last executing test programs: 4m29.928731785s ago: executing program 32 (id=211): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 4m22.10748892s ago: executing program 3 (id=400): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) setrlimit(0x2, &(0x7f0000000000)={0x8, 0x90000000000}) 4m21.086011458s ago: executing program 3 (id=413): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r1, &(0x7f0000000480), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001900150000000000ffffffff0a0000000202000000000000240009801c00000000000000080005"], 0x40}], 0x1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "4f0000004000f700"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="bc", 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4m21.020393559s ago: executing program 3 (id=415): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000001b40)=""/4081, 0xff1}, {&(0x7f0000002f40)=""/4107, 0x100b}, {&(0x7f0000001880)=""/143, 0x8f}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000180)=""/254, 0xfe}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000c}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x2100, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) socket(0x10, 0x803, 0x0) (async) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) (async) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/218, 0xda}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f0000001b40)=""/4081, 0xff1}, {&(0x7f0000002f40)=""/4107, 0x100b}, {&(0x7f0000001880)=""/143, 0x8f}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000180)=""/254, 0xfe}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0x8000c}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x2100, 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 4m20.99315011s ago: executing program 3 (id=417): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x220082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'hsr0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='CY~', 0x3}], 0x1}}], 0x1, 0x200400c1) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000005200016d9bffffff000000000a"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000340)="66b832000f00d80f2385c8c8350800d0000f23f866f042f65e002e3e0f01c8440f20c066b853008ec0440f22c0f0438636c481596bc1660f3839e866ba4200ed66baf80cb87824f588ef66bafc0cb80e000000ef2666400f3828c5", 0x5b}], 0x1, 0x2c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe1000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/44, 0x2000, 0x1800, 0x9, 0x3}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x841) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x16) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, 0x0) getrandom(&(0x7f0000000380)=""/281, 0x119, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m20.844025482s ago: executing program 3 (id=425): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4b40ed96e497d6cd, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) 4m20.819072123s ago: executing program 33 (id=425): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4b40ed96e497d6cd, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) 2m27.391262493s ago: executing program 4 (id=3057): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) kcmp(r0, r1, 0x5, r2, 0xffffffffffffffff) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write(r3, &(0x7f00000000c0)="61603fc9ee2a97ce4d440260b7526c65222b71756b63849afb860c20eeffde16af167a73bb74ccfd18a079ba17d2c52be602fe540cfb1520aba00dda3d2395474c61568d2752bd5e86441e7f6ad7a3cff663b4b122", 0x55) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000180)=[@dead_binder_done, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, 0x2}, @dead_binder_done, @increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @free_buffer={0x40086303, r5}, @exit_looper], 0x6c, 0x0, &(0x7f0000000200)="bcc689daa5033cca1517df58a7368d8b91bdfd634670fbd06d531db3dadb8b64e204696e6f61139e5c68a87eab4085d41f532cad02f6ea26396464eb479a3aa285163dd03c43399d50319b3504f049401301c619f3d8f66a8fec5f655b1c5cf7543121726d0a9196abb52184"}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0xd, 0x1, {{0x20, 0x1, 0x3}, 0xfffffffa}}, 0x18) r6 = accept(r3, &(0x7f0000000300)=@un=@abs, &(0x7f0000000380)=0x80) sendto$packet(r6, &(0x7f00000003c0)="4e68af638fd11ec399ddabf0a430aa71d227937bbb5283a2dbbebea70f1da6acd8eac26d5bb480ea6419feb5aaae78ca3325a130cdf4279f4642bf8abc9f37b813bca46b67e5579132e147cf48a7409fbb2081e421635d0f13eb47d853b5c6266b78c00b6a49e698528e4aa50c6fcafd", 0x70, 0x10, &(0x7f0000000440)={0x11, 0x16, 0x0, 0x1, 0x6, 0x6, @local}, 0x14) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r6) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) r8 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x66ba9497c331d624, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r9, 0x4002f516, &(0x7f0000000600)={0x5, 0x7}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000640)={'gretap0\x00', 0x200}) r10 = open$dir(&(0x7f0000000680)='./file0\x00', 0x480080, 0x2) r11 = openat$incfs(r10, &(0x7f00000006c0)='.log\x00', 0x200003, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00'}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000000740)) ioctl$KVM_SET_CLOCK(r11, 0x4030ae7b, &(0x7f0000000780)={0x9, 0xc, 0x6a37, 0x0, 0x4}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000007c0)=0x5) ioctl$KVM_SET_ONE_REG(r11, 0x4010aeac, &(0x7f0000000840)=@arm64_core={0x6030000000100034, &(0x7f0000000800)=0x9}) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f0000000880), &(0x7f00000008c0)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa0, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x2, 0x5, 0x9, 0xffffffff, 0xd4, 0x1, 0x80000000, 0x4]}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x0) setsockopt$MRT6_DONE(r11, 0x29, 0xc9, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 2m27.375257593s ago: executing program 4 (id=3058): syz_open_dev$usbmon(&(0x7f000000a240), 0x6, 0x8001) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rodno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 2m27.345526943s ago: executing program 4 (id=3059): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="9ed000cf00", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00') recvmmsg(r1, &(0x7f00000008c0), 0x10, 0x0, 0x0) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x50, 0xffffffffffffffff, 0x45809000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0xb5036000) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RWRITE(r5, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x80000001}, 0xb) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0x80a0000, 0x2000, &(0x7f0000fe6000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000280)="9aa2000000a800c42ecad965411010e1bdd476e10f01ca0f01cab953090000b847da0000ba000000000f3066b8e8000f00d80f785e00f3a6660f756a20", 0x3d}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x10002, 0x2, 0xdddd1000, 0x2000, &(0x7f00008f7000/0x2000)=nil}) close(0x3) 2m27.199742206s ago: executing program 4 (id=3061): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r0}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000000)={0x40, 0xd, 0x3, "856ffa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000003c0)={0x20, 0x3a, 0x2, "1610"}, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x2, 0x0, 0x34, &(0x7f00000000c0)=""/52}) r4 = socket(0x28, 0x5, 0x0) recvfrom$inet(r4, &(0x7f0000000ac0)=""/4096, 0x1000, 0x2020, 0x0, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x50, r1, 0x0) lseek(r1, 0x10001, 0x0) fchdir(r1) 2m27.144029657s ago: executing program 4 (id=3063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe2e, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/211, 0xd3, 0x0, 0x33}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe79b18763b68b5c8cde0045f31e73285632c09da90f5451b7f64f1faee49a0d8fa57fb52ecde3cb94c60c97e8a9a4b9e8b8a625ef77381a7fed894b680d2bf18225baa8ac2279e4966b3bc0adb5332c5ecbc6c3da241c9215cfc3c563c3bc0291d5f45f8d56d583cff127e3373ade7df08cc06d94780975eeaf693ffb533a47e615651192042ea01b4f8ef2332d798ff7da5ad85ffcb7bf1c66705a1d0c2dded41131fbd3372527cd58da0761821c610c916e7126d0d9f38da2ea2df4048a4c222ffe5949556b16efbc4c824fda8e92f0647858a31f0cebc12f0a4e88ae8d5d6689e499301a23a6d4452da35cb0e51b1b9dd6be08b7e3430b77a1143db66bd7b77995b08262510df7aa578cb52ccae69b26f74ea7a2f5d38e0e49412165b94b6da07a4e82c25dea5ad36d9517e9b7152d01c9fbed0ff5dcd8a1ffbef5a2bddee07d7369e517b0d42d3815015334fe2e9e81c4c9b4e6215b236030bc9c4b806fa70175d7ce4268448e3599265549b96df63550df8bbc692c84ac97293998f3351766e93112904c8a80a5045d57e827b561127040a09b3025320a51965ce5c4ff115fa8ce879045cb290abe97641435585c7bb98be38985ea23e58d2ad96499a5f0842eee3c7a263ca47809ce99ef11208b7260ea0a3848634c82a47405e9075ea05098752817d682ae52df079d32116ee458586118ca243767cf986b3e89d6470df859f910256a723062a88441e992d2a9b9fa1dadaeac1c630dc17497404323653cb9a5355f88b6aa6fe714f0723b6938d7ebcac44fe717f0084bc34e5f86980520bad4e6ae4b173f1e4325f9c547828232c9aaa560fb99b6946d65f6532afca8501938703042be2933b633db1f63e692679f1ee71294204acd45480aff57491375fa7f9d7f880de291348fd2ee42dbfdbd8cc8b84aaacc6809e06c5a73e9a9db1bbb2c731a8fd6807ddb0f5b900213bae81372e2a4325b9aecc0125b2016c72e40db36d2c91d55eb5bc8c455b7e29a32c0f1b36645e004dc0db7f521c436f735e09402fe38d853a2db74d7a18f68ff28fb38e861efd6f2f92ebcfc13bb10e57026443ba84df1e18041d6f9fd4aead2e87c6980d9fa28e8251a809c88dc25b4f29813436318b59bc8bf80115f15e33387ed955cc4423b49d5a4ae6fb37ddfa1e31d712bd4e7f6cb5d2dbba874337aa235dbeeb38cd9f1469ee02270dc55acfefc27f35c0d067ef3341e111282c139c623af9eb0eb7613c0cc7284e7a9945ad1870cb621e1350cfef3a8526d21b214745aed61d78f834c60afe2403a3280bd2349612761d0692ed8048d1b33a158a2882bafd56012a465a336c12a675adbffa91530cfe1b55ae8b0813403256c148e0d0c7f1056f34be5a1f28275025d48fcf9f12bf21453b2c060a9d05b0fed49799809b631349e2e5e1a6e0461d1cd667e8a4ec1b9b088b7bb0ffda7b6110049036d6139a227c53e3825d71d6cb06e96f0eb67076aa5faf026cd603ee91a7ba9fcb13763721d7bbb7c021e7d2395fa566483942052bd74aac4e9acb4bc3ba1d4ecc3fa4b8e99f5f91f6e9ae598ea225a7a889a8fd50ed8e75c21a93764745a7f2846b8f63590fab912d1f10582a862d5e4af02dd44c410642cce20a3877559d4fd83b962d78a61c84cfcf74f6ba0ccb85a19a505b24875daaa7b7ee3083a0f7a034f66031bdcd2dbf2d56c61e30186dc555ad834d855a055529ee6ecf50586ceb29210b44fa704498b238dd68c1e14b36da172f6febdd67b49d833370247e0a024eab77de4aa5efe7f387a9a4cb573c6e344a3c4d2a45f1df4ee883913bd61cf7a39626244ac64cb0345fccdca1131171031be3c6084e0d2941371afd1c268512133ac68cac0ebdb0502db18340adea29132a1cb667056541f2edd8354d52563458d8ecd18c49d5b9dbe0859a0cff6c2ba5cfa4e8736e7e7eaafa061ef86351d3d52f50410aef8f1df813c29d3fd4080242adecc39a8b9b054eb818116d1ce46096c8c983a09164bbe0262df134af33986e0a12a9eac6268939a1ab2e7efd4376a8ff583b93f226711395b9163e49fbc790f67596f28d341cf36e37d7475c2b09278fa66f5b3cbb4161f017bc49e99d19039aed6d620dc01487ecbe043add02927b88ed4de8e3112ebf9ba837134d8adc36e4beeefc5037dc683b585cdee1e265f1ee47934f558c4c13bafb2a06e9951789f6a2243fa074d7b9489ffe32625cf141cb0ce9353c0c6849695f6a23f1b554b225f9e7d1e73bc4bbee326181144584aaae8e2f004aea46e8d334f65123b93fd945f487d917c485b8b65ce7aa1090a301b96ac664c65101db1bd1d224e1d25f8946a5faa0baf1fcf3fb015445f974d415b8e50e9b55435b26358b517112822d99d9cdf45aea3db255ab72f1ac51fd00d812c2fc484a581c72e8fa39d0a3a5ecff51fca9292267e98ca70b005be53b7f32205acfa59d1f623c03c6625d74ba76f95464f3b0617f87246c298e12e73876549ac765147f928fe3fce378100663a32ccbe312d5458db8e5aecc2bd70bedbfd397157bbc291065332e5988744ba63712753bcded54aab53b82894b8272d5be38943b9c948438271097b061e07e983709703af8c69df1aaeb7cda83e92df304002a03438dc0cf2e4b6492feb9be8379cee7fcb874f22a392e6b6470cc6d1b5dd500693e4d26c8f9e48492fdfabb8294bee57f721572ef9239f519eef9a9f4e59950d252095e6a4229a57e4202302388fe316f4d1300973549ff6bd8a3c747db0686aa5a3e30a41993db467ef0197da3cf7cfa356bc7c802177906f39d22777b1b4f930798b83f5ffc4f444ad564e87e2d1fe4f45a40a36e1b5515347f42d5513ec3d70584151d60ae515e5e3e467fa6816744b22c3a08cc318e2a6176547d0ca285067605fbb6a14e9fc40a74d2d27eb5492d0709f04603d36a05a0e4a055cdc7b9e5970aa9960ba6523fd234208cd95926029daa5498bf14ce9beb3fe31113bff7bd22dbd8ccb04593b3edd074092ae8be18ff94c59d376aa4c070e09b237568167a4b0d003e3df329966b5a6285a4547824a9dec2fd82428483c55f57adc35fcbcfb5af22da38fc98603cdfaffea70b9337a339442226305c06005747b4cd368c616f97fe467f087df5bcfc5d072120fa0d837103b65cd0efc2f08f81bc7e5c39435ffcbcc9a41ee94b2bd5708100c1c14a34c28ab5335bfea389444a38fe36132d7f4a9d9cc9a4a6a78646016f6f2a0cb832f0c2c8720c20430aaf3c4658b943648cfd84577ab42cc8fb051c407c5e9f2e2f996ce542485aa020f0b052059e0f18d3a5295383079acd63159f164f222bac96f98a30bb78d0e152b96d97e074208b171c3ce47cbcf747acf2a2873ddea30992686990b15e11bf8bf8be33ddc2fe3ad429a42ad065c32d35bc86d336eaa4e368a0b8b679c07c7419de2f21bd398f15b92d16e90e19f2e66343f88eb6349ac39553a0ccc6b5d61c4a69d3b3ffd10ed7c56408726e8ac25ac0bfdac182b53345d661c13775eb6deec22a17bbdd2189385baa39fc9be062ecbdac11157b64dcac58d1eb4f029a37d744d5c9551b51941353922dccded9da40a5b967513730a6604180e1d3e5c80f7f4a4e8edd75f5d466f66394dc5c4e529e33242ce016d4b479cf54c5876ff4bb1f651d7c975cccf1a7c7e8d9cce2918ca47684d92e7f258204731448986ed81dce4ca5eaf05512f93031ab16eadf0dd62e209839141847b8d2b7512508160be659be016faf2ac3e51a0e8e1f0bde51231c345dcb3ce926f00544c570a8fe3b6b6412d612549aefcf3bee1137c45dccff4ea9396a087ae33b2cbf0ec6d6fedcb5de2546540b4dadf2bd9f6d1f51125969c4ecbf73fd9bbee90e6b8a0240dd124b333a5ce34f29992f7f53d7a0ff2a9f81d84824afbc0f554532171ea8bb3e1f63274c1459d5744633925c7aac244b9bfb74b6f3d47060ae88374d97b553fc3adfda97ed6d3509c39115f740c760dc63becb7ba856affd700358d7f919f0ac4b10432eb5e0ab3c501713758b1d6aa6583fe7f5d59f7d591e172669519d0d27e03516e8c0bdd7659352024e11b0123c157fa4154e15591a61ca2c20f47489f6ff50e1de5cdf91cd5cac45cf3ca9a0bd42d3e25fda42ec0ec9f215b37b74615338f1430de5b0d1dbf83ec3ab6e19f3b09809cf79b1ed6176c59c66357842f23c2dad510816d14a7d9b6f5249fcf24393f62462d0c8ce92eaf0b7852509fed1b02419f4bdabf250c09af9be3710b4d3a6a03f81f0c12f193acd7d98200b8e1abfa7149ab677466df59e6bff602e08b6d53106c76b44a30f090e0ac9e6fd4772da22b745dd8aa7d3426f864d9c560a23ddbf95a09a72aef0ea3d096877b9773c4c495180f6926333d087a85e0211f6b4d10f38ceef3fca5c1019fc70e561db2004dd3084bcbe2bbbceed316ab8961e7ce60121dbcf5092f4070cf3948230e495da4c94caf3a32b8b4eefc7c18fb4d0d0d7499e83050b3cf56682d57b9995c31894786239ffdc729fb9ff70b9fd8c4856f3dfdd67c8e6142ff65dfcb2d7f40687ccce66557564a1427470f6cd124b6321ff125ccde9422ae992356d27a46f05094e7950e2634078f856d00bc6144414dd23d3404e5288e8db77b09f3e84a8b9b30e120551570215c9090a096ba957cfebe6bef5bdd42180c15131cb2b0d270506928a0f2c0ec050f0bdfbcbaa37064e59cc43e6a405518742922b7df2d89e96e73528f2d0fc7ec2d78a1abc5c3f17b9a2dbcd2299a5a64e738816bac07caacd35d4353784e248143fa244ac59ea918627bb0051e678912f8c6a57257f016de91ab6c5dcb9c93d859cb89822ebd44991c0f998170f73495229fb51479ebba8a57d1ce88ccc38e6b679457e964b07b6006971d45f570f9f", 0x0, 0xdb2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r2, &(0x7f00000082c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f2a746e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a00e00000000000000abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e68c3c8ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5a0400000000000000020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa17547493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cbf4430bd2b6b559133979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d753177fc29860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x25daa903, 0xffffffffffffffff, r9, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0x0, r7, {0x6, 0x1, 0x5, 0x200, 0x38, 0x2, {0x1, 0x1, 0x4, 0x81, 0x2, 0x4, 0x6, 0xd4, 0x2, 0x4000, 0xd5, 0x0, r9, 0x9d, 0x7}}}, 0x90) 2m27.083028128s ago: executing program 34 (id=3063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffe2e, 0x0, &(0x7f0000000340)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/211, 0xd3, 0x0, 0x33}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x80800) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, r5}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$FUSE(r2, &(0x7f00000082c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x50) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x1000, 0x25daa903, 0xffffffffffffffff, r9, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r1, &(0x7f0000000180)={0x90, 0x0, r7, {0x6, 0x1, 0x5, 0x200, 0x38, 0x2, {0x1, 0x1, 0x4, 0x81, 0x2, 0x4, 0x6, 0xd4, 0x2, 0x4000, 0xd5, 0x0, r9, 0x9d, 0x7}}}, 0x90) 2m4.635342166s ago: executing program 6 (id=3493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = signalfd4(r0, &(0x7f0000000040)={[0xfff]}, 0x8, 0x80000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) lsm_get_self_attr(0x68, 0x0, 0x0, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.561542797s ago: executing program 6 (id=3495): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) userfaultfd(0x800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x207) chroot(0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYRES32=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x400) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f00000000c0)) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0xf527}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0xe, {0xbd7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 2m4.466937078s ago: executing program 6 (id=3499): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c776601000080", @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r1, 0x0, 0x80000000) 2m4.437975019s ago: executing program 6 (id=3500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204800, 0x88) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x200) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.37983868s ago: executing program 6 (id=3501): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffff8, 0x0, 0x0, 0x8, 0x6, 0x95, 0x1, 0x0, 0x3}, {0x4, 0x0, 0x0, 0x2, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x21, 0x84, 0x40, 0x0, 0x5f, 0x1, 0x0, 0xfe, 0x0, 0x5, 0xfffffffffffffffd}], 0x1ffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x7, 0x5, 0x40000}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, 0x0, 0x0) 2m4.3770126s ago: executing program 6 (id=3502): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) fcntl$setpipe(r1, 0x407, 0x2000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 2m4.339655551s ago: executing program 35 (id=3502): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {0x77359400}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) fcntl$setpipe(r1, 0x407, 0x2000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 1m38.201711523s ago: executing program 5 (id=4109): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000012000/0x3000)=nil, 0x3000, 0x8, 0x13, r1, 0x80000000) mmap(&(0x7f00003a6000/0x4000)=nil, 0x4000, 0x100000d, 0x6011, r1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f00000000c0)={0x1, 0x1}) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000000)=0x1000, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001b80)=""/4084, 0xff4, 0x10000000000007f) syz_open_dev$usbmon(&(0x7f0000000540), 0x3179d5ea, 0x163d01) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m38.115155164s ago: executing program 5 (id=4110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000340)='C\x13\xfc2\x95-\x9c\xb7\xadM\x14\x00\xc9\xfa\xfe{\x01WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95\xee\xb5\vW#m\x03\x83\x82V_\x8dZ\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\x10\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-Bqs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<]\xca\xf6\xa8\xfa\xb7\xc2\x82wp\r\xd9\xe3\xba5\x1d\f\x17\xd6\x99\xaa\x8c]8Ymk\xeec\x06*n\x18B\xbcRwZR\x8a\x82;\xdbY\x02S\x13v\x95\xc4\xe7Q\xd6yz4t\xb5\xe6\xf5\x01\"}bZ\x98.=P\x1aC\xc5LP\xe9\xe4\xac\f}\xe3\xff\xbciA\xef`\xb6\xa31\xf4G\xd8|\xa0w\x9eH\xfdW]\f\xa8D\xe7\xf20crW\x9b\xb5\x01\xd5\x8bW\x81\x9d\xf7\xf6>z', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @mcast2, 0x7fffd}}}, 0x108) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, 0x0, 0x41) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000004a00)={&(0x7f0000004940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000049c0)={&(0x7f0000004980)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.109268894s ago: executing program 5 (id=4111): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async, rerun: 32) r0 = dup(0xffffffffffffffff) (async, rerun: 32) r1 = socket$unix(0x1, 0x2, 0x0) close_range(r0, r1, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) (async) close_range(r2, r1, 0x0) (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa3, 0xac, "6a5dfa8b7c81150558513a3d9a3eac30b49e3d01c7c462cc3a6a383dc02a8cdf408423d038c594b40dcbe1018e7cfaca820775b3b5e2b4d11dd9f948370ca765484bf5ef3d9e11d35da563baa56b37a9b999fea595d93f3ad0ec9a1aff87bbd3b49e0a0c880ed463aaf3a8a797b06968c4442d6e1e80aaa42b3dc1a83f50b39e21567efd3e1b5ad14cea2e5c279d49b7efcbe25bb6c0409a58dffb7456b741"}]}, 0xec}}, 0x4000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000380)=@buf={0x46, &(0x7f0000000300)="d9f8c7e428c6de3ce33af9bd85964f6dc79c5de1d6373c5d5394f64daff7f3d08a09040482857d224421cf1d6149b64d85e3ed905ba89f43daf368f2fc055c3dc95f32a5eabe"}) (async, rerun: 32) ftruncate(r3, 0xd) write$P9_RXATTRCREATE(r0, &(0x7f00000003c0)={0x7, 0x21, 0x2}, 0x7) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f00000004c0)={0x78, 0xffffffffffffffb4, 0x0, {0x7f, 0x2, 0x0, {0x3, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x6, 0xb, 0x6, 0x4, 0x2d2, 0x10001, 0x6000, 0x2, r6, 0x0, 0x4, 0x9}}}, 0x78) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r3, 0xb5fe0000) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x800, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) (async, rerun: 64) r8 = syz_open_dev$loop(&(0x7f0000000580), 0x7, 0x40500) (rerun: 64) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f00000005c0)) (async) r9 = socket$inet6(0xa, 0x5, 0xfffffffc) dup3(r9, r1, 0x0) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000600)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x7, &(0x7f0000000640)=[{0x3d, 0x7, 0x9, 0x5d}, {0x40, 0x9, 0x7, 0x81}, {0x5, 0x8, 0x80, 0xb}, {0x77, 0x4, 0x6}, {0x5, 0x3, 0xff, 0x1}, {0x9, 0x4, 0x7, 0x2}, {0xf3e, 0x80, 0x9, 0x10}]}) (async, rerun: 64) getpeername$unix(r7, &(0x7f00000006c0), &(0x7f0000000740)=0x6e) (async) write$P9_RSTATFS(r7, &(0x7f0000000780)={0x43, 0x9, 0x1, {0x89ab, 0x3, 0x8, 0xe913, 0x800, 0x2, 0x0, 0x1ff, 0x401}}, 0x43) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000800)={0x73622a85, 0xa}) (async) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000840)=@req={0x40, 0x200, 0x80000000}, 0x10) 1m38.108939824s ago: executing program 5 (id=4112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x8000, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.104918594s ago: executing program 5 (id=4113): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r1}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, 0x0, 0x4080) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r3, 0x3, 0x1) getdents64(r3, &(0x7f0000002540)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, &(0x7f0000000480)="eadd00000030012eff110f457764c4c3557aa736a33eccb20f060fc7687f260f2335b9520900000f322e66660f388183560000000fc76b9d", 0x38}], 0x1, 0x11, &(0x7f00000005c0)=[@cr4={0x1, 0x104026}], 0x1) mount$bpf(0x0, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x840, &(0x7f00000004c0)={[], [{@euid_gt}, {@subj_type}, {@uid_eq}, {@flag='mand'}, {@permit_directio}]}) socket$tipc(0x1e, 0x5, 0x0) getpgid(0x0) getpgrp(0xffffffffffffffff) epoll_create1(0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000000)='0\x00', 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x24000, 0x4}}) 1m38.085819885s ago: executing program 5 (id=4114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.043502675s ago: executing program 36 (id=4114): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m36.091435719s ago: executing program 8 (id=4157): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2040000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000140)=0x8, 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x2, 0x2, 0x98, r4}) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000380)=""/125, 0x7d}], 0x3) r7 = pidfd_getfd(r3, r0, 0x0) sendmsg$AUDIT_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x400c0}, 0x84) r8 = dup2(r0, r7) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r9, 0x29, 0x21, &(0x7f0000000540)=0x4, 0x4) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000000580), 0x0, 0x20, &(0x7f0000000600)={r10, r11+10000000}) fcntl$lock(r8, 0x7, &(0x7f0000000640)={0x0, 0x4, 0x6, 0x2, r4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x1d, r12}, 0x10, &(0x7f00000007c0)={&(0x7f0000000740)={0x1, 0x15, 0x7, {0x0, 0x2710}, {r13, r14/1000+60000}, {0x1, 0x1, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "fec525d04ce55788"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r15) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x10000, &(0x7f0000000940)={[{@verity_on}, {@redirect_dir_off}, {@index_on}, {@default_permissions}, {@index_on}, {@verity_off}], [{@smackfsroot={'smackfsroot', 0x3d, '$('}}, {@uid_lt={'uid<', r5}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.(.'}}, {@context={'context', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_role={'subj_role', 0x3d, 'nl80211\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\''}}]}) accept4$unix(r8, &(0x7f0000000a40), &(0x7f0000000ac0)=0x6e, 0x80000) ppoll(&(0x7f0000000b00)=[{}], 0x1, &(0x7f0000000b40), &(0x7f0000000b80)={[0x23]}, 0x8) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000bc0)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r7, 0x1dcb3000) fchownat(r3, &(0x7f0000000c00)='./file0\x00', r5, r6, 0x1000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) 1m36.090713809s ago: executing program 8 (id=4158): mount(&(0x7f0000000200)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='pstore\x00', 0x2808490, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000a1400000032cb9d"], 0x3c}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x2000000000, 0x0, 0x800000000000000]}) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000100)=0x6f90, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) (async) recvmmsg(r5, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/136, 0xffffffffffffffa3}}], 0x1, 0x2000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x3a, 0xcc, 0x0, 0x0) (async) syslog(0x4, 0xfffffffffffffffe, 0xff14) (async) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x2103, 0x1) getdents(r7, &(0x7f0000000180)=""/75, 0x4b) getdents(r7, &(0x7f00000000c0)=""/152, 0x98) 1m36.06236839s ago: executing program 8 (id=4159): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write(r1, &(0x7f00000001c0)="ba186dd065d675", 0x7) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x6c0ac000) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x2710, 0x0, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x8, 0x2, 0x0}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x8}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'geneve0\x00'}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$binfmt_misc(r10, &(0x7f0000000980), 0xfdef) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) r11 = dup2(r4, r5) r12 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0x4}, 0xf077, 0x24, &(0x7f0000000380)="28a8f249ed6b36d78a11b9733107936d1a1b85a9a0e816bbd319da50c3b3f06e0f557e842d368f7155c7917b4720469e1c06f223bd858f310e1a068db30eb8a822d78f41bdea56330137be03dd", 0x4d, 0x9, 0x69411f7c, 0x0, 0x2, 0x2, &(0x7f0000001180)="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"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) 1m32.825776685s ago: executing program 8 (id=4214): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1m32.803740066s ago: executing program 8 (id=4215): mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x6000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x0) 1m32.735639317s ago: executing program 8 (id=4216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x19}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @release], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1m32.327358644s ago: executing program 7 (id=4224): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0xa) (async) sendto$packet(r0, &(0x7f0000000480)="3f031c000300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b6800000ce4", 0x26, 0x24000094, &(0x7f0000000140)={0xc9, 0x0, r1, 0x1, 0x1, 0x6, @multicast}, 0x14) r2 = socket$nl_audit(0x10, 0x3, 0x9) (async) userfaultfd(0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 32) futex_waitv(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x1) (async, rerun: 64) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) (rerun: 64) r4 = openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) (async) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f00000001c0)={0x4, 0x4}) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) flock(r5, 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000ffdbdf2506000000080002800800000008000200efffffff0700030008000000080003000500000008000400970100000800040008000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40004) (async) write$eventfd(r5, &(0x7f0000000100)=0xeb27, 0x8) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) (async) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000780), 0x10002, 0x0) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r8) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 1m32.227787466s ago: executing program 7 (id=4225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd, @flat=@handle={0x73682a85, 0x100a, 0xfffff800}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="a9001c2c183ff440b4cd78ecd67daedf9c9de7ffd5dbd92698b0700a600854af4a466a8b6887795d3e4a860588c01b0e570617f12059101612ebda25b04874798825e91f7b7d63f082c07d31dec30e1f5648c1350f90a81efb1adf6da653493aab9c7c3463a72d20660862a0a6466b96dad165d9ed701ec2af7abe7698ad743b6de1e86c6eb8926a64cc7aff5a57da3cd176becd9901ec2f3b620d059400adac5d1833f8ad9d24bc22729742f4898094ae3ac9f2a5203c17763839d1097a69e1c82207a8b11cc6810070c954ad5039e2db4b85f8f7b1da1c00bbcc2a", 0xdc}, {&(0x7f0000000240)="191ffad9cfb06a2d27c16a7b5f1ace828794e744f97cb29e3c", 0x19}], 0x2, &(0x7f00000002c0)="246ffabfea0518ca4108d491b1d23cbc849f1aa7b7c6533f8aaebc1eed957fdf374871e0dd12bad8b13fc9ecb5b5acf160746fccc18d862dbf1e56cd3b09519406fedac516ba0824ed0e0eee00c73645320273764bc68b2b4d56857d5abd00b9c4449a20f9c383e538d6203e95c1d9224bfde1da8b5efcf8f4ba95d317acd1758dfe51", 0x83, 0x84}, 0x8005) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0), 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd, @flat=@handle={0x73682a85, 0x100a, 0xfffff800}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)) (async) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x1, {0x4e23}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="a9001c2c183ff440b4cd78ecd67daedf9c9de7ffd5dbd92698b0700a600854af4a466a8b6887795d3e4a860588c01b0e570617f12059101612ebda25b04874798825e91f7b7d63f082c07d31dec30e1f5648c1350f90a81efb1adf6da653493aab9c7c3463a72d20660862a0a6466b96dad165d9ed701ec2af7abe7698ad743b6de1e86c6eb8926a64cc7aff5a57da3cd176becd9901ec2f3b620d059400adac5d1833f8ad9d24bc22729742f4898094ae3ac9f2a5203c17763839d1097a69e1c82207a8b11cc6810070c954ad5039e2db4b85f8f7b1da1c00bbcc2a", 0xdc}, {&(0x7f0000000240)="191ffad9cfb06a2d27c16a7b5f1ace828794e744f97cb29e3c", 0x19}], 0x2, &(0x7f00000002c0)="246ffabfea0518ca4108d491b1d23cbc849f1aa7b7c6533f8aaebc1eed957fdf374871e0dd12bad8b13fc9ecb5b5acf160746fccc18d862dbf1e56cd3b09519406fedac516ba0824ed0e0eee00c73645320273764bc68b2b4d56857d5abd00b9c4449a20f9c383e538d6203e95c1d9224bfde1da8b5efcf8f4ba95d317acd1758dfe51", 0x83, 0x84}, 0x8005) (async) 1m32.189716596s ago: executing program 7 (id=4226): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) accept(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x440, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x100001000000b8ae) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, &(0x7f0000000000)) 1m31.274641332s ago: executing program 7 (id=4235): tkill(0x0, 0xa) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x3, 0x0, 0x1, 0x8}, 0xffffff80, 0x80000000, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xfffffffffffffff8, 0x8, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/61, 0x0, 0x1, 0x8}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1m31.243370983s ago: executing program 7 (id=4236): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) r2 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = fsmount(r2, 0x1, 0x8) unlinkat(r4, &(0x7f0000000280)='./bus\x00', 0x200) sendmsg$key(r1, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000002000300ac1414bb00000000000000000200010000000000fd000804feffff4b030005000000000002004e21e00000020000000000000000575803afee8ae628530751dfad765deba59a6347a30225f84f85684e45f52efe8a8b76f4d785037562226c1673eba57f3fcdc188607332e47f4a1cd9ced5c9678571168c892bbe7916595c274767870dc4116b0af8bad31d30b13ae443cfff76ce1960031bb8e14be1977a15fddb6cdd949d3b3ad47e9af95d316c63793b533f6c9882bdbf90bec5d1524f82906f71101771246f6f445fa1af4a00"/234], 0x50}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffdf) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffdf) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x2000) 1m31.096239365s ago: executing program 7 (id=4237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@register_looper, @register_looper, @acquire={0x40046305, 0x3}], 0x50, 0x0, &(0x7f0000000240)="7b3665211638927a66b6c3d3d41b71ecfb89ec9564960daffc39fe26ede1ffa99182b8d6b09d094561fc6e38037598717b4b15d0a80c9995804711df45541cdcf5bfdea35be8fcf407890e252e3fd574"}) 1m31.001910657s ago: executing program 37 (id=4237): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@register_looper, @register_looper, @acquire={0x40046305, 0x3}], 0x50, 0x0, &(0x7f0000000240)="7b3665211638927a66b6c3d3d41b71ecfb89ec9564960daffc39fe26ede1ffa99182b8d6b09d094561fc6e38037598717b4b15d0a80c9995804711df45541cdcf5bfdea35be8fcf407890e252e3fd574"}) 1m16.723506174s ago: executing program 38 (id=4216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r1 = socket$key(0xf, 0x3, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x4, 0x2, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x19}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x48}}}, @release], 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 43.182493243s ago: executing program 0 (id=5018): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0x2b6}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="b8002000000f23d0352000000c0f23f8b993020000b8aaca9592ba3809c1620f30660fe77e608fc97812cef30f1a84989311a9270f013018670fc71919c7ab04000000666567f2e17a660fc7b323954b68", 0x51}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0xffffffffffffffff) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0xe91, 0x6, 0x10, 0x2}, 0x14) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0xfdfdffffffffffff) read$FUSE(r6, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1800000056000106000000000000000007"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r9) prlimit64(r8, 0x0, &(0x7f0000000140)={0xffffffffffffff80, 0x9}, &(0x7f00000000c0)) 42.446016856s ago: executing program 0 (id=5035): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffb, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r1, &(0x7f0000000480)=""/14, 0xd, 0x8000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904ab6b2f681402030109022300010000c0050904970001ff70795108640300000026ff0905850308"], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) connect$vsock_stream(r3, &(0x7f0000000140), 0x10) listen(r3, 0x5) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) creat(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 38.840309048s ago: executing program 0 (id=5042): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) 37.848635146s ago: executing program 0 (id=5049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000002300)='gid_map\x00') read$FUSE(r3, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000100)={0x20071026, r5}, &(0x7f00000022c0)={0x8a, 0xfffffff7, 0x6, 0x9, 0xfffd, 0x8000}) socketpair(0xb, 0x800, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) (async) r7 = syz_pidfd_open(r2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000002280)={[0x104]}, 0x1) setns(r7, 0x24020000) (async) setresuid(0xee01, r4, 0x0) syz_clone(0x2286b100, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(r4, r4, r4) (async) r8 = getpid() prlimit64(r8, 0x1, 0x0, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) (async) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) fgetxattr(r11, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f0000000140), 0xffb1) (async) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1000}, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x1107}, @mss={0x2, 0x4}, @window={0x3, 0x6, 0x6}, @window={0x3, 0x3}, @window={0x3, 0xd}, @window={0x3, 0x1e7, 0x2}], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 36.43920291s ago: executing program 1 (id=5074): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) setresuid(0x0, 0x0, 0xee00) r4 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x10000000) r6 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) pselect6(0x40, &(0x7f0000001780)={0x3, 0x6, 0x7f, 0x8000000000000000, 0x6e, 0x1000, 0x3, 0x240000000000000}, 0x0, &(0x7f0000001140)={0x8, 0x1, 0x3, 0x6, 0x5, 0x9, 0x8}, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x5437, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) connect$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x300b, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/109, 0x6d, 0x1, 0x36}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) connect$tipc(0xffffffffffffffff, &(0x7f0000000880)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x2}}, 0x10) 35.970761578s ago: executing program 9 (id=5083): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000380)=@ethtool_wolinfo={0x6, 0x0, 0x8, "edf958e7e942"}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) copy_file_range(r3, &(0x7f0000000000)=0xfffffffffffff61b, r3, 0x0, 0x4, 0x0) open_tree(r3, &(0x7f0000000200)='./file0\x00', 0x8000) r5 = socket$netlink(0x10, 0x3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18110}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c080}, 0x4008001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x4}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 35.970384428s ago: executing program 0 (id=5084): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4, 0xfffffffc}, 0x80, &(0x7f0000000080)}}], 0x1, 0x200400c1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1}}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x101, 0x9b, 0x50, 0xfff}, {0x6, 0x8, 0x8, 0x1}, {0x1, 0x7, 0x0, 0x10000}, {0x0, 0x2, 0x0, 0xfc4}, {0xc2, 0xa, 0x9, 0x5}]}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup3(r7, r8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x29, 0x0, &(0x7f0000001380)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000007c0)={0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmmsg(r2, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r4, 0xfffffffc}, 0x80, &(0x7f0000000080)}}], 0x1, 0x200400c1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1}}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x101, 0x9b, 0x50, 0xfff}, {0x6, 0x8, 0x8, 0x1}, {0x1, 0x7, 0x0, 0x10000}, {0x0, 0x2, 0x0, 0xfc4}, {0xc2, 0xa, 0x9, 0x5}]}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup3(r7, r8, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x29, 0x0, &(0x7f0000001380)) (async) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) (async) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x5422) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000007c0)={0x0, 0x0}) (async) 35.922718829s ago: executing program 9 (id=5085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)={0x3, 'ipvlan1\x00', {0x2}, 0x8}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000080)=""/63, &(0x7f00000000c0)=0x3f) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$tipc(r3, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x0) write(r0, &(0x7f00000001c0)="491fcea510b8c1912a941d9221436c8661a8130cc741d6c9fa25b126946c38b3215839a357cacd2a0f75ecec41e89eec3514fa109e105d80437c44e6a2e175a61faf720b8bf6782960551e33479b93ba0564cd04793f953a4fe826664a62700040f0460caeb12ebe9d64a8d65d648a4464f70be470ee03c036a805b6304b81692145b15dabcac3d030194e4cc6efce64725b5fbcb0c88ac82c05615c2504de4e0ea245616aae3fd7112b06001cef95d17913356ba56b122d3dc3", 0xba) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000680)={0x18c, 0x19, &(0x7f0000000280)="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"}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x109602, 0x0) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x2) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f0000000700)="dbcd5c78dccd9b999a12648dc7a5abbc221434507b61e754dde6c20edac00e32307aec7fede9b3") ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000840)={0x1, 0x1, 0x1000, 0x3a, &(0x7f0000000740)="40858a6f9a71b20c9e7cbbc1d73e9a9b47e8ad1e64e9da4847a6cc6c5f0223e751d953bca9dada962d3dc78194f814e61fb5b274a40f32e5d470", 0xb9, 0x0, &(0x7f0000000780)="1d006bff324cec1ec8cbc395a1406950c7c892028318ef0fbc0d2a745a67e207c075f7225fe520d2df0eccbed16904b8c9e015fdc6db754b45ccf7f54033730794b9da87ccf0f5617be900b9e25c4ae8593dfaf9f6c3af3315b9be37a5f430c7e2077630365a43db826a773b775018a92bd44c20ad01fc976340ae1b5344be27c1adf0e8e4bb3d6c1518b463f8d49a3c9db52072d70a11f5e1d59c897534c2d37e241f9940229c58b5219a71421f024a9d3363df71db91ddee"}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xf8, 0x8, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x1, 0xc, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', r7, 0x29, 0x9, 0x1, 0x2353, 0x4c, @dev={0xfe, 0x80, '\x00', 0x38}, @local, 0x700, 0x10, 0x6, 0x2}}) ioctl$RTC_UIE_OFF(r5, 0x7004) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000a40)={0x7, 0x1b, 0x1}, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b4, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x101}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xd07}]}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xe72]}, @CTA_NAT_DST={0xd4, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81f}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4c815) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000d00)=0x0) fcntl$setown(r0, 0x8, r9) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000d80)={0x7, 0x10, [0x5, 0x80000001, 0x100000000, 0x80], &(0x7f0000000d40)=[0x0, 0x0]}) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r11, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 35.86501467s ago: executing program 9 (id=5086): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x7}, 0x800}}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400800) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r2, 0x54a6) truncate(&(0x7f0000000100)='./file0\x00', 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x20, 0x2, 0x6}}, 0x14) r3 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0xa02, 0x1ae, 0x21}, 0x18) statx(r3, &(0x7f0000000200)='./file0\x00', 0x400, 0x4, &(0x7f0000000240)) r4 = syz_clone3(&(0x7f0000000500)={0x141000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x1c}, &(0x7f0000000400)=""/20, 0x14, &(0x7f0000000440)=""/115, &(0x7f00000004c0)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) r5 = syz_open_procfs(r4, &(0x7f0000000580)='sched\x00') capset(&(0x7f00000005c0)={0x19980330, r4}, &(0x7f0000000600)={0x6, 0x81, 0x10, 0x400, 0x0, 0x9}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x3ff) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = open$dir(&(0x7f0000000640)='./file0\x00', 0x4000, 0x80) mkdirat(r7, &(0x7f0000000680)='./file0\x00', 0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f00000006c0)={'veth1_to_team\x00', {0x2, 0x0, @empty}}) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000007c0)={0x60, 0x2, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xd8a, &(0x7f0000000700)=[{0x2, 0x6, 0xffff}, {0x1, 0x4}, {0x5b50, 0x9, 0x9}, {0x9, 0x8ef, 0x8000}, {}, {0x29ce, 0x8, 0x10000}, {0x8, 0xee8, 0x5}, {0x6, 0x2, 0x5}], 0x8, 0x0, 0x14, 0x10, 0x0, 0x40}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000840)='@\x00', &(0x7f0000000880)="58c3230b0b780fdc0652eeb34cd825ada90558558b8af925963e0c2cbac2e781e8372e359ab8a1d3b7cb5ff3dd9e7711acaa96dd1947dc0e6a3c92878dbfc8e368eab145a2b30bad3fa496e77fe5873619435f0a3e442d74d22b6896ee8c4cb143a0588a315c722624fce79b74df611525bbae169afbba46f2d388a66c81c95412cae42fa7b7b2e32a0940abe982b421d8e2bdbbe1c2ab3c8a9d9ef8a4e87f28bf77c2cc3b4ea861592aacd81bd91b0a4284ad75f01c0a9e9e2d12273360b4fa3d2288c38517f2ce279ffb0604382aec09619e4686436490946fa00681b86574bb2fe56e4449eaafad1de4111b2bdf85134eda2f", 0xf4) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000980)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000009c0), &(0x7f0000000a00)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r8, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) close_range(r5, r0, 0x2) ftruncate(r6, 0x8) write$P9_RCLUNK(r3, &(0x7f0000000b80)={0x7, 0x79, 0x1}, 0x7) 35.784809591s ago: executing program 9 (id=5088): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x809}, {0xa, 0x8, 0xfffffffe, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0xfff, 0x2, 0x4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote, 0x6}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x4, 0x7fff, 0x0, 0x0, 0x3fd, 0x0, 0x58, 0x200]}}, 0x5c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x8, 0x0, &(0x7f00000000c0)) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES16=r0]) 35.722888352s ago: executing program 9 (id=5089): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xfff, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x1) read$FUSE(r2, &(0x7f0000001800)={0x2020}, 0x2020) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/33, 0x21}], 0x1}, 0x9}], 0x1, 0x10002, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 35.441945347s ago: executing program 1 (id=5090): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5020, &(0x7f0000000240)={[{@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}], [{@hash}, {@obj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@flag='rw'}]}) r3 = eventfd2(0x58, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000000)={0x41, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@\x00'], 0x70}, 0x80) close_range(r0, r1, 0x0) 35.402971018s ago: executing program 1 (id=5091): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x80000000, 0xd, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setpriority(0x2, 0x0, 0xd2f4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 35.26288256s ago: executing program 1 (id=5092): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 34.556268583s ago: executing program 1 (id=5094): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r1, 0x1, 0x4, 0x0, &(0x7f00000000c0)=0x61) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) read$FUSE(r2, &(0x7f0000004380)={0x2020}, 0x2020) 34.493075234s ago: executing program 1 (id=5095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x5, &(0x7f0000000380)=[r6, r2, r2, r2, r2]) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) splice(r5, &(0x7f0000001500)=0x140000000000000, r7, 0x0, 0x9614, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0xa, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @local, 0x3abd}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000440), 0x61d2650dcbdbe2b6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x8001, &(0x7f0000000400)) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) sendmmsg(r10, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x840) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 34.261016057s ago: executing program 9 (id=5096): mlockall(0x7) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000440)={0x0, 0x3, 0x10005}) io_setup(0x101, &(0x7f0000000a00)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$netlink(0x10, 0x3, 0xa) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0xfe4b, 0x0, &(0x7f0000000580)=[@free_buffer, @register_looper, @acquire], 0x0, 0x0, 0x0}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000001c0)) getpriority(0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) pipe(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414772efb1980081b010004000000080002de9991fe97c98f994f0631b3107a0ef924", @ANYBLOB], 0x44}}, 0x4000840) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @private=0xa010101}}}, 0x88) 25.915810112s ago: executing program 2 (id=5116): syz_usb_connect(0x0, 0x5a, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x5a, 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 25.858999433s ago: executing program 2 (id=5117): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_clone(0x2048411, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x20000000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2], 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 24.925904279s ago: executing program 2 (id=5118): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22000, 0x2) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0xe3552a11ac9abab7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1280, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r4, 0xe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000040)={0x8400000000000000, 0x2, 0x0, 0x9, 0x10}) ioctl$KVM_SET_FPU(r7, 0x41a0ae8d, &(0x7f0000002540)={'\x00', 0x3, 0xfff7, 0x81, 0x0, 0x1, 0xeeee0000, 0x1000, '\x00', 0x7ffd}) socketpair(0x28, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) shutdown(r9, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000980)=0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00aea832287c2d9953543967e02d76cf30ff702ff16a126aa62b22626e", @ANYRES16=r8], 0x20}}, 0x0) 24.747190162s ago: executing program 2 (id=5119): r0 = fsopen(&(0x7f0000000040)='pvfs2\x00', 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010000000000ffdbdf2520010000000003000000000000000000ffffffff00000000000000000000000000000003000000000a000420080000002862676a0e4d93595e9c23d6f51da8f308714c0870c5", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000340)={0x1f, 0x1001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="519d74d33235488d69514a5fe7fc53b620fa5cbe2fbae629edae66c96ad189793680771154db8364a0ba6760fb2640909b2ea8d334fc1cb319e7836b7613cb66b5c551674e4cc180ca485a09bb679fef00086b0475f04482ff9d2e514c5d710206fd1c7cf6526f0286397687416fb4adee67306d1597c405461fc195e21f76d9417ebc305ac2227772bdcaf9ca", @ANYBLOB="b1f65be422c0cf0169a39b2eff747ed51b5d711390aa1fd87bf7cdec37bfa8d4879e7d11635eec6ecd011c594fde1a33a7e464b3cc73eafb182127877e6050e9e4f241c9c118258ec341b8415ec1a8388e4b6fc665817980e08dc7dd59fcf71b9922107e407b834a869c3ee8acfee831b7fbbaca09796351caaa9bb57f51d15a91e8677f9c96aa96b2f1670d99deadb0f978f5c9b57afcf8f9ecbc2fac65303e4b563cf946df4525af26bf53262a23fb181235053a7736067562a3601a5854dd40686d2ce7bb360beca4265b9150a48aaa4966f5c36cfa87cbb7d07cd7121cb4e718c1b208ae7d4828af335bf3bf045e8d90a48c3124dfec", @ANYRES32=r1, @ANYRES16=0x0], 0x17c}}, 0x2004c004) tkill(0x0, 0xa) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x6ea02, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40, 0x0) chdir(&(0x7f0000000000)='./cgroup\x00') mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) unlink(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000240)="0f01c166b8f88f00000f23c80f21f86635000090000f23f8670f7863103ef30fc7b3d900f4baf80c66b87b49358a66efbafc0cb0ffee660fe193ce8526f3f464670f01cfb81d008ee0", 0x49}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000000c0)={0x3, 0x0, [0xffff, 0x2, 0x10, 0x1, 0x1, 0x40000000003ff, 0xd0ab, 0x8000000000000000]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r7 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000440)='./bin\b\b\x00\x00s/binder0\x00\xf8\xffp\xb9s\x17h\xfe\x04\x7f\xb5\x15\x1c\x1d\xd5O\x915\xfe\x8bJd\xbc\xfd\x02\xa4\x11}\x8b\x84\x86\xaf0\x8f\x85\x96\"\x12\tG$\x7f\xb9H\xcd\x1b/\'%\x9c\xcf\xdf3-\xdaP\xd8\xcc\xef\x94C\xf1\x91\x87v\x9ek\xe7\xcaf\xeb-~M^\xdeE', 0xfffffffffffffffb) keyctl$set_timeout(0xf, r7, 0xc) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000001c0)=@req={0x3, 0x200, 0x3, 0x34a}, 0xffffffffffffff85) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r8, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r9, 0x1, &(0x7f0000004900)=0xfffff4cc) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0x45809000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 24.682370823s ago: executing program 2 (id=5120): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) (async) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) fcntl$setpipe(r0, 0x407, 0x2000000) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 24.682077903s ago: executing program 2 (id=5121): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000180)={{r3, r4/1000+60000}, 0x12, 0x9, 0x4}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 23.649721911s ago: executing program 0 (id=5122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x13, r2, 0x45809000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r3, r4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) openat(r6, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980080001000d09"], 0x44}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501009c"], 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x7f, 0x28c, 0x5, 0x1, 0x6, 0x7f}) 18.280308994s ago: executing program 39 (id=5095): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setgroups(0x5, &(0x7f0000000380)=[r6, r2, r2, r2, r2]) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) splice(r5, &(0x7f0000001500)=0x140000000000000, r7, 0x0, 0x9614, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0xa, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x0, @local, 0x3abd}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000000440), 0x61d2650dcbdbe2b6, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x8001, &(0x7f0000000400)) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001d002106000000000000000007d5"], 0x34}}, 0x0) sendmmsg(r10, &(0x7f0000005880)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}}], 0x1, 0x840) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 17.667073674s ago: executing program 40 (id=5096): mlockall(0x7) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000440)={0x0, 0x3, 0x10005}) io_setup(0x101, &(0x7f0000000a00)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$netlink(0x10, 0x3, 0xa) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0xfe4b, 0x0, &(0x7f0000000580)=[@free_buffer, @register_looper, @acquire], 0x0, 0x0, 0x0}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f00000001c0)) getpriority(0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) pipe(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414772efb1980081b010004000000080002de9991fe97c98f994f0631b3107a0ef924", @ANYBLOB], 0x44}}, 0x4000840) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) dup(r6) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket(0x2, 0x3, 0xff) bind$inet(r8, &(0x7f0000000080)={0x2, 0x2, @local}, 0x10) connect$inet(r8, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @private=0xa010101}}}, 0x88) 17.657505595s ago: executing program 3 (id=5123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x20800) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f00000002c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000980)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r12, r12, 0x0) fstat(r6, &(0x7f00000004c0)) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000720", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="040005000000000008000600", @ANYRES64=r5, @ANYRESDEC=r3], 0x54, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x7f79e0aec9050fa6}, 0x20048801) 17.047159165s ago: executing program 4 (id=5124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000001700)=@id, &(0x7f0000001740)=0x10, 0x80000) r8 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010021bd7000fbdbdf2522001b002000018008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164765f736c6176655f30"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xd, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x80, 0x7, 0x8000, 0x7fff}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f00000002c0)={0x13b0, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "a414cf8fc48db5e0296ea4974d9b6b80051ba1e4f0292e1e4f3b6bd53986c373488ab53663c0e2e5e4be5a6977347204ac7ad57447948b29d1218372e55693e014854aaab98b1779a0b99322ec39e05d98e55ab67037f753242a8f0fa6a10f3c40dd3079cd9caa579df24831cfc2c777cb0019468cfb1f8e3e4bec7e05a89ec4493978bf1f854e8bf0c535b80d4067111fdfa25e68437d16d1dc59d47da1c3987005d734fc12d5de841ba27c41bfa78d7274745a7e39dd4aa1252d9ea2b96053b224fa99cb5b567257bbbe8e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x128c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "0e151cfe678a53362050faa7a3c57ca4b2d5c66e8b6a55a2265ae8292cc183a28449651a8be2ccdfef653fa8cd8b18af14e07532ee5d55096cfebd055dce31f6cfcb2f8ce8afa1555d9a728a6c1d37d3be5a7cce324c41d0a90ad7a972cddf8d9b3cf203bf4553b71641489c2338678c586ac86203f0a7be39193fa57cd0436cdde465ebbd0a38d824392db09285559c7e6baed61e37bde91977df526546201be89dce52c7"}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "758fc0530ecba9175c41a695b19b536b13b8dddd4642409fd4f48fa063b7ecfea968de7d909ad3645eadccdf1bb1a7dfa6dd5f3a2fb28f8e94cea16513dd7a0628138a12e11ac758008e353e0b52214f2005946a52e23455f83708ea2d03e899d4c464546789a9c952a43c7e675581d7dd872dc8d74ccbd73205d422c85f2c67d57a3b3892"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca11}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\x93:-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%^!.+.+-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.!**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '$/]:}{3!&*!:^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x4000884}, 0x4040000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x5}) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) 7.775315215s ago: executing program 41 (id=5121): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000180)={{r3, r4/1000+60000}, 0x12, 0x9, 0x4}, 0x18) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}]}}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r6, r0, 0x0, 0x80000000) 6.599791046s ago: executing program 42 (id=5122): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x13, r2, 0x45809000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup2(r3, r4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) openat(r6, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000c00028005000100010000000c001980080001000d09"], 0x44}}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r9, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) syz_usb_connect(0x0, 0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601010405050724040501009c"], 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) capget(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x7f, 0x28c, 0x5, 0x1, 0x6, 0x7f}) 1.189516189s ago: executing program 43 (id=5123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setresuid(0xee00, 0xee00, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x1000, 0x20800) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f00000002c0)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000980)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r10, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r12, r12, 0x0) fstat(r6, &(0x7f00000004c0)) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r9, @ANYBLOB="02000720", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=r8, @ANYBLOB="040005000000000008000600", @ANYRES64=r5, @ANYRESDEC=r3], 0x54, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x7f79e0aec9050fa6}, 0x20048801) 0s ago: executing program 44 (id=5124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x1, 0x70bd2c, 0x25dfd9fb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000001700)=@id, &(0x7f0000001740)=0x10, 0x80000) r8 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010021bd7000fbdbdf2522001b002000018008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164765f736c6176655f30"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xd, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x80, 0x7, 0x8000, 0x7fff}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000016c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f00000002c0)={0x13b0, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "a414cf8fc48db5e0296ea4974d9b6b80051ba1e4f0292e1e4f3b6bd53986c373488ab53663c0e2e5e4be5a6977347204ac7ad57447948b29d1218372e55693e014854aaab98b1779a0b99322ec39e05d98e55ab67037f753242a8f0fa6a10f3c40dd3079cd9caa579df24831cfc2c777cb0019468cfb1f8e3e4bec7e05a89ec4493978bf1f854e8bf0c535b80d4067111fdfa25e68437d16d1dc59d47da1c3987005d734fc12d5de841ba27c41bfa78d7274745a7e39dd4aa1252d9ea2b96053b224fa99cb5b567257bbbe8e"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4}, @ETHTOOL_A_DEBUG_MSGMASK={0x128c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "0e151cfe678a53362050faa7a3c57ca4b2d5c66e8b6a55a2265ae8292cc183a28449651a8be2ccdfef653fa8cd8b18af14e07532ee5d55096cfebd055dce31f6cfcb2f8ce8afa1555d9a728a6c1d37d3be5a7cce324c41d0a90ad7a972cddf8d9b3cf203bf4553b71641489c2338678c586ac86203f0a7be39193fa57cd0436cdde465ebbd0a38d824392db09285559c7e6baed61e37bde91977df526546201be89dce52c7"}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "758fc0530ecba9175c41a695b19b536b13b8dddd4642409fd4f48fa063b7ecfea968de7d909ad3645eadccdf1bb1a7dfa6dd5f3a2fb28f8e94cea16513dd7a0628138a12e11ac758008e353e0b52214f2005946a52e23455f83708ea2d03e899d4c464546789a9c952a43c7e675581d7dd872dc8d74ccbd73205d422c85f2c67d57a3b3892"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca11}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\x93:-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%^!.+.+-\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.!**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '$/]:}{3!&*!:^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, './binderfs/binder1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5c3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x13b0}, 0x1, 0x0, 0x0, 0x4000884}, 0x4040000) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x5}) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ype 2 has an invalid length. [ 212.769255][T12778] overlayfs: failed to clone upperpath [ 213.849303][T12824] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 213.923943][T12827] rust_binder: 12826 RLIMIT_NICE not set [ 213.992039][ T36] audit: type=1400 audit(465.546:694): avc: denied { getattr } for pid=12828 comm="syz.1.4088" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.761553][T12846] rust_binder: Error while translating object. [ 214.761594][T12846] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 214.768118][T12846] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:419 [ 214.824063][ T9] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 214.956064][T12861] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 214.958482][T12860] syzkaller0: entered allmulticast mode [ 214.971074][T12860] syzkaller0: entered promiscuous mode [ 214.978009][T12860] syzkaller0 (unregistering): left promiscuous mode [ 214.984718][T12860] syzkaller0 (unregistering): left allmulticast mode [ 214.996233][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 215.005380][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.016223][ T9] usb 2-1: config 0 descriptor?? [ 215.715820][ T36] audit: type=1400 audit(467.155:695): avc: denied { append } for pid=12896 comm="syz.5.4111" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 215.921191][ T305] bridge_slave_1: left allmulticast mode [ 215.927101][ T305] bridge_slave_1: left promiscuous mode [ 215.932969][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.940602][ T305] bridge_slave_0: left allmulticast mode [ 215.946381][ T305] bridge_slave_0: left promiscuous mode [ 215.952218][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.035558][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.042763][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.050161][T12904] bridge_slave_0: entered allmulticast mode [ 216.058468][T12904] bridge_slave_0: entered promiscuous mode [ 216.065702][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.072797][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.084956][T12904] bridge_slave_1: entered allmulticast mode [ 216.091928][T12904] bridge_slave_1: entered promiscuous mode [ 216.103284][ T305] veth1_macvtap: left promiscuous mode [ 216.122016][ T305] veth0_vlan: left promiscuous mode [ 216.245892][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 216.272622][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 216.299388][ T9] usb 2-1: USB disconnect, device number 12 [ 216.359071][T12904] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.366231][T12904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.373576][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.380673][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.389293][T12930] overlayfs: failed to clone lowerpath [ 216.416336][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.425165][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.446017][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.453142][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.482815][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.489918][T11093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.530253][T12904] veth0_vlan: entered promiscuous mode [ 216.550771][T12904] veth1_macvtap: entered promiscuous mode [ 216.898470][T12967] rtc_cmos 00:00: Alarms can be up to one day in the future [ 216.940143][T12971] netlink: 328 bytes leftover after parsing attributes in process `syz.8.4133'. [ 216.956832][ T36] audit: type=1326 audit(724.315:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.1.4135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe660d8e9a9 code=0x0 [ 216.962262][T12971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12971 comm=syz.8.4133 [ 216.996032][T12971] binder: Unknown parameter 'context' [ 217.144720][ T730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.154090][ T730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.177100][ T730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.187208][ T730] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.196799][ T730] rtc rtc0: __rtc_set_alarm: err=-22 [ 217.243810][T13005] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 217.258413][T13005] batadv_slave_0: entered promiscuous mode [ 217.269016][T12997] 9pnet_fd: Insufficient options for proto=fd [ 217.292875][T13004] batadv_slave_0: left promiscuous mode [ 217.310579][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4148'. [ 217.389799][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 217.550078][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 217.556502][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.568663][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.586800][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.648632][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.661307][T13029] overlay: Unknown parameter 'pcr' [ 217.666997][ T9] usb 2-1: Product: syz [ 217.670928][ T36] audit: type=1400 audit(724.989:697): avc: denied { map } for pid=13028 comm="syz.8.4153" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 217.671539][ T9] usb 2-1: Manufacturer: syz [ 217.700208][ T9] usb 2-1: SerialNumber: syz [ 217.727632][ T36] audit: type=1400 audit(725.035:698): avc: denied { lock } for pid=13038 comm="syz.8.4157" path="socket:[49669]" dev="sockfs" ino=49669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 217.805911][T13048] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4159' sets config #8 [ 217.926764][ T9] usb 2-1: 0:2 : does not exist [ 217.936317][ T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 217.954546][ T9] usb 2-1: USB disconnect, device number 13 [ 218.077752][T13057] batadv_slave_0: entered promiscuous mode [ 218.084818][T13057] batadv_slave_0: left promiscuous mode [ 218.091212][T13057] batadv_slave_0: entered promiscuous mode [ 218.101813][T13057] batadv_slave_0: left promiscuous mode [ 218.114660][T13062] overlayfs: failed to clone upperpath [ 218.154758][T13071] /dev/rnullb0: Can't lookup blockdev [ 218.161324][T13071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4165'. [ 218.180877][ T730] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 218.351919][ T730] usb 9-1: Using ep0 maxpacket: 8 [ 218.358058][ T730] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 218.367092][ T730] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 218.378115][ T730] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 218.388182][ T730] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 218.397436][ T730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.611062][T13087] rust_binder: Error while translating object. [ 218.611095][T13087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 218.617358][T13087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:106 [ 218.752450][T13098] overlayfs: workdir and upperdir must be separate subtrees [ 218.986226][ T36] audit: type=1400 audit(726.214:699): avc: denied { map } for pid=13122 comm="syz.1.4182" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 219.582851][T13138] overlayfs: failed to clone upperpath [ 219.719695][T13141] fuse: Bad value for 'user_id' [ 219.724759][T13141] fuse: Bad value for 'user_id' [ 219.906883][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4195'. [ 220.073064][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.266776][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.278012][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.288213][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.301917][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.311678][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.321849][ T9] usb 2-1: config 0 descriptor?? [ 220.757658][ T9] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 220.767820][ T9] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 221.020829][ T730] usb 9-1: string descriptor 0 read error: -71 [ 221.031017][ T730] usb 9-1: USB disconnect, device number 2 [ 221.536420][ T36] audit: type=1326 audit(728.599:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f373ad8e9a9 code=0x7ffc0000 [ 221.577165][ T36] audit: type=1326 audit(728.599:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f373ad8e9a9 code=0x7ffc0000 [ 221.602289][ T36] audit: type=1326 audit(728.599:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f373ad8e9a9 code=0x7ffc0000 [ 221.625800][ T36] audit: type=1326 audit(728.599:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13241 comm="syz.7.4224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f373ad8e9a9 code=0x7ffc0000 [ 222.740263][T12952] bridge_slave_1: left allmulticast mode [ 222.757055][T12952] bridge_slave_1: left promiscuous mode [ 222.762889][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.781828][T12952] bridge_slave_0: left allmulticast mode [ 222.796043][T12952] bridge_slave_0: left promiscuous mode [ 222.807572][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.831537][ T730] usb 2-1: USB disconnect, device number 14 [ 222.883585][T13284] __vm_enough_memory: pid: 13284, comm: syz.1.4238, bytes: 1152922604118523904 not enough memory for the allocation [ 222.984049][T12952] veth1_macvtap: left promiscuous mode [ 222.991222][T12952] >: left promiscuous mode [ 223.213947][T13289] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.240434][T13289] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.253080][T13289] bridge_slave_0: entered allmulticast mode [ 223.265727][T13289] bridge_slave_0: entered promiscuous mode [ 223.274360][T13303] fuse: Bad value for 'fd' [ 223.279472][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.296659][T13289] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.304361][T13289] bridge_slave_1: entered allmulticast mode [ 223.310854][T13289] bridge_slave_1: entered promiscuous mode [ 223.435005][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.442165][T13289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.449496][T13289] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.456588][T13289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.484635][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.492414][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.514364][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.521555][T12952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.530151][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.537246][T12952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.570826][T13313] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4248'. [ 223.582509][T13313] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4248'. [ 223.592359][T13313] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 223.620799][T13289] veth0_vlan: entered promiscuous mode [ 223.635057][T13289] veth1_macvtap: entered promiscuous mode [ 224.277134][T12958] bridge_slave_1: left allmulticast mode [ 224.282865][T12958] bridge_slave_1: left promiscuous mode [ 224.291201][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.301218][T12958] bridge_slave_0: left allmulticast mode [ 224.317229][T12958] bridge_slave_0: left promiscuous mode [ 224.322930][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.430001][T13342] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4256'. [ 224.459732][T12958] tipc: Disabling bearer [ 224.478674][T12958] tipc: Left network mode [ 224.487787][T12958] veth1_macvtap: left promiscuous mode [ 224.496902][T12958] veth0_vlan: left promiscuous mode [ 224.860519][T13360] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4262'. [ 224.905242][ T730] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 225.055246][ T730] usb 2-1: device descriptor read/64, error -71 [ 225.311515][ T730] usb 2-1: device descriptor read/64, error -71 [ 225.354246][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 225.525269][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 225.534714][ T9] usb 10-1: config index 0 descriptor too short (expected 786, got 42) [ 225.544128][ T9] usb 10-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 225.554761][ T9] usb 10-1: config 0 has no interfaces? [ 225.564482][ T9] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 225.573855][ T730] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 225.582529][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.591049][ T9] usb 10-1: Product: syz [ 225.595515][ T9] usb 10-1: Manufacturer: syz [ 225.601281][ T9] usb 10-1: SerialNumber: syz [ 225.606949][ T9] usb 10-1: config 0 descriptor?? [ 225.749799][ T730] usb 2-1: device descriptor read/64, error -71 [ 225.829509][ T9] usb 10-1: USB disconnect, device number 2 [ 226.006437][ T730] usb 2-1: device descriptor read/64, error -71 [ 226.133661][ T730] usb usb2-port1: attempt power cycle [ 226.154521][T13383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4272'. [ 226.486788][T13389] 9pnet_fd: Insufficient options for proto=fd [ 226.511093][ T730] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 226.541925][ T730] usb 2-1: device descriptor read/8, error -71 [ 226.680918][ T730] usb 2-1: device descriptor read/8, error -71 [ 226.814942][T13394] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 226.936500][ T730] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 226.991520][ T730] usb 2-1: device descriptor read/8, error -71 [ 227.129960][ T730] usb 2-1: device descriptor read/8, error -71 [ 227.257373][ T730] usb usb2-port1: unable to enumerate USB device [ 227.417554][ T307] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 227.567216][ T307] usb 10-1: device descriptor read/64, error -71 [ 227.717892][ T36] audit: type=1326 audit(734.389:704): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13411 comm="syz.2.4283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f737878e9a9 code=0x0 [ 227.845154][ T307] usb 10-1: device descriptor read/64, error -71 [ 227.992752][T13437] 9pnet_fd: Insufficient options for proto=fd [ 228.030648][T13445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 228.101745][ T307] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 228.272786][ T307] usb 10-1: device descriptor read/64, error -71 [ 228.283508][ T350] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.454491][ T350] usb 2-1: Using ep0 maxpacket: 16 [ 228.465636][ T350] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.483548][ T350] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.494079][ T350] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.503232][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.517757][ T350] usb 2-1: Product: syz [ 228.529322][ T350] usb 2-1: Manufacturer: syz [ 228.539421][ T350] usb 2-1: SerialNumber: syz [ 228.544143][ T307] usb 10-1: device descriptor read/64, error -71 [ 228.657706][ T307] usb usb10-port1: attempt power cycle [ 228.776124][ T350] usb 2-1: 0:2 : does not exist [ 228.783351][ T350] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 228.800328][ T350] usb 2-1: USB disconnect, device number 19 [ 229.021196][ T307] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 229.043652][ T307] usb 10-1: device descriptor read/8, error -71 [ 229.147485][T13453] overlayfs: failed to resolve './file1': -2 [ 229.182578][ T307] usb 10-1: device descriptor read/8, error -71 [ 229.440933][ T307] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 229.471226][ T307] usb 10-1: device descriptor read/8, error -71 [ 229.613771][ T307] usb 10-1: device descriptor read/8, error -71 [ 229.743390][ T307] usb usb10-port1: unable to enumerate USB device [ 229.814181][T13483] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 229.838365][T13485] netlink: 'syz.2.4302': attribute type 4 has an invalid length. [ 230.416942][T13491] overlay: ./file1 is not a directory [ 231.393126][T13510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4310'. [ 231.477097][T13517] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 231.504691][T13521] 9pnet: Could not find request transport: bd [ 231.650992][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 231.812551][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.822870][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.832026][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.851715][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.861243][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.869632][ T9] usb 2-1: Product: syz [ 231.874007][ T9] usb 2-1: Manufacturer: syz [ 231.880428][ T9] usb 2-1: SerialNumber: syz [ 231.893048][ T9] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 231.900044][ T9] cdc_ncm 2-1:1.0: bind() failure [ 232.076976][T13531] netlink: 'syz.9.4316': attribute type 11 has an invalid length. [ 232.084956][T13531] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.4316'. [ 232.095901][T13531] rust_binder: Write failure EFAULT in pid:54 [ 232.108134][T13511] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 232.119169][T13533] tipc: Started in network mode [ 232.132151][T13533] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 232.138645][ T9] usb 2-1: USB disconnect, device number 20 [ 232.145606][T13533] tipc: Enabling of bearer rejected, failed to enable media [ 232.193338][T13535] devpts: called with bogus options [ 232.272546][T13537] tmpfs: Bad value for 'nr_inodes' [ 232.371333][T13541] rust_binder: 13539 RLIMIT_NICE not set [ 232.655912][ T307] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 232.827001][ T307] usb 10-1: Using ep0 maxpacket: 16 [ 232.833685][ T307] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.844438][ T307] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.860249][ T350] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 232.877744][ T350] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.888930][ T307] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 232.901808][ T307] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.920837][ T307] usb 10-1: Product: syz [ 232.925431][ T307] usb 10-1: Manufacturer: syz [ 232.930149][ T307] usb 10-1: SerialNumber: syz [ 233.159789][T13544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4321'. [ 233.178328][ T307] usb 10-1: 0:2 : does not exist [ 233.194221][ T307] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 233.218841][ T307] usb 10-1: USB disconnect, device number 7 [ 233.711645][T13585] /dev/rnullb0: Can't open blockdev [ 233.755259][T13587] rust_binder: Write failure EFAULT in pid:69 [ 234.013689][ T730] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 234.195433][ T730] usb 10-1: Using ep0 maxpacket: 32 [ 234.202097][ T730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.213614][ T730] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.223701][ T730] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 234.238259][ T730] usb 10-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 234.241807][T13594] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 234.247437][ T730] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.268075][ T730] usb 10-1: config 0 descriptor?? [ 234.275068][T13594] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:218 [ 234.318460][T13610] /dev/rnullb0: Can't lookup blockdev [ 234.683049][T13641] IPv6: syztnl0: Disabled Multicast RS [ 234.729321][ T730] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.000D/input/input13 [ 234.766668][ T730] input: HID 0458:5011 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5011.000D/input/input14 [ 234.806009][ T730] kye 0003:0458:5011.000D: input,hiddev96,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.9-1/input0 [ 234.939140][ T1111] usb 10-1: USB disconnect, device number 8 [ 235.146312][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 235.155424][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4357'. [ 235.164799][T13656] rust_binder: Error while translating object. [ 235.164833][T13656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 235.171392][T13656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:233 [ 235.199588][T13661] incfs: iterate_incfs_dir / -22 [ 235.254568][T13669] rust_binder: Error in use_page_slow: ESRCH [ 235.254596][T13669] rust_binder: use_range failure ESRCH [ 235.265707][T13669] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 235.271980][T13669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 235.280295][T13669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:245 [ 235.348616][ T36] audit: type=1400 audit(741.517:705): avc: denied { read } for pid=13677 comm="syz.1.4363" path="socket:[51002]" dev="sockfs" ino=51002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.399595][ T36] audit: type=1400 audit(741.555:706): avc: denied { execute } for pid=13677 comm="syz.1.4363" path="pipe:[51005]" dev="pipefs" ino=51005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 235.670808][ T307] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 235.795340][T13695] rust_binder: 13695: no such ref 2 [ 235.801818][T13695] rust_binder: 13695: no such ref 0 [ 237.017775][ T730] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 237.191066][ T730] usb 10-1: Using ep0 maxpacket: 16 [ 237.200284][ T730] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 237.214940][ T730] usb 10-1: config 1 has no interface number 1 [ 237.231942][ T730] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 237.263574][ T730] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.298573][ T730] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.325874][ T730] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.334528][ T730] usb 10-1: Product: syz [ 237.339273][ T730] usb 10-1: Manufacturer: syz [ 237.344048][ T730] usb 10-1: SerialNumber: syz [ 237.364994][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.376995][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.386094][T13755] /dev/rnullb0: Can't lookup blockdev [ 237.391639][T13744] bridge_slave_0: entered allmulticast mode [ 237.401778][T13744] bridge_slave_0: entered promiscuous mode [ 237.414625][T12954] bridge_slave_1: left allmulticast mode [ 237.420378][T12954] bridge_slave_1: left promiscuous mode [ 237.428830][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.445613][T12954] bridge_slave_0: left allmulticast mode [ 237.451781][T12954] bridge_slave_0: left promiscuous mode [ 237.460588][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.575847][ T730] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 237.593373][ T730] usb 10-1: USB disconnect, device number 9 [ 237.606666][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.613766][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.636878][T13744] bridge_slave_1: entered allmulticast mode [ 237.643544][T13744] bridge_slave_1: entered promiscuous mode [ 237.651592][T12954] veth1_macvtap: left promiscuous mode [ 237.663426][T12954] veth0_vlan: left promiscuous mode [ 237.848854][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4399'. [ 237.897163][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.904323][T13744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.911705][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.918789][T13744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.938999][T13790] netlink: 'syz.2.4400': attribute type 1 has an invalid length. [ 238.004889][T13744] veth0_vlan: entered promiscuous mode [ 238.018739][T13744] veth1_macvtap: entered promiscuous mode [ 238.060827][T13796] rust_binder: Write failure EFAULT in pid:2 [ 238.080530][ T36] audit: type=1326 audit(744.071:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13797 comm="syz.0.4403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f2278e9a9 code=0x0 [ 238.137665][T13801] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 238.144856][T13801] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 238.191392][T13802] rust_binder: 13799 RLIMIT_NICE not set [ 238.221047][T13813] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 238.249487][T13818] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 238.458236][T13833] cgroup: fork rejected by pids controller in /syz9 [ 238.986622][ T36] audit: type=1400 audit(744.922:708): avc: denied { connect } for pid=13913 comm="syz.0.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.088530][ T36] audit: type=1400 audit(745.016:709): avc: denied { setattr } for pid=13923 comm="syz.0.4423" name="IEEE-802.15.4-MAC" dev="sockfs" ino=53545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.178970][T13937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4428'. [ 239.288731][T13946] tap0: tun_chr_ioctl cmd 1074025678 [ 239.294084][T13946] tap0: group set to 0 [ 239.298891][T13945] tap0: tun_chr_ioctl cmd 1074025675 [ 239.304245][T13945] tap0: persist disabled [ 239.377761][T13953] netlink: 'syz.1.4432': attribute type 27 has an invalid length. [ 240.772386][T14019] No source specified [ 241.296887][ T36] audit: type=1326 audit(747.083:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14045 comm="syz.9.4464" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d79d8e9a9 code=0x0 [ 241.349106][T14056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61462 sclass=netlink_route_socket pid=14056 comm=syz.2.4467 [ 241.443596][ T36] audit: type=1401 audit(747.214:711): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000020000001000000000000000000000000000000000000000000000051C00000000000000000000000000000000000000000000000000000000000004006000000200000010000000000000000000000000000000000000000000000618804240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 241.479376][T14069] netlink: 'syz.0.4471': attribute type 27 has an invalid length. [ 241.579532][T14069] lo: entered promiscuous mode [ 241.584881][T14069] lo: entered allmulticast mode [ 241.590756][T14069] tunl0: entered promiscuous mode [ 241.596095][T14069] tunl0: entered allmulticast mode [ 241.603484][T14069] gre0: entered promiscuous mode [ 241.608802][T14069] gre0: entered allmulticast mode [ 241.614317][T14069] gretap0: entered promiscuous mode [ 241.619834][T14069] gretap0: entered allmulticast mode [ 241.626647][T14069] erspan0: entered promiscuous mode [ 241.631920][T14069] erspan0: entered allmulticast mode [ 241.638475][T14069] ip_vti0: entered promiscuous mode [ 241.643739][T14069] ip_vti0: entered allmulticast mode [ 241.649790][T14069] ip6_vti0: entered promiscuous mode [ 241.655122][T14069] ip6_vti0: entered allmulticast mode [ 241.661411][T14069] sit0: entered promiscuous mode [ 241.667376][T14069] sit0: entered allmulticast mode [ 241.673327][T14069] ip6tnl0: entered promiscuous mode [ 241.678621][T14069] ip6tnl0: entered allmulticast mode [ 241.684779][T14069] ip6gre0: entered promiscuous mode [ 241.697131][T14069] ip6gre0: entered allmulticast mode [ 241.707682][T14069] syz_tun: entered promiscuous mode [ 241.720033][T14069] syz_tun: entered allmulticast mode [ 241.731947][T14069] ip6gretap0: entered promiscuous mode [ 241.743383][T14069] ip6gretap0: entered allmulticast mode [ 241.755801][T14069] bridge0: entered promiscuous mode [ 241.761824][T14069] bridge0: entered allmulticast mode [ 241.772523][T14069] vcan0: entered promiscuous mode [ 241.777713][T14069] vcan0: entered allmulticast mode [ 241.783121][T14069] dummy0: entered promiscuous mode [ 241.788366][T14069] dummy0: entered allmulticast mode [ 241.793981][T14069] veth0: entered promiscuous mode [ 241.799222][T14069] veth0: entered allmulticast mode [ 241.805024][T14069] veth1: entered promiscuous mode [ 241.810158][T14069] veth1: entered allmulticast mode [ 241.815962][T14069] wg0: entered promiscuous mode [ 241.820875][T14069] wg0: entered allmulticast mode [ 241.826258][T14069] wg1: entered promiscuous mode [ 241.831232][T14069] wg1: entered allmulticast mode [ 241.836487][T14069] wg2: entered promiscuous mode [ 241.841595][T14069] wg2: entered allmulticast mode [ 241.846887][T14069] veth0_to_bridge: entered promiscuous mode [ 241.852960][T14069] veth0_to_bridge: entered allmulticast mode [ 241.860592][T14069] veth1_to_bridge: entered promiscuous mode [ 241.866524][T14069] veth1_to_bridge: entered allmulticast mode [ 241.873670][T14069] veth0_to_bond: entered promiscuous mode [ 241.879448][T14069] veth0_to_bond: entered allmulticast mode [ 241.886225][T14069] bond_slave_0: entered promiscuous mode [ 241.892014][T14069] bond_slave_0: entered allmulticast mode [ 241.898242][T14069] veth1_to_bond: entered promiscuous mode [ 241.904186][T14069] veth1_to_bond: entered allmulticast mode [ 241.910947][T14069] bond_slave_1: entered promiscuous mode [ 241.916784][T14069] bond_slave_1: entered allmulticast mode [ 241.923140][T14069] veth0_to_team: entered promiscuous mode [ 241.929024][T14069] veth0_to_team: entered allmulticast mode [ 241.935864][T14069] team_slave_0: entered promiscuous mode [ 241.941603][T14069] team_slave_0: entered allmulticast mode [ 241.948025][T14069] veth1_to_team: entered promiscuous mode [ 241.954004][T14069] veth1_to_team: entered allmulticast mode [ 241.960776][T14069] team_slave_1: entered promiscuous mode [ 241.966468][T14069] team_slave_1: entered allmulticast mode [ 241.972740][T14069] veth0_to_batadv: entered promiscuous mode [ 241.978881][T14069] veth0_to_batadv: entered allmulticast mode [ 241.985743][T14069] batadv_slave_0: entered promiscuous mode [ 241.991710][T14069] batadv_slave_0: entered allmulticast mode [ 241.998153][T14069] veth1_to_batadv: entered promiscuous mode [ 242.004159][T14069] veth1_to_batadv: entered allmulticast mode [ 242.010964][T14069] batadv_slave_1: entered promiscuous mode [ 242.016822][T14069] batadv_slave_1: entered allmulticast mode [ 242.023629][T14069] xfrm0: entered promiscuous mode [ 242.028712][T14069] xfrm0: entered allmulticast mode [ 242.034811][T14069] veth0_to_hsr: entered promiscuous mode [ 242.040590][T14069] veth0_to_hsr: entered allmulticast mode [ 242.047218][T14069] hsr_slave_0: entered promiscuous mode [ 242.052855][T14069] hsr_slave_0: entered allmulticast mode [ 242.059543][T14069] veth1_to_hsr: entered promiscuous mode [ 242.065492][T14069] veth1_to_hsr: entered allmulticast mode [ 242.072150][T14069] hsr_slave_1: entered promiscuous mode [ 242.078048][T14069] hsr_slave_1: entered allmulticast mode [ 242.084432][T14069] veth1_virt_wifi: entered promiscuous mode [ 242.090625][T14069] veth1_virt_wifi: entered allmulticast mode [ 242.099295][T14069] veth0_virt_wifi: entered promiscuous mode [ 242.105288][T14069] veth0_virt_wifi: entered allmulticast mode [ 242.111911][T14069] veth1_vlan: entered promiscuous mode [ 242.117485][T14069] veth1_vlan: entered allmulticast mode [ 242.123618][T14069] veth0_vlan: entered allmulticast mode [ 242.130323][T14069] vlan0: entered promiscuous mode [ 242.135565][T14069] vlan0: entered allmulticast mode [ 242.141349][T14069] vlan1: entered promiscuous mode [ 242.146540][T14069] vlan1: entered allmulticast mode [ 242.152422][T14069] veth1_macvtap: entered allmulticast mode [ 242.159182][T14069] veth0_macvtap: entered promiscuous mode [ 242.165181][T14069] veth0_macvtap: entered allmulticast mode [ 242.172052][T14069] macsec0: entered promiscuous mode [ 242.177424][T14069] macsec0: entered allmulticast mode [ 242.192644][T14084] proc: Unknown parameter 'audit' [ 242.214512][T14087] /dev/rnullb0: Can't open blockdev [ 242.449722][T14106] rust_binder: Error in use_page_slow: ESRCH [ 242.449750][T14106] rust_binder: use_range failure ESRCH [ 242.466706][T14106] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 242.472450][T14106] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 242.487395][T14106] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:205 [ 242.620746][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4483'. [ 242.659390][T14111] netlink: 21 bytes leftover after parsing attributes in process `syz.9.4483'. [ 242.670096][T14111] netlink: 'syz.9.4483': attribute type 2 has an invalid length. [ 242.693806][T14116] netlink: 'syz.2.4485': attribute type 6 has an invalid length. [ 242.693903][T14111] netlink: 21 bytes leftover after parsing attributes in process `syz.9.4483'. [ 242.715781][T14116] IPv6: NLM_F_CREATE should be specified when creating new route [ 243.009577][T14142] /dev/rnullb0: Can't open blockdev [ 243.108136][T14151] rust_binder: 14151: no such ref 2 [ 243.184402][T14152] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 243.184431][T14152] rust_binder: Read failure Err(EFAULT) in pid:353 [ 243.338247][T14157] tmpfs: Unexpected value for 'inode32' [ 243.360516][T14159] binder: Unknown parameter '' [ 243.368401][T14161] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 243.410587][T14172] fuse: Bad value for 'group_id' [ 243.415718][T14172] fuse: Bad value for 'group_id' [ 243.650296][T14190] 9pnet_fd: Insufficient options for proto=fd [ 243.712078][T14199] /dev/rnullb0: Can't lookup blockdev [ 243.894692][ T36] audit: type=1326 audit(749.515:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14234 comm="syz.2.4527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737878e9a9 code=0x0 [ 244.479777][ T1111] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.640120][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 244.646495][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.657807][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.670780][ T1111] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.679915][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.688632][ T1111] usb 2-1: config 0 descriptor?? [ 244.792237][T14232] overlayfs: statfs failed on './file0' [ 244.823519][T14257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28952 sclass=netlink_route_socket pid=14257 comm=syz.2.4534 [ 245.144142][ T1111] HID 045e:07da: Invalid code 65791 type 1 [ 245.153518][ T1111] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000E/input/input15 [ 245.166867][ T1111] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 245.206745][ T307] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 245.367752][ T307] usb 10-1: not running at top speed; connect to a high speed hub [ 245.376469][ T307] usb 10-1: config 127 has an invalid interface number: 19 but max is 1 [ 245.384866][ T307] usb 10-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 245.393941][ T307] usb 10-1: config 127 has an invalid interface number: 224 but max is 1 [ 245.402455][ T307] usb 10-1: config 127 has an invalid interface number: 244 but max is 1 [ 245.411825][ T307] usb 10-1: config 127 has 3 interfaces, different from the descriptor's value: 2 [ 245.421363][ T307] usb 10-1: config 127 has no interface number 0 [ 245.427829][ T307] usb 10-1: config 127 has no interface number 1 [ 245.434269][ T307] usb 10-1: config 127 has no interface number 2 [ 245.440636][ T307] usb 10-1: config 127 interface 19 altsetting 64 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 245.451803][ T307] usb 10-1: config 127 interface 19 altsetting 64 has a duplicate endpoint with address 0x4, skipping [ 245.462814][ T307] usb 10-1: config 127 interface 19 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 245.473988][ T307] usb 10-1: config 127 interface 19 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 245.485154][ T307] usb 10-1: config 127 interface 19 altsetting 64 endpoint 0x6 has an invalid bInterval 64, changing to 4 [ 245.496541][ T307] usb 10-1: config 127 interface 19 altsetting 64 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 245.509891][ T307] usb 10-1: too many endpoints for config 127 interface 224 altsetting 246: 59, using maximum allowed: 30 [ 245.521334][ T307] usb 10-1: config 127 interface 224 altsetting 246 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 245.532697][ T307] usb 10-1: config 127 interface 224 altsetting 246 has 1 endpoint descriptor, different from the interface descriptor's value: 59 [ 245.546325][ T307] usb 10-1: config 127 interface 244 altsetting 11 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 245.558071][ T307] usb 10-1: config 127 interface 244 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 245.569192][ T307] usb 10-1: config 127 interface 244 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 245.580330][ T307] usb 10-1: config 127 interface 19 has no altsetting 0 [ 245.587340][ T307] usb 10-1: config 127 interface 224 has no altsetting 0 [ 245.594484][ T307] usb 10-1: config 127 interface 244 has no altsetting 0 [ 245.608072][ T307] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=a6.7a [ 245.617319][ T307] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.617793][T14289] netlink: 'syz.2.4545': attribute type 6 has an invalid length. [ 245.625474][ T307] usb 10-1: Product:  [ 245.625498][ T307] usb 10-1: Manufacturer: 䒚蒨䲜蓕饣㇙⻭쎢넒㯛ㇼꆜ논눺皁岮腰뙠︻熸㱖푸툦珙援໎⅙帿弙襣ᅙꎒ籥낌뵕沞㵱劮炔㧅⇙狡ᄀ稚醏惽蚳䪙웲㇬ဦ鳰弊訮ฺ묣ꂧ毯䮽꟯䜮哯썝봩뙫者ꆖ媡쌰즫摗콿踫놰쌸␲滶朒庭㍧밎͞贍㹠䃇ꐐ촄晭↪俾嶺ޤ [ 245.667679][ T307] usb 10-1: SerialNumber: 矷᤺竼灇䇰䘙詌驼坆龼눻ꄢൕ䡠河ﳤ찋캨瓶Й釶ඕ㓪䋌邵晓䟋⼹苞ꡜᦀ輆꯵⡕뀕뵡咠╗앆璼ࣸ鈽廭䲁洼쪥鹝௏嬶爡癮돺㚓徢傪㵞嬄ꄘ荤躢挊휭렃乏媕䧑ঈ䉀獏䵜뱂톈⊱⩾⛌ﲳ耫赋໸痏결쫼頼숅ฅ큓辈ᙎС籞剧輸⼃眿㌕쟡쯗ꨚ뒐᝔驸ᬻᨼ잧洜镚胚䈔鎓ꛪ [ 245.793499][ T36] audit: type=1400 audit(751.283:713): avc: denied { listen } for pid=14307 comm="syz.2.4553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.813327][ T36] audit: type=1326 audit(751.283:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.2.4553" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f737878e9a9 code=0x0 [ 245.963548][T14244] kvm: pic: non byte read [ 245.969044][T14244] kvm: pic: single mode not supported [ 245.969750][T14244] kvm: pic: level sensitive irq not supported [ 245.976133][T14244] kvm: pic: level sensitive irq not supported [ 245.982529][T14244] kvm: pic: single mode not supported [ 245.988703][T14244] kvm: pic: level sensitive irq not supported [ 245.994525][T14244] kvm: pic: single mode not supported [ 246.001138][T14244] kvm: pic: level sensitive irq not supported [ 246.006713][T14244] kvm: pic: level sensitive irq not supported [ 246.013382][T14244] kvm: pic: single mode not supported [ 246.019747][T14244] kvm: pic: level sensitive irq not supported [ 246.025432][T14244] kvm: pic: level sensitive irq not supported [ 246.032280][T14244] kvm: pic: single mode not supported [ 246.038509][T14244] kvm: pic: single mode not supported [ 246.044097][T14244] kvm: pic: single mode not supported [ 246.049511][T14244] kvm: pic: level sensitive irq not supported [ 246.055323][T14244] kvm: pic: single mode not supported [ 246.061430][T14244] kvm: pic: level sensitive irq not supported [ 246.067107][T14244] kvm: pic: single mode not supported [ 246.073281][T14244] kvm: pic: level sensitive irq not supported [ 246.079060][T14244] kvm: pic: single mode not supported [ 246.788200][ T48] usb 10-1: USB disconnect, device number 10 [ 246.954962][T12954] bridge_slave_1: left allmulticast mode [ 246.960832][T12954] bridge_slave_1: left promiscuous mode [ 246.966696][T12954] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.975261][T12954] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.006274][T12954] bridge0 (unregistering): left allmulticast mode [ 247.077219][T14333] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.084368][T14333] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.091507][T14333] bridge_slave_0: entered allmulticast mode [ 247.097805][T14333] bridge_slave_0: entered promiscuous mode [ 247.104453][T14333] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.111809][T14333] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.118893][T14333] bridge_slave_1: entered allmulticast mode [ 247.125369][T14333] bridge_slave_1: entered promiscuous mode [ 247.166566][T12954] tipc: Left network mode [ 247.172097][T12954] veth1_macvtap: left promiscuous mode [ 247.177702][T12954] veth0_vlan: left promiscuous mode [ 247.226897][ T1111] usb 2-1: USB disconnect, device number 22 [ 247.241213][T14333] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.248336][T14333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.255734][T14333] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.262830][T14333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.298424][T12958] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.306198][T12958] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.316764][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.323873][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.333899][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.341021][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.398699][T14333] veth0_vlan: entered promiscuous mode [ 247.429662][T14333] veth1_macvtap: entered promiscuous mode [ 247.654080][T14354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4566'. [ 247.677920][T14358] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4568'. [ 247.689484][T14358] binder: Unknown parameter 'audit' [ 247.743753][T14364] binder: Unknown parameter 'scontext' [ 247.743889][T14363] binder: Unknown parameter 'scontext' [ 247.923156][T14382] rust_binder: Error while translating object. [ 247.923199][T14382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 247.932872][T14382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:20 [ 247.946065][T14387] 9pnet_fd: Insufficient options for proto=fd [ 248.006034][T14390] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.048478][ T36] audit: type=1400 audit(753.397:715): avc: denied { listen } for pid=14397 comm="syz.1.4586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 248.116763][T14402] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 248.157335][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 248.169815][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.180623][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.189747][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.197448][ T48] rtc_cmos 00:00: Alarms can be up to one day in the future [ 248.204830][ T48] rtc rtc0: __rtc_set_alarm: err=-22 [ 248.209811][T14415] 9pnet_fd: Insufficient options for proto=fd [ 248.328347][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 248.335681][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 248.344636][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 248.355175][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.370832][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.385854][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.394542][ T9] usb 1-1: Product: syz [ 248.405218][ T9] usb 1-1: Manufacturer: syz [ 248.408532][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4600'. [ 248.413437][ T9] usb 1-1: SerialNumber: syz [ 248.469196][T14462] tipc: Enabling of bearer rejected, media not registered [ 248.588503][T14465] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 248.894981][ T1111] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 249.055342][ T1111] usb 10-1: Using ep0 maxpacket: 32 [ 249.061853][ T1111] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 249.070202][ T1111] usb 10-1: config 0 has no interface number 0 [ 249.078126][ T1111] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 249.087479][ T1111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.095642][ T1111] usb 10-1: Product: syz [ 249.100378][T14380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4571'. [ 249.117306][ T1111] usb 10-1: Manufacturer: syz [ 249.124625][ T1111] usb 10-1: SerialNumber: syz [ 249.131093][ T9] usb 1-1: 0:2 : does not exist [ 249.136288][ T1111] usb 10-1: config 0 descriptor?? [ 249.145056][ T1111] smsc95xx v2.0.0 [ 249.149543][ T9] usb 1-1: USB disconnect, device number 7 [ 249.439473][ T36] audit: type=1400 audit(754.697:716): avc: denied { read } for pid=14483 comm="syz.2.4610" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.461980][ T36] audit: type=1400 audit(754.697:717): avc: denied { open } for pid=14483 comm="syz.2.4610" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 249.536401][ T306] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 249.546127][ T36] audit: type=1400 audit(754.790:718): avc: denied { read write } for pid=14488 comm="syz.2.4611" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.568900][ T36] audit: type=1400 audit(754.790:719): avc: denied { open } for pid=14488 comm="syz.2.4611" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.591925][ T1111] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 249.598400][ T36] audit: type=1400 audit(754.809:720): avc: denied { map } for pid=14488 comm="syz.2.4611" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.605882][ T1111] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 249.636421][T14491] rust_binder: Error while translating object. [ 249.636444][T14491] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 249.642649][T14491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:54 [ 249.668925][T14493] rust_binder: Error while translating object. [ 249.678396][T14493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 249.684720][T14493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:56 [ 249.719264][ T306] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.757293][T14501] binder: Bad value for 'defcontext' [ 249.763178][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.780597][ T306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.797686][T14507] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 249.807583][ T306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.820858][T14507] SELinux: failed to load policy [ 249.831608][ T306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.850377][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.859359][ T306] usb 2-1: config 0 descriptor?? [ 250.079643][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.089238][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.097768][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.106389][ T730] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 250.114243][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.123012][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.132053][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.141144][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.150422][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.151049][T14474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.166608][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.167638][T14474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.176498][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.194983][ T306] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 250.202973][ T1111] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 250.214083][ T1111] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 250.225191][ T1111] usb 10-1: USB disconnect, device number 11 [ 250.231633][ T306] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 250.274194][ T730] usb 1-1: Using ep0 maxpacket: 16 [ 250.281780][ T730] usb 1-1: config index 0 descriptor too short (expected 786, got 42) [ 250.290510][ T730] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 250.309892][ T730] usb 1-1: config 0 has no interfaces? [ 250.317178][ T730] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 250.326252][ T730] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.334642][ T730] usb 1-1: Product: syz [ 250.338874][ T730] usb 1-1: Manufacturer: syz [ 250.343564][ T730] usb 1-1: SerialNumber: syz [ 250.353251][ T730] usb 1-1: config 0 descriptor?? [ 250.391429][ T36] audit: type=1400 audit(755.586:721): avc: denied { append } for pid=14523 comm="syz.9.4622" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.414983][ T36] audit: type=1400 audit(755.614:722): avc: denied { create } for pid=14523 comm="syz.9.4622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 250.434241][ T36] audit: type=1400 audit(755.614:723): avc: denied { create } for pid=14523 comm="syz.9.4622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 250.577409][ T1111] usb 2-1: USB disconnect, device number 23 [ 250.729742][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'. [ 250.731849][ T36] audit: type=1400 audit(755.904:724): avc: denied { sys_module } for pid=14533 comm="syz.1.4625" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 250.791351][T14556] rust_binder: Write failure EINVAL in pid:73 [ 250.791430][T14556] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 251.802547][T14583] overlay: filesystem on ./bus not supported as upperdir [ 251.824343][ T307] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 251.869274][T12958] Bluetooth: hci0: Frame reassembly failed (-84) [ 251.875797][T14590] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 251.984584][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 251.991177][ T307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.006377][ T307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.020887][ T307] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.030043][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.038225][ T307] usb 2-1: Product: syz [ 252.042435][ T307] usb 2-1: Manufacturer: syz [ 252.047058][ T307] usb 2-1: SerialNumber: syz [ 252.267389][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.276056][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.285566][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.294164][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.309017][ T307] usb 2-1: 0:2 : does not exist [ 252.316205][ T307] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 252.330772][ T307] usb 2-1: USB disconnect, device number 24 [ 252.352140][ T6773] udevd[6773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 252.700829][ T307] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 252.861193][ T307] usb 2-1: Using ep0 maxpacket: 32 [ 252.865948][T14624] 9pnet_fd: Insufficient options for proto=fd [ 252.867653][ T307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.888344][ T307] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 252.897892][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.905942][ T307] usb 2-1: Product: syz [ 252.910210][ T307] usb 2-1: Manufacturer: syz [ 252.914874][ T307] usb 2-1: SerialNumber: syz [ 252.920302][ T307] usb 2-1: config 0 descriptor?? [ 252.928529][ T307] usb 2-1: bad CDC descriptors [ 252.933561][ T307] usb 2-1: unsupported MDLM descriptors [ 253.063935][ T306] usb 1-1: USB disconnect, device number 8 [ 253.195884][T14633] tipc: Started in network mode [ 253.200792][T14633] tipc: Node identity 2, cluster identity 2 [ 253.211744][T14633] tipc: Node number set to 2 [ 253.219310][T14633] tipc: Cannot configure node identity twice [ 253.258740][T14635] overlayfs: failed to clone upperpath [ 253.279010][ T307] usb 2-1: USB disconnect, device number 25 [ 253.284258][T14637] fuse: Bad value for 'fd' [ 253.427270][T14647] 9pnet_fd: Insufficient options for proto=fd [ 254.037128][T14593] Bluetooth: hci0: command 0x1003 tx timeout [ 254.037126][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 254.110624][T14712] netlink: 'syz.1.4684': attribute type 2 has an invalid length. [ 254.130533][T14718] overlay: Unknown parameter 'subj_user' [ 254.143217][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 254.143235][ T36] audit: type=1400 audit(759.093:727): avc: denied { map } for pid=14721 comm="syz.1.4687" path="socket:[57754]" dev="sockfs" ino=57754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.205599][T14729] overlayfs: failed to clone upperpath [ 254.336083][T14742] overlayfs: failed to resolve './file0': -2 [ 254.364133][T14750] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 254.372001][T14750] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.381878][T14750] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 254.389673][T14750] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 254.413677][T14755] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 254.441128][T14758] tipc: Enabling of bearer rejected, failed to enable media [ 254.562944][T14761] overlayfs: failed to clone upperpath [ 254.689278][ T307] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 254.849643][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 254.856137][ T307] usb 2-1: config index 0 descriptor too short (expected 786, got 42) [ 254.864405][ T307] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 254.874712][ T307] usb 2-1: config 0 has no interfaces? [ 254.881715][ T307] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 254.890794][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.898886][ T307] usb 2-1: Product: syz [ 254.903247][ T307] usb 2-1: Manufacturer: syz [ 254.907865][ T307] usb 2-1: SerialNumber: syz [ 254.913151][ T307] usb 2-1: config 0 descriptor?? [ 255.134581][ T307] usb 2-1: USB disconnect, device number 26 [ 255.264966][T14798] 9pnet_fd: Insufficient options for proto=fd [ 255.547023][T14805] netlink: 'syz.2.4716': attribute type 21 has an invalid length. [ 255.565990][T14805] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4716'. [ 255.900534][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4724'. [ 255.916637][T14835] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 255.972445][T14845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=14845 comm=syz.1.4726 [ 256.044047][T14847] overlayfs: missing 'workdir' [ 256.447681][T14864] netlink: 'syz.2.4730': attribute type 16 has an invalid length. [ 256.459843][T14864] netlink: 'syz.2.4730': attribute type 3 has an invalid length. [ 256.467706][T14864] netlink: 63938 bytes leftover after parsing attributes in process `syz.2.4730'. [ 256.474594][ T1111] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 256.645635][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 256.653053][ T1111] usb 2-1: config index 0 descriptor too short (expected 786, got 42) [ 256.661585][ T1111] usb 2-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 256.675431][ T1111] usb 2-1: config 0 has no interfaces? [ 256.684201][ T1111] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 256.690029][T14882] binder: Bad value for 'stats' [ 256.693771][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.708556][ T1111] usb 2-1: Product: syz [ 256.715119][ T1111] usb 2-1: Manufacturer: syz [ 256.721205][ T1111] usb 2-1: SerialNumber: syz [ 256.727995][ T1111] usb 2-1: config 0 descriptor?? [ 256.867079][ T36] audit: type=1400 audit(761.647:728): avc: denied { create } for pid=14888 comm="syz.9.4738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 256.943772][T14897] netlink: 'syz.9.4742': attribute type 7 has an invalid length. [ 256.952530][T14897] 9pnet_fd: Insufficient options for proto=fd [ 256.962089][ T1111] usb 2-1: USB disconnect, device number 27 [ 257.222983][ T307] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 257.358104][T14921] netlink: 'syz.0.4753': attribute type 4 has an invalid length. [ 257.373688][T14921] netlink: 'syz.0.4753': attribute type 4 has an invalid length. [ 257.398393][ T307] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 257.410112][ T307] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 257.420130][ T307] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 257.429361][ T307] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.655512][ T307] aiptek 10-1:17.0: Aiptek using 400 ms programming speed [ 257.663451][ T307] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input18 [ 257.674981][ T307] usb 10-1: USB disconnect, device number 12 [ 257.761216][T14931] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 257.941509][ T36] audit: type=1326 audit(762.657:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14933 comm="syz.0.4757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f2278e9a9 code=0x0 [ 258.022852][T14938] netlink: 'syz.2.4758': attribute type 4 has an invalid length. [ 258.032780][T14938] netlink: 'syz.2.4758': attribute type 4 has an invalid length. [ 258.873852][T14997] 9pnet_fd: Insufficient options for proto=fd [ 258.902753][T15001] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 259.009851][T15021] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4787'. [ 259.073324][ T48] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 259.286220][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 259.293237][ T48] usb 2-1: config 4 has an invalid interface number: 78 but max is 3 [ 259.301675][ T48] usb 2-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 259.318299][ T48] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 4 [ 259.332590][ T48] usb 2-1: config 4 has no interface number 0 [ 259.338894][ T48] usb 2-1: config 4 interface 78 altsetting 128 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 259.359589][ T48] usb 2-1: config 4 interface 78 altsetting 128 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 259.370917][ T48] usb 2-1: config 4 interface 78 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 259.384787][ T48] usb 2-1: config 4 interface 78 altsetting 128 has a duplicate endpoint with address 0xF, skipping [ 259.404027][ T48] usb 2-1: config 4 interface 78 altsetting 128 has a duplicate endpoint with address 0xE, skipping [ 259.415102][ T48] usb 2-1: config 4 interface 78 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 259.426337][ T48] usb 2-1: config 4 interface 78 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 259.442404][ T48] usb 2-1: config 4 interface 78 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 259.453947][ T48] usb 2-1: config 4 interface 78 altsetting 128 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 259.467651][ T48] usb 2-1: config 4 interface 78 has no altsetting 0 [ 259.475629][T15049] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4798'. [ 259.485210][ T48] usb 2-1: New USB device found, idVendor=15a9, idProduct=0004, bcdDevice=5e.e0 [ 259.498958][T15050] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4798'. [ 259.508221][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.516680][ T48] usb 2-1: Product: ю [ 259.521043][T15049] binder: Bad value for 'max' [ 259.522982][T15050] binder: Bad value for 'max' [ 259.526097][ T48] usb 2-1: Manufacturer: ࠬ [ 259.535618][ T48] usb 2-1: SerialNumber: 쭡婲㴵쬖몝⡲賠⡼㸭뤡ꉁ⊙쾴놕䈞졀샐崟ﮱℹ龡ဒ賁ﺯ⋯뜠즁일绥〵도폛䆮덢쯁戫폴蠞Ὑ⽯浦劷짖ሽ὚䥬䙩龤죱駋㞪ꕐ漲ჽ䜻ꚵ炃踵응⬨㊜ᩊ╎忉쮊≄ﺁꠄ䏚恂㍉ሜ䰰䒫祳䎰됈藋馢㥎纪梀 [ 259.797343][ T48] usb 2-1: USB disconnect, device number 28 [ 259.949073][ T306] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 260.121265][ T306] usb 10-1: config index 0 descriptor too short (expected 1051, got 27) [ 260.129905][ T306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 260.141080][ T306] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 260.173052][ T306] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 260.191433][ T306] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.211766][ T306] usb 10-1: Product: syz [ 260.216119][ T306] usb 10-1: Manufacturer: syz [ 260.226985][ T306] usb 10-1: SerialNumber: syz [ 260.237934][ T306] usb 10-1: config 0 descriptor?? [ 260.418694][T15131] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 260.419632][T15130] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 16777216 [ 260.460322][T15095] rust_binder: Error in use_page_slow: ESRCH [ 260.460352][T15095] rust_binder: use_range failure ESRCH [ 260.472891][T15095] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 260.478425][T15095] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 260.505043][T15095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:467 [ 260.529425][ T48] usb 10-1: USB disconnect, device number 13 [ 260.888787][T15155] overlayfs: conflicting options: userxattr,verity=require [ 260.900658][ T1111] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 261.060905][ T1111] usb 2-1: Using ep0 maxpacket: 16 [ 261.072694][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.090689][ T1111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.111991][T15163] netlink: 'syz.9.4837': attribute type 29 has an invalid length. [ 261.115836][ T1111] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.119906][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4837'. [ 261.144593][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.163663][ T1111] usb 2-1: Product: syz [ 261.167943][ T1111] usb 2-1: Manufacturer: syz [ 261.172829][ T1111] usb 2-1: SerialNumber: syz [ 261.395238][ T1111] usb 2-1: 0:2 : does not exist [ 261.402483][ T1111] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 261.417633][ T1111] usb 2-1: USB disconnect, device number 29 [ 261.434390][ T6773] udevd[6773]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 261.947151][T15197] binder: Unknown parameter '0x0000000000000000' [ 261.993454][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.002348][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.011223][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.019875][T15205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.020241][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.028723][T15205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.259122][ T48] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 262.420408][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.431371][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.441224][ T48] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 262.450294][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.459158][ T48] usb 2-1: config 0 descriptor?? [ 262.480612][T15236] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 262.588034][T15246] rust_binder: 15245 RLIMIT_NICE not set [ 262.588159][T15246] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512 [ 262.680985][ T48] usbhid 2-1:0.0: can't add hid device: -71 [ 262.696117][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 262.705544][ T48] usb 2-1: USB disconnect, device number 30 [ 263.089722][T15254] overlayfs: missing 'lowerdir' [ 263.117336][T15258] 9pnet: Could not find request transport: fI[gjrfdno=.~3'V /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 412.535179][ T37] task:syz.1.5095 state:D stack:0 pid:15939 tgid:15938 ppid:12167 flags:0x00004000 [ 413.059933][ C1] net_ratelimit: 123177 callbacks suppressed [ 413.059957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.060167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.066107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.078020][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.089901][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.101957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:ff:64:dd:a3:03, vlan:0) [ 413.113849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.126248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 413.137894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 413.149914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 414.964223][ T37] Call Trace: [ 414.967575][ T37] [ 414.970541][ T37] __schedule+0x132b/0x1e00 [ 416.268450][T16058] CPU: 1 UID: 0 PID: 16058 Comm: syz-executor Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 416.268495][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.268511][T16058] Call Trace: [ 416.268519][T16058] [ 416.268531][T16058] __dump_stack+0x21/0x30 [ 416.268565][T16058] dump_stack_lvl+0x10c/0x190 [ 416.268593][T16058] ? __cfi_dump_stack_lvl+0x10/0x10 [ 416.268622][T16058] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 416.268651][T16058] dump_stack+0x19/0x20 [ 416.268677][T16058] warn_alloc+0x1bc/0x2a0 [ 416.268703][T16058] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 416.268734][T16058] ? __cfi_warn_alloc+0x10/0x10 [ 416.268760][T16058] ? __get_vm_area_node+0x1dc/0x3a0 [ 416.268785][T16058] ? kcov_ioctl+0x5d/0x5c0 [ 416.268812][T16058] __vmalloc_node_range_noprof+0x68e/0x1420 [ 416.268845][T16058] ? locks_remove_posix+0x38b/0x580 [ 416.268879][T16058] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 416.268907][T16058] ? expand_files+0xd6/0x700 [ 416.268944][T16058] vmalloc_user_noprof+0x77/0x90 [ 416.268971][T16058] ? kcov_ioctl+0x5d/0x5c0 [ 416.268996][T16058] kcov_ioctl+0x5d/0x5c0 [ 416.269021][T16058] ? bpf_lsm_file_ioctl+0xd/0x20 [ 416.269049][T16058] ? security_file_ioctl+0x34/0xd0 [ 416.269083][T16058] ? __cfi_kcov_ioctl+0x10/0x10 [ 416.269108][T16058] __se_sys_ioctl+0x132/0x1b0 [ 416.269144][T16058] __x64_sys_ioctl+0x7f/0xa0 [ 416.269178][T16058] x64_sys_call+0x1878/0x2ee0 [ 416.269209][T16058] do_syscall_64+0x58/0xf0 [ 416.269234][T16058] ? clear_bhb_loop+0x50/0xa0 [ 416.269265][T16058] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 416.269296][T16058] RIP: 0033:0x7f1a9758e5ab [ 416.269335][T16058] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 416.269364][T16058] RSP: 002b:00007ffcc53882e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.269391][T16058] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f1a9758e5ab [ 416.269409][T16058] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 416.269427][T16058] RBP: 00007f1a977b63b8 R08: 00000000000000da R09: 0000000000000000 [ 416.269444][T16058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.269460][T16058] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 416.269478][T16058] [ 416.269489][T16058] Mem-Info: [ 418.415926][ C1] net_ratelimit: 126601 callbacks suppressed [ 418.415950][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.415974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.422201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.434083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.446052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.458070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:ff:64:dd:a3:03, vlan:0) [ 418.469956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.482181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 418.493811][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 418.505837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.196816][ T37] ? __sched_text_start+0x10/0x10 [ 420.230948][T16058] active_anon:8908 inactive_anon:2271 isolated_anon:0 [ 420.230948][T16058] active_file:12285 inactive_file:13086 isolated_file:0 [ 420.230948][T16058] unevictable:41 dirty:0 writeback:0 [ 420.230948][T16058] slab_reclaimable:4729 slab_unreclaimable:179638 [ 420.230948][T16058] mapped:37889 shmem:4261 pagetables:550 [ 420.230948][T16058] sec_pagetables:0 bounce:0 [ 420.230948][T16058] kernel_misc_reclaimable:0 [ 420.230948][T16058] free:1382803 free_pcp:1491 free_cma:0 [ 420.289419][ T37] ? __cfi_percpu_ref_switch_to_atomic_rcu+0x10/0x10 [ 420.296181][ T37] ? __call_rcu_common+0x40b/0x6f0 [ 420.384394][ T37] schedule+0xc6/0x240 [ 420.388549][ T37] schedule_timeout+0xb2/0x3a0 [ 420.431080][ T37] ? __cfi_schedule_timeout+0x10/0x10 [ 420.470621][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 420.476247][ T37] ? __percpu_ref_switch_mode+0x345/0x5f0 [ 420.628961][ T37] wait_for_common+0x359/0x630 [ 420.633813][ T37] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 420.661825][T16058] Node 0 active_anon:33132kB inactive_anon:9084kB active_file:49140kB inactive_file:52344kB unevictable:164kB isolated(anon):0kB isolated(file):0kB mapped:128256kB dirty:0kB writeback:0kB shmem:17044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4748kB pagetables:2000kB sec_pagetables:0kB all_unreclaimable? no [ 420.696629][ T37] ? wait_for_completion+0x40/0x40 [ 420.701807][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 420.737722][ T37] ? percpu_ref_kill_and_confirm+0xf4/0x220 [ 420.743706][ T37] ? kill_ioctx+0x2b0/0x3d0 [ 420.779844][ T37] wait_for_completion+0x1c/0x40 [ 420.784865][ T37] exit_aio+0x2df/0x3b0 [ 420.811877][ T37] ? __cfi_exit_aio+0x10/0x10 [ 420.816643][ T37] ? uprobe_clear_state+0x2cd/0x340 [ 420.843757][T16058] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965996kB mlocked:0kB bounce:0kB free_pcp:5784kB local_pcp:68kB free_cma:0kB [ 420.887569][ T37] __mmput+0x30/0x320 [ 420.891712][ T37] ? mmput+0x4d/0x170 [ 420.908398][ T37] mmput+0x55/0x170 [ 420.912298][ T37] do_exit+0x910/0x2630 [ 420.916491][ T37] ? __cfi_do_exit+0x10/0x10 [ 420.964135][ T37] ? futex_wake+0x5fb/0x900 [ 420.968724][ T37] ? futex_setup_timer+0xb4/0xd0 [ 420.982070][T16058] lowmem_reserve[]: 0 3921 3921 [ 420.987008][T16058] Normal free:2668108kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33132kB inactive_anon:9084kB active_file:49140kB inactive_file:52344kB unevictable:164kB writepending:0kB present:5242880kB managed:4016120kB mlocked:40kB bounce:0kB free_pcp:604kB local_pcp:172kB free_cma:0kB [ 421.047322][ T37] ? __kasan_check_write+0x18/0x20 [ 421.052515][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 421.085872][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 421.115826][ T37] do_group_exit+0x22a/0x300 [ 421.127219][ T37] ? __kasan_check_write+0x18/0x20 [ 421.152768][ T37] get_signal+0x139d/0x14f0 [ 421.157352][ T37] arch_do_signal_or_restart+0x96/0x720