last executing test programs: 5m4.294256394s ago: executing program 1 (id=2): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000002000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050810000000000000040000", 0x58}], 0x1) tee(r0, r1, 0x2, 0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1005}, 0x4) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x6, 0x0, 0x129, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x800, 0x0}, {0x1, 0x0, 0x180000, 0x0}, {0x1, 0x0, 0x3cb0, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x1, 0x0, 0x4e00000, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x2, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x200000, 0x0}, {0x1, 0x0, 0x80000002, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5m4.108017379s ago: executing program 1 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000180)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async, rerun: 64) r4 = dup(r1) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x9b01, 0x500) ioctl$EVIOCSREP(r8, 0x40084503, 0x0) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, &(0x7f0000000080)=0xffffffffffffffef) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) fremovexattr(r7, &(0x7f0000000040)=@known='com.apple.system.Security\x00') 4m48.56383423s ago: executing program 32 (id=8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000180)={'bridge_slave_0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async, rerun: 64) r4 = dup(r1) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r6, 0xae03, 0x1) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f0000000100), 0x9b01, 0x500) ioctl$EVIOCSREP(r8, 0x40084503, 0x0) (async) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, &(0x7f0000000080)=0xffffffffffffffef) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) fremovexattr(r7, &(0x7f0000000040)=@known='com.apple.system.Security\x00') 3m15.090573343s ago: executing program 0 (id=2353): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESOCT]) 3m15.090363583s ago: executing program 0 (id=2354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x19c000}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) (async) r4 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) pselect6(0x40, &(0x7f0000000140)={0x9, 0x3, 0x3cb5, 0x1, 0x8, 0xd62, 0x1, 0x3}, &(0x7f0000000180)={0x6, 0x92, 0x3, 0x8, 0x2, 0x4475a586, 0xa, 0x5}, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x8000000000000000, 0x6, 0x2, 0x1ff, 0x24}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x24bf]}, 0x8}) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)) 3m15.074301784s ago: executing program 0 (id=2355): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$sock_SIOCGSKNS(r4, 0x894c, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.99936295s ago: executing program 0 (id=2356): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{r0, r1/1000+10000}, 0x4, 0xf, 0x4}, 0x18) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0) 3m14.99916608s ago: executing program 0 (id=2357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000000)) 3m14.99720704s ago: executing program 0 (id=2358): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000200)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r4], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r6, r5, 0x0, 0x80000000) faccessat2(r5, &(0x7f00000000c0)='./file0\x00', 0x26, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000580)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x200}) 2m58.918385042s ago: executing program 33 (id=2358): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000200)) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=r4], 0xb0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r6, r5, 0x0, 0x80000000) faccessat2(r5, &(0x7f00000000c0)='./file0\x00', 0x26, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000580)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x0, 0x200}) 2m15.008006435s ago: executing program 3 (id=2993): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010700000000000000000100000500010001"], 0x1c}}, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4a, 0x4}, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x10b701) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000100)={0x1}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[]) 2m14.000118966s ago: executing program 3 (id=3022): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x2200, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0xffffff93) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffff7, 0x80, 0xc3, 0x10802, 0x7, "096ef6fc00", 0x69d1, 0xfffffffb}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x10000000, 0x0, 0x0, 0x8000, 0x11, "0062ba7d82000000160000000000f738096304"}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000500)=""/72) r4 = syz_open_pts(r1, 0x900) r5 = dup3(r4, r1, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) fchdir(r0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0xd}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000580)=""/209, 0xd1}], 0x2, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(r7, &(0x7f0000000280)='./file1\x00', 0x4d) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r8, 0x7fffffffffffffff, 0x2) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 2m13.999616276s ago: executing program 3 (id=3023): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890d, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) close(0xffffffffffffffff) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) timerfd_create(0x8, 0x80800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00002cf000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000052d000/0x2000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@remote, @private=0xa010102, 0x1c, 0xd}}) write(r3, &(0x7f0000002400)="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", 0x1000) 2m13.995931926s ago: executing program 3 (id=3025): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) socket$inet(0x2, 0x4, 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x6, 0x2, 0x40}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x7}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) 2m13.995565756s ago: executing program 3 (id=3026): syz_open_dev$MSR(&(0x7f0000000000), 0x40100000000, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x40100000000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x2, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="77395d4f6a4a552491aac8433c535ec847f7e5462aaf43acc3cf34afd6446292cb81f11c868697040a36bd87026e38cc666ab47e410e0ccd0db405c94e843f4464ff828018de0b1eb8a4f892ac88fa7beba78b0821585ff460ef103c7a42199f21d33c420b38022a42e0", 0x6a}], 0x1, 0xfffffe45, 0xffffffff, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000140)='oom_score\x00') (async) r3 = syz_open_procfs(r2, &(0x7f0000000140)='oom_score\x00') r4 = socket$packet(0x11, 0x3, 0x300) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/224) (async) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000180)=""/224) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) r5 = accept$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) (async) mremap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000004c0)=0x5, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000004c0)=0x5, 0x4) r8 = syz_clone(0x10040100, &(0x7f0000000500)="60dd7a0f3380c59cbfd0b58e189f9e7655698f8936ac9490ad463f11780fa08f832487981dbfa3a61b5e55fb01767c68ffc96f5faccc1d5bfdde1f12b31cc506b234f1ce5099e2be6793652f1b1fdc1717ac56d52618b023d03c80a7712faa367d2a2c6ccc30d8ba6a5484170bccdfccf55c495dbdd3b910cc41076a502cd185a097", 0x82, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="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") write$binfmt_script(r3, &(0x7f0000001640)={'#! ', './file0', [{0x20, './binderfs/binder1\x00'}, {0x20, '/dev/cpu/#/msr\x00'}, {0x20, './binderfs/binder1\x00'}], 0xa, "44ef77e8495b670f78c121e752079790c5a4047ab470e271b81f768726eb1db5fe934ecf4090035c729bee85d7eee136cdd8bc551185329f8dc36c0c43567f0cb11f084db13ec6c1c3b847a3d9b21b1a14ba52893f999722dd8a377069cf7a2a7cb8010e65bb53176b91a231cfbbdb4f2dad1f07db572ed2093c531174"}, 0xc0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001700)={0x73622a85, 0x1}) write$P9_RGETLOCK(r3, &(0x7f0000001740)={0x31, 0x37, 0x1, {0x0, 0x4, 0x2, r8, 0x13, './binderfs/binder1\x00'}}, 0x31) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$FIONCLEX(r3, 0x5450) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000002840)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/4096, 0x1000, 0x0, &(0x7f0000002780)=""/149, 0x95}, &(0x7f0000002880)=0x40) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000028c0), 0x60001) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000028c0), 0x60001) fsetxattr$security_selinux(r10, &(0x7f0000002900), &(0x7f0000002940)='system_u:object_r:lib_t:s0\x00', 0x1b, 0x0) sendmmsg$inet(r7, &(0x7f0000002b00)=[{{&(0x7f0000002980)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000029c0)}], 0x1, &(0x7f0000002a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x78, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0x0, [{@remote, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xe3, 0x1, 0x6, [{@multicast2, 0xedc2}, {@local}, {@private=0xa010101, 0x3}, {@private=0xa010101, 0xffffffff}, {@remote, 0x14e000}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x19}, {@empty, 0x3}]}, @generic={0x7, 0x9, "a5c91d99ed9985"}, @timestamp={0x44, 0x14, 0xda, 0x0, 0x8, [0x7fff, 0x8, 0x7, 0x2]}, @end]}}}], 0x90}}], 0x1, 0x895) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002b40)) r11 = add_key(&(0x7f0000002b80)='.request_key_auth\x00', &(0x7f0000002bc0)={'syz', 0x1}, 0x0, 0x0, 0x0) r12 = add_key(&(0x7f0000002c00)='cifs.spnego\x00', &(0x7f0000002c40)={'syz', 0x2}, &(0x7f0000002c80)="9f9daea9b362658e2f694c2bdcddec50b00e6d0fe041f5f62997c5634f2edcfb4cf195e64b174df48a7c155181a57ee82115b022622642c3e079335b4aa36a8a1a8100fab1454ef2b21ff0fcb37d20e138528a1d09008e28e7aae1de5c796db76c71be88708cc112a8c0e88e404c37d82a1a8c61728bf3b61039eef9b6d412660bbb405f206230a8195957d4e708483aa56b8ae051353c5e4448e56be0e9589a3240c368c5465adf6e5f18b3b873ae78b92b86ce03da83ace24b10fee1fe3037f91c9867604d37", 0xc7, 0xfffffffffffffffc) keyctl$unlink(0x9, r11, r12) 2m13.366265596s ago: executing program 3 (id=3039): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000003c0)=@arm64) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x29, 0x54, 0x0, 0x15f9d549, 0x6a, @mcast1, @private2, 0x700, 0x700, 0x0, 0x7}}) gettid() sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf251200000084000180140002006c6f000000000000000000000000000008000300030000000800030000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020065727370616e30000000000000000000080003000300000014000200626f6e64300000000000000000000000140002006c6f000000000000000000000000000008000300020000002800018008000100", @ANYRES32=0x0, @ANYBLOB="08010100", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000000000000000080007000500000008000800af2c000008000800d30a0000080009000900000008000800080000000800080000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0xe, 0x22, {0x22, 0x22, "e52581e3a39c209b6a853f2576ee7c0828fee990890123cefcd278c1fc8c72bf"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="0971fa856d309c20e75c4dbce60a9f39f2bcf00d3cdde86a3ea93a7e0489b9ae8aaee2e4762cc6260b76341a2081de68afdc74f2e0d664a4f444d4591dcd73b9e88e6301010000dcd00828424cd238cbfc4ac3fa304e5d4165a4cd293bf9b5601bdc26ed26b090f6be614b87eebed46c83ecb12dde333558a86fb809"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0xfc, 0x6, "e91a5511", "3922ed69"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x99, 0x8, 0x81, 0x8, 0x100}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="4012bb00000075888bfa4759b061ffcf6fab666e0000000001000000a4fc15a7afcead3dace34de62f8d75d9a59cce576336c3da5eefa10feac85f168ca415fd4e8d014e24798ee1898b12a9aae974510e070c13e390d07338f49591c005db7b27c89b2140f99d1bf0960c97aeebcf29a47b0982e4cfd007bd0a467576bd908f7f83807e75e687afdaa3f44235f160ab24625a79d6342b527b16f45a460b00b4df7d4fba44a4bd7ebdec956827e16132d7f668e87dd6c002883528953e053de297"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xc2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000400)=ANY=[@ANYBLOB="fba30000001a17499d836361f000000100ba006df281b70d00007f4cad77a463f8304825f76a0156f42fda1ad5aced5c350a3ece550f4b0fc184c72b4ee8e00323137db40ad2c7ee7208d37e04b65223acce07df8631e1256259dadf510d4fc25a6e1f25a5212c78ecf4efbf46"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0xb, 0x2, "3dae"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9ce}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="4938c0368417"}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "250e"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xeb}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) 1m57.199511277s ago: executing program 34 (id=3039): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000003c0)=@arm64) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb10000", 0x13, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'ip6gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', 0x0, 0x29, 0x54, 0x0, 0x15f9d549, 0x6a, @mcast1, @private2, 0x700, 0x700, 0x0, 0x7}}) gettid() sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r6, @ANYBLOB="040027bd7000fddbdf251200000084000180140002006c6f000000000000000000000000000008000300030000000800030000000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020065727370616e30000000000000000000080003000300000014000200626f6e64300000000000000000000000140002006c6f000000000000000000000000000008000300020000002800018008000100", @ANYRES32=0x0, @ANYBLOB="08010100", @ANYRES32=r9, @ANYBLOB="1400020000000000000000000000000000000000080007000500000008000800af2c000008000800d30a0000080009000900000008000800080000000800080000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x8040) syz_usb_control_io(r4, &(0x7f0000000480)={0x2c, &(0x7f0000000040)={0x20, 0xe, 0x22, {0x22, 0x22, "e52581e3a39c209b6a853f2576ee7c0828fee990890123cefcd278c1fc8c72bf"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, &(0x7f0000000d40)=ANY=[@ANYBLOB="0971fa856d309c20e75c4dbce60a9f39f2bcf00d3cdde86a3ea93a7e0489b9ae8aaee2e4762cc6260b76341a2081de68afdc74f2e0d664a4f444d4591dcd73b9e88e6301010000dcd00828424cd238cbfc4ac3fa304e5d4165a4cd293bf9b5601bdc26ed26b090f6be614b87eebed46c83ecb12dde333558a86fb809"], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0xfc, 0x6, "e91a5511", "3922ed69"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x99, 0x8, 0x81, 0x8, 0x100}}}, &(0x7f0000000980)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="4012bb00000075888bfa4759b061ffcf6fab666e0000000001000000a4fc15a7afcead3dace34de62f8d75d9a59cce576336c3da5eefa10feac85f168ca415fd4e8d014e24798ee1898b12a9aae974510e070c13e390d07338f49591c005db7b27c89b2140f99d1bf0960c97aeebcf29a47b0982e4cfd007bd0a467576bd908f7f83807e75e687afdaa3f44235f160ab24625a79d6342b527b16f45a460b00b4df7d4fba44a4bd7ebdec956827e16132d7f668e87dd6c002883528953e053de297"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x8f}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xc2}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000400)=ANY=[@ANYBLOB="fba30000001a17499d836361f000000100ba006df281b70d00007f4cad77a463f8304825f76a0156f42fda1ad5aced5c350a3ece550f4b0fc184c72b4ee8e00323137db40ad2c7ee7208d37e04b65223acce07df8631e1256259dadf510d4fc25a6e1f25a5212c78ecf4efbf46"], &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0xb, 0x2, "3dae"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x9ce}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @random="4938c0368417"}, &(0x7f0000000800)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000840)={0x40, 0x19, 0x2, "250e"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x1c, 0x1}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xeb}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x4}}) 1m32.908295533s ago: executing program 5 (id=3739): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$cgroup_pid(r1, 0x0, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) unshare(0x44040200) timer_gettime(r2, &(0x7f0000002180)) gettid() (async) sendfile(r0, r0, 0x0, 0x7ffff000) 1m32.793404312s ago: executing program 5 (id=3747): r0 = socket$inet6(0xa, 0x1, 0x80000000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x22}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x749e43, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000140)=0x2) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f00000001c0)={0x3, 0x6, 0x1e1, 0x1, 0x6, "79abe401fefd800000000000006564db2600", 0x202, 0x5031}) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$UI_GET_SYSNAME(r9, 0x8040552c, &(0x7f0000000300)) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000240)=0xd) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m32.690099341s ago: executing program 5 (id=3755): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x406000, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_INPUT2(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0c001c"], 0x6) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @broadcast, 0x6, 0xb}}) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b03000010000000000026000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}}, 0x0) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000340)=0x10003) close(r9) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) 1m32.536950223s ago: executing program 5 (id=3760): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x40, 0x6}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0xffffffffffffffff, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x3, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r0 = socket$nl_route(0x10, 0x3, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x1) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x10a, 0x400000003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$unix(r2, &(0x7f0000000480)=@file={0x1, './file0/file0\x00'}, 0x6e) 1m32.402806653s ago: executing program 5 (id=3764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1m32.205187649s ago: executing program 5 (id=3770): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x800f) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341d040000000000000109022400010000000109045597010300000009210000000122070009058103"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a001511"], 0x14}], 0x1}, 0x4000080) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0002c900"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, &(0x7f0000002140)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x80}, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x5}, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r5, r4, 0x0, 0x80000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f000000b5c0), 0x0, 0x240058d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m32.19467987s ago: executing program 35 (id=3770): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002180)=0x800f) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341d040000000000000109022400010000000109045597010300000009210000000122070009058103"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006a001511"], 0x14}], 0x1}, 0x4000080) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0002c900"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, 0x0, &(0x7f0000002140)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x80}, 0x0, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x5}, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) sendfile(r5, r4, 0x0, 0x80000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) sendmmsg$inet(r7, &(0x7f000000b5c0), 0x0, 0x240058d4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') getcwd(0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 49.757505495s ago: executing program 2 (id=4467): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) socket$inet(0x2, 0x3, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @empty}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @multicast1}}]}, 0x190) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 49.689098601s ago: executing program 2 (id=4469): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000131000/0x400000)=nil) madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) clock_gettime(0x4, &(0x7f00000004c0)) 49.687967161s ago: executing program 2 (id=4471): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003240)=""/4106, 0x100a}, {&(0x7f0000003180)=""/151, 0x97}, {&(0x7f00000001c0)=""/261, 0x105}, {&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000800)=""/127, 0x7f}, {&(0x7f0000000040)=""/27, 0x1b}], 0x8}, 0x81}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2100, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r1, &(0x7f0000002400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6798428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc000f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb68ec4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b330e7735bf1c7e0e26aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010", 0x1000) 49.648908414s ago: executing program 2 (id=4473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f00fe80000000008847875a65059ff57b00000000000000000000000000ac1414aa00006558"], 0xcfa4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x66) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @private=0xa010102}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2e, {0x2, 0x4e22, @empty}}) 49.593210309s ago: executing program 2 (id=4475): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26008, 0x13, r0, 0xb085c000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000040)={0xffffffffffffffff}) 49.591393409s ago: executing program 2 (id=4476): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000740)=[{{&(0x7f0000000080)=@generic={0xb, "457eabc63e756e765bebe92f4a677d9acded30755fb124c7753d06a22b1683186d68ff3cb422ec534aa6e1fbc65555d6f1956d3cef41f6bddc5176482b9880e9cfe0959f8dd8887e991fd00df76706cc13cc819f49de50e9fc295c980f05aaa77b5e54e9d02b130a5fdd843595abf2d5e26a5ce44eae6f653e230b54c71b"}, 0x80, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18, 0x0, r4, {0x7fff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',aname=!%()-\\)*,noxattr,fscontext\x00\x00\x00\x00adm_u,dont_measure,\x00']) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x56, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141641) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 38.986858072s ago: executing program 7 (id=4704): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') statfs(0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000040), 0x102d424, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="d00021f3cf551f46373e97a9a58fa5ed98bf27b17a1595ea8f0b7035574940724c7433ad848480809277a533527bd2835163d074429caf2561332d02a768eb03686891d28ddc2da0aea6b4ddd7c8eb", @ANYRES64=r5, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES8=r2]) 38.964728774s ago: executing program 7 (id=4705): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000081, 0xffffffff, 0x7ff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c10000000224effffffff", 0x58}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000001c0)={0x3, 0x82}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/vmallocinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x1000000) r6 = epoll_create1(0x0) fgetxattr(r6, &(0x7f0000002600)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x100010, r5, 0x52ed4000) recvmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x100, &(0x7f0000000040)) 38.053404477s ago: executing program 7 (id=4709): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000180)={0x42907480, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) 37.965535234s ago: executing program 7 (id=4710): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x10, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x2, 0xa2a, 0x37, 0x850, 0x3, 0x32000000, 0x65b0928a}, 0x1c) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f00000000c0)) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_driver={0x3a2, 0x0, &(0x7f0000000140)="094e110818fe11412bbcd10245cf35a6a48abbd65b7cb3d66fce2221fe23a57091d9b821fcbf15aca9da68db01b014b209b11f66b20c9776c4d4affcee4f97ce764af3b977ffe79ba63153b41ecd2b812c945351847eb0cb2a3f113698"}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1fb2, 0x600000) read$hidraw(r2, &(0x7f0000000240)=""/118, 0x76) r3 = syz_usb_connect(0x2, 0x113, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xc9, 0x82, 0xe9, 0x8, 0x2c7c, 0x306, 0xd720, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x101, 0x1, 0x81, 0x2, 0x0, 0x2, [{{0x9, 0x4, 0xe8, 0x80, 0x3, 0xff, 0x0, 0x0, 0x2, [], [{{0x9, 0x5, 0x8, 0x3, 0x20, 0x1f, 0x31}}, {{0x9, 0x5, 0x8, 0x4, 0x28, 0x2, 0xa, 0x6}}, {{0x9, 0x5, 0xd, 0x8, 0x10, 0x20, 0x4c, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xfd}, @generic={0xcd, 0x9, "def5b5acce9135cf7848daebd299388d6a803b026e3c9af799f00c390f24b610dd717a34377f32749f0f38c965bc6b83f5cad0ba5d7181d8607206902290bd64edd3143887a3925817e0bcaad235fb59b12d7fd5ff831a4658f314648cf0d717e5169e213ba219bd6ed2dd03936c39d5f714d76c01a74ca52c36177333cbccfc29dd777f3e1fb973212f80ea8188b6c7e1af892625e76c8e3ff24382f26e09eec3273788a120a651f255031ffc50acc55caeec4c9e6cbae82783f41d36ee7b09597f1312272c9c467d9bd3"}]}}]}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x310, 0x6, 0xe9, 0x66, 0x2aa912958e8bece7}, 0x3c, &(0x7f0000000440)={0x5, 0xf, 0x3c, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x4, 0xf, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "46e504d80b580f70da9013a18c115fa9"}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "1d422823c751092e4b367d4e671b439a"}]}, 0x5, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x421}}, {0xb2, &(0x7f0000000500)=@string={0xb2, 0x3, "1f50d21197ae7c148854a70a2192dc10844292cf75022fd1eed3b215ce3d071d03f0bfb28b48f1d65a6f443f9a67305418eaeaa02153e8a29ae4714d204e5d1be63dcd54fe415e0f9f8a23943dfe858433c40aabceab799d30e71092378ff47422d445c485bedd9b8106b95d97e2c5a41f939cd0352ebe808f25cb65349099117430822d5a3810502f00574c2458b3b92ad2d5bc271907891d3ac27fb49feb356739444b2d7577899d8e20fb4a24c451"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x204a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc04}}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_vlan\x00', 0x0}) connect$packet(r0, &(0x7f0000000700)={0x11, 0x5, r4, 0x1, 0xe9, 0x6, @multicast}, 0x14) pipe2$watch_queue(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$HIDIOCGRAWINFO(r6, 0x80084803, &(0x7f0000000780)=""/19) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f00000007c0)={0x0, "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"}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000900)={{0xffffffffffffffff, 0x0, 0x2, 0x3, 0x1}, 0x0, 0x65a}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xa0, 0x31, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x1, 0x9, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0x6, 0xf, 0x7, 0x8, 0x50}, 0x1c, &(0x7f0000000a00)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xad, "77e9e0082ba8539ac91feba7d4b84931"}]}, 0x8, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xcc9ae6cb675f281b}}, {0xe2, &(0x7f0000000a80)=@string={0xe2, 0x3, "98849839546e6552bccf88f648e5c95e7b14400a68ecf76e21ead155041a5be59a6bafdc03af25d7c71015ac3a26b1cc4899fa17987bcadc31da47fdc1a41501acf42fe9c1af327e103f287ea2d1b85b36c5fef1e0e1a8593c1edf91d53a202555551425b0f484d96b732205cdf395aa2339e6d0faa44267a9256764abc5e17e3d0dae178dd98c33a23c190525c58623fd4ef573c057b029fc7c0586b6ea683e8f22d823c1c89df4cd4d2d8f6b058a0d5d318947560d119a75b2c827dbbca3e71508e34d5f9cf8eee9e07c2823df06d6127486b4cdf7eb34334b1aa448056087"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x4c6b}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x42b}}, {0x1a, &(0x7f0000000c40)=@string={0x1a, 0x3, "6a6c081fa5b09bb88b5739eb8619b9a5d4c0ac555c58019e"}}, {0x14, &(0x7f0000000c80)=@string={0x14, 0x3, "5b6d9b10e2935900a455afea0c06d0f2df5b"}}, {0x101, &(0x7f0000000cc0)=@string={0x101, 0x3, "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"}}]}) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000e80)) read$FUSE(r6, &(0x7f0000000ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000002f00)=r7) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000002f40)={0x79, 0x0, 0xfb7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000030c0)={0x1c, 0x0, &(0x7f0000002fc0)=[@exit_looper, @enter_looper, @increfs_done={0x40106308, 0x2}], 0xb0, 0x0, &(0x7f0000003000)="9d95813a66c1f83e63b47ebbbc0d411e441fa7baaefdd19fa25de92f090fea04e10a2a71bc73956a067068800ef6f1c25c8213b34a5dc599e87ef3ca1c233cd66b91b21540f434ab972c9bcc4e4a94284a55840f30ce6506945151dec1e34f50f7cbfd746273dcc4918e0ec7eadb63ed2f2a5a5512423f9aee85e975ccec64ffec947da33bfb9b958d1d9512b3a894333efbce475295c605558f91add3641782bcac3466ce18b1bb860e31f2ebe436a9"}) preadv2(r1, &(0x7f0000004200)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/56, 0x38}, {&(0x7f0000004140)=""/149, 0x95}], 0x3, 0x800, 0x7, 0x9) syz_usb_control_io$hid(r3, &(0x7f0000004400)={0x24, &(0x7f0000004240)={0x20, 0xf, 0x2c, {0x2c, 0x21, "58f6ac31e9dcb7e7045abf405eef0238cc4cbc5633a854cfa2c11d1818b7d92870bf996ca07ee08b57b4"}}, &(0x7f0000004280)={0x0, 0x3, 0xd7, @string={0xd7, 0x3, "91ccb66cd78aaf2caef83210d06737c3772afa85da4de08020bd455f11d6dd94365bab180c129ed995b84c8edc8730ce1b23aa1c8dad0c75c8e4a250f936a2ca6f054ca415d0d5a1fd144e04ff86b882ee631de8b192a499394e50b6ff65dc0f7b945e9a157e6a7f5f9858d2c1cd410d5b1dea341c9a388f52af9726a240af18a52d9cda6193468b62c07ab427a4b5bbf0c6830d83064e69bc2bdb9e3861dae927a2a253b0c213a65523b2aaaa12adbc57a1226827edf9f0582e5b374fdd929d7928d393eaa27e435e57711d9451637b91a4ffb49a"}}, &(0x7f0000004380)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "0f"}, @global=@item_4={0x3, 0x1, 0x4, "1b2a9736"}]}}, &(0x7f00000043c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0x34b}}}}, &(0x7f0000004600)={0x2c, &(0x7f0000004440)={0x0, 0x30, 0x7c, "10f27993f120dd29501aa83385a7b5992c43f6505b1f828ae9327c88a13e21991b15d1bf099af40b91302c934fbdb0335bcf1f0d871aeae44dd7dfb75eabf22c1c82939f2199d9ffb39e0f5c8e19b2e0cc6fd0c19a698c28ea6e7113d974ef26aded98ae7c984e5a0346b081d6ece9fc3174d94d076c646da9276c34"}, &(0x7f0000004500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000004540)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000004580)={0x20, 0x1, 0x7, "1289d622ed91ec"}, &(0x7f00000045c0)={0x20, 0x3, 0x1, 0x6}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000004740)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004700)={&(0x7f00000046c0)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40100}, 0x11) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000004780)={0x4, 0xfff}) copy_file_range(r5, &(0x7f00000047c0)=0xfffffffffffffffe, r0, &(0x7f0000004800)=0x8, 0x6, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000004840), 0x2, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000004880)={0x1, 0x4, 0x0, r0, 0x3}) 37.40570852s ago: executing program 7 (id=4714): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x205, 0x6, 0x6, 0x2c, 0x10003, 0x41, 0x400400200cc0, 0x100ffd, 0x0, 0x9, 0xb43e, 0x3, 0xf, 0x40000000007, 0x68, 0x5], 0x2, 0x174bb3}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000040)={0x0, 0x5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 37.4042802s ago: executing program 7 (id=4715): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = memfd_secret(0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002300)={0x2c, &(0x7f0000002080)={0x0, 0x31, 0xfe, {0xfe, 0x8, "a8b4c8977bc4fcca76f1af98e39ff2237f6ff70ab173e4bf01f70012baa24865e9ca0297278d56202d69601db9ab5ed9f6b6b9e257ec64b152a3dbabefa4d0c18f8965d647ffe6d4c72fc158c1852421723d4a32634224682d0493cb8cd6fb5d6cfb20ffa2a53759802405ce10cd57dc35c841a391bf4eea167c27502074de8445fd69d13f2cea21f2e1b9782ebbca040be5527217694dcc0485b9b0dcabd86421bbb36ca6a069dc848690b7a039f456c3c13360f529b8b78aaf0971ee2905e212a1906c11b435fc6aa028171470206b4fb1c6104f4ca57130d3a2b3d1265e2b94242ecc0b8ed688b50a5f3cd8956fe418a997255f470e07c8cb52b9"}}, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000002200)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "4a498ecca0038ecd8f45b382a9a70115"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x4, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf, 0x200, [0xff00cf, 0xff18, 0xc000, 0xc00f, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x7f, 0x9, 0x40}]}}, &(0x7f0000002280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x66, 0xd, "7ce83f20", "c0ca23f6"}}, &(0x7f00000022c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x85, 0x0, 0x1, 0x6, 0x1, 0x9, 0xfff7}}}, &(0x7f0000002780)={0x84, &(0x7f0000002340)={0x0, 0x16, 0x53, "8a8810cd37d1f7330e02333500d40edf5149f5fadbf0a3d375a831fad0318e69ff44090c9281b5a79c6763eea7d20b3ae906a36dcde0e59e1332fa516ca56749e204c706e1ca16b404167faf09fbc8e087a243"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002440)={0x20, 0x0, 0x4}, &(0x7f0000002480)={0x20, 0x0, 0x8, {0xe0, 0x4, [0x0]}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000002540)={0x40, 0xb, 0x2, '^P'}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000025c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002640)={0x40, 0x19, 0x2, "cb4e"}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0xcf2}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x37}, &(0x7f0000002740)={0x40, 0x21, 0x1, 0xa}}) r5 = fspick(r1, &(0x7f0000002840)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000002880)='-\x00', &(0x7f00000028c0)='./file0\x00', r1) write$FUSE_POLL(r0, &(0x7f0000002900)={0x18, 0xfffffffffffffffe, r2, {0x10001}}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000002940), &(0x7f0000002980)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000029c0)) syz_clone(0x6c000000, &(0x7f0000002a00)="447d241d6e4ee4aaa1a9cd1e4d05f33f2cad1afac6a325c6e488a33359ed9c14469d886cf2fe5ce9282ad13110a69d7291ae28309e53059f2fe9041cf459471fb59c3c51bea94ff592bbdef342282e89ca728d301d2e483b2eef988dd016ff92d8b7603865f51998b010668244885fd27ef310f5906695a5bf57e1c0c1b703d3f8eedad19340647386c6790649", 0x8d, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="4c56a8f9c96bea09fef69425") r7 = eventfd(0x80) r8 = epoll_create(0x2d) r9 = fsopen(&(0x7f0000002fc0)='xfs\x00', 0x1) io_submit(0x0, 0x6, &(0x7f00000030c0)=[&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000002b80)="71460c71c2545aca53149b4a5ef6a9db6af4c6606e644469c4bd55fb1425758f4bd3b10004d32b864bd7cac6d6da8c23cc8fc13294293bdf18d78bce56956c2b89d9bd12616f8d632ec645a01edcd341c7f624", 0x53, 0x8, 0x0, 0x2, r1}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x2, 0x200, r6, &(0x7f0000002c40)="0c014a70e739df2301d0e26e9f73f310af750eeebc1dff2af890b589df995f4cc1230dcd9cfc6dde9dc295921e33b69e6e9b2db497ef36104260befa2052546c1b284c7eb6fb0fbb532f809fdfe24794219fdd1779e812e6aed7be85900bdc5020e9318b673278556fc570030e2e684e0f268a5efae4d153ea561d537f0290b4c1c29665c51ef503f376c5b7557bf0367597e7770d48d2c5f31029eec7ba954291fba6c5557a12300286ed05a9ffa9d5553fb82de5d6c0adbd286503eaa10c1f92c33b835e84df96317183", 0xcb, 0x7fff, 0x0, 0x1, r1}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x6, 0x2c1, r5, &(0x7f0000002d80)="1a3bbd0849cf0e0f8f3a2db6a51c85af8c3cf80bc78df9413ae8ce12e4c085d29735ca4b214b0e03526ce13a6d78dc3b5633adb8ac51b5623a7ab7f63382c389791ac166108b0baf7451205b290e9e4ae624f1836513b89bde2cde2bae0e58ceaf89e3ff3cee68bf93b3b539d18ffdcd51416eff1f784f72fbfef5629683b8019ff3a6bb39650eb962155a1c364904eece64e684d53d21941459d614856a881b840f373bb1ee786bdf65e71966065883afb440c1df5f8b5b", 0xb8, 0x7, 0x0, 0x2, r7}, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x8, 0xc, 0xffffffffffffffff, &(0x7f0000002e80)="bd704480f19984a257644082c313df0a7e9289a6983064181a960387d98f017ddc4d01f9d1f58a144b3f661387cf1faa9a335cc9eee83946c08fa41483d91e22666dc3c28b25452f1235c5fb0fec4028e1441a6205d8", 0x56, 0x3, 0x0, 0x3, r1}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x2, 0x8, r8, &(0x7f0000002f40)="7ef1c66e227df4aeb1fc577bb0b3df32624587aceba0bac142861d0ff76cd40059194a1fd3aa452ad492c251", 0x2c, 0xe91d, 0x0, 0x1, r1}, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000003000)="9acf000678f6056385ec2607c1486ca6cfee13b92c151ea5820ff731e435406f60ba7f23a15362db9dcdcbb81745e4aaad901f1ed6c5550e85cfd40c9bd69ab7521ec396ad5c2eceb9aac224c2a68f1df01736e173331a925b2ef9b73b5f205abdf5ea6962a82f4f3bf69f51eb83d922df1d805e8d7b23c0f6479315ea58baae", 0x80, 0x9, 0x0, 0x1, r1}]) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000003100), &(0x7f0000003140)=0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f00000031c0)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000003200)={{0x2, 0x4e24, @remote}, {0x306, @broadcast}, 0x20, {0x2, 0x4e21, @private=0xa010100}, 'pim6reg\x00'}) sync() ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000003280)=""/10) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000032c0)="24f79170959d53f93d02523f3a9769cd456a9fc98be5cab65e5341db467c33b2d27d4b3c2e5c4560dfb624e069d8a176dd550066a9292e6a8ceb57bdfbdc9ab7a612582ab1a7b3963e561fc3c46d1d2b0534fb238365a60756a65d860cab3a204385077c7a445e0322a15a2e3e88d039ae1bbdd3c8aee58b85b10cfa1042d286a9", 0x81) r11 = accept4$unix(r1, &(0x7f0000003380)=@abs, &(0x7f0000003400)=0x6e, 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r11, 0x4008941a, &(0x7f0000003440)=0x2) stat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)='system.posix_acl_access\x00', &(0x7f00000035c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r3}, {0x2, 0x6, r3}, {0x2, 0x5, r12}], {0x4, 0x1}, [{0x8, 0x7, r4}, {0x8, 0x0, r4}, {0x8, 0x7949aca6693537ff, r4}, {0x8, 0x99853c60ac808f5d, r4}, {0x8, 0x3, r4}], {}, {0x20, 0x3}}, 0x64, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000003640)) io_setup(0x4, &(0x7f0000003680)=0x0) io_cancel(r13, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x2, 0x7, r10, &(0x7f00000036c0)="7307c02c59916eaccaee19e719812a2bcd12d2fa06e0eafa19d143483f0812a40c48f19651e6127222e2ab1c27a8834728bf230af4ebdfe7c466826f8891a3642bb1349a45abb0e2eafe6ba323a364b3b53d80b56db0c447f4de60c62639c4d285fbf3ba410de545cce91757d4f952f257bca56bc4aba4095291834ec56cbe9de2fe9d36383b89e36c000f2f41a8b9e79b9d95c877888a36ceb1645d1152fa42eaec5819b8a08972c010af", 0xab, 0xa, 0x0, 0x1}, &(0x7f00000037c0)) 33.534452891s ago: executing program 36 (id=4476): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x12) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r3, &(0x7f0000000740)=[{{&(0x7f0000000080)=@generic={0xb, "457eabc63e756e765bebe92f4a677d9acded30755fb124c7753d06a22b1683186d68ff3cb422ec534aa6e1fbc65555d6f1956d3cef41f6bddc5176482b9880e9cfe0959f8dd8887e991fd00df76706cc13cc819f49de50e9fc295c980f05aaa77b5e54e9d02b130a5fdd843595abf2d5e26a5ce44eae6f653e230b54c71b"}, 0x80, 0x0}}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18, 0x0, r4, {0x7fff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',aname=!%()-\\)*,noxattr,fscontext\x00\x00\x00\x00adm_u,dont_measure,\x00']) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'xfrm0\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'vlan1\x00', {0xffe}, 0x6}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x2c020400) fchdir(0xffffffffffffffff) syz_usb_connect(0x0, 0x56, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x141641) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 20.910439507s ago: executing program 37 (id=4715): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = memfd_secret(0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002300)={0x2c, &(0x7f0000002080)={0x0, 0x31, 0xfe, {0xfe, 0x8, "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"}}, &(0x7f00000021c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}, &(0x7f0000002200)={0x0, 0xf, 0x4e, {0x5, 0xf, 0x4e, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "4a498ecca0038ecd8f45b382a9a70115"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x4, 0x9}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x4, 0xf, 0x200, [0xff00cf, 0xff18, 0xc000, 0xc00f, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x5, 0x7f, 0x9, 0x40}]}}, &(0x7f0000002280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0x66, 0xd, "7ce83f20", "c0ca23f6"}}, &(0x7f00000022c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x85, 0x0, 0x1, 0x6, 0x1, 0x9, 0xfff7}}}, &(0x7f0000002780)={0x84, &(0x7f0000002340)={0x0, 0x16, 0x53, "8a8810cd37d1f7330e02333500d40edf5149f5fadbf0a3d375a831fad0318e69ff44090c9281b5a79c6763eea7d20b3ae906a36dcde0e59e1332fa516ca56749e204c706e1ca16b404167faf09fbc8e087a243"}, &(0x7f00000023c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002440)={0x20, 0x0, 0x4}, &(0x7f0000002480)={0x20, 0x0, 0x8, {0xe0, 0x4, [0x0]}}, &(0x7f00000024c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000002500)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000002540)={0x40, 0xb, 0x2, '^P'}, &(0x7f0000002580)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000025c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000002640)={0x40, 0x19, 0x2, "cb4e"}, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0xcf2}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0xd4}, &(0x7f0000002700)={0x40, 0x1e, 0x1, 0x37}, &(0x7f0000002740)={0x40, 0x21, 0x1, 0xa}}) r5 = fspick(r1, &(0x7f0000002840)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000002880)='-\x00', &(0x7f00000028c0)='./file0\x00', r1) write$FUSE_POLL(r0, &(0x7f0000002900)={0x18, 0xfffffffffffffffe, r2, {0x10001}}, 0x18) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000002940), &(0x7f0000002980)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000029c0)) syz_clone(0x6c000000, &(0x7f0000002a00)="447d241d6e4ee4aaa1a9cd1e4d05f33f2cad1afac6a325c6e488a33359ed9c14469d886cf2fe5ce9282ad13110a69d7291ae28309e53059f2fe9041cf459471fb59c3c51bea94ff592bbdef342282e89ca728d301d2e483b2eef988dd016ff92d8b7603865f51998b010668244885fd27ef310f5906695a5bf57e1c0c1b703d3f8eedad19340647386c6790649", 0x8d, &(0x7f0000002ac0), &(0x7f0000002b00), &(0x7f0000002b40)="4c56a8f9c96bea09fef69425") r7 = eventfd(0x80) r8 = epoll_create(0x2d) r9 = fsopen(&(0x7f0000002fc0)='xfs\x00', 0x1) io_submit(0x0, 0x6, &(0x7f00000030c0)=[&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x1, 0x1, r1, &(0x7f0000002b80)="71460c71c2545aca53149b4a5ef6a9db6af4c6606e644469c4bd55fb1425758f4bd3b10004d32b864bd7cac6d6da8c23cc8fc13294293bdf18d78bce56956c2b89d9bd12616f8d632ec645a01edcd341c7f624", 0x53, 0x8, 0x0, 0x2, r1}, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x2, 0x200, r6, &(0x7f0000002c40)="0c014a70e739df2301d0e26e9f73f310af750eeebc1dff2af890b589df995f4cc1230dcd9cfc6dde9dc295921e33b69e6e9b2db497ef36104260befa2052546c1b284c7eb6fb0fbb532f809fdfe24794219fdd1779e812e6aed7be85900bdc5020e9318b673278556fc570030e2e684e0f268a5efae4d153ea561d537f0290b4c1c29665c51ef503f376c5b7557bf0367597e7770d48d2c5f31029eec7ba954291fba6c5557a12300286ed05a9ffa9d5553fb82de5d6c0adbd286503eaa10c1f92c33b835e84df96317183", 0xcb, 0x7fff, 0x0, 0x1, r1}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x6, 0x2c1, r5, &(0x7f0000002d80)="1a3bbd0849cf0e0f8f3a2db6a51c85af8c3cf80bc78df9413ae8ce12e4c085d29735ca4b214b0e03526ce13a6d78dc3b5633adb8ac51b5623a7ab7f63382c389791ac166108b0baf7451205b290e9e4ae624f1836513b89bde2cde2bae0e58ceaf89e3ff3cee68bf93b3b539d18ffdcd51416eff1f784f72fbfef5629683b8019ff3a6bb39650eb962155a1c364904eece64e684d53d21941459d614856a881b840f373bb1ee786bdf65e71966065883afb440c1df5f8b5b", 0xb8, 0x7, 0x0, 0x2, r7}, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x8, 0xc, 0xffffffffffffffff, &(0x7f0000002e80)="bd704480f19984a257644082c313df0a7e9289a6983064181a960387d98f017ddc4d01f9d1f58a144b3f661387cf1faa9a335cc9eee83946c08fa41483d91e22666dc3c28b25452f1235c5fb0fec4028e1441a6205d8", 0x56, 0x3, 0x0, 0x3, r1}, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x2, 0x8, r8, &(0x7f0000002f40)="7ef1c66e227df4aeb1fc577bb0b3df32624587aceba0bac142861d0ff76cd40059194a1fd3aa452ad492c251", 0x2c, 0xe91d, 0x0, 0x1, r1}, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x8, 0x6, r9, &(0x7f0000003000)="9acf000678f6056385ec2607c1486ca6cfee13b92c151ea5820ff731e435406f60ba7f23a15362db9dcdcbb81745e4aaad901f1ed6c5550e85cfd40c9bd69ab7521ec396ad5c2eceb9aac224c2a68f1df01736e173331a925b2ef9b73b5f205abdf5ea6962a82f4f3bf69f51eb83d922df1d805e8d7b23c0f6479315ea58baae", 0x80, 0x9, 0x0, 0x1, r1}]) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000003100), &(0x7f0000003140)=0x4) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003180)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$KDGKBMODE(r10, 0x4b44, &(0x7f00000031c0)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000003200)={{0x2, 0x4e24, @remote}, {0x306, @broadcast}, 0x20, {0x2, 0x4e21, @private=0xa010100}, 'pim6reg\x00'}) sync() ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000003280)=""/10) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000032c0)="24f79170959d53f93d02523f3a9769cd456a9fc98be5cab65e5341db467c33b2d27d4b3c2e5c4560dfb624e069d8a176dd550066a9292e6a8ceb57bdfbdc9ab7a612582ab1a7b3963e561fc3c46d1d2b0534fb238365a60756a65d860cab3a204385077c7a445e0322a15a2e3e88d039ae1bbdd3c8aee58b85b10cfa1042d286a9", 0x81) r11 = accept4$unix(r1, &(0x7f0000003380)=@abs, &(0x7f0000003400)=0x6e, 0x80000) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r11, 0x4008941a, &(0x7f0000003440)=0x2) stat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)='system.posix_acl_access\x00', &(0x7f00000035c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r3}, {0x2, 0x6, r3}, {0x2, 0x5, r12}], {0x4, 0x1}, [{0x8, 0x7, r4}, {0x8, 0x0, r4}, {0x8, 0x7949aca6693537ff, r4}, {0x8, 0x99853c60ac808f5d, r4}, {0x8, 0x3, r4}], {}, {0x20, 0x3}}, 0x64, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000003640)) io_setup(0x4, &(0x7f0000003680)=0x0) io_cancel(r13, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x2, 0x7, r10, &(0x7f00000036c0)="7307c02c59916eaccaee19e719812a2bcd12d2fa06e0eafa19d143483f0812a40c48f19651e6127222e2ab1c27a8834728bf230af4ebdfe7c466826f8891a3642bb1349a45abb0e2eafe6ba323a364b3b53d80b56db0c447f4de60c62639c4d285fbf3ba410de545cce91757d4f952f257bca56bc4aba4095291834ec56cbe9de2fe9d36383b89e36c000f2f41a8b9e79b9d95c877888a36ceb1645d1152fa42eaec5819b8a08972c010af", 0xab, 0xa, 0x0, 0x1}, &(0x7f00000037c0)) 4.817698702s ago: executing program 4 (id=5279): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) (async) sendmmsg$unix(r5, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x6e, 0x0}}], 0x1, 0x40008004) (async) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000002, 0x0, 0x3}]}) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) sendfile(r3, r3, 0x0, 0x7ffff000) 4.810459143s ago: executing program 4 (id=5280): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00"], 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000008900)={0x27, 0x4c21, 0x1, @local, 0xc}, 0x1c) poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7}) timer_create(0x9, 0x0, &(0x7f0000002c40)) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close_range(r0, 0xffffffffffffffff, 0x0) r6 = gettid() r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) capset(&(0x7f0000000040)={0x19980330, r6}, &(0x7f0000000100)={0x8, 0x80000000, 0x2, 0x400, 0x8000, 0x6}) 4.204537832s ago: executing program 6 (id=5293): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1}) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, &(0x7f0000000080), &(0x7f0000000200)=0x14) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x1, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 2.636435178s ago: executing program 6 (id=5304): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="0000000000000100009f"], 0x15c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x78883, 0x1c8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) prctl$PR_SET_DUMPABLE(0x4, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r2], 0xfdef) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c010000150001002cbd7000fbdbdf256401010100000000000000000000000000000000000000000000ffff7f0000014e240a874e210009020020a02f000000", @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="0000000000000100009f"], 0x15c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) (async) chroot(&(0x7f0000000000)='./file0/../file0\x00') (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x78883, 0x1c8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/227, 0xe3, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x10}, @ptr={0x70742a85, 0x1, 0x0, 0xffffffffffffffe4, 0x0, 0x32}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 2.48832354s ago: executing program 6 (id=5308): r0 = syz_io_uring_setup(0x31cb, &(0x7f0000000440)={0x0, 0xeb62, 0x4, 0x3, 0x182}, &(0x7f0000000180), &(0x7f0000000200)) syz_io_uring_setup(0x366f, &(0x7f00000003c0)={0x0, 0x9d39, 0x1, 0x20000003, 0x0, 0x0, r0}, 0x0, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x454c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0x10008, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) r4 = syz_pidfd_open(r1, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000300)={0xffff1000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r6, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgrp(r1) setsockopt$inet_buf(r7, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.35352067s ago: executing program 6 (id=5311): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x440040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1a) 2.285952216s ago: executing program 6 (id=5313): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000970e5b4035121800eef0000000010902120001000000000904"], 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e51000) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.563167094s ago: executing program 4 (id=5329): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000980)=ANY=[@ANYBLOB="05000000484f"]) mprotect(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone3(&(0x7f0000000700)={0x10a80080, &(0x7f0000000180), &(0x7f0000000340), &(0x7f00000003c0), {0x32}, &(0x7f00000005c0)=""/212, 0xd4, &(0x7f0000000400)=""/121, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x0) statx(r6, &(0x7f0000000780)='./file0\x00', 0x400, 0x20, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) mknodat(r0, &(0x7f0000000e00)='./file0\x00', 0x8000, 0x0) sendmmsg$unix(r4, &(0x7f0000000d80)=[{{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0xfb}, {&(0x7f0000000000)="d29b8302cd031d9281c7b7c3ccce9d10ffc6334329", 0x15}, {&(0x7f00000004c0)="6cb31d8533147b879997dcd5038a7511c5d4b69dfad57f780dd06f39ff78d01546d772a2f06ec87e99b73b5d8b76916b461ff5528955a37f53ba262f8d0a108cb65005a828177b91eade33dc313907e104ab986fe6d6199eaa5bb661f48a90671842b7f14e138871eb78180fe253f3a979d1ca483d6e8f2e5aeec82ed23b819bdb23b492bfd943ba86f6f42754a27e3c4fe58eef0e3b5c96ec666f421dd759272f536295ce1b5abf56570da111b79a452faaec3dcbd62dac5b0b613bd4454e784cdaabba8c146fc243e413a36ccec589b24eba523891b68aaf638098b0eb0c00375bc1", 0xe3}], 0x3, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x34, 0x1, 0x1, [r0, r9, r0, 0xffffffffffffffff, r4, r3, r3, r2, r3]}}, @rights={{0x30, 0x1, 0x1, [r1, r4, r4, r10, r2, 0xffffffffffffffff, r3, r0]}}], 0xa0}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000b00)="32a2acf6d1bd31dbeeae237dcf1c7a8b1536eafadec18985c5d2704579177eb9f693117e5de445e4940a8a3614f4dc30b0852ea0cdd489d3206aa8a332510ff8ac6191b977a02d49302764dcb36a5bd9bb52700a041369fdefb079094c95341a69edda0afc059b3074f79aeb913237c00e522cbaa96a661f7eb0143d06ac38d89543d71c9df515dd97cc306549533ee273736b03a0f3d72d9cca520aa428b02cdd64c8a865108723392129e20f2827bc84e66b9e97e3d91bdfb68cd7eee4a7f1b1a5d652ccaecdddebe145b7e58bd8e8ac290beae9a2b46b41", 0xd9}, {&(0x7f0000000c00)="19eeb93835f6af44b65109f6bb0931ebbf90f2b7f1c4da23e25d545b9aa4c74b09fb838333e864649d0c097396924a4a3bec0f0ef1ad3496d405996315f68f2828688c60612ed5945594227e10553a89883009cdcc7e04fcf675f4283787b30308de3c199f3fb3898e96025b0ea20583c6e6e3ced2ef1b17af6cc782ebae63b4c2415a6a1417e85c71735587d448d7", 0x8f}, {&(0x7f0000000cc0)="2b0235c4ac316109a7ace80f3cca957d6f02963bff87c60ba53a65cd296018b266c5ed04051b00b19981ab5d55e2b404a576732afe1a67208b8719a8ca8a66662ce3c077759e9fd5532eefec1267f28fc885325e20ed54e9231cfe2e939bb8b5d346009848560f5f709d02bf9cbfe0966979647158b3dd7bd8b163f9d43b930eaeafdc0ee42a1cc2f5094aa42d6e2a4ac8b90dbdc13bf93039ed55f0cbf32f2dde8c4986efdfee5115f1d5e2c4b89d", 0xaf}], 0x3}}], 0x2, 0x4040000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x3160, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) 1.069831144s ago: executing program 8 (id=5336): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0xe) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth0_to_batadv\x00', {0x2, 0x4e20, @private=0xa010100}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x10000008ebc, 0x0) userfaultfd(0x80801) splice(r0, 0x0, r4, 0x0, 0x25a5, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="3b19430d3a49c249f9d81d1ef249de6f19f96a005acb50a85ff0b240"], 0xa8) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r6, 0x54a6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, r7, 0x2) 908.437956ms ago: executing program 9 (id=5340): syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x20000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x244001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b36000) (async) r1 = socket$inet6(0xa, 0x3, 0xff) (async, rerun: 32) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e20, @loopback}, {0x2, 0x4, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x89e0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 896.384478ms ago: executing program 9 (id=5341): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$netlink(0x10, 0x3, 0x9) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x20400000f01c, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000001740)) (async) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x10000000000000, 0x0, 0x0, 0x1e, 0xc, "88966258ebc8dba8aa9163db760279dcfabd15585e2565fbb53a74f28af283dd963e38521ebb25ff6e8f8b103a542b50ce2fcfeffcd9a299d55dc1f7a083d1bd", "67fec1cfd898823d3521d30d2df6e8e30b45714caef5340fcff37d87c0ac310a515dee7128d209c3cdeaa52317d69193df064edaac64385a60bca1839a4120e0", "3321616e005d94bd7fd7afefb024f6744d23249a43c1b59cd4473f76394bc786", [0x9, 0x7]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001700)=ANY=[@ANYBLOB="1400000013000100000000000000000000118bebe3000000"], 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20004010) prctl$PR_SET_TSC(0x1a, 0x1) (async) r4 = open(&(0x7f0000000140)='./file1\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x100, 0x1) (async) unlinkat(r4, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000001780)) (async) readv(r0, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/29, 0x1d}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000400)=""/179, 0xb3}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/4096, 0x1000}], 0xa) (async) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40) prctl$PR_SET_TSC(0x1a, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4) 871.85642ms ago: executing program 6 (id=5342): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) recvmsg(r1, 0x0, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000940)={&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000280)=""/146, 0x92}, {&(0x7f00000003c0)=""/217, 0xd9}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000600)=""/100, 0x64}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000700)=""/229, 0xe5}], 0x7, &(0x7f0000000880)=""/161, 0xa1}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x80, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r0, 0xc8baa000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r0, 0xc8baa000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x4, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x5, 0x590, 0x7}}, 0x30) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 863.95417ms ago: executing program 9 (id=5343): setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000340)=0x2bb9, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x48800) r3 = socket$inet(0x2, 0x800, 0xf0000000) connect$pppl2tp(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}, 0x32) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x205, 0x6, 0x6, 0x2c, 0x10003, 0x41, 0x400400200cc0, 0x100ffd, 0x0, 0x9, 0xb43e, 0x3, 0xf, 0x40000000007, 0x68, 0x5], 0x2, 0x174bb3}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r6, 0x4008af23, &(0x7f0000000040)={0x0, 0x5}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x1bb, 0x0, 0x0, 0x0, 0x55}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 808.030415ms ago: executing program 9 (id=5344): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) clock_getres(0x2, &(0x7f00000009c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 717.880132ms ago: executing program 9 (id=5345): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 605.237951ms ago: executing program 4 (id=5346): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munlockall() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth1_virt_wifi\x00', @random="010000201000"}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x771, 0x0, &(0x7f0000000580)="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"}) syz_io_uring_setup(0x644e, &(0x7f0000000c80)={0x0, 0xce80, 0xc040, 0x2, 0x25a}, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040)=0xb2b9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xe) r2 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r2, &(0x7f0000000140)='/', 0x1) sendfile(r2, r2, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x94) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) rmdir(&(0x7f0000000100)='./control\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 431.385265ms ago: executing program 4 (id=5347): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8010, r0, 0x4dd99000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) close(0x3) pipe(&(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x84000584) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futimesat(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000700)="2e3665f2af6766c74424005f0000006766c7442402000000006766c744240600000000670f011c2466b9030100c066b85bd1e45366bad6062a620f3066b9370200000f320f01d1440f20c066350f000000440f22c066660f383b8032500fe99400003e2e660fc7b302000f20e06635200000000f22e0", 0x76}], 0xaaaaaaaaaaaaaae, 0x54, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000080)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 361.609001ms ago: executing program 4 (id=5348): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1c, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x1, 0x0) accept(r0, 0x0, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfff8}, 0x52, [0x1, 0x40c95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x2, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xfffff807, 0x2, 0x5, 0x48, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7fff, 0xa, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x7, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x8, 0x4, 0x1, 0x30000000, 0x80, 0xdee9, 0x3, 0x6, 0x8, 0x800004, 0x1, 0x40], [0x5, 0xffff, 0x132, 0x6, 0x10, 0x10, 0x4f6, 0xa, 0xf9, 0xd, 0x2bf, 0x5, 0x40, 0xfffffffc, 0x3, 0x1, 0x7, 0x5, 0x2f, 0xe, 0x40, 0x1, 0x9, 0xfffffffe, 0x0, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8cd, 0x5f31, 0x4, 0x5, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x7, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x8002, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400025], [0x6, 0x3, 0x80000400, 0x2, 0xff, 0x100, 0x8d2, 0x8, 0x10001, 0x7fff, 0x400, 0x800001, 0xd, 0x7, 0x1000005, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x0, 0x86, 0x1, 0x9, 0x6, 0x9, 0x5, 0x20000002, 0x2, 0x2, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x440, 0x0, 0x3, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x6819, 0x3c, 0x10002, 0xbe78, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x6, 0x1d, 0x7, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x81, 0xbb31, 0x203, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x1, 0x7, 0x71, 0x1003, 0x101, 0x14000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x7, 0xffff313c, 0x6, 0x4, 0xffffffff, 0x8, 0x7, 0x8, 0xc6, 0x10000, 0x0, 0xffff, 0x0, 0x40000004, 0x100, 0x20009602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3444, 0xfff]}, 0x45c) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd700500dbdf252100000005002000010000000a0001007770616e3400000009001f0070687930000000000a000100771fe9164058"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20048000) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = syz_clone(0x80000000, 0x0, 0xfffffffffffffcfe, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x378, 0x3) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) chmod(&(0x7f0000000140)='./file0/file0\x00', 0x100) syz_pidfd_open(r1, 0x0) 189.793265ms ago: executing program 9 (id=5349): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x6, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0xfffffffffffffffd, 0x9, 0x1000000}, {0x0, 0x0, 0x100}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in6=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$netlink(0x10, 0x3, 0x15) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x15555555555555ca}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x11) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x6717, 0x4) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5c5d}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x743b98ba, 0x6, 0xffffffff, 0x0]}]}, 0x50}}, 0x4000800) 159.975697ms ago: executing program 8 (id=5350): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r1 = socket(0x840000000002, 0x3, 0xff) (rerun: 64) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000540)={0x2, 0x4e60, @multicast1}, 0x10) (async, rerun: 64) sendmmsg$inet(r1, 0x0, 0x0, 0x401eb94) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xffffffffffffffff, r4) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000071c0)={0x1cb0, 0x1e, 0x111a, 0x70bd29, 0x25dfdbfd, "", [@nested={0x1c8a, 0xaf, 0x0, 0x1, [@nested={0x4, 0x37}, @generic="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", @nested={0x4, 0x56}, @nested={0x4, 0x124}, @typed={0x14, 0x9e, 0x0, 0x0, @ipv6=@remote}, @nested={0x9b8, 0x8b3, 0x0, 0x1, [@nested={0x9a9, 0x96, 0x0, 0x1, [@generic="6dd1f6f19e16068230441c5cf86f846acba146e0c6ca4311debe247438b393c853cccdac74276bc9381672344ee4b1bd15", @nested={0x172, 0x43, 0x0, 0x1, [@generic="cdcc0952b793ec8af9fa48b10a51456b2f06cb8e94a43eb525ac84cf1649c3480f894c27a059a4da3157f9484ffdd34542678156b8cb66bac7460e0a11a696e74f207da02b9e264dfa34ca62bc59711292fd19725a6cdbfade109149dbce7c717c2ef670dd160c6b75fec9a2ba9a5fcc81e488d6ace72a55d286511096f94bed87cc8dbbfddc428b1e12107d6121feeb3d56e392708ad4318078b06372b3eee655b00613115f36", @typed={0x8, 0x126, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x95}, @generic="3f844c3500c7c6d18b74c6bd1859e131b1246187dfc4af4bcbc382f2b82bc30a6382b8cdef0370772b74808cccfffaa1e223b2e2b5be9326ef894de230b0c81a653a71269a653c5e4fb8969ea1e42b5acab36bd9bfcddab2420fcc50c313495bdd75967c2df86ad6025e581ba23ed3eb9402b6385a534f7b56b2aff5d705780f1e64d9ea0cdb680ba9fbc93c32b6098736eb1aeea1583ed264d9317b6a00641ac892196b19bf9fa5c0da83", @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x7b, 0x0, 0x0, @u32=0xf}]}, @nested={0x8, 0xd, 0x0, 0x1, [@nested={0x4, 0x127}]}, @nested={0x338, 0xce, 0x0, 0x1, [@nested={0x331, 0xab, 0x0, 0x1, [@nested={0xfd, 0x119, 0x0, 0x1, [@generic="550b3c18d7d9c807c4ae089a155e28b16b2761", @generic="798e438554e5290d44fc21b2efaba0c296b53cd58e32076fd6292d8b7575499328cd741f3fe52b33950238267c8d7704a25163be592416e6fd97656285cd55f5cfa2f55bcbc5f80b141c36a2cc80617a4b91bd83453d480df4972ce4de341a05e3ac850ba55448c282f949217377d08b16f972649b92e6b5bda855a376bf779bd00cb0dae3819f0fd091884465284e6954fc2aabbe0a69741589a1e6487697221277e6ee5a3b524746cc4bcf988e82f223f777eb81a6f07c33d539bd982546bab0aa657b4763e2205832205be682b589426e043523cb5ebd6d7f02cedd69", @typed={0x8, 0xe1, 0x0, 0x0, @u32=0x1}]}, @typed={0x4, 0xd}, @nested={0x14, 0x150, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r3}]}, @typed={0xda, 0x29, 0x0, 0x0, @binary="4781b3b138fa94c0ff26862b0793c46b5e333d88d35065095b8bd715784ef2e0e4a95d2a84dbf67e5e6ccab77766519056db2206d1ba1fdd540f683993b241b43ff37b14530bb961df86304d057908235bb9c5ba2c730d66d85f79f2ccf59e5ffe0aa5c7eb726a3a79795cd4f35ef3eb0b0e04c8cf80f2420c1266fffd99af51f8b9bf71a2ce7e881e55be8cf7d9c323839d83194e545fcceeb008581e0cf96ef2c613bd8530ab0dc7e8bf68d1e9ba0633824ab96f4de575ae02111e29ffb2bc6e8e086e1312b2233bea97ac2cedee756decdde2e7cc"}, @typed={0x64, 0xe8, 0x0, 0x0, @binary="b61f2c4868fbf9476904866e49e82773e7ad9909bf3d8158bf4c913e0c47952fe165e8673977cb4a10e1849a8b8b0102596f08c09b8a2f442f93bf18d3674cdea98eaf710022bd4b1493d455fded1b903354ed9ed2274e907e1ccb516c99f988"}, @generic="29b479dbbc81f219f55c1d2039aa473403106d85e1871aaffc1603c2a32472fde112d502cb8a0741360427bdbeb7a5e2e8f620d0e9421eceb22d774eb266afc18093f9726c3190fdb8c7f1ecb9e8a441b58218c7f95cfbb51f6110a6d231a868ee9e82b357ef6126da2dd5b886", @typed={0x67, 0x34, 0x0, 0x0, @binary="093d636570ccfd8b071c8b60370a290ebc90872860c227320611249d97764ebbdb980f54a0b0f3f7a29ae99f24d865eb42f8a72668784937e2efdb00a6804fdba179e37c19c9e6c6ef6c5f2e9de73e0e232d6474744655cfda2771ffedc8ed1b32e992"}]}]}, @nested={0x1fa, 0x4c, 0x0, 0x1, [@generic="a9d378d69af64d5bb4fd368c8409f6f2e4b7803b2e2afe1e0d12bdb78d07933b138f6137e2a0c85b12c14f3e638936a6d1852edc626f1ec6bbbbeeacbfe9aa509945cf40b97ba44bd650e9047097d5ca71d0369b1edc2ad321c77998f209f410262087753a516da2899627ace870ea4813ffcbef4fcc889d60086fc44a282520730f9ea98d07ae39b377c8d28fea4af61130e6629facaa833e93e0fd09fea4a2cfed3e9e3a2f0863eecf64cf2dee11fdc9d8e3056f19d21821a1790535d27d42658a0ce371d6dd99e0c8fb182c1c0300e1acd527453d516e1c", @generic="ea7f868af9ff3e8d82fd85e539f1e1bd60dc28e113bf26c4e0f35903b5b714b7c305fa74c434", @generic="7b352cbdd36697479de23464c8e68854fb174b46f153191ef594cb24642f309fa1deec0563c3c3ca9f66c9858d97eeb35033552f49f9e57429480fda959e466787d91a389a0d9b4bae95ead4e57bcf07804d2fc09c0d015d51c986eed2581660ce28f697a4ba31c3b5135793dfee7678abc899170a23f3abe211cd6bc5e281ade2f37827adeaa07513428b5ae436380eca65fef14a1669b6bb4414a97c09a6307a5eec930be4a311535a8218656a6c96a4050bc147eb070e01daa6ff7f103d59be9429cad196500baee29ba63e7418bed9e28794aa052ece36a339ecfc9a76", @nested={0x4, 0x9a}, @typed={0x7, 0xef, 0x0, 0x0, @str='&&\x00'}, @typed={0xc, 0x58, 0x0, 0x0, @u64=0x4}]}, @nested={0x2c3, 0x54, 0x0, 0x1, [@generic="67805204f46853697833cdf3b4f9209d51e60769539fcc52c2d59f47b0f280cbd0ad573969855e3552f8bf97aa6642658283485725b44226aca13d883fbe4cbc15c654db012cf728920b5444ad3d6f0e87405eec3608555c473956f127e7f416d0164106db5a6748867ce289e3529aa244f0cba8af34155aa98a1f63dbd02a24f0b4b3163c4fda4e86018c86b5e4e01827825a4d80b40da3d7ad056381a39fdaa5bd04478fa1e8f3d377", @generic="a5cb6e5f0ae15cf5313a96e17930ce55ab44e702206d1296ff5c7d9518182cb56ad35e392329064f49294bf484cbf1683c5bb0a48654859115248c251c88b793a6512556096c3df15a8f3fcd01e6e01647467b0c7acd7b5577036f8b74fe211340aae8efa5d2c12162837a53f7ba57ecb337ad1f4e6ceca2458189b39efd815b6f1845abc4065bee219a15f857f2335cdf45fb45feb87514f91ad96d4a8472ec07a4d51011dea022f3801047879f1f68116d9fad281e4bf299cc1826e79f2077b57ee3ca214a973625544cbdb0c4f16479f0e109cbcae6e04941b1a6581f0a38c14bfa2c7101e2d6d85ddcacd8", @typed={0x72, 0x122, 0x0, 0x0, @binary="3e678dc05df66091165350869d5f99c4db9fb689c6b5b3874c1c41fe5a83a31cda0bf4bcbb293ae27df6cc856b04e015c634505c2dd63174798fb48116995a2dcc5d47df4e0acea7c747488c5f47d8002b9a26f62eb613b68f7e149e9608c2f0e04a7be3818755bc5f3ae55c5510"}, @typed={0x4, 0x45}, @typed={0x92, 0x143, 0x0, 0x0, @binary="f941f1b2ac5f3dafff6c69ccef7a5609dfd093be7128b8c97e9708af6df47ae8eb2873677d6c5972d48e7c1946aeb20c566315d208765cf944147a541988aebe86b49272ebbeec8eeec62e4f12f8804f90215ab31d945ba6457c486f58a7de73645223f09a226fed52e3e05ec8857d61c0814d030fcd01efe7001c7750e396c436d8e3e1593a81b678bd7ee844eb"}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x9c, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x61, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x3ffa}]}]}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r4}]}, @typed={0xc, 0x9d, 0x0, 0x0, @u64=0x6}, @nested={0x214, 0xb2, 0x0, 0x1, [@nested={0x1aa, 0x11a, 0x0, 0x1, [@generic="d3b08f5af096a2b1282437358cf0aff1fe6c67085036ce0df2a034b86c479f2dec4889bf2b3d2b13967d49d5b8a954fe37b0a44f9da223721dc738eab5fcdd38d755cd666c5a8e729f226ff690de487686208589be8343ed5523d57a2553a79d17def59dc2ce4183762c8d884c13a0fc1d73a5e60a305e9707cecaf6cf4aa41e8435905ad74e8c44348cb99a17badb7392d24b9b4fadc392a63ae72739e565923bc0a2c083c0fd9c0ce9efb6c60b6b8b2d5a25975bce9f5798baf437e41d64c616367373104a348b0512fcd36933b062a684c5ff165afdc9c6a7135fff0018886dbc9dc8ed97", @nested={0x4, 0x111}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r2}, @generic="13ab6cbf0fb4c75bb21aa7fe0cbe9f3511fd1567b02ea6819692518208e16626df300ffea44d94f51c470c96b8370415341cfca755ef718e8127eb06e71e99ca868d4be58545a44327d16bb4f09c7b1878b0f188712be55389225df1db390e377d09f87fc80f9366b3416ecc66f1ed1e125f62de2a4921e3f2581c448ccc4cc47e95b0bbf769ed66bd9d88fee3fd15d7380f0d91379c879b06a2db900a232f3113e49b75879321a8ef5d231023058d37e5ec91f4"]}, @generic="edcc9a7474ec270b874045488d35aa828f1eaec2c7d2e37cde6ec6cddb0305fb7039b9967c49b255e7cbc872ba5d047a7c33cdae47723a1d439bbfaf3e289ca019faa8895d943e697e3145a959a0db3a2d4be614ccb272925265b26321446cfb7196cbae"]}, @generic="6c816161c22400e57c4fb116e9f47ed6826c1d7f59e9cf30942b78a4c147680a2c6eefd9144b8c6426ded20a51e946efae64c581290ea41c444b8d11bb2ad816bfa6b8d6037a21ca58e38a44058afc99b3807bdb06e02eb655261d2a4a25f6e0270001cb37f08fcde8dc6aeee8f0b378f3e11ee944f574decc4a6a6f66aaae30012e2c66e47d29fc1593e1b37500"]}, @typed={0x11, 0xfb, 0x0, 0x0, @str='/dev/net/tun\x00'}]}, 0x1cb0}, {&(0x7f0000000280)={0x54, 0x10, 0x200, 0x70bd2b, 0x25dfdbff, "", [@typed={0xc, 0x136, 0x0, 0x0, @u64=0x8}, @generic="9f9499d07c813bc4f6ca", @nested={0x18, 0xb, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0x401}]}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0xfffffffffffffffe}, @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@remote}]}, 0x54}, {&(0x7f0000001fc0)=ANY=[@ANYBLOB="801000001d00000227bd7000ffdbdf2508000e00", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04004b80000000"], 0x1080}, {&(0x7f0000001f80)={0x10, 0x34, 0x2, 0x70bd28, 0x1}, 0x10}], 0x4}, 0x0) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001f00)=@filter={'filter\x00', 0xe, 0x5, 0x8f6, [0x0, 0x200000001600, 0x200000001786, 0x200000001aa2], 0x0, &(0x7f0000000180), &(0x7f0000003700)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="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"]}, 0xa45) (async) sync_file_range(r6, 0x401, 0x8, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) write$tun(r7, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40050818) (async, rerun: 64) inotify_init() (async, rerun: 64) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r8) (async) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) (async, rerun: 32) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000003c0)={0x20, 0x13, 0x1, "8a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 49.679566ms ago: executing program 8 (id=5351): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4dd99000) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 49.102696ms ago: executing program 8 (id=5352): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x205, 0x6, 0x6, 0x2c, 0x10003, 0x41, 0x400400200cc0, 0x100ffd, 0x0, 0x9, 0xb43e, 0x3, 0xf, 0x40000000007, 0x68, 0x5], 0x2, 0x174bb3}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x1fd, 0x2, 0x200000000000000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000040)={0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.361427ms ago: executing program 8 (id=5353): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x20002000}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x205, 0x6, 0x6, 0x2c, 0x10003, 0x41, 0x400400200cc0, 0x100ffd, 0x0, 0x9, 0xb43e, 0x3, 0xf, 0x40000000007, 0x68, 0x5], 0x2, 0x174bb3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4a, 0x201, 0x0, 0x0, {0xa, 0x0, 0x300}}, 0x14}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendfile(r1, r6, 0x0, 0x101) 0s ago: executing program 8 (id=5354): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\x99\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdbv\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x8f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%S\xbe\xf4\xf3\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z\xf3\xde%D\xe6U\'\\\xe8\xd6UV\x1f%\x0f\r^\xd1\xe8e3\xaa\x0f\xbf\xfc\x05\xd6\xe2\xc2\xbeN\xa9\xa4J\xd4~iK\"\xe6\xda0\x87\xe3\b3c\xd9ox\xecP\xc3\x81\xd2\x1aC\xb0\xed\xf8}\x18\xce\xe9\x86\xc9\xb4\xc8K<,\v\xac\xdc\xd6\xb8u\x01\xa9NQ\x9c\xa0\re\x13\xbdM\x8e\xf1\xc7h\xd3f\x8b\x10\xce\x91\xd4\x97\xfbt\xae\r^\xd7q\xea\x02\xc00\x10\x9a\xb1k\x8e%\xe1\x13\x9d') write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000500000000000a00000000000000f65e0190536134fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200ff"], 0xa0}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a090582bbc0"], 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ailed: BR_FAILED_REPLY { source: EINVAL } my_pid:411 [ 202.434460][ T36] audit: type=1326 audit(1756473170.339:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9777 comm="syz.4.3141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d918ebe9 code=0x0 [ 202.550618][ T45] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 202.578129][ T45] usb 3-1: USB disconnect, device number 28 [ 202.751045][ T9798] rust_binder: Write failure EFAULT in pid:416 [ 202.911886][ T9806] rust_binder: Write failure EFAULT in pid:500 [ 203.068351][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 203.239443][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 203.240587][ T45] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 203.258149][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.269199][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.278975][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 203.293400][ T45] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 203.302482][ T45] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 203.310861][ T45] usb 6-1: Manufacturer: syz [ 203.316526][ T45] usb 6-1: config 0 descriptor?? [ 203.389184][ T9] usb 3-1: device descriptor read/64, error -71 [ 203.645886][ T9] usb 3-1: device descriptor read/64, error -71 [ 203.752239][ T45] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 203.759601][ T45] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 203.768329][ T45] appleir 0003:05AC:8243.000D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 203.913216][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 204.050542][ T453] usb 6-1: USB disconnect, device number 15 [ 204.056663][ T9] usb 3-1: device descriptor read/64, error -71 [ 204.319620][ T9] usb 3-1: device descriptor read/64, error -71 [ 204.437395][ T9] usb usb3-port1: attempt power cycle [ 204.646452][ T36] audit: type=1400 audit(1756473172.405:553): avc: denied { map } for pid=9816 comm="syz.5.3154" path="socket:[40214]" dev="sockfs" ino=40214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.669985][ T36] audit: type=1400 audit(1756473172.405:554): avc: denied { read accept } for pid=9816 comm="syz.5.3154" path="socket:[40214]" dev="sockfs" ino=40214 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.800927][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 204.823466][ T9] usb 3-1: device descriptor read/8, error -71 [ 204.962361][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.218315][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 205.240472][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.337530][ T36] audit: type=1400 audit(1756473173.050:555): avc: denied { relabelto } for pid=9829 comm="syz.5.3159" name="file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 205.379590][ T9] usb 3-1: device descriptor read/8, error -71 [ 205.496186][ T9] usb usb3-port1: unable to enumerate USB device [ 205.709898][ T36] audit: type=1326 audit(1756473173.396:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9832 comm="syz.4.3160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89d918ebe9 code=0x0 [ 206.200255][ T36] audit: type=1400 audit(1756473173.855:557): avc: granted { setsecparam } for pid=9835 comm="syz.2.3161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 206.239245][ T36] audit: type=1400 audit(1756473173.892:558): avc: denied { rmdir } for pid=8203 comm="syz-executor" name="file0" dev="tmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 206.302916][ T36] audit: type=1400 audit(1756473173.957:559): avc: denied { watch } for pid=9842 comm="syz.5.3164" path="/144/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.408361][ T36] audit: type=1400 audit(1756473174.051:560): avc: denied { append } for pid=9851 comm="syz.5.3167" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.461438][ T9859] pim6reg1: entered promiscuous mode [ 206.467073][ T9859] pim6reg1: entered allmulticast mode [ 206.619174][ T9] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 206.721174][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3185'. [ 206.758112][ T9] usb 3-1: device descriptor read/64, error -71 [ 206.950810][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 207.014802][ T9] usb 3-1: device descriptor read/64, error -71 [ 207.089669][ T10] usb 6-1: device descriptor read/64, error -71 [ 207.271482][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 207.289154][ T9911] overlayfs: failed to clone upperpath [ 207.346374][ T10] usb 6-1: device descriptor read/64, error -71 [ 207.410535][ T9] usb 3-1: device descriptor read/64, error -71 [ 207.603048][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 207.670696][ T9] usb 3-1: device descriptor read/64, error -71 [ 207.742101][ T10] usb 6-1: device descriptor read/64, error -71 [ 207.795702][ T9] usb usb3-port1: attempt power cycle [ 207.998795][ T10] usb 6-1: device descriptor read/64, error -71 [ 208.116869][ T10] usb usb6-port1: attempt power cycle [ 208.159205][ T9] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 208.181934][ T9] usb 3-1: device descriptor read/8, error -71 [ 208.320906][ T9] usb 3-1: device descriptor read/8, error -71 [ 208.480062][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 208.502554][ T10] usb 6-1: device descriptor read/8, error -71 [ 208.576335][ T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 208.598715][ T9] usb 3-1: device descriptor read/8, error -71 [ 208.641643][ T10] usb 6-1: device descriptor read/8, error -71 [ 208.737900][ T9] usb 3-1: device descriptor read/8, error -71 [ 208.854439][ T9] usb usb3-port1: unable to enumerate USB device [ 208.897151][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 208.919691][ T10] usb 6-1: device descriptor read/8, error -71 [ 209.058722][ T10] usb 6-1: device descriptor read/8, error -71 [ 209.175359][ T10] usb usb6-port1: unable to enumerate USB device [ 209.372077][ T9942] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3197'. [ 209.381069][ T9942] 0MA: renamed from gretap0 (while UP) [ 209.387721][ T9942] 0MA: entered allmulticast mode [ 209.393412][ T9942] A link change request failed with some changes committed already. Interface 30MA may have been left with an inconsistent configuration, please check. [ 209.420524][ T9944] veth1: entered allmulticast mode [ 209.427495][ T9943] veth1: left allmulticast mode [ 209.503064][ T9946] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.505473][ T9946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:516 [ 209.523870][ T9948] rust_binder: Error while translating object. [ 209.533207][ T9948] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 209.539488][ T9948] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:518 [ 209.549372][ T9949] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 209.927121][ T9961] 9pnet_fd: Insufficient options for proto=fd [ 210.117315][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.128206][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.139520][ T9972] bridge_slave_0: entered allmulticast mode [ 210.148713][ T9972] bridge_slave_0: entered promiscuous mode [ 210.157722][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.165988][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.177579][ T9972] bridge_slave_1: entered allmulticast mode [ 210.188775][ T9972] bridge_slave_1: entered promiscuous mode [ 210.283677][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.291180][ T9972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.299143][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.306548][ T9972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.349816][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.358224][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.369233][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.376517][ T8735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.386837][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.394025][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.425408][ T9972] veth0_vlan: entered promiscuous mode [ 210.439798][ T9972] veth1_macvtap: entered promiscuous mode [ 210.478879][T10001] binder: Unknown parameter 'secla&' [ 210.508411][ T10] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 210.517068][ T10] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.561700][T10004] fido_id[10004]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.843675][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 210.898501][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 211.025539][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 211.032262][ T10] usb 7-1: config 211 has an invalid descriptor of length 0, skipping remainder of the config [ 211.045654][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 211.055966][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.064552][ T10] usb 7-1: Product: syz [ 211.069869][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 211.075609][ T10] usb 7-1: Manufacturer: syz [ 211.080876][ T10] usb 7-1: SerialNumber: syz [ 211.086136][ T9] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 211.095009][ T9] usb 6-1: config 0 has no interface number 0 [ 211.102503][ T9] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 211.112987][ T9] usb 6-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 211.126980][ T9] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 211.136763][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.145044][ T9] usb 6-1: Product: syz [ 211.149863][ T9] usb 6-1: Manufacturer: syz [ 211.154716][ T9] usb 6-1: SerialNumber: syz [ 211.160006][ T9] usb 6-1: config 0 descriptor?? [ 211.165454][T10011] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 211.172734][T10011] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 211.182257][ T9] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 6e:ea:e4:45:18:c5 [ 211.397101][ T9] usb 6-1: USB disconnect, device number 20 [ 211.408339][T10008] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 211.418671][ T9] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 211.418870][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.440135][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.453342][ T45] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 211.552553][ T64] usb 7-1: USB disconnect, device number 2 [ 211.593736][T10091] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3234'. [ 211.603457][ T45] usb 3-1: device descriptor read/64, error -71 [ 211.619670][T10091] rust_binder: Write failure EFAULT in pid:16 [ 211.640808][ T36] audit: type=1400 audit(1756473178.941:561): avc: denied { listen } for pid=10100 comm="syz.6.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.694944][T10112] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 211.715064][T10114] __vm_enough_memory: pid: 10114, comm: syz.6.3239, bytes: 2251804108652544 not enough memory for the allocation [ 211.715669][ T36] audit: type=1400 audit(1756473179.016:562): avc: denied { execute } for pid=10113 comm="syz.6.3239" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.870440][ T45] usb 3-1: device descriptor read/64, error -71 [ 212.061278][ T36] audit: type=1400 audit(1756473179.334:563): avc: denied { map } for pid=10132 comm="syz.5.3244" path="socket:[41067]" dev="sockfs" ino=41067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.093677][T10136] cgroup: Need name or subsystem set [ 212.148529][ T45] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 212.194122][T10145] rust_binder: 512: no such ref 3 [ 212.199276][T10145] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 212.218258][T10147] rust_binder: Error while translating object. [ 212.218289][T10147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 212.224710][T10147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 212.234744][T10148] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 212.257657][T10152] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 212.264190][T10152] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:519 [ 212.287581][ T45] usb 3-1: device descriptor read/64, error -71 [ 212.397185][T10165] 9pnet_fd: Insufficient options for proto=fd [ 212.470575][T10171] rust_binder: Error while translating object. [ 212.470620][T10171] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 212.476892][T10171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:527 [ 212.544994][T10175] __vm_enough_memory: pid: 10175, comm: syz.5.3259, bytes: 18014402804453376 not enough memory for the allocation [ 212.554951][ T45] usb 3-1: device descriptor read/64, error -71 [ 212.594315][T10179] binder: Unknown parameter 'pcr' [ 212.601494][ T36] audit: type=1400 audit(1756473179.848:564): avc: denied { setattr } for pid=10178 comm="syz.5.3261" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 212.634177][T10186] overlayfs: failed to clone upperpath [ 212.661911][ T64] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 212.683576][ T45] usb usb3-port1: attempt power cycle [ 212.823649][ T64] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.833966][ T64] usb 7-1: config 0 has no interfaces? [ 212.840995][ T64] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 212.850432][ T64] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 212.861171][ T64] usb 7-1: Product: syz [ 212.867914][ T64] usb 7-1: Manufacturer: syz [ 212.872647][ T64] usb 7-1: SerialNumber: syz [ 212.878729][ T64] usb 7-1: config 0 descriptor?? [ 212.886504][ T353] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 213.046903][ T45] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 213.056025][ T353] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.066100][ T353] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.075646][ T45] usb 3-1: device descriptor read/8, error -71 [ 213.082587][ T353] usb 6-1: config 0 descriptor?? [ 213.099612][ T10] usb 7-1: USB disconnect, device number 3 [ 213.113438][T10165] overlay: ./file0 is not a directory [ 213.113475][T10166] overlay: ./file0 is not a directory [ 213.219214][ T45] usb 3-1: device descriptor read/8, error -71 [ 213.303394][ T353] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 213.313682][ T353] asix 6-1:0.0: probe with driver asix failed with error -32 [ 213.325066][ T353] usb 6-1: USB disconnect, device number 21 [ 213.328509][T10227] fuse: Unknown parameter '$4' [ 213.485401][ T45] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 213.507893][ T45] usb 3-1: device descriptor read/8, error -71 [ 213.640554][T10263] fuse: Bad value for 'fd' [ 213.647166][ T45] usb 3-1: device descriptor read/8, error -71 [ 213.681761][T10266] SELinux: security_context_str_to_sid ((!3x 4x:JÔ!tc[ [ 213.681761][T10266] K5:|\HFq7x6J1nܛ>87a_nݟǂ8ךAiz [ 213.681761][T10266] ٖʳ%`>f˞7̭) failed with errno=-22 [ 213.710874][T10267] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 213.763572][ T45] usb usb3-port1: unable to enumerate USB device [ 213.816934][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 213.977415][ T353] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 213.988085][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 213.994956][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 214.003551][ T10] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.016686][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 214.024829][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 214.033979][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.041998][ T10] usb 6-1: Product: syz [ 214.046200][ T10] usb 6-1: Manufacturer: syz [ 214.050792][ T10] usb 6-1: SerialNumber: syz [ 214.149752][ T353] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.160331][ T353] usb 7-1: config 0 has no interfaces? [ 214.167743][ T353] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 214.177132][ T353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 214.186032][ T353] usb 7-1: Product: syz [ 214.190570][ T353] usb 7-1: Manufacturer: syz [ 214.195746][ T353] usb 7-1: SerialNumber: syz [ 214.202450][ T353] usb 7-1: config 0 descriptor?? [ 214.227193][T10278] rust_binder: Error while translating object. [ 214.227231][T10278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.233547][T10278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:559 [ 214.271765][T10238] input: syz1 as /devices/virtual/input/input19 [ 214.299720][ T10] usbhid 6-1:1.0: can't add hid device: -71 [ 214.305871][ T10] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 214.315393][ T10] usb 6-1: USB disconnect, device number 22 [ 214.395186][T10289] netlink: 'syz.2.3301': attribute type 64 has an invalid length. [ 214.404910][T10289] rust_binder: Write failure EFAULT in pid:570 [ 214.415147][ T36] audit: type=1400 audit(1756473181.531:565): avc: denied { setattr } for pid=10290 comm="syz.2.3302" name="NETLINK" dev="sockfs" ino=41616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 214.426244][ T1286] usb 7-1: USB disconnect, device number 4 [ 215.059181][ T36] audit: type=1400 audit(1756473182.148:566): avc: denied { nlmsg_read } for pid=10308 comm="syz.5.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.187943][T10313] rust_binder: Write failure EFAULT in pid:564 [ 215.198469][T10315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 215.205480][T10315] rust_binder: Error while translating object. [ 215.214705][T10315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 215.221174][T10315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:566 [ 215.250120][ T1286] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 215.282764][T10323] netlink: 'syz.5.3316': attribute type 46 has an invalid length. [ 215.295968][T10323] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3316'. [ 215.334364][T10328] rust_binder: Error while translating object. [ 215.334409][T10328] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.338048][T10330] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.346455][T10328] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:576 [ 215.350205][T10330] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:574 [ 215.442581][ T1286] usb 7-1: Using ep0 maxpacket: 32 [ 215.467724][ T1286] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.486503][ T1286] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 215.496927][ T1286] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 215.509443][ T1286] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.527543][T10348] tipc: Enabling of bearer rejected, failed to enable media [ 215.535915][ T1286] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.545278][T10348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.545312][T10348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585 [ 215.560321][ T1286] usb 7-1: Product: 弉캗霊璺錀럺쏸魄焮ắꦋﴮ鳵糵㭉줊ᴃ밾ꌦ눸帕ⲫ襇욙凮葁䝉꽾紶ᣅ핂ᩊꚍ೩Ƞ࿧ﳆ⒓繶狞䩐⯧썴ꌑ [ 215.610215][ T1286] usb 7-1: Manufacturer: Ж [ 215.615565][T10353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.615589][T10353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.622087][ T1286] usb 7-1: SerialNumber: ბ瞢已늵罅牸쳟∀降䖆꥛ガ럌犌盤轎בֿᎋ㥷䧔榙羥唉璜㚽鎕識檌覷諻祀穖च [ 216.077880][T10413] can: request_module (can-proto-0) failed. [ 216.084075][T10414] can: request_module (can-proto-0) failed. [ 216.159310][ T1286] cdc_ncm 7-1:1.0: bind() failure [ 216.175992][ T1286] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 216.194889][ T1286] cdc_ncm 7-1:1.1: bind() failure [ 216.210998][ T1286] usb 7-1: USB disconnect, device number 5 [ 216.435201][ T36] audit: type=1400 audit(1756473183.429:567): avc: denied { ioctl } for pid=10433 comm="syz.2.3355" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 216.474000][ T8711] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.480888][ T8711] Bluetooth: hci1: Frame reassembly failed (-84) [ 216.714608][T10443] rust_binder: Error while translating object. [ 216.714642][T10443] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 216.721241][T10443] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 216.749919][ T36] audit: type=1400 audit(1756473183.728:568): avc: denied { read } for pid=94 comm="acpid" name="mouse1" dev="devtmpfs" ino=691 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 216.793934][ T36] audit: type=1400 audit(1756473183.728:569): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=691 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 216.816737][ T36] audit: type=1400 audit(1756473183.728:570): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=691 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 217.046714][T10471] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 217.070413][T10473] rust_binder: Error while translating object. [ 217.070477][T10473] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 217.076875][T10473] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77 [ 217.266523][T10475] binder: Unknown parameter 'defcontext01777777777777777777777' [ 217.294234][ T45] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 217.304073][ T45] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.330703][T10479] fido_id[10479]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 217.339218][T10483] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:594 [ 217.363982][T10485] tmpfs: Unsupported parameter 'mpol' [ 217.393692][T10488] overlayfs: workdir and upperdir must be separate subtrees [ 217.443452][T10490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 217.443713][T10491] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 217.450438][T10490] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 218.039429][T10506] rust_binder: Failed to allocate buffer. len:1184, is_oneway:false [ 218.067639][T10510] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 218.405160][ T45] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 218.418569][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 218.418586][ T36] audit: type=1400 audit(1756473185.280:574): avc: denied { read } for pid=10533 comm="syz.4.3389" name="file0" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 218.460428][ T36] audit: type=1400 audit(1756473185.280:575): avc: denied { open } for pid=10533 comm="syz.4.3389" path="/394/file0" dev="tmpfs" ino=2133 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 218.472166][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3394'. [ 218.525325][T10551] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3396'. [ 218.557189][T10560] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 218.566625][ T45] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.576977][ T45] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.591559][ T45] usb 7-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 218.601507][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.612501][ T45] usb 7-1: config 0 descriptor?? [ 218.683239][ T2350] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 218.683239][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.683338][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 218.753762][T10570] input: syz1 as /devices/virtual/input/input20 [ 218.811241][T10576] /dev/loop0: Can't lookup blockdev [ 218.811687][ T36] audit: type=1400 audit(1756473185.645:576): avc: denied { bind } for pid=10575 comm="syz.2.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 218.978051][T10606] fuse: Unknown parameter '' [ 219.027537][T10616] overlayfs: failed to clone upperpath [ 219.063876][ T45] wacom 0003:056A:0336.0010: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.6-1/input0 [ 219.196402][T10630] netlink: 316 bytes leftover after parsing attributes in process `syz.4.3423'. [ 219.206105][T10630] netlink: 316 bytes leftover after parsing attributes in process `syz.4.3423'. [ 219.282825][T10512] SELinux: security_context_str_to_sid () failed with errno=-22 [ 219.291325][ T45] usb 7-1: USB disconnect, device number 6 [ 219.365191][ T36] audit: type=1326 audit(1756473186.168:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10636 comm="syz.4.3425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=157 compat=0 ip=0x7f89d918ebe9 code=0x0 [ 219.389335][T10638] x_tables: duplicate entry at hook 1 [ 219.672758][T10679] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 219.673086][T10679] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 219.767744][ T36] audit: type=1400 audit(1756473186.542:578): avc: denied { append } for pid=10680 comm="syz.5.3441" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.892123][ T36] audit: type=1400 audit(1756473186.664:579): avc: denied { create } for pid=10690 comm="syz.2.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 220.361715][ T36] audit: type=1326 audit(1756473187.094:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d918ebe9 code=0x7ffc0000 [ 220.412124][ T36] audit: type=1326 audit(1756473187.132:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d918ebe9 code=0x7ffc0000 [ 220.460985][ T36] audit: type=1326 audit(1756473187.132:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89d918ebe9 code=0x7ffc0000 [ 220.486178][ T36] audit: type=1326 audit(1756473187.132:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10707 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d918ebe9 code=0x7ffc0000 [ 220.760593][T10718] overlayfs: failed to resolve './file0': -2 [ 221.360805][T10752] kvm: kvm [10751]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 221.574552][T10759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:648 [ 221.599132][T10768] binder: Bad value for 'defcontext' [ 221.825441][T10779] tipc: Started in network mode [ 221.830414][T10779] tipc: Node identity ac14140f, cluster identity 4711 [ 221.837615][T10779] tipc: New replicast peer: 255.255.255.255 [ 221.843943][T10779] tipc: Enabled bearer , priority 10 [ 221.850635][T10782] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 221.861475][T10782] rust_binder: Write failure EINVAL in pid:96 [ 221.878403][T10782] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 222.738349][T10788] tmpfs: Unknown parameter 'hY.]?uge' [ 223.046912][ T10] tipc: Node number set to 2886997007 [ 224.565575][T10928] bridge0: entered allmulticast mode [ 225.059664][T10948] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 225.077141][T10951] rust_binder: Error in use_page_slow: ESRCH [ 225.077170][T10951] rust_binder: use_range failure ESRCH [ 225.084002][T10951] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 225.090105][T10951] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 225.098404][T10951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:681 [ 225.108919][T10950] rust_binder: 681: no such ref 3 [ 225.123213][T10950] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 225.125266][T10957] fuse: Bad value for 'group_id' [ 225.135489][T10957] fuse: Bad value for 'group_id' [ 225.141380][T10957] overlay: ./file0 is not a directory [ 225.147699][T10957] 9pnet_fd: Insufficient options for proto=fd [ 225.191281][T10967] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3540'. [ 225.276310][T10976] tipc: Started in network mode [ 225.281438][T10976] tipc: Node identity ac14140f, cluster identity 4711 [ 225.288602][T10976] tipc: New replicast peer: 255.255.255.255 [ 225.295032][T10976] tipc: Enabled bearer , priority 10 [ 226.162400][T11031] rust_binder: 691: no such ref 0 [ 226.232817][T11036] Unsupported ieee802154 address type: 0 [ 226.243793][T11036] rust_binder: Write failure EFAULT in pid:106 [ 226.287247][T11040] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3565'. [ 226.349408][T11054] fuse: Bad value for 'group_id' [ 226.358068][T11054] fuse: Bad value for 'group_id' [ 226.490767][ T64] tipc: Node number set to 2886997007 [ 226.560800][T11065] overlayfs: failed to clone upperpath [ 226.766334][T11084] rust_binder: Error while translating object. [ 226.766391][T11084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.772933][T11084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 226.822841][T11092] fuse: Bad value for 'fd' [ 226.891936][T11106] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3587'. [ 226.902353][T11106] rust_binder: Write failure EINVAL in pid:127 [ 227.014805][ T453] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 227.185921][ T453] usb 6-1: Using ep0 maxpacket: 32 [ 227.192448][ T453] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.203416][ T453] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.213190][ T453] usb 6-1: config 0 interface 0 has no altsetting 0 [ 227.219923][ T453] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 227.229062][ T453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.237924][ T453] usb 6-1: config 0 descriptor?? [ 227.882824][T11128] tap0: tun_chr_ioctl cmd 1074025677 [ 227.888408][T11128] tap0: linktype set to 802 [ 227.894788][ T453] usbhid 6-1:0.0: can't add hid device: -71 [ 227.900781][ T453] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 227.917980][ T453] usb 6-1: USB disconnect, device number 23 [ 227.939569][T11128] cgroup: none used incorrectly [ 228.533732][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3601'. [ 228.703100][T11181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 228.703134][T11181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:712 [ 228.729291][T11181] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 228.747705][T11181] rust_binder: Read failure Err(EFAULT) in pid:712 [ 229.122601][T11210] overlayfs: failed to clone upperpath [ 229.230589][T11230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3628'. [ 229.276839][T11235] tipc: Enabling of bearer rejected, already enabled [ 229.394569][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 229.394586][ T36] audit: type=1326 audit(1756473195.547:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11250 comm="syz.2.3635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f525158ebe9 code=0x0 [ 231.357314][T11355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:731 [ 231.873142][T11390] EXT4-fs: Ignoring removed check option [ 231.888137][T11390] No source specified [ 232.332419][ T453] rust_binder: 11391: removing orphan mapping 0:24 [ 232.448317][T11399] rust_binder: 748: no such ref 0 [ 232.602975][T11399] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 232.612239][T11399] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 232.742055][T11416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.025565][ T453] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 233.157672][T11460] overlay: filesystem on ./bus is read-only [ 233.188959][ T453] usb 6-1: Using ep0 maxpacket: 32 [ 233.196299][ T453] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 233.206646][ T453] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.217683][ T453] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 233.226974][ T453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.235192][ T453] usb 6-1: Product: syz [ 233.239509][ T453] usb 6-1: Manufacturer: syz [ 233.244258][ T453] usb 6-1: SerialNumber: syz [ 233.680927][T11419] rust_binder: Write failure EFAULT in pid:753 [ 233.686919][ T453] usb 6-1: 0:2 : does not exist [ 233.702122][ T453] usb 6-1: USB disconnect, device number 24 [ 233.804671][T11507] overlayfs: failed to clone upperpath [ 233.824507][T11512] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3728'. [ 234.179321][T11525] overlay: Unknown parameter 'func' [ 234.318442][T11556] tmpfs: Unknown parameter '0xffffffffffffffff' [ 234.375574][T11558] input: syz1 as /devices/virtual/input/input24 [ 234.443553][T11573] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 234.452851][T11573] overlayfs: missing 'lowerdir' [ 234.477147][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3755'. [ 234.484297][T11581] Invalid ELF header magic: != ELF [ 234.486550][ T36] audit: type=1400 audit(3512955100.730:600): avc: denied { module_load } for pid=11580 comm="syz.6.3756" path="/97/bus" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 234.742829][ T45] rust_binder: 11591: removing orphan mapping 0:24 [ 234.749540][ T45] rust_binder: 0: removing orphan mapping 24:96 [ 234.891642][T11603] overlayfs: failed to clone upperpath [ 235.161993][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.169306][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.177216][T11625] bridge_slave_0: entered allmulticast mode [ 235.185610][T11625] bridge_slave_0: entered promiscuous mode [ 235.194653][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.202053][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.209502][T11625] bridge_slave_1: entered allmulticast mode [ 235.217851][T11625] bridge_slave_1: entered promiscuous mode [ 235.619447][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.627094][T11625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.634675][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.642050][T11625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.747715][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.757126][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.778932][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.786145][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.801912][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.809044][ T8736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.916566][T11625] veth0_vlan: entered promiscuous mode [ 235.930025][T11625] veth1_macvtap: entered promiscuous mode [ 236.202162][ T36] audit: type=1400 audit(3512955102.329:601): avc: granted { setsecparam } for pid=11690 comm="syz.7.3793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 236.265138][ T36] audit: type=1400 audit(3512955102.385:602): avc: denied { create } for pid=11701 comm="syz.4.3798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 236.325093][ T36] audit: type=1400 audit(3512955102.451:603): avc: denied { set_context_mgr } for pid=11715 comm="syz.7.3802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 236.345569][ T36] audit: type=1326 audit(3512955102.451:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="syz.7.3802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3b3f8ebe9 code=0x0 [ 236.699075][T11729] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3805'. [ 236.938244][ T36] audit: type=1400 audit(3512955103.021:605): avc: denied { create } for pid=11751 comm="syz.4.3814" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.975460][ T36] audit: type=1400 audit(3512955103.049:606): avc: denied { map } for pid=11751 comm="syz.4.3814" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.002218][ T36] audit: type=1400 audit(3512955103.049:607): avc: denied { read write } for pid=11751 comm="syz.4.3814" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.028617][ T36] audit: type=1400 audit(3512955103.059:608): avc: denied { ioctl } for pid=11744 comm="syz.2.3812" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49185 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.094785][T11764] overlayfs: failed to clone lowerpath [ 237.110831][ T36] audit: type=1400 audit(3512955103.180:609): avc: denied { name_bind } for pid=11766 comm="syz.2.3818" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 237.140057][ T36] audit: type=1400 audit(3512955103.208:610): avc: denied { create } for pid=11771 comm="syz.2.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 237.476794][T11803] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 237.476849][T11803] rust_binder: Error in use_page_slow: EBUSY [ 237.490359][T11803] rust_binder: use_range failure EBUSY [ 237.497723][T11803] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 237.503506][T11803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 237.515836][T11803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:20 [ 238.664584][T11843] 9p filesystem being mounted at /572/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 238.986090][T11880] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3857'. [ 239.367142][T11898] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3863'. [ 240.085494][T11921] fuse: Unknown parameter 'fd5G|]ӂ#' [ 240.697773][T11933] fuse: Bad value for 'fd' [ 240.710748][T11935] 2N: renamed from vcan0 (while UP) [ 240.720464][T11935] overlayfs: failed to resolve './file1/file0': -2 [ 240.773412][T11940] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65304 sclass=netlink_route_socket pid=11940 comm=syz.2.3880 [ 240.976177][T11949] SELinux: Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped). [ 241.483214][T11970] rust_binder: Error while translating object. [ 241.483275][T11970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 241.490573][T11970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 241.541402][ T353] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 241.565975][ T36] kauditd_printk_skb: 497 callbacks suppressed [ 241.565995][ T36] audit: type=1400 audit(3512955107.350:1108): avc: denied { create } for pid=11972 comm="syz.7.3891" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.597063][ T36] audit: type=1400 audit(3512955107.378:1109): avc: denied { write } for pid=11972 comm="syz.7.3891" name="file2" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.597113][ T353] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.622542][ T36] audit: type=1400 audit(3512955107.378:1110): avc: denied { write open } for pid=11972 comm="syz.7.3891" path="/9/file2" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.658397][T11976] cgroup: Unknown subsys name 'obj_role' [ 241.740035][T11977] fido_id[11977]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.757148][ T36] audit: type=1400 audit(3512955107.378:1111): avc: denied { ioctl } for pid=11972 comm="syz.7.3891" path="/9/file2" dev="tmpfs" ino=65 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.816001][ T36] audit: type=1400 audit(3512955107.444:1112): avc: denied { mounton } for pid=11975 comm="syz.6.3892" path="/140/file0" dev="tmpfs" ino=778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 241.841218][T11986] netlink: 'syz.7.3895': attribute type 4 has an invalid length. [ 241.843485][ T36] audit: type=1400 audit(3512955107.490:1113): avc: denied { unlink } for pid=11625 comm="syz-executor" name="file2" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 241.876443][ T36] audit: type=1400 audit(3512955107.500:1114): avc: denied { read write } for pid=11625 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.932698][ T36] audit: type=1400 audit(3512955107.500:1115): avc: denied { read write open } for pid=11625 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 241.956175][T11996] rust_binder: 43: no such ref 0 [ 241.986988][ T36] audit: type=1400 audit(3512955107.500:1116): avc: denied { ioctl } for pid=11625 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.013486][ T36] audit: type=1400 audit(3512955107.556:1117): avc: denied { create } for pid=11978 comm="syz.4.3893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 244.256594][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.263805][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.271084][T12054] bridge_slave_0: entered allmulticast mode [ 244.277481][T12054] bridge_slave_0: entered promiscuous mode [ 244.284958][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.292703][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.299971][T12054] bridge_slave_1: entered allmulticast mode [ 244.306337][T12054] bridge_slave_1: entered promiscuous mode [ 244.354779][ T8710] bridge_slave_1: left allmulticast mode [ 244.360749][ T8710] bridge_slave_1: left promiscuous mode [ 244.366481][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.374431][ T8710] bridge_slave_0: left allmulticast mode [ 244.380198][ T8710] bridge_slave_0: left promiscuous mode [ 244.386026][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.417681][ T8710] bridge0 (unregistering): left allmulticast mode [ 244.516467][T12054] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.523568][T12054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.531268][T12054] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.538345][T12054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.569951][ T8710] tipc: Disabling bearer [ 244.575544][ T8710] tipc: Left network mode [ 244.583663][ T8710] veth1_macvtap: left promiscuous mode [ 244.593096][ T8710] veth0_vlan: left promiscuous mode [ 244.642264][T12077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=12077 comm=syz.2.3923 [ 244.675775][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.683582][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.698340][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.705439][ T8735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.718939][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.726052][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.741965][T12081] syzkaller0: entered allmulticast mode [ 244.748354][T12081] syzkaller0: entered promiscuous mode [ 244.757044][T12081] syzkaller0 (unregistering): left promiscuous mode [ 244.764205][T12081] syzkaller0 (unregistering): left allmulticast mode [ 244.812291][T12083] 9pnet_fd: Insufficient options for proto=fd [ 244.873413][T12054] veth0_vlan: entered promiscuous mode [ 244.904690][T12054] veth1_macvtap: entered promiscuous mode [ 245.146663][T12087] input: syz0 as /devices/virtual/input/input25 [ 245.243678][T12087] binder: Unknown parameter 'rw' [ 245.656605][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.824560][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.836852][ T9] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 245.848538][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 245.856495][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 245.866529][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.877284][ T9] usb 5-1: config 0 descriptor?? [ 246.330542][ T9] waltop 0003:172F:0034.0012: hidraw0: USB HID v4.f9 Device [HID 172f:0034] on usb-dummy_hcd.4-1/input0 [ 246.606974][ T453] usb 5-1: USB disconnect, device number 10 [ 246.670018][T12161] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 246.966022][T12182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=7936 sclass=netlink_tcpdiag_socket pid=12182 comm=syz.2.3956 [ 247.114458][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 247.114481][ T36] audit: type=1400 audit(3512955112.539:1567): avc: denied { execmem } for pid=12181 comm="syz.2.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 247.157734][ T36] audit: type=1400 audit(3512955112.577:1568): avc: denied { mounton } for pid=12184 comm="syz.2.3957" path="/356/file0" dev="tmpfs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 247.181725][ T36] audit: type=1400 audit(3512955112.577:1569): avc: denied { mount } for pid=12184 comm="syz.2.3957" name="/" dev="incremental-fs" ino=1939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 247.300087][ T36] audit: type=1400 audit(3512955112.708:1570): avc: denied { read write } for pid=12054 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.346227][ T36] audit: type=1400 audit(3512955112.708:1571): avc: denied { read write open } for pid=12054 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.373173][ T36] audit: type=1400 audit(3512955112.708:1572): avc: denied { ioctl } for pid=12054 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.401686][ T36] audit: type=1400 audit(3512955112.726:1573): avc: denied { create } for pid=12186 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.442573][ T36] audit: type=1400 audit(3512955112.726:1574): avc: denied { setopt } for pid=12186 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.474200][ T36] audit: type=1400 audit(3512955112.736:1575): avc: denied { setopt } for pid=12186 comm="syz.4.3958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 247.501834][ T36] audit: type=1400 audit(3512955112.764:1576): avc: denied { read write } for pid=12054 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.828792][T12207] cgroup: subsys name conflicts with all [ 248.886686][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 249.049209][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.059509][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.070238][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 249.079545][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 249.087639][ T9] usb 5-1: SerialNumber: syz [ 249.317059][T12226] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 249.336367][T12226] rust_binder: Error while translating object. [ 249.336437][T12226] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 249.342702][T12226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 249.371106][ T9] usb 5-1: 0:2 : does not exist [ 249.428875][ T9] usb 5-1: USB disconnect, device number 11 [ 249.523565][ T9072] udevd[9072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 249.636234][T12275] overlayfs: failed to clone lowerpath [ 249.644763][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3985'. [ 250.108601][T12284] fuse: Bad value for 'rootmode' [ 250.206967][T12286] loop7: detected capacity change from 0 to 16384 [ 250.383901][T12287] loop7: detected capacity change from 16384 to 16383 [ 250.465250][T12289] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 250.465281][T12289] rust_binder: Error while translating object. [ 250.474498][T12289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 250.480823][T12289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 250.931831][T12328] overlayfs: failed to resolve './bus': -2 [ 251.492647][T12336] netlink: 393 bytes leftover after parsing attributes in process `syz.4.4006'. [ 251.766905][T12366] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 252.471751][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 252.471771][ T36] audit: type=1400 audit(3512955117.551:2136): avc: denied { read } for pid=12389 comm="syz.7.4021" dev="nsfs" ino=4026533716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.503590][ T36] audit: type=1400 audit(3512955117.551:2137): avc: denied { read open } for pid=12389 comm="syz.7.4021" path="net:[4026533716]" dev="nsfs" ino=4026533716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 252.529089][ T36] audit: type=1400 audit(3512955117.551:2138): avc: denied { create } for pid=12389 comm="syz.7.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.550278][ T36] audit: type=1400 audit(3512955117.579:2139): avc: denied { bind } for pid=12389 comm="syz.7.4021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 252.756641][ T36] audit: type=1400 audit(3512955117.813:2140): avc: denied { mounton } for pid=12391 comm="syz.6.4022" path="/166/bus" dev="tmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.757603][T12392] overlayfs: failed to clone upperpath [ 252.829434][ T36] audit: type=1400 audit(3512955117.878:2141): avc: denied { unmount } for pid=12054 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 252.846774][T12398] netlink: 'syz.6.4024': attribute type 4 has an invalid length. [ 252.869152][T12398] netlink: 'syz.6.4024': attribute type 4 has an invalid length. [ 252.881462][ T36] audit: type=1400 audit(3512955117.934:2142): avc: denied { mounton } for pid=12397 comm="syz.6.4024" path="/168/file0" dev="tmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 252.905574][ T36] audit: type=1400 audit(3512955117.934:2143): avc: denied { mount } for pid=12397 comm="syz.6.4024" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.942603][ T36] audit: type=1400 audit(3512955117.972:2144): avc: denied { create } for pid=12400 comm="syz.6.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.963420][ T36] audit: type=1400 audit(3512955117.972:2145): avc: denied { write } for pid=12400 comm="syz.6.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.047901][T12407] netlink: 'syz.6.4029': attribute type 3 has an invalid length. [ 253.061018][T12407] netlink: 944 bytes leftover after parsing attributes in process `syz.6.4029'. [ 253.085808][T12409] rust_binder: Write failure EFAULT in pid:76 [ 253.247729][T12423] netlink: 'syz.6.4033': attribute type 39 has an invalid length. [ 253.474663][ T45] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.650571][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.660984][ T45] usb 5-1: config 0 has no interfaces? [ 253.670158][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 253.679721][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 253.687924][ T45] usb 5-1: Product: syz [ 253.692230][ T45] usb 5-1: Manufacturer: syz [ 253.697196][ T45] usb 5-1: SerialNumber: syz [ 253.704124][ T45] usb 5-1: config 0 descriptor?? [ 253.935654][ T10] usb 5-1: USB disconnect, device number 12 [ 254.136406][T12460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=12460 comm=syz.7.4047 [ 254.418140][T12482] 9pnet_virtio: no channels available for device 127.0.0.1 [ 254.431650][T12482] sock: sock_timestamping_bind_phc: sock not bind to device [ 254.707948][ T1547] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 254.724480][ T1547] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.873696][T12493] fido_id[12493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.924698][T12500] rust_binder: 93: no such ref 2 [ 255.335518][T12508] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 256.108069][T12539] input: syz1 as /devices/virtual/input/input26 [ 256.241699][T12543] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 256.249712][T12543] rust_binder: Error while translating object. [ 256.249741][T12543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 256.256160][T12543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:105 [ 256.266451][T12543] rust_binder: Write failure EINVAL in pid:105 [ 256.717756][T12592] ip6gretap0: mtu less than device minimum [ 257.324969][ T453] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 257.487823][ T453] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.498192][ T453] usb 5-1: config 0 has no interfaces? [ 257.507823][ T453] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 257.516924][ T453] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 257.526152][ T453] usb 5-1: Product: syz [ 257.530378][ T453] usb 5-1: Manufacturer: syz [ 257.534971][ T453] usb 5-1: SerialNumber: syz [ 257.541447][ T453] usb 5-1: config 0 descriptor?? [ 257.777023][ T453] usb 5-1: USB disconnect, device number 13 [ 257.909571][ T36] kauditd_printk_skb: 1450 callbacks suppressed [ 257.909591][ T36] audit: type=1400 audit(3512955122.628:3596): avc: denied { execmem } for pid=12620 comm="syz.2.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 257.937062][ T36] audit: type=1400 audit(3512955122.628:3597): avc: denied { execute } for pid=12620 comm="syz.2.4100" path="/dev/rnullb0" dev="tmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 257.961170][ T36] audit: type=1400 audit(3512955122.637:3598): avc: denied { create } for pid=12620 comm="syz.2.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 257.980986][ T36] audit: type=1400 audit(3512955122.637:3599): avc: denied { create } for pid=12620 comm="syz.2.4100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.001413][ T36] audit: type=1400 audit(3512955122.666:3600): avc: denied { create } for pid=12622 comm="syz.2.4101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.021809][ T36] audit: type=1400 audit(3512955122.666:3601): avc: denied { mounton } for pid=12622 comm="syz.2.4101" path="/404/file0" dev="tmpfs" ino=2210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 258.045075][ T36] audit: type=1400 audit(3512955122.666:3602): avc: denied { mount } for pid=12622 comm="syz.2.4101" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 258.067768][ T36] audit: type=1400 audit(3512955122.740:3603): avc: denied { create } for pid=12629 comm="syz.2.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.087860][ T36] audit: type=1400 audit(3512955122.740:3604): avc: denied { setopt } for pid=12629 comm="syz.2.4103" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.108623][ T36] audit: type=1400 audit(3512955122.740:3605): avc: denied { connect } for pid=12629 comm="syz.2.4103" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 258.427718][T12647] devpts: called with bogus options [ 258.644759][T12659] 9pnet_fd: Insufficient options for proto=fd [ 258.847670][T12671] netlink: 'syz.4.4118': attribute type 16 has an invalid length. [ 259.103532][T12681] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 259.275273][T12683] rust_binder: Error while translating object. [ 259.275325][T12683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 259.281885][T12683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:131 [ 259.390269][T12689] 9pnet_fd: Insufficient options for proto=fd [ 259.390649][T12690] 9pnet_fd: Insufficient options for proto=fd [ 259.603041][ T453] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 259.763461][ T453] usb 5-1: Using ep0 maxpacket: 32 [ 259.770702][ T453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.781692][ T453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.792012][ T453] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 259.801432][ T453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.811601][ T453] usb 5-1: config 0 descriptor?? [ 259.819178][ T453] hub 5-1:0.0: USB hub found [ 260.043773][ T453] hub 5-1:0.0: 1 port detected [ 260.701186][T12687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.716370][T12687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.555605][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'. [ 261.612196][T12765] 9pnet_fd: Insufficient options for proto=fd [ 261.662762][T12767] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4153'. [ 261.774848][T12784] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4158'. [ 261.807374][ T9] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 262.507526][T12840] overlayfs: failed to clone upperpath [ 262.546003][T12842] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4179'. [ 262.694004][ T45] usb 5-1: USB disconnect, device number 14 [ 262.784655][T12853] netlink: 'syz.7.4183': attribute type 4 has an invalid length. [ 262.793690][T12853] netlink: 'syz.7.4183': attribute type 4 has an invalid length. [ 262.838039][T12855] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4184'. [ 262.888828][T12862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4187'. [ 263.261607][ T36] kauditd_printk_skb: 724 callbacks suppressed [ 263.261629][ T36] audit: type=1400 audit(3512955127.640:4330): avc: denied { create } for pid=12882 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.292086][ T36] audit: type=1400 audit(3512955127.668:4331): avc: denied { create } for pid=12882 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 263.314484][ T453] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 263.326808][ T36] audit: type=1400 audit(3512955127.696:4332): avc: denied { ioctl } for pid=12872 comm="syz.4.4191" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.372011][ T36] audit: type=1400 audit(3512955127.696:4333): avc: denied { ioctl } for pid=12872 comm="syz.4.4191" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.398728][ T36] audit: type=1400 audit(3512955127.696:4334): avc: denied { ioctl } for pid=12872 comm="syz.4.4191" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.441475][ T36] audit: type=1400 audit(3512955127.799:4335): avc: denied { ioctl } for pid=12872 comm="syz.4.4191" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.470099][ T36] audit: type=1400 audit(3512955127.836:4336): avc: denied { create } for pid=12897 comm="syz.7.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.492003][ T36] audit: type=1400 audit(3512955127.855:4337): avc: denied { write } for pid=12897 comm="syz.7.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.514247][ T36] audit: type=1400 audit(3512955127.855:4338): avc: denied { nlmsg_write } for pid=12897 comm="syz.7.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 263.537517][ T36] audit: type=1400 audit(3512955127.873:4339): avc: denied { create } for pid=12899 comm="syz.7.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.538812][ T453] usb 5-1: Using ep0 maxpacket: 16 [ 263.565822][ T453] usb 5-1: config 0 has no interfaces? [ 263.572258][ T453] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.581487][ T453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.603794][ T453] usb 5-1: config 0 descriptor?? [ 263.717894][T12915] 9pnet_fd: Insufficient options for proto=fd [ 263.827842][ T453] usb 5-1: USB disconnect, device number 15 [ 263.892358][T12934] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4210'. [ 264.024792][T12943] rust_binder: Write failure EFAULT in pid:162 [ 264.212699][T12953] 9pnet_fd: Insufficient options for proto=fd [ 264.453805][T12978] overlayfs: failed to resolve './file0': -2 [ 264.480681][ T453] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 264.514491][T12983] can: request_module (can-proto-0) failed. [ 264.679119][ T453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.697713][ T453] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 264.723379][ T453] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 264.733340][T13012] tmpfs: Bad value for 'huge' [ 264.743526][ T453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.762788][ T453] usb 5-1: config 0 descriptor?? [ 264.871332][T13021] fuse: Bad value for 'fd' [ 264.877571][T13021] fuse: Bad value for 'fd' [ 265.219019][ T453] hid-rmi 0003:1532:011D.0014: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0 [ 265.431953][T12949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.440539][T12949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.450873][ T453] usb 5-1: USB disconnect, device number 16 [ 266.233522][T13074] fuse: Bad value for 'group_id' [ 266.238919][T13074] fuse: Bad value for 'group_id' [ 267.386669][T13131] binder: Unknown parameter 'context' [ 267.387582][T13132] binder: Unknown parameter 'context' [ 267.811020][T13147] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4288'. [ 267.928895][T13155] overlayfs: failed to clone upperpath [ 267.987619][T13159] overlayfs: failed to clone upperpath [ 268.454432][T13183] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 268.623398][ T36] kauditd_printk_skb: 637 callbacks suppressed [ 268.623422][ T36] audit: type=1400 audit(3512955133.652:4977): avc: denied { create } for pid=13186 comm="syz.2.4302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.736071][ T36] audit: type=1400 audit(3512955133.745:4978): avc: denied { execmem } for pid=13193 comm="syz.7.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 268.781426][ T36] audit: type=1400 audit(3512955133.801:4979): avc: denied { create } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.820502][ T36] audit: type=1400 audit(3512955133.820:4980): avc: denied { create } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.841894][ T36] audit: type=1400 audit(3512955133.820:4981): avc: denied { write } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.879259][ T36] audit: type=1400 audit(3512955133.820:4982): avc: denied { read } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.915899][ T36] audit: type=1400 audit(3512955133.820:4983): avc: denied { read } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.938575][ T36] audit: type=1400 audit(3512955133.829:4984): avc: denied { write } for pid=13190 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.959873][ T36] audit: type=1400 audit(3512955133.923:4985): avc: denied { create } for pid=13197 comm="syz.2.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 268.980369][ T36] audit: type=1400 audit(3512955133.951:4986): avc: denied { read } for pid=13197 comm="syz.2.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 269.032155][T13203] overlayfs: failed to clone upperpath [ 269.040209][T13203] overlayfs: failed to clone upperpath [ 269.377968][T13218] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.378015][T13218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:198 [ 269.661060][ T431] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 269.696779][ T431] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.810682][T13232] fido_id[13232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.939315][T13238] overlayfs: failed to clone lowerpath [ 270.186749][T13250] veth1: entered allmulticast mode [ 270.196582][T13249] veth1: left allmulticast mode [ 270.374541][T13266] netlink: 'syz.6.4328': attribute type 27 has an invalid length. [ 270.403085][T13274] overlayfs: failed to resolve './file1': -2 [ 270.541011][T13286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 270.888812][T13323] incfs: Options parsing error. -22 [ 270.914325][T13323] incfs: mount failed -22 [ 271.786759][T13379] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4360'. [ 272.227019][ T431] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 272.258708][ T431] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.414754][T13401] fido_id[13401]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.651126][ T431] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 272.925027][ T431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.930062][T13439] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=94 sclass=netlink_audit_socket pid=13439 comm=syz.7.4380 [ 272.935909][ T431] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 218, using maximum allowed: 30 [ 272.958739][ T431] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 218 [ 272.975617][ T431] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 272.984849][ T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.992956][ T431] usb 5-1: Product: syz [ 272.997211][ T431] usb 5-1: Manufacturer: syz [ 273.001826][ T431] usb 5-1: SerialNumber: syz [ 273.008285][ T431] usb 5-1: config 0 descriptor?? [ 273.027488][T13441] 9p filesystem being mounted at /246/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 273.028453][ T431] cdc_acm 5-1:0.0: skipping garbage [ 273.264852][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.273562][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.316152][ T353] usb 5-1: USB disconnect, device number 17 [ 273.635355][T13444] EXT4-fs: dax option not supported [ 273.822843][T13458] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 273.946880][T13471] rust_binder: validate_parent_fixup: fixup_min_offset=41, parent_offset=36 [ 273.946929][T13471] rust_binder: Error while translating object. [ 273.976954][T13471] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.988740][T13471] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 274.019481][ T36] kauditd_printk_skb: 796 callbacks suppressed [ 274.019504][ T36] audit: type=1400 audit(3512955138.691:5783): avc: denied { read write } for pid=12054 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.063348][ T36] audit: type=1400 audit(3512955138.691:5784): avc: denied { read write open } for pid=12054 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.090846][ T36] audit: type=1400 audit(3512955138.691:5785): avc: denied { ioctl } for pid=12054 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.152797][ T36] audit: type=1400 audit(3512955138.729:5786): avc: denied { read write } for pid=13479 comm="syz.4.4397" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 274.215308][T13483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11607 sclass=netlink_route_socket pid=13483 comm=syz.6.4396 [ 274.232073][ T36] audit: type=1400 audit(3512955138.729:5787): avc: denied { read open } for pid=13479 comm="syz.4.4397" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 274.298941][ T36] audit: type=1400 audit(3512955138.738:5788): avc: denied { map } for pid=13479 comm="syz.4.4397" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 274.329111][ T36] audit: type=1400 audit(3512955138.738:5789): avc: denied { execmem } for pid=13479 comm="syz.4.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 274.349526][ T36] audit: type=1400 audit(3512955138.738:5790): avc: denied { read execute } for pid=13479 comm="syz.4.4397" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 274.358083][T13501] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.377462][T13497] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.791594][T13526] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 274.947340][T13542] rust_binder: Error in use_page_slow: ESRCH [ 274.947374][T13542] rust_binder: use_range failure ESRCH [ 274.954484][T13542] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 274.960046][T13542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 274.968037][T13542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:271 [ 275.372534][T13557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4423'. [ 275.378449][ T353] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 275.549531][ T353] usb 5-1: Using ep0 maxpacket: 32 [ 275.559715][ T353] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.574846][ T353] usb 5-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice= 0.40 [ 275.584170][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.592198][ T353] usb 5-1: Product: 齂덡탕ꋩ錀⮊짵઴딄⟌仸긖뺻卶Ს㑶孚뙕ᛲ喤㯸ꚦ⯉㠾ᇐ쟓湋뎞⾐䗶ӡ勸迻쒴緻尒麲ퟺ￘䎶鐀鴇륲賗婳巅ⰴꊥ꼌隨龜겏敖熟ꉊ땲࿬ዀቐ隙쭈覆誶諊砵ᕰᜌ澠᧩寛ၭ렫識౯ᖸ袴뻮ྫྷ洧给 [ 275.622094][ T353] usb 5-1: Manufacturer: Н [ 275.627699][ T353] usb 5-1: SerialNumber: ⡎ [ 275.669488][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4432'. [ 275.756455][T13585] overlayfs: missing 'lowerdir' [ 275.883270][T13598] netlink: 'syz.7.4440': attribute type 63 has an invalid length. [ 275.891127][T13598] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4440'. [ 276.012765][T13616] overlayfs: failed to clone upperpath [ 276.639416][ T353] usbhid 5-1:1.0: can't add hid device: -71 [ 276.652707][ T353] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 276.683308][ T353] usb 5-1: USB disconnect, device number 18 [ 277.441736][T13694] overlayfs: missing 'workdir' [ 277.656996][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.664811][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.672930][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.681066][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.688659][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.696514][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.704042][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.711785][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 277.719161][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 277.726806][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 277.779639][T13721] incfs_lookup_dentry err:-13 [ 277.784508][T13721] incfs: Can't find or create .index dir in ./bus [ 277.791253][T13721] incfs: mount failed -13 [ 277.869402][T13727] 9pnet_fd: Insufficient options for proto=fd [ 278.213421][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4491'. [ 279.413874][ T36] kauditd_printk_skb: 655 callbacks suppressed [ 279.413896][ T36] audit: type=1400 audit(3512955143.737:6436): avc: denied { name_bind } for pid=13807 comm="syz.4.4511" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 279.449972][ T36] audit: type=1400 audit(3512955143.774:6437): avc: denied { node_bind } for pid=13807 comm="syz.4.4511" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 279.510220][ T36] audit: type=1400 audit(3512955143.830:6438): avc: denied { create } for pid=13809 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.514090][T13811] overlayfs: failed to clone upperpath [ 279.555118][ T36] audit: type=1400 audit(3512955143.830:6439): avc: denied { write } for pid=13809 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.557481][T13811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13811 comm=syz.7.4512 [ 279.597289][ T36] audit: type=1400 audit(3512955143.830:6440): avc: denied { nlmsg_write } for pid=13809 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.621384][ T36] audit: type=1400 audit(3512955143.830:6441): avc: denied { mounton } for pid=13809 comm="syz.7.4512" path="/177/bus" dev="tmpfs" ino=972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 279.646002][ T36] audit: type=1400 audit(3512955143.868:6442): avc: denied { create } for pid=13809 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.679514][ T36] audit: type=1400 audit(3512955143.868:6443): avc: denied { write } for pid=13809 comm="syz.7.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.701839][ T36] audit: type=1400 audit(3512955143.989:6444): avc: denied { create } for pid=13812 comm="syz.7.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 279.723552][ T36] audit: type=1400 audit(3512955143.989:6445): avc: denied { create } for pid=13812 comm="syz.7.4513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.334004][T13871] 9pnet_fd: Insufficient options for proto=fd [ 280.953617][T13907] overlayfs: failed to resolve './cgroup': -2 [ 281.404259][ T8711] bridge_slave_1: left allmulticast mode [ 281.410037][ T8711] bridge_slave_1: left promiscuous mode [ 281.415786][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.423663][ T8711] bridge_slave_0: left allmulticast mode [ 281.429318][ T8711] bridge_slave_0: left promiscuous mode [ 281.436081][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.621958][ T8711] veth1_macvtap: left promiscuous mode [ 281.638866][ T8711] veth0_vlan: left promiscuous mode [ 281.659719][T13930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2417 sclass=netlink_route_socket pid=13930 comm=syz.6.4550 [ 281.676184][T13932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2417 sclass=netlink_route_socket pid=13932 comm=syz.6.4550 [ 282.607011][T14043] overlayfs: failed to clone upperpath [ 283.062799][T14047] fuse: Bad value for 'fd' [ 283.062799][T14048] fuse: Bad value for 'fd' [ 283.218285][T14064] netlink: 'syz.4.4596': attribute type 4 has an invalid length. [ 283.226076][T14064] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4596'. [ 284.675030][T14138] netlink: 'syz.7.4623': attribute type 28 has an invalid length. [ 284.775594][ T36] kauditd_printk_skb: 366 callbacks suppressed [ 284.775616][ T36] audit: type=1400 audit(3512955148.748:6812): avc: denied { create } for pid=14141 comm="syz.6.4625" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.806382][ T36] audit: type=1400 audit(3512955148.748:6813): avc: denied { ioctl } for pid=14141 comm="syz.6.4625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56818 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.834932][ T36] audit: type=1400 audit(3512955148.748:6814): avc: denied { ioctl } for pid=14141 comm="syz.6.4625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56818 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.862819][ T36] audit: type=1400 audit(3512955148.748:6815): avc: denied { ioctl } for pid=14141 comm="syz.6.4625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56818 ioctlcmd=0xaa08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.892024][ T36] audit: type=1400 audit(3512955148.748:6816): avc: denied { ioctl } for pid=14141 comm="syz.6.4625" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56818 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.919526][ T36] audit: type=1400 audit(3512955148.758:6817): avc: denied { create } for pid=14141 comm="syz.6.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 284.940871][ T36] audit: type=1400 audit(3512955148.758:6818): avc: denied { write } for pid=14141 comm="syz.6.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 284.961458][ T36] audit: type=1400 audit(3512955148.758:6819): avc: denied { nlmsg_write } for pid=14141 comm="syz.6.4625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 284.982708][ T36] audit: type=1400 audit(3512955148.842:6820): avc: denied { create } for pid=14150 comm="syz.6.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 285.003720][ T36] audit: type=1400 audit(3512955148.851:6821): avc: denied { write } for pid=14150 comm="syz.6.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 285.932411][T14246] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 285.956174][T14246] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 286.819040][T14263] netlink: 'syz.7.4668': attribute type 2 has an invalid length. [ 286.826909][T14263] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4668'. [ 287.032915][T14291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4677'. [ 288.016534][T14355] overlayfs: failed to clone upperpath [ 288.103992][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 288.113191][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 288.123884][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 288.133983][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 288.144174][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 288.154307][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4703'. [ 290.403974][ T36] kauditd_printk_skb: 310 callbacks suppressed [ 290.403994][ T36] audit: type=1400 audit(3512955154.012:7132): avc: denied { mounton } for pid=14420 comm="syz.4.4721" path="/143/file0" dev="tmpfs" ino=803 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 290.404260][T14421] fuse: Bad value for 'fd' [ 290.440557][ T36] audit: type=1400 audit(3512955154.050:7133): avc: denied { create } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.461580][ T36] audit: type=1400 audit(3512955154.050:7134): avc: denied { write } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.482549][ T36] audit: type=1400 audit(3512955154.050:7135): avc: denied { read } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.503438][ T36] audit: type=1400 audit(3512955154.050:7136): avc: denied { create } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.524127][ T36] audit: type=1400 audit(3512955154.050:7137): avc: denied { write } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.544793][ T36] audit: type=1400 audit(3512955154.050:7138): avc: denied { read } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.565234][ T36] audit: type=1400 audit(3512955154.050:7139): avc: denied { read } for pid=14420 comm="syz.4.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.883875][ T36] audit: type=1400 audit(3512955155.396:7140): avc: denied { create } for pid=14427 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.903658][ T36] audit: type=1400 audit(3512955155.396:7141): avc: denied { setopt } for pid=14427 comm="syz.4.4724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 293.876931][T14460] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.889889][T14460] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.898180][T14460] bridge_slave_0: entered allmulticast mode [ 293.905329][T14460] bridge_slave_0: entered promiscuous mode [ 293.912872][T14460] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.924724][T14460] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.932089][T14460] bridge_slave_1: entered allmulticast mode [ 293.939951][T14460] bridge_slave_1: entered promiscuous mode [ 294.080266][T14495] x_tables: duplicate underflow at hook 2 [ 294.086497][T14460] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.093565][T14460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.101082][T14460] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.108230][T14460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.135964][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4749'. [ 294.188186][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.197546][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.218561][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.225855][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.237788][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.244916][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.343305][T14460] veth0_vlan: entered promiscuous mode [ 294.382727][T14460] veth1_macvtap: entered promiscuous mode [ 294.911762][T14530] overlayfs: failed to clone upperpath [ 295.223524][T14560] overlayfs: failed to resolve './bus': -2 [ 295.389139][ T64] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 295.563752][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.574829][ T64] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.585597][ T64] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.600432][ T64] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.610600][ T64] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.623383][ T64] usb 9-1: config 0 descriptor?? [ 295.752951][ T36] kauditd_printk_skb: 1405 callbacks suppressed [ 295.752970][ T36] audit: type=1400 audit(3512955159.024:8346): avc: denied { write } for pid=14592 comm="syz.6.4776" laddr=172.20.20.170 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.779327][T14594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.788060][ T36] audit: type=1400 audit(3512955159.024:8347): avc: denied { write } for pid=14592 comm="syz.6.4776" laddr=172.20.20.170 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.792993][T14594] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 295.816191][ T36] audit: type=1400 audit(3512955159.024:8348): avc: denied { write } for pid=14592 comm="syz.6.4776" laddr=172.20.20.170 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.826899][T14594] audit: backlog limit exceeded [ 295.854401][ T36] audit: type=1400 audit(3512955159.024:8349): avc: denied { write } for pid=14592 comm="syz.6.4776" laddr=172.20.20.170 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.880369][T14549] audit: audit_backlog=65 > audit_backlog_limit=64 [ 295.891041][T14549] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 295.899987][T14549] audit: backlog limit exceeded [ 295.957961][T14604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14604 comm=syz.6.4780 [ 295.980633][T14604] 9pnet_fd: Insufficient options for proto=fd [ 296.173441][ T64] plantronics 0003:047F:FFFF.0017: unknown main item tag 0xe [ 296.191278][ T64] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 296.203593][ T64] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 296.218313][ T64] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 296.502583][ T45] usb 9-1: USB disconnect, device number 2 [ 296.670416][T14667] overlay: ./file0 is not a directory [ 296.670411][T14668] overlay: ./file0 is not a directory [ 296.777646][T14678] overlay: Unknown parameter 'subj_user' [ 297.125705][T14680] rust_binder: Write failure EFAULT in pid:26 [ 297.191583][T14684] netlink: 'syz.8.4811': attribute type 4 has an invalid length. [ 297.343510][T14690] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4812'. [ 298.128135][T14730] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14730 comm=syz.4.4829 [ 298.211559][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4827'. [ 298.226368][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4827'. [ 298.305208][T14751] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4837'. [ 299.302058][T14810] netlink: 'syz.8.4857': attribute type 27 has an invalid length. [ 300.205591][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.215100][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.226270][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.236436][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.247497][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.257614][T14858] 9pnet: Could not find request transport: fd>rfdno=0x0000000000000004 [ 300.647060][T14901] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 300.998730][T14910] can: request_module (can-proto-0) failed. [ 301.129505][ T36] kauditd_printk_skb: 579 callbacks suppressed [ 301.129524][ T36] audit: type=1400 audit(3512955164.036:8929): avc: denied { create } for pid=14927 comm="syz.6.4896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.156212][ T36] audit: type=1400 audit(3512955164.036:8930): avc: denied { connect } for pid=14927 comm="syz.6.4896" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.178094][ T36] audit: type=1400 audit(3512955164.036:8931): avc: denied { write } for pid=14927 comm="syz.6.4896" laddr=fe80::80d4:c7ff:feea:7e0b lport=60 faddr=ff02::1 fport=19975 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.204524][ T36] audit: type=1400 audit(3512955164.073:8932): avc: denied { execmem } for pid=14929 comm="syz.8.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 301.262622][ T36] audit: type=1400 audit(3512955164.167:8933): avc: denied { create } for pid=14934 comm="syz.8.4899" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 301.723233][ T36] audit: type=1400 audit(3512955164.597:8934): avc: denied { execmem } for pid=14942 comm="syz.6.4902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 301.744587][ T36] audit: type=1400 audit(3512955164.597:8935): avc: denied { execute } for pid=14942 comm="syz.6.4902" path="/dev/rnullb0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.774620][ T36] audit: type=1400 audit(3512955164.653:8936): avc: denied { execmem } for pid=14947 comm="syz.6.4903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 301.794631][ T36] audit: type=1400 audit(3512955164.653:8937): avc: denied { execute } for pid=14947 comm="syz.6.4903" path="/dev/rnullb0" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.863356][ T36] audit: type=1400 audit(3512955164.728:8938): avc: denied { create } for pid=14955 comm="syz.6.4906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.095670][T14976] overlayfs: failed to clone upperpath [ 302.174594][T14979] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4915'. [ 302.330096][T14988] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4919'. [ 302.427319][T14996] overlayfs: failed to clone upperpath [ 303.922593][T15052] syz.4.4943 (15052): attempted to duplicate a private mapping with mremap. This is not supported. [ 304.144352][T15086] netlink: 'syz.6.4954': attribute type 1 has an invalid length. [ 305.026744][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4974'. [ 306.564071][ T36] kauditd_printk_skb: 246 callbacks suppressed [ 306.564115][ T36] audit: type=1400 audit(3512955169.122:9185): avc: denied { create } for pid=15182 comm="syz.8.4989" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.600862][ T36] audit: type=1400 audit(3512955169.122:9186): avc: denied { ioctl } for pid=15182 comm="syz.8.4989" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59983 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.630759][ T36] audit: type=1400 audit(3512955169.122:9187): avc: denied { ioctl } for pid=15182 comm="syz.8.4989" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59983 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.667467][ T36] audit: type=1400 audit(3512955169.141:9188): avc: denied { create } for pid=15185 comm="syz.6.4985" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.692224][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.699343][ T36] audit: type=1400 audit(3512955169.141:9189): avc: denied { ioctl } for pid=15185 comm="syz.6.4985" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59984 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.725616][T15177] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.733412][T15177] bridge_slave_0: entered allmulticast mode [ 306.739905][T15177] bridge_slave_0: entered promiscuous mode [ 306.748256][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.755740][T15177] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.758100][ T36] audit: type=1400 audit(3512955169.141:9190): avc: denied { ioctl } for pid=15185 comm="syz.6.4985" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59984 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.763056][T15177] bridge_slave_1: entered allmulticast mode [ 306.795785][T15177] bridge_slave_1: entered promiscuous mode [ 306.854377][ T36] audit: type=1400 audit(3512955169.141:9191): avc: denied { ioctl } for pid=15185 comm="syz.6.4985" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59984 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.909466][ T36] audit: type=1400 audit(3512955169.169:9192): avc: denied { create } for pid=15182 comm="syz.8.4989" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 306.919246][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4992'. [ 306.963449][ T36] audit: type=1400 audit(3512955169.169:9193): avc: denied { ioctl } for pid=15182 comm="syz.8.4989" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59988 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 307.001852][ T36] audit: type=1400 audit(3512955169.169:9194): avc: denied { ioctl } for pid=15182 comm="syz.8.4989" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=59988 ioctlcmd=0xaa04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 307.073197][T15177] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.080577][T15177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.087928][T15177] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.095448][T15177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.198301][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.205927][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.227325][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.234443][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.261629][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.269272][ T8711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.370031][T15177] veth0_vlan: entered promiscuous mode [ 307.451318][T15177] veth1_macvtap: entered promiscuous mode [ 307.616516][T15234] overlayfs: missing 'workdir' [ 307.680086][T15239] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 307.744600][T15241] netlink: 188 bytes leftover after parsing attributes in process `syz.8.5001'. [ 308.365536][T15265] fuse: Bad value for 'fd' [ 308.512089][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 308.683194][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 308.691550][ T10] usb 10-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.707923][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 308.714782][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 308.724242][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.738224][ T10] usb 10-1: config 0 descriptor?? [ 309.367134][T15315] fuse: Unknown parameter 'f7;d?0x0000000000000003' [ 309.395907][ T353] usb 10-1: USB disconnect, device number 2 [ 310.261065][T15353] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17 [ 310.522922][ T64] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 310.686176][T15370] fuse: Unknown parameter '' [ 310.696960][ T64] usb 10-1: config 0 has no interfaces? [ 310.708962][ T64] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.50 [ 310.718696][ T64] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.727011][ T64] usb 10-1: Product: syz [ 310.731475][ T64] usb 10-1: Manufacturer: syz [ 310.736219][ T64] usb 10-1: SerialNumber: syz [ 310.744036][ T64] usb 10-1: config 0 descriptor?? [ 310.980649][ T64] usb 10-1: USB disconnect, device number 3 [ 312.256196][ T36] kauditd_printk_skb: 1379 callbacks suppressed [ 312.256217][ T36] audit: type=1400 audit(3512955174.452:10574): avc: denied { create } for pid=15416 comm="syz.4.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.285712][ T36] audit: type=1400 audit(3512955174.452:10575): avc: denied { write } for pid=15416 comm="syz.4.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.312344][ T36] audit: type=1400 audit(3512955174.452:10576): avc: denied { read } for pid=15416 comm="syz.4.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.334378][ T36] audit: type=1400 audit(3512955174.452:10577): avc: denied { create } for pid=15416 comm="syz.4.5057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.402525][ T36] audit: type=1400 audit(3512955430.582:10578): avc: denied { create } for pid=15426 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.424920][ T36] audit: type=1400 audit(3512955430.610:10579): avc: denied { create } for pid=15426 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 312.445636][ T36] audit: type=1400 audit(3512955430.610:10580): avc: denied { listen } for pid=15426 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.466027][ T36] audit: type=1400 audit(3512955430.610:10581): avc: denied { accept } for pid=15426 comm="syz.4.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 312.649564][ T36] audit: type=1400 audit(3512955430.807:10582): avc: denied { create } for pid=15440 comm="syz.4.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.693354][ T36] audit: type=1400 audit(3512955430.807:10583): avc: denied { write } for pid=15440 comm="syz.4.5065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 312.868729][T15449] 9p filesystem being mounted at /9/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 312.885001][T15449] rust_binder: Fixups oob 164 166 363 196 [ 312.885034][T15449] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 312.892660][T15449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 312.901675][T15449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28 [ 313.086581][T15471] vlan0: entered promiscuous mode [ 313.104405][T15471] vlan0: entered allmulticast mode [ 313.129590][T15471] veth0_vlan: entered allmulticast mode [ 313.190662][T15473] netlink: 'syz.8.5077': attribute type 6 has an invalid length. [ 313.252269][T15478] overlayfs: failed to clone upperpath [ 313.265230][T15480] overlayfs: failed to clone upperpath [ 313.325225][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 313.507675][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 313.528133][ T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 313.537389][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.542375][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5087'. [ 313.572060][ T9] usb 10-1: config 0 descriptor?? [ 313.878952][T15523] overlayfs: failed to clone upperpath [ 313.981193][T15537] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5097'. [ 314.012381][ T9] logitech 0003:046D:C295.0019: unbalanced delimiter at end of report description [ 314.030999][ T9] logitech 0003:046D:C295.0019: parse failed [ 314.037351][ T9] logitech 0003:046D:C295.0019: probe with driver logitech failed with error -22 [ 314.526068][ T431] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 314.545492][ T431] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 314.862283][T15613] net_ratelimit: 22 callbacks suppressed [ 314.862311][T15613] sock: sock_set_timeout: `syz.8.5122' (pid 15613) tries to set negative timeout [ 315.840235][T15659] 9p filesystem being mounted at /92/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 316.362678][ T10] usb 10-1: USB disconnect, device number 4 [ 316.603342][T15680] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 316.816556][ T353] rust_binder: 15688: removing orphan mapping 0:24 [ 316.819066][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 316.833111][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'. [ 316.843539][ T353] rust_binder: 0: removing orphan mapping 24:96 [ 316.940764][T15714] cgroup: Unknown subsys name 'measure' [ 316.990437][T15716] 9pnet_fd: Insufficient options for proto=fd [ 317.301569][T15744] rust_binder: Write failure EINVAL in pid:57 [ 317.660510][ T36] kauditd_printk_skb: 485 callbacks suppressed [ 317.660534][ T36] audit: type=1400 audit(3512955435.500:11069): avc: denied { mounton } for pid=15775 comm="syz.4.5185" path="/278/file0" dev="tmpfs" ino=1539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.697758][ T36] audit: type=1400 audit(3512955435.510:11070): avc: denied { mount } for pid=15775 comm="syz.4.5185" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 317.721354][ T36] audit: type=1400 audit(3512955435.519:11071): avc: denied { watch } for pid=15775 comm="syz.4.5185" path="/278/file0" dev="tmpfs" ino=1539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 317.768412][ T36] audit: type=1400 audit(3512955435.603:11072): avc: denied { create } for pid=15784 comm="syz.8.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.789739][ T36] audit: type=1400 audit(3512955435.603:11073): avc: denied { bind } for pid=15784 comm="syz.8.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.811303][ T36] audit: type=1400 audit(3512955435.603:11074): avc: denied { create } for pid=15784 comm="syz.8.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.832773][ T36] audit: type=1400 audit(3512955435.603:11075): avc: denied { bind } for pid=15784 comm="syz.8.5188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.079988][ T36] audit: type=1400 audit(3512955435.893:11076): avc: denied { execmem } for pid=15788 comm="syz.6.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 318.100972][ T36] audit: type=1400 audit(3512955435.912:11077): avc: denied { create } for pid=15788 comm="syz.6.5190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.260636][ T36] audit: type=1400 audit(3512955436.061:11078): avc: denied { mounton } for pid=15791 comm="syz.4.5191" path="/279/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 318.266262][T15792] 9pnet_fd: Insufficient options for proto=fd [ 318.346017][T15795] overlayfs: failed to clone upperpath [ 318.967592][T15843] overlay: Unknown parameter 'func' [ 319.231124][T15861] overlayfs: failed to clone upperpath [ 319.317879][T15865] fuse: Bad value for 'user_id' [ 319.342892][T15865] fuse: Bad value for 'user_id' [ 319.656534][T15895] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5226'. [ 320.331095][T15961] netlink: 'syz.6.5246': attribute type 15 has an invalid length. [ 320.339130][T15961] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5246'. [ 320.946004][T16003] overlayfs: failed to clone upperpath [ 321.206561][T16022] overlay: ./bus is not a directory [ 321.778538][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.786168][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.793370][T16052] bridge_slave_0: entered allmulticast mode [ 321.804614][T16052] bridge_slave_0: entered promiscuous mode [ 321.823981][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.838260][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.852970][T16052] bridge_slave_1: entered allmulticast mode [ 321.872809][T16052] bridge_slave_1: entered promiscuous mode [ 321.882297][T16058] 9pnet: Could not find request transport: f [ 322.040660][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.047949][T16052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.055407][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.062493][T16052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.110002][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.118373][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.138250][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.145465][ T8711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.171144][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.178498][ T8735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.193093][ T8711] bridge_slave_1: left allmulticast mode [ 322.200907][ T8711] bridge_slave_1: left promiscuous mode [ 322.208111][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.220002][ T8711] bridge_slave_0: left allmulticast mode [ 322.225927][ T8711] bridge_slave_0: left promiscuous mode [ 322.232194][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.367768][T16075] fuse: Bad value for 'user_id' [ 322.372808][T16075] fuse: Bad value for 'user_id' [ 322.400924][ T8711] veth1_macvtap: left promiscuous mode [ 322.406590][ T8711] veth0_vlan: left promiscuous mode [ 322.463283][T16080] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5283'. [ 322.492105][T16052] veth0_vlan: entered promiscuous mode [ 322.544735][T16052] veth1_macvtap: entered promiscuous mode [ 322.597315][T16082] tipc: Trying to set illegal importance in message [ 322.660322][T16084] rust_binder: Error while translating object. [ 322.660426][T16084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 322.667345][T16084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 322.804714][T16099] 9pnet_fd: Insufficient options for proto=fd [ 323.090244][ T36] kauditd_printk_skb: 686 callbacks suppressed [ 323.090263][ T36] audit: type=1400 audit(3512955440.577:11765): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.175625][ T36] audit: type=1400 audit(3512955440.662:11766): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.239423][ T353] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 323.247813][ T36] audit: type=1400 audit(3512955440.718:11767): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.274248][ T36] audit: type=1400 audit(3512955440.755:11768): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.299581][ T36] audit: type=1400 audit(3512955440.755:11769): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.346831][ T36] audit: type=1400 audit(3512955440.821:11770): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.431862][ T353] usb 7-1: Using ep0 maxpacket: 32 [ 323.437817][ T36] audit: type=1400 audit(3512955440.895:11771): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.463458][ T36] audit: type=1400 audit(3512955440.923:11772): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.488984][ T36] audit: type=1400 audit(3512955440.923:11773): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.515769][ T36] audit: type=1400 audit(3512955440.951:11774): avc: denied { ioctl } for pid=16114 comm="syz.6.5293" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 323.541279][ T353] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 323.570541][ T353] usb 7-1: config 0 has no interface number 0 [ 323.576950][ T353] usb 7-1: config 0 interface 196 has no altsetting 0 [ 323.586806][ T353] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 323.596100][ T353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.604129][ T353] usb 7-1: Product: syz [ 323.608298][ T353] usb 7-1: Manufacturer: syz [ 323.612889][ T353] usb 7-1: SerialNumber: syz [ 323.619487][ T353] usb 7-1: config 0 descriptor?? [ 323.968862][ T353] ipheth 7-1:0.196: Unable to find endpoints [ 323.988169][ T353] usb 7-1: USB disconnect, device number 7 [ 324.237407][T16135] tipc: Started in network mode [ 324.242439][T16135] tipc: Node identity 8f, cluster identity 6 [ 324.248705][T16135] tipc: Node number set to 143 [ 324.253702][T16135] tipc: Cannot configure node identity twice [ 324.396972][T16137] tmpfs: Unknown parameter 'no' [ 324.554246][T16146] netlink: 268 bytes leftover after parsing attributes in process `syz.6.5304'. [ 324.577701][T16146] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 368, limit: 4256, size: 18446744073709551588) [ 324.577740][T16146] rust_binder: Error while translating object. [ 324.595338][T16146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 324.601622][T16146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 324.780316][T16169] veth1: entered allmulticast mode [ 324.799020][T16169] veth1: left allmulticast mode [ 324.876859][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 324.886207][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 324.900645][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 324.910667][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 324.925829][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5312'. [ 325.095259][T16186] netlink: 'syz.9.5317': attribute type 27 has an invalid length. [ 325.126893][T16186] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5317'. [ 325.138658][T16186] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 325.175264][ T1547] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 325.194436][T16188] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 325.307308][T16197] sit0: entered promiscuous mode [ 325.313481][T16197] netlink: 'syz.9.5322': attribute type 1 has an invalid length. [ 325.322103][T16197] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5322'. [ 325.345123][ T1547] usb 7-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 325.363487][ T1547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.376847][ T1547] usb 7-1: config 0 descriptor?? [ 325.385406][ T1547] usb 7-1: selecting invalid altsetting 1 [ 325.414488][ T1547] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 325.490676][T16208] fuse: Bad value for 'fd' [ 325.507006][T16086] udevd[16086]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 325.685814][T16220] overlayfs: failed to clone upperpath [ 325.697911][ T10] usb 7-1: USB disconnect, device number 8 [ 325.841886][T16229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=16229 comm=syz.8.5333 [ 325.854957][T16229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=16229 comm=syz.8.5333 [ 325.869937][T16229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=16229 comm=syz.8.5333 [ 325.884138][T16229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=16229 comm=syz.8.5333 [ 326.267031][T16260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=16260 comm=syz.9.5341 [ 326.324470][T16268] netlink: 'syz.9.5343': attribute type 1 has an invalid length. [ 326.325817][T16265] incfs: mount failed -22 [ 326.339209][T16266] incfs: mount failed -22 [ 327.166842][T16298] netlink: 1363 bytes leftover after parsing attributes in process `syz.8.5354'. [ 327.261394][ T37] INFO: task syz.3.3039:9479 blocked for more than 122 seconds. [ 327.269135][ T37] Not tainted syzkaller #0 [ 327.274947][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.284048][ T37] task:syz.3.3039 state:D stack:0 pid:9479 tgid:9478 ppid:8056 flags:0x00004004 [ 327.294507][ T37] Call Trace: [ 327.297833][ T37] [ 327.300840][ T37] __schedule+0x1322/0x1df0 [ 327.305618][ T37] ? __sched_text_start+0x10/0x10 [ 327.311043][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 327.316714][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 327.322633][ T37] schedule+0xc6/0x240 [ 327.326840][ T37] super_lock+0x150/0x300 [ 327.331211][ T37] ? user_get_super+0x350/0x350 [ 327.336297][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 327.341813][ T37] ? __kasan_check_write+0x18/0x20 [ 327.347342][ T37] iterate_supers+0x8a/0x560 [ 327.352275][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 327.357619][ T37] ? security_quotactl+0x3b/0xf0 [ 327.362747][ T37] __se_sys_quotactl+0x308/0x7d0 [ 327.368232][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 327.373570][ T37] ? __kasan_check_write+0x18/0x20 [ 327.380579][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 327.387285][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 327.392747][ T37] x64_sys_call+0x2818/0x2ee0 [ 327.397743][ T37] do_syscall_64+0x58/0xf0 [ 327.402242][ T37] ? clear_bhb_loop+0x50/0xa0 [ 327.407095][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 327.413417][ T37] RIP: 0033:0x7f131c38ebe9 [ 327.418315][ T37] RSP: 002b:00007f131adf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 327.427352][ T37] RAX: ffffffffffffffda RBX: 00007f131c5b5fa0 RCX: 00007f131c38ebe9 [ 327.435530][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 327.443875][ T37] RBP: 00007f131c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.452321][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.460515][ T37] R13: 00007f131c5b6038 R14: 00007f131c5b5fa0 R15: 00007ffe7cedd6b8 [ 327.468616][ T37] [ 327.471653][ T37] INFO: task syz.3.3039:9486 blocked for more than 123 seconds. [ 327.479511][ T37] Not tainted syzkaller #0 [ 327.484549][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 327.493403][ T37] task:syz.3.3039 state:D stack:0 pid:9486 tgid:9478 ppid:8056 flags:0x00004004 [ 327.503619][ T37] Call Trace: [ 327.506992][ T37] [ 327.509954][ T37] __schedule+0x1322/0x1df0 [ 327.517590][ T37] ? __sched_text_start+0x10/0x10 [ 327.522744][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 327.530814][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 327.536741][ T37] schedule+0xc6/0x240 [ 327.541223][ T37] super_lock+0x150/0x300 [ 327.545579][ T37] ? user_get_super+0x350/0x350 [ 327.550586][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 327.556172][ T37] ? __kasan_check_write+0x18/0x20 [ 327.561415][ T37] iterate_supers+0x8a/0x560 [ 327.566425][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 327.571676][ T37] ? security_quotactl+0x3b/0xf0 [ 327.576626][ T37] __se_sys_quotactl+0x308/0x7d0 [ 327.581749][ T37] ? __fget_files+0x2c5/0x340 [ 327.587058][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 327.592411][ T37] ? __kasan_check_write+0x18/0x20 [ 327.597730][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 327.603183][ T37] ? __kasan_check_read+0x15/0x20 [ 327.608235][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 327.614800][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 327.619864][ T37] x64_sys_call+0x2818/0x2ee0 [ 327.624660][ T37] do_syscall_64+0x58/0xf0 [ 327.629249][ T37] ? clear_bhb_loop+0x50/0xa0 [ 327.633936][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 327.640383][ T37] RIP: 0033:0x7f131c38ebe9 [ 327.644805][ T37] RSP: 002b:00007f131add6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 327.653405][ T37] RAX: ffffffffffffffda RBX: 00007f131c5b6090 RCX: 00007f131c38ebe9 [ 327.661609][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 327.669630][ T37] RBP: 00007f131c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 327.677831][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.685873][ T37] R13: 00007f131c5b6128 R14: 00007f131c5b6090 R15: 00007ffe7cedd6b8 [ 327.694240][ T37] [ 327.698011][ T37] NMI backtrace for cpu 0 [ 327.698027][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 327.698051][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.698062][ T37] Call Trace: [ 327.698068][ T37] [ 327.698075][ T37] __dump_stack+0x21/0x30 [ 327.698106][ T37] dump_stack_lvl+0x10c/0x190 [ 327.698127][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 327.698148][ T37] dump_stack+0x19/0x20 [ 327.698169][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 327.698195][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 327.698220][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 327.698243][ T37] ? sched_show_task+0x379/0x560 [ 327.698264][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 327.698283][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.698305][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 327.698324][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 327.698346][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 327.698366][ T37] watchdog+0xd8f/0xed0 [ 327.698388][ T37] ? __cfi_watchdog+0x10/0x10 [ 327.698408][ T37] ? __kasan_check_read+0x15/0x20 [ 327.698432][ T37] ? __kthread_parkme+0x138/0x180 [ 327.698449][ T37] ? schedule+0xc6/0x240 [ 327.698476][ T37] kthread+0x2c7/0x370 [ 327.698503][ T37] ? __cfi_watchdog+0x10/0x10 [ 327.698528][ T37] ? __cfi_kthread+0x10/0x10 [ 327.698547][ T37] ret_from_fork+0x67/0xa0 [ 327.698573][ T37] ? __cfi_kthread+0x10/0x10 [ 327.698592][ T37] ret_from_fork_asm+0x1a/0x30 [ 327.698622][ T37] [ 327.698630][ T37] Sending NMI from CPU 0 to CPUs 1: [ 327.863110][ C1] NMI backtrace for cpu 1 [ 327.863130][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 a8cf528afde17777b8d0df17d514b1350887467d [ 327.863153][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.863164][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 327.863191][ C1] Code: cc cc cc b8 78 9c e4 ee 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 61 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 327.863206][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c6 [ 327.863222][ C1] RAX: ffff8881f6f00000 RBX: ffff888103668000 RCX: ffffffff858bf09e [ 327.863235][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000564de4 [ 327.863246][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 327.863258][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cd000 [ 327.863270][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cae6e8 [ 327.863281][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 327.863294][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.863306][ C1] CR2: 00007f2178f84198 CR3: 00000001086ea000 CR4: 00000000003526b0 [ 327.863320][ C1] Call Trace: [ 327.863327][ C1] [ 327.863335][ C1] default_idle+0x17/0x30 [ 327.863354][ C1] arch_cpu_idle+0xd/0x20 [ 327.863371][ C1] default_idle_call+0x3f/0x80 [ 327.863387][ C1] do_idle+0x1a0/0x470 [ 327.863404][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 327.863422][ C1] cpu_startup_entry+0x48/0x70 [ 327.863437][ C1] start_secondary+0x12e/0x140 [ 327.863457][ C1] common_startup_64+0x13b/0x157 [ 327.863480][ C1] [ 330.687577][ T8736] bridge_slave_1: left allmulticast mode [ 330.693445][ T8736] bridge_slave_1: left promiscuous mode [ 330.700177][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.708441][ T8736] bridge_slave_0: left allmulticast mode [ 330.714243][ T8736] bridge_slave_0: left promiscuous mode [ 330.720274][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.834517][ T8736] tipc: Disabling bearer [ 330.839950][ T8736] tipc: Left network mode [ 330.845798][ T8736] veth1_macvtap: left promiscuous mode [ 330.851486][ T8736] veth0_vlan: left promiscuous mode