last executing test programs: 3m42.59803969s ago: executing program 3 (id=165): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c9130001", 0x1f}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000bc0)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00\x00\x00\x00\x00') statx(r3, &(0x7f0000000000)='./file1\x00', 0x6000, 0x800, &(0x7f0000000200)) read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@nfs_export_off}]}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 3m41.755458575s ago: executing program 3 (id=197): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = epoll_create(0x2) tee(r0, r1, 0x10000, 0x0) r2 = gettid() kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000000)={r1, r0, 0x2dd}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000040)="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", 0x1000) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001040)={{0xcc, 0x77, 0x1, 0x331, 0x27c, 0x3, 0x34d, 0x4}, "4f57ccc5001fc79cf8ed2d69884db3483189db7fb4ffe6b354", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x639) ppoll(&(0x7f0000001680)=[{r1, 0x4408}, {r1, 0x400}, {r3, 0x4310}, {r3, 0x2040}, {r0, 0x380}, {r1, 0x8000}, {r1, 0x6000}, {r1, 0x2a29}, {r0, 0x8000}], 0x9, &(0x7f0000001700)={0x0, 0x3938700}, &(0x7f0000001740)={[0x68b7f758]}, 0x8) fremovexattr(r0, &(0x7f0000001780)=@random={'security.', '*-%]\\\x00'}) writev(r3, &(0x7f0000002cc0)=[{&(0x7f00000017c0)="bafa27343b56d1519bbab2a9a03e3550d1dd927febd0ab8fafd5e63dd0d614a3fa33d1069777cf10dea1bade2f4d544fa0c38f426db8ca70240d2180c9ac34b60dcf095d91632e21dd4250385a2bb1352f5ff68d85b0dbfed203bd13ec99bc2672013ddbd460", 0x66}, {&(0x7f0000001840)="89b64150806b33db5fef86e1b643286e3d183f630e20b0372e83f0ad0ae19b0b39cf4e88fb5ba54f238d213b3e82dd65ce47a2984f3cc417a70eb551bd04286509384535dab479087e88c25df9b3840be36d17402e75a4d568a971e7da41c855afb2c2624dafc528d52cfc47aeff05f356a14f19ca7ebad85fd5de8b8132a28422aa9c9a89eb674858d2d7007c6944d3af87201e025038a4a4321a4fccc474f63b3a9794b2bb575674e26c1c4745a01c06313137ed0f8d91d874e76a0d67502421b2ab357d8c7301e42917d08e5e89dfd0", 0xd1}, {&(0x7f0000001940)="f943a6bd8539119fb175371a04ab21560957bec692a1b26bcf6ce5bb0743d8b51f6e66e787d3601495631e9a96c386a8a98be7a0e769bb55eeaf92", 0x3b}, {&(0x7f0000001980)="d508ed78596045e73c392ae7cc03edf21726176219d2aa6a63998e1d89474d3834d0b165a6a68b1733bba49a1b3efedbb33bec2a9a042df72aab0d4e8d8e26ca27e79c4e4135c76ce68c69d6b3207d60c54ab530f7a099cdac0ca4ef3409a384a7eb29ad55a4f596b4a1bd8bbdd01805281eef81c840c7a5de47d2dab7f01a8d0566d8af11a3514319bf3fd341d4ae5a690df073286a56d616d02c075b59c2858466a84937490f115adc24c333179f78b540676fe4db0876819648c8074fff200a9c6039fd38480048040a26ef861809c8f5edda1141898d15bc792251e97ac2ec14106f11b9edc7dc093d20079f6eb1e416ea703f437907bf30c02413f380d3935cbd4c861b71ee013325fe8e33fe76b8235d3c181cef8855f5049b0cda256ebbc45acd6fe8dc08fbc7c7affbcb9886935f81e694069c189de496a36d1ffc12c74df8129d9c4208cc8ae584201644671aa752cf2aa0254e4d9cd09244f138bdc4d46b656826238a7bb7ed40fb6ed8f10da346cefc793217d2f3249bf18c18ba9e785ab4996f4e7df69c4cfa40c02960c3e01a51b88f2c13a11272c4de2541c59a988394499114c8bef112f45c0b0c84e7d2166d710d760c5808dc29b789b8ef9280bf214843b0e60202c9eb4d29f99bbb9488c781560b2001c46e4ff99e0e3927ca46257fb673a3dde181ee198c2411579ed067c6869b59e3234fdd3d0dd0a0e8d225770118b76072cd97104934a62b0910e8304e6a4489be8f92aedd5ec36ab1b16604f99e560127066a3cb5108546c5c41c189402898f74ca33ac6b020f703bb2cee7ce1cdafc2d3248b53d04e282bb71d8dfb28505fe5dba3a78c7b8a01a700820ab306f87628778849c9532e450e3dc368438139087230ad4778849a60dc1be08ed74889066d3778e40daf067cbf68aa3f4b9c666792803ebd989668a5047602e5c8780fb129f0ae926e45c86071050c87b35e35fc1d463e147fe0090b46f117f6c1167a32bad169499fad08fe10d8202876210e88f2dd4dd80dc67b7ff029344996bd29a24df4097af23a8f87847183d6f90d58c8a7409e9dd48db12a978ffe707b1d698f63608e782f5dc8686e150420a53098e38f7ba959e604955b0c86a49e669966b8c8dc9b58135f6678b609e8c7845832b6bbda129bb2530d3715bd5342dd281c96598b1eb3b4bdab4f48625230d2b4724992dee575ba8bed875de78be5efb2473063183b9c8abc52e583dce4439c720f7dd578c139076baa0a0153da9a66d141c8c4febb9cf4320cf3a6d43a59cf310a12d4b6a1afb5fd6032f19ee9c4091fbce33030e870bf0cecea5f8992f59fcadce49ae6f9c2d181d194bdb7cb630a1586dda78c2a3ddb5d7f19d57b5df7ce5447f761fd2b28626138b2d5967369bf6b18ddf2b7acf1d4005c87bdf1de5fc2997e53b37520475d5656d9310caad8700a49d4b7b86fe45e8545ffa7b8f6c581427e2f0fe13319e0caecc1906a0728b4d04ef913bc0a6e2c859e510445032ca3c74b66c50fb18af2044308f55a6c40b2fb926094d3f8f42484a412a0f2b3dfbb36edbac89e78f28491c7a9cc7ac9d2426e3a89666c5ffa0904eeae185c7a90cc93fae3296c43296266e2fe00aa3d23ed71e211ee3c1c8c9a0fb00666531563da8f6a49056829825d252910aec3b2b73b8cd0dce5f931f58004259bea0f1ce4fc597f92cee3e864fc490e83ead184460c9840f56c1320c3260fc6efd271201ee4431e091e44d392b265ce4b35c5fa3540475aa52edad128d768ddf81b7fc5cf0615d2ab6e217535984cb550fdb0e796d7c24aa85462078e9d25b6d7ee3d845e26a606572ae5ccdfd467908cf0bfbfb7ec0b852900793ad2c6e9b8fd99b0828d49b36931d651840824a8058e7a489ea9d9dd79896ade8ab3b5719bc77a8931554e1bc439b12361cd81e5af3b929f732eed24b6412b5706a8405d0a25ced09b7f02eb41c9f51fc635fe9e5ffb24ccfad12a335cc3bfb4c46678d8ef98f7f971c17c10389dfbf0d7deef9736d5c3c9a5e28bf715c3c4142bee4ff864718300f4956bbdc673abdb6eec716d8b738375e50c974399d2bafa7063114f3e9260cf2510c80c06166e3d5c383ed019c833bd0b86e0360bd2f7c9e1d7c4cf59651f701fc9665a6a2f5bc07a9726479bcf870543dedeb30902ec46a23442752714da90b67751a4b6e58f5e24d9106eca649fa9a09e73bd83add34513a83d438165f85eb77e0c23f2e7163ba19d33ffac9e840d2a41f852915bf973436818813fc3804898513358312cfe8b15d80a0c5accd42561a16f87f07bf22117c052c7e556e48964f4615b53c6326e60e7632d1e9a9fd5f9404f41d455760f7df2cb9cef544037e9aea8659a21c3713fb66acbd1e4e3643a34bd0e80cd71e4f50c5383a9e7d87799612979b1ee524d16b07007a230ec5cd346f396373ceffbc577e1601ba3dffe06b1a09226b33f0e13e2da043d3f3cadf31282aa1df4528ab9e637fee6702b4910e6064a8f014b214c3f0cfde00838d2274b56372740288db5fa9b4bd385dea3fa40384e55c7f6c4bbae7d510911f66ee6b30fa29a1308b0215ae8e75e9cd5bfb894d191b691f2b6e7d60dfb9ec73bf283f7c556c911b1f754790611e7b81e59dc2057cb0e0f8d6eb8dbb4dde23d7467ef70238e00958ef619b30dc0e4490a6883985765ef1b51bef0ec27e354e606a441410fe684644f7d3137d12c1ab84b22534303b883bab70a17a2aad12b69acded1c37c11ff04f04e34f537f6834c7e24c98840814841f0d3b276e202cf4c774b967685efbaed3558e5570d7a3d611187cbe62245503c4ca631b416415b3060cadf20e4fd55e667f3649cbbc9ad3528be6f6f32cb4809f52a59a98d7ec4aa39c13baced2c0e4325770f9c27617f73092d6792f92caad31b977a276816bf56fbc3b09183c22110c26727dcedabe369d12b7fbebf15b8f84054e8502af2bf8249e146a8dadd74ae5be48ebca55750be374bbbea422f8624e22c8e7ab0a1e17ecd6228bae360ddea563f92fb50dbf2ccce2aef4114da738fe3b3df2a21c82573f2aaf6f745db13c25075672e3fa9595d34be124d64f2ddaa9fe10a75277dcaaec575645b95a5048d2e0a723023da94abb24530152bbd4efd8016264f0192c35771dfc6291030fd3a6308a4054ed759b3d5ec4007c1d9a5ed4ba64058842c14dd470ac81b3806aad63bbaa90d4105a5ab785a7977968f1f2957a7b9df589dae909962e32c7db388c9fefa26bd3d37569d11c3225516af1a50903c278f93d9a25bcfec745b2930598adee10f6b8773ba9f54f2755133aa85601ee65a01e12aeb2007c43e0258dd0a1b730a4b204f0162dacb6ad75ce359eecfcfa8239bba956f99806e970221797fbeb2982729b69437b012c7a260f93928c4af01de104c69ede92ba4edfee3befd7c40150eb80170650b33bb3fd8890c6d1679485b6529ce60854fc8a5e7a43e148f91e45a10871f35d8f891a5cc16a3a481ebd6e6270e1608090391b553a32c42dde399c9340fe5ebcdbff5682d9eff5c5ef953f4cbe893bd6058172d4ffe564de55a8cee11849ed46fffaa5ddbc3bbb151d0536d43ee6c6f427a5a1de59995840f778cacf1d5ebea2cb552fb23adc5f5799da17118cffc73ddd8b849a834d18c4fb985933509d13ab3d39bc296a0896c9631109525ace2b42b6a24236a4e8980ed63837305cb8e5013de773360cda0e70f35dca3c8af13abac9c0707c478f1ad0436df344b0d2a0868c6f7f1903edc5c9b462ccf9f4075eb2383c35926232a49fb3bd6eebbcc3fc3cf149b63ad04aca74dd1386539aab0f2beec7a540ab60daac90b07f4f0cc8a8ca7c10ba2f8172a62f6bc206f1ac2688e033b214c892cf48dfab18ed24702f0d2d633f2d2ca3e16bc3691c2c3eafc2569de68b6fcbdf8b2c1bcc45082247531f0e21e7a649232cbf0ddd664f2059f4f4d99d553f5f370c848df5c5283911e73182187aa6f4992e88304159ddbae9499435bfc8b8c0b64aaf0688241a6bfe029a059ba18b01b81eacec7f5f9ee17511eae81ceaba6faad4b5fa850da2de62b428e3c75d3abc9e96db2e8952d62dba37a1ef986b193b124567ad5f96c89d0fff5b0bd7fbe5c2e6383523d405e6ed824af75d8453b531ac088573b7c559857130b15302609148cd0a88a68d185d8cfd6a75fdb9342adbc7a1eb82a581c58b43b1d8bce19b3c7475494cd7a712e93af862c141d06681dd47186e9158ed34a25aefa2890caed8245b255c93d0c9f9f2ea0e0e9fe8b21e1c6793b82fc4b908ac55b51209d99988f85ba65c93af51fb5bbf2e5b730aac45208d0475b82c230857924c528463b7b201c97255a24b6427981a7268c2bb33d0e0265e5b676adeec1db947067034154a91b0ab0f9f9bc770d8f539d89f860e768be61cfd02944d40b62b6357e9e2c1c777ab65e9d2ffbbe1e0c529a95088693b9455f7d7d2a75321f48b78d96d45c71e5417729d018776a7559cd73d39975b966910fefd30bc2d38368a95f63596407d1f3943d1e984c117b4539d7267f64596363165195fdec549ba44e36cb2e52d6b37b6d611dfe06fbe4f7c7d6ba27c521784038f198f459a579a0c99e84db04f7f84ca0de122f424e728aab9a2dac642403b5600c410513eb4b5b5e74bffe99eecee66320796424a0da35865e101d07eda34583653ec442ea0082367f8d884c5dcc6933333e07a3214b57e1a2c8636777f44d0115201ba398897c8289fcc01e96074c29121c583961c9ce00fe5ecfba4e02a1cdcc7dbe4a4e9b82b1448fa862c5799b7a52ada69e46e99ab1f3df53f2120ff842ff3df9727f5f3c7f6abc1cb2f5dd5c2dd28192b840e0b3d1fae9935fe88d49fc7782525a1e2a65737dcd9db225c4f87bceb7d8f5a0eae48747e131f51b027f3ef3d57f626a07a687c803ac4300135cc0c94a3b1b5f203f2e6d3041eff687e7c1e837075a90dcd4fd889429e6215febc38b3ed952b88d9e404f66da065812c8d508099e74daa58585b0da53a588b0d46dfa65128afcab2202ae40434147ab48f52b5ad1708d650543121c29d0cf24f7da40efaff2e68996ae5a8c93e06a224df01c48cceafd56fa420a439340f9bdb692da522cab42b72a6d6c7877e1f05c7077ac1e57e8c437252f318be86849c3cd17970762de000a8e7878852a7cc4de59e2c5e56fd713b00e6fea3a0adf222ea72d9d23e43bfc00f6530b867f59c1084341e4493f718a1c753448fe3af80903880ae6614ec967ad7df30d763e751ae426c84be7fcbd0113911a05e60d5e7c85c8cddc13c12d80665a312cd09a300c4572da4de3bf7d3a97e7ccb5319cb3c5380f0191f0ae71dfeaaa58d11209d35cb25fcba696f1bcd62126fdb398cad1e85bb6f5e39055aff01fdf5cbc203ead08ebc73603f851672690f968cddc932a04b308aa131951cd65853cec0d39d15b590f6de9734539556c8753252325819be8b6d31c023b9b1b5d87f2847fb6b7b754bf2dc2e3df6617e69e159f1d6b1256b0e6cfa0f1004308b2f9cd733f4e83d60b8f4722466b4a4cee82310e05f0d188492e018d20dd9891227ba1b1384da172d36f3fbc4db8d77cb56883704fcba505510d21655e3c82914b481d639308b8790aaac15478a4ab9d64ea5ec272a5e903feb66e8965f2763396abc594e959e81f5e74d8c7fbd596407ccce5c4fd4993800d6873555bd0abf05dfe79d2a6588175311f347693f44acc9c355e18167ec43fa8453e1e738f8c92a7baa87edee58de", 0x1000}, {&(0x7f0000002980)="aaacb5302cfa796a7a75058733ec065bc90703f03a08765cf56990fbc89b1ec74e0d11a73f2aa4a82b580372002ab34d2f9285c97f1d2fad7928c0d3be9aea18bdb25a0b065b0d30db35ec35c3068392d1837f65a52c31890c3ef60ac59f1f9ebfb0bc280d06dc84cdf8f591f530af3699801f65e30d675208", 0x79}, {&(0x7f0000002a00)="13bba871e1dd5edb885f81cbdac04cb9eab308a020a1e7a541a33efc5fff8c7bd9561d184dd73b62546d860774eff8b71023cc7c2685beb72ab97f352d757ad22add24899246ed5c999f3a50bbfdee4390a4df59265fbe0018241732ff15b6c93549840aa57ae8b42360cc322b2d0d1409a78c91a1ad7d2cda26a1a385b9e54e3df13cf1d7a06703c9da648d4ae64dc340a7bbd1566ce9c80833601c7d47", 0x9e}, {&(0x7f0000002ac0)="f84433ffa842fac4e387f22748825c381c1b0fe16e18f8c53dd449363c79a1a7cb4fb0089801a096e1309e88b3b56df144555a76f6b7b40a085903fc9e38d70652c3f6f2100895d80f3bc716e90828aa11d0aa3ff146d9fe6559ab44a1960a4785268ecdcdd4b4bbab839aa53b11c25d9e28da320596109061dea913d52bc72e35a5e5ce5d9849", 0x87}, {&(0x7f0000002b80)="97ee35b1b1e6e8c318285edc6cee84095e3a69d73518c8173ea08d3a628512dc8f158d829256bdbd3d5ca020776fc059566340d70670c797db1e02ec36cc6fad4f37fccf071f461c9a60894212c8d8e2a36b5cb994a4b354a1d92cf8360228cc8dcbb017758e2857258836c7cb3d3397bddbe084cfb927f4475113c54dd0d501bd6c51e1", 0x84}, {&(0x7f0000002c40)="7f7988bcb20200a3ca251d8dd19aaf490f637821b2c4c28993b6cb9d28bc9b2c1e30974091caca128bb78b770c93cc36bd00062c26e3af8372d47901256cc40cad8cfef601439e4e6b3131a6e5d1c4c8d91fb751988503a30e8403481397", 0x5e}], 0x9) r4 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002d80)=@name, &(0x7f0000002dc0)=0x10, 0x800) bind$tipc(r4, &(0x7f0000002e00)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002e40), 0x5290c0, 0x0) read$msr(r5, &(0x7f0000002e80)=""/4096, 0x1000) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000003e80)) r6 = syz_open_procfs$namespace(r2, &(0x7f0000003ec0)='ns/time\x00') syncfs(r6) writev(r6, &(0x7f0000005000)=[{&(0x7f0000003f00)="b3b2ea6c7693616b788352baca23147399801aa60f14de72e80701d2221b16012e6924f37171d662cdd6f6522aa1da413cdbb110f64d8cea632c186fb0ec65aed81df6d0ff445aa52e9fd69ed93b4c3a8708", 0x52}, {&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="3e774ae82e6d75dab405a96905ebdefe99f81f1472a19cfe5a94962fbab3d71ff551ae9d83d17d2bfb9bf15f843ea7700b26638964b18f5e518a2da9f3782f5725e1671cfd4d9797bcd4b76b612fb405eecc58670cae46034b88f2387d9c1d4adf20bd048cbb30f830", 0x69}], 0x3) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000005080)='./file0\x00', &(0x7f00000050c0)={0x200000, 0x6, 0x29}, 0x18) renameat2(r5, &(0x7f0000005040)='./file0\x00', r7, &(0x7f0000005100)='./file0\x00', 0x4) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000005140)="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") setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000005300)={'nat\x00', 0x0, 0x0, 0x0, [0x2d7, 0x0, 0x9, 0x8, 0x5, 0x7fff], 0x1, &(0x7f0000005240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f00000053c0)="cff6a0c683c14dc8224b416d743f1718", 0x10) syz_pidfd_open(r2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000005400)={'ip6tnl0\x00', {0x2, 0x0, @dev}}) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005480), r5) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000005540)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000004}, 0x4000003) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000005580)="b00f187c8f4b33adf6378b715475ed1c", 0x10) 3m41.682541737s ago: executing program 3 (id=198): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4000, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@userxattr}]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 3m41.594194118s ago: executing program 3 (id=199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a) unshare(0x62040200) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="280000002d000100fcffffff0000000008000000", @ANYBLOB='\n'], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x811, r3, 0x45809000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup2(r4, r5) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff1157}, 0x1c) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_gfeatures={0x24}}) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r8, 0x10001, 0x0) 3m41.592157688s ago: executing program 3 (id=200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x32fa82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r2 = socket$inet_icmp(0x2, 0x2, 0x1) openat(r1, &(0x7f0000000000)='./file0\x00', 0x20040, 0x1) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, 0x0, &(0x7f0000000080)) 3m41.581620208s ago: executing program 3 (id=201): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x100002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x4) 3m26.521510615s ago: executing program 32 (id=201): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x100002) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x33) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x4) 42.840252322s ago: executing program 4 (id=4257): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x2040403) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0x4) (async) keyctl$KEYCTL_WATCH_KEY(0x6, r2, 0xffffffffffffffff, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x1c) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) (async) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) syz_open_dev$mouse(&(0x7f0000000000), 0x4e, 0x123001) (async) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x4e, 0x123001) getdents(r6, &(0x7f00000000c0)=""/82, 0x52) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000180)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 42.839806922s ago: executing program 4 (id=4258): syz_open_dev$usbmon(&(0x7f000000a240), 0x6, 0x8001) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x6000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/sync_on_suspend', 0x40202, 0x105) write$tcp_mem(r3, &(0x7f0000000500)={0xfffffffffffffffa, 0x20, 0x48001, 0x20, 0x3ff}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c350050343879c4d928218656ed4600091966ac73e12e51f6d491f272d9e20b68d11b025ed32f909e8aea94a27d6c80029f09a955484e49578967ee051da649ed519a0421d346939fb126c876dcd2f29cf049172245f432a1239ee141a1f4f114d59ec8ab5d1d89bd881e0ea04babeb9bf389e77a596603bf9f928112b98e0bedda853fd5858d54"]) 42.761772254s ago: executing program 4 (id=4260): sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x25c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x174, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9d, 0x3, "0ac8651f8bfa7c12ec0ef98e506f133bc143b40dbbffba13bdf681158c40d153eeb09d8a55bcd31b50edfd83ca19a25d04354fa2dd832acaf264eda27ba3b4993dcabcc8580e374d7ad2846778ae7425517e23618fdbcab13b6671167776dd33748d0c9be3e344e98569ba0aa22e14dbdba150d752e47d69421e865f34e8b55e13ae2b05dab1d9d3dfb0cc634c0a84595e943949955b50f758"}, @TIPC_NLA_NODE_ID={0x31, 0x3, "1416aed35d50d25f3dcc45d031ded1e081dfbe6a2395d2c74bc6c4d725baa220a8017ed1aaa95753c51c28a9a6"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "887d58951280e493b7ca535490f9dfa0a03eff203063dfe18c2aeac1d30e35e4a681"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "8767d3cf398bb3b5a6b22ba5b7dd25dfeeec2d3a963cd995ff"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffd568}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x993}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1dba32ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x25c}}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000064}, 0x4008844) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 42.754593804s ago: executing program 4 (id=4262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) lseek(r0, 0x2000, 0x4) r1 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) recvfrom$unix(r5, &(0x7f0000000140)=""/240, 0xf0, 0xb6, 0x0, 0x0) keyctl$update(0x2, r1, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x424a00, 0x0) read(r7, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r8, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) read(r2, &(0x7f0000000280)=""/189, 0xbd) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) sendfile(r7, r7, 0x0, 0x7ffff000) 42.699079945s ago: executing program 4 (id=4265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x2}) (async) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000040)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 42.628741026s ago: executing program 4 (id=4266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x804, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f43fd8841d1c6431f4aaa73b9f8563614d21ec008a11a9275d116faffb02f56e62e8c511ab117003350a8e34e0dff85abe85dfe7e00e8c6ba573ff8486c5cdf8649bab88c46026c722950ce298158974ff93f7ed107cb334e4fbbb2b823d56b4a4d0140834e20ef50092717fc2caae69b05add4a77cb88aade9eb1b305f6ebb618eebdad37297eba61173942d0d0dd95e6fc656a78eef2ec45f1aefc0f7a027f8ea631ead5a502d4b74feae74acc8dba104d0d5ce4dcbc98a3f23740500d2ad8e098c138db2f972bc2739136471c4bcd5c33e00103ffe3e83fbb48accb1aad2fdb59aa0661bc029d544b5c7df3f5f3641389f178a5430ccac02c0ccfa1aba45feb79cb29cfa9143348c9bbc0bbec90c647a5059d8bcc8e2d9294b1e25d5c23886bdf31b9bc4e9a07f0ed7055513d466bbe880f9f13e9cf83b7b2be68100bf96c6df973b636843b7b6c74328377fc8f02ff8124c163bf1fbb12748b91ba70ed9c64ea5db30303551aa804267c6fd0fe14d9b3ce46ff6895e11a9cd99c31a1690d0ec31d448580451ed47a7f72622999f995cded7a03b0a07d8024540ef3b6aa7ef24f60b610be57775fb54dc4161e60d71e8bd8a941657ff8b8a1ae1a3a9969eeffc20d1cefa6c277b0e6b4f073092ce54679ea8e24b66f8524f03104707a9d5e1a749f12af13edf1b1f9f76997ba1c07621a206b338a5e1e41be4bfefd9b49bf0339a07ce51ef0ed28db18086f1941463c29445afd2918cb3d9abf29dbe8f259e8257257d2ba311dc29af39c298d1b660951ef3e329fd945f4ca4eeb8279a7149735417d1aa7a62db95938f00a1f47a34dab5c2c15295e2579455ae740eaf28441d80641dec7f11465b9b02a171dd23abd51eae8c5ad2ab22b18b4217e643f60fd9fc47958706ccbeba9d1ba7b2afb2892eeaafe5311ebeb92d4ff06372f21fd944055b1da2977c2138d07ec247c2ba911e93d7033c3f33c721ae1cf016cd205a732930c8c4f5a808a292071e4e9031948dd0c84e87751a1156299bae75ebf45d4032621b8a371d19c5d3301d44d10835b80df1701a2ff33e35ff507e3993aabad9405f511365f166d2ca695ca8a55590c11968458a2b793df601c68159af122defe611f8a9554db3ecfd1074526b64f8dc8267557b5a270d90a46beb7d7bcf6c0b45750fb343d2d91504741e076debb9d88ade7c02671675ac629d99cae7f331c19d42cd52a5da6ef350616d3d1b139294775910e6df583a8179c0d873ba63d1aef0aa6365fb41ba09c6d065fc5d0fde90c3ed76327f3237daa11e1c67596692205a4e1838e8c5860c4577602c732217fb902b870fae58a379e1fc25d11188f936e9d407488dd9b41989650a00081acb8757993742131741d64c552124df612dd662292042e95251c95d4fce380585412c17e29d25821f2f6f16c26b87fcc02d3bc37f0d659195fe930240c2643715936863d465a902e17b71c46e12f3479551c192e852a1b19687a94518f714280379bc98c86d6f91a78cb70d34182e385d0c42ddbd68945a7546ad074dd79d3de1f11e01f8bda5a527eecdd4f45dd2a35e2f53e049205b0139a4372cf99f3ddf5bc5c6174d255eef59b41af5ee1ffc62b995e9c9f484c408bb71d9cb3c69aa2a1af8e092e3c450fa5a8e6ef87ef8006da67332b8a587f0a55ad7cb59b1c010d19e4147e31ba0ae1b4069dbbab9861f54b74f986fbe080620e4b43e7c937e02f4cd6e07d5762ee9f3b09b4f5ba15b5df617e4b7cefd103e0ec1d1eee1e417c0e758900876475a3f01928f91b9b0c2b057eed95687359534a1b347ffedd91a3e328ddec102c6ab3c9958c79ca002578f849188cca92ca96b510b940d78d2aca334ec233299e16fc7bbd2fca134e38ee3187553bc1eb442948cbb7d6ff71a88f9266e051a445dd7889788bb460d85777b47f8cb416d630c13970bfaa927219d0328441f38bc35d35bc44f2fa5fdbe433e5ffd3babe81fe67a9c9346b12b6a408b516b9628512f6feeeb164c2635b6a9d57996264e6592971823d37f92d3068655ec278f0e0124a7ef071af73a68f37ca814136fee8ab07e46888a43ba3d17f69122e75bb6f170a4e76e5b662e0f45072876c66c5eb248dc2a2bbdca521fc19da85dd4a8b895452f9f6046ac830d0e4b61277988ea568e80430487aec51919ed35e26fea69720e45339d452d29ec13aa2bb72bb4c8a51a1f39165d625101ba126faa4018e055d06ebc82a2e1d062a9f78c0452b2855bba34492a1d9c49e1032b946869a16baebbe9c4a3ac1a8432629275b953a9c88941b3692e961bbd86cfe9be80db612f15d30c1f05028dbf173a24e4988a05b2210ed794e24be864bef4c27b41c9b9d474458f8812295a43f5338888d86dae63e5c9c3ba5431b353640d43e7b77ab4383713383c301291448730e929b41b7b6f47317fb918bb422423f8215c03d9e9772bb00f5da04c9539a85d04695ac8d125ab8634ad92e025315a68ff31337fb6ff3286a9d674ba1cb2c117c20b5ec107615e2d35d4fa3801f634cd2f2cff78b16c05f73c9b837e63597e9f3931fd22084a278a146618418399cd5a16aef925339a3ed3f402f9a19ccdf25d0808779f07d7ed760e7d8e6481c3c47a6aeee4945b38dcb5e935eba9af45faa3b3738331b028a133f08b87eb9bf86d4c90d5039824bc9f247e5cc1e622cbcfee5f7e4019980a4bcf4e6d2aa91ff691c3dd59d0bbbc9f9380d69367eefd1d584dd7eae09585d888b6ea0c339f99515e7e3cbef6ed77e2c1bd526"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)=0x0) io_pgetevents(r3, 0x1, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000000), 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) setresuid(0xee01, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNXCL(r5, 0x540d) syz_clone(0x36869100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.42526302s ago: executing program 1 (id=4271): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(&(0x7f0000000040)=""/117, 0x75, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) accept4(r3, 0x0, 0x0, 0xc00) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x810, 0xffffffffffffffff, 0x2000) 41.496824927s ago: executing program 1 (id=4283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000002fc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000003000)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004014}, 0xc840) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 41.290957191s ago: executing program 2 (id=4284): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0xda, {0x0, 0x0, 0x0, 0xb, 0x3, 0x0, 0x5, 0x4, 0x1, "1829c2cebb2f1f1a5023c954f8b6b2fa9a5e2e719c884860eb30aa09412f493f86afd6ae779ff165d84e830e78537e8a00be8b80b978e233e8535416ec8d29b1", "30d0840b2ac5c21c4520d4ae577852bd7db255c647191c712033611e831d65d0f79e1f506eda1cc79764f175645c94e91f002b8f3738f849ab26854eb81a138a", "a48af71800d2fe499026f27c86b744349f4b5f5297398ed05fd02cbfe61e6ff4", [0xbba, 0x2]}}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r6, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) statx(r4, &(0x7f00000002c0)='./file0\x00', 0x800, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000440), 0x2008404, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="090cbacb9b6b6cf5a0f1604ba166cce5400ebad7ba91af76def84709ad56c2482283e9933eac9fe6ec64b84cfc4ab2b1fabbe29730856d06d9449aa2a3012dc02298097aa913b5a2fe4c90089a2284310e6b0f4f7e92a808ad216b922a523701fd5a0713183b27917ba8ff66562ebfc479b91bb8c1008985a517428ef1eec02d03d3fde90d03abe588a8e9abecc4a06e6d49ab9d3012da1460d04c3dd7ef7fee020000000000000000", @ANYRESDEC=r8, @ANYBLOB=',max_read=0x0000000000000006,\x00']) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 41.192892272s ago: executing program 2 (id=4285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xd0002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000180)) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x104) ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, &(0x7f00000001c0)={0x23, "fe2fdb684358d72d653fe387ca3971108c138d3c4469a7a81d0ca3adf5d5b886fdeb4f"}) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000000)={0x2000000a}) 41.167407943s ago: executing program 2 (id=4286): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x12003, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) fchdir(r2) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) (async) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r2, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') write$tcp_mem(r8, &(0x7f0000000140), 0x48) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.064974435s ago: executing program 2 (id=4288): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000683000/0x4000)=nil, 0x4000, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 41.036461725s ago: executing program 2 (id=4289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1280, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x78, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bfee16442e1fd432fe63fb21444942e8"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "25ed0ad2f04022af39d07507dbabd012"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}]}, 0x78}, 0x1, 0x0, 0x0, 0x200080d4}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)) setreuid(0x0, 0x0) r5 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) fcntl$lock(r7, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x401, 0x9, r10}) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 40.569113014s ago: executing program 1 (id=4290): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat(r4, &(0x7f0000000040)='./cgroup\x00', 0x40000, 0x35) read$FUSE(r5, &(0x7f0000002a40)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 40.477390495s ago: executing program 1 (id=4291): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='projid_map\x00') personality(0x5400004) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) (rerun: 64) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$poke(0x4, r1, &(0x7f0000001040), 0x282d) 40.416446647s ago: executing program 1 (id=4292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd00000c000180050002000000000008000200080000004f8b0903e75ffab97d388c7cfd03a10a5d6ea8f2402a53087c6ada2f9d6c260c2513b50230fa6a03d66e810a6b068b38e9a784a1295fec403000469e47bc190724aaf7869a6f021bcd9d3a9718eb21d14bb846628022d39de2ee834cc090e98a1efca1a5fcccdf74bdf5003e93213b772b55482c3c89bc12d33d6cb1aa69a670c45e6055bb505c4bf341"], 0x28}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x400) getrandom(0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0xfc, 0x1a, 0x400, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x0, 0x0, 0x2}, {0x40000000000, 0x200000, 0x5}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa}, [@policy_type={0xa}]}, 0xfc}}, 0x4008841) write$cgroup_int(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032bbd00000c000180050002000000000008000200080000004f8b0903e75ffab97d388c7cfd03a10a5d6ea8f2402a53087c6ada2f9d6c260c2513b50230fa6a03d66e810a6b068b38e9a784a1295fec403000469e47bc190724aaf7869a6f021bcd9d3a9718eb21d14bb846628022d39de2ee834cc090e98a1efca1a5fcccdf74bdf5003e93213b772b55482c3c89bc12d33d6cb1aa69a670c45e6055bb505c4bf341"], 0x28}, 0x1, 0x0, 0x0, 0x20048804}, 0x80) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000000)=0x400) (async) getrandom(0x0, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=@newsa={0xfc, 0x1a, 0x400, 0x8, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x0, 0x0, 0x2}, {0x40000000000, 0x200000, 0x5}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xa}, [@policy_type={0xa}]}, 0xfc}}, 0x4008841) (async) write$cgroup_int(r3, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) 40.416101447s ago: executing program 1 (id=4293): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfbb6, 0x4) 39.073575821s ago: executing program 0 (id=4300): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) memfd_create(&(0x7f0000000100)='./binderfs/binder0\x00', 0x6) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @private0, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x8, 0x0, 0x0, 0x6}}}], 0x40}, 0x4080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x37}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 39.073113581s ago: executing program 0 (id=4301): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x8a) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) rt_sigaction(0xd, &(0x7f00000000c0)={&(0x7f0000000100)="c4e189f4adfeefffffc441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xfe) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 37.807953105s ago: executing program 0 (id=4302): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x30, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0xd, 0x7, 0x0, 0x0, @str='\xd0@:-}-+)\x00'}]}, 0x30}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) (async) 37.771247855s ago: executing program 0 (id=4303): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) r1 = socket(0x18, 0xa, 0x2000) sendmsg$NFT_BATCH(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000100001000000000000000000050011000100000000000000000078"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xca1a6e8e149c8d3c) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x9, 0x8000}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x1010, r2, 0x8d46d000) sendfile(r0, r0, 0x0, 0x7ffff000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x11, r0, 0x9c601000) 36.873884342s ago: executing program 0 (id=4304): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@arp={@remote, @rand_addr=0x64010100, 0xff, 0x0, 0xf, 0xa, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x4000, 0x6, 0xb, 0xc41, 0x6, 0x7, 'team0\x00', 'pimreg\x00', {0xff}, {0xff}, 0x0, 0x34d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44011}, 0x20044001) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') (async, rerun: 32) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) (rerun: 32) 36.873459692s ago: executing program 0 (id=4305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=ANY=[@ANYBLOB="280000001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="0c00008008003100881f"], 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.818691156s ago: executing program 33 (id=4266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}], 0x804, 0x0, &(0x7f0000000600)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000280)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x3, &(0x7f0000000000)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)=0x0) io_pgetevents(r3, 0x1, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000000), 0x0) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) setresuid(0xee01, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCNXCL(r5, 0x540d) syz_clone(0x36869100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25.844611884s ago: executing program 34 (id=4289): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1280, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, &(0x7f0000000240)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x78, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x1}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "bfee16442e1fd432fe63fb21444942e8"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "25ed0ad2f04022af39d07507dbabd012"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2d}]}, 0x78}, 0x1, 0x0, 0x0, 0x200080d4}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000000)) setreuid(0x0, 0x0) r5 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) fcntl$lock(r7, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x401, 0x9, r10}) setsockopt$inet6_int(r2, 0x29, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 25.081222689s ago: executing program 35 (id=4293): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfbb6, 0x4) 24.123982336s ago: executing program 7 (id=4313): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) clock_adjtime(0x1, &(0x7f0000000080)={0x0, 0xc, 0x9, 0x9, 0x81, 0xb, 0x5, 0x5, 0x10, 0x7ff, 0x2, 0x0, 0x200, 0x101, 0x8, 0x1c1, 0x7ff, 0xfffffffffffffdc5, 0x6, 0x8, 0x1, 0x3, 0x1, 0x5, 0x6, 0xd41}) clock_adjtime(0x2, &(0x7f0000000180)={0x4, 0x1, 0x8, 0x0, 0x4, 0x8000000000000001, 0x1000, 0x401, 0xffffffffffffffff, 0x3, 0x5, 0x8, 0xf, 0x8, 0x80000000, 0x7, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x1, 0x4, 0x2, 0x2, 0x7, 0x1000}) write$P9_RRENAMEAT(r0, &(0x7f0000000280)={0x7, 0x4b, 0x1}, 0x7) write$9p(r0, &(0x7f00000002c0)="fc64832b0cb41c85631076d024f2d236de4cf13764198290a923815ab10816f82526cbbaaefdc8e4dfd9b4fb2a5ae0dea1687e20c134055f3472d663d3b64fdd9847eba4a5406c667c2a4f528abfc9cd02d9a8", 0x53) write$P9_RWALK(r0, &(0x7f0000000340)={0x30, 0x6f, 0x2, {0x3, [{0x20}, {0x40, 0x0, 0x7}, {0x8, 0x2, 0x4}]}}, 0x30) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0x2020) mount(&(0x7f0000002400)=@sr0, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='reiserfs\x00', 0x40, &(0x7f00000024c0)='/dev/fuse\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002540), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002600)={'ip_vti0\x00', &(0x7f0000002580)={'syztnl2\x00', 0x0, 0x8041, 0x40, 0x0, 0x7, {{0xe, 0x4, 0x2, 0x9, 0x38, 0x67, 0x0, 0x80, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0x7c, [@dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @broadcast, @multicast1, @private=0xa010100]}, @end, @generic={0x88, 0xa, "08976f2b88394579"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000026c0)={'ip6_vti0\x00', &(0x7f0000002640)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x6, 0x2, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x0, 0x20, 0x4}}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000027c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x60, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FAMILY={0x5, 0xd, 0x21}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002800)={@ipv4={'\x00', '\xff\xff', @loopback}, r4}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000002840)={0x7, 'veth0_to_bond\x00', {0x5}, 0x34}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) clock_adjtime(0x1, &(0x7f0000002880)={0x391, 0x4, 0x0, 0xb, 0xa7, 0x6, 0x7, 0xabd, 0x9, 0x400, 0xc00000000000000, 0x4, 0x3, 0x5aa, 0x6, 0x2, 0x4, 0xd8ca, 0xf08b, 0x80, 0x7, 0x5, 0x8, 0x1, 0x8, 0xb08}) r7 = open_tree(0xffffffffffffffff, &(0x7f0000002980)='./file0\x00', 0x100) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f00000029c0)=0x7, 0x8) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_IOC_FAIL(r8, 0x9361, 0x9) pipe2$9p(&(0x7f0000002a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREMOVE(r9, &(0x7f0000002a40)={0x7, 0x7b, 0x2}, 0x7) socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000002a80), &(0x7f0000002ac0)=0xc) socket$inet(0x2, 0x2, 0x0) 24.021723048s ago: executing program 7 (id=4320): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x41, 0x0) (rerun: 64) write$FUSE_INTERRUPT(r2, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313, 0x200003}], 0x30, 0x1000000, 0x0}) 23.946443219s ago: executing program 7 (id=4323): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, r5}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x242000, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x51b6c0, 0x6) sendfile(r0, r1, 0x0, 0x80000000) 22.708888222s ago: executing program 6 (id=4331): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000180), 0x4) r2 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4) write$cgroup_subtree(r2, &(0x7f0000000240)={[{0x2d, 'cpuacct'}, {0x2d, 'pids'}]}, 0xf) readv(r2, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000003900)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x625, 0x0, 0x0, "", [@address_filter={0x28, 0x23, {@in=@private=0xa010102, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}}, 0x20040810) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) eventfd(0x9) 22.707208003s ago: executing program 6 (id=4332): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="0206fa000200"], 0x10}}, 0x48c0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000040)={0x4, 0x7ff, 0x80, 0x7f, 0x9, 0x9, 0x5}, 0xc) 22.697109252s ago: executing program 6 (id=4333): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x10000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x35, 0x10, 0x10, 0x2, 0x10000, 0x5b, 0x5, 0xffffffff, 0xfffffffffffffffe}}) (async) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x35, 0x10, 0x10, 0x2, 0x10000, 0x5b, 0x5, 0xffffffff, 0xfffffffffffffffe}}) r3 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x10020, 0xfffffffd, 0x0, 0x2471}) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x958022, &(0x7f0000000180)=ANY=[@ANYBLOB="009065b021bf77a32f9ce428699c14ec9a583500ec214061993184f98ea2d5265f3f0dedb3f38d6c614cf5ec881c"]) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e1d, 0x620e, @remote, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000370000002e0000000000000024"], 0x40}, 0x40000) (async) sendmsg$inet6(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0xa, 0x4e1d, 0x620e, @remote, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000370000002e0000000000000024"], 0x40}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0x9, &(0x7f0000000080)=0x2, 0x4) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 22.677938852s ago: executing program 6 (id=4334): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@unlock_all, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x804) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100)=@unlock_all, 0xb) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x20, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) lseek(r2, 0x10001, 0x0) (async) 22.612263544s ago: executing program 6 (id=4336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) lseek(r0, 0x800, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0xa, &(0x7f0000000280)={0x1ff}, &(0x7f00000002c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r2, &(0x7f000000d0c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x41, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r3, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x1a}, 0x16, r7}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c041004", @ANYRES16=r4, @ANYBLOB="10002abd7000ffdbdf250e00000008000300", @ANYRES32=r7, @ANYBLOB="050038000100000005002e0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x881}, 0x20080010) 22.587890774s ago: executing program 6 (id=4337): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0xf1, 0x37, 0xc698, 0x80000001, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x4107a2b1, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x3, 0x7, 0x4, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x7, 0x9, 0x8, 0x8, 0x4, 0x101, 0x7, 0x6e, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x1, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x6, 0xb, 0x8, 0x7, 0x4, 0xffff, 0x6, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r9, 0x2f, 0x2, 0xf6, 0x800, 0x24, @mcast2, @private2, 0x20, 0x10, 0x9, 0x32c910a7}}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x7, r10, 0x1, 0x5, 0x6, @multicast}, 0x14) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000000)=0x400) (async) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000000)=0x400) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) 22.548303695s ago: executing program 5 (id=4338): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000480), 0x5b) 22.488895506s ago: executing program 5 (id=4339): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001e005f0214f9f407000904001f0000000000000000000000080004000100000d", 0xfe3d) syz_open_procfs(r0, &(0x7f0000000240)='statm\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./bus\x00', 0x51) getrandom(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x100000000) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x578b3c6732ad0a6) write$P9_RVERSION(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030592575"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='prans=fd,rfdno}', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) pread64(r5, &(0x7f0000000300)=""/256, 0x100, 0x4eb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x47) cachestat(r6, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x4, {{0x2, 0x4e22, @broadcast}}}, 0x88) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[]) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x3ff, 0xfa, 0x0, 0xfffff801}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000d84000)={0xa, 0x4e21, 0xa, @empty, 0x7}, 0x1c) 21.996970675s ago: executing program 5 (id=4340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xb, 0x2}, @flat=@binder={0x73622a85, 0x300b, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/109, 0x6d, 0x1, 0x36}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r1 = syz_io_uring_setup(0x434b, &(0x7f0000000100)={0x0, 0x257c, 0x200, 0x3, 0x1bf, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000180)) syz_io_uring_setup(0x1102, &(0x7f00000001c0)={0x0, 0x3ea5, 0x4, 0x3, 0x26a, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) connect$tipc(0xffffffffffffffff, &(0x7f0000000880)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x2}}, 0x10) 21.940978176s ago: executing program 5 (id=4341): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0xfffffffffffffe35}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x12ba, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x84, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0xdf, 0x2, 0x3, 0x1, 0x0, 0x87, {0x9, 0x21, 0x50e2, 0x3, 0x1, {0x22, 0x3aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x397, 0xb5, 0xd2, 0x6}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x10, 0x1, 0x3, 0x10, 0x9}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x18d, 0xf000, 0x3, [0xff0030]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x4c, &(0x7f0000000240)=@string={0x4c, 0x3, "21cca78d53f9306b5a4dd9f3954141da7adb53ef350945a03e60f380347ae70319927809288704074af0babd8fcf6baa74510d65bc9a9b61f0cb6bc5e627b45e2228513593a75327fc3d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x24, &(0x7f0000000400)={0x40, 0x22, 0xf0, {0xf0, 0x30, "0c50dc410ea1a1a0016b517353c72b4032a361f2a7a5560a9e6689d92ba5a21985c9970a1628563820aa8bbc0098e6a7ce98eb724fc95c52ca3392975b449d3535243e290a54ff690cbd5a8df5c01f3f5f7426ddc7fcbdb6986ab7526eba6c74d1155f879dad0f76a667acf8930216d2c8dca1c89fe9cb86ade7f8118aca933c3f3cfec64765ed6180fca0b4159bbc7e8ac781aee17aec6ec029d5b5cb3493d71fb8fa8a7dfa74b6ea94db76dd8e14685e020111cddd89053e843b8d282e359bedd26cabb5c5d1c309c81a98f9393854e188800cf7797ee6c187f5b3c3510d5e2e854ffb160cdc4af988ce590201"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f00000005c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x4, 'Hl'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51, 0x5, 0x1, {0x22, 0x3c9}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x40, 0x1, 0x8, "5f5141e15700b005"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0xe, "a94bc6978545b0b4646b37417ebd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xf7}}) openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0xfffffffffffffe35}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x12ba, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x84, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0xdf, 0x2, 0x3, 0x1, 0x0, 0x87, {0x9, 0x21, 0x50e2, 0x3, 0x1, {0x22, 0x3aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf, 0x7, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x397, 0xb5, 0xd2, 0x6}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x10, 0x1, 0x3, 0x10, 0x9}, 0x15, &(0x7f00000001c0)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x40, 0x1, 0x18d, 0xf000, 0x3, [0xff0030]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x4c, &(0x7f0000000240)=@string={0x4c, 0x3, "21cca78d53f9306b5a4dd9f3954141da7adb53ef350945a03e60f380347ae70319927809288704074af0babd8fcf6baa74510d65bc9a9b61f0cb6bc5e627b45e2228513593a75327fc3d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}]}) (async) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x24, &(0x7f0000000400)={0x40, 0x22, 0xf0, {0xf0, 0x30, "0c50dc410ea1a1a0016b517353c72b4032a361f2a7a5560a9e6689d92ba5a21985c9970a1628563820aa8bbc0098e6a7ce98eb724fc95c52ca3392975b449d3535243e290a54ff690cbd5a8df5c01f3f5f7426ddc7fcbdb6986ab7526eba6c74d1155f879dad0f76a667acf8930216d2c8dca1c89fe9cb86ade7f8118aca933c3f3cfec64765ed6180fca0b4159bbc7e8ac781aee17aec6ec029d5b5cb3493d71fb8fa8a7dfa74b6ea94db76dd8e14685e020111cddd89053e843b8d282e359bedd26cabb5c5d1c309c81a98f9393854e188800cf7797ee6c187f5b3c3510d5e2e854ffb160cdc4af988ce590201"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f00000005c0)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0x4, 'Hl'}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x51, 0x5, 0x1, {0x22, 0x3c9}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x40, 0x1, 0x8, "5f5141e15700b005"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000740)={0x20, 0x1, 0xe, "a94bc6978545b0b4646b37417ebd"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0xf7}}) (async) 20.894110206s ago: executing program 36 (id=4305): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xaece, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0)=ANY=[@ANYBLOB="280000001100010400000000000000000a00000008000200", @ANYRES32, @ANYBLOB="0c00008008003100881f"], 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.378553505s ago: executing program 8 (id=4342): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xc4042, 0x0) 20.359276005s ago: executing program 8 (id=4343): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on}, {@default_permissions}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$pptp(0x18, 0x1, 0x2) socket$pptp(0x18, 0x1, 0x2) socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) lseek(r0, 0x10001, 0x0) 20.325545766s ago: executing program 8 (id=4344): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000340)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000000c0)={0xfff, 0x6, 0x5177, 0xed, 0x0, "0b000200"}) read(r7, &(0x7f0000000840)=""/4096, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000380)=[{{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1}}], 0x18) close_range(r3, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0xeeef0000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x8dq\xa2\xf9\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_z\xd0\xd5\x19\xa3\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 18.877659043s ago: executing program 5 (id=4345): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}], 0x20, 0x50}, 0x40001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r3, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x78c}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x40000080) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e457bae75"], 0x15) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0xdf1, 0xffffffff80020000, 0x0, 0x1, 0x7f, 0x1, 0x0, 0x0, 0x10, 0x4}}, 0x50) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 18.877143823s ago: executing program 5 (id=4346): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = dup2(r1, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xfffffffffffffeb1, 0xfffffe85, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 8.500094483s ago: executing program 37 (id=4323): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000e40)={0x2020}, 0x2020) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) read$FUSE(r0, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000140)={0x18, 0x0, r5}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x242000, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x51b6c0, 0x6) sendfile(r0, r1, 0x0, 0x80000000) 7.220031827s ago: executing program 38 (id=4337): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="0f20c035080000000fa2c0470fc75e82b9f60b0000b843d80000ba000000000f302e4263e6c4018859f7654a0fc71f660f38818c4b73745ade66baa100400f00d9ee6665660f50fbc4e35178ab0000000050", 0x52}], 0x1, 0x21, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x23, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0xf1, 0x37, 0xc698, 0x80000001, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x2, 0x0, 0x0, 0x8, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x4107a2b1, 0x4, 0x6, 0x2, 0x1, 0x80000001, 0xc0000, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x8, 0x3, 0x3, 0x7, 0x4, 0x5, 0x80000000, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x7, 0x9, 0x8, 0x8, 0x4, 0x101, 0x7, 0x6e, 0x0, 0x6, 0x8, 0x3, 0x7, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x1, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x6, 0xb, 0x8, 0x7, 0x4, 0xffff, 0x6, 0x1, 0xf202, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0xffff, 0xa1, 0x6, 0x9]}}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[]) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0xdd86, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5b0}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r9, 0x2f, 0x2, 0xf6, 0x800, 0x24, @mcast2, @private2, 0x20, 0x10, 0x9, 0x32c910a7}}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x7, r10, 0x1, 0x5, 0x6, @multicast}, 0x14) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000000)=0x400) (async) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000000)=0x400) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async) write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) 4.490644017s ago: executing program 39 (id=4344): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_timeval(r1, 0x1, 0x14, 0x0, &(0x7f0000000340)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r7, 0x5407, &(0x7f00000000c0)={0xfff, 0x6, 0x5177, 0xed, 0x0, "0b000200"}) read(r7, &(0x7f0000000840)=""/4096, 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000380)=[{{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1}}], 0x18) close_range(r3, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1ff, 0x0, 0xeeef0000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x8dq\xa2\xf9\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_z\xd0\xd5\x19\xa3\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 0s ago: executing program 40 (id=4346): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000003c0)={'filter\x00', 0x7, "f0a23923263408"}, &(0x7f0000000200)=0x2f) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = dup2(r1, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0xfffffffffffffeb1, 0xfffffe85, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 54.002394][ T9607] exFAT-fs (rnullb0): invalid boot record signature [ 154.009104][ T9607] exFAT-fs (rnullb0): failed to read boot sector [ 154.015688][ T9607] exFAT-fs (rnullb0): failed to recognize exfat type [ 154.045523][ T9609] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 154.114961][ T9611] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 154.322256][ T9634] overlayfs: failed to clone upperpath [ 154.427913][ T9640] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 154.464354][ T9645] binder: Unknown parameter 'defcontext01777777777777777777777' [ 154.532601][ T9214] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.978621][ T9684] overlayfs: failed to clone upperpath [ 155.292003][ T9700] tipc: Started in network mode [ 155.296904][ T9700] tipc: Node identity 3c, cluster identity 4711 [ 155.303183][ T9700] tipc: Node number set to 60 [ 156.240503][ T9721] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 156.257198][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 156.257215][ T36] audit: type=1400 audit(157.167:873): avc: denied { create } for pid=9723 comm="syz.0.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 156.417568][ T9727] overlayfs: failed to clone upperpath [ 156.424157][ T9727] netlink: 'syz.1.3020': attribute type 1 has an invalid length. [ 156.555679][ T9740] 9pnet_fd: Insufficient options for proto=fd [ 156.592470][ T9654] Bluetooth: hci0: command 0x1003 tx timeout [ 156.598518][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.604865][ T9214] Bluetooth: hci0: Frame reassembly failed (-84) [ 156.641195][ T36] audit: type=1326 audit(157.547:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9760 comm="syz.1.3030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 157.492943][ T9785] incfs: Options parsing error. -22 [ 157.498229][ T9785] incfs: mount failed -22 [ 157.510715][ T36] audit: type=1326 audit(158.417:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.1.3037" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 157.521769][ T9652] Bluetooth: hci0: Opcode 0x1003 failed: -4 [ 158.472366][ T9824] 9pnet_fd: Insufficient options for proto=fd [ 158.694215][ T36] audit: type=1400 audit(159.607:876): avc: denied { bind } for pid=9868 comm="syz.4.3065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.864681][ T9878] loop7: detected capacity change from 0 to 7 [ 159.116204][ T9886] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 159.208971][ T36] audit: type=1400 audit(160.117:877): avc: denied { read } for pid=9892 comm="syz.4.3073" path="socket:[32073]" dev="sockfs" ino=32073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.240651][ T36] audit: type=1400 audit(160.117:878): avc: denied { ioctl } for pid=9892 comm="syz.4.3073" path="socket:[32073]" dev="sockfs" ino=32073 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.850435][ T36] audit: type=1326 audit(160.757:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.1.3081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 160.055680][ T9917] rust_binder: Write failure EINVAL in pid:213 [ 160.055891][ T9917] rust_binder: Failed copying remainder into alloc: EFAULT [ 160.062074][ T9917] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 160.069479][ T9917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 160.077765][ T9917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:213 [ 160.239393][ T9923] rust_binder: Error in use_page_slow: ESRCH [ 160.248601][ T9923] rust_binder: use_range failure ESRCH [ 160.254681][ T9923] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 160.260224][ T9923] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 160.268194][ T9923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:166 [ 160.288528][ T9925] loop9: detected capacity change from 0 to 7 [ 160.303982][ T9925] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.311938][ T9925] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.319845][ T9925] loop9: unable to read partition table [ 160.325607][ T9925] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 160.325607][ T9925] ) failed (rc=-5) [ 160.328093][ T7713] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.347520][ T9925] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.355731][ T7713] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.364276][ T7713] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.372570][ T7713] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.380900][ T7713] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.395678][ T36] audit: type=1400 audit(161.307:880): avc: denied { setopt } for pid=9931 comm="syz.2.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 160.421751][ T36] audit: type=1400 audit(161.327:881): avc: denied { read } for pid=9936 comm="syz.2.3089" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.446610][ T36] audit: type=1400 audit(161.327:882): avc: denied { open } for pid=9936 comm="syz.2.3089" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 160.638201][ T552] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 160.646550][ T552] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 160.696415][ T9959] rust_binder: 220: no such ref 0 [ 160.774610][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 161.072453][ T1848] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 161.223617][ T1848] usb 5-1: No LPM exit latency info found, disabling LPM. [ 161.231578][ T1848] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8 [ 161.242972][ T1848] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.257731][ T1848] usb 5-1: string descriptor 0 read error: -22 [ 161.263935][ T1848] usb 5-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 161.272972][ T1848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.281814][ T9977] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.491685][ T1848] usbhid 5-1:1.0: can't add hid device: -71 [ 161.497729][ T1848] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 161.506379][ T1848] usb 5-1: USB disconnect, device number 16 [ 161.728826][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 162.003044][ T36] kauditd_printk_skb: 48 callbacks suppressed [ 162.003061][ T36] audit: type=1400 audit(162.917:931): avc: denied { append } for pid=10049 comm="syz.4.3128" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 162.032289][ T36] audit: type=1400 audit(162.937:932): avc: denied { connect } for pid=10051 comm="syz.4.3129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 162.051269][ T36] audit: type=1326 audit(162.957:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10055 comm="syz.4.3130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174338e9a9 code=0x0 [ 162.543147][ T36] audit: type=1326 audit(163.457:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10023 comm="syz.2.3117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaccf8e9a9 code=0x7fc00000 [ 162.573452][T10064] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 162.582507][ T36] audit: type=1400 audit(163.487:935): avc: denied { mounton } for pid=10063 comm="syz.2.3133" path="/65/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 162.610648][ T36] audit: type=1400 audit(163.497:936): avc: denied { remount } for pid=10063 comm="syz.2.3133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 162.647960][ T36] audit: type=1400 audit(163.557:937): avc: denied { unmount } for pid=8560 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 162.772673][ T36] audit: type=1400 audit(163.687:938): avc: denied { mounton } for pid=10068 comm="syz.2.3134" path="/66/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 163.164080][T10126] /dev/rnullb0: Can't open blockdev [ 163.412452][ T454] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 163.578607][ T454] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.592472][ T454] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.616104][ T454] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 163.631002][ T454] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.640465][ T454] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.649034][ T454] usb 5-1: Product: syz [ 163.653604][ T454] usb 5-1: Manufacturer: syz [ 163.658287][ T454] usb 5-1: SerialNumber: syz [ 163.660376][T10138] rust_binder: Write failure EFAULT in pid:224 [ 163.707013][T10145] overlayfs: failed to clone upperpath [ 163.831820][T10155] 9pnet_fd: Insufficient options for proto=fd [ 163.881907][T10161] input: syz1 as /devices/virtual/input/input8 [ 164.004139][T10181] tmpfs: Unknown parameter 'fowner>00000000000000000000' [ 164.138996][T10183] netlink: 'syz.1.3172': attribute type 12 has an invalid length. [ 164.142454][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 164.175722][T10194] netlink: 'syz.1.3175': attribute type 1 has an invalid length. [ 164.195677][T10196] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 164.280064][T10218] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3183'. [ 164.302447][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 164.310657][ T10] usb 3-1: config 0 has an invalid interface number: 82 but max is 0 [ 164.318982][ T10] usb 3-1: config 0 has no interface number 0 [ 164.325204][ T10] usb 3-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 164.334315][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.342955][ T10] usb 3-1: config 0 descriptor?? [ 164.351326][ T10] ums-sddr09 3-1:0.82: USB Mass Storage device detected [ 164.551254][T10166] rust_binder: Error in use_page_slow: ESRCH [ 164.551291][T10166] rust_binder: use_range failure ESRCH [ 164.558004][T10166] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 164.564143][T10166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 164.572933][T10166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:245 [ 164.583316][ T10] usb 3-1: USB disconnect, device number 14 [ 164.671034][ T454] cdc_ncm 5-1:1.0: bind() failure [ 164.677715][ T454] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.684717][ T454] cdc_ncm 5-1:1.1: bind() failure [ 164.694125][ T454] usb 5-1: USB disconnect, device number 17 [ 165.146014][ T36] audit: type=1400 audit(166.057:939): avc: denied { connect } for pid=10234 comm="syz.2.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.255739][ T36] audit: type=1326 audit(166.167:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10258 comm="syz.1.3196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 165.586015][T10308] SELinux: security_context_str_to_sid () failed with errno=-22 [ 165.843665][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 165.918682][T10326] 9pnet_fd: Insufficient options for proto=fd [ 165.976604][T10341] 9pnet_fd: Insufficient options for proto=fd [ 166.138161][T10372] sock: sock_set_timeout: `syz.1.3237' (pid 10372) tries to set negative timeout [ 166.182480][ T306] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 166.334336][ T306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.345561][ T306] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 166.356744][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 166.363482][ T306] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 166.372662][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.383756][ T306] usb 3-1: config 0 descriptor?? [ 166.389242][T10337] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 167.044210][T10397] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 167.044292][T10397] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:293 [ 167.235015][T10402] binder: Bad value for 'defcontext' [ 167.420657][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 167.420675][ T36] audit: type=1400 audit(168.327:945): avc: denied { create } for pid=10410 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 167.458256][T10411] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 167.467076][ T36] audit: type=1400 audit(168.367:946): avc: denied { create } for pid=10410 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 167.500177][ T36] audit: type=1400 audit(168.367:947): avc: denied { setopt } for pid=10410 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=xdp_socket permissive=1 [ 167.521582][ T36] audit: type=1400 audit(168.367:948): avc: denied { create } for pid=10410 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 167.541416][ T36] audit: type=1400 audit(168.367:949): avc: denied { setopt } for pid=10410 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=vsock_socket permissive=1 [ 167.561419][ T36] audit: type=1400 audit(168.367:950): avc: denied { getopt } for pid=10410 comm="syz.2.3251" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 167.588465][T10424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3255'. [ 167.814768][ T36] audit: type=1400 audit(168.727:951): avc: denied { load_policy } for pid=10447 comm="syz.2.3263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 167.814791][T10448] SELinux: policydb version -845211227 does not match my version range 15-33 [ 167.814817][T10448] SELinux: failed to load policy [ 167.850453][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 168.040039][T10463] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3267'. [ 168.049068][T10465] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 168.049089][T10465] rust_binder: Read failure Err(EFAULT) in pid:303 [ 168.069558][T10467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 168.162668][T10480] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 168.203398][T10481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 168.204259][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.246637][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.286392][T10481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296 [ 168.292072][T10489] overlayfs: failed to clone upperpath [ 168.317381][ T36] audit: type=1326 audit(169.227:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10488 comm="syz.0.3276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 169.172347][T10503] fuse: Bad value for 'group_id' [ 169.177942][T10503] fuse: Bad value for 'group_id' [ 169.258584][T10514] netlink: 'syz.1.3284': attribute type 13 has an invalid length. [ 169.275945][T10516] rust_binder: 10511 RLIMIT_NICE not set [ 169.283796][ T454] rust_binder: 10510: removing orphan mapping 0:1048 [ 169.321021][ T36] audit: type=1400 audit(170.227:953): avc: denied { accept } for pid=10519 comm="syz.4.3286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.376694][T10524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 169.556867][T10540] gre0: entered allmulticast mode [ 169.570575][ T36] audit: type=1326 audit(170.477:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10543 comm="syz.0.3294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 169.781562][T10563] rust_binder: 336: no such ref 2 [ 169.787307][T10563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:336 [ 170.565000][T10587] netlink: 'syz.1.3307': attribute type 33 has an invalid length. [ 170.582049][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 170.602490][T10591] bridge0: entered promiscuous mode [ 170.607722][T10591] bridge0: entered allmulticast mode [ 170.892482][ T454] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 171.043571][ T454] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 171.051885][ T454] usb 5-1: config 179 has no interface number 0 [ 171.058195][ T454] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 171.069348][ T454] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.079381][ T454] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 171.090617][ T454] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 171.101854][ T454] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 171.115131][ T454] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 171.124197][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.133238][T10595] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 171.141289][ T454] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 171.151637][ T454] xpad 5-1:179.65: probe with driver xpad failed with error -5 [ 171.167660][T10599] loop7: detected capacity change from 0 to 7 [ 171.174873][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.184039][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.192026][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.201181][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.209024][T10599] loop7: unable to read partition table [ 171.214966][T10599] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 171.223058][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.237572][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.263143][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 171.277757][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.286055][T10606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.286939][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.296299][T10606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.303466][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.315836][T10606] 9pnet_fd: Insufficient options for proto=fd [ 171.319835][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.320215][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.343025][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.345383][ T454] usb 5-1: USB disconnect, device number 18 [ 171.351182][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.365924][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.401369][T10612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3317'. [ 171.473128][ T306] usb 3-1: string descriptor 0 read error: -32 [ 171.480815][ T306] usbhid 3-1:0.0: can't add hid device: -32 [ 171.486788][ T306] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 171.905352][T10629] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 171.964247][T10635] incfs: Options parsing error. -22 [ 171.974203][T10636] incfs: Options parsing error. -22 [ 171.979460][T10636] incfs: mount failed -22 [ 171.990436][T10635] incfs: mount failed -22 [ 171.996278][T10638] rust_binder: Error in use_page_slow: ESRCH [ 171.996301][T10638] rust_binder: use_range failure ESRCH [ 172.008224][T10638] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 172.017041][T10638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 172.025169][T10638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:350 [ 172.085854][T10651] overlayfs: failed to clone upperpath [ 172.234106][T10674] overlayfs: failed to resolve './file1': -2 [ 172.269276][T10676] incfs: Options parsing error. -22 [ 172.274733][T10676] incfs: mount failed -22 [ 172.375071][T10693] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3346'. [ 172.502454][ T454] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 172.682448][ T454] usb 5-1: Using ep0 maxpacket: 16 [ 172.689696][ T454] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.705659][ T454] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 172.720131][ T454] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 172.726699][ T480] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 172.733438][ T454] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 172.747808][ T480] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.758962][ T454] usb 5-1: Product: syz [ 172.768126][ T454] usb 5-1: Manufacturer: syz [ 172.768136][T10728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7087 sclass=netlink_route_socket pid=10728 comm=syz.1.3359 [ 172.793357][ T454] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 172.996974][T10678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.005633][T10678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.085510][ T480] usb 5-1: USB disconnect, device number 19 [ 173.134827][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 173.135755][ T36] audit: type=1326 audit(174.047:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10743 comm="syz.0.3364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 173.364488][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.366816][T10753] veth1: mtu less than device minimum [ 173.374583][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.389206][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.397832][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.667668][T10776] rust_binder: Got transaction with invalid offset. [ 173.667696][T10776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 173.674512][T10776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:395 [ 173.751704][ T480] rust_binder: 10777: removing orphan mapping 0:120 [ 173.926736][T10801] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.978101][T10809] rust_binder: Error in use_page_slow: ESRCH [ 173.984750][T10809] rust_binder: use_range failure ESRCH [ 173.990872][T10809] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 173.996399][T10809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 174.004454][T10809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:317 [ 174.157085][T10821] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3390'. [ 174.262106][T10824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.270672][T10824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.456066][ T36] audit: type=1326 audit(175.367:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10825 comm="syz.1.3392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 174.467557][T10833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3393'. [ 174.487424][T10833] netlink: 'syz.1.3393': attribute type 16 has an invalid length. [ 174.573475][T10842] incfs: Backing dir is not set, filesystem can't be mounted. [ 174.581015][T10842] incfs: mount failed -2 [ 174.875494][T10879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.886827][T10879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.963600][ T36] audit: type=1326 audit(175.877:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 174.986464][ T36] audit: type=1326 audit(175.877:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.010073][ T36] audit: type=1326 audit(175.877:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.033436][ T36] audit: type=1326 audit(175.947:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.056415][ T36] audit: type=1326 audit(175.947:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.079340][ T36] audit: type=1326 audit(175.947:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.102247][ T36] audit: type=1326 audit(175.967:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.125555][ T36] audit: type=1326 audit(175.967:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.3410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f586b58e9a9 code=0x7ffc0000 [ 175.161930][T10908] netlink: 'syz.4.3415': attribute type 4 has an invalid length. [ 175.169983][T10909] netlink: 'syz.4.3415': attribute type 4 has an invalid length. [ 175.441002][T10939] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3425'. [ 175.613140][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 176.073350][T10973] netlink: 'syz.1.3438': attribute type 6 has an invalid length. [ 176.097364][T10978] overlayfs: failed to clone upperpath [ 176.229797][T10994] 9pnet_fd: Insufficient options for proto=fd [ 176.493565][ T454] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 176.502660][ T454] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.816421][T11040] overlay: Unknown parameter 'fowner' [ 177.156511][T11050] netlink: 'syz.0.3470': attribute type 6 has an invalid length. [ 177.164338][T11050] netlink: 6016 bytes leftover after parsing attributes in process `syz.0.3470'. [ 177.360978][T11052] kvm: emulating exchange as write [ 177.607528][T11055] 9pnet_fd: Insufficient options for proto=fd [ 177.699181][T11068] overlayfs: failed to clone upperpath [ 177.879937][T11096] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 177.897598][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.912612][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.149153][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3497'. [ 178.158993][T11133] tc_dump_action: action bad kind [ 178.178881][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 178.178898][ T36] audit: type=1326 audit(179.087:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.0.3498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 178.266539][T11150] 9pnet_fd: Insufficient options for proto=fd [ 178.266614][T11146] 9pnet_fd: Insufficient options for proto=fd [ 178.298917][ T36] audit: type=1326 audit(179.207:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.0.3502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 178.348687][T11153] cgroup: fork rejected by pids controller in /syz0 [ 178.363126][T11158] rust_binder: 11149 RLIMIT_NICE not set [ 178.388167][ T454] rust_binder: 11148: removing orphan mapping 0:1048 [ 178.413882][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 178.455704][T11378] 9pnet: Could not find request transport: ŸQìÐZ­¡SUd [ 178.492557][T11384] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 178.499922][T11382] overlayfs: failed to clone upperpath [ 178.525636][T11384] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 131074 [ 178.533559][ T36] audit: type=1400 audit(179.437:982): avc: denied { associate } for pid=11383 comm="syz.2.3509" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 178.540122][T11384] rust_binder: Write failure EFAULT in pid:349 [ 178.660501][T11406] veth0_vlan: entered allmulticast mode [ 178.687114][T11411] rust_binder: Error in use_page_slow: ESRCH [ 178.687138][T11411] rust_binder: use_range failure ESRCH [ 178.699154][T11411] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 178.709516][T11411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 178.717557][T11411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:356 [ 178.779896][T11432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.813644][T11432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.938272][T11434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62294 sclass=netlink_route_socket pid=11434 comm=syz.4.3521 [ 179.062230][T11438] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 179.071225][T11437] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 179.115782][T11444] 9pnet_fd: Insufficient options for proto=fd [ 179.299748][ T36] audit: type=1326 audit(180.207:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11452 comm="syz.1.3532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 179.539318][T11469] fuse: blksize only supported for fuseblk [ 179.559273][T11472] usb usb5: usbfs: process 11472 (syz.2.3537) did not claim interface 2 before use [ 179.637044][ T6705] Bluetooth: hci0: Frame reassembly failed (-84) [ 179.718543][ T36] audit: type=1326 audit(180.627:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11475 comm="syz.4.3538" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174338e9a9 code=0x0 [ 179.981459][T11490] netlink: 1351 bytes leftover after parsing attributes in process `syz.0.3541'. [ 179.991430][ T36] audit: type=1326 audit(180.897:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11489 comm="syz.0.3541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 180.703514][T11506] fuse: Bad value for 'rootmode' [ 181.587631][T11542] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3559'. [ 181.608637][ T36] audit: type=1326 audit(182.517:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11543 comm="syz.1.3560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 181.712449][ T9654] Bluetooth: hci0: command 0x1003 tx timeout [ 181.718488][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 181.992296][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.000911][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.082961][T11562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=11562 comm=syz.4.3565 [ 182.555259][ T304] tipc: Subscription rejected, illegal request [ 182.799015][ T36] audit: type=1400 audit(183.701:987): avc: denied { write } for pid=11587 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 182.902166][ T36] audit: type=1400 audit(183.800:988): avc: denied { mounton } for pid=11587 comm="syz.2.3572" path="/124/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 182.960422][ T36] audit: type=1400 audit(183.860:989): avc: denied { unmount } for pid=9129 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 182.986452][T11606] overlayfs: failed to create directory ./bus/work (errno: 11); mounting read-only [ 183.483485][ T36] audit: type=1326 audit(184.376:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11591 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x7fc00000 [ 184.146372][ T36] audit: type=1400 audit(185.031:991): avc: denied { map } for pid=11655 comm="syz.0.3594" path="socket:[37925]" dev="sockfs" ino=37925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.591735][ T64] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 184.744292][ T64] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.752338][ T64] usb 5-1: not running at top speed; connect to a high speed hub [ 184.760747][ T64] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.770955][ T64] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 184.783261][ T64] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.792282][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.800290][ T64] usb 5-1: Product: syz [ 184.804483][ T64] usb 5-1: Manufacturer: syz [ 184.809058][ T64] usb 5-1: SerialNumber: syz [ 184.926597][ T36] audit: type=1326 audit(185.815:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11676 comm="syz.1.3602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 185.029302][ T64] usb 5-1: unit 2 not found! [ 185.036480][ T64] usb 5-1: unknown interface protocol 0x1, assuming v1 [ 185.052701][ T64] usb 5-1: cannot find UAC_HEADER [ 185.059366][ T64] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 185.074584][ T64] usb 5-1: USB disconnect, device number 20 [ 185.121469][ T36] audit: type=1326 audit(186.003:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.0.3613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 185.810891][ T552] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 185.811728][T11731] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 185.838935][T11733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.839216][T11733] rust_binder: Error in use_page_slow: ESRCH [ 185.845710][T11733] rust_binder: use_range failure ESRCH [ 185.851731][T11733] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 185.857178][T11733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.864929][T11733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:409 [ 185.917314][T11735] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.926490][T11736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 185.935104][T11735] rust_binder: Error in use_page_slow: ESRCH [ 185.941590][T11735] rust_binder: use_range failure ESRCH [ 185.947797][T11735] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 185.953293][T11735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 185.961128][T11735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:411 [ 185.973436][ T552] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.992948][ T552] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.003412][ T552] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.015949][ T552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.026955][ T552] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 186.037978][ T552] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.047083][ T552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.056503][T11723] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 186.065821][ T552] hub 5-1:1.0: bad descriptor, ignoring hub [ 186.071740][ T552] hub 5-1:1.0: probe with driver hub failed with error -5 [ 186.079102][ T552] cdc_wdm 5-1:1.0: skipping garbage [ 186.084379][ T552] cdc_wdm 5-1:1.0: skipping garbage [ 186.089996][ T552] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 186.096133][ T552] cdc_wdm 5-1:1.0: Unknown control protocol [ 186.118085][ T480] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 186.126270][ T480] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.212615][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.221139][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.373321][ T480] usb 5-1: USB disconnect, device number 21 [ 186.703262][ T480] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 186.821838][T11758] rust_binder: 430: no such ref 1 [ 186.826943][T11758] rust_binder: 430: no such ref 2 [ 186.863231][ T480] usb 5-1: Using ep0 maxpacket: 8 [ 186.869415][ T480] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.880030][T11771] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.880069][ T480] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.895476][T11771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 186.904474][T11771] gretap0: entered promiscuous mode [ 186.909683][T11771] gretap0: entered allmulticast mode [ 186.915032][ T480] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.926542][ T480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.947899][ T480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 186.962838][ T480] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.979399][ T480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.986407][ T36] audit: type=1326 audit(187.866:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11777 comm="syz.2.3632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaccf8e9a9 code=0x0 [ 186.989820][T11723] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 187.019965][ T480] hub 5-1:1.0: bad descriptor, ignoring hub [ 187.033204][ T480] hub 5-1:1.0: probe with driver hub failed with error -5 [ 187.043853][ T480] cdc_wdm 5-1:1.0: skipping garbage [ 187.046073][T11779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3632'. [ 187.049130][ T480] cdc_wdm 5-1:1.0: skipping garbage [ 187.070892][ T480] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 187.077238][ T480] cdc_wdm 5-1:1.0: Unknown control protocol [ 187.346428][T11723] veth0_vlan: entered allmulticast mode [ 187.503316][ T480] usb 5-1: USB disconnect, device number 22 [ 187.524484][T11800] 9pnet_fd: Insufficient options for proto=fd [ 187.884457][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 187.893419][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'. [ 187.982911][T11812] incfs: Options parsing error. -22 [ 187.988327][T11812] incfs: mount failed -22 [ 187.994222][ T36] audit: type=1400 audit(188.876:995): avc: denied { watch } for pid=11807 comm="syz.4.3640" path="/172/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 188.105667][T11814] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.163287][T11827] 9pnet_fd: Insufficient options for proto=fd [ 188.270148][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3650'. [ 188.302735][T11850] 9pnet_fd: Insufficient options for proto=fd [ 188.303441][T11837] netlink: 'syz.4.3645': attribute type 4 has an invalid length. [ 188.316673][T11837] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3645'. [ 188.332215][T11852] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 188.402611][T11858] 9pnet_fd: Insufficient options for proto=fd [ 189.142893][T11883] rust_binder: Error in use_page_slow: ESRCH [ 189.142914][T11883] rust_binder: use_range failure ESRCH [ 189.149259][T11883] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 189.154825][T11883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 189.162655][T11883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:463 [ 189.205489][T11887] netlink: 393 bytes leftover after parsing attributes in process `syz.0.3665'. [ 189.224696][T11887] overlayfs: failed to resolve './file1/file0': -2 [ 189.245875][ T36] audit: type=1400 audit(190.126:996): avc: denied { execute } for pid=11890 comm="syz.0.3667" name="file0" dev="ramfs" ino=38461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 189.267409][ T36] audit: type=1400 audit(190.126:997): avc: denied { execute_no_trans } for pid=11890 comm="syz.0.3667" path="/file0" dev="ramfs" ino=38461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 189.299278][T11893] 9pnet_fd: Insufficient options for proto=fd [ 189.300338][T11894] 9pnet_fd: Insufficient options for proto=fd [ 189.585983][ T36] audit: type=1400 audit(190.466:998): avc: denied { watch watch_reads } for pid=11921 comm="syz.2.3677" path="/proc/493/task/494/ns" dev="proc" ino=39375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 189.846920][T11933] sit0: entered promiscuous mode [ 189.864516][T11933] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 189.872279][T11933] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3681'. [ 189.916343][ T36] audit: type=1326 audit(190.796:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11935 comm="syz.4.3682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174338e9a9 code=0x0 [ 190.430004][T11965] rust_binder: 11964 RLIMIT_NICE not set [ 190.475009][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3693'. [ 190.490024][T11976] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3693'. [ 190.715418][T11978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.723969][T11978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.756427][T11980] netlink: 'syz.4.3695': attribute type 4 has an invalid length. [ 190.764373][T11981] netlink: 'syz.4.3695': attribute type 4 has an invalid length. [ 190.813034][ T304] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.819476][T11983] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 190.828189][T11983] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 190.828218][T11983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:587 [ 191.254997][T11995] rust_binder: Write failure EINVAL in pid:535 [ 191.264506][T11995] rust_binder: Failed copying remainder into alloc: EFAULT [ 191.270660][T11995] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 191.277951][T11995] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 191.286219][T11995] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:535 [ 191.870408][T12005] input: syz1 as /devices/virtual/input/input10 [ 191.959563][T12015] fuse: Unknown parameter 'default_permisskkns' [ 191.992905][T12019] __nla_validate_parse: 2 callbacks suppressed [ 191.992926][T12019] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3708'. [ 192.022013][T12021] netlink: 'syz.1.3709': attribute type 1 has an invalid length. [ 192.185259][T12031] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 192.802029][T12038] bpf: Bad value for 'uid' [ 192.863253][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.869385][ T9654] Bluetooth: hci0: command 0x1003 tx timeout [ 192.889297][T12041] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 192.897708][T12041] binder: Unknown parameter 'fscontext?}446744073709551615' [ 192.971513][T12048] Invalid logical block size (1) [ 192.990067][T12052] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 192.990309][T12051] rust_binder: Write failure EFAULT in pid:596 [ 192.997165][T12051] rust_binder: Error while translating object. [ 193.003642][T12051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 193.009895][T12051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:596 [ 193.044439][T12067] rust_binder: 567: no such ref 0 [ 193.059001][T12067] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 193.066329][T12067] rust_binder: Write failure EINVAL in pid:567 [ 193.066520][T12067] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 193.079793][T12067] rust_binder: Write failure EINVAL in pid:567 [ 193.104980][T12074] netlink: 'syz.2.3725': attribute type 4 has an invalid length. [ 193.273236][ T1848] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 193.423517][ T1848] usb 5-1: Using ep0 maxpacket: 32 [ 193.429725][ T1848] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.437981][ T1848] usb 5-1: config 0 has no interface number 0 [ 193.444095][ T1848] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.455061][ T1848] usb 5-1: config 0 interface 85 has no altsetting 0 [ 193.463291][ T1848] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.472346][ T1848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.480358][ T1848] usb 5-1: Product: syz [ 193.484546][ T1848] usb 5-1: Manufacturer: syz [ 193.489130][ T1848] usb 5-1: SerialNumber: syz [ 193.494423][ T1848] usb 5-1: config 0 descriptor?? [ 193.607065][T12100] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 193.615822][T12100] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 193.624805][T12100] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 193.956220][ T480] usb 5-1: USB disconnect, device number 23 [ 194.083546][ T36] audit: type=1326 audit(194.966:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.2.3738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaccf8e9a9 code=0x0 [ 194.149165][T12110] tipc: New replicast peer: 255.255.255.255 [ 194.167197][T12110] tipc: Enabled bearer , priority 10 [ 194.264348][ T36] audit: type=1326 audit(195.146:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.0.3742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 194.703132][T12140] netlink: 'syz.4.3746': attribute type 15 has an invalid length. [ 194.711304][T12140] rust_binder: 614: no such ref 1 [ 194.716587][T12140] rust_binder: 614: no such ref 2 [ 194.813823][T12148] rust_binder: 12147 RLIMIT_NICE not set [ 195.144126][T12163] overlayfs: failed to clone upperpath [ 195.191529][T12172] 9pnet_fd: Insufficient options for proto=fd [ 195.236340][ T46] tipc: Subscription rejected, illegal request [ 195.275061][ T36] audit: type=1326 audit(196.156:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12189 comm="syz.0.3762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 195.349873][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 195.541170][ T1848] rust_binder: 12139: removing orphan mapping 0:1048 [ 195.551757][T12211] netlink: 'syz.4.3771': attribute type 27 has an invalid length. [ 195.813233][ T1848] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 195.943241][ T1848] usb 5-1: device descriptor read/64, error -71 [ 195.999826][T12237] netlink: 'syz.2.3781': attribute type 4 has an invalid length. [ 196.013392][T12237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12237 comm=syz.2.3781 [ 196.102862][T12255] fuse: Unknown parameter '0000000000000000000000400000000000000000004' [ 196.128481][T12260] sock: sock_set_timeout: `syz.2.3781' (pid 12260) tries to set negative timeout [ 196.183282][ T1848] usb 5-1: device descriptor read/64, error -71 [ 196.423264][ T1848] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 196.553213][ T1848] usb 5-1: device descriptor read/64, error -71 [ 196.793470][ T1848] usb 5-1: device descriptor read/64, error -71 [ 196.814965][T12322] syz.0.3811: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 196.830011][T12322] CPU: 1 UID: 0 PID: 12322 Comm: syz.0.3811 Not tainted 6.12.30-syzkaller-g2199f5c4b596 #0 189018127a663dacdc102912184255786fc0642a [ 196.830063][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.830074][T12322] Call Trace: [ 196.830078][T12322] [ 196.830083][T12322] __dump_stack+0x21/0x30 [ 196.830115][T12322] dump_stack_lvl+0x10c/0x190 [ 196.830128][T12322] ? __cfi_dump_stack_lvl+0x10/0x10 [ 196.830141][T12322] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 196.830155][T12322] dump_stack+0x19/0x20 [ 196.830166][T12322] warn_alloc+0x1bc/0x2a0 [ 196.830177][T12322] ? stack_depot_save_flags+0x38/0x800 [ 196.830193][T12322] ? __cfi_warn_alloc+0x10/0x10 [ 196.830204][T12322] ? kasan_save_track+0x4f/0x80 [ 196.830218][T12322] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 196.830231][T12322] ? xskq_create+0x68/0x2a0 [ 196.830244][T12322] ? xsk_init_queue+0xb6/0x120 [ 196.830257][T12322] ? xsk_setsockopt+0x43f/0x6f0 [ 196.830270][T12322] ? do_sock_setsockopt+0x26a/0x400 [ 196.830282][T12322] ? __x64_sys_setsockopt+0x1b8/0x250 [ 196.830295][T12322] ? x64_sys_call+0x2adc/0x2ee0 [ 196.830313][T12322] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.830328][T12322] __vmalloc_node_range_noprof+0x135/0x1420 [ 196.830342][T12322] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 196.830360][T12322] ? avc_has_perm+0x144/0x220 [ 196.830372][T12322] ? kasan_save_alloc_info+0x40/0x50 [ 196.830383][T12322] ? __kasan_kmalloc+0x96/0xb0 [ 196.830398][T12322] vmalloc_user_noprof+0x77/0x90 [ 196.830409][T12322] ? xskq_create+0xdb/0x2a0 [ 196.830422][T12322] xskq_create+0xdb/0x2a0 [ 196.830435][T12322] xsk_init_queue+0xb6/0x120 [ 196.830448][T12322] xsk_setsockopt+0x43f/0x6f0 [ 196.830461][T12322] ? __cfi_xsk_setsockopt+0x10/0x10 [ 196.830473][T12322] ? do_futex+0x309/0x500 [ 196.830490][T12322] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 196.830501][T12322] ? security_socket_setsockopt+0x33/0xd0 [ 196.830515][T12322] ? __cfi_xsk_setsockopt+0x10/0x10 [ 196.830527][T12322] do_sock_setsockopt+0x26a/0x400 [ 196.830540][T12322] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 196.830553][T12322] __x64_sys_setsockopt+0x1b8/0x250 [ 196.830566][T12322] x64_sys_call+0x2adc/0x2ee0 [ 196.830582][T12322] do_syscall_64+0x58/0xf0 [ 196.830597][T12322] ? clear_bhb_loop+0x50/0xa0 [ 196.830611][T12322] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 196.830625][T12322] RIP: 0033:0x7f586b58e9a9 [ 196.830642][T12322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.830652][T12322] RSP: 002b:00007f586c4be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.830670][T12322] RAX: ffffffffffffffda RBX: 00007f586b7b5fa0 RCX: 00007f586b58e9a9 [ 196.830679][T12322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 196.830687][T12322] RBP: 00007f586b610d69 R08: 0000000000000004 R09: 0000000000000000 [ 196.830695][T12322] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 196.830703][T12322] R13: 0000000000000000 R14: 00007f586b7b5fa0 R15: 00007ffc9d286458 [ 196.830712][T12322] [ 196.830719][T12322] Mem-Info: [ 196.915182][ T1848] usb usb5-port1: attempt power cycle [ 196.920878][T12322] active_anon:27871 inactive_anon:1683 isolated_anon:0 [ 196.920878][T12322] active_file:11620 inactive_file:15447 isolated_file:0 [ 196.920878][T12322] unevictable:16317 dirty:41 writeback:0 [ 196.920878][T12322] slab_reclaimable:6930 slab_unreclaimable:72514 [ 196.920878][T12322] mapped:27092 shmem:7808 pagetables:1987 [ 196.920878][T12322] sec_pagetables:0 bounce:0 [ 196.920878][T12322] kernel_misc_reclaimable:0 [ 196.920878][T12322] free:1478361 free_pcp:2368 free_cma:0 [ 197.186147][T12322] Node 0 active_anon:120168kB inactive_anon:6732kB active_file:46480kB inactive_file:61788kB unevictable:65268kB isolated(anon):0kB isolated(file):0kB mapped:104464kB dirty:164kB writeback:0kB shmem:33412kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:6140kB pagetables:8068kB sec_pagetables:0kB all_unreclaimable? no [ 197.220128][T12322] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965996kB mlocked:0kB bounce:0kB free_pcp:5784kB local_pcp:68kB free_cma:0kB [ 197.250460][T12322] lowmem_reserve[]: 0 3921 3921 [ 197.255726][T12322] Normal free:2943172kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105436kB inactive_anon:6732kB active_file:46480kB inactive_file:61788kB unevictable:65268kB writepending:164kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:21288kB local_pcp:5556kB free_cma:0kB [ 197.271009][T12337] x_tables: unsorted underflow at hook 3 [ 197.288099][ T1848] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 197.299936][T12322] lowmem_reserve[]: 0 0 0 [ 197.305635][T12322] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 197.321686][ T36] audit: type=1400 audit(198.186:1003): avc: denied { link } for pid=12341 comm="syz.2.3818" name="file1" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 197.344523][T12322] Normal: 62*4kB (ME) 143*8kB (UM) 1224*16kB (UME) 1122*32kB (UME) 805*64kB (UME) 188*128kB (UME) 102*256kB (UME) 43*512kB (UME) 28*1024kB (UME) 7*2048kB (UME) 667*4096kB (UME) = 2955632kB [ 197.349577][ T1848] usb 5-1: device descriptor read/8, error -71 [ 197.363282][T12322] 50738 total pagecache pages [ 197.374161][T12322] 1866 pages in swap cache [ 197.378577][T12322] Free swap = 115136kB [ 197.382743][T12322] Total swap = 124996kB [ 197.386948][T12322] 2097051 pages RAM [ 197.390745][T12322] 0 pages HighMem/MovableOnly [ 197.395440][T12322] 351522 pages reserved [ 197.399605][T12322] 0 pages cma reserved [ 197.405911][T12322] Memory allocations: [ 197.409908][T12322] 0 B 0 init/main.c:1370 func:do_initcalls [ 197.418308][T12322] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 197.429039][T12322] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 197.441254][T12322] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 197.441571][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3821'. [ 197.453955][T12322] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 197.466210][T12322] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 197.474906][T12322] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 197.483045][T12322] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 197.491190][T12322] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 197.494311][ T1848] usb 5-1: device descriptor read/8, error -71 [ 197.499447][T12322] 0 B 0 init/initramfs.c:101 func:find_link [ 197.540181][T12362] 9pnet_fd: Insufficient options for proto=fd [ 197.634765][T12380] fuse: Bad value for 'fd' [ 197.688615][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3837'. [ 197.700398][ T36] audit: type=1326 audit(198.576:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.0.3837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 197.743236][ T1848] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 197.764184][ T1848] usb 5-1: device descriptor read/8, error -71 [ 197.804524][ T36] audit: type=1400 audit(198.686:1005): avc: denied { lock } for pid=12405 comm="syz.1.3838" path="socket:[40398]" dev="sockfs" ino=40398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.832787][ T36] audit: type=1326 audit(198.706:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.1.3839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 197.894297][ T1848] usb 5-1: device descriptor read/8, error -71 [ 198.013233][ T1848] usb usb5-port1: unable to enumerate USB device [ 198.081918][T12441] fuse: Bad value for 'group_id' [ 198.086965][T12441] fuse: Bad value for 'group_id' [ 198.538368][ T36] audit: type=1326 audit(199.416:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.0.3853" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 198.569316][ T36] audit: type=1326 audit(199.446:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.1.3852" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 198.632992][ T36] audit: type=1326 audit(199.506:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12459 comm="syz.0.3854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 198.679211][T12468] 9pnet_fd: Insufficient options for proto=fd [ 198.782743][ T36] audit: type=1400 audit(199.656:1010): avc: denied { remove_name } for pid=12489 comm="syz.4.3862" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.445586][T12519] exFAT-fs (rnullb0): invalid boot record signature [ 199.456336][T12519] exFAT-fs (rnullb0): failed to read boot sector [ 199.462888][T12519] exFAT-fs (rnullb0): failed to recognize exfat type [ 199.471625][T12521] 9pnet_fd: Insufficient options for proto=fd [ 199.509352][T12523] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 199.509378][T12523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 199.519826][T12523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:657 [ 199.545182][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 199.545199][ T36] audit: type=1326 audit(200.426:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.2.3877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaccf8e9a9 code=0x0 [ 199.628303][T12554] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3884'. [ 199.637316][T12554] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3884'. [ 199.646301][T12554] netlink: 'syz.0.3884': attribute type 2 has an invalid length. [ 199.654165][T12554] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3884'. [ 199.686687][T12563] input: syz1 as /devices/virtual/input/input11 [ 199.728755][T12573] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 199.738089][T12573] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3890'. [ 199.756038][T12575] netlink: 'syz.0.3891': attribute type 3 has an invalid length. [ 199.763810][T12575] netlink: 944 bytes leftover after parsing attributes in process `syz.0.3891'. [ 199.825581][T12579] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 199.836770][T12579] incfs: Options parsing error. -22 [ 199.844435][T12579] incfs: mount failed -22 [ 199.875634][T12582] batadv_slave_0: mtu less than device minimum [ 199.893602][ T36] audit: type=1400 audit(200.776:1017): avc: denied { append } for pid=12581 comm="syz.4.3894" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.129373][T12596] SELinux: security_context_str_to_sid (s”5¿¯’6>]Gй) failed with errno=-22 [ 200.140495][ T36] audit: type=1400 audit(201.016:1018): avc: denied { read } for pid=12595 comm="syz.4.3898" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.164297][T12596] incfs_lookup_dentry err:-13 [ 200.181713][ T36] audit: type=1400 audit(201.046:1019): avc: denied { open } for pid=12595 comm="syz.4.3898" path="/210/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.207686][ T36] audit: type=1400 audit(201.046:1020): avc: denied { ioctl } for pid=12595 comm="syz.4.3898" path="/210/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.266925][ T36] audit: type=1326 audit(201.146:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12616 comm="syz.4.3907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174338e9a9 code=0x0 [ 200.318414][T12629] 9pnet_fd: Insufficient options for proto=fd [ 200.434073][T12642] incfs: Backing dir is not set, filesystem can't be mounted. [ 200.441606][T12642] incfs: mount failed -2 [ 200.550854][T12671] netlink: 'syz.0.3921': attribute type 21 has an invalid length. [ 200.562500][T12671] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3921'. [ 200.711818][ T36] audit: type=1326 audit(201.586:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12689 comm="syz.1.3927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f855f18e9a9 code=0x0 [ 200.723908][T12692] 9pnet_fd: Insufficient options for proto=fd [ 200.772114][T12697] netlink: 1536 bytes leftover after parsing attributes in process `syz.0.3930'. [ 200.909044][ T36] audit: type=1400 audit(201.786:1023): avc: denied { sys_module } for pid=12715 comm="syz.0.3938" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 200.994002][T12721] IPv4: Oversized IP packet from 172.20.20.170 [ 201.000365][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 201.006640][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 201.013463][T12721] IPv4: Oversized IP packet from 172.20.20.170 [ 201.019781][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 201.026018][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 201.032734][T12721] IPv4: Oversized IP packet from 172.20.20.170 [ 201.039182][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 201.337677][ T36] audit: type=1326 audit(202.216:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.2.3946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaccf8e9a9 code=0x0 [ 201.563264][ T1848] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 201.584117][T12752] tipc: Enabling of bearer rejected, failed to enable media [ 201.724383][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 201.735474][ T1848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.745355][ T1848] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 201.754451][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.765782][ T1848] usb 5-1: config 0 descriptor?? [ 202.203016][ T36] audit: type=1400 audit(203.076:1025): avc: denied { mounton } for pid=12779 comm="syz.2.3957" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 202.203082][T12780] overlay: filesystem on ./bus is read-only [ 202.255476][ T1848] usbhid 5-1:0.0: can't add hid device: -71 [ 202.261429][ T1848] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 202.270097][ T1848] usb 5-1: USB disconnect, device number 28 [ 202.363731][T12808] overlayfs: missing 'lowerdir' [ 202.816439][T12838] overlay: ./file0 is not a directory [ 203.356704][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.366175][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.388720][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.398037][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.407277][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.416503][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.425678][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.435176][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.451008][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.460236][T12871] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3990'. [ 203.565295][T12876] cgroup: none used incorrectly [ 203.903242][ T306] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 203.951001][T12914] 9pnet_fd: Insufficient options for proto=fd [ 204.037280][T12938] tipc: Enabling of bearer rejected, failed to enable media [ 204.054295][ T306] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.064545][ T306] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.073429][ T306] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.087648][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.096703][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.104710][ T306] usb 5-1: Product: syz [ 204.108860][ T306] usb 5-1: Manufacturer: syz [ 204.113483][ T306] usb 5-1: SerialNumber: syz [ 204.119900][ T306] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 204.126777][ T306] cdc_ncm 5-1:1.0: bind() failure [ 204.756896][T12959] 9pnet_fd: Insufficient options for proto=fd [ 204.771925][T12962] overlay: filesystem on ./bus is read-only [ 204.778318][T12962] /dev/rnullb0: Can't lookup blockdev [ 204.865849][ T306] usb 5-1: USB disconnect, device number 29 [ 205.226154][T12987] batadv_slave_0: entered promiscuous mode [ 205.248847][T12989] net_ratelimit: 88 callbacks suppressed [ 205.248864][T12989] veth1_vlan: mtu greater than device maximum [ 205.268453][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.275759][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.282843][T12980] bridge_slave_0: entered allmulticast mode [ 205.289875][T12980] bridge_slave_0: entered promiscuous mode [ 205.296345][T12987] bridge0: port 3(veth0_to_bridge) entered blocking state [ 205.303705][T12987] bridge0: port 3(veth0_to_bridge) entered disabled state [ 205.311244][T12987] veth0_to_bridge: entered allmulticast mode [ 205.317999][T12987] veth0_to_bridge: entered promiscuous mode [ 205.324190][T12987] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.336620][ T306] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 205.344469][T12987] bridge0: port 3(veth0_to_bridge) entered blocking state [ 205.351608][T12987] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 205.359558][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.366699][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.374218][T12980] bridge_slave_1: entered allmulticast mode [ 205.380557][T12980] bridge_slave_1: entered promiscuous mode [ 205.386858][T12986] batadv_slave_0: left promiscuous mode [ 205.481098][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.488186][T12980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.495513][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.502545][T12980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.510579][ T306] usb 5-1: not running at top speed; connect to a high speed hub [ 205.523290][ T306] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 205.531396][ T306] usb 5-1: config 95 has no interface number 0 [ 205.545866][ T306] usb 5-1: config 95 interface 1 has no altsetting 0 [ 205.554116][ T306] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 205.563408][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.571450][ T306] usb 5-1: Product: syz [ 205.583701][ T306] usb 5-1: Manufacturer: syz [ 205.588860][T12980] veth0_vlan: entered promiscuous mode [ 205.594865][ T306] usb 5-1: SerialNumber: syz [ 205.603505][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 205.603537][ T36] audit: type=1326 audit(207.471:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.2.4036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaccf8e9a9 code=0x0 [ 205.639969][T12980] veth1_macvtap: entered promiscuous mode [ 205.671515][T13018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 205.740763][T13021] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 206.339789][ T306] usb 5-1: USB disconnect, device number 30 [ 206.368246][ T7713] udevd[7713]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:95.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 206.372903][T13035] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 206.428095][T13040] netlink: 'syz.4.4047': attribute type 28 has an invalid length. [ 206.486203][ T36] audit: type=1326 audit(208.361:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13059 comm="syz.4.4053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174338e9a9 code=0x0 [ 206.526835][ T36] audit: type=1400 audit(208.401:1031): avc: denied { map } for pid=13061 comm="syz.1.4054" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 206.602550][T13065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 206.602582][T13065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:9 [ 206.892051][T13077] can: request_module (can-proto-0) failed. [ 206.909468][ T36] audit: type=1400 audit(208.781:1032): avc: denied { listen } for pid=13076 comm="syz.0.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 207.540284][T13120] rust_binder: 13112 RLIMIT_NICE not set [ 207.541605][T13112] rust_binder: Error while translating object. [ 207.549207][T13112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 207.559239][T13112] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 207.579410][T13112] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:14 [ 207.618460][ T64] rust_binder: 13111: removing orphan mapping 0:1048 [ 207.744939][T13142] overlayfs: failed to clone upperpath [ 207.806671][T13139] exFAT-fs (rnullb0): invalid boot record signature [ 207.823307][T13139] exFAT-fs (rnullb0): failed to read boot sector [ 207.835452][T13139] exFAT-fs (rnullb0): failed to recognize exfat type [ 207.886901][ T36] audit: type=1400 audit(209.761:1033): avc: denied { getopt } for pid=13157 comm="syz.0.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 208.014982][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 208.015391][T13171] exFAT-fs (rnullb0): invalid boot record signature [ 208.053193][T13171] exFAT-fs (rnullb0): failed to read boot sector [ 208.064272][T13171] exFAT-fs (rnullb0): failed to recognize exfat type [ 208.081635][T13181] 9pnet_fd: Insufficient options for proto=fd [ 208.123292][ T36] audit: type=1326 audit(210.001:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.0.4083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 208.224390][T13187] x_tables: duplicate entry at hook 2 [ 208.224617][T13208] x_tables: duplicate entry at hook 2 [ 208.242066][T13212] /dev/loop0: Can't lookup blockdev [ 208.247649][T13212] /dev/loop0: Can't lookup blockdev [ 208.253923][T13212] overlay: ./file0 is not a directory [ 208.260236][T13216] 9pnet_fd: Insufficient options for proto=fd [ 208.353107][ T36] audit: type=1400 audit(210.221:1035): avc: denied { accept } for pid=13239 comm="syz.2.4102" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.826822][T13269] netlink: 'syz.4.4109': attribute type 11 has an invalid length. [ 209.209398][T13283] incfs: Options parsing error. -22 [ 209.214682][T13283] incfs: mount failed -22 [ 209.226235][T13287] fuse: Unknown parameter 'r' [ 209.240765][T13289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=13289 comm=syz.0.4117 [ 209.383138][T13298] overlayfs: missing 'workdir' [ 209.631871][T13301] fuse: Bad value for 'fd' [ 209.860659][T13314] __nla_validate_parse: 60 callbacks suppressed [ 209.860681][T13314] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4126'. [ 210.063256][ T9654] Bluetooth: hci0: command 0x1003 tx timeout [ 210.063261][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 210.091441][T13356] netlink: 'syz.1.4143': attribute type 29 has an invalid length. [ 210.099375][T13356] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4143'. [ 210.109155][T13356] binder: Bad value for 'max' [ 210.547926][T13382] overlayfs: failed to clone upperpath [ 210.565115][T13385] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 210.686178][T13392] overlayfs: failed to clone upperpath [ 210.947541][T13400] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4159'. [ 211.355369][T13417] veth0_vlan: entered allmulticast mode [ 211.420556][ T36] audit: type=1400 audit(213.291:1036): avc: denied { ioctl } for pid=13421 comm="syz.1.4168" path="socket:[43752]" dev="sockfs" ino=43752 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 211.537094][ T36] audit: type=1400 audit(213.411:1037): avc: denied { execute } for pid=13433 comm="syz.1.4173" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 211.584534][T13438] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4175'. [ 211.593743][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4175'. [ 211.605310][T13438] syzkaller0: entered allmulticast mode [ 211.768800][T13442] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4177'. [ 211.819840][T13453] netlink: 328 bytes leftover after parsing attributes in process `syz.4.4182'. [ 211.859967][T13468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13468 comm=syz.0.4187 [ 211.873741][T13468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13468 comm=syz.0.4187 [ 211.900312][T13473] 9pnet_fd: Insufficient options for proto=fd [ 211.998311][T13485] 9pnet_fd: Insufficient options for proto=fd [ 212.363134][T13547] tipc: Enabling of bearer rejected, failed to enable media [ 212.372033][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4212'. [ 212.381849][T13546] rust_binder: Write failure EINVAL in pid:82 [ 212.382032][T13546] rust_binder: Error while translating object. [ 212.388371][T13546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 212.394916][T13546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:82 [ 212.558632][ T36] audit: type=1326 audit(214.431:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13569 comm="syz.4.4221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f174338e9a9 code=0x0 [ 212.978150][T13579] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4224'. [ 213.108319][T13598] fuse: Bad value for 'group_id' [ 213.113428][T13598] fuse: Bad value for 'group_id' [ 213.238532][T13609] binder: Unknown parameter 'defcontext' [ 213.310050][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4239'. [ 213.348268][T13617] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 213.387348][T13619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13619 comm=syz.1.4239 [ 213.533909][ T36] audit: type=1326 audit(215.391:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13630 comm="syz.4.4245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f174338e9a9 code=0x0 [ 213.572627][ T36] audit: type=1326 audit(215.441:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13636 comm="syz.0.4247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f586b58e9a9 code=0x0 [ 213.723211][ T552] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 213.874600][ T552] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 213.884675][ T552] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.892873][ T552] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 213.902360][ T552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.910636][ T552] usb 2-1: Product: syz [ 213.915433][ T552] usb 2-1: Manufacturer: syz [ 213.920117][ T552] usb 2-1: SerialNumber: syz [ 213.927102][ T552] usb 2-1: config 0 descriptor?? [ 213.934221][ T552] usb 2-1: selecting invalid altsetting 0 [ 214.139541][T13626] overlayfs: missing 'lowerdir' [ 214.614069][ T36] audit: type=1400 audit(216.491:1041): avc: denied { write } for pid=13656 comm="syz.2.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 214.648540][ T36] audit: type=1400 audit(216.491:1042): avc: denied { read } for pid=13656 comm="syz.2.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 214.878016][ T306] usb 2-1: USB disconnect, device number 6 [ 214.965787][T13680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4260'. [ 215.094005][ T36] audit: type=1326 audit(216.971:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.4.4266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f174338e9a9 code=0x0 [ 215.181527][T13702] overlayfs: failed to clone upperpath [ 215.239792][ T36] audit: type=1400 audit(217.111:1044): avc: denied { map } for pid=13705 comm="syz.1.4269" path="/proc/122/task" dev="proc" ino=45387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 215.333205][ T36] audit: type=1400 audit(217.171:1045): avc: denied { setattr } for pid=13711 comm="syz.2.4270" name="PACKET" dev="sockfs" ino=45398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 216.483334][T13752] fuseblk: Bad value for 'fd' [ 216.526802][T13754] tipc: Started in network mode [ 216.537218][T13754] tipc: Node identity 86e12ad15fd5, cluster identity 4711 [ 216.552673][T13754] tipc: Enabled bearer , priority 0 [ 217.208112][T13767] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 217.663202][ T552] tipc: Node number set to 3644074705 [ 217.807699][T13785] netlink: 'syz.0.4296': attribute type 58 has an invalid length. [ 219.470554][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.493195][T13802] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.500388][T13802] bridge_slave_0: entered allmulticast mode [ 219.522483][T13802] bridge_slave_0: entered promiscuous mode [ 219.643601][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.650649][T13802] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.658015][T13802] bridge_slave_1: entered allmulticast mode [ 219.664962][T13802] bridge_slave_1: entered promiscuous mode [ 219.757197][T13802] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.764288][T13802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.771570][T13802] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.778628][T13802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.807777][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.816608][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.831254][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.838331][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.859451][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.866542][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.894884][T13802] veth0_vlan: entered promiscuous mode [ 219.909800][T13802] veth1_macvtap: entered promiscuous mode [ 219.954639][T13807] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 221.013170][ C0] sched: DL replenish lagged too much [ 231.562393][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.569463][T13822] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.577663][T13822] bridge_slave_0: entered allmulticast mode [ 231.584225][T13822] bridge_slave_0: entered promiscuous mode [ 231.590813][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.598110][T13822] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.606260][T13822] bridge_slave_1: entered allmulticast mode [ 231.612734][T13822] bridge_slave_1: entered promiscuous mode [ 231.702439][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.709522][T13822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.716904][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.723950][T13822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.753077][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.762360][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.775363][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.782412][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.809849][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.816916][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.837454][T13822] veth0_vlan: entered promiscuous mode [ 231.850475][T13822] veth1_macvtap: entered promiscuous mode [ 232.049562][T13835] rust_binder: Got transaction with invalid offset. [ 232.049602][T13835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 232.072798][T13835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8 [ 232.114509][ T455] usb 3-1: USB disconnect, device number 15 [ 232.203582][T13842] 9pnet_fd: Insufficient options for proto=fd [ 232.310315][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.322906][T13847] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.330354][T13847] bridge_slave_0: entered allmulticast mode [ 232.337250][T13847] bridge_slave_0: entered promiscuous mode [ 232.344380][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.351415][T13847] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.359823][T13847] bridge_slave_1: entered allmulticast mode [ 232.366432][T13847] bridge_slave_1: entered promiscuous mode [ 232.373603][T13851] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 232.373622][T13851] rust_binder: Read failure Err(EFAULT) in pid:17 [ 232.467158][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.480652][T13847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.487963][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.495005][T13847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.524578][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.533811][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.548901][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.555972][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.574843][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.581930][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.607534][T13847] veth0_vlan: entered promiscuous mode [ 232.620844][T13847] veth1_macvtap: entered promiscuous mode [ 232.799563][ T36] audit: type=1400 audit(234.671:1046): avc: denied { ioctl } for pid=13860 comm="syz.6.4315" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 232.920709][T13865] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 232.959283][T13864] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.974317][T13864] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.981572][T13864] bridge_slave_0: entered allmulticast mode [ 232.989452][T13864] bridge_slave_0: entered promiscuous mode [ 232.996365][T13864] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.003688][T13864] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.010838][T13864] bridge_slave_1: entered allmulticast mode [ 233.018545][T13864] bridge_slave_1: entered promiscuous mode [ 233.167076][T13864] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.174156][T13864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.181446][T13864] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.188490][T13864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.287643][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.316949][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.367384][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.374460][ T9214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.429717][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.436800][ T9214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.517455][T13864] veth0_vlan: entered promiscuous mode [ 233.552837][T13864] veth1_macvtap: entered promiscuous mode [ 233.718461][T13885] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2097155 [ 233.732219][ T36] audit: type=1400 audit(235.601:1047): avc: denied { append } for pid=13883 comm="syz.6.4321" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.769988][T13885] rust_binder: Write failure EINVAL in pid:4 [ 233.865393][ T36] audit: type=1400 audit(235.741:1048): avc: denied { read } for pid=13895 comm="syz.6.4324" path="socket:[47118]" dev="sockfs" ino=47118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.009143][ T36] audit: type=1400 audit(235.881:1049): avc: denied { getopt } for pid=13904 comm="syz.6.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 234.121848][T13912] rust_binder: 31: no such ref 1 [ 234.126937][T13912] rust_binder: 31: no such ref 2 [ 234.133458][ T455] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.224842][T13914] rust_binder: 13913 RLIMIT_NICE not set [ 234.283221][ T455] usb 6-1: Using ep0 maxpacket: 16 [ 234.295458][ T455] usb 6-1: config 4 has an invalid interface number: 140 but max is 0 [ 234.306176][ T455] usb 6-1: config 4 has no interface number 0 [ 234.312322][ T455] usb 6-1: config 4 interface 140 has no altsetting 0 [ 234.320914][ T455] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 234.330275][ T455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.339451][ T455] usb 6-1: Product: syz [ 234.343857][ T455] usb 6-1: Manufacturer: syz [ 234.348505][ T455] usb 6-1: SerialNumber: syz [ 234.356828][ T455] ums-cypress 6-1:4.140: USB Mass Storage device detected [ 234.565768][T13899] rust_binder: Write failure EFAULT in pid:34 [ 234.960331][ T306] rust_binder: 13911: removing orphan mapping 0:1048 [ 235.011854][T13924] netlink: 'syz.6.4331': attribute type 35 has an invalid length. [ 235.101199][T13931] overlay: Bad value for 'redirect_dir' [ 235.117707][T13931] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 235.767870][T13952] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 109) [ 235.767896][T13952] rust_binder: Error while translating object. [ 235.778759][T13952] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 235.785083][T13952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 237.036335][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.052495][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.060242][T13956] bridge_slave_0: entered allmulticast mode [ 237.066807][T13956] bridge_slave_0: entered promiscuous mode [ 237.073553][T13956] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.080658][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.087950][T13956] bridge_slave_1: entered allmulticast mode [ 237.095426][T13956] bridge_slave_1: entered promiscuous mode [ 237.183964][T13956] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.191057][T13956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.198373][T13956] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.205420][T13956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.234420][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.242856][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.255927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.262994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.295376][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.302456][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.318686][T13956] veth0_vlan: entered promiscuous mode [ 237.333877][T13956] veth1_macvtap: entered promiscuous mode [ 237.403557][T13963] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 239.663787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.675891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.687877][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.699868][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.711831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.723792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.735755][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.747720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.759685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.771658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.673202][ C1] net_ratelimit: 106328 callbacks suppressed [ 244.673224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.691195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.703192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.715164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.727130][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.739118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.751082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.763056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.775027][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.787001][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.683253][ C1] net_ratelimit: 31345 callbacks suppressed [ 249.683274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.701312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.713408][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.725510][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.737649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.749822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.761977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.774306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.786441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.798577][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.693176][ C1] net_ratelimit: 28821 callbacks suppressed [ 254.693197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.711254][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.723365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.735480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.747604][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.759687][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.771785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.783858][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.795984][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.808082][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.703288][ C1] net_ratelimit: 26873 callbacks suppressed [ 259.703310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.721471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.733547][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.745610][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.757699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.769775][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.781855][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.793917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.805991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.818057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.713251][ C1] net_ratelimit: 27978 callbacks suppressed [ 264.713271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.731280][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.743386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.755599][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.767710][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.779831][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.791935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.804037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.816219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.828334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.723188][ C1] net_ratelimit: 28422 callbacks suppressed [ 269.723210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.741198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.753308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.765397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.777464][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.789534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.801624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.813686][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.825766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.838135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.733292][ C1] net_ratelimit: 29319 callbacks suppressed [ 274.733313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.751336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.763406][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.775490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.787580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.799651][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.811776][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.823875][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.835955][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.848071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.743260][ C1] net_ratelimit: 29383 callbacks suppressed [ 279.743281][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.761234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.773513][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.785649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.797717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.809809][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.821884][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.833977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.846058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.858139][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.753178][ C1] net_ratelimit: 29221 callbacks suppressed [ 284.753198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.771176][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.783290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.795357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.807426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.819520][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.831582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.843667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.855767][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.867847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.763275][ C1] net_ratelimit: 29044 callbacks suppressed [ 289.763296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.781274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.793330][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.813312][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.825460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.837580][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.849696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.861787][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.873870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.886006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.773342][ C1] net_ratelimit: 29608 callbacks suppressed [ 294.773364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.791363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.803487][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.815555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.827635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.839693][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.851759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.863899][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.875987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.888159][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 297.217226][ T109] udevd[109]: worker [13837] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 299.783287][ C1] net_ratelimit: 29710 callbacks suppressed [ 299.783309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.801259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.813344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.825399][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.837478][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.849551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.862124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.874445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.886517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.898582][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.793295][ C1] net_ratelimit: 29310 callbacks suppressed [ 304.793319][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.811348][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.823439][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.835524][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.847628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.859721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.871845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.883935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.896047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.908180][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.803264][ C1] net_ratelimit: 29473 callbacks suppressed [ 309.803284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.821322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.833543][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.845684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.857773][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.869842][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.881930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.894036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.906126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.918234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.813207][ C1] net_ratelimit: 28699 callbacks suppressed [ 314.813228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.831350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.843444][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.855546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.867800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.879933][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.892047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.904149][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.916247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 314.928375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.823308][ C1] net_ratelimit: 29025 callbacks suppressed [ 319.823329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.841338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.853463][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.865568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.877661][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.889832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.901917][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.913991][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.926080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.938210][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.833305][ C1] net_ratelimit: 28255 callbacks suppressed [ 324.833327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.851324][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.863390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.875458][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.887571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.899684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.911762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.923824][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.935903][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.947982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.843285][ C1] net_ratelimit: 28203 callbacks suppressed [ 329.843307][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.861308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.873394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.885491][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.897548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.909627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.921722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.933795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.945889][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.957979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.853327][ C1] net_ratelimit: 28078 callbacks suppressed [ 334.853346][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.871353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.883471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.895533][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.907614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.919696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.931799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.943871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.955929][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.968009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.863184][ C1] net_ratelimit: 27538 callbacks suppressed [ 339.863207][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.881263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.893423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.905541][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.917696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.929820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.941940][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.954053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.966351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.978457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.873288][ C1] net_ratelimit: 27991 callbacks suppressed [ 344.873309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.891292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.903381][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.915564][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.927667][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.939771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.951879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.963983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.976064][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.988158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.883213][ C1] net_ratelimit: 27960 callbacks suppressed [ 349.883234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.901225][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.913367][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.925658][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.937746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.949852][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.961904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.973993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.986057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.998158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.011255][ T37] INFO: task syz.0.2684:8630 blocked for more than 123 seconds. [ 350.065557][ T37] Not tainted 6.12.30-syzkaller-g2199f5c4b596 #0 [ 350.072434][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 350.575285][ T36] audit: type=1400 audit(351.971:1050): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1801]" dev="pipefs" ino=1801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 350.895129][ T37] task:syz.0.2684 state:D stack:0 pid:8630 tgid:8630 ppid:6680 flags:0x00004006 [ 351.635833][ T37] Call Trace: [ 351.639149][ T37] [ 351.642083][ T37] __schedule+0x132b/0x1e00 [ 353.305242][ T37] ? __sched_text_start+0x10/0x10 [ 353.310325][ T37] ? __mutex_add_waiter+0xcb/0x290 [ 353.545180][ T37] ? __kasan_check_write+0x18/0x20 [ 353.550334][ T37] ? trace_contention_begin+0xc0/0xc0 [ 354.893323][ C1] net_ratelimit: 26695 callbacks suppressed [ 354.893344][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.911335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.923442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.935505][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.947594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.959678][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.971804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.983893][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.995967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.008062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.213211][ T37] schedule+0xc6/0x240 [ 356.217332][ T37] schedule_preempt_disabled+0x14/0x30 [ 356.222800][ T37] __mutex_lock+0x81e/0x1b50 [ 357.044733][ T37] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 357.051553][ T37] ? __kasan_check_write+0x18/0x20 [ 357.614674][ T37] ? __kasan_check_write+0x18/0x20 [ 357.619838][ T37] ? wake_up_q+0x10f/0x1c0 [ 359.325131][ T37] ? __mutex_unlock_slowpath+0x48a/0x740 [ 359.330817][ T37] ? mutex_unlock+0x240/0x240 [ 359.645115][ T37] __mutex_lock_slowpath+0xe/0x20 [ 359.650193][ T37] mutex_lock+0x102/0x1c0 [ 359.737143][ T37] ? __cfi_mutex_lock+0x10/0x10 [ 359.742070][ T37] rcu_barrier+0x4d/0x530 [ 359.903187][ C1] net_ratelimit: 35091 callbacks suppressed [ 359.903208][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.921296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.933263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.945339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.957417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.969514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.981512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)