last executing test programs: 13m42.103489649s ago: executing program 2 (id=437): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/225, 0xe1}], 0x1, &(0x7f0000000200)=""/41, 0x29}, 0x40000021) write$uinput_user_dev(r1, &(0x7f0000000280)={'syz1\x00', {0x9c, 0xc2e8, 0x4, 0xf918}, 0x14, [0x62, 0x0, 0x81, 0xe, 0x7fff, 0x8fd, 0x28ac, 0x9974, 0x3a, 0xff, 0x0, 0x4, 0x4, 0x3ff, 0xb, 0x7, 0x10001, 0x6, 0x7, 0x3, 0x21a08f0f, 0xa559, 0x3, 0x9, 0xff, 0x1e, 0x3, 0x66, 0x8, 0xffffffff, 0x9, 0x4, 0x9, 0xe, 0x8000, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x80000001, 0x5, 0x5, 0x8, 0x0, 0x65, 0x9, 0x3, 0xfff, 0x9, 0x9026, 0x1, 0x8000, 0x7, 0x1ff, 0x6, 0x721, 0x1b, 0x5, 0x6349, 0x67, 0x8, 0x1, 0x1], [0xea, 0x1, 0xe0f8, 0xfff, 0x5, 0x7, 0x4, 0x7, 0x0, 0x7, 0x40, 0x1, 0x2, 0x7, 0x8, 0x6, 0x4, 0x10000, 0x6, 0x9, 0x5, 0x80, 0x0, 0x200, 0x2400, 0x9, 0x4, 0x3, 0x0, 0x6, 0xff, 0x2, 0x1, 0x4, 0x7fffffff, 0x8, 0x7fffffff, 0x5, 0x7, 0xd, 0x4, 0x3bac, 0x20dc, 0x0, 0x1, 0xf, 0xc, 0x10001, 0x100, 0xffffffff, 0x242, 0x6, 0x2, 0x6, 0x38e, 0xf62, 0x2, 0x3d31, 0x5, 0x9, 0x2, 0x1, 0x10001, 0x1ff], [0x7e, 0x7, 0x4, 0x9, 0x0, 0x7, 0x1000, 0x4, 0x400, 0x8, 0xf, 0x245e, 0xc331, 0x3, 0x7, 0xb33, 0x3, 0x65f62002, 0x401, 0x6, 0x4, 0x4, 0xf1e, 0x6, 0x3, 0xffffff37, 0xe5200000, 0x0, 0x3, 0xfffffff8, 0x3, 0x2, 0x0, 0xffffff80, 0xfffffffe, 0x2, 0xffff, 0x7, 0xa6, 0x7, 0x80000000, 0x0, 0x96f, 0x6, 0x4, 0x1, 0x9, 0x40411c61, 0x6, 0x7f, 0x7, 0x2, 0x4, 0x9, 0xf, 0x10, 0x5, 0x9, 0x600, 0xfffffffa, 0x4, 0x3, 0x3, 0x6], [0x5, 0x2, 0x9, 0x400, 0x5, 0xf, 0x1, 0x8, 0x80000000, 0x10001, 0x4e, 0x0, 0x2, 0x0, 0x80, 0x2, 0x6b, 0x800, 0x9, 0x0, 0x5, 0x6, 0x6, 0x6, 0x5, 0x9, 0x5, 0x7d0, 0xf8, 0x1, 0x0, 0x3, 0x800, 0x7, 0x5, 0x7ff, 0x4, 0x10, 0x0, 0x2, 0x7fffffff, 0xb, 0x6, 0x8da, 0x0, 0x5, 0x91baf3b, 0x99bb, 0x5, 0x9, 0xffffffff, 0x5, 0x6, 0x101, 0x8, 0x1, 0x53, 0x9, 0x5, 0x1ff, 0x4e, 0x7, 0x80, 0x4]}, 0x45c) write(r0, &(0x7f0000000700)="3bff3c571043c484766b47dcac260c2708e36b37fb79f28dd0292eb2b6c43bcdd14111b50e6d7b5d9453b5f0b951e936093a0f32901c34ea1981b44aa74e8762107e6dd47c0613eea9e49a87b00106a6c536f18b37b368980cc1f892cda9118b917f6dac3062c0145d1fb52426b5746a9a084e8a7ca7b6f964de98498384180be549572371fb7950c7a14a331ee1990363a87d009337bc46a272a5dc93e5ba80f75989f0bc119afbc3250c6285227348ac691949590318e157a6af23aed37fd3aa8550bf458a4a70457b350f7571b505eaeaea98e3c9f7f3aba7745f5a87d66d9ef7c706f1403ea7c39d72b78b5d02ff3bf871d45a8b91cb01fcf41686f9c08960539135e9638a7a71983df4d9169921c72b161dd0dcad8277778cdfcfe4285fd9d617793a39d1cd2966fe1a0c8390ebff21eaf0fcbb2b1b5c7fe80d7e108eb91a266e9c7a0a9ef52b803d644b3a903323061b4bcc3f44fa85a77134e9ee7b831e8ca396cf7ba41be1902427ac31f9d2429998a987e2c1e223962bb10db196e37d75c0f3329602174f98e3895bbee6fb6c352d2d6f913e8f07639e6519447e4aff3baea592aea80879677dfb6478625927b4044f3656f3ff104eae7933a5419ba5d57db69ab4fa114944738b133f26c07d7b3c8133991017a9e11de2def21f306e8767c153bef63759ecbad58522760511151d851658a5c8a1881b86927f3d8edd6717d90d8ad6ca1818908d05d1ae375d15342c4341c707ef302075ba72c046e719d73a99cb97fa1992c43fb8e77aed553e7bc1455465624f69bcee1680b20ffff3a7615f0009778c8a2df235b931fc9b39246daeabbcf5086ce9c783e1b2cc325f5e2c8e90c3ba65cd831e5bf515846689c39e0fc10875450f42dbece8ffcb14534fa71603405536d886e402f6e79f1e8da7511067801b9804e38ad7e321f679da0aa934837fe873a2ea4f671feb4380f0c7e658fa46b5c972f94ba47604f3d9946135b2f76a501ec672d52fa810dba3f360f95d51ad5eefe18df60f2c4b0c09d59ead7dadead7b9f4153cc478f683d8eb88faf8100598aaffc84eba40a26d5f9a06da96b15368edadeaa0a806c7e9f7f7b171dd256b2e70c83c3e6185a459bcadd57ab68db10d83253f96e77078ab30d1b2ba0391be42a18df21fc68e5518e51c456c0283fc29ffc220484b197fee0771c702ecf0cc0b7480a1b4ecf642924f2d6f0dd039252d8d4560c3de1d027af7497c2e083c123b32f2ad53038355ef5a7e03fed7e18f31db43294e5e7cd4feecfe444c63411f9dd41ee605f591b002c58c2a215cae5dab9cd5692fc5671644fd9526d6e8787e058fe5d6d43de2a309d024879661fd162745ed9aa67c9e48468d723ee91873d98ee649778086c58b8e5164e7928f5f68fdf7d36ae8b5f527b84137020e3fbb3cf23a58592e8042c3f5be87911aa8a1197fff27fa2dc61d9ac92263ea3d308ab063b79c271d46e9a16cbf75ad4b26d736b572e453507e874522d4f92f0813c7a55befa0081e8806a0e73298920679fac8182e5c6378413c94662e03a25bc4a74c9db11b48b3c788a75d561f4bd48cc3bae423040da6859b2da0a78459b24e9840155eaebb1b359f63e994ce8316fa9f362bcdf731653b7d70aa2dd64049533d43de9a97313fcf118cd3f1945fa34c6cb8ab2802111cbe268d4c3ceafad8cc18a46518869ded10783349a45bc2b566ac33e4d2130331ca5367099394c297576a725b3788c8868e7b695c99dc1954ec58c910676d2e79776e64a91bf8b6f8fa107b0001da5e42ccd6eba1934ce03692bea3b09425a7c14e6b8644e6866dea15ef57e2f1f9739ea3ca10735e83989d349bdacf292a7256c657c545601f6e0b9dd3362697ffda637cc9934ff773a7acb5fe9e5e4f04dccc967e8978d2ba928b167e937217f7ab1db8e3aaf30134de390d180f3a4b9cbcf1b98e729f55079128f9f8f12bad60426f2b2af4ea4d7dff104000a6c43a9d44a28bae4a94bb468887a7b8e2d8b9c016f8f3919556c7734342cd4f6643a1bbdf7d594fff9445b9964c9418782c2bc9b7fd1201b8dd79abf8ca11f24631ab78497b0a13f22a92218acaf179e765d67f6706b41f42c28897929a78e79b4e9e60d727036279555bdd287c960bf69e2e4d72230a27712a36461a12a657bc17d66b0a23a9e31be937b923c9af10c433956afae5a3f17557686d1ccee72b179dd08b9fef3dec119ee59c6cb0100e29c119a1aaf81c51e516aa48b2fe6b05d02dfa02e89058a381d586f981e668f2f0d9b6a9335d0f597448ff64d53b2d2ffd929a1125713a53adcc56eb720fc3be7cc6d672b903da5bfb31140352b70030ad640f01b1c0f6714cc9e47d8513d7e55c956443bbcca92b957c2c4e4c018170d011351c38583588f8c35a6acf08e919ec175fea6ea60500ac55b3908d220f4ffd9b3039703d9940a16061d25e47635208a4e066947f1a6efd86f91637846a28a4b55d08e5a38325ca7098c8e0e5d7bcc636e5d0a0a6388f356beaba8174e94fb71ea1406a31499873ad15311ee62b4abcd49d73581a9bdd2cbf44f96e8975e2f49647999bc4380bfb08eb2a0474385a874e2599122d6aa748ab7bfff15909da1e902f471a226781fb010e6140ac0fe606d2085844b46644451422673014a50ca384ff5e6a81c8969d5bcf6d4eea2b8412ef8c0eb0c83c4bc60b4fef88a6ab9e8da6f048c9805aa0a15c51830ef08b36574563ea642d8a89c0433c8b293b117644ab9a4110514b33a46837bfda638014e3e708e03af13ce07bf9f838a3dc20f95338b31bdb283578a0025c45b8871b017aaafc73a89b678e2beedd61e39f470a16434124091f2d6402b8cd819ddf3d4c005e757301d834197b92e3db0aad353d0067f1c54dfaf638237a248006158d617be3e8583d7d320276ed590dfb30d9717c684de7ef622e8e08bfe1cfc360035d48cb16afa050e47bcd83a07dc57d5bd4a826affcc0158fe4fca388a37b876500784ddea26a254ad8ab32472874e603cbfddd3d137cee98822d7cce4530df24693f39eef9440e733eee05c9eb3b36164221e27b2bfdedb44ee9aca8bca099b4d55fa6479b41e6d13fb64ca4038279f65c6451474c7abdd10c5f473dbe71912e014ffb55cd9e20abc07ca4cc0cfb08937ea77ef92d527444e9acd2e46a47669a9cc02aaa6d1eb68431a9b505affcb8b7c86589abad339f0db4570f6c6374ba85a39f7b86fdf1b34bc2e12f0719831f500d5e357badcc37612ddcd6fdb2e3f4c622555f51606c53fba28dd70bb2a316648afdac1d5896d7bdd362d8c0b7545f82e1155ccfe16609d02b1401d519542e88a812a6d3fb522375afeb654c80639c3a210a8ef650a3f8a4c550e75e0a1864d61c1f1a8d49d3b4bebe86c163650f9f31c0a09b50952d17ccc44272753ccfa6c2180087d28abe7c196f46d930ce6074919d91477b8e586894fdf964ab9a16aa73d3668eed62bea967cd40c5ade4af915ffd2e6da98b01e101162181ae6dd2169dd1854f5ac04f67b6481c4b111bf7268ca56d338ca9f68ec00bf5fcc26d11f2042843b17274ed7856258efa3913a088ee0e0dc97310dbbe29cef8949a959f8530c94f39bd964f3de7ef2b19eee17d033433f56616b59e0817dc26d50ea08e04ee1a5a097a2d89a2cb9ba5ea1cc339be17df35f920c6f4fd65e9c24039a3579c6999245781d801936ed3e3e28373f9917b89068819d5d4873df141cf41572e99da3a89fc54444a9930c84074676420a5c652000772cbc606b734abdfce5f95e910ae29ed823ff85ba6d4842342399cd2030be4163672daa2f8e6f2e657f54bbc4939c341433ba3e84d91a1820827217baaec21443058870881130087ee21cbb35d5dda6c80257a99632f93efc6de4df77fdd0a74499ecec2a5a54ee5374d510d69ae87e95f8997abdca9b89db86206c6c764ce8a4db45abfb80d7132febb8d96e4535f5515eecdadca881536530b27cd8780c5a4075cb6fafd6393f726eae91081dbb1ee94682ae3f1c3ae0b3f560729a1ae44047699e30dd47551aa9a197bf1877c68e0a7546502b2bdf82fa4ad5edc400915ab55728c4d565002ebfc0792499fd9bf8235e60c35b41ac73e81244bf5bb2f99db5dc097453cbe9f4b270b7a842fc3ff1d6009a283da1a0c6b9622bf18cb260bf8cfe849c987bbd6593c9768257a16b1b71289964f51e44c3f67bb9186de54c8ba91e73448ae9d79ff8c208cf898c906ae8e040d46c607d464edfec0fd74fdf92a02ae3d465ea5a2092c958410108064ddfe071be731ec7e7eb497c1e2aafbf60377b7f22ca9d60e6438cf0c7a992df2bcec0b5dc18df8d21f17ae4ded9313c009e117cfcfc4eb09c3a32622c59f0cd01f6456c46d4319afa5121d1076b6ef0f3e988bf7eaeee7bf707850490b51e460b77964123a3262708abe3aa16aff9546dcf083128ed0aa5293c443338ea58f43d241a4af743d826af1cc790bc77c9540d538d4ee2412dbefd6df10283a0f15381408e66363e1e1a8bc0f60c9926465bd1fe35506086d9d5a460fedbf28b1ef7e8cd1d17cb89d6b9d5acd3629e3ae819ecb8de610d34093b38d9695546cc067501dfedc806510ee12e064acc6524b99d1797a540ac47a71e7a2c483e7d1ab9dea7b6afb0ae31be2c9e542c867881cf4969b50d8a913ce24d3d67300540b1c6e3c3a3e1aa03fbe4a58178b594ab767ba7223157413dfd48e80c140e261aa4a6d7f402e5bb032fe57dad0a2f11ea1a2a98119bd33196a1291ffe6f2642a7a253ed96ec73036d494a68578d37f161070206ead6cd324ca47a4946e454bd086bd5fea5ccabe30dc16e6e0a69eec11ba0f6a344a2ef79eadd8d17990dbb68a8da32e84d53d62b8e0e7c0e62e2ce63ac9e9541aafaeecf337d8328c43d58a51510fcc4664734957b9c565ccfff46dcaff32c69ad3fe5d1ed3099f5699615f7fc9bc6e03d4b19a1bc5ee08d235b2e28a109b5a42adde9521bd23b03a39ecdf31f6154bb631821cd8e4de87dd7dc5839bb2f8b695ba64b4c4919ef23b067daaeee29fcdaca824e628fbf71a633a910586325fe528ce2173634edc374ae4381752e3806e69002822bad9e7a8f26dbf01e0d5a7439882ee6ca20ed8a160066527022e2107877f20d81b4a56910fb37eb447d5761b415026ba5cdfaaa30abd48e0fab03e63dd5bb8c995b1c21ac3ac1c923863997e69cb73998df4c720aa84ccc0b1b0c7df8999a1f364e2c787768cadec2c417cb26c1d60344da6c7a7315f7f75f28cae490b9414c026269949bc4a7d77f551e655a936e886d7286418f8904227fc6f8f7598dc77aed15b55739122136c26fb5efd433ba9a0be2da0dddeb145db1c9a26d46e4b9441f9039ecc6c499ab571955bd36b9a878925458239ceed6b84ac4ca27642668be16d61fc3c4c083ca68e9d633d99398f34ba698eaaa8facfe6714699b00227aaa2d8743dee18af91fe6a9d7c52e8e35532e7354bce4bb6f0a6d28b7392bf037df850bef0a187a3cfcdb01e22b8a2d758caebe96f296783b3d2bf6343b355806bc7f91b2a02ba96169297616bb186f2d0cba9694042db048f7e3d83d119bf982724cc8b4ba1f04c76eb62545a48f947cdba5d7773c76e68f1d767517f5521344d9708e14d4c2005df968662ac1df67767388a6ecb2eb702964efdb3b1d1b274f51862ee0e45be977d54e10bdac3c0c7d3165ca92ccf036cd89efaca29e2d2819e6180a6ee870c0a9880a505ee41841c388779d1352a0f41", 0x1000) r3 = syz_clone(0x2b001000, &(0x7f0000001700)="ae68bb6f4b0b67124bd4abfaa87161e05adc5af60da0dc5ee0bdcc5ffb247828048ec3f580e933846a002d17c6bd294c11398b59cb42084d24b8418aeeb02ca7044ebdaf4fecce61c7bd81c6e304d363f98839051e486c8176f3ce16d55275e6f2ae697618d0d5b2ae158aa5911232b09b056f54e4c76a9bad04ca33a52daca856747819845be1c81a1fe805b308837aed1c38addd6cc0a648eeaa77b385580968e5da46c5c58a78af41fcea4d898edbd495ceb196311b9d250e820c290eb8ca8b582e04a9eb645d61ba38f82331a25cb15805df777c", 0xd6, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="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") prlimit64(r3, 0x0, &(0x7f0000001980)={0x4, 0x7fffffffffffffff}, &(0x7f00000019c0)) sched_setscheduler(r3, 0x1, &(0x7f0000001a00)=0xd) openat$kvm(0xffffffffffffff9c, &(0x7f0000001a40), 0x80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x38, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20006850}, 0x8c4) process_vm_writev(r3, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/152, 0x98}, {&(0x7f0000001c40)=""/238, 0xee}, {&(0x7f0000001d40)=""/53, 0x35}, {&(0x7f0000001d80)=""/126, 0x7e}], 0x4, &(0x7f0000003fc0)=[{&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/170, 0xaa}, {&(0x7f0000003f00)=""/49, 0x31}, {&(0x7f0000003f40)=""/80, 0x50}], 0x5, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000004100)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000040c0)={&(0x7f0000004080)={0x10, 0x3fb, 0x1, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x10) recvmsg$can_bcm(r0, &(0x7f0000004400)={&(0x7f0000004140)=@ax25={{}, [@bcast, @bcast, @bcast, @null, @netrom, @rose, @rose, @null]}, 0x80, &(0x7f0000004300)=[{&(0x7f00000041c0)=""/65, 0x41}, {&(0x7f0000004240)=""/174, 0xae}], 0x2, &(0x7f0000004340)=""/160, 0xa0}, 0x1) fcntl$setown(r2, 0x8, r3) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000004600)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000045c0)={&(0x7f00000044c0)={0xd0, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crash_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:crontab_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x40804) ptrace$getregset(0x4204, r3, 0x200, &(0x7f00000046c0)={&(0x7f0000004640)=""/121, 0x79}) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000004700)) splice(r1, &(0x7f0000004740)=0x1, r1, &(0x7f0000004780)=0x4, 0x1, 0x6) ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) recvmmsg$unix(r2, &(0x7f0000006200)=[{{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004840)=""/192, 0xc0}, {&(0x7f0000004900)=""/158, 0x9e}, {&(0x7f00000049c0)=""/69, 0x45}, {&(0x7f0000004a40)=""/135, 0x87}], 0x4, &(0x7f0000004b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000005f80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/196, 0xc4}, {&(0x7f0000005cc0)=""/51, 0x33}, {&(0x7f0000005d00)=""/145, 0x91}, {&(0x7f0000005dc0)=""/70, 0x46}, {&(0x7f0000005e40)=""/90, 0x5a}, {&(0x7f0000005ec0)=""/131, 0x83}], 0x7, &(0x7f0000006000)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000006080)=@abs, 0x6e, &(0x7f0000006140)=[{&(0x7f0000006100)=""/64, 0x40}], 0x1, &(0x7f0000006180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x3, 0x20, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) write$FUSE_IOCTL(r8, &(0x7f00000062c0)={0x20, 0x0, 0x0, {0x1, 0x4, 0x10001}}, 0x20) readv(r6, &(0x7f0000007540)=[{&(0x7f0000006300)=""/164, 0xa4}, {&(0x7f00000063c0)=""/239, 0xef}, {&(0x7f00000064c0)=""/4096, 0x1000}, {&(0x7f00000074c0)=""/83, 0x53}], 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000007580), r9) openat$binderfs(0xffffffffffffff9c, &(0x7f00000075c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) timerfd_gettime(r7, &(0x7f0000007600)) openat(r1, &(0x7f0000007640)='./file0\x00', 0x101440, 0x2) 13m42.102963959s ago: executing program 2 (id=438): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0xc2a) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r2) (async) close(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000005280)) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x30}}}}], 0x20000}}], 0x1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 13m42.001159069s ago: executing program 2 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005a00010d000009000000000004000080080004"], 0x1c}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000080)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) splice(r0, &(0x7f00000001c0)=0xffffffffffffffff, r0, &(0x7f0000000280)=0xffffffffffffff80, 0x5, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000180)=r4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000140)={r4, 0x9}) 13m41.201235568s ago: executing program 2 (id=457): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x2a) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)="9fd49c72cdfcdd0058e4905dbc8395d693a7b22419", 0x15}, {&(0x7f0000000240)="ecda8fb871a9a60db4fc852ff5410a85e4ab23f58da765e11f633bcfb06aec566135472b6d3b35cb3975e0a6ccea86297d061203012907d94e426aeb1c8b765e8d61d44287", 0x45}, {&(0x7f0000000440)="dc79426305908a6e7d1dfae16dda45893b311392d3e28163a641ce08569caf25f505c23f15e06fe3996135224a27b3c70cc569fba7227813ccc9b277c118ee55ab9d729903", 0x45}, {&(0x7f0000000580)="fd8fa48e7afbd5f66abaf4ecc030d783d12ebb100c69f2bb7d6ce2be381cbb8467649c8da719f34f201e5dec7305e95fc4ad2b7235ca26b32c3823c286f9c01231441525cdcc532e11a057ceaea5ac33f0c597ec9b78841129f0d3ceab", 0xf}, {&(0x7f0000000300)="ceae64652dbcfafeb54475d62c478fafa12c8f2068571db4caa76924d7a5597e2f1bd7339c9f0c9ba6a2597cfe", 0x2d}], 0x5, &(0x7f0000000b40)=ANY=[], 0x80}}], 0x2, 0xc8040) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x5) prctl$PR_SET_TSC(0x1a, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r7, 0x0, 0x6, &(0x7f0000000080)="441f0803", 0xfffffd3a) sendmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x10}}], 0x1, 0xc040) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13m41.196021328s ago: executing program 2 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setrlimit(0x9, &(0x7f0000000440)={0xb, 0x8}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x200000, 0x40, 0x30}, 0x18) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x654840, 0x82) move_mount(r5, &(0x7f0000000300)='./file0\x00', r6, &(0x7f00000003c0)='./file1\x00', 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f00000063c0)=""/1024, 0x400) syz_fuse_handle_req(r2, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x10}, 0x0, 0x0, 0x0, 0x0}) statx(r7, &(0x7f0000000500)='./file0\x00', 0x0, 0x200, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x3, {0x3, 0x1, 0x100, 0x9, 0x80000000, 0x0, {0x0, 0x72, 0x7, 0x4, 0x0, 0x3f93991000000000, 0x401, 0xe, 0xb2, 0x6000, 0x4, r4, r8, 0x800, 0x401}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r1}}, {@gid={'gid', 0x3d, r8}}, {@gid}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'lowerdir'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'binder\x00'}}]}) r9 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 13m41.091439938s ago: executing program 2 (id=459): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [{@pcr={'pcr', 0x3d, 0x5}}], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) r8 = getuid() mount$fuse(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x2040080, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_eq={'uid', 0x3d, r7}}, {@uid_lt={'uid<', r8}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}]}}) 13m25.948837344s ago: executing program 32 (id=459): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1504000065ffff75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee00}}], [{@pcr={'pcr', 0x3d, 0x5}}], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r3, 0x0, 0xffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r7, r7, 0x0) r8 = getuid() mount$fuse(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x2040080, &(0x7f0000000500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_eq={'uid', 0x3d, r7}}, {@uid_lt={'uid<', r8}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}, {@hash}, {@subj_role={'subj_role', 0x3d, 'mountinfo\x00'}}]}}) 13m10.50952633s ago: executing program 4 (id=1047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) getegid() madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314}, @decrefs], 0x0, 0x0, 0x0}) 13m10.509372819s ago: executing program 4 (id=1048): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) request_key(&(0x7f0000000100)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfe, {0x28, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 13m10.509091959s ago: executing program 4 (id=1049): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) setns(0xffffffffffffffff, 0x8000000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xbd) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_io_uring_setup(0x7c30, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x18, r5, 0x1, 0x81}, 0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) 13m10.457647764s ago: executing program 4 (id=1050): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000004c0), 0x8, 0x4000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000640)={r0, 0xd54f, {0x0, 0x0, 0x0, 0x1, 0x7f, 0x0, 0x1, 0x1c, 0x10, "479819c9e84944d9ef87eeec7c2380480cd473dcdb4cf693e3f061a96e189920549ba2365a16ebc8105b367149694f53ad70c80044ebe221d85c297398fe5e77", "369198d51e594843b3704dad71ffa203fc9c778a70f437a9581253e7e38d3eae5ba7dd11b7f21156027f5ba57ff905324c1e14d9f12faaf167f6cffe3d27cffb", "a57c1c984fc6e974865f7c2c3eec7964150c0ec4decd118f6f340389629b5bee", [0x8, 0x5]}}) (async) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) (async, rerun: 32) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25190000000c00018008c1a9000100000064000180080003000300000008000100", @ANYRES32, @ANYBLOB="08000300000000001400020076"], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x240008d4) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) (async) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@pppol2tp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000780)=""/246, 0xf6}], 0x3, &(0x7f00000001c0)=""/32, 0x20}, 0x41) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) fcntl$getown(r0, 0x9) (async) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2102c0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f00000004c0)=0xffffffff80000002, 0x12) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="01dda865694e08605b702200000018000180140002006970365f7674693000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) ioctl$ASHMEM_SET_NAME(r2, 0x40087707, &(0x7f0000001d80)='\x00\x00`/\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') 13m10.430005497s ago: executing program 4 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 13m10.349248175s ago: executing program 4 (id=1052): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x68, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6e}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="44d738a0eb15fc3ab53fff1f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48880}, 0x24004000) syz_open_dev$loop(&(0x7f0000000400), 0xfff, 0x155102) syz_open_dev$rtc(&(0x7f0000000440), 0x7, 0x94000) (async) syz_open_dev$rtc(&(0x7f0000000440), 0x7, 0x94000) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) syz_usb_connect(0x0, 0x38, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) (async) r6 = syz_usb_connect(0x0, 0x38, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$netlink(r4, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r7, 0x29, 0x1e, 0x0, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 12m54.20029584s ago: executing program 33 (id=1052): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x15) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x68, r3, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x6e}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="44d738a0eb15fc3ab53fff1f"}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x48880}, 0x24004000) syz_open_dev$loop(&(0x7f0000000400), 0xfff, 0x155102) syz_open_dev$rtc(&(0x7f0000000440), 0x7, 0x94000) (async) syz_open_dev$rtc(&(0x7f0000000440), 0x7, 0x94000) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) syz_usb_connect(0x0, 0x38, &(0x7f0000000980)=ANY=[@ANYBLOB="12010002c268064024040595de4e01020301020030080904fd0502d011980709050e0310000c0902020c0905015478a704100035fe07136f32c8870f01f8f80f424dbee80b5ad6775947149485b8c52140a56131f73aa05c29b410a2aba4a62f01901199f1d39a33230b7f7e2fc1fdb1ce0f26e2a5784325f34f7dadff04942ede1eef066db599a08905707445eaefddca842d1f18e306196ec5adfc432128302acbc8b121e919a667a08817f30536ad8a1a4616c241fbf9e1f09f890cae351db935d7e7e7b1e27a6b83afd5334977987b50046ebbef56572b94c156b7c27498cb3e269b4fb02a221adbaebf4df018b593eef29d4fcabf8b9ca195759d355ba1b5200d96dbe1e12182cc607ae0eb46d368cf4db980a23fd040ed10ba4f109fd5301fb016e798822508c0e138b2330eefc67b1623a4020a807451fa0b4e644c6d73be8f40205afe26b3d86aba67a7f030f1cd5f7debba6af9d5a99d336276135f58c41281f2e3dfe55f831d9f4d0d7fe2b14846348e4fc832303e6a4536bd44"], 0x0) (async) r6 = syz_usb_connect(0x0, 0x38, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$netlink(r4, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r7, 0x29, 0x1e, 0x0, &(0x7f0000000200)) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r8 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 10m48.206975025s ago: executing program 5 (id=3765): r0 = socket(0x2, 0x1, 0xfffffffd) listen(r0, 0x0) accept$inet6(r0, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a3, 0x4}) sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) shutdown(r0, 0x1) r3 = syz_usb_connect$uac1(0x5, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r3, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x40, 0xd, 0x1e, "33965eb268bb32e48cfe3c1683b8902efca5b0da7bf5c10556c96d424594"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1}, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x4, 0x1}}, 0x0, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x1}, 0x0, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x9}, 0x0, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "f0fa"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x18}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0xf7}, 0x0}) r4 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b9"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = accept4(r0, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x80, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'ip_vti0\x00', @ifru_settings={0x3, 0x2, @te1=&(0x7f0000000200)={0xfffffffe, 0x9, 0x6, 0x4}}}}) bind$vsock_stream(r6, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r6, 0x7ff) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r5, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000400)={0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000d00)=ANY=[@ANYBLOB="401722000000f1e9c553d2dc0aa05c511c2d8603e921283d7eeccabb8ecf43b5e5d4f5714d14091060bd184d048648b37d4030db2decf5b53a1f1b116688669fca8f6c8395f6ac49a3693bfd8ef49d8d09228214078811230a0000000000000010634ff49d0db6ec120010c1281fb8468c216615000068f245c67f1de1b2f6055194af780601138a19243789eb2cc365915206476b4bb2653fc68854"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x55}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x80, 0x4, 0x1000, 0x5, 0xc6, 0x8, 0x3, 0x1000, 0x401, 0x1, 0x0, 0x3}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f0000000700)={0x20, 0x87, 0x2, 0x7}, &(0x7f0000000780)={0x20, 0x89, 0x2, 0x1}}) 10m47.65134969s ago: executing program 5 (id=3773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x2}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2c726f6f74636f6e746578741d"]) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x18, 0x16, 0xa01, 0x0, 0x0, {0x10}, [@generic='\x00']}, 0x18}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x58, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0xfffffffffffffc60, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "5e3e946ecd9e36bdd04510fdccce8b34"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001440)={0x0, 0x40, 0x0, [0xd, 0x6a2b, 0x9c0, 0x6, 0x8000000000000001], [0xfffffffffffffc84, 0x1000, 0x0, 0x1, 0x7f, 0x3, 0x9, 0x8, 0x200, 0x7, 0x2, 0x7, 0x200, 0x9, 0x8001, 0x5, 0x1, 0x9, 0x4, 0x0, 0x4, 0x2, 0x1, 0x2, 0x1, 0x2, 0x3, 0xa, 0x7ff, 0x0, 0xfffffffffffffffd, 0x2, 0xa, 0x0, 0x6, 0xd, 0x8, 0x3, 0x2, 0x5, 0x6, 0xc, 0x3, 0x7, 0x100000001, 0x4, 0x6, 0x3, 0x9, 0x8001, 0x0, 0x2, 0x4, 0x2ca8, 0x200, 0xc, 0x8, 0x4, 0xb07, 0x4, 0x5, 0x1, 0x9, 0x6, 0x1, 0x1, 0x3, 0x2, 0x7, 0x8001, 0x2, 0x1, 0x3, 0x5, 0xbf5, 0x8967, 0x80, 0x7, 0x759, 0xfffffffffffffff7, 0x2, 0x1, 0x9, 0x8, 0x8, 0xc55, 0x7, 0x3, 0x4, 0x7fff, 0xf, 0x3, 0x3ff, 0x0, 0x2, 0x6, 0x200, 0x3, 0x6, 0x7dcf, 0x8, 0x100000001, 0x8, 0x9, 0x2, 0x3, 0x7, 0xfb, 0x3, 0x6, 0xc, 0x3, 0x1, 0x4, 0x7, 0xa3, 0x100, 0x1000000000, 0x0, 0x0, 0x6]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001880)={0x6, 0x3, {0x8000000000000001, @usage=0x1, 0x0, 0x8, 0xfffffffffffffff6, 0xf, 0xa, 0xfffffffffffff9c6, 0x0, @struct={0x486643b0, 0x5220}, 0x7, 0x4, [0x0, 0x101, 0x8, 0x6, 0x5, 0x8]}, {0x5, @usage=0x4, r2, 0x8, 0x6, 0x4, 0x0, 0xde9, 0x8, @struct={0x1, 0x49c}, 0x1, 0x7c7, [0x8, 0xc9, 0x0, 0x4a, 0x8, 0x5]}, {0x4, @struct={0x218f, 0x9}, r3, 0x520, 0x8000000000000000, 0x11ea, 0x3, 0x1, 0xa, @struct={0x1ff, 0x514a13de}, 0x5, 0x6, [0x7fffffff, 0x8, 0x66c0, 0x7, 0x1ff, 0x7]}, {0x0, 0xd44, 0x7}}) 10m47.638422071s ago: executing program 5 (id=3774): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) setns(r4, 0x2000000) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000140), 0x4) r5 = dup(r1) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000010c0)={'#! ', './file0', [{0x20, '\x98\xb2q\xa2x\x97\xb1RB\xb5\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x04\x00\x00\x00\x00\x00\x00\x00\xeb\xfc\xfc~A\x95\x8a6'}]}, 0x67) close(r6) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000200)) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, '9P2000.u'}}, {@cache_loose}], [], 0x6b}}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"}) 10m46.73174768s ago: executing program 5 (id=3788): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0xe1, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x34, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) stat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r6, r6, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f00000004c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000840)=[0xee01, 0xee01, 0xee00, 0xee01, 0x0, 0x0, 0xee00, 0x0, 0x0]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x5}, [{0x2, 0x1, r4}, {0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x0, r7}, {0x2, 0x5, r8}, {0x2, 0x0, r10}], {0x4, 0x4}, [{0x8, 0x0, r11}, {0x8, 0x4}, {0x8, 0x5, r12}, {0x8, 0x2}, {0x8, 0x4, r13}], {0x10, 0x6}, {0x20, 0x1}}, 0x7c, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r14, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c0019800800010009040000300001802c00018014000300fe80000009000000000000000000003a140004f20dfa009627f58657a924aa00fc000000"], 0x50}, 0x1, 0x0, 0x0, 0x4884}, 0x4000) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r15, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r15, 0x7ffffffffffffffd) ioctl$BINDER_WRITE_READ(r15, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 10m46.714688142s ago: executing program 5 (id=3789): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r1 = socket(0x18, 0x1, 0x1) r2 = getpid() (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) read(r3, &(0x7f0000000240)=""/2, 0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000280), 0x10) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x5, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x8001, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x7ff, 0xc8, 0xf9, 0xe, 0x2bf, 0x40001, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x8, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x0, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xa, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x80, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d6, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x8, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x9, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x3, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffe49, 0x0, 0x0, 0x22, 0x0, 0x0}) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000180)=@routing={0x84, 0xc, 0x0, 0x80, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}, @mcast2, @private2={0xfc, 0x2, '\x00', 0x8}, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}, 0x68) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1) 10m46.52509964s ago: executing program 5 (id=3790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0xc) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000009c0)="b9800000c00f3235010000000f300fc72ec4c379050b01c4e1e75adf0fc7a4fc00600000b9800000c00f3235000800000f30670f2054640f792e0f320fc76e7d", 0x40}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x7, 0x4, 0xffff, 0x5, 0x6, 0x7}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x800000000, 0x2, 0x7e, 0x6, 0x20000004, 0x7f, 0x4236, 0x2000, 0x3, 0x9c1, 0x8001, 0x1005, 0x71, 0x4db9, 0x0, 0xfffffdfffffffffd], 0x2000, 0x180300}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) socket$packet(0x11, 0x3, 0x300) 10m46.5210697s ago: executing program 34 (id=3790): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0xc) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x12, 0x0, 0x4}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000009c0)="b9800000c00f3235010000000f300fc72ec4c379050b01c4e1e75adf0fc7a4fc00600000b9800000c00f3235000800000f30670f2054640f792e0f320fc76e7d", 0x40}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000380)={0x1, 0x0, [{0x1, 0x7, 0x4, 0xffff, 0x5, 0x6, 0x7}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x800000000, 0x2, 0x7e, 0x6, 0x20000004, 0x7f, 0x4236, 0x2000, 0x3, 0x9c1, 0x8001, 0x1005, 0x71, 0x4db9, 0x0, 0xfffffdfffffffffd], 0x2000, 0x180300}) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) socket$packet(0x11, 0x3, 0x300) 5m10.464178122s ago: executing program 0 (id=9543): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009040402100000fa00090582"], 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r2) r3 = inotify_init1(0x800) fcntl$setstatus(r2, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r2, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa400080a) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r5, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) rmdir(&(0x7f0000000100)='./control\x00') socket$xdp(0x2c, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x80080, 0x0) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000001400)=0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGICOUNT(r8, 0x545d, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5m8.786125476s ago: executing program 0 (id=9586): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000015000b0000000000000000000a0000000400000014000100ff010000000000000000000000000001140002"], 0x40}}, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f00000000c0)) 5m8.75287872s ago: executing program 0 (id=9587): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000000)=0x1fc, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, &(0x7f0000000000)=""/52) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0069f793b60c714796416f3632ff352f41cf7e30"]) (async) add_key$user(0x0, 0x0, &(0x7f0000000080)='YK', 0x2, 0xffffffffffffffff) (async) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="f0", 0x1}], 0x1, 0x0, 0x0, 0x11000000}, 0x4044081) (async) r5 = syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r5, 0x0, 0x0) (async) preadv2(r4, &(0x7f0000000580), 0x0, 0x9, 0xd, 0x1d) 5m8.666125968s ago: executing program 0 (id=9589): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$igmp6(0xa, 0x3, 0x2) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) mkdir(&(0x7f0000000100)='./file0\x00', 0x2) sched_setscheduler(0x0, 0x2, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x8000, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x200, 0x1b0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) mkdir(0x0, 0x2) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x4010) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x800}, 0x8) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x8, 0x7, 0x10006, 0x6}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 5m8.558827159s ago: executing program 0 (id=9596): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a853", 0x6}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e) syz_open_dev$loop(&(0x7f0000000040), 0x7fffffff, 0x103000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000400)="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", 0x1f000) 5m8.361270808s ago: executing program 0 (id=9601): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x42000, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}], [{@fowner_lt={'fowner<', r0}}]}) 5m8.360187858s ago: executing program 35 (id=9601): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x42000, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x4}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}], [{@fowner_lt={'fowner<', r0}}]}) 5.064157083s ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 3.16405229s ago: executing program 6 (id=13662): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x29, 0xffff, 0xa}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x8, @remote, 0x4e24, 0x2, 'dh\x00', 0x2, 0x9, 0x64}, 0x2c) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000000c0)=0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000100)=0x67c613a7, 0x4) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000140)="49454a41d4f6a121a2743ad7d978d897cadc0c3acdb419fcc757fbe8740d1935cf06772b0e5295492f91e6ed3830053a2ae711db6ccf8c9213bd9a6afaa8e98889a5b5b7b3563b3802ffab033a2cb7dfcda2f44450a897fe233c6899b5f8fa84d51531625fc1195b7c073f42773e72a59a1128bad40c8a28f029fbfc31c74d54774386873464aa06e8c13fa4dd8b80e85ec07332c67ea744102f5e052f203d1a0dc79a096f2af28ada95302f4874d0bff2c7e0c7460f874e4169e43cff17d260806497f683706dec2e400f06c7d0eae647076876a8") syz_clone3(&(0x7f0000001380)={0x44000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x2e}, &(0x7f0000000300)=""/43, 0x2b, &(0x7f0000000340)=""/4096, &(0x7f0000001340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001400)=0x4) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000001440)) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000001480)={0x2, 0x4479, 0xac, 0x6d3, 0x13, "6e6807ba5b53e5fa"}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000014c0)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast1}}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000001500)={0x65b, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000001640)=""/205, &(0x7f0000001740)=0xcd) r3 = syz_open_pts(r1, 0x0) read(r3, &(0x7f0000001780)=""/159, 0x9f) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000001840)="c6073bcae2ae6764499761a8bed87b0683f0e95d106881ed40d4ca1458fc9590c02da798c18aeb88f144de3252ca006ec527c09baf8d5eb0bfae3753505881d60f9e8790f5038d31da10c805e02ab6e59c5f0411f0ed35b85c2d9effdb5d0fd86583a4c291e330d3fa429eeb5d722b96bbd88e8652d074ecf068f6b071296bf2fe792177162880dfa31decf695c5dc9e55d13a73fdc1b94c99ab5e86f291645e917c2338c0f9d6cc01019c69f3723cc77c15793f2e31247644194e3228c9bec8d689d2c393090e293fe4da957e5af1") sendto$inet(r0, &(0x7f0000001940)="4c2034e65a07358994a0fc3f5d15a03bd4cbdfb63ce49f3ce5615015a24f96cc5027a066d3004e2ce38b8ee980ab9d43070649da685de4f86a9b8bfc09e36b88dad8e6307e1517ababbd699b9072163cd0fcdba6510cd446b4dbfc6b90d44a31e9bbbdd3b25f2f3959861a56d26edf1eb366738d738f9ea9a8f7bbe78e67c60b40117ab1e9a9ad7d264a20773b762241699e17adbd903cfc7a2832ffd05f14094866bb4759729d234e37c6bd89c1a4c4ec90fc4124ee6a0f95d33c98e52d9197f803a1c0eb0df5f4b82be2faf4fdb72e12bb90f4137e32d30f874db4ab5f8c72d5adbe8c1bbf03de3e75be1c1714961c97f204fc8fe7d7408ce46f2039dc05629ae6c00689a4fa7f891e3bdeec904316dfba3b77a15c759e914efb502457b8c1c336325dee071c0a74756324e582c6ef7d404f9f605097440ad39cf0d1699cbeb448c2034aa661ec3ff338bdcd1f43538cbaf8c37ff6ce4ad95e886b7f32dce7739eb0369fd73a823f8e464901b12137a599aff07feafe691fab09a1b7addc306e9349fb5c3997d9748aa6224bd7ff28b3fee9f5b76c9996da37b2a1647c4aec55c19bac3e7dbde4943bb21e87c2a3f23b9a30bcb51e9a5ebffec5256d496fdb173de97e18348df2a08ad7c9cabf3e5a9dd92e58a6886df905a81817b3502a562dee19a0cd7802d795a16a7d88a5a12b5d321fe923d697916591453208087d8dcd081b6fef8d60f8b8a20df000dcfaf1582fac9ca5df7534f286dff42b853ca29cd14ca0d633d898d65147d21c2559552bb6a96e256a1d9549a3a7879b299c1421a50a0e6837d96a079dddab1a104e765333a2b48dc15d9003d8121e1e2f1c9073c0a052cbb58063ead59ee5801f6db0b25254ec1b3e141fe38fa3e899977d715e46ff82f0cd16e2f4ad948a4c55f1e336b86eb158413201750087af05b660d900992f680bce18455443d343137bb81be83167ecb813c472bf90a643f3d1f38dadf86ee31ce457f4e4d95498944d6723428bca5c0db6de35ea5b72653190cb7e6b178a1701530594432520548ed59193f4449cd73009747c00c8a03bdc9daeea91197a795cc1fae6c92b4fcff4adcc6a1dc94a405e599df6cbf43bf21e9273f2f5faef97aa9ad42e5fd581d3f1e3b44f5d2dc65f1f0806e8202406f332a9982e03e943c52d28495c0b08bfbf9c3246330725a299f63f78654e77be16871f73e85d143a2c588840e6af3eb7ffaf6146fb4baf3742ae415311b1e626c33d39e130e7e4b042f43749889547b4886b5f87fab2aee560d3881121b5919e65f4e913a62bf9bbb958b92e72f5adbd54ce490aec93f95daf5eda19f2a3dcae5275ef632bb9986807c4f295030006daa8f4140899265ce8edcd1a4e769fee7b0c45707ed6b78c862796a49052c0907ebe3d30b87e7d550d41849beadfccf6c785d0d9c2e7558ff1da54eeed08b7b3e728fd808fe984c2d62f97f61fbae48f50bd196389e4a807486274ec4c3e80a2be05b25cec10cb2352961f1894d9d778ed34241c3ae13d76ce93d721e09b898aa18e98d4d4f66123d3669bc5baafed513bc7c71abf133b23959127563731085b68bff28211cc1709b0df0ccebc336d8e32e385eb03e3cd974f0e7587da2a63f9b943e9968f0de79053d6ad12cd932b3dce50b20774a8a0bdbc4d97acf219bf933db876425f67d9cead497bb64a314b07cbdc84ead97dac344b2864de3d04c841c12f72e3a0167e0e858346d8127993a3ef733f728667df26dfd8bbe4fd43243478c8613754b48e253ede69c9a60552484084759d09b918acbd18109de03e239f39db0188f5ab19bd7caaee1860ad995df6daf9f10e3ce2f3a5f214efea04933927e40a8186cb6f7263551952223799f308f0967dda5828563b53e924acd7fff7cc7b0ab6b02e26d94dff9d4c9de1642ac67e2c47be660fdb9c2f2796ac84da3d202f759385dddd8664f4ebc44c0326434e8651667507c607a15b7ae0fc1c08ef6224c6393b611093f76e177c70fa4e69ecebec81c592f62a5681fef76ed89bebfc6b82f83a7cce4256b28d101241917daac5d8ea2bbd7b13fa06d1bc9cf97003067b3dcae6242de476fa6ab8f0eeebee04fe68541387fb2f507aba8f61a7c0472b5ad2c76c3916c586b260cd05b3d5c29a6cb175dd80ae4adf9798973b9bb2109c0ecd7f899db2765b1bf2298f841ad1f2aecb65b4ae4481c4419d831c60b37305ebee028a3499cae1720d62668af20e456d5588573d58f59af9faa9a5e3c718b145204ffc58ad3597bfefd40479cec67d9c55cd9e05be17b4a2ed8a5555944b52c4ffbb314328e50b3426475091132bfa3993fe782de425e8d9e13802cda6e44901e33e77412a189dc0730ebad395f5248740001a78d8de27cf90f718fa85eff885bfc17726b5c990f246b8a65c29d6b3c386420c769f64d47d09c5411a9cf93c9c47e9b643c72cf306d58eef0a88a2e68c6641adb3bb7cf2ec8244e253e8a431ed94f761fb184e05fe8c88228ce48f98de62466f0df6d3121d5f53e6c446127a10ae11dcb64e5c935a4de3c986a37eec21f9a6fc36d1fe9ec0fa2f2e57c5dc0065916b7b32bdc9040b19affdaf04a2e6455d756a6a5b78a39c560aa68abe6ad6a7a5a93de66396d403c2a0aff82b089c26e32a0814046b4ea75dcf13271907a17f244a78b7c33bc2a2bb4e38eeb28b254cb50df81336cdd81f23104be4cb3b1005ba1ac9e7a0487b012c036f9cc0aed4df7ebe96a097656c87e520e6b9cb61712e3df02f415225ddc41b2dd97c244b6e24cd7d27870252f9b888f33d81994a0528570c20e9fc0358bf4256c8675eeb808e03bcf07d4a68876de7d2abf8f9ebc7adc5a1a2bd47b3eb0968f23e30bdd58f1e6f5a8957256ecf04f5fa61be78e1fb1ad69dc33e504c86a02e72947842f0d753fbdace57ca49636516eadd3a8aaaf92aebe0cb291a48f80978eb1e1946cada69b9a5f377620d44bf9b7b57bdf72ffdb90ccaae802fe12b04695cbd7b4d58d7881c8229ec30432d6d9bfe3c6209c81769a56dc7bb8a608640d1ec532ef90bb56de4d9f9bc38887c5f25d8aeec62b876144f404291de1740e5828a9b3df211a9658d125821dc3a4175abd1e637b472f4f52e7b1644d52e255b5cea9ab48049fec7fbdbf6ee5806c8cb4f71836ec7760f6edffec0506d0d861fffd98450ad93849926cf39050ee5dd3af745246f4ca8ec63cc7bfd1b95e829fb7ba1a640ee1e7207aee01a7a9c6f827c0180ecc320b55b4fe0e6803f21b66016bd9c568b942ba4815de31362a224ca8f656f8d31727f8d1f3cb11d9583be5038f306f466dd7036606b989487a60d347b4d5a3f07be77b86f601aa00cc6680cd047bd073c4d8f0e5f007cd7a45442ff8b585020048dc8698699f9397848c49d7a506484dfe1f6e91010a2a399b929208170ff44190afa7147d8600cb6863d93960e2388b28e49fed48ab9ab9d0a82b497f0281559a8c9b84e0fcbf9bbb8b13d04155ac9123f5198d81f378f1aaf24d6822b6f12b3bb22c923117493b9291aa88419876036f9edc3c57bd711f71d452caa304abd4f8cbd983fb3f0b7da4d8ae6093d66e1e51e21876b21621b948002700f1b615a71a25f4cb0f7de216ca07a339daadafc100e8ed928cd076e83911b6ee909fa1defd59a53fc8d7dcc1066fbe30ce62ed7ec1cf30d90db2d2e68fe0b2b370a9efeee51a41efb020e56dc3a92179d6e8b8afcdc4e9628c9ea72c67b966c01cba87b801d48aae5fcc3ba27f1dae22dfdedc863f4651b6460685004c1ab29b4652e9e0e89da20d4f1dbccbee2b232986d8f198ae4e5642aedccd86ec4cafc2e1166e07fe28c030b9e383adb7e35861df3ada362b28051d5d138b72affe61ed80251bcd3da56ba3e45e7f21a7b3565a76e7e9d0cbf718fadfc0b30cc41a67ace5cc873c2ee70021205be69f00f5e2aae34cb88b060362326520b1293148eff92da249e96571316b6e637a6f1c3a55dcdf9b516dbbba027488cedcc7a726945830e2d48c4871efcb9268e58db90183b6ec28e4bcb83593379ccc782dbf54335db510a9d23940956d90cd948c4502706a6d8b0dfec0cc4abccdb1c89f34bbc0e181d5a4faab2379d760f4a29947cdcac299e213310abc2c907c810265d4cbb6a489d8a1e3be2828558167dfdd4c211e31dba59947c7fc03b8c6d856273cb172d80f2ac96d8029d55c4458ed89ed6d19a43ec19a22d0ff0ec038775dd8e1d7dc0df6e14b2312b1b06ebce0ab000ee9d606f3d87319dc9c467cbe1e880ab439bb7d5a7b398a80630b9670e08c2b609d43c88f1e47b020cec448ccbb15c7372c3f51bd749253179198532f14bc7ca45529215eca436dde7f0eb36ed755255159927893c0b69d1fd84c338bc1fa7f6951bed5f0a6f6342b24ae3789138857520bdc26bb97fded8881b99e66a83a1cf65dc4d734233efbc441b74783c276ec9c7c13622083322814c5974a3aafd892a6d7f59b9f31a6b5d398c606a7e7dcdbbb0ebc5b624bc1109abfebf578594218c5830c8507674763b2eef13618544e5fcdfed49eebbb948e6209dbc3d9bc3619c06e3b49b0b7da8722698c51eafb854533443d365ec6799c075bad5e8c7429dcf6800abbecc3777a697477f67531f0e72ab1851c59edc96bb78e99958a6aea7635d76342465c03d7d8d6b5aa633e777878005034deed2645e8f0ff8e3c5058cdba9f8e0e9c87aacd7b2cbee566ba975c6b0642b9567a9771133a22f301de090cd8b7a409608da1728438c32bf44ecebe89c0fea4a277e3151b3b55ce937fb2894d34b6cf73741303e0eac42ebf27c17b65e656f2797e0ca47cf5bd25ab0e318316e258e30d81e0ede2173a101917777fc93b30268e63cdff37c364586f8d6585ed3eb59884570879562de788b1f086f17d08e0b1a5b14980a4485c91f3ace093623e694229e9ba654aacb6a985a24b7ad5915fcd2f65a275baac30fd469d94dd12fe16d71871f7844823fc29ef9ed9fe98ad3484848ea7259291c9f95e451f3d1848f350c1f3258157bb47606de0921727a8bf626d1fb98401ae22fa0340c854e581b49ef6691ff744f7b137f59a294a9596ad84efd7bacd8f2b8b7bc601ca9646311d4681c984740d69b6e10199e8cd4694350e84aa0821e58fdf441c806a3f5bdd898db2fa3813e3ef841289a936e9a57c96643405d73aa5893de3336b9465c08f17a5bcccebeb237ba91c0d002382ecb96aecb3b41f00c62e5ac5e21386d0c1781130dd7497f923e5faed7bf7e4b781c96571208234810b0fcc5e20ec1d7d5f41d014e4e4bd0dd26b9fd0547a997d0f75a089c55c11cf3ae1f6f1595e44e242cb2cef0ec61b861e70a2e8d513794fdbcf598912d99282343419747321a7af8195324bfbcbf26a1493c7d25daca4dd3becd7df1c5671878b337f111ca40a627562e2602a47a6ebfd9e001de58895fba912b8035570051752e2564dbc1f671fdaa0428a4857521431f721f0adb6f8e547db4d77245b253c02a6ff315bec001ea4a9d68b5a8871e1089b3a328283f8e24fac02687ae9401104e36db062e266f189338b22fbeed35257546ea49ddac7ff7c13386e10543e0f25566ebafa060d0c4a90c2db6a55369339995a5f14b0d200a1b02cc3b8b099b32479a48e5d2e7121fc3888d8f54386257bcf2e7b75f2677353a6345992f19939f38f813aee860da06f5868ae0bb649f3e675020008c0ce0e1d82f1bb42ccc5534972c912763a99668e8157ddd01b42e8b02bccdb64fa2324b", 0x1000, 0x24008050, &(0x7f0000002940)={0x2, 0x4e24, @multicast1}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002a00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000002b80)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002a40)={0xe4, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NAN_FUNC={0xc0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa0, 0xb, "a27a4c84b68dc377044d2c343a07f9f477562772c2308dd76ef8ee02dde3b3defbde0c48da2b88c3e27941816ae92accceecc8e2baea9a261e70a6838027b4be1167edcbca59cab8e4b1218ea69da451c621ab70022414ae4239fa18f863eb3cf3fdac5e9394450450a5af22b2fe3f2886004ac4df87c79fdc77277726698873bccba332f0242417a2618ab5f8cbc2ef45dda95f6ae2b433653084a6"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008800}, 0x20040000) splice(r3, &(0x7f0000002bc0)=0x7fffffff, r2, &(0x7f0000002c00)=0x310, 0x5, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x24, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x55f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000000) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r8, 0x541c, &(0x7f0000002d40)={0xd, 0x6}) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002f40)={0x0, &(0x7f0000002d80)=[@wrmsr={0x1e, 0x20, {0xc0010117, 0x3}}, @cpuid={0x14, 0x18, {0x8, 0x52272a42}}, @in_dx={0x82, 0x20, {0x87f, 0x2}}, @wr_drn={0x6e, 0x20, {0x7, 0x1}}, @wrmsr={0x1e, 0x20, {0xbba, 0x2}}, @rdmsr={0x32, 0x18, {0x30b}}, @wr_drn={0x6e, 0x20, {0x0, 0x4}}, @out_dx={0xaa, 0x28, {0xfa3d, 0x3, 0x1}}, @code={0xa, 0x66, {"660f38301cb8400fc76806c744240019120000c744240200700000c7442406000000000f0114243e41dbe2b9800000c00f3235008000000f300fc7ba00000000c4c2adb96b600fc77908f3f30f320f78a5c9d8a7e7"}}, @wr_crn={0x46, 0x20, {0x8, 0x81}}, @wrmsr={0x1e, 0x20, {0xb7a, 0x5}}, @wrmsr={0x1e, 0x20, {0xc0000080, 0x5}}], 0x1be}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000002f80)={[0x3ff, 0xffffffffffff94ab, 0x42d, 0x6, 0xd4, 0x3ff, 0x10001, 0x7, 0x3, 0x31a, 0x3, 0xb0, 0x65a, 0x5, 0x200, 0x3], 0xffff1000, 0x81800}) fgetxattr(r1, &(0x7f0000003040)=@known='trusted.overlay.upper\x00', &(0x7f0000003080)=""/60, 0x3c) 3.122137744s ago: executing program 6 (id=13663): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r1, &(0x7f0000000000)="a0123e852b254fa62f51e425cf799885b6c89fc7a6", 0x15, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @private0, 0x8000}, 0x1c) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001680)) r3 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x400, 0x8081) ioctl$HIDIOCGFIELDINFO(r4, 0xc038480a, &(0x7f0000000100)={0x3, 0x100, 0x9, 0x10000, 0x9, 0x9e, 0x6, 0x1, 0xb, 0x800, 0xea3, 0x3, 0x1005, 0x200}) 3.086030808s ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1.200501202s ago: executing program 6 (id=13666): flock(0xffffffffffffffff, 0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000180)='wi', 0x2}, {&(0x7f0000000100)="0a62a8ea", 0x4}], 0x2, 0x1) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b9f6090000b8d8000000ba000000000f300f01c8c744240000000000c744240200900000c7442406000000000f011c2466b89b008ee80f01c5c4417e117797642626400f32660f388290c3000000b9600000000f32c74424008c000000c74424020f000000ff1c24", 0x68}], 0x1, 0x38, &(0x7f0000000100)=[@dstype3={0x7, 0xf}], 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xbf7, 0x0, 0x8}]}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140), &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1015, 0x2) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r3, 0x98b2f000) 1.168041406s ago: executing program 3 (id=13668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) syz_io_uring_setup(0x6312, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) 1.156246487s ago: executing program 7 (id=13669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001540), r0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001980)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20000000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x800, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)={0x30, 0x0, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="d00000001e00090002000000ffdbdf2505"], 0xd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5f7, 0x40, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 1.057313537s ago: executing program 6 (id=13670): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x60784, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4, "00000000000000000000ffff00"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000000)={0x0, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000004c0)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0xffffffffffdffffe, 0x1) r4 = syz_open_pts(r1, 0x0) dup3(r4, r1, 0x0) syz_io_uring_setup(0x1e72, 0x0, 0x0, 0x0) r5 = syz_usb_connect(0x5, 0x2d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_disconnect(r5) 1.056656157s ago: executing program 3 (id=13671): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000140)="1c00000018000713ab092500090007000a0700000000000600003693", 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x18) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 1.026437529s ago: executing program 7 (id=13672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000150a0104000000000000000005000006090003400000000108000340279c00007ba171648eef42051a0dd3e1ba484a2c2e39441789681188754c683e71e194b9b2db0a45654423978badc0620fe62e18948a50723af5451583778850001add3aa1729429341d637f2a99fc02a2b51c023ef7"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000180)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 1.011107521s ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 789.683963ms ago: executing program 7 (id=13674): r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) (async) read(0xffffffffffffffff, &(0x7f0000000080)=""/72, 0x48) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{r0, 0x8000}], 0x1, &(0x7f0000000200)={r2, r3+10000000}, &(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/timer_list\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) (async) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000002c0)={0x81, "0b631c07d572fa859d9fc2990199f5ae043e7f1d55390921e25047dfae005d50264994a32758eff32a7be3dc67e95814e0113f9ea5c83ff07d4b0aad8a6abd59"}) (async) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0x0, 0xac, {0xac, 0xd, "68a9c77d74203019851af28259800f7c96754bdb89cbbeb879964fc4fb7a4f0e2f1739ecf76fbdea9733760ac73e150a8db8e21c807ea0685128dae9dd456618ab404b4fa28e3d99df30e36125ddc596fb504e5706781b0126fd7eca4cc0c725641a236ddb9d3a47c611064bb32e441a44eb3e0108d58ea14178c2c1950661ba95fd1256fc87f4bc32f23cd55ef01045bfd7514ba0793376ce95a734ff88653e5c10823079423b46a057"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f00000004c0)={0x0, 0xf, 0x26, {0x5, 0xf, 0x26, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa1, 0x7, 0x4, 0x3}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x7fffff8, 0xf00f, 0x6, [0x0]}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x18, 0x5, 0x7, "29b38b5b", "5872a53c"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfd, 0x1, 0x9, 0xff, 0x2, 0xbf65}}}, &(0x7f0000000a00)={0x84, &(0x7f00000005c0)={0x0, 0x15, 0x76, "552a55a854dca67aa4c1feae23febba5a8e4d92e2d4ffdd575ee8b41a60ee0000c5cf4c009fbd941aef29dbd3666d3a4e9de121fc8390a04f44c995bafd7bdb9ca41d026322473583b645653ea8eab42d278e7a368d7038c6c9ab8e8f199d019a8e69bb646eba31d5e6e7f9b692c274bc2195f13eb24"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x99}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x1, 0x3baaeee97033c48a, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x7f}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "7285"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, 'k('}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x401}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000980)={0x40, 0x1e, 0x1}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x80}}) (async) timer_settime(0x0, 0x1, &(0x7f0000000ac0)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000b00)) syz_usb_disconnect(r6) (async) ioprio_get$pid(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000b40)={0x4, 0x10}) syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x3, 0x1, 0x6, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffb, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x204, 0x3, 0xfd, 0x4, 0x4, 0x7f}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x7, 0xf, "3dd357"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xc9, 0x4, 0x4, {0x7, 0x25, 0x1, 0x83, 0x9, 0xf95}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x1}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xda3, 0x85, 0x5, "e04188f2d267a7"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x7, 0x45, "c3"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xba, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x94, 0x2, 0x3, {0x7, 0x25, 0x1, 0x82, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x250, 0x9, 0x1, 0x7, 0x8}, 0x37, &(0x7f0000000c80)={0x5, 0xf, 0x37, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x7, 0x6, 0xff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8d, 0x9, 0xffff}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "7be66515653f8f2d4295609c5a2fdd3b"}]}, 0x1, [{0x76, &(0x7f0000000cc0)=@string={0x76, 0x3, "b490fc092a3c2716dfa50cf45aca9ccf90fb8ba25b9964f6a713d6d8f62881767f8b6bdb2e72f4c7c018d17dea17282a884cdb74fa38e5387cceb5084269fd5f0b2c6282694995999a52512363d454c0aa569668d867d147c07ee99cfbb9aeda88faddab811d84ea71c71b591b839e0fbbff82d6"}}]}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000d80)={0xaa, 0xc0}) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000dc0)='./binderfs/binder0\x00', 0x2, 0x0) r9 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000fc0)={0x70, 0x0, &(0x7f0000000ec0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000e00)={@fda={0x66646185, 0x1, 0x1, 0x20}, @flat=@handle={0x73682a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1001}}, &(0x7f0000000e80)={0x0, 0x20, 0x38}}}, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x1}, @request_death, @free_buffer={0x40086303, r9}], 0x56, 0x0, &(0x7f0000000f40)="71e0245ca1734dd76a116a9fabd27e34080fecc7040fb96034cfde2e431281c60b4c7e1157baa983e5b26d5a22b94c3a4e64b27d42f395b8a9591844dce955fc6d117b5d25bf9ca89af0627acd45536b758db113c798"}) (async) execveat(r4, &(0x7f0000001000)='./file0\x00', &(0x7f0000001200)={[&(0x7f0000001040)='@^!-*F\x00', &(0x7f0000001080)='./binderfs/binder0\x00', &(0x7f00000010c0)='\x00', &(0x7f0000001100)='\x00', &(0x7f0000001140)='\x00', &(0x7f0000001180)='\x00', &(0x7f00000011c0)='/proc/timer_list\x00']}, &(0x7f0000001400)={[&(0x7f0000001240)='\x00', &(0x7f0000001280)='./binderfs/binder0\x00', &(0x7f00000012c0)='./binderfs/binder0\x00', &(0x7f0000001300)='*^//).]\x1c[m\xf4-{}\x00', &(0x7f0000001340)='f2fs\x00', &(0x7f0000001380)='./binderfs/binder0\x00', &(0x7f00000013c0)='\x00']}, 0x400) (async) fcntl$setstatus(r4, 0x4, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001480)={0xfc, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x27}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x941}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xad}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcfa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x69}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6178000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001b80)={&(0x7f0000001600), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x68, r11, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7a}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x34}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_PID={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 788.943393ms ago: executing program 3 (id=13673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 693.196922ms ago: executing program 7 (id=13675): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x101, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000280)="c9bac357996de08b7e48f731bfa4ff07fcbe3c53f1e1eee9c14e12b11d39281b63a9cad082ceb2d83206f762f39c5670788d03139be0f70a8780b022dd688c5b166950bc7de4298a9b6eba9895b527af322b7e426703"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1ffffe23, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x5f}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) ptrace$setsig(0x4203, r5, 0x9, &(0x7f0000000200)={0x31, 0x5, 0x3}) pipe2(&(0x7f0000000080), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x101, 0x2}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x56, 0x0, &(0x7f0000000280)="c9bac357996de08b7e48f731bfa4ff07fcbe3c53f1e1eee9c14e12b11d39281b63a9cad082ceb2d83206f762f39c5670788d03139be0f70a8780b022dd688c5b166950bc7de4298a9b6eba9895b527af322b7e426703"}) (async) pipe(&(0x7f0000000040)) (async) io_setup(0x3ff, &(0x7f0000000500)) (async) io_submit(r4, 0x1ffffe23, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x5f}]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) (async) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r5) (async) ptrace$setregs(0xd, r5, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") (async) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590fc63b5760e50b8a147a10ffe643c81b55", 0x38}) (async) ptrace$setsig(0x4203, r5, 0x9, &(0x7f0000000200)={0x31, 0x5, 0x3}) (async) pipe2(&(0x7f0000000080), 0x0) (async) 645.816097ms ago: executing program 3 (id=13673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 586.371673ms ago: executing program 7 (id=13676): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = socket$inet(0x2, 0xa, 0x7f) sendmsg$sock(r2, &(0x7f0000000480)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, 0x0}, 0x2000c801) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x8, 0x106, &(0x7f0000000540)="d7"}, {0x2, 0x8, 0x2, &(0x7f0000000080)=':'}, {0x2, 0xfda2, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040880) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000380)={0x4, 0xffffffffffffffff, 0x1}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) read$FUSE(r6, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030f0000000000000000070000e10b0002"], 0x20}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000010}, 0x20040014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x6987424146893eb8, 0x5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) mlock2(&(0x7f0000213000/0x11000)=nil, 0x11000, 0x0) 585.847273ms ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 445.954177ms ago: executing program 7 (id=13677): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000021000080"]) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x63961000) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1a4, 0x3, 0x3, 0x8000, 0xfffffff7, 0x7, 0xc}, 0x1c) 440.916397ms ago: executing program 3 (id=13673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 293.535462ms ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 283.464753ms ago: executing program 3 (id=13673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) write(r0, &(0x7f0000000400)="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", 0xfffffcf1) 279.952033ms ago: executing program 6 (id=13678): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x30, 0x0, &(0x7f0000000680)) (async) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000080)={0x1, 0x1}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf252400000008000200", @ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_delete(r6) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) listen(0xffffffffffffffff, 0x2) r7 = accept(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2) setsockopt$netlink_NETLINK_RX_RING(r7, 0x10e, 0x6, &(0x7f00000000c0)={0xf, 0x7, 0x0, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"}) socket(0xb, 0x1, 0x100) 197.828461ms ago: executing program 6 (id=13679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x2) setfsgid(0xee00) r5 = syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/4\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) syz_open_procfs$namespace(r5, &(0x7f0000000200)='ns/cgroup\x00') ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xd9a77000) syz_clone(0x80040000, &(0x7f0000003300), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) listen(r8, 0x0) 0s ago: executing program 1 (id=13569): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x1, 0x0, 0xa02}) (async) lsm_get_self_attr(0x67, 0x0, 0x0, 0x1) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) timer_create(0x2, 0x0, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) (async) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) capset(&(0x7f0000000080)={0x20080522, r3}, &(0x7f00000000c0)={0x200000, 0x200000, 0x407, 0x10000, 0x0, 0x30}) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x5, 0x9dc5, 0x0, 0x0, 0xf}) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0xffffffffffffff0e}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x40000000000007b, 0x4004) (async) read(r5, &(0x7f00000021c0)=""/218, 0xda) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000400)=0x1755, 0x4) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') pread64(r7, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) kernel console output (not intermixed with test programs): cfi_dump_user_range+0x10/0x10 [ 746.686752][ T3333] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 746.686773][ T3333] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 746.686796][ T3333] ? elf_core_dump+0x2368/0x3800 [ 746.686816][ T3333] elf_core_dump+0x2ccc/0x3800 [ 746.686837][ T3333] ? __cfi_elf_core_dump+0x10/0x10 [ 746.686860][ T3333] ? dump_interrupted+0xf0/0xf0 [ 746.686883][ T3333] ? filp_open+0x182/0x1d0 [ 746.686904][ T3333] ? 0xffffffffff600000 [ 746.686916][ T3333] ? freezing_slow_path+0x12b/0x170 [ 746.686940][ T3333] do_coredump+0x1bfa/0x2bd0 [ 746.686966][ T3333] ? __cfi_do_coredump+0x10/0x10 [ 746.686988][ T3333] ? asm_exc_page_fault+0x2b/0x30 [ 746.687012][ T3333] ? __kasan_slab_free+0x6a/0x80 [ 746.687033][ T3333] ? kmem_cache_free+0x1c1/0x510 [ 746.687049][ T3333] ? get_signal+0xa75/0x14f0 [ 746.687071][ T3333] get_signal+0x11fd/0x14f0 [ 746.687093][ T3333] arch_do_signal_or_restart+0x96/0x720 [ 746.687120][ T3333] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 746.687159][ T3333] irqentry_exit_to_user_mode+0x4e/0xb0 [ 746.687180][ T3333] irqentry_exit+0x16/0x60 [ 746.687198][ T3333] exc_page_fault+0x66/0xc0 [ 746.687215][ T3333] asm_exc_page_fault+0x2b/0x30 [ 746.687230][ T3333] RIP: 0033:0x7ff0c284f987 [ 746.687246][ T3333] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 746.687263][ T3333] RSP: 002b:00007ff0c38ae120 EFLAGS: 00010202 [ 746.687281][ T3333] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff0c298efc9 [ 746.687295][ T3333] RDX: 00007ff0c38ae140 RSI: 00007ff0c38ae270 RDI: 000000000000000b [ 746.687310][ T3333] RBP: 00007ff0c2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 746.687322][ T3333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.687335][ T3333] R13: 00007ff0c2be6038 R14: 00007ff0c2be5fa0 R15: 00007ffe50e8ddd8 [ 746.687353][ T3333] [ 746.690678][ T3333] memory: usage 301032kB, limit 307200kB, failcnt 49331 [ 747.178263][ T45] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 747.186372][ T3333] memory+swap: usage 410204kB, limit 9007199254740988kB, failcnt 0 [ 747.194778][ T3333] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 747.202395][ T45] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 747.219270][ T3333] Memory cgroup stats for /syz6: [ 747.219407][ T3333] cache 291020800 [ 747.276010][ T3333] rss 425984 [ 747.279238][ T3333] rss_huge 0 [ 747.352314][ T3333] shmem 291016704 [ 747.355994][ T3333] mapped_file 0 [ 747.426859][ T3333] dirty 0 [ 747.429934][ T3333] writeback 618496 [ 747.437601][ T3333] workingset_refault_anon 8520 [ 747.448369][ T3333] workingset_refault_file 0 [ 747.449585][ T36] kauditd_printk_skb: 411 callbacks suppressed [ 747.449600][ T36] audit: type=1400 audit(2016783081.681:87813): avc: denied { create } for pid=3898 comm="syz.1.12151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 747.466764][ T3333] swap 126595072 [ 747.495634][ T36] audit: type=1400 audit(2016783081.718:87814): avc: denied { sys_admin } for pid=3898 comm="syz.1.12151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 747.532933][ T3333] swapcached 655360 [ 747.537063][ T36] audit: type=1400 audit(2016783081.718:87815): avc: denied { sys_admin } for pid=3898 comm="syz.1.12151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 747.554448][ T3333] pgpgin 1175990 [ 747.563125][ T36] audit: type=1400 audit(2016783081.746:87816): avc: denied { sys_admin } for pid=3898 comm="syz.1.12151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 747.581349][ T3333] pgpgout 1125632 [ 747.584298][ T36] audit: type=1400 audit(2016783081.746:87817): avc: denied { sys_admin } for pid=3898 comm="syz.1.12151" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 747.588796][ T3333] pgfault 602835 [ 747.609177][ T36] audit: type=1400 audit(2016783081.746:87818): avc: denied { mounton } for pid=3898 comm="syz.1.12151" path="/binderfs2" dev="rootfs" ino=12664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 747.635128][ T36] audit: type=1400 audit(2016783081.746:87819): avc: denied { mount } for pid=3898 comm="syz.1.12151" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 747.644889][ T3333] pgmajfault 835 [ 747.665266][ T3903] overlayfs: failed to clone upperpath [ 747.670778][ T36] audit: type=1400 audit(2016783081.878:87820): avc: denied { mounton } for pid=3902 comm="syz.1.12152" path="/128/bus" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 747.671978][ T3333] inactive_anon 51990528 [ 747.702752][ T36] audit: type=1400 audit(2016783081.915:87821): avc: denied { create } for pid=3902 comm="syz.1.12152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 747.708420][ T3333] active_anon 239259648 [ 747.724099][ T3903] 9pnet_fd: Insufficient options for proto=fd [ 747.734132][ T36] audit: type=1400 audit(2016783081.943:87822): avc: denied { mounton } for pid=3902 comm="syz.1.12152" path="/128/file0" dev="tmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 747.737292][ T3333] inactive_file 0 [ 747.757901][ T3903] netlink: 'syz.1.12152': attribute type 3 has an invalid length. [ 747.770487][ T3903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12152'. [ 747.770497][ T3333] active_file 0 [ 747.770507][ T3333] unevictable 4096 [ 747.770514][ T3333] hierarchical_memory_limit 314572800 [ 747.802831][ T3333] hierarchical_memsw_limit 9223372036854771712 [ 747.809548][ T3333] total_cache 291020800 [ 747.815884][ T3333] total_rss 425984 [ 747.819610][ T3333] total_rss_huge 0 [ 747.823326][ T3333] total_shmem 291016704 [ 747.836821][ T3333] total_mapped_file 0 [ 747.840812][ T3333] total_dirty 0 [ 747.842880][ T395] usb 4-1: USB disconnect, device number 99 [ 747.859044][ T3333] total_writeback 618496 [ 747.863298][ T3333] total_workingset_refault_anon 8520 [ 747.868588][ T3333] total_workingset_refault_file 0 [ 747.886531][ T3333] total_swap 126595072 [ 747.891097][ T3333] total_swapcached 655360 [ 747.895491][ T3333] total_pgpgin 1175990 [ 747.899602][ T3333] total_pgpgout 1125632 [ 747.905179][ T3333] total_pgfault 602835 [ 747.909317][ T3333] total_pgmajfault 835 [ 747.914110][ T3333] total_inactive_anon 51990528 [ 747.918874][ T3333] total_active_anon 239259648 [ 747.924271][ T3333] total_inactive_file 0 [ 747.928477][ T3333] total_active_file 0 [ 747.932553][ T3333] total_unevictable 4096 [ 747.937782][ T3333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.11976,pid=3328,uid=0 [ 747.943590][ T3907] overlayfs: failed to clone upperpath [ 747.953515][ T3333] Memory cgroup out of memory: Killed process 3328 (syz.6.11976) total-vm:90164kB, anon-rss:1272kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 748.354664][ T3333] syz.6.11976 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 748.402920][ T3333] CPU: 1 UID: 0 PID: 3333 Comm: syz.6.11976 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 748.402950][ T3333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 748.402962][ T3333] Call Trace: [ 748.402968][ T3333] [ 748.402984][ T3333] __dump_stack+0x21/0x30 [ 748.403014][ T3333] dump_stack_lvl+0x10c/0x190 [ 748.403036][ T3333] ? __cfi_dump_stack_lvl+0x10/0x10 [ 748.403056][ T3333] ? ___ratelimit+0x3f7/0x5a0 [ 748.403081][ T3333] dump_stack+0x19/0x20 [ 748.403103][ T3333] dump_header+0xd7/0x490 [ 748.403122][ T3333] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 748.403145][ T3333] oom_kill_process+0x35d/0x640 [ 748.403167][ T3333] ? sched_clock_cpu+0x75/0x400 [ 748.403191][ T3333] out_of_memory+0x659/0xa80 [ 748.403212][ T3333] ? __cfi_out_of_memory+0x10/0x10 [ 748.403232][ T3333] ? mutex_lock_killable+0x92/0x1c0 [ 748.403250][ T3333] ? __cfi_mutex_lock_killable+0x10/0x10 [ 748.403269][ T3333] mem_cgroup_out_of_memory+0x279/0x350 [ 748.403286][ T3333] ? drain_obj_stock+0xed0/0xed0 [ 748.403305][ T3333] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 748.403322][ T3333] try_charge_memcg+0x8f7/0xde0 [ 748.403346][ T3333] ? __cfi_try_charge_memcg+0x10/0x10 [ 748.403369][ T3333] ? __alloc_pages_noprof+0x31f/0x7b0 [ 748.403393][ T3333] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 748.403416][ T3333] ? __folio_batch_add_and_move+0x2ab/0x370 [ 748.403439][ T3333] __mem_cgroup_charge+0xf6/0x410 [ 748.403464][ T3333] ? _raw_spin_lock+0x8c/0x120 [ 748.403485][ T3333] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 748.403511][ T3333] shmem_alloc_and_add_folio+0x86d/0x1050 [ 748.403534][ T3333] ? put_swap_device+0x130/0x130 [ 748.403555][ T3333] ? shmem_huge_global_enabled+0x2da/0x360 [ 748.403575][ T3333] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 748.403594][ T3333] ? __kasan_check_write+0x18/0x20 [ 748.403619][ T3333] ? _raw_spin_lock+0x8c/0x120 [ 748.403641][ T3333] shmem_get_folio_gfp+0x5f0/0x1380 [ 748.403662][ T3333] ? shmem_get_folio+0xc0/0xc0 [ 748.403680][ T3333] ? follow_page_pte+0xa5c/0xb90 [ 748.403703][ T3333] ? inode_to_bdi+0x6d/0x100 [ 748.403727][ T3333] shmem_write_begin+0xf4/0x270 [ 748.403748][ T3333] generic_perform_write+0x330/0x960 [ 748.403775][ T3333] ? __cfi_generic_perform_write+0x10/0x10 [ 748.403799][ T3333] ? down_write+0xe9/0x2a0 [ 748.403818][ T3333] ? file_update_time+0xa3/0x220 [ 748.403841][ T3333] shmem_file_write_iter+0x105/0x130 [ 748.403864][ T3333] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 748.403887][ T3333] __kernel_write_iter+0x41a/0x8e0 [ 748.403905][ T3333] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 748.403928][ T3333] ? __cfi___kernel_write_iter+0x10/0x10 [ 748.403945][ T3333] ? get_dump_page+0x160/0x220 [ 748.403967][ T3333] ? __asan_memset+0x39/0x50 [ 748.403989][ T3333] ? iov_iter_bvec+0xc0/0x180 [ 748.404010][ T3333] dump_user_range+0xb06/0xdf0 [ 748.404029][ T3333] ? __cfi_dump_emit+0x10/0x10 [ 748.404045][ T3333] ? __cfi_dump_user_range+0x10/0x10 [ 748.404063][ T3333] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 748.404089][ T3333] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 748.404113][ T3333] ? elf_core_dump+0x2368/0x3800 [ 748.404135][ T3333] elf_core_dump+0x2ccc/0x3800 [ 748.404158][ T3333] ? __cfi_elf_core_dump+0x10/0x10 [ 748.404184][ T3333] ? dump_interrupted+0xf0/0xf0 [ 748.404209][ T3333] ? filp_open+0x182/0x1d0 [ 748.404231][ T3333] ? 0xffffffffff600000 [ 748.404245][ T3333] ? freezing_slow_path+0x12b/0x170 [ 748.404270][ T3333] do_coredump+0x1bfa/0x2bd0 [ 748.404297][ T3333] ? __cfi_do_coredump+0x10/0x10 [ 748.404321][ T3333] ? asm_exc_page_fault+0x2b/0x30 [ 748.404346][ T3333] ? __kasan_slab_free+0x6a/0x80 [ 748.404366][ T3333] ? kmem_cache_free+0x1c1/0x510 [ 748.404384][ T3333] ? get_signal+0xa75/0x14f0 [ 748.404407][ T3333] get_signal+0x11fd/0x14f0 [ 748.404431][ T3333] arch_do_signal_or_restart+0x96/0x720 [ 748.404458][ T3333] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 748.404487][ T3333] irqentry_exit_to_user_mode+0x4e/0xb0 [ 748.404507][ T3333] irqentry_exit+0x16/0x60 [ 748.404526][ T3333] exc_page_fault+0x66/0xc0 [ 748.404544][ T3333] asm_exc_page_fault+0x2b/0x30 [ 748.404562][ T3333] RIP: 0033:0x7ff0c284f987 [ 748.404578][ T3333] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 748.404594][ T3333] RSP: 002b:00007ff0c38ae120 EFLAGS: 00010202 [ 748.404613][ T3333] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff0c298efc9 [ 748.404627][ T3333] RDX: 00007ff0c38ae140 RSI: 00007ff0c38ae270 RDI: 000000000000000b [ 748.404640][ T3333] RBP: 00007ff0c2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 748.404653][ T3333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.404666][ T3333] R13: 00007ff0c2be6038 R14: 00007ff0c2be5fa0 R15: 00007ffe50e8ddd8 [ 748.404682][ T3333] [ 748.404691][ T3333] memory: usage 307200kB, limit 307200kB, failcnt 52457 [ 748.542307][ T3923] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 748.543594][ T3333] memory+swap: usage 432168kB, limit 9007199254740988kB, failcnt 0 [ 748.713996][ T3928] rust_binder: Write failure EINVAL in pid:917 [ 748.718176][ T3333] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 748.909488][ T3333] Memory cgroup stats for /syz6: [ 748.909624][ T3333] cache 314228736 [ 748.918193][ T3333] rss 331776 [ 748.921384][ T3333] rss_huge 0 [ 748.925368][ T3333] shmem 314224640 [ 748.929082][ T3333] mapped_file 0 [ 748.932571][ T3333] dirty 0 [ 748.935544][ T3333] writeback 0 [ 748.939443][ T3333] workingset_refault_anon 8521 [ 748.944205][ T3333] workingset_refault_file 0 [ 748.948733][ T3333] swap 127967232 [ 748.952268][ T3333] swapcached 28672 [ 748.955994][ T3333] pgpgin 1192758 [ 748.959566][ T3333] pgpgout 1136909 [ 748.963187][ T3333] pgfault 603521 [ 748.966759][ T3333] pgmajfault 836 [ 748.970294][ T3333] inactive_anon 277258240 [ 748.974610][ T3333] active_anon 37310464 [ 748.978713][ T3333] inactive_file 0 [ 748.982333][ T3333] active_file 0 [ 748.985784][ T3333] unevictable 4096 [ 748.990009][ T3333] hierarchical_memory_limit 314572800 [ 748.995380][ T3333] hierarchical_memsw_limit 9223372036854771712 [ 749.002261][ T3333] total_cache 314228736 [ 749.006411][ T3333] total_rss 331776 [ 749.010836][ T3333] total_rss_huge 0 [ 749.014557][ T3333] total_shmem 314224640 [ 749.018884][ T3333] total_mapped_file 0 [ 749.024132][ T3333] total_dirty 0 [ 749.027595][ T3333] total_writeback 0 [ 749.032118][ T3333] total_workingset_refault_anon 8521 [ 749.037590][ T3333] total_workingset_refault_file 0 [ 749.043479][ T3333] total_swap 127967232 [ 749.047549][ T3333] total_swapcached 28672 [ 749.052518][ T3333] total_pgpgin 1192758 [ 749.056583][ T3333] total_pgpgout 1136909 [ 749.060349][ T3938] overlay: Unknown parameter 'default_permissions:func' [ 749.060723][ T3333] total_pgfault 603521 [ 749.071758][ T3333] total_pgmajfault 836 [ 749.076097][ T3333] total_inactive_anon 277258240 [ 749.079085][ T3938] tmpfs: Unknown parameter 'mol' [ 749.080943][ T3333] total_active_anon 37310464 [ 749.080954][ T3333] total_inactive_file 0 [ 749.080961][ T3333] total_active_file 0 [ 749.080968][ T3333] total_unevictable 4096 [ 749.104623][ T3333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.11976,pid=3332,uid=0 [ 749.120132][ T3333] Memory cgroup out of memory: Killed process 3332 (syz.6.11976) total-vm:90164kB, anon-rss:1144kB, file-rss:59520kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 749.158389][ T395] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 749.196878][ T3346] syz.6.11976 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 749.217391][ T3346] CPU: 0 UID: 0 PID: 3346 Comm: syz.6.11976 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 749.217423][ T3346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 749.217435][ T3346] Call Trace: [ 749.217441][ T3346] [ 749.217449][ T3346] __dump_stack+0x21/0x30 [ 749.217478][ T3346] dump_stack_lvl+0x10c/0x190 [ 749.217501][ T3346] ? __cfi_dump_stack_lvl+0x10/0x10 [ 749.217525][ T3346] ? ___ratelimit+0x3f7/0x5a0 [ 749.217550][ T3346] dump_stack+0x19/0x20 [ 749.217573][ T3346] dump_header+0xd7/0x490 [ 749.217591][ T3346] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 749.217615][ T3346] oom_kill_process+0x35d/0x640 [ 749.217636][ T3346] ? sched_clock_cpu+0x75/0x400 [ 749.217660][ T3346] out_of_memory+0x659/0xa80 [ 749.217682][ T3346] ? __cfi_out_of_memory+0x10/0x10 [ 749.217703][ T3346] ? mutex_lock_killable+0x92/0x1c0 [ 749.217721][ T3346] ? __cfi_mutex_lock_killable+0x10/0x10 [ 749.217741][ T3346] mem_cgroup_out_of_memory+0x279/0x350 [ 749.217759][ T3346] ? drain_obj_stock+0xed0/0xed0 [ 749.217777][ T3346] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 749.217794][ T3346] try_charge_memcg+0x8f7/0xde0 [ 749.217819][ T3346] ? __cfi_try_charge_memcg+0x10/0x10 [ 749.217842][ T3346] ? __alloc_pages_noprof+0x31f/0x7b0 [ 749.217866][ T3346] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 749.217889][ T3346] ? __folio_batch_add_and_move+0x2ab/0x370 [ 749.217912][ T3346] __mem_cgroup_charge+0xf6/0x410 [ 749.217937][ T3346] ? _raw_spin_lock+0x8c/0x120 [ 749.217960][ T3346] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 749.217986][ T3346] shmem_alloc_and_add_folio+0x86d/0x1050 [ 749.218010][ T3346] ? put_swap_device+0x130/0x130 [ 749.218031][ T3346] ? shmem_huge_global_enabled+0x2da/0x360 [ 749.218052][ T3346] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 749.218072][ T3346] ? __kasan_check_write+0x18/0x20 [ 749.218105][ T3346] ? _raw_spin_lock+0x8c/0x120 [ 749.218127][ T3346] shmem_get_folio_gfp+0x5f0/0x1380 [ 749.218149][ T3346] ? shmem_get_folio+0xc0/0xc0 [ 749.218167][ T3346] ? follow_page_pte+0xa5c/0xb90 [ 749.218191][ T3346] ? inode_to_bdi+0x6d/0x100 [ 749.218215][ T3346] shmem_write_begin+0xf4/0x270 [ 749.218236][ T3346] generic_perform_write+0x330/0x960 [ 749.218263][ T3346] ? __cfi_generic_perform_write+0x10/0x10 [ 749.218287][ T3346] ? down_write+0xe9/0x2a0 [ 749.218306][ T3346] ? file_update_time+0xa3/0x220 [ 749.218329][ T3346] shmem_file_write_iter+0x105/0x130 [ 749.218358][ T3346] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 749.218382][ T3346] __kernel_write_iter+0x41a/0x8e0 [ 749.218399][ T3346] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 749.218423][ T3346] ? __cfi___kernel_write_iter+0x10/0x10 [ 749.218440][ T3346] ? get_dump_page+0x160/0x220 [ 749.218462][ T3346] ? __asan_memset+0x39/0x50 [ 749.218479][ T3346] ? iov_iter_bvec+0xc0/0x180 [ 749.218502][ T3346] dump_user_range+0xb06/0xdf0 [ 749.218522][ T3346] ? __cfi_dump_emit+0x10/0x10 [ 749.218539][ T3346] ? __cfi_dump_user_range+0x10/0x10 [ 749.218556][ T3346] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 749.218583][ T3346] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 749.218607][ T3346] ? elf_core_dump+0x2368/0x3800 [ 749.218630][ T3346] elf_core_dump+0x2ccc/0x3800 [ 749.218653][ T3346] ? __cfi_elf_core_dump+0x10/0x10 [ 749.218680][ T3346] ? dump_interrupted+0xf0/0xf0 [ 749.218705][ T3346] ? filp_open+0x182/0x1d0 [ 749.218727][ T3346] ? 0xffffffffff600000 [ 749.218742][ T3346] ? freezing_slow_path+0x12b/0x170 [ 749.218767][ T3346] do_coredump+0x1bfa/0x2bd0 [ 749.218794][ T3346] ? __cfi_do_coredump+0x10/0x10 [ 749.218818][ T3346] ? asm_exc_page_fault+0x2b/0x30 [ 749.218844][ T3346] ? __kasan_slab_free+0x6a/0x80 [ 749.218864][ T3346] ? kmem_cache_free+0x1c1/0x510 [ 749.218882][ T3346] ? get_signal+0xa75/0x14f0 [ 749.218905][ T3346] get_signal+0x11fd/0x14f0 [ 749.218929][ T3346] arch_do_signal_or_restart+0x96/0x720 [ 749.218956][ T3346] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 749.218985][ T3346] irqentry_exit_to_user_mode+0x4e/0xb0 [ 749.219006][ T3346] irqentry_exit+0x16/0x60 [ 749.219025][ T3346] exc_page_fault+0x66/0xc0 [ 749.219043][ T3346] asm_exc_page_fault+0x2b/0x30 [ 749.219062][ T3346] RIP: 0033:0x7ff0c284f987 [ 749.219079][ T3346] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 749.219102][ T3346] RSP: 002b:00007ff0c38ae120 EFLAGS: 00010202 [ 749.219120][ T3346] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007ff0c298efc9 [ 749.219135][ T3346] RDX: 00007ff0c38ae140 RSI: 00007ff0c38ae270 RDI: 000000000000000b [ 749.219149][ T3346] RBP: 00007ff0c2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 749.219162][ T3346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 749.219174][ T3346] R13: 00007ff0c2be6038 R14: 00007ff0c2be5fa0 R15: 00007ffe50e8ddd8 [ 749.219191][ T3346] [ 749.219199][ T3346] memory: usage 306024kB, limit 307200kB, failcnt 53340 [ 749.694345][ T3346] memory+swap: usage 381536kB, limit 9007199254740988kB, failcnt 0 [ 749.702287][ T3346] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 749.710105][ T3346] Memory cgroup stats for /syz6: [ 749.710239][ T3346] cache 275492864 [ 749.719656][ T3346] rss 307200 [ 749.722867][ T3346] rss_huge 0 [ 749.726757][ T3346] shmem 275488768 [ 749.730390][ T3346] mapped_file 0 [ 749.733881][ T3346] dirty 0 [ 749.736834][ T3346] writeback 0 [ 749.740110][ T3346] workingset_refault_anon 8595 [ 749.745285][ T3346] workingset_refault_file 0 [ 749.749781][ T3346] swap 115605504 [ 749.776600][ T395] usb 4-1: Using ep0 maxpacket: 32 [ 749.785673][ T395] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 749.801281][ T395] usb 4-1: config 0 has no interface number 0 [ 749.807402][ T395] usb 4-1: config 0 interface 184 has no altsetting 0 [ 749.842186][ T3949] netlink: 'syz.7.12169': attribute type 58 has an invalid length. [ 749.858417][ T3346] swapcached 204800 [ 749.863158][ T3346] pgpgin 1199089 [ 749.866830][ T395] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 749.879343][ T395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.888261][ T395] usb 4-1: Product: syz [ 749.892433][ T395] usb 4-1: Manufacturer: syz [ 749.904502][ T395] usb 4-1: SerialNumber: syz [ 749.910620][ T3346] pgpgout 1152658 [ 749.914262][ T3346] pgfault 603759 [ 749.918103][ T395] usb 4-1: config 0 descriptor?? [ 749.927170][ T395] smsc75xx v1.0.0 [ 749.931692][ T3949] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 749.968466][ T3346] pgmajfault 866 [ 749.972270][ T3346] inactive_anon 167559168 [ 749.989764][ T3346] active_anon 108429312 [ 749.994051][ T3346] inactive_file 0 [ 749.997689][ T3346] active_file 0 [ 750.021756][ T3346] unevictable 4096 [ 750.025524][ T3346] hierarchical_memory_limit 314572800 [ 750.030914][ T3346] hierarchical_memsw_limit 9223372036854771712 [ 750.096349][ T3346] total_cache 275492864 [ 750.100565][ T3346] total_rss 307200 [ 750.136573][ T3346] total_rss_huge 0 [ 750.147332][ T3346] total_shmem 275488768 [ 750.160315][ T3346] total_mapped_file 0 [ 750.213377][ T3346] total_dirty 0 [ 750.217486][ T3346] total_writeback 0 [ 750.232246][ T3346] total_workingset_refault_anon 8595 [ 750.252438][ T3346] total_workingset_refault_file 0 [ 750.298895][ T3346] total_swap 115605504 [ 750.303006][ T3346] total_swapcached 204800 [ 750.341573][ T3346] total_pgpgin 1199089 [ 750.345676][ T3346] total_pgpgout 1152658 [ 750.349832][ T3346] total_pgfault 603759 [ 750.386657][ T3346] total_pgmajfault 866 [ 750.390761][ T3346] total_inactive_anon 167559168 [ 750.399283][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 750.412194][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 750.439585][ T395] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 750.458865][ T395] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 750.461903][ T3346] total_active_anon 108429312 [ 750.475099][ T395] usb 4-1: USB disconnect, device number 100 [ 750.541690][ T3346] total_inactive_file 0 [ 750.563776][ T3346] total_active_file 0 [ 750.569157][ T3346] total_unevictable 4096 [ 750.573781][ T3346] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.11976,pid=3357,uid=0 [ 750.635119][ T3346] Memory cgroup out of memory: Killed process 3357 (syz.6.11976) total-vm:90164kB, anon-rss:1272kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 750.820878][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12175'. [ 751.056313][ T3977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 751.056347][ T3977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:923 [ 751.144456][ T3979] rust_binder: Write failure EINVAL in pid:1227 [ 751.424705][ T4004] can: request_module (can-proto-0) failed. [ 751.461964][ T3997] rust_binder: 930: no such ref 3 [ 751.471361][ T3997] rust_binder: 930: no such ref 1 [ 751.476409][ T3997] rust_binder: Write failure EFAULT in pid:930 [ 751.634409][ T4013] input: syz1 as /devices/virtual/input/input64 [ 752.336452][ T4038] overlayfs: failed to clone lowerpath [ 752.362031][ T4038] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 752.403770][ T4038] overlayfs: missing 'lowerdir' [ 752.520904][ T4055] overlayfs: failed to clone upperpath [ 752.527846][ T4056] overlayfs: failed to clone upperpath [ 752.711149][ T4066] netlink: 'syz.1.12207': attribute type 4 has an invalid length. [ 752.727459][ T4066] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12207'. [ 752.759353][ T4066] fuse: Bad value for 'fd' [ 752.813591][ T36] kauditd_printk_skb: 364 callbacks suppressed [ 752.813607][ T36] audit: type=1400 audit(2016783086.709:88187): avc: denied { associate } for pid=4060 comm="syz.1.12204" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 752.863809][ T36] audit: type=1400 audit(2016783086.747:88188): avc: denied { nlmsg_write } for pid=4067 comm="syz.6.12208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 752.917030][ T36] audit: type=1400 audit(2016783086.813:88189): avc: denied { create } for pid=4069 comm="syz.1.12209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.948480][ T36] audit: type=1400 audit(2016783086.813:88190): avc: denied { setopt } for pid=4069 comm="syz.1.12209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.970604][ T36] audit: type=1400 audit(2016783086.841:88191): avc: denied { getopt } for pid=4069 comm="syz.1.12209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.998495][ T36] audit: type=1400 audit(2016783086.888:88192): avc: denied { mounton } for pid=4077 comm="syz.6.12212" path="/229/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 753.021479][ T36] audit: type=1400 audit(2016783086.888:88193): avc: denied { mount } for pid=4077 comm="syz.6.12212" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 753.047967][ T36] audit: type=1400 audit(2016783086.888:88194): avc: denied { create } for pid=4077 comm="syz.6.12212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 753.069233][ T36] audit: type=1400 audit(2016783086.888:88195): avc: denied { write } for pid=4077 comm="syz.6.12212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 753.090361][ T36] audit: type=1400 audit(2016783086.888:88196): avc: denied { create } for pid=4077 comm="syz.6.12212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 753.630176][ T4090] futex_wake_op: syz.1.12216 tries to shift op by 144; fix this program [ 754.377679][ T4110] : renamed from bond_slave_0 [ 754.946870][ T4145] rust_binder: Write failure EINVAL in pid:941 [ 754.996411][ T4150] rust_binder: Write failure EFAULT in pid:943 [ 755.011591][ T4146] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 755.029139][ T4146] rust_binder: Write failure EINVAL in pid:1236 [ 755.075529][ T4153] rust_binder: Failed copying remainder into alloc: EFAULT [ 755.081903][ T4153] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 755.090124][ T4153] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 755.100100][ T4153] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:946 [ 755.192673][ T4167] cgroup: Name too long [ 755.194039][ T4162] netlink: 'syz.3.12239': attribute type 25 has an invalid length. [ 755.298330][ T4175] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12243'. [ 755.308319][ T4175] incfs: Options parsing error. -22 [ 755.314886][ T4175] incfs: mount failed -22 [ 755.320520][ T4175] 9pnet_fd: Insufficient options for proto=fd [ 756.162284][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12257'. [ 756.183643][ T4210] netlink: 16 bytes leftover after parsing attributes in process `syz.7.12257'. [ 756.194057][ T4210] netlink: 17 bytes leftover after parsing attributes in process `syz.7.12257'. [ 756.203482][ T4210] tipc: Invalid UDP bearer configuration [ 756.203506][ T4210] tipc: Enabling of bearer rejected, failed to enable media [ 757.188341][ T4252] binder: Unknown parameter 'C' [ 757.322166][ T4266] netlink: 488 bytes leftover after parsing attributes in process `syz.6.12277'. [ 757.531519][ T4273] netlink: 580 bytes leftover after parsing attributes in process `syz.6.12279'. [ 758.080866][ T4289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12284'. [ 758.147511][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 758.147528][ T36] audit: type=1400 audit(2016783091.719:88765): avc: denied { read } for pid=4294 comm="syz.7.12286" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 758.176675][ T36] audit: type=1400 audit(2016783091.729:88766): avc: denied { read open } for pid=4294 comm="syz.7.12286" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 758.203997][ T36] audit: type=1400 audit(2016783091.729:88767): avc: denied { ioctl } for pid=4294 comm="syz.7.12286" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 758.230137][ T36] audit: type=1400 audit(2016783091.747:88768): avc: denied { create } for pid=4294 comm="syz.7.12286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.251302][ T36] audit: type=1400 audit(2016783091.747:88769): avc: denied { write } for pid=4294 comm="syz.7.12286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.271834][ T36] audit: type=1400 audit(2016783091.747:88770): avc: denied { read } for pid=4294 comm="syz.7.12286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.293873][ T36] audit: type=1400 audit(2016783091.747:88771): avc: denied { read } for pid=4294 comm="syz.7.12286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 758.300078][ T4300] overlay: ./file0 is not a directory [ 758.314325][ T36] audit: type=1400 audit(2016783091.747:88772): avc: denied { read } for pid=4294 comm="syz.7.12286" dev="nsfs" ino=4026533213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.314351][ T36] audit: type=1400 audit(2016783091.747:88773): avc: denied { read open } for pid=4294 comm="syz.7.12286" path="net:[4026533213]" dev="nsfs" ino=4026533213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 758.321888][ T4299] overlay: ./file0 is not a directory [ 758.341010][ T36] audit: type=1400 audit(2016783091.747:88774): avc: denied { create } for pid=4294 comm="syz.7.12286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 758.449055][ T4306] 9pnet_fd: Insufficient options for proto=fd [ 758.761891][ T395] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 758.900483][ T395] usb 4-1: device descriptor read/64, error -71 [ 759.156264][ T395] usb 4-1: device descriptor read/64, error -71 [ 759.396393][ T4342] 9pnet_fd: Insufficient options for proto=fd [ 759.412090][ T395] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 759.571960][ T395] usb 4-1: device descriptor read/64, error -71 [ 759.838455][ T395] usb 4-1: device descriptor read/64, error -71 [ 759.956096][ T395] usb usb4-port1: attempt power cycle [ 760.210069][ T4387] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.12319'. [ 760.221198][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12319'. [ 760.318058][ T395] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 760.341867][ T395] usb 4-1: device descriptor read/8, error -71 [ 760.480084][ T395] usb 4-1: device descriptor read/8, error -71 [ 760.505062][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12328'. [ 760.590825][ T4420] 9pnet_fd: Insufficient options for proto=fd [ 760.733774][ T395] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 760.768353][ T395] usb 4-1: device descriptor read/8, error -71 [ 760.906979][ T395] usb 4-1: device descriptor read/8, error -71 [ 761.025194][ T395] usb usb4-port1: unable to enumerate USB device [ 761.358429][ T4451] overlayfs: missing 'workdir' [ 761.545111][ T4462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1257 [ 761.582908][ T4464] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 761.592229][ T4464] rust_binder: Error while translating object. [ 761.604258][ T4464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 761.610500][ T4464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1259 [ 761.724071][ T4468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 761.745741][ T4469] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 761.763048][ T4469] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979 [ 761.789350][ T4468] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 761.800847][ T4469] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 761.807680][ T4468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979 [ 762.112929][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.135695][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.149797][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.165886][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=261 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.179604][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.192945][ T4490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4490 comm=syz.3.12354 [ 762.252744][ T4495] rust_binder: Fixups oob 178 180 369 186 [ 762.252771][ T4495] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 762.260096][ T4495] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 762.269077][ T4495] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:990 [ 762.348904][ T4501] SELinux: security_context_str_to_sid () failed with errno=-22 [ 762.515834][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=4515 comm=syz.1.12366 [ 762.656581][ T4521] rust_binder: 1000: no such ref 3 [ 762.663540][ T4521] rust_binder: 1000: no such ref 1 [ 762.668754][ T4521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1000 [ 763.058535][ T4561] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 763.076892][ T4561] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 763.390270][ T4577] rust_binder: inc_ref_done called when no active inc_refs [ 763.427647][ T4580] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 763.435414][ T4580] rust_binder: Read failure Err(EFAULT) in pid:1029 [ 763.557470][ T36] kauditd_printk_skb: 1149 callbacks suppressed [ 763.557490][ T36] audit: type=1400 audit(2016783096.786:89924): avc: denied { read } for pid=4581 comm="syz.3.12385" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 763.593343][ T36] audit: type=1400 audit(2016783096.786:89925): avc: denied { read open } for pid=4581 comm="syz.3.12385" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 763.617533][ T36] audit: type=1400 audit(2016783096.795:89926): avc: denied { read append } for pid=4581 comm="syz.3.12385" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.665090][ T36] audit: type=1400 audit(2016783096.795:89927): avc: denied { read open } for pid=4581 comm="syz.3.12385" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.690500][ T36] audit: type=1400 audit(2016783096.795:89928): avc: denied { ioctl } for pid=4581 comm="syz.3.12385" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.737517][ T36] audit: type=1400 audit(2016783096.795:89929): avc: denied { map } for pid=4581 comm="syz.3.12385" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.762228][ T36] audit: type=1400 audit(2016783096.795:89930): avc: denied { read } for pid=4581 comm="syz.3.12385" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 763.786737][ T36] audit: type=1400 audit(2016783096.795:89931): avc: denied { create } for pid=4581 comm="syz.3.12385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 763.813655][ T36] audit: type=1400 audit(2016783096.814:89932): avc: denied { setopt } for pid=4581 comm="syz.3.12385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 763.828567][ T4601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 764.075710][ T4628] netlink: 'syz.1.12399': attribute type 27 has an invalid length. [ 764.366192][ T4638] netlink: 'syz.1.12403': attribute type 13 has an invalid length. [ 764.675426][ T4653] 9pnet_fd: Insufficient options for proto=fd [ 764.683674][ T4654] 9pnet_fd: Insufficient options for proto=fd [ 764.959101][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12411'. [ 764.969395][ T4662] netlink: 'syz.1.12411': attribute type 4 has an invalid length. [ 765.365159][ T4692] overlayfs: failed to clone upperpath [ 765.563381][ T4705] input: syz1 as /devices/virtual/input/input66 [ 765.791972][ T4720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 765.792003][ T4720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1048 [ 765.891014][ T4729] 9pnet_virtio: no channels available for device syz [ 765.895697][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12435'. [ 766.044488][ T4737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4737 comm=syz.3.12437 [ 766.091429][ T4737] netlink: 'syz.3.12437': attribute type 11 has an invalid length. [ 766.101212][ T4737] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 766.109223][ T4737] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 766.117701][ T4737] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 766.125580][ T4737] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 766.203497][ T4756] netlink: 57 bytes leftover after parsing attributes in process `syz.3.12444'. [ 766.245736][ T4758] rust_binder: 1273: no such ref 2 [ 766.277013][ T4758] rust_binder: 1273: no such ref 0 [ 766.282230][ T4758] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1273 [ 766.313934][ T4765] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 766.346744][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12448'. [ 767.374173][ T45] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 767.436617][ T4804] overlayfs: failed to resolve './file1': -2 [ 767.484157][ T4808] __vm_enough_memory: pid: 4808, comm: syz.7.12461, bytes: 18014402804453376 not enough memory for the allocation [ 767.498949][ T4807] netlink: 260 bytes leftover after parsing attributes in process `syz.7.12461'. [ 767.546856][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.568367][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.580096][ T45] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 767.589910][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.601786][ T45] usb 4-1: config 0 descriptor?? [ 767.765033][ T4830] loop2: detected capacity change from 0 to 7 [ 767.771523][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.780776][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.789752][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.798904][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.807614][ T4830] loop2: unable to read partition table [ 767.813382][ T4830] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 767.834723][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.843907][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.853546][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.862735][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.872907][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.882081][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.891514][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12468'. [ 767.895984][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.909640][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 767.920055][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 767.929219][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.013913][ T4830] loop2: detected capacity change from 7 to 4 [ 768.033168][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 768.043523][ T45] cp2112 0003:10C4:EA90.002D: item fetching failed at offset 5/7 [ 768.054077][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.063262][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.065051][ T45] cp2112 0003:10C4:EA90.002D: parse failed [ 768.077873][ T45] cp2112 0003:10C4:EA90.002D: probe with driver cp2112 failed with error -22 [ 768.082032][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.095799][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.104699][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.162238][ T4838] fuse: Bad value for 'user_id' [ 768.167270][ T4838] fuse: Bad value for 'user_id' [ 768.176568][ T4838] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 768.389372][ T4840] overlayfs: failed to clone lowerpath [ 768.620432][ T4851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=4851 comm=syz.1.12475 [ 768.634514][ T4851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pid=4851 comm=syz.1.12475 [ 768.647538][ T4851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=4851 comm=syz.1.12475 [ 768.660613][ T4851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=4851 comm=syz.1.12475 [ 768.673446][ T4851] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4851 comm=syz.1.12475 [ 768.701349][ T10] usb 4-1: USB disconnect, device number 105 [ 768.803733][ T4866] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 768.821069][ T4866] rust_binder: Write failure EINVAL in pid:1067 [ 768.887899][ T36] kauditd_printk_skb: 556 callbacks suppressed [ 768.887916][ T36] audit: type=1400 audit(2016783101.796:90487): avc: denied { read write open } for pid=4869 comm="syz.3.12480" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 768.925703][ T36] audit: type=1400 audit(2016783101.796:90488): avc: denied { mounton } for pid=4869 comm="syz.3.12480" path="/360/file0" dev="tmpfs" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 768.948848][ T36] audit: type=1400 audit(2016783101.796:90489): avc: denied { mount } for pid=4869 comm="syz.3.12480" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 768.971071][ T36] audit: type=1400 audit(2016783101.833:90490): avc: denied { create } for pid=4876 comm="syz.1.12482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 768.991978][ T36] audit: type=1400 audit(2016783101.833:90491): avc: denied { read } for pid=4876 comm="syz.1.12482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 769.002690][ T4877] __vm_enough_memory: pid: 4877, comm: syz.3.12480, bytes: 18014402804453376 not enough memory for the allocation [ 769.012654][ T36] audit: type=1400 audit(2016783101.899:90492): avc: denied { map } for pid=4869 comm="syz.3.12480" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 769.054585][ T36] audit: type=1400 audit(2016783101.899:90493): avc: denied { read } for pid=4869 comm="syz.3.12480" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 769.084929][ T36] audit: type=1400 audit(2016783101.946:90494): avc: denied { write } for pid=4876 comm="syz.1.12482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 769.132806][ T36] audit: type=1400 audit(2016783101.946:90495): avc: denied { write } for pid=4876 comm="syz.1.12482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 769.184265][ T36] audit: type=1400 audit(2016783101.946:90496): avc: denied { name_bind } for pid=4881 comm="syz.6.12483" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 769.283903][ T4895] x_tables: duplicate underflow at hook 1 [ 769.495246][ T45] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 769.657068][ T45] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 769.668301][ T45] usb 4-1: config 1 interface 0 has no altsetting 0 [ 769.678521][ T45] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 769.687799][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.695801][ T45] usb 4-1: Product: 룵Ŝ퉀䞩쀢ᇉ灄ꇞ捝癬帱☻졇ᓳ茏秢꽠ћ䠏ृ엶唋勖麻ଥ蛷沊멊춗鍍⋫矑亽ẕ讫徧屑弐乀鮆푩ᚬ틝芎 [ 769.712357][ T45] usb 4-1: Manufacturer: ꖮ褢᙭꿆烵벣竨聏禎㭼營亚䊴ꐅ嬠｜鐥礈 [ 769.721777][ T45] usb 4-1: SerialNumber: ㍊狗흄ꍷᭋ⋔䨕啧㹐후撜غ쳟牝ꬮ䶮입❽爜넖钔䶬㜓䙇a磀词⫑ᣆ猪ୱ쪧૆輪ᅨ뇄驽躟쐅ꑅ졬㿴༶阒肾鸚豧⫢኏ﮭ좸ς쀰뤉禿屔텮荁喝ᜰ遫袺栃ቁ扨㙚㕓莇阣훖옶㚘㫓ᢆ↖펮㠢먞勶캵앇᜖䘾҉ⷞ᣽㛙ૣ렃懥躡梳䙰腞쉀䆹ʬ褶┖뾳鍁꒴奦 [ 769.745640][ T4917] netlink: 164 bytes leftover after parsing attributes in process `syz.6.12495'. [ 769.999818][ T45] usbhid 4-1:1.0: can't add hid device: -71 [ 770.005810][ T45] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 770.017754][ T45] usb 4-1: USB disconnect, device number 106 [ 770.626023][ T4958] overlayfs: failed to resolve './file1': -2 [ 770.666385][ T4961] overlayfs: failed to clone upperpath [ 770.923967][ T4993] overlayfs: failed to clone upperpath [ 771.115386][ T10] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 771.277816][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 771.286434][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 771.295462][ T10] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 771.303894][ T10] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 771.312112][ T10] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 771.321254][ T10] usb 4-1: config 129 has no interface number 0 [ 771.327497][ T10] usb 4-1: config 129 has no interface number 1 [ 771.333770][ T10] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 771.347012][ T10] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 771.357986][ T10] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 771.371225][ T10] usb 4-1: config 129 interface 135 has no altsetting 0 [ 771.378182][ T10] usb 4-1: config 129 interface 5 has no altsetting 0 [ 771.390528][ T10] usb 4-1: string descriptor 0 read error: -22 [ 771.396804][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 771.405872][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.417904][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 771.795651][ T5011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 771.795927][ T5011] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 772.161920][ T5047] overlayfs: failed to resolve './file0': -2 [ 772.166123][ T5048] overlayfs: failed to resolve './file0': -2 [ 772.177304][ T628] usb 4-1: USB disconnect, device number 107 [ 772.314047][ T5054] rust_binder: Error while translating object. [ 772.314075][ T5054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 772.320706][ T5054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1089 [ 772.592400][ T5082] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 772.615596][ T5083] /dev/nullb0: Can't lookup blockdev [ 772.621686][ T5082] /dev/nullb0: Can't lookup blockdev [ 772.652393][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12554'. [ 772.662827][ T5085] netlink: 'syz.1.12554': attribute type 1 has an invalid length. [ 773.522731][ T5117] binder: Unknown parameter '' [ 773.791450][T22855] Bluetooth: hci0: Frame reassembly failed (-84) [ 773.941052][ T5130] netlink: 182 bytes leftover after parsing attributes in process `syz.1.12570'. [ 774.031136][ T5134] overlayfs: lower data-only dirs require metacopy support. [ 774.046959][ T508] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 774.185085][ T508] usb 4-1: device descriptor read/64, error -71 [ 774.234826][ T36] kauditd_printk_skb: 600 callbacks suppressed [ 774.234844][ T36] audit: type=1400 audit(2016783106.806:91097): avc: denied { mounton } for pid=5147 comm="syz.1.12577" path="/294/file0" dev="tmpfs" ino=1617 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 774.306905][ T36] audit: type=1400 audit(2016783106.881:91098): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.338594][ T36] audit: type=1400 audit(2016783106.881:91099): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.364349][ T36] audit: type=1400 audit(2016783106.899:91100): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.389546][ T36] audit: type=1400 audit(2016783106.899:91101): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.415352][ T36] audit: type=1400 audit(2016783106.909:91102): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.437966][ T5155] bridge0: port 3(macsec0) entered blocking state [ 774.441348][ T36] audit: type=1400 audit(2016783106.909:91103): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.464041][ T5155] bridge0: port 3(macsec0) entered disabled state [ 774.472663][ T36] audit: type=1400 audit(2016783106.909:91104): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.500036][ T5155] macsec0: entered allmulticast mode [ 774.503390][ T508] usb 4-1: device descriptor read/64, error -71 [ 774.516273][ T36] audit: type=1400 audit(2016783106.984:91105): avc: denied { ioctl } for pid=5125 comm="syz.3.12568" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 774.526154][ T5155] veth1_macvtap: entered allmulticast mode [ 774.548058][ T5155] macsec0: entered promiscuous mode [ 774.553470][ T5155] bridge0: port 3(macsec0) entered blocking state [ 774.559929][ T5155] bridge0: port 3(macsec0) entered listening state [ 774.595132][ T36] audit: type=1400 audit(2016783107.153:91106): avc: denied { execmem } for pid=5161 comm="syz.1.12581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 774.771371][ T508] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 774.920541][ T508] usb 4-1: device descriptor read/64, error -71 [ 775.176329][ T508] usb 4-1: device descriptor read/64, error -71 [ 775.293649][ T508] usb usb4-port1: attempt power cycle [ 775.655956][ T508] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 775.679628][ T508] usb 4-1: device descriptor read/8, error -71 [ 775.818153][ T508] usb 4-1: device descriptor read/8, error -71 [ 775.933106][T30228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 775.933342][ T607] Bluetooth: hci0: command 0x1003 tx timeout [ 776.071652][ T508] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 776.095344][ T508] usb 4-1: device descriptor read/8, error -71 [ 776.240428][ T508] usb 4-1: device descriptor read/8, error -71 [ 776.324712][ T5210] rust_binder: Fixups oob 178 180 369 186 [ 776.324736][ T5210] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 776.331250][ T5210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 776.340637][ T5210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1342 [ 776.359955][ T508] usb usb4-port1: unable to enumerate USB device [ 777.087693][ T5217] Invalid ELF header magic: != ELF [ 777.120881][ T5219] binder: Unknown parameter 'fscontext?}' [ 777.122264][ T5220] binder: Unknown parameter 'fscontext?}' [ 777.466329][ T5240] rust_binder: Write failure EFAULT in pid:1125 [ 777.851678][ T10] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 778.032830][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 778.039971][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 778.049932][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.066563][ T10] usb 4-1: config 0 descriptor?? [ 778.167490][ T5261] overlayfs: failed to clone upperpath [ 778.197406][ T5266] 9pnet_fd: Insufficient options for proto=fd [ 778.408369][ T5292] overlayfs: missing 'workdir' [ 778.415404][ T5292] overlayfs: failed to clone lowerpath [ 778.526728][ T10] lenovo 0003:17EF:60B5.002E: unknown main item tag 0x0 [ 778.533739][ T10] lenovo 0003:17EF:60B5.002E: unknown main item tag 0x0 [ 778.551432][ T10] lenovo 0003:17EF:60B5.002E: unknown main item tag 0x0 [ 778.563735][ T10] lenovo 0003:17EF:60B5.002E: unknown main item tag 0x0 [ 778.570851][ T10] lenovo 0003:17EF:60B5.002E: unknown main item tag 0x0 [ 778.587252][ T10] lenovo 0003:17EF:60B5.002E: hidraw1: USB HID v0.05 Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 778.744189][ T5242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 778.744221][ T5242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1127 [ 778.769721][ T10] usb 4-1: USB disconnect, device number 112 [ 779.021583][ T5300] cgroup: subsys name conflicts with all [ 779.460527][ T5315] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 779.575591][ T36] kauditd_printk_skb: 405 callbacks suppressed [ 779.575630][ T36] audit: type=1400 audit(2016783111.816:91512): avc: denied { create } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 779.609794][ T36] audit: type=1400 audit(2016783111.816:91513): avc: denied { name_bind } for pid=5327 comm="syz.1.12635" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 779.631800][ T36] audit: type=1400 audit(2016783111.816:91514): avc: denied { node_bind } for pid=5327 comm="syz.1.12635" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 779.654200][ T36] audit: type=1400 audit(2016783111.816:91515): avc: denied { create } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 779.674894][ T36] audit: type=1400 audit(2016783111.816:91516): avc: denied { write } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 779.695668][ T36] audit: type=1400 audit(2016783111.816:91517): avc: denied { read } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 779.716329][ T36] audit: type=1400 audit(2016783111.816:91518): avc: denied { read } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 779.736937][ T36] audit: type=1400 audit(2016783111.825:91519): avc: denied { create } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 779.757202][ T36] audit: type=1400 audit(2016783111.825:91520): avc: denied { create } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 779.778109][ T36] audit: type=1400 audit(2016783111.825:91521): avc: denied { write } for pid=5327 comm="syz.1.12635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 779.987180][ T5365] overlayfs: failed to clone upperpath [ 780.015394][ T5367] overlayfs: failed to clone upperpath [ 780.733886][ T5407] netlink: 56 bytes leftover after parsing attributes in process `syz.6.12664'. [ 780.743540][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12664'. [ 781.316034][ T45] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 781.486266][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 781.494995][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.507504][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.517774][ T45] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 781.528184][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.538302][ T45] usb 4-1: config 0 descriptor?? [ 781.795742][ T45] usbhid 4-1:0.0: can't add hid device: -71 [ 781.801731][ T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 781.814199][ T45] usb 4-1: USB disconnect, device number 113 [ 781.883037][ T5485] rust_binder: Error while translating object. [ 781.883077][ T5485] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 781.898860][ T5485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1149 [ 781.926549][ T5490] overlayfs: failed to clone lowerpath [ 781.963075][ T5492] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 782.002238][ T5497] netlink: 'syz.1.12692': attribute type 12 has an invalid length. [ 782.059527][T22854] Bluetooth: hci0: Frame reassembly failed (-84) [ 782.311504][ T5520] 9pnet_fd: Insufficient options for proto=fd [ 783.152093][ T5561] overlayfs: failed to clone upperpath [ 783.162533][ T5561] fuse: Unknown parameter 'groupA [ 783.162533][ T5561] 00000000000000000000' [ 784.204274][T30228] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 784.204334][T32484] Bluetooth: hci0: command 0x1003 tx timeout [ 784.450820][ T5583] netlink: 'syz.1.12725': attribute type 4 has an invalid length. [ 784.472545][ T5583] netlink: 'syz.1.12725': attribute type 4 has an invalid length. [ 784.522390][ T5589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1165 [ 784.663086][ T5594] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 784.680017][ T5594] rust_binder: Write failure EINVAL in pid:1170 [ 784.770041][ T5603] 9pnet_fd: Insufficient options for proto=fd [ 784.844569][ T5610] 9pnet_fd: Insufficient options for proto=fd [ 784.907801][ T36] kauditd_printk_skb: 625 callbacks suppressed [ 784.907816][ T36] audit: type=1400 audit(2016783116.816:92147): avc: denied { read write open } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.913798][ T5615] overlayfs: failed to clone upperpath [ 784.920307][ T36] audit: type=1400 audit(2016783116.826:92148): avc: denied { read write } for pid=28719 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 784.974276][ T5616] overlayfs: failed to clone upperpath [ 784.976781][ T36] audit: type=1400 audit(2016783116.826:92149): avc: denied { read write open } for pid=28719 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 785.025131][ T5621] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 785.032363][ T5621] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 785.032739][ T36] audit: type=1400 audit(2016783116.826:92150): avc: denied { ioctl } for pid=28719 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 785.067702][ T36] audit: type=1400 audit(2016783116.826:92151): avc: denied { mounton } for pid=5614 comm="syz.1.12735" path="/362/bus" dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 785.075043][ T5623] rust_binder: 1181: no such ref 0 [ 785.091418][ T36] audit: type=1400 audit(2016783116.826:92152): avc: denied { ioctl } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 785.107496][ T5619] rust_binder: Error while translating object. [ 785.123618][ T36] audit: type=1400 audit(2016783116.891:92153): avc: denied { mounton } for pid=5614 comm="syz.1.12735" path="/362/bus" dev="tmpfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 785.152853][ T5619] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 785.152889][ T5619] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1373 [ 785.198682][ T36] audit: type=1400 audit(2016783116.919:92154): avc: denied { create } for pid=5614 comm="syz.1.12735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 785.270830][ T36] audit: type=1400 audit(2016783116.919:92156): avc: denied { read } for pid=5617 comm="syz.3.12736" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 785.294270][ T36] audit: type=1400 audit(2016783116.919:92157): avc: denied { read open } for pid=5617 comm="syz.3.12736" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 785.419002][ T5643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 785.419036][ T5643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1188 [ 785.782007][ T5667] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 786.101485][ T10] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 786.161038][ T5676] 9pnet_fd: Insufficient options for proto=fd [ 786.287045][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 786.296497][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.304520][ T10] usb 4-1: Product: syz [ 786.308674][ T10] usb 4-1: Manufacturer: syz [ 786.313240][ T10] usb 4-1: SerialNumber: syz [ 786.319305][ T10] usb 4-1: config 0 descriptor?? [ 786.922712][ T10] usb 4-1: USB disconnect, device number 114 [ 787.543856][ T5711] netlink: 'syz.6.12770': attribute type 1 has an invalid length. [ 787.658121][ T5719] overlayfs: conflicting options: nfs_export=on,index=off [ 787.910867][ T5728] netlink: 'syz.1.12776': attribute type 4 has an invalid length. [ 787.919093][ T5728] netlink: 'syz.1.12776': attribute type 5 has an invalid length. [ 787.926910][ T5728] netlink: 'syz.1.12776': attribute type 1 has an invalid length. [ 787.934761][ T5729] netlink: 'syz.1.12776': attribute type 4 has an invalid length. [ 787.942559][ T5729] netlink: 'syz.1.12776': attribute type 5 has an invalid length. [ 787.950390][ T5729] netlink: 'syz.1.12776': attribute type 1 has an invalid length. [ 787.988256][ T5731] overlayfs: failed to clone lowerpath [ 787.997247][ T5731] overlayfs: failed to clone lowerpath [ 788.219410][ T5751] rust_binder: Error while translating object. [ 788.219431][ T5751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 788.226380][ T5751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1230 [ 788.268469][ T5753] __vm_enough_memory: pid: 5753, comm: syz.3.12784, bytes: 18014402804453376 not enough memory for the allocation [ 788.328539][ T5756] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 788.336587][ T5756] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 788.345136][ T5756] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 788.353106][ T5756] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 788.915366][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 788.926025][ T5779] rust_binder: Error while translating object. [ 788.926066][ T5779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 788.932250][ T5779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1386 [ 789.088599][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.108492][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.119600][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 789.129086][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.137234][ T10] usb 4-1: SerialNumber: syz [ 789.360999][ T5767] exFAT-fs (rnullb0): invalid boot record signature [ 789.367668][ T5767] exFAT-fs (rnullb0): failed to read boot sector [ 789.374029][ T5767] exFAT-fs (rnullb0): failed to recognize exfat type [ 789.383054][ T10] usb 4-1: 0:2 : does not exist [ 789.388123][ T10] usb 4-1: unit 255 not found! [ 789.398451][ T10] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 789.408045][ T10] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 789.417590][ T10] usb 4-1: 5:0: cannot get min/max values for control 6 (id 5) [ 789.427818][ T10] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 789.438161][ T10] usb 4-1: USB disconnect, device number 115 [ 789.476070][T25031] udevd[25031]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 789.545126][ T5789] loop2: detected capacity change from 0 to 7 [ 789.551653][ C1] blk_print_req_error: 3 callbacks suppressed [ 789.551670][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.566957][ C1] buffer_io_error: 2 callbacks suppressed [ 789.566974][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.582275][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.591441][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.599288][ T5789] loop2: unable to read partition table [ 789.605283][ T5789] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 789.642042][ T5790] loop2: detected capacity change from 7 to 4 [ 789.656595][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 789.666254][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.675391][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.684280][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.693439][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.703747][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.712894][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.721650][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.730803][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.739997][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 789.749177][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 789.959598][ T5796] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 789.968457][ T5796] rust_binder: Write failure EINVAL in pid:1248 [ 790.191040][ T5816] rust_binder: Write failure EINVAL in pid:1260 [ 790.248809][ T36] kauditd_printk_skb: 559 callbacks suppressed [ 790.248858][ T36] audit: type=1400 audit(2016783121.836:92695): avc: denied { setopt } for pid=5817 comm="syz.3.12807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 790.291634][ T36] audit: type=1400 audit(2016783121.882:92696): avc: denied { read write } for pid=32377 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.317376][ T36] audit: type=1400 audit(2016783121.882:92697): avc: denied { read write open } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.376622][ T36] audit: type=1400 audit(2016783121.882:92698): avc: denied { ioctl } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 790.403750][ T36] audit: type=1400 audit(2016783121.939:92699): avc: denied { create } for pid=5826 comm="syz.1.12810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.417853][ T5833] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12811'. [ 790.423772][ T36] audit: type=1400 audit(2016783121.939:92700): avc: denied { create } for pid=5826 comm="syz.1.12810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.453224][ T36] audit: type=1400 audit(2016783121.939:92701): avc: denied { setopt } for pid=5826 comm="syz.1.12810" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.473838][ T36] audit: type=1400 audit(2016783121.939:92702): avc: denied { create } for pid=5826 comm="syz.1.12810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.493641][ T36] audit: type=1400 audit(2016783121.939:92703): avc: denied { create } for pid=5826 comm="syz.1.12810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.514603][ T36] audit: type=1400 audit(2016783121.939:92704): avc: denied { connect } for pid=5826 comm="syz.1.12810" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 790.855290][ C0] bridge0: port 3(macsec0) entered learning state [ 791.262111][ T5894] netlink: 76 bytes leftover after parsing attributes in process `syz.7.12831'. [ 791.271385][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12831'. [ 791.382025][ T5901] loop2: detected capacity change from 0 to 7 [ 791.456305][ T5907] exFAT-fs (rnullb0): invalid boot record signature [ 791.474462][ T5907] exFAT-fs (rnullb0): failed to read boot sector [ 791.483267][ T5907] exFAT-fs (rnullb0): failed to recognize exfat type [ 791.572580][ T5914] rust_binder: Error while translating object. [ 791.572631][ T5914] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 791.578829][ T5914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:1278 [ 791.627781][ T5918] overlayfs: failed to clone lowerpath [ 791.654166][ T5918] overlayfs: failed to clone lowerpath [ 791.895022][ T5936] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 791.979928][ T5945] netlink: 'syz.6.12851': attribute type 2 has an invalid length. [ 792.571645][ T5980] overlayfs: failed to resolve './cgroup/cgroup.procs': -2 [ 792.774530][ T5987] kvm: user requested TSC rate below hardware speed [ 792.821730][ T5992] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12867'. [ 792.887440][ T5993] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2573 sclass=netlink_xfrm_socket pid=5993 comm=syz.3.12867 [ 792.925079][ T5993] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 793.325039][ T6020] 9pnet_fd: Insufficient options for proto=fd [ 793.768314][ T6022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 793.768348][ T6022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1292 [ 793.878307][ T6024] rust_binder: Write failure EFAULT in pid:1294 [ 794.146626][ T6036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1297 [ 794.230099][ T6050] netlink: 'syz.1.12887': attribute type 2 has an invalid length. [ 794.596954][ T6077] overlayfs: failed to clone lowerpath [ 794.659999][ T6084] overlayfs: failed to clone lowerpath [ 794.660013][ T6085] overlayfs: failed to clone lowerpath [ 795.061118][ T6107] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 795.125769][ T6109] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 264) [ 795.125793][ T6109] rust_binder: Error while translating object. [ 795.136518][ T6109] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 795.142713][ T6109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1307 [ 795.693367][ T36] kauditd_printk_skb: 721 callbacks suppressed [ 795.693383][ T36] audit: type=1400 audit(2016783126.939:93426): avc: denied { read write } for pid=32377 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.775809][ T36] audit: type=1400 audit(2016783126.939:93427): avc: denied { read write open } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.819168][ T36] audit: type=1400 audit(2016783126.939:93428): avc: denied { ioctl } for pid=32377 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 795.844911][ T36] audit: type=1400 audit(2016783127.043:93429): avc: denied { read write } for pid=6118 comm="syz.3.12911" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.868726][ T36] audit: type=1400 audit(2016783127.043:93430): avc: denied { read write open } for pid=6118 comm="syz.3.12911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.897486][ T36] audit: type=1400 audit(2016783127.043:93431): avc: denied { ioctl } for pid=6118 comm="syz.3.12911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.932157][ T36] audit: type=1400 audit(2016783127.043:93432): avc: denied { ioctl } for pid=6118 comm="syz.3.12911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.980261][ T36] audit: type=1400 audit(2016783127.043:93433): avc: denied { ioctl } for pid=6118 comm="syz.3.12911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 796.015855][ T36] audit: type=1400 audit(2016783127.043:93434): avc: denied { ioctl } for pid=6118 comm="syz.3.12911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 796.046055][ T45] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 796.060039][ T36] audit: type=1400 audit(2016783127.071:93435): avc: denied { create } for pid=6121 comm="syz.7.12912" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 796.205972][ T45] usb 4-1: device descriptor read/64, error -71 [ 796.214577][ T6153] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12919'. [ 796.461738][ T45] usb 4-1: device descriptor read/64, error -71 [ 796.510280][ T6164] netlink: 9 bytes leftover after parsing attributes in process `syz.7.12924'. [ 796.519555][ T6164] gretap0: entered promiscuous mode [ 796.728232][ T45] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 796.866788][ T45] usb 4-1: device descriptor read/64, error -71 [ 797.122588][ T45] usb 4-1: device descriptor read/64, error -71 [ 797.240284][ T45] usb usb4-port1: attempt power cycle [ 797.324068][ T6219] overlayfs: failed to clone upperpath [ 797.455622][ T6230] netlink: 'syz.7.12948': attribute type 1 has an invalid length. [ 797.603585][ T45] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 797.633772][ T6243] overlayfs: missing 'lowerdir' [ 797.640958][ T45] usb 4-1: device descriptor read/8, error -71 [ 797.648186][ T6243] fuse: Bad value for 'fd' [ 797.652068][ T6244] fuse: Bad value for 'fd' [ 797.785495][ T45] usb 4-1: device descriptor read/8, error -71 [ 798.049892][ T45] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 798.073961][ T45] usb 4-1: device descriptor read/8, error -71 [ 798.120600][ T6280] netlink: 'syz.6.12965': attribute type 27 has an invalid length. [ 798.222572][ T45] usb 4-1: device descriptor read/8, error -71 [ 798.337771][ T45] usb usb4-port1: unable to enumerate USB device [ 798.746059][ T6293] overlayfs: failed to clone upperpath [ 799.422918][ T6312] futex_wake_op: syz.1.12977 tries to shift op by -1; fix this program [ 800.019930][ T6336] rust_binder: got new transaction with bad transaction stack [ 800.019951][ T6336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1327 [ 800.231713][ T6340] fuse: Bad value for 'fd' [ 800.705852][ T6378] fuse: Unknown parameter 'p_Vd' [ 801.059005][ T36] kauditd_printk_skb: 1019 callbacks suppressed [ 801.059023][ T36] audit: type=1400 audit(2016783131.981:94455): avc: denied { create } for pid=6418 comm="syz.7.13002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.095134][ T36] audit: type=1400 audit(2016783131.981:94456): avc: denied { setopt } for pid=6418 comm="syz.7.13002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.114997][ T36] audit: type=1400 audit(2016783131.981:94457): avc: denied { bind } for pid=6418 comm="syz.7.13002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.134700][ T36] audit: type=1400 audit(2016783131.981:94458): avc: denied { name_bind } for pid=6418 comm="syz.7.13002" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 801.155827][ T36] audit: type=1400 audit(2016783131.981:94459): avc: denied { node_bind } for pid=6418 comm="syz.7.13002" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 801.178912][ T36] audit: type=1400 audit(2016783131.981:94460): avc: denied { connect } for pid=6418 comm="syz.7.13002" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.202567][ T36] audit: type=1400 audit(2016783131.981:94461): avc: denied { write } for pid=6418 comm="syz.7.13002" path="socket:[147834]" dev="sockfs" ino=147834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.226345][ T36] audit: type=1400 audit(2016783131.981:94462): avc: denied { write } for pid=6418 comm="syz.7.13002" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.252155][ T36] audit: type=1400 audit(2016783131.981:94463): avc: denied { setopt } for pid=6418 comm="syz.7.13002" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.280118][ T36] audit: type=1400 audit(2016783131.981:94464): avc: denied { setopt } for pid=6418 comm="syz.7.13002" laddr=127.0.0.1 lport=20001 faddr=127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 801.518009][ T6429] overlayfs: failed to clone upperpath [ 801.571594][ T6436] overlayfs: failed to clone upperpath [ 802.147165][ T6498] fuse: Bad value for 'group_id' [ 802.148338][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13023'. [ 802.152131][ T6498] fuse: Bad value for 'group_id' [ 802.166079][ T6499] macsec0: left allmulticast mode [ 802.171091][ T6499] veth1_macvtap: left allmulticast mode [ 802.176656][ T6499] macsec0: left promiscuous mode [ 802.181684][ T6499] bridge0: port 3(macsec0) entered disabled state [ 802.188764][ T6499] bridge_slave_1: left allmulticast mode [ 802.194467][ T6499] bridge_slave_1: left promiscuous mode [ 802.200161][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.207834][ T6499] bridge_slave_0: left allmulticast mode [ 802.213502][ T6499] bridge_slave_0: left promiscuous mode [ 802.219210][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.895631][ T6525] overlayfs: failed to clone upperpath [ 802.982426][ T6533] netlink: 'syz.6.13036': attribute type 25 has an invalid length. [ 803.035526][ T6539] sit0: entered promiscuous mode [ 803.041992][ T6539] netlink: 'syz.1.13038': attribute type 1 has an invalid length. [ 803.051500][ T6539] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13038'. [ 803.204529][ T6549] netlink: 316 bytes leftover after parsing attributes in process `syz.7.13042'. [ 803.214231][ T6549] netlink: 316 bytes leftover after parsing attributes in process `syz.7.13042'. [ 803.248462][ T6551] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13043'. [ 803.543078][ T6574] netlink: 'syz.3.13049': attribute type 15 has an invalid length. [ 803.551038][ T6574] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13049'. [ 803.561167][ T6574] netlink: 'syz.3.13049': attribute type 1 has an invalid length. [ 803.569014][ T6574] netlink: 'syz.3.13049': attribute type 2 has an invalid length. [ 803.674383][ T6585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3821099475 (7642198950 ns) > initial count (2842047336 ns). Using initial count to start timer. [ 803.908710][ T6607] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13063'. [ 804.172559][ T6635] binder: Binderfs stats mode cannot be changed during a remount [ 804.257294][ T6648] 9pnet_fd: p9_fd_create_tcp (6648): problem connecting socket to 127.0.0.1 [ 804.461213][ T6665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 804.461255][ T6665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1353 [ 805.201169][ T6726] tipc: Started in network mode [ 805.215666][ T6726] tipc: Node identity ac14140f, cluster identity 4711 [ 805.222925][ T6726] tipc: New replicast peer: 255.255.255.255 [ 805.229078][ T6726] tipc: Enabled bearer , priority 10 [ 805.552098][ T6746] can: request_module (can-proto-3) failed. [ 805.563550][ T6746] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 805.571507][ T6746] rust_binder: Write failure EINVAL in pid:1361 [ 805.608939][ T6750] binder: Bad value for 'stats' [ 805.899165][ T6770] rust_binder: Write failure EINVAL in pid:1371 [ 805.940330][ T6773] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1373 [ 805.982898][ T6773] rust_binder: Read failure Err(EFAULT) in pid:1373 [ 806.144976][ T6794] overlayfs: failed to clone upperpath [ 806.304066][ T6813] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.13127'. [ 806.396179][ T36] kauditd_printk_skb: 538 callbacks suppressed [ 806.396197][ T36] audit: type=1400 audit(2016783136.991:95003): avc: denied { create } for pid=6820 comm="syz.7.13130" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 806.426911][ T397] tipc: Node number set to 2886997007 [ 806.438642][ T36] audit: type=1400 audit(2016783136.991:95004): avc: denied { read write } for pid=6824 comm="syz.3.13131" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 806.463141][ T36] audit: type=1400 audit(2016783136.991:95005): avc: denied { read write open } for pid=6824 comm="syz.3.13131" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 806.490861][ T36] audit: type=1400 audit(2016783137.000:95006): avc: denied { mounton } for pid=6824 comm="syz.3.13131" path="/465/file0" dev="tmpfs" ino=2544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 806.513776][ T36] audit: type=1400 audit(2016783137.000:95007): avc: denied { mount } for pid=6824 comm="syz.3.13131" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 806.536021][ T36] audit: type=1400 audit(2016783137.000:95008): avc: denied { read write } for pid=6824 comm="syz.3.13131" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 806.559807][ T36] audit: type=1400 audit(2016783137.000:95009): avc: denied { read write open } for pid=6824 comm="syz.3.13131" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 806.584325][ T36] audit: type=1400 audit(2016783137.000:95010): avc: denied { unmount } for pid=6824 comm="syz.3.13131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 806.604406][ T36] audit: type=1400 audit(2016783137.000:95011): avc: denied { ioctl } for pid=6824 comm="syz.3.13131" path="/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 806.628984][ T36] audit: type=1400 audit(2016783137.019:95012): avc: denied { create } for pid=6820 comm="syz.7.13130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 807.161999][ T6874] tipc: Enabling of bearer rejected, media not registered [ 807.208856][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13149'. [ 807.369855][ T6888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 807.378693][ T6888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 807.883019][ T6914] netlink: 'syz.3.13162': attribute type 1 has an invalid length. [ 807.891125][ T6914] netlink: 'syz.3.13162': attribute type 2 has an invalid length. [ 808.622483][ T6950] 9pnet_fd: Insufficient options for proto=fd [ 808.796866][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13177'. [ 809.360424][ T6982] batadv_slave_1: entered promiscuous mode [ 809.374009][ T6984] netlink: 148 bytes leftover after parsing attributes in process `syz.3.13187'. [ 809.385806][ T6981] batadv_slave_1: left promiscuous mode [ 809.729450][ T7029] 9pnet_fd: Insufficient options for proto=fd [ 811.025718][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13216'. [ 811.664160][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.671211][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.678413][ T7088] bridge_slave_0: entered allmulticast mode [ 811.684940][ T7088] bridge_slave_0: entered promiscuous mode [ 811.691944][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.698996][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.706070][ T7088] bridge_slave_1: entered allmulticast mode [ 811.712243][ T7088] bridge_slave_1: entered promiscuous mode [ 811.740272][ T36] kauditd_printk_skb: 998 callbacks suppressed [ 811.740288][ T36] audit: type=1400 audit(2016783142.001:96011): avc: denied { sys_module } for pid=7088 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 811.768053][ T36] audit: type=1400 audit(2016783142.001:96012): avc: denied { sys_module } for pid=7088 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 811.813133][ T36] audit: type=1400 audit(2016783142.067:96013): avc: denied { create } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.834062][ T36] audit: type=1400 audit(2016783142.067:96014): avc: denied { write } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.856074][ T36] audit: type=1400 audit(2016783142.067:96015): avc: denied { read } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.886085][ T36] audit: type=1400 audit(2016783142.067:96016): avc: denied { read } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.892033][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.907097][ T36] audit: type=1400 audit(2016783142.067:96017): avc: denied { write } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.913672][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.934304][ T36] audit: type=1400 audit(2016783142.085:96018): avc: denied { read } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.941512][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.968324][ T36] audit: type=1400 audit(2016783142.085:96019): avc: denied { write } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 811.968967][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.990409][ T36] audit: type=1400 audit(2016783142.104:96020): avc: denied { read } for pid=7088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 812.112198][T22857] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.130967][T22857] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.149005][T22857] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.156087][T22857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.174267][ T7112] netlink: 252 bytes leftover after parsing attributes in process `syz.6.13229'. [ 812.185180][ T7112] IPv6: NLM_F_CREATE should be specified when creating new route [ 812.199133][ T7117] overlayfs: failed to clone upperpath [ 812.205909][T22857] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.212956][T22857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.349351][ T7088] veth0_vlan: entered promiscuous mode [ 812.379316][ T7132] overlayfs: failed to clone upperpath [ 812.393180][ T7088] veth1_macvtap: entered promiscuous mode [ 812.548419][ T7139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 812.833011][ T7154] overlay: Bad value for 'uuid' [ 812.993287][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13246'. [ 813.212687][ T7184] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:22 [ 813.563677][ T7192] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 814.196673][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13276'. [ 814.207005][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13276'. [ 814.248447][ T7265] overlayfs: failed to clone upperpath [ 814.625339][ T7301] overlay: ./file0 is not a directory [ 814.684687][ T7308] netlink: 176 bytes leftover after parsing attributes in process `syz.1.13292'. [ 815.523051][ T7314] rust_binder: Error while translating object. [ 815.523097][ T7314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 815.529434][ T7314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:33 [ 815.622639][ T7318] overlayfs: failed to clone lowerpath [ 815.677662][ T7324] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 815.691614][ T7318] overlayfs: failed to clone lowerpath [ 815.695875][ T7324] rust_binder: Write failure EINVAL in pid:39 [ 815.723240][ T7318] overlayfs: failed to clone lowerpath [ 815.789612][ T7329] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 815.789644][ T7329] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 815.814451][ T7333] fuse: Bad value for 'user_id' [ 815.844527][ T7333] fuse: Bad value for 'user_id' [ 815.966874][ T7341] loop5: detected capacity change from 0 to 7 [ 816.127328][ T7364] overlayfs: failed to clone upperpath [ 816.221189][ T7366] overlay: Unknown parameter 'smackfstransmute' [ 816.255851][ T7366] overlayfs: failed to clone upperpath [ 816.481027][ T7383] cgroup: Bad value for 'name' [ 816.481027][ T7381] cgroup: Bad value for 'name' [ 816.707403][ T7393] fuse: Unknown parameter '' [ 817.272265][ T36] kauditd_printk_skb: 640 callbacks suppressed [ 817.272283][ T36] audit: type=1400 audit(2016783147.189:96661): avc: denied { name_bind } for pid=7404 comm="syz.6.13325" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 817.340272][ T36] audit: type=1400 audit(2016783147.189:96662): avc: denied { node_bind } for pid=7404 comm="syz.6.13325" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 817.375982][ T36] audit: type=1400 audit(2016783147.198:96663): avc: denied { mounton } for pid=7404 comm="syz.6.13325" path="/598/file0" dev="tmpfs" ino=3359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 817.400194][ T36] audit: type=1400 audit(2016783147.227:96664): avc: denied { create } for pid=7407 comm="syz.6.13326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 817.422405][ T36] audit: type=1400 audit(2016783147.227:96665): avc: denied { bind } for pid=7407 comm="syz.6.13326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 817.442459][ T36] audit: type=1400 audit(2016783147.227:96666): avc: denied { name_bind } for pid=7407 comm="syz.6.13326" src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 817.466651][ T36] audit: type=1400 audit(2016783147.227:96667): avc: denied { node_bind } for pid=7407 comm="syz.6.13326" saddr=fe80::aa src=1026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 817.512488][ T36] audit: type=1400 audit(2016783147.236:96668): avc: denied { read write } for pid=7088 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.553819][ T36] audit: type=1400 audit(2016783147.236:96669): avc: denied { read write open } for pid=7088 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.579887][ T36] audit: type=1400 audit(2016783147.236:96670): avc: denied { ioctl } for pid=7088 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 817.704044][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.711836][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.718935][ T7416] bridge_slave_0: entered allmulticast mode [ 817.725255][ T7416] bridge_slave_0: entered promiscuous mode [ 817.733039][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.741062][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.748434][ T7416] bridge_slave_1: entered allmulticast mode [ 817.754756][ T7416] bridge_slave_1: entered promiscuous mode [ 817.868861][ T7416] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.875942][ T7416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.883217][ T7416] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.890269][ T7416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.955253][T22850] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.964961][T22850] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.981348][T22850] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.988427][T22850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.008974][T22850] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.014422][ T7452] overlayfs: failed to clone upperpath [ 818.016053][T22850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.081008][ T7416] veth0_vlan: entered promiscuous mode [ 818.108815][ T7416] veth1_macvtap: entered promiscuous mode [ 818.229570][ T7454] tmpfs: Unknown parameter '' [ 818.239792][ T7454] 9pnet_fd: Insufficient options for proto=fd [ 819.279234][ T7497] netlink: 'syz.1.13354': attribute type 1 has an invalid length. [ 819.287137][ T7497] netlink: 'syz.1.13354': attribute type 2 has an invalid length. [ 819.296842][ T7498] netlink: 'syz.1.13354': attribute type 1 has an invalid length. [ 819.304726][ T7498] netlink: 'syz.1.13354': attribute type 2 has an invalid length. [ 819.312584][ T7499] netlink: 'syz.1.13354': attribute type 1 has an invalid length. [ 819.320877][ T7499] netlink: 'syz.1.13354': attribute type 2 has an invalid length. [ 819.366738][ T7503] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 819.406243][ T7510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=7510 comm=syz.7.13357 [ 819.479666][ T7518] fuse: Bad value for 'fd' [ 819.851653][ T7520] netlink: 'syz.1.13361': attribute type 17 has an invalid length. [ 820.055342][ T7547] netlink: 5 bytes leftover after parsing attributes in process `syz.3.13370'. [ 820.710428][ T7563] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 821.657837][ T7577] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=7577 comm=syz.6.13380 [ 821.670867][ T7578] netlink: 'syz.6.13380': attribute type 4 has an invalid length. [ 821.985575][ T7593] rust_binder: Write failure EFAULT in pid:29 [ 822.208688][ T7598] overlayfs: overlapping lowerdir path [ 822.222612][ T7598] overlayfs: overlapping lowerdir path [ 822.222741][ T7599] overlayfs: overlapping lowerdir path [ 822.305671][ T7603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 822.306721][ T7603] rust_binder: Read failure Err(EFAULT) in pid:39 [ 822.318274][ T7603] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39 [ 822.467596][ T7617] netlink: 'syz.6.13392': attribute type 1 has an invalid length. [ 822.485184][ T7617] netlink: 'syz.6.13392': attribute type 2 has an invalid length. [ 822.607601][ T36] kauditd_printk_skb: 35275 callbacks suppressed [ 822.607619][ T36] audit: type=1326 audit(2016783152.190:131946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.646057][ T7622] audit: audit_backlog=65 > audit_backlog_limit=64 [ 822.648901][ T36] audit: type=1326 audit(2016783152.199:131947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.652697][ T7622] audit: audit_lost=45 audit_rate_limit=0 audit_backlog_limit=64 [ 822.682180][ T36] audit: type=1326 audit(2016783152.199:131948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.684620][ T7622] audit: backlog limit exceeded [ 822.707788][ T36] audit: type=1326 audit(2016783152.199:131949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.726387][ T7622] overlayfs: failed to clone upperpath [ 822.736294][ T36] audit: type=1326 audit(2016783152.199:131950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.765443][ T36] audit: type=1326 audit(2016783152.199:131951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.789393][ T36] audit: type=1326 audit(2016783152.199:131952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7550 comm="syz.1.13372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda66d8efc9 code=0x7ff00000 [ 822.868143][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13396'. [ 822.931620][ T7635] 9pnet_fd: Insufficient options for proto=fd [ 823.069038][ T7644] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 823.069063][ T7644] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 823.096279][ T7644] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:62 [ 823.394461][ T508] hid (null): unknown global tag 0xd [ 823.417828][ T7656] overlayfs: failed to clone lowerpath [ 823.417854][ T508] hid (null): unknown global tag 0xd [ 823.430914][ T508] hid (null): unknown global tag 0xc [ 823.438196][ T508] hid-generic 7079:0009:007F.002F: unknown global tag 0xd [ 823.446709][ T508] hid-generic 7079:0009:007F.002F: item 0 4 1 13 parsing failed [ 823.458255][ T508] hid-generic 7079:0009:007F.002F: probe with driver hid-generic failed with error -22 [ 823.517865][ T7666] __vm_enough_memory: pid: 7666, comm: syz.6.13411, bytes: 18014402804453376 not enough memory for the allocation [ 823.602358][ T7670] rust_binder: Write failure EFAULT in pid:72 [ 823.722168][ T7679] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 823.737824][ T7679] rust_binder: Write failure EINVAL in pid:74 [ 824.321677][ T7685] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=32804 sclass=netlink_xfrm_socket pid=7685 comm=syz.3.13418 [ 824.573304][ T7718] tmpfs: Unknown parameter 'n' [ 824.579722][ T7719] __vm_enough_memory: pid: 7719, comm: syz.6.13431, bytes: 18014402804453376 not enough memory for the allocation [ 824.638258][ T7725] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13433'. [ 825.142175][ T7747] EXT4-fs: Ignoring removed check option [ 825.147875][ T7747] No source specified [ 826.321080][ T7814] overlayfs: failed to clone lowerpath [ 826.332343][ T7814] overlayfs: failed to clone lowerpath [ 826.969027][ T7838] validate_nla: 3 callbacks suppressed [ 826.969049][ T7838] netlink: 'syz.3.13469': attribute type 4 has an invalid length. [ 826.982473][ T7838] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.13469'. [ 827.001795][ T7838] netlink: 'syz.3.13469': attribute type 4 has an invalid length. [ 827.012818][ T7838] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.13469'. [ 828.059811][ T36] kauditd_printk_skb: 4592 callbacks suppressed [ 828.059830][ T36] audit: type=1400 audit(2016783157.310:136545): avc: denied { unmount } for pid=7416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 828.096250][ T36] audit: type=1400 audit(2016783157.339:136546): avc: denied { read write } for pid=7416 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.133461][ T36] audit: type=1400 audit(2016783157.376:136547): avc: denied { read write open } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.158969][ T36] audit: type=1400 audit(2016783157.376:136548): avc: denied { ioctl } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 828.185381][ T36] audit: type=1400 audit(2016783157.376:136549): avc: denied { mounton } for pid=7900 comm="syz.3.13492" path="/549/file0" dev="tmpfs" ino=3006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 828.220729][ T36] audit: type=1400 audit(2016783157.404:136550): avc: denied { create } for pid=7904 comm="syz.3.13493" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 828.242789][ T36] audit: type=1400 audit(2016783157.432:136551): avc: denied { mounton } for pid=7904 comm="syz.3.13493" path="/550/file0" dev="tmpfs" ino=3013 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 828.267249][ T36] audit: type=1400 audit(2016783157.432:136552): avc: denied { read } for pid=7902 comm="syz.6.13491" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 828.291879][ T36] audit: type=1400 audit(2016783157.451:136553): avc: denied { read open } for pid=7902 comm="syz.6.13491" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 828.317103][ T36] audit: type=1400 audit(2016783157.460:136554): avc: denied { ioctl } for pid=7902 comm="syz.6.13491" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 828.445920][ T7932] /dev/sr0: Can't lookup blockdev [ 848.561386][ T36] kauditd_printk_skb: 119 callbacks suppressed [ 848.561414][ T36] audit: type=1400 audit(2016783176.543:136674): avc: denied { create } for pid=7936 comm="syz.1.13505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.566830][ T7941] 9pnet_fd: Insufficient options for proto=fd [ 848.573997][ T36] audit: type=1400 audit(2016783176.553:136675): avc: denied { setopt } for pid=7936 comm="syz.1.13505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.644127][ T36] audit: type=1400 audit(2016783176.553:136676): avc: denied { mounton } for pid=7937 comm="syz.3.13507" path="/552" dev="tmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 848.671336][ T36] audit: type=1400 audit(2016783176.572:136677): avc: denied { write } for pid=7936 comm="syz.1.13505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.702128][ T36] audit: type=1400 audit(2016783176.572:136678): avc: denied { setopt } for pid=7936 comm="syz.1.13505" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 848.731349][ T36] audit: type=1400 audit(2016783176.581:136679): avc: denied { create } for pid=7938 comm="syz.6.13506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 848.764899][ T36] audit: type=1400 audit(2016783176.581:136680): avc: denied { create } for pid=7938 comm="syz.6.13506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 848.786152][ T36] audit: type=1400 audit(2016783176.609:136681): avc: denied { read } for pid=7938 comm="syz.6.13506" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.815589][ T36] audit: type=1400 audit(2016783176.609:136682): avc: denied { read open } for pid=7938 comm="syz.6.13506" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.849061][ T36] audit: type=1400 audit(2016783176.609:136683): avc: denied { ioctl } for pid=7938 comm="syz.6.13506" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 848.857481][ T7965] exFAT-fs (rnullb0): invalid boot record signature [ 848.892173][ T7965] exFAT-fs (rnullb0): failed to read boot sector [ 848.898545][ T7965] exFAT-fs (rnullb0): failed to recognize exfat type [ 848.921173][ T7965] exFAT-fs (rnullb0): invalid boot record signature [ 848.928542][ T7965] exFAT-fs (rnullb0): failed to read boot sector [ 848.936409][ T7965] exFAT-fs (rnullb0): failed to recognize exfat type [ 848.997159][ T7976] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613) [ 848.997184][ T7976] rust_binder: Error while translating object. [ 849.010790][ T7976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 849.017835][ T7976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:103 [ 849.426505][ T8013] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 849.501694][ T8027] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13536'. [ 849.545730][ T8031] netlink: 'syz.7.13539': attribute type 6 has an invalid length. [ 850.103710][ T8084] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 850.262484][ T8102] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 851.419572][T22850] veth1_macvtap: left promiscuous mode [ 851.425097][T22850] veth0_vlan: left promiscuous mode [ 851.463996][ T8155] overlayfs: failed to clone upperpath [ 853.145642][ T8210] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13594'. [ 853.901184][ T36] kauditd_printk_skb: 449 callbacks suppressed [ 853.901201][ T36] audit: type=1400 audit(2016783181.563:137133): avc: denied { read write } for pid=7416 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 853.951314][ T8229] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 853.951337][ T8229] rust_binder: Read failure Err(EFAULT) in pid:128 [ 853.959571][ T36] audit: type=1400 audit(2016783181.563:137134): avc: denied { read write open } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 853.970242][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13597'. [ 853.993164][ T36] audit: type=1400 audit(2016783181.563:137135): avc: denied { ioctl } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 854.025990][ T36] audit: type=1400 audit(2016783181.592:137136): avc: denied { read } for pid=8226 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 854.048174][ T36] audit: type=1400 audit(2016783181.592:137137): avc: denied { read open } for pid=8226 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 854.072855][ T36] audit: type=1400 audit(2016783181.592:137138): avc: denied { mounton } for pid=8226 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 854.095191][ T36] audit: type=1400 audit(2016783181.592:137139): avc: denied { create } for pid=8221 comm="syz.7.13599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 854.128261][ T36] audit: type=1400 audit(2016783181.592:137140): avc: denied { read } for pid=8228 comm="syz.6.13600" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 854.152666][ T36] audit: type=1400 audit(2016783181.592:137141): avc: denied { read open } for pid=8228 comm="syz.6.13600" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 854.181952][ T36] audit: type=1400 audit(2016783181.592:137142): avc: denied { ioctl } for pid=8228 comm="syz.6.13600" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 855.109643][ T8256] netlink: 'syz.3.13608': attribute type 5 has an invalid length. [ 855.150630][ T8256] netlink: 'syz.3.13608': attribute type 5 has an invalid length. [ 855.161604][ T8256] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.13608'. [ 856.222146][ T8291] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 856.331706][ T8293] }-:&$.|H: Can't lookup blockdev [ 859.845023][ T36] kauditd_printk_skb: 255 callbacks suppressed [ 859.845041][ T36] audit: type=1400 audit(2016783187.128:137398): avc: denied { execmem } for pid=8329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 859.891937][ T8335] rust_binder: 156: no such ref 3 [ 859.897011][ T8335] rust_binder: 156: no such ref 1 [ 859.904687][ T36] audit: type=1400 audit(2016783187.165:137399): avc: denied { read } for pid=8331 comm="syz.6.13631" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 859.944443][ T8335] rust_binder: Write failure EFAULT in pid:156 [ 859.955125][ T36] audit: type=1400 audit(2016783187.165:137400): avc: denied { read open } for pid=8331 comm="syz.6.13631" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 859.996950][ T36] audit: type=1400 audit(2016783187.184:137401): avc: denied { write } for pid=8331 comm="syz.6.13631" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 860.033445][ T36] audit: type=1400 audit(2016783187.184:137402): avc: denied { write } for pid=8331 comm="syz.6.13631" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 860.064498][ T36] audit: type=1400 audit(2016783187.184:137403): avc: denied { ioctl } for pid=8331 comm="syz.6.13631" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 860.067715][ T8354] devpts: called with bogus options [ 860.091274][ T36] audit: type=1400 audit(2016783187.240:137404): avc: denied { read write } for pid=7416 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 860.119658][ T36] audit: type=1400 audit(2016783187.240:137405): avc: denied { read write open } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 860.147030][ T36] audit: type=1400 audit(2016783187.240:137406): avc: denied { ioctl } for pid=7416 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 860.174429][ T36] audit: type=1400 audit(2016783187.268:137407): avc: denied { execute } for pid=8346 comm="syz.3.13634" path="/dev/ashmem" dev="tmpfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 860.219676][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13636'. [ 861.584855][ T8360] PM: Enabling pm_trace changes system date and time during resume. [ 861.584855][ T8360] PM: Correct system time has to be restored manually after resume. [ 863.072176][ T8374] /dev/loop0: Can't lookup blockdev [ 863.099225][ T8376] ./file2: Can't lookup blockdev [ 863.140835][ T8380] overlayfs: failed to clone upperpath [ 863.185345][ T8383] 9pnet_fd: Insufficient options for proto=fd [ 864.764961][ T8389] overlay: ./file0 is not a directory [ 864.868272][ T8398] kvm: user requested TSC rate below hardware speed [ 864.875507][ T8399] kvm: user requested TSC rate below hardware speed [ 864.895734][ T8398] netlink: 188 bytes leftover after parsing attributes in process `syz.6.13650'. [ 864.930771][ T8399] netlink: 1036 bytes leftover after parsing attributes in process `syz.6.13650'. [ 866.576347][ T36] kauditd_printk_skb: 145 callbacks suppressed [ 866.576364][ T36] audit: type=1400 audit(2033560638.454:137553): avc: denied { execmem } for pid=8410 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 866.617761][ T36] audit: type=1400 audit(2033560638.482:137554): avc: denied { read } for pid=8412 comm="syz.6.13653" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 866.642452][ T8413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 866.642502][ T8413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175 [ 866.687761][ T36] audit: type=1400 audit(2033560638.482:137555): avc: denied { read open } for pid=8412 comm="syz.6.13653" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 866.737095][ T36] audit: type=1400 audit(2033560638.482:137556): avc: denied { mounton } for pid=8411 comm="syz.7.13652" path="/113" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 866.760414][ T36] audit: type=1400 audit(2033560638.491:137557): avc: denied { ioctl } for pid=8412 comm="syz.6.13653" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 866.802729][ T8427] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.803490][ T8426] audit: audit_backlog=65 > audit_backlog_limit=64 [ 866.809386][ T8427] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 866.824541][ T36] audit: type=1400 audit(2033560638.491:137558): avc: denied { set_context_mgr } for pid=8412 comm="syz.6.13653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 866.854488][ T8427] audit: backlog limit exceeded [ 866.872809][ T8426] fuse: Bad value for 'fd' [ 870.709344][ T8458] __vm_enough_memory: pid: 8458, comm: syz.6.13666, bytes: 18014402804453376 not enough memory for the allocation [ 870.773019][ T8462] netlink: 'syz.7.13669': attribute type 1 has an invalid length. [ 870.789004][ T8462] netlink: 160 bytes leftover after parsing attributes in process `syz.7.13669'. [ 870.819562][ T8467] IPv6: Can't replace route, no match found [ 871.298585][ T8491] netlink: 72 bytes leftover after parsing attributes in process `syz.7.13676'. [ 871.311366][ T8491] netlink: 7 bytes leftover after parsing attributes in process `syz.7.13676'. [ 871.322258][ T8491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8491 comm=syz.7.13676 [ 871.712012][ T8506] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=1 req=13569 state=3 status=67 (errno 32: Broken pipe) [ 871.719259][ T8506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 872.691588][T22857] bridge_slave_1: left allmulticast mode [ 872.706356][T22857] bridge_slave_1: left promiscuous mode [ 872.711952][T22857] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.720452][T22857] bridge_slave_0: left allmulticast mode [ 872.726167][T22857] bridge_slave_0: left promiscuous mode [ 872.731737][T22857] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.739681][T22857] bridge_slave_1: left allmulticast mode [ 872.745404][T22857] bridge_slave_1: left promiscuous mode [ 872.750983][T22857] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.758552][T22857] bridge_slave_0: left allmulticast mode [ 872.764188][T22857] bridge_slave_0: left promiscuous mode [ 872.769874][T22857] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.141496][T22857] veth1_macvtap: left promiscuous mode [ 873.147011][T22857] veth0_vlan: left promiscuous mode [ 873.152484][T22857] veth1_macvtap: left promiscuous mode [ 873.157970][T22857] veth0_vlan: left promiscuous mode