuous mode [ 179.805761][ T7473] veth0: left promiscuous mode [ 180.082745][ T36] audit: type=1400 audit(1759008992.056:48034): avc: denied { map } for pid=7483 comm="syz.3.2342" path="socket:[37622]" dev="sockfs" ino=37622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 180.126584][ T2057] Bluetooth: hci0: Frame reassembly failed (-84) [ 180.448121][ T7507] overlayfs: failed to clone upperpath [ 180.974567][ T7515] rust_binder: 7514 RLIMIT_NICE not set [ 182.173984][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.174772][ T1280] Bluetooth: hci0: command 0x1003 tx timeout [ 182.971486][ T7532] rust_binder: Fixups oob 165 172 361 173 [ 182.971507][ T7532] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 182.978330][ T7532] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 182.986944][ T7532] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 183.025572][ T7531] /dev/rnullb0: Can't open blockdev [ 183.098164][ T7541] rust_binder: Error while translating object. [ 183.098211][ T7541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 183.104553][ T7541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:37 [ 183.235354][ T7551] sit0: entered promiscuous mode [ 183.254620][ T7551] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 183.262399][ T7551] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2364'. [ 183.355294][ T7557] rust_binder: got new transaction with bad transaction stack [ 183.355322][ T7557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:436 [ 183.371091][ T46] rust_binder: 7555: removing orphan mapping 0:8 [ 183.429204][ T2057] Bluetooth: hci0: Frame reassembly failed (-84) [ 183.447770][ T7577] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 184.008713][ T36] audit: type=1400 audit(1759008995.986:48035): avc: denied { mounton } for pid=7587 comm="syz.2.2375" path="/281/file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.067769][ T36] audit: type=1400 audit(1759008995.986:48036): avc: denied { write } for pid=7587 comm="syz.2.2375" name="file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.090513][ T36] audit: type=1400 audit(1759008995.986:48037): avc: denied { open } for pid=7587 comm="syz.2.2375" path="/281/file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.114465][ T7590] tipc: Enabling of bearer rejected, failed to enable media [ 184.124917][ T36] audit: type=1326 audit(1759008995.986:48038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.2375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x0 [ 184.295409][ T7592] tipc: Enabled bearer , priority 0 [ 184.302278][ T7593] tipc: Enabling of bearer rejected, already enabled [ 184.312278][ T7593] tipc: Disabling bearer [ 184.400846][ T36] audit: type=1400 audit(1759008996.376:48039): avc: denied { nlmsg_read } for pid=7594 comm="syz.3.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 184.503397][ T7602] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 184.953184][ T7634] overlayfs: failed to clone upperpath [ 185.453784][ T1280] Bluetooth: hci0: command 0x1003 tx timeout [ 185.453784][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.523948][ T46] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 185.611473][ T7664] syz.2.2400 (7664): attempted to duplicate a private mapping with mremap. This is not supported. [ 185.634292][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 185.643287][ T7667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2401'. [ 185.654838][ T7667] 9pnet_fd: Insufficient options for proto=fd [ 185.664086][ T7667] overlayfs: failed to clone lowerpath [ 185.674744][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 185.685956][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 185.699343][ T46] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 185.708855][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.719288][ T46] usb 4-1: config 0 descriptor?? [ 185.726974][ T7644] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.738938][ T46] usbhid 4-1:0.0: can't add hid device: -22 [ 185.746952][ T46] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 185.903225][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2417'. [ 186.096712][ T46] usb 4-1: USB disconnect, device number 27 [ 186.374362][ T7729] rust_binder: 85: no such ref 0 [ 186.379538][ T7729] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 186.387131][ T7729] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 186.407369][ T7731] devpts: called with bogus options [ 186.438493][ T7735] loop7: detected capacity change from 0 to 16384 [ 186.577990][ T7743] loop7: detected capacity change from 16384 to 0 [ 186.584669][ C0] I/O error, dev loop7, sector 12288 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 2 [ 186.685914][ T7753] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 186.685936][ T7753] rust_binder: Error while translating object. [ 186.694865][ T7753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.701095][ T7753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 186.713746][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 186.883704][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 186.889916][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.900899][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 186.910867][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 186.922107][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.931233][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.939278][ T9] usb 4-1: Product: у [ 186.943380][ T9] usb 4-1: Manufacturer: 辥ﮮ썍ް䒷写铋奧텨⟼ﵓ䤁鏿린坬࠙⚉䞴嫕ྲྀﷴ鶢⟈̥䝊כֿ旬倲繃ᑠ鉶ﶮ㭜聀뾮薂遻뷩笄ཛྷɔ崾収腴ꍊꆘ䉱餕鶎椡⍇⫒緟禕嶎Ȿ峇衟揥ㄢ燛ꂙ克㭍⭒缙忣팆ꥷ闆ሐ젂ṟℌ괘糬갵龹猵ܠ罄옆骛⨐ૢ泉嵁ィ䎓ὡ먽㨎厸 [ 186.975155][ T9] usb 4-1: SerialNumber: ࠄ [ 187.182359][ T36] audit: type=1400 audit(1759008999.160:48040): avc: denied { write } for pid=7736 comm="syz.3.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 187.201870][ T7758] fuseblk: Unknown parameter '&d' [ 187.226120][ T7762] overlayfs: failed to resolve './file1/file0': -20 [ 187.402764][ T7779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.403195][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.421819][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.437929][ T9] cdc_ncm 4-1:1.0: bind() failure [ 187.444364][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 187.451602][ T9] cdc_ncm 4-1:1.1: bind() failure [ 187.456874][ T7785] random: crng reseeded on system resumption [ 187.475004][ T9] usb 4-1: USB disconnect, device number 28 [ 187.594945][ T7792] netlink: 'syz.7.2444': attribute type 12 has an invalid length. [ 187.606251][ T7792] rust_binder: validate_parent_fixup: new_min_offset=21, sg_entry.length=0 [ 187.606280][ T7792] rust_binder: Error while translating object. [ 187.615168][ T7792] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.621901][ T7792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106 [ 187.663313][ T7794] rust_binder: Got transaction with invalid offset. [ 187.672702][ T7794] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.679617][ T7794] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 187.718206][ T7798] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 187.741844][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2448'. [ 187.758874][ T7800] bridge_slave_1: left allmulticast mode [ 187.764888][ T7800] bridge_slave_1: left promiscuous mode [ 187.773240][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.781290][ T7800] bridge_slave_0: left allmulticast mode [ 187.791895][ T7800] bridge_slave_0: left promiscuous mode [ 187.795035][ T7804] 9pnet_fd: Insufficient options for proto=fd [ 187.798081][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.823708][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 187.854393][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.864095][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.873992][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.883420][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.892732][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.902080][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.911838][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.921310][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.930668][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.940144][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.949480][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.958739][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.968028][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.973711][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 187.977311][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 187.983677][ T9] usb 4-1: config 1 interface 0 altsetting 77 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.991566][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.002942][ T9] usb 4-1: config 1 interface 0 altsetting 77 bulk endpoint 0x82 has invalid maxpacket 1023 [ 188.011844][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.021891][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 188.038560][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.038877][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.047831][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.065129][ T9] usb 4-1: SerialNumber: syz [ 188.065519][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.078432][ T7790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.087312][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.097812][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.107241][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.116502][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.125918][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.135261][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.144691][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.154052][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.163349][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.172809][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.182856][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.192304][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.201658][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.211068][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.220456][ T7809] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 188.292506][ T7785] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.439145][ T2045] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.489059][ T7827] cgroup2: Unknown parameter 'appraise' [ 188.493733][ T36] audit: type=1400 audit(1759009000.470:48041): avc: denied { write } for pid=7826 comm="syz.8.2457" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.633045][ T7837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2460'. [ 188.701688][ T7846] overlayfs: failed to resolve './file1/file0': -2 [ 188.709144][ T7846] overlayfs: failed to clone upperpath [ 188.720787][ T9] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 189.267164][ T7865] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=80 sclass=netlink_xfrm_socket pid=7865 comm=syz.2.2466 [ 189.271200][ T7866] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=80 sclass=netlink_xfrm_socket pid=7866 comm=syz.2.2466 [ 189.305880][ T7868] wg0: entered allmulticast mode [ 189.325115][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.333824][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.342443][ T337] usb 4-1: USB disconnect, device number 29 [ 189.349321][ T337] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 190.224843][ T36] audit: type=1400 audit(1759009002.210:48042): avc: denied { create } for pid=7919 comm="syz.3.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 190.260916][ T7922] fuse: Bad value for 'fd' [ 190.494412][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.500643][ T1280] Bluetooth: hci0: command 0x1003 tx timeout [ 190.972466][ T36] audit: type=1400 audit(1759009002.950:48043): avc: denied { accept } for pid=7936 comm="syz.2.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 191.626850][ T7971] netlink: 228 bytes leftover after parsing attributes in process `syz.8.2492'. [ 191.636618][ T36] audit: type=1400 audit(1759009003.620:48044): avc: denied { append } for pid=7970 comm="syz.8.2492" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 191.661282][ T7971] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 191.675236][ T7973] rust_binder: 81: no such ref 3 [ 191.688365][ T7973] rust_binder: 81: no such ref 0 [ 191.745539][ T7973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.745568][ T7973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 191.755337][ T7973] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 191.771685][ T7973] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 191.785515][ T330] rust_binder: 7972: removing orphan mapping 0:8 [ 191.798650][ T7976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.798679][ T7976] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.810268][ T36] audit: type=1326 audit(1759009003.790:48045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.843728][ T36] audit: type=1326 audit(1759009003.790:48046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.849937][ T7981] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 191.867503][ T7981] rust_binder: Error while translating object. [ 191.873224][ T36] audit: type=1326 audit(1759009003.790:48047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.876288][ T7981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.882837][ T36] audit: type=1326 audit(1759009003.790:48048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.906883][ T7983] 9pnet_fd: Insufficient options for proto=fd [ 191.915823][ T36] audit: type=1326 audit(1759009003.790:48049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.938882][ T7981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 191.945366][ T36] audit: type=1326 audit(1759009003.790:48050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 191.970291][ T7984] SELinux: security_context_str_to_sid (sytem_uGйaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa) failed with errno=-22 [ 191.977883][ T36] audit: type=1326 audit(1759009003.790:48051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.2.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7fc00000 [ 193.141167][ T8011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8011 comm=syz.3.2506 [ 193.338160][ T8048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2521'. [ 193.344012][ T8049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2521'. [ 193.574088][ T8060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 193.574116][ T8060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:134 [ 193.584191][ T8061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.798476][ T8072] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2528'. [ 193.822865][ T8074] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2528'. [ 193.865109][ T8077] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 193.883519][ T8079] kernel read not supported for file /policy (pid: 8079 comm: syz.7.2530) [ 193.929510][ T8087] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2532'. [ 194.250332][ T8108] 9pnet_fd: Insufficient options for proto=fd [ 194.790498][ T8154] overlayfs: failed to clone upperpath [ 194.796514][ T8154] overlay: ./file0 is not a directory [ 195.097347][ T8172] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2562'. [ 195.935839][ T8197] overlayfs: failed to clone upperpath [ 196.902571][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 196.902589][ T36] audit: type=1326 audit(1759009008.880:48116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8224 comm="syz.3.2578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x0 [ 196.998409][ T8238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 196.998444][ T8238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:164 [ 197.036656][ T36] audit: type=1400 audit(1759009009.020:48117): avc: denied { mount } for pid=8242 comm="syz.7.2584" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 197.092011][ T8247] usb usb9: usbfs: process 8247 (syz.7.2586) did not claim interface 47 before use [ 197.102545][ T8247] rust_binder: 168: no such ref 0 [ 197.183820][ T8250] rust_binder: Error while translating object. [ 197.183887][ T8250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 197.190115][ T8250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:170 [ 198.050683][ T8319] overlayfs: failed to clone upperpath [ 198.096959][ T8326] tmpfs: Unsupported parameter 'mpol' [ 198.114879][ T36] audit: type=1400 audit(1759009010.100:48118): avc: denied { audit_write } for pid=8330 comm="syz.2.2613" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 198.147033][ T36] audit: type=1326 audit(1759009010.130:48119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8335 comm="syz.2.2615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253e98eec9 code=0x0 [ 198.315865][ T8344] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2618'. [ 199.083105][ T8369] fuse: Bad value for 'group_id' [ 199.088215][ T8369] fuse: Bad value for 'group_id' [ 199.113986][ T8372] tipc: Enabling of bearer rejected, failed to enable media [ 199.212487][ T8384] 9pnet_fd: Insufficient options for proto=fd [ 199.343888][ T36] audit: type=1326 audit(1759009011.330:48120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8407 comm="syz.2.2637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f253e98eec9 code=0x0 [ 199.479565][ T8412] rust_binder: 8411 RLIMIT_NICE not set [ 199.808106][ T8443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 200.109926][ T36] audit: type=1400 audit(1759009012.090:48121): avc: denied { write } for pid=8461 comm="syz.8.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 200.149322][ T8467] rust_binder: Error while translating object. [ 200.149376][ T8467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 200.155678][ T8467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:167 [ 200.178226][ T36] audit: type=1400 audit(1759009012.160:48122): avc: denied { remount } for pid=8468 comm="syz.8.2656" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 200.232020][ T8476] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8476 comm=syz.8.2659 [ 200.244696][ T8476] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2659'. [ 200.290878][ T8483] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 200.438726][ T8488] rust_binder: 8487 RLIMIT_NICE not set [ 200.439584][ T8488] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 200.458817][ T8492] netlink: 'syz.8.2665': attribute type 2 has an invalid length. [ 200.473213][ T8492] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2665'. [ 200.720123][ T36] audit: type=1326 audit(1759009012.700:48123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8513 comm="syz.2.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7ffc0000 [ 200.745543][ T36] audit: type=1326 audit(1759009012.700:48124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8513 comm="syz.2.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x7ffc0000 [ 200.772342][ T36] audit: type=1326 audit(1759009012.710:48125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8513 comm="syz.2.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f253e98eec9 code=0x7ffc0000 [ 201.001660][ T8548] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 201.009999][ T8548] rust_binder: Write failure EINVAL in pid:176 [ 201.455454][ T8579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2696'. [ 201.935750][ T8603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2707'. [ 201.962176][ T8607] GUP no longer grows the stack in syz.7.2706 (8607): 200000001000-200000c01000 (200000000000) [ 201.972697][ T8607] CPU: 1 UID: 0 PID: 8607 Comm: syz.7.2706 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 201.972741][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.972771][ T8607] Call Trace: [ 201.972781][ T8607] [ 201.972792][ T8607] __dump_stack+0x21/0x30 [ 201.972846][ T8607] dump_stack_lvl+0x10c/0x190 [ 201.972881][ T8607] ? __cfi_dump_stack_lvl+0x10/0x10 [ 201.972916][ T8607] ? find_vma+0xcd/0x110 [ 201.972940][ T8607] ? cgroup_rstat_updated+0x132/0x7f0 [ 201.972977][ T8607] ? stack_depot_save_flags+0x38/0x800 [ 201.973007][ T8607] dump_stack+0x19/0x20 [ 201.973039][ T8607] __get_user_pages+0x1e34/0x22d0 [ 201.973072][ T8607] ? __kasan_check_write+0x18/0x20 [ 201.973115][ T8607] ? down_read_killable+0x79/0xf0 [ 201.973140][ T8607] ? populate_vma_page_range+0x230/0x230 [ 201.973172][ T8607] ? unwind_get_return_address+0x51/0x90 [ 201.973205][ T8607] __gup_longterm_locked+0xcb1/0x1580 [ 201.973241][ T8607] ? stack_depot_save_flags+0x38/0x800 [ 201.973270][ T8607] gup_fast_fallback+0x12ae/0x14a0 [ 201.973302][ T8607] ? __kasan_kmalloc+0x96/0xb0 [ 201.973330][ T8607] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 201.973355][ T8607] ? refill_pi_state_cache+0xaa/0x220 [ 201.973385][ T8607] ? do_futex+0x330/0x500 [ 201.973410][ T8607] ? x64_sys_call+0x227f/0x2ee0 [ 201.973448][ T8607] ? do_syscall_64+0x58/0xf0 [ 201.973489][ T8607] ? get_user_pages_fast_only+0xc0/0xc0 [ 201.973524][ T8607] get_user_pages_fast+0x73/0xb0 [ 201.973557][ T8607] get_futex_key+0x24d/0x930 [ 201.973583][ T8607] ? __cfi_get_futex_key+0x10/0x10 [ 201.973607][ T8607] ? __asan_memset+0x39/0x50 [ 201.973648][ T8607] ? refill_pi_state_cache+0x147/0x220 [ 201.973678][ T8607] futex_requeue+0x21c/0x12e0 [ 201.973707][ T8607] ? plist_del+0x3e3/0x400 [ 201.973738][ T8607] ? __kasan_check_write+0x18/0x20 [ 201.973777][ T8607] ? __cfi_futex_requeue+0x10/0x10 [ 201.973809][ T8607] ? find_vma_intersection+0xd9/0x140 [ 201.973832][ T8607] ? down_read+0x79/0xe0 [ 201.973853][ T8607] ? __cfi_down_read+0x10/0x10 [ 201.973876][ T8607] ? __kasan_check_write+0x18/0x20 [ 201.973913][ T8607] do_futex+0x330/0x500 [ 201.973938][ T8607] ? __cfi_do_futex+0x10/0x10 [ 201.973964][ T8607] ? vm_mmap_pgoff+0x145/0x4e0 [ 201.973987][ T8607] __se_sys_futex+0x28f/0x300 [ 201.974014][ T8607] ? __x64_sys_futex+0x110/0x110 [ 201.974043][ T8607] ? __kasan_check_write+0x18/0x20 [ 201.974103][ T8607] __x64_sys_futex+0xe9/0x110 [ 201.974130][ T8607] x64_sys_call+0x227f/0x2ee0 [ 201.974167][ T8607] do_syscall_64+0x58/0xf0 [ 201.974194][ T8607] ? clear_bhb_loop+0x50/0xa0 [ 201.974218][ T8607] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 201.974254][ T8607] RIP: 0033:0x7fcc3db8eec9 [ 201.974282][ T8607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.974303][ T8607] RSP: 002b:00007fcc3ea3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 201.974336][ T8607] RAX: ffffffffffffffda RBX: 00007fcc3dde6090 RCX: 00007fcc3db8eec9 [ 201.974355][ T8607] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000200000000340 [ 201.974373][ T8607] RBP: 00007fcc3dc11f91 R08: 0000000000000000 R09: 0000000000000002 [ 201.974388][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.974405][ T8607] R13: 00007fcc3dde6128 R14: 00007fcc3dde6090 R15: 00007ffffe483fb8 [ 201.974427][ T8607] [ 202.000772][ T36] kauditd_printk_skb: 38 callbacks suppressed [ 202.000793][ T36] audit: type=1326 audit(1759009013.960:48164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8610 comm="syz.2.2709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x0 [ 202.868285][ T8628] netlink: 'syz.7.2715': attribute type 2 has an invalid length. [ 203.532648][ T8649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 203.532688][ T8649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:196 [ 203.563265][ T8659] rust_binder: 8659 RLIMIT_NICE not set [ 203.573090][ T8659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 203.579345][ T8659] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 203.589246][ T8659] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:198 [ 203.606885][ T337] rust_binder: 8658: removing orphan mapping 0:1048 [ 203.748149][ T8681] random: crng reseeded on system resumption [ 203.972367][ T8681] random: crng reseeded on system resumption [ 204.007103][ T8686] rust_binder: Failed to allocate buffer. len:18446744073709551272, is_oneway:false [ 204.007134][ T8686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 204.016597][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:217 [ 204.026747][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 204.037042][ T8686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 204.171920][ T8697] netlink: 'syz.2.2739': attribute type 2 has an invalid length. [ 204.902674][ T8709] rust_binder: validate_parent_fixup: new_min_offset=24, sg_entry.length=0 [ 204.902696][ T8709] rust_binder: Error while translating object. [ 204.911401][ T8709] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.917683][ T8709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222 [ 205.382882][ T8737] fuse: Bad value for 'fd' [ 205.388869][ T8738] fuse: Bad value for 'fd' [ 206.299336][ T36] audit: type=1326 audit(1759009018.280:48165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.2.2768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f253e98eec9 code=0x0 [ 206.738285][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2773'. [ 206.761264][ T8790] fuse: Bad value for 'group_id' [ 206.766271][ T8790] fuse: Bad value for 'group_id' [ 206.874813][ T8793] rust_binder: Write failure EINVAL in pid:199 [ 206.874970][ T8793] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 206.889976][ T8793] rust_binder: Write failure EINVAL in pid:199 [ 207.125282][ T8807] bpf: Bad value for 'mode' [ 207.165951][ T8816] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 207.873812][ T8851] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2794'. [ 208.149229][ T8876] 9pnet_virtio: no channels available for device ./file0 [ 208.223847][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.233580][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.301896][ T8889] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 208.302172][ T8889] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:234 [ 208.566808][ T8905] sock: sock_timestamping_bind_phc: sock not bind to device [ 208.767788][ T8916] binder: Unknown parameter 'smackfsfloor' [ 208.815675][ T36] audit: type=1400 audit(1759009020.800:48166): avc: denied { name_bind } for pid=8927 comm="syz.2.2820" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 208.877564][ T8935] 9pnet_fd: Insufficient options for proto=fd [ 209.722797][ T8956] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 209.731656][ T8956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 209.987737][ T36] audit: type=1400 audit(1759009021.970:48167): avc: denied { listen } for pid=8958 comm="syz.3.2832" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 210.916647][ T9023] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 210.941114][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2854'. [ 211.044979][ T9040] can: request_module (can-proto-0) failed. [ 211.348819][ T9042] overlayfs: workdir and upperdir must reside under the same mount [ 211.376799][ T9047] rust_binder: Failed to allocate buffer. len:4248, is_oneway:true [ 211.376826][ T9047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 211.384860][ T9047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:240 [ 211.407422][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.411088][ T9042] __vm_enough_memory: pid: 9042, comm: syz.7.2858, bytes: 18014402804453376 not enough memory for the allocation [ 211.416653][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.435016][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.441451][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.447945][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.454427][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.460923][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.467699][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.474546][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.481225][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.488231][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.494889][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.501487][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.508226][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.514944][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.521462][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.528249][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.534920][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.541709][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.548545][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.555320][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.561825][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.568603][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.578849][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.587469][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.594237][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.600809][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.607592][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.613899][ T36] audit: type=1107 audit(1759009023.580:48168): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 211.614573][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.643812][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.654790][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 211.666819][ T9050] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.196864][ T9070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2868'. [ 212.212989][ T9070] loop7: detected capacity change from 0 to 16384 [ 212.278589][ T9079] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9079 comm=syz.7.2868 [ 212.283599][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 212.302421][ T9080] 0{X: left promiscuous mode [ 212.313752][ T9080] bridge0: port 2(30{X) entered disabled state [ 212.322893][ T9080] bridge_slave_0: left allmulticast mode [ 212.333698][ T9080] bridge_slave_0: left promiscuous mode [ 212.339418][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.423922][ T9079] loop7: detected capacity change from 16384 to 0 [ 212.430713][ C1] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.543444][ T9099] binder: Bad value for 'stats' [ 212.561034][ T9101] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 212.643881][ T9105] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 212.643910][ T9105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:256 [ 212.658711][ T337] rust_binder: 9104: removing orphan mapping 0:8 [ 212.686283][ T9110] 9pnet_fd: Insufficient options for proto=fd [ 212.820548][ T9116] tipc: Started in network mode [ 212.825499][ T9116] tipc: Node identity 5e926d5e968b, cluster identity 4711 [ 212.832897][ T9116] tipc: Enabled bearer , priority 0 [ 212.841506][ T9117] tipc: Disabling bearer [ 212.853151][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 213.325718][ T9173] sock: sock_set_timeout: `syz.3.2907' (pid 9173) tries to set negative timeout [ 213.404396][ T36] audit: type=1400 audit(1759009025.390:48169): avc: denied { remount } for pid=9186 comm="syz.3.2912" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 213.612358][ T9219] 9pnet_fd: Insufficient options for proto=fd [ 213.731579][ T9222] 9pnet: p9_errstr2errno: server reported unknown error [ 213.739720][ T9222] rust_binder: Got transaction with invalid offset. [ 213.739765][ T9222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 213.746686][ T9222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 213.773108][ T9224] rust_binder: Write failure EFAULT in pid:275 [ 213.809569][ T36] audit: type=1326 audit(1759009025.790:48170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.839355][ T36] audit: type=1326 audit(1759009025.790:48171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.874497][ T36] audit: type=1326 audit(1759009025.800:48172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.898785][ T36] audit: type=1326 audit(1759009025.800:48173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.924593][ T36] audit: type=1326 audit(1759009025.800:48174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.948272][ T36] audit: type=1326 audit(1759009025.800:48175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.972345][ T36] audit: type=1326 audit(1759009025.800:48176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 213.996116][ T36] audit: type=1326 audit(1759009025.800:48177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 214.019753][ T36] audit: type=1326 audit(1759009025.800:48178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 214.043379][ T36] audit: type=1326 audit(1759009025.800:48179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 214.067132][ T36] audit: type=1326 audit(1759009025.800:48180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff98bb8d710 code=0x7ffc0000 [ 214.096009][ T9251] overlayfs: failed to clone lowerpath [ 216.655910][ T9346] overlayfs: failed to clone lowerpath [ 216.874567][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2965'. [ 216.927761][ T9352] __vm_enough_memory: pid: 9352, comm: syz.8.2966, bytes: 18014402804453376 not enough memory for the allocation [ 216.939839][ T9351] __vm_enough_memory: pid: 9351, comm: syz.8.2966, bytes: 18014402804453376 not enough memory for the allocation [ 217.253900][ T9372] devtmpfs: Unknown parameter 'fuse' [ 218.070662][ T9393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:302 [ 218.070952][ T9393] rust_binder: Read failure Err(EAGAIN) in pid:302 [ 218.129429][ T9401] veth1: entered allmulticast mode [ 219.499820][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 219.499828][ T9415] binder: Unknown parameter 'silent' [ 219.499840][ T36] audit: type=1400 audit(1759009031.480:48217): avc: denied { remount } for pid=9414 comm="syz.7.2992" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 219.550341][ T36] audit: type=1400 audit(1759009031.530:48218): avc: denied { create } for pid=9418 comm="syz.7.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 219.643489][ T9428] rust_binder: 269: no such ref 0 [ 219.648804][ T9428] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 219.656227][ T9428] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 219.680452][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2998'. [ 219.690039][ T9430] overlayfs: empty lowerdir [ 219.729574][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3000'. [ 219.738570][ T9434] bridge_slave_1: left allmulticast mode [ 219.744471][ T9434] bridge_slave_1: left promiscuous mode [ 219.750106][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.757982][ T9434] bridge_slave_0: left allmulticast mode [ 219.763800][ T9434] bridge_slave_0: left promiscuous mode [ 219.769464][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.815082][ T9435] netlink: 'syz.7.3000': attribute type 46 has an invalid length. [ 219.825490][ T2045] Bluetooth: hci0: Frame reassembly failed (-84) [ 220.832156][ T9456] fuse: Bad value for 'rootmode' [ 221.138046][ T9403] veth1: left allmulticast mode [ 221.198809][ T9470] 9pnet_fd: Insufficient options for proto=fd [ 221.563686][ T36] audit: type=1326 audit(1759009033.540:48219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9454 comm="syz.3.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7fc00000 [ 221.778544][ T9485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3018'. [ 221.788624][ T9485] overlayfs: failed to clone lowerpath [ 221.794966][ T9485] overlayfs: failed to clone lowerpath [ 221.863839][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 222.455275][ T9502] veth1_macvtap: left promiscuous mode [ 222.671993][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 223.376879][ T9565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 224.024646][ T9586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9586 comm=syz.2.3053 [ 224.218487][ T9604] binder: Unknown parameter 'uid>18446744073709551615' [ 224.226005][ T36] audit: type=1400 audit(1759009036.210:48220): avc: denied { getattr } for pid=9603 comm="syz.8.3060" path="cgroup:[4026532576]" dev="nsfs" ino=4026532576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 224.289459][ T9610] __vm_enough_memory: pid: 9610, comm: syz.8.3063, bytes: 18014402804453376 not enough memory for the allocation [ 224.358099][ T9612] netlink: 'syz.8.3064': attribute type 16 has an invalid length. [ 224.366048][ T9612] netlink: 64130 bytes leftover after parsing attributes in process `syz.8.3064'. [ 224.387155][ T9614] binder: Unknown parameter 'pcr' [ 224.691811][ T9623] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 225.658273][ T9656] tipc: Enabling of bearer rejected, failed to enable media [ 225.689590][ T9658] vlan0: entered promiscuous mode [ 225.695195][ T9658] vlan0: entered allmulticast mode [ 225.700432][ T9658] veth0_vlan: entered allmulticast mode [ 226.894493][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 226.903764][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3086'. [ 227.848339][ T9691] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 227.859140][ T9693] 9pnet_virtio: no channels available for device ./file0 [ 227.874652][ T9693] netlink: 'syz.8.3093': attribute type 28 has an invalid length. [ 227.882975][ T9693] SELinux: security_context_str_to_sid () failed with errno=-22 [ 227.990496][ T36] audit: type=1400 audit(1759009039.970:48221): avc: denied { mounton } for pid=9699 comm="syz.8.3097" path="/129/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 228.136726][ T9704] netlink: 'syz.7.3096': attribute type 4 has an invalid length. [ 228.144659][ T9704] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3096'. [ 228.158165][ T36] audit: type=1400 audit(1759009040.140:48222): avc: denied { mounton } for pid=9703 comm="syz.7.3096" path="/syzcgroup/unified/syz7" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 229.156066][ T36] audit: type=1326 audit(1759009041.140:48223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 229.179704][ T36] audit: type=1326 audit(1759009041.140:48224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9728 comm="syz.3.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98bb8eec9 code=0x7ffc0000 [ 229.196093][ T9733] ip6gretap0: mtu less than device minimum [ 229.796367][ T9749] 9pnet_fd: Insufficient options for proto=fd [ 229.855447][ T9750] 9pnet_fd: Insufficient options for proto=fd [ 230.720298][ T9757] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 231.205781][ T9759] rust_binder: Error while translating object. [ 231.205810][ T9759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 231.212031][ T9759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:290 [ 231.309573][ T9769] rust_binder: 300: no such ref 3 [ 231.314748][ T9769] rust_binder: 300: no such ref 2 [ 231.705235][ T9791] overlayfs: failed to clone lowerpath [ 231.778514][ T9793] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 231.895445][ T2057] Bluetooth: hci0: Frame reassembly failed (-84) [ 231.922730][ T9805] netlink: 'syz.8.3133': attribute type 4 has an invalid length. [ 231.930603][ T9805] netlink: 3649 bytes leftover after parsing attributes in process `syz.8.3133'. [ 232.759704][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3137'. [ 233.105391][ T36] audit: type=1326 audit(1759009045.090:48225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9829 comm="syz.8.3141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f849878eec9 code=0x0 [ 233.846079][ T9861] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 233.855994][ T36] audit: type=1400 audit(1759009045.840:48226): avc: denied { relabelto } for pid=9860 comm="syz.3.3151" name="cgroup" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 233.883217][ T36] audit: type=1400 audit(1759009045.840:48227): avc: denied { associate } for pid=9860 comm="syz.3.3151" name="cgroup" dev="tmpfs" ino=2449 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 233.910864][ T36] audit: type=1400 audit(1759009045.880:48228): avc: denied { unlink } for pid=5719 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 233.938086][ T36] audit: type=1400 audit(1759009045.890:48229): avc: denied { shutdown } for pid=9863 comm="syz.3.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.943709][ T1280] Bluetooth: hci0: command 0x1003 tx timeout [ 233.963739][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.991658][ T36] audit: type=1400 audit(1759009045.970:48230): avc: denied { add_name } for pid=9867 comm="syz.7.3154" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.012746][ T9868] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 234.020428][ T9868] rust_binder: Read failure Err(EAGAIN) in pid:312 [ 234.020916][ T9868] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:312 [ 234.021744][ T36] audit: type=1400 audit(1759009045.970:48231): avc: denied { create } for pid=9867 comm="syz.7.3154" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 234.057141][ T36] audit: type=1400 audit(1759009045.970:48232): avc: denied { associate } for pid=9867 comm="syz.7.3154" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.078975][ T36] audit: type=1400 audit(1759009046.020:48233): avc: denied { unmount } for pid=6863 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.150879][ T9875] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.273292][ T9887] can0: slcan on ttyS3. [ 234.344288][ T9886] can0 (unregistered): slcan off ttyS3. [ 234.389759][ T9907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 234.541999][ T9929] rust_binder: 9925 RLIMIT_NICE not set [ 234.597722][ T9925] rust_binder: Error while translating object. [ 234.603427][ T9925] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 234.609715][ T9925] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender. [ 234.619090][ T9925] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:340 [ 234.696239][ T9933] kvm: kvm [9932]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000086) = 0x0 [ 236.163963][ T9976] rust_binder: Error while translating object. [ 236.164059][ T9976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 236.170491][ T9976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:365 [ 236.180669][ T9976] rust_binder: 365: no such ref 0 [ 236.290574][ T9988] netlink: 1323 bytes leftover after parsing attributes in process `syz.8.3186'. [ 236.301905][ T9988] 9pnet_fd: Insufficient options for proto=fd [ 236.459195][T10032] overlayfs: failed to clone lowerpath [ 236.503187][T10039] 9pnet_fd: Insufficient options for proto=fd [ 238.130490][T10084] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3219'. [ 239.060692][T10093] tipc: Enabling of bearer rejected, failed to enable media [ 239.068934][T10092] tipc: Enabling of bearer rejected, failed to enable media [ 239.281138][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.298612][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.312717][T10101] bridge_slave_0: entered allmulticast mode [ 239.321697][T10101] bridge_slave_0: entered promiscuous mode [ 239.328521][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.335754][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.342904][T10101] bridge_slave_1: entered allmulticast mode [ 239.349574][T10101] bridge_slave_1: entered promiscuous mode [ 239.428670][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.435785][T10101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.443125][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.450214][T10101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.475657][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.483954][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.495165][ T2060] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.502231][ T2060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.515216][ T2057] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.522313][ T2057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.567320][T10101] veth0_vlan: entered promiscuous mode [ 239.582261][T10101] veth1_macvtap: entered promiscuous mode [ 239.608675][T10124] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 239.610181][ T36] audit: type=1400 audit(1759009051.590:48234): avc: denied { mounton } for pid=10101 comm="syz-executor" path="/root/syzkaller.R5QQXS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=48051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 239.646947][ T36] audit: type=1400 audit(1759009051.610:48235): avc: denied { relabelto } for pid=10123 comm="syz.3.3230" name="file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 239.674498][ T36] audit: type=1400 audit(1759009051.610:48236): avc: denied { associate } for pid=10123 comm="syz.3.3230" name="file0" dev="tmpfs" ino=2710 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 239.681925][T10125] sock: sock_set_timeout: `syz.3.3230' (pid 10125) tries to set negative timeout [ 239.716966][T10127] rust_binder: Write failure EFAULT in pid:2 [ 239.717673][T10127] netlink: 'syz.9.3224': attribute type 32 has an invalid length. [ 239.731765][T10127] netlink: 'syz.9.3224': attribute type 32 has an invalid length. [ 239.753244][T10129] can: request_module (can-proto-0) failed. [ 239.831439][T10132] rust_binder: Error while translating object. [ 239.831509][T10132] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 239.838311][T10132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 240.043181][T10136] fuse: blksize only supported for fuseblk [ 240.097311][ T36] audit: type=1400 audit(1759009052.080:48237): avc: denied { setattr } for pid=10139 comm="syz.9.3235" name="NETLINK" dev="sockfs" ino=48367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.129380][ T36] audit: type=1400 audit(1759009052.080:48238): avc: denied { map } for pid=10139 comm="syz.9.3235" path="socket:[48089]" dev="sockfs" ino=48089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.363674][ T338] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 240.381248][ T36] audit: type=1400 audit(1759009052.360:48239): avc: denied { append } for pid=10164 comm="syz.8.3244" name="event2" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 240.449420][ T36] audit: type=1400 audit(1759009052.430:48240): avc: denied { unlink } for pid=5719 comm="syz-executor" name="file0" dev="tmpfs" ino=2710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 240.524811][ T338] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 240.533228][ T338] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.543541][ T338] usb 10-1: config 1 has no interface number 0 [ 240.550519][ T338] usb 10-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 240.571255][ T338] usb 10-1: config 1 interface 105 has no altsetting 0 [ 240.580654][ T338] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 240.589963][ T338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.598126][ T338] usb 10-1: Product: syz [ 240.612593][ T338] usb 10-1: Manufacturer: syz [ 240.617386][ T338] usb 10-1: SerialNumber: syz [ 240.665344][T10189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=10189 comm=syz.3.3254 [ 240.824533][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3237'. [ 240.834301][ T338] aqc111 10-1:1.105: probe with driver aqc111 failed with error -22 [ 241.018150][T10197] overlayfs: failed to resolve './file1': -2 [ 241.038296][T10200] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3259'. [ 241.048532][ T36] audit: type=1400 audit(1759009053.030:48241): avc: denied { watch } for pid=10199 comm="syz.8.3259" path="/157/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 241.072478][ T337] usb 10-1: USB disconnect, device number 2 [ 241.246056][T10212] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3263'. [ 241.268339][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3264'. [ 241.277456][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3264'. [ 241.312629][T10222] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 241.429156][T10230] tipc: New replicast peer: 0.0.0.0 [ 241.442658][T10230] tipc: Enabled bearer , priority 10 [ 241.449425][T10230] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 241.476453][T10233] loop7: detected capacity change from 0 to 16384 [ 241.621865][T10236] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 241.673879][T10233] loop7: detected capacity change from 16384 to 0 [ 241.847624][T10247] rust_binder: Write failure EINVAL in pid:26 [ 241.859721][T10250] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.865964][T10251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 241.872941][T10250] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 241.879449][T10250] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 241.887488][T10250] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:29 [ 241.917593][T10257] rust_binder: Write failure EINVAL in pid:32 [ 241.922640][T10254] rust_binder: Write failure EINVAL in pid:32 [ 242.423658][ T337] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 242.553668][ T330] tipc: Node number set to 3357109598 [ 242.584760][ T337] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.595882][ T337] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.605054][ T337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.614023][ T337] usb 10-1: config 0 descriptor?? [ 243.301625][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3290'. [ 243.327966][ T2045] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.637290][T10308] netlink: 'syz.3.3296': attribute type 30 has an invalid length. [ 244.354875][T10334] netlink: 328 bytes leftover after parsing attributes in process `syz.3.3304'. [ 244.422183][T10337] cgroup: fork rejected by pids controller in /syz3 [ 244.672375][ T36] audit: type=1400 audit(1759009056.650:48242): avc: denied { getopt } for pid=10385 comm="syz.3.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 244.815070][T10397] /dev/nbd8: Can't lookup blockdev [ 244.820771][T10397] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 244.865037][T10403] 9pnet_fd: Insufficient options for proto=fd [ 244.871524][T10403] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3316'. [ 244.871976][T10405] overlayfs: failed to resolve '/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 245.067977][T10416] 9pnet_fd: Insufficient options for proto=fd [ 245.194259][ T337] usbhid 10-1:0.0: can't add hid device: -71 [ 245.203686][ T337] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 245.217726][T10423] vcan0: entered allmulticast mode [ 245.223250][ T337] usb 10-1: USB disconnect, device number 3 [ 245.267875][T10434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10434 comm=syz.3.3327 [ 245.292643][ T2057] Bluetooth: hci1: Frame reassembly failed (-84) [ 245.319379][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.327974][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.335480][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.342981][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.350462][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.357930][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.365367][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.372769][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.380202][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.383679][ T1423] Bluetooth: hci0: command 0x1003 tx timeout [ 245.386355][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.399731][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.407185][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.423680][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.431170][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.439083][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.446541][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.454001][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.463664][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.471196][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.478717][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.486268][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.493816][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.504292][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.513848][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.521603][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.529100][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.540346][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.543410][T10447] rust_binder: Error while translating object. [ 245.547948][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.548405][T10447] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.554232][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.561900][T10447] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:388 [ 245.574349][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.598490][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.603903][T10451] netlink: 'syz.7.3334': attribute type 1 has an invalid length. [ 245.606126][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.621375][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.633007][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.642886][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.651340][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.659034][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.666653][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.674274][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.681913][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.689531][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.697123][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.704811][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.712420][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.720102][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.727750][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.735382][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.742993][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.750638][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.758277][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.765924][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.773495][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.781135][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.788739][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.796358][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.803993][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.811565][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.819190][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.826822][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.834426][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.842054][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.849760][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.857427][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.865277][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.872886][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.880548][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.888143][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.895888][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.903453][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.911103][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.918723][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.926335][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.933956][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.941541][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.949172][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.956782][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.964393][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.971980][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.979607][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.987181][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 245.994873][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.002415][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.010044][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.018441][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.026110][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.033726][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.041292][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.048910][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.056482][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.064135][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.071709][ T338] hid-generic 0003:0008:000F.0015: unknown main item tag 0x0 [ 246.079987][ T338] hid-generic 0003:0008:000F.0015: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 246.106213][T10456] fido_id[10456]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.122515][T10458] netlink: 228 bytes leftover after parsing attributes in process `syz.9.3335'. [ 246.398551][T10463] SELinux: policydb table sizes (104,0) do not match mine (6,7) [ 246.406392][T10463] SELinux: failed to load policy [ 246.639926][T10476] sit0: entered promiscuous mode [ 246.641188][T10477] input: syz0 as /devices/virtual/input/input25 [ 246.647723][T10476] netlink: 'syz.8.3343': attribute type 1 has an invalid length. [ 246.665399][T10476] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3343'. [ 246.684020][ T46] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 246.833682][ T46] usb 10-1: Using ep0 maxpacket: 16 [ 246.840142][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 246.852521][ T46] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 246.861718][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.869895][ T46] usb 10-1: Product: syz [ 246.874759][ T46] usb 10-1: Manufacturer: syz [ 246.879479][ T46] usb 10-1: SerialNumber: syz [ 246.893255][ T46] usb 10-1: config 0 descriptor?? [ 246.901638][ T46] hub 10-1:0.0: bad descriptor, ignoring hub [ 246.908269][ T46] hub 10-1:0.0: probe with driver hub failed with error -5 [ 247.001716][T10502] tmpfs: Unknown parameter '(' [ 247.016820][T10505] binder: Bad value for 'max' [ 247.036026][T10507] veth1: entered allmulticast mode [ 247.075519][T10506] veth1: left allmulticast mode [ 247.104473][ T338] usb 10-1: USB disconnect, device number 4 [ 247.293718][ T1280] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 247.293745][ T733] Bluetooth: hci1: command 0x1003 tx timeout [ 247.411150][ T46] rust_binder: 10524: removing orphan mapping 0:88 [ 247.420467][T10529] binder: Bad value for 'max' [ 247.783309][T10552] random: crng reseeded on system resumption [ 249.070904][T10599] overlayfs: failed to clone upperpath [ 249.219043][ T36] audit: type=1400 audit(1759009061.200:48243): avc: denied { watch_reads } for pid=10634 comm="syz.3.3402" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 249.517532][T10656] rust_binder: Error while translating object. [ 249.517583][T10656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 249.523999][T10656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:398 [ 249.533952][T10657] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.549695][ T46] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 249.568263][T10660] cgroup: Unknown subsys name 'measure' [ 249.640334][T10661] kvm: kvm [10659]: vcpu6, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x8000 [ 249.703679][ T46] usb 10-1: Using ep0 maxpacket: 16 [ 249.710145][ T46] usb 10-1: config 8 has an invalid descriptor of length 102, skipping remainder of the config [ 249.720749][ T46] usb 10-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 249.731296][ T46] usb 10-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 249.740496][ T46] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.748670][ T46] usb 10-1: Product: syz [ 249.752961][ T46] usb 10-1: Manufacturer: syz [ 249.757705][ T46] usb 10-1: SerialNumber: syz [ 250.043586][ T46] usb 10-1: USB disconnect, device number 5 [ 250.601888][T10687] binder: Unknown parameter 'dem7rtext' [ 250.638367][T10695] binder: Unknown parameter '0xffffffffffffffff' [ 250.739025][T10710] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3429'. [ 250.760065][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3429'. [ 250.770655][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3429'. [ 250.799901][ T36] audit: type=1400 audit(1759009062.780:48244): avc: denied { mounton } for pid=10712 comm="syz.9.3430" path="/42/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 250.908154][T10728] /dev/rnullb0: Can't open blockdev [ 250.992354][T10758] 9pnet_fd: Insufficient options for proto=fd [ 251.051788][ T36] audit: type=1400 audit(1759009063.030:48245): avc: denied { setattr } for pid=10769 comm="syz.9.3449" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.265600][T10785] can0: slcan on ttyS3. [ 251.378792][T10801] netlink: 'syz.8.3455': attribute type 1 has an invalid length. [ 251.503693][ T338] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 251.663671][ T338] usb 10-1: Using ep0 maxpacket: 16 [ 251.673066][ T338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.693664][ T338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.713669][ T338] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 251.734239][ T338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.743204][ T338] usb 10-1: config 0 descriptor?? [ 252.125649][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.132858][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.140378][T10822] bridge_slave_0: entered allmulticast mode [ 252.147176][T10822] bridge_slave_0: entered promiscuous mode [ 252.156563][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.163748][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.170899][T10822] bridge_slave_1: entered allmulticast mode [ 252.183892][ T338] playstation 0003:054C:05C4.0016: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.9-1/input0 [ 252.199802][T10822] bridge_slave_1: entered promiscuous mode [ 252.380846][ T2057] tipc: Left network mode [ 252.410095][ T2057] veth1_macvtap: left promiscuous mode [ 252.536356][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.543556][T10822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.550920][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.558005][T10822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.585090][ T338] playstation 0003:054C:05C4.0016: Failed to retrieve feature with reportID 163: -32 [ 252.601994][ T338] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 firmware info: -32 [ 252.633711][ T338] playstation 0003:054C:05C4.0016: Failed to get firmware info from DualShock4 [ 252.642735][ T338] playstation 0003:054C:05C4.0016: HW/FW version data in sysfs will be invalid. [ 252.655714][ T2059] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.656127][ T338] playstation 0003:054C:05C4.0016: Invalid reportID received, expected 2 got 12 [ 252.671895][ T338] playstation 0003:054C:05C4.0016: Retrying DualShock 4 get calibration report (0x02) request [ 252.682389][ T2059] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.698415][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.705537][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.715336][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.722436][ T2059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.779867][T10822] veth0_vlan: entered promiscuous mode [ 252.801054][T10822] veth1_macvtap: entered promiscuous mode [ 252.874539][ T338] playstation 0003:054C:05C4.0016: Failed to retrieve feature with reportID 2: -71 [ 252.891283][T10836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 252.891315][T10836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 252.893735][ T338] playstation 0003:054C:05C4.0016: Retrying DualShock 4 get calibration report (0x02) request [ 252.932899][ T338] playstation 0003:054C:05C4.0016: Failed to retrieve feature with reportID 2: -71 [ 252.952686][ T338] playstation 0003:054C:05C4.0016: Failed to retrieve DualShock4 calibration info: -71 [ 252.978507][ T338] playstation 0003:054C:05C4.0016: Invalid gyro calibration data for axis (3), disabling calibration. [ 252.994132][T10784] can0 (unregistered): slcan off ttyS3. [ 253.003783][ T338] playstation 0003:054C:05C4.0016: Invalid gyro calibration data for axis (4), disabling calibration. [ 253.023885][ T338] playstation 0003:054C:05C4.0016: Invalid gyro calibration data for axis (5), disabling calibration. [ 253.045187][ T338] playstation 0003:054C:05C4.0016: Invalid accelerometer calibration data for axis (0), disabling calibration. [ 253.058679][T10849] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 253.058707][T10849] rust_binder: Error while translating object. [ 253.067937][ T338] playstation 0003:054C:05C4.0016: Invalid accelerometer calibration data for axis (1), disabling calibration. [ 253.089530][T10849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.089570][T10849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:617 [ 253.108518][ T338] playstation 0003:054C:05C4.0016: Invalid accelerometer calibration data for axis (2), disabling calibration. [ 253.133408][ T338] playstation 0003:054C:05C4.0016: Failed to get calibration data from DualShock4 [ 253.143286][ T338] playstation 0003:054C:05C4.0016: Gyroscope and accelerometer will be inaccurate. [ 253.155016][ T338] input: HID 054c:05c4 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0016/input/input26 [ 253.207793][ T338] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0016/input/input27 [ 253.223130][T10867] binder: Unknown parameter 'fsuuid' [ 253.251184][ T338] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:05C4.0016/input/input28 [ 253.289845][ T338] playstation 0003:054C:05C4.0016: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 253.321633][ T338] usb 10-1: USB disconnect, device number 6 [ 253.434527][T10885] rust_binder: Error while translating object. [ 253.434559][T10885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 253.440840][T10885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:627 [ 253.575424][T10903] ./cgroup: Can't lookup blockdev [ 253.750625][T10915] bpf: Bad value for 'gid' [ 253.753830][T10916] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 253.792645][ T36] audit: type=1400 audit(1759009065.770:48246): avc: denied { mounton } for pid=10919 comm="syz.7.3480" path="/" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.867136][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3485'. [ 254.183335][ T2057] Bluetooth: hci1: Frame reassembly failed (-84) [ 254.933706][ T338] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 255.084732][ T338] usb 10-1: config 1 interface 0 has no altsetting 0 [ 255.093736][ T338] usb 10-1: string descriptor 0 read error: -22 [ 255.100083][ T338] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40 [ 255.109368][ T338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.293698][ T1423] Bluetooth: hci0: command 0x1003 tx timeout [ 255.293757][ T1280] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.319808][ T338] usbhid 10-1:1.0: can't add hid device: -71 [ 255.326000][ T338] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 255.335014][ T338] usb 10-1: USB disconnect, device number 7 [ 255.375638][T10952] rust_binder: 18: no such ref 0 [ 255.380639][T10952] rust_binder: 18: no such ref 2 [ 255.385683][T10952] rust_binder: 10952 RLIMIT_NICE not set [ 255.390849][ T330] rust_binder: 10951: removing orphan mapping 0:112 [ 256.163667][ T330] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 256.253690][ T1280] Bluetooth: hci1: command 0x1003 tx timeout [ 256.253690][ T733] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 256.314769][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 256.325871][ T330] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 256.338980][ T330] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 256.348201][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.357102][ T330] usb 10-1: config 0 descriptor?? [ 256.362440][T10963] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 256.370707][ T330] usbhid 10-1:0.0: can't add hid device: -22 [ 256.376821][ T330] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 256.575743][ T36] audit: type=1400 audit(1759009068.560:48247): avc: denied { append } for pid=10962 comm="syz.9.3498" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 256.576609][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.605319][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.615638][ T338] usb 10-1: USB disconnect, device number 8 [ 256.795038][T10968] netlink: 'syz.8.3500': attribute type 4 has an invalid length. [ 256.858808][T10974] netlink: 'syz.8.3501': attribute type 15 has an invalid length. [ 256.866761][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3501'. [ 256.877346][T10975] netlink: 'syz.8.3501': attribute type 15 has an invalid length. [ 256.885280][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3501'. [ 256.895360][T10974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10974 comm=syz.8.3501 [ 256.960039][T10979] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 256.960074][T10979] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 256.963727][T10975] rust_binder: validate_parent_fixup: new_min_offset=9007199254741049, sg_entry.length=238 [ 256.968665][T10979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:649 [ 256.993639][T10975] rust_binder: Error while translating object. [ 257.009563][T10975] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 257.031917][T10975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:649 [ 257.264098][T10992] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 257.275981][T10992] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 257.284752][T10992] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:439 [ 257.476265][T11007] rust_binder: Error while translating object. [ 257.485660][T11007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 257.491891][T11007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:452 [ 257.533683][ T9] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 257.694820][ T9] usb 10-1: config 0 has an invalid descriptor of length 201, skipping remainder of the config [ 257.705429][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 257.719810][ T9] usb 10-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 257.733915][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.744922][ T9] usb 10-1: SerialNumber: syz [ 257.751610][ T9] usb 10-1: config 0 descriptor?? [ 257.760429][ T9] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 257.865506][ T36] audit: type=1400 audit(1759009069.850:48248): avc: denied { setattr } for pid=11022 comm="syz.8.3518" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 257.873739][T11023] 9pnet_fd: Insufficient options for proto=fd [ 257.962568][ T9] usb 10-1: USB disconnect, device number 9 [ 257.978844][T11025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=11025 comm=syz.3.3519 [ 258.061151][T11030] tipc: Started in network mode [ 258.071572][T11030] tipc: Node identity ce43d3fd1802, cluster identity 4711 [ 258.078964][T11030] tipc: Enabled bearer , priority 0 [ 258.086628][T11030] netlink: 'syz.3.3520': attribute type 27 has an invalid length. [ 258.096350][T11030] tipc: Disabling bearer [ 258.219516][T11047] netlink: 'syz.8.3526': attribute type 4 has an invalid length. [ 258.227834][T11047] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 258.296809][T11055] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 258.335278][T11058] x_tables: unsorted underflow at hook 4 [ 258.341242][T11058] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 258.348461][T11058] rust_binder: Write failure EINVAL in pid:689 [ 258.406284][T11060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:691 [ 258.423817][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 258.502068][T11063] overlayfs: empty lowerdir [ 258.578054][T11069] rust_binder: Error while translating object. [ 258.578099][T11069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 258.583668][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 258.584543][T11069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:694 [ 258.595269][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 258.606998][T11069] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 258.608330][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.618466][T11069] rust_binder: Write failure EINVAL in pid:694 [ 258.625598][ T9] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.652440][ T9] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 258.665551][ T9] usb 4-1: config 7 interface 0 has no altsetting 0 [ 258.672203][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 258.681487][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.827556][ T2057] tipc: Disabling bearer [ 258.833056][ T2057] tipc: Left network mode [ 258.838518][ T2057] veth1_macvtap: left promiscuous mode [ 258.844261][ T2057] veth0_vlan: left promiscuous mode [ 258.943259][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.950425][T11075] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.957588][T11075] bridge_slave_0: entered allmulticast mode [ 258.964173][T11075] bridge_slave_0: entered promiscuous mode [ 258.970929][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.978110][T11075] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.985279][T11075] bridge_slave_1: entered allmulticast mode [ 258.991589][T11075] bridge_slave_1: entered promiscuous mode [ 259.051806][T11075] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.058909][T11075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.066240][T11075] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.073286][T11075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.104456][ T2045] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.115073][ T2045] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.125243][ T9] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0017/input/input29 [ 259.137269][ T2045] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.144420][ T2045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.154104][ T2045] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.161194][ T2045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.181414][ T9] kye 0003:0458:5010.0017: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 259.200374][ T9] usb 4-1: USB disconnect, device number 30 [ 259.202912][T11075] veth0_vlan: entered promiscuous mode [ 259.220323][T11075] veth1_macvtap: entered promiscuous mode [ 259.237911][T11092] fido_id[11092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 259.261468][ T36] audit: type=1400 audit(1759009071.240:48249): avc: denied { create } for pid=11090 comm="syz.3.3540" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 259.316492][T11098] overlayfs: missing 'lowerdir' [ 259.317064][ T36] audit: type=1400 audit(1759009071.280:48250): avc: denied { mounton } for pid=11075 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 259.348056][ T36] audit: type=1400 audit(1759009071.280:48251): avc: denied { read } for pid=11094 comm="syz.9.3541" name="/" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.349827][T11098] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 259.373080][ T36] audit: type=1400 audit(1759009071.280:48252): avc: denied { open } for pid=11094 comm="syz.9.3541" path="/" dev="configfs" ino=2547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 259.543703][ T884] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 259.597451][ T36] audit: type=1400 audit(1759009071.580:48253): avc: denied { read } for pid=95 comm="acpid" name="event6" dev="devtmpfs" ino=737 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 259.621360][ T733] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.623726][ T1280] Bluetooth: hci0: command 0x1003 tx timeout [ 259.627744][ T36] audit: type=1400 audit(1759009071.580:48254): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=737 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 259.644123][T11114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65127 sclass=netlink_route_socket pid=11114 comm=syz.3.3546 [ 259.659344][ T36] audit: type=1400 audit(1759009071.580:48255): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=737 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 259.697769][ T884] usb 2-1: Using ep0 maxpacket: 8 [ 259.704998][ T884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.713649][T11116] 9pnet_virtio: no channels available for device ./file0 [ 259.721085][ T884] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.721569][ T36] audit: type=1400 audit(1759009071.700:48256): avc: denied { write } for pid=11115 comm="syz.9.3547" name="file0" dev="incremental-fs" ino=418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.734521][ T884] usb 2-1: config 1 interface 0 has no altsetting 0 [ 259.758327][T11116] batadv_slave_0: entered promiscuous mode [ 259.765560][ T884] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.40 [ 259.772483][T11115] batadv_slave_0: left promiscuous mode [ 259.784482][ T884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.797406][ T884] usb 2-1: Product: syz [ 259.801606][ T884] usb 2-1: Manufacturer: syz [ 259.806556][ T884] usb 2-1: SerialNumber: syz [ 259.827830][T11118] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:213 [ 259.848737][T11122] netlink: 'syz.9.3550': attribute type 12 has an invalid length. [ 260.058444][ T884] usbhid 2-1:1.0: can't add hid device: -22 [ 260.066359][ T884] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 260.078978][ T884] usb 2-1: USB disconnect, device number 33 [ 260.207356][T11138] can0: slcan on ptm0. [ 260.235933][T11138] can0 (unregistered): slcan off ptm0. [ 260.645014][T11169] can0: slcan on ptm0. [ 260.704680][T11169] can0 (unregistered): slcan off ptm0. [ 260.977871][T11193] fuse: Unknown parameter '[' [ 261.050032][T11197] tmpfs: Bad value for 'nr_blocks' [ 261.091964][T11201] rust_binder: Got transaction with invalid offset. [ 261.092060][T11201] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.095509][T11203] PM: Enabling pm_trace changes system date and time during resume. [ 261.095509][T11203] PM: Correct system time has to be restored manually after resume. [ 261.100058][T11201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:463 [ 261.109704][T11203] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 261.133856][ T884] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 261.180788][T11207] rust_binder: 11207 RLIMIT_NICE not set [ 261.180935][T11207] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 261.186848][T11207] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 261.196873][T11207] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:59 [ 261.210132][T11209] /dev/rnullb0: Can't open blockdev [ 261.315281][ T884] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 261.323518][ T884] usb 10-1: config 0 has no interface number 0 [ 261.331378][ T884] usb 10-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=55.2b [ 261.340622][ T884] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.348765][ T884] usb 10-1: Product: syz [ 261.353112][ T884] usb 10-1: Manufacturer: syz [ 261.357876][ T884] usb 10-1: SerialNumber: syz [ 261.363403][ T884] usb 10-1: config 0 descriptor?? [ 261.570878][ T884] rtl8150 10-1:0.51: couldn't find required endpoints [ 261.577875][ T884] rtl8150 10-1:0.51: probe with driver rtl8150 failed with error -5 [ 261.587093][ T884] usb 10-1: USB disconnect, device number 10 [ 261.821036][T11213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39420 sclass=netlink_route_socket pid=11213 comm=syz.7.3569 [ 261.938088][ T884] rust_binder: 11202: removing orphan mapping 0:1048 [ 261.947588][T11217] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 261.947618][T11217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62 [ 261.957806][T11217] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 261.973711][T11218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 261.973743][T11218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62 [ 262.047043][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3573'. [ 262.202412][T11236] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 262.214691][T11248] rust_binder: Write failure EFAULT in pid:480 [ 262.463654][ T884] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 262.513669][ T46] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 262.624782][ T884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.634685][ T884] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 262.643772][ T884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.652469][ T884] usb 2-1: config 0 descriptor?? [ 262.663665][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 262.670272][ T46] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 137, changing to 11 [ 262.681717][ T46] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 262.692574][ T46] usb 4-1: config 1 interface 0 has no altsetting 0 [ 262.700683][ T46] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.40 [ 262.709796][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.717821][ T46] usb 4-1: Product: syz [ 262.722010][ T46] usb 4-1: Manufacturer: ♑웛∤ɖ֟请堗폃湞䍆䴖ኻ낵ᣋ䪁⒒⺊솣ﰴ泵묑鋕摦ጭ⨴ᨃ⎠扁ꇲ–ː父䂃婡쯽ĥ狦惉粚鱶鉗刬籠ﴃᖱ䒽沄 [ 262.738588][ T46] usb 4-1: SerialNumber: syz [ 262.961164][ T46] usbhid 4-1:1.0: can't add hid device: -71 [ 262.969520][ T46] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 262.989124][T11267] ./cgroup: Can't lookup blockdev [ 262.994659][ T46] usb 4-1: USB disconnect, device number 31 [ 263.062949][ T884] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.07 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 263.077833][T11271] rust_binder: 11269 RLIMIT_NICE not set [ 263.079408][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 263.079425][ T36] audit: type=1400 audit(1759009075.060:48258): avc: denied { read } for pid=11268 comm="syz.9.3587" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.114988][ T36] audit: type=1400 audit(1759009075.070:48259): avc: denied { open } for pid=11268 comm="syz.9.3587" path="/83/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.139991][ T36] audit: type=1400 audit(1759009075.070:48260): avc: denied { ioctl } for pid=11268 comm="syz.9.3587" path="/83/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.264483][ T338] usb 2-1: USB disconnect, device number 34 [ 263.783023][ T36] audit: type=1400 audit(1759009075.760:48261): avc: denied { mounton } for pid=11273 comm="syz.1.3588" path="/13/file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 263.867193][T11284] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 263.868055][T11283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 263.901469][T11279] rust_binder: Error while translating object. [ 263.908088][T11279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 263.914370][T11279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:89 [ 263.964866][T11287] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 263.974077][T11287] rust_binder: Read failure Err(EFAULT) in pid:92 [ 264.753292][T11299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11299 comm=syz.9.3596 [ 264.772967][T11299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11299 comm=syz.9.3596 [ 265.083682][ T330] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 265.168776][T11309] rust_binder: Error while translating object. [ 265.168806][T11309] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 265.175152][T11309] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:486 [ 265.234775][ T330] usb 10-1: No LPM exit latency info found, disabling LPM. [ 265.254016][ T330] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 265.264982][ T330] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.285464][ T330] usb 10-1: string descriptor 0 read error: -22 [ 265.291803][ T330] usb 10-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 265.301064][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.316908][T11301] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 265.529572][T11301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.538270][T11301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.554354][T11301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 265.554396][T11301] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 265.563561][T11301] rust_binder: Read failure Err(EFAULT) in pid:252 [ 265.574594][ T330] usbhid 10-1:1.0: can't add hid device: -71 [ 265.587189][ T330] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 265.596027][ T330] usb 10-1: USB disconnect, device number 11 [ 265.699781][T11315] netlink: 'syz.3.3602': attribute type 1 has an invalid length. [ 265.707635][T11315] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3602'. [ 265.719155][T11315] __vm_enough_memory: pid: 11315, comm: syz.3.3602, bytes: 18014402804453376 not enough memory for the allocation [ 265.744957][T11317] overlayfs: missing 'lowerdir' [ 266.003689][ T66] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 266.089784][T11321] devpts: called with bogus options [ 266.095882][T11321] __vm_enough_memory: pid: 11321, comm: syz.9.3605, bytes: 18014402804453376 not enough memory for the allocation [ 266.154819][ T66] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 266.169325][ T66] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 266.178475][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.186506][ T66] usb 4-1: Product: syz [ 266.190726][ T66] usb 4-1: Manufacturer: syz [ 266.195370][ T66] usb 4-1: SerialNumber: syz [ 266.200614][ T66] usb 4-1: config 0 descriptor?? [ 266.206569][ T66] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 266.566237][ T66] usb 4-1: USB disconnect, device number 32 [ 267.423686][ T330] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 267.584789][ T330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.595099][ T330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.605044][ T330] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.614507][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.622655][ T330] usb 4-1: SerialNumber: syz [ 267.838258][ T330] usb 4-1: 0:2 : does not exist [ 267.847055][ T330] usb 4-1: USB disconnect, device number 33 [ 267.856763][ T5687] udevd[5687]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.230327][T11345] 9pnet_fd: Insufficient options for proto=fd [ 268.445143][T11349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3613'. [ 268.454279][T11349] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3613'. [ 268.463285][T11349] tipc: Invalid UDP bearer configuration [ 268.463316][T11349] tipc: Enabling of bearer rejected, failed to enable media [ 268.531958][T11353] netlink: 'syz.9.3615': attribute type 17 has an invalid length. [ 268.574659][ T37] INFO: task syz.4.1643:5311 blocked for more than 143 seconds. [ 268.582586][ T37] Not tainted syzkaller #0 [ 268.588442][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 268.589725][T11355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11355 comm=syz.9.3616 [ 268.597453][ T37] task:syz.4.1643 state:D stack:0 pid:5311 tgid:5311 ppid:5100 flags:0x00004006 [ 268.620410][ T37] Call Trace: [ 268.624079][ T37] [ 268.627207][ T37] __schedule+0x1322/0x1df0 [ 268.631862][ T37] ? __sched_text_start+0x10/0x10 [ 268.637232][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 268.642862][ T37] ? _raw_spin_unlock+0x45/0x60 [ 268.647922][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 268.653848][ T37] schedule+0xc6/0x240 [ 268.657948][ T37] __fuse_simple_request+0xdb1/0x1980 [ 268.663325][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 268.669194][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 268.675323][ T37] ? __kasan_check_write+0x18/0x20 [ 268.680473][ T37] ? _raw_spin_lock+0x8c/0x120 [ 268.685306][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 268.690557][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 268.696718][ T37] ? fuse_lock_owner_id+0x154/0x190 [ 268.701953][ T37] fuse_flush+0x909/0x1d50 [ 268.706399][ T37] ? arch_stack_walk+0x10b/0x170 [ 268.711369][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 268.716292][ T37] ? stack_trace_save+0x9d/0xe0 [ 268.721176][ T37] ? stack_depot_save_flags+0x38/0x800 [ 268.726686][ T37] ? x64_sys_call+0x1686/0x2ee0 [ 268.731571][ T37] ? do_syscall_64+0x58/0xf0 [ 268.736231][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 268.742355][ T37] ? __kasan_check_write+0x18/0x20 [ 268.747510][ T37] ? task_work_add+0x258/0x3f0 [ 268.752299][ T37] ? __cfi_task_work_add+0x10/0x10 [ 268.757457][ T37] ? __kasan_check_write+0x18/0x20 [ 268.762601][ T37] ? _raw_spin_lock+0x8c/0x120 [ 268.767398][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 268.772623][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 268.777510][ T37] filp_close+0xc0/0x160 [ 268.781778][ T37] __close_range+0x50e/0x6c0 [ 268.786429][ T37] ? __cfi___close_range+0x10/0x10 [ 268.791566][ T37] ? __kasan_check_write+0x18/0x20 [ 268.796748][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 268.802414][ T37] __x64_sys_close_range+0x7e/0x90 [ 268.807614][ T37] x64_sys_call+0x1686/0x2ee0 [ 268.812335][ T37] do_syscall_64+0x58/0xf0 [ 268.816826][ T37] ? clear_bhb_loop+0x50/0xa0 [ 268.821536][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 268.827503][ T37] RIP: 0033:0x7f1b1218eec9 [ 268.831943][ T37] RSP: 002b:00007ffe5b9f24d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 268.840406][ T37] RAX: ffffffffffffffda RBX: 000000000001d9e4 RCX: 00007f1b1218eec9 [ 268.848452][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 268.856518][ T37] RBP: 00007f1b123e7da0 R08: 0000000000000001 R09: 000000105b9f27cf [ 268.864580][ T37] R10: 0000001b32320000 R11: 0000000000000246 R12: 00007f1b123e5fac [ 268.872566][ T37] R13: 00007f1b123e5fa0 R14: ffffffffffffffff R15: 00007ffe5b9f25f0 [ 268.880606][ T37] [ 268.883771][ T37] NMI backtrace for cpu 0 [ 268.883786][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 268.883821][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.883835][ T37] Call Trace: [ 268.883844][ T37] [ 268.883871][ T37] __dump_stack+0x21/0x30 [ 268.883906][ T37] dump_stack_lvl+0x10c/0x190 [ 268.883937][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 268.883970][ T37] dump_stack+0x19/0x20 [ 268.883999][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 268.884026][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 268.884059][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 268.884085][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 268.884112][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.884142][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 268.884172][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 268.884200][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 268.884230][ T37] watchdog+0xd8f/0xed0 [ 268.884262][ T37] ? __cfi_watchdog+0x10/0x10 [ 268.884292][ T37] ? __kasan_check_read+0x15/0x20 [ 268.884327][ T37] ? __kthread_parkme+0x138/0x180 [ 268.884348][ T37] ? schedule+0xc6/0x240 [ 268.884378][ T37] kthread+0x2ca/0x370 [ 268.884401][ T37] ? __cfi_watchdog+0x10/0x10 [ 268.884432][ T37] ? __cfi_kthread+0x10/0x10 [ 268.884456][ T37] ret_from_fork+0x67/0xa0 [ 268.884488][ T37] ? __cfi_kthread+0x10/0x10 [ 268.884511][ T37] ret_from_fork_asm+0x1a/0x30 [ 268.884547][ T37] [ 268.884569][ T37] Sending NMI from CPU 0 to CPUs 1: [ 269.038351][ C1] NMI backtrace for cpu 1 [ 269.038366][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 98bacdaf52065bb91416bd5578e49f5aee2639ea [ 269.038387][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.038399][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x33/0x70 [ 269.038427][ C1] Code: 8b 45 08 65 48 8b 0c 25 00 eb 04 00 65 8b 15 0c ed 7e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 0b 00 00 00 <74> 2c 8b 91 c8 0b 00 00 83 fa 02 75 21 48 8b 91 d0 0b 00 00 48 8b [ 269.038442][ C1] RSP: 0018:ffffc90000230ca0 EFLAGS: 00000046 [ 269.038457][ C1] RAX: ffffffff8143a49a RBX: 0000000000000001 RCX: ffff88810366df00 [ 269.038470][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000008 [ 269.038482][ C1] RBP: ffffc90000230ca0 R08: 0000000000000003 R09: 0000000000000004 [ 269.038493][ C1] R10: dffffc0000000000 R11: fffff520000461b0 R12: ffff8881f6f4f980 [ 269.038506][ C1] R13: 000000000008ba70 R14: 0000000000000001 R15: ffff88810366df00 [ 269.038518][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 269.038539][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.038551][ C1] CR2: 00007fcafa3b4198 CR3: 000000010ea60000 CR4: 00000000003526b0 [ 269.038566][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 269.038577][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 269.038588][ C1] Call Trace: [ 269.038595][ C1] [ 269.038602][ C1] kvm_steal_clock+0x3a/0x170 [ 269.038628][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 269.038649][ C1] update_rq_clock+0x6a7/0x7c0 [ 269.038673][ C1] ? wake_up_process+0x14/0x20 [ 269.038698][ C1] ? __cfi_update_rq_clock+0x10/0x10 [ 269.038723][ C1] _nohz_idle_balance+0x3bd/0x5a0 [ 269.038745][ C1] ? lapic_next_event+0x15/0x20 [ 269.038771][ C1] ? nohz_run_idle_balance+0x160/0x160 [ 269.038795][ C1] ? sched_clock+0x44/0x60 [ 269.038821][ C1] ? sched_clock_cpu+0x75/0x400 [ 269.038843][ C1] sched_balance_softirq+0x8a/0x170 [ 269.038859][ C1] handle_softirqs+0x1ab/0x630 [ 269.038885][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 269.038908][ C1] __irq_exit_rcu+0x48/0xc0 [ 269.038922][ C1] irq_exit_rcu+0xd/0x30 [ 269.038936][ C1] sysvec_call_function_single+0x7f/0x90 [ 269.038961][ C1] [ 269.038966][ C1] [ 269.038972][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 269.038989][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 269.039016][ C1] Code: cc cc cc b8 d7 0b 64 85 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 269.039030][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 269.039043][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff858d20be [ 269.039056][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000042b5bc [ 269.039068][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 269.039080][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cdbe0 [ 269.039093][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb1ce8 [ 269.039106][ C1] ? ct_kernel_exit+0x7e/0xb0 [ 269.039122][ C1] default_idle+0x17/0x30 [ 269.039138][ C1] arch_cpu_idle+0xd/0x20 [ 269.039154][ C1] default_idle_call+0x3f/0x80 [ 269.039171][ C1] do_idle+0x1a0/0x470 [ 269.039188][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 269.039207][ C1] cpu_startup_entry+0x48/0x70 [ 269.039223][ C1] start_secondary+0x12e/0x140 [ 269.039244][ C1] common_startup_64+0x13b/0x157 [ 269.039269][ C1]