last executing test programs: 7m14.549805409s ago: executing program 32 (id=182): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0x8000000000000013, 0x0, {0x0, 0x4}}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1400, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9"], 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) connect$can_bcm(r5, &(0x7f00000005c0)={0x1d, r6}, 0x10) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/97, 0x61}], 0x1}, 0x32}], 0x1, 0x122, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000b1d000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00006f2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x7f8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 6m59.415644512s ago: executing program 33 (id=345): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000180)={0x8060700, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x1c}, &(0x7f00000000c0)=""/4, 0x4, &(0x7f0000000100)=""/52, &(0x7f0000000140)}, 0x58) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000640)={r1}) 6m20.815171848s ago: executing program 34 (id=639): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) setxattr$incfs_size(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000280)=0x2bb5, 0x8, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0"], 0x46) dup(r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) lseek(r3, 0x49bf, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') lseek(r4, 0x38, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r6, @ANYRESDEC=r2, @ANYRESDEC=r2], 0x110}}], 0x1, 0x931766f6319e2d40) sendfile(r6, r5, 0x0, 0x80000000) 5m56.014550147s ago: executing program 35 (id=1077): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="b9a4578fe6bcd26541d3dbee4a1aef4cc4ad685888ec180823bfa3f1131d65b19b9f5efddc9d2dfb02fdda5df3a5c29047da2ce8c53e3b3bcb07e3c8621501b5cc677a096b4ea8acead924f0769c283fb10c7e8e72e989f1df0d8ce979ae3825101fb07edcbec96e7b28157e7ad4a5eb320ec1c7809ca73fc1f5476e6531bac6547bc09121e296d8d62a5514bf1dc40c29be57ed96145ecedd7909715c7d801b2d1190064bc24ffc1bdc112ca337553f5976cf30", @ANYBLOB="0d37ee2b7efe", @ANYRES64]) r0 = socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004400)={0x0}, &(0x7f0000004440)=0xc) r6 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004840)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000004940)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004980)=0x0) fstat(r3, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004a40)=0x0) r12 = getuid() setreuid(0x0, r12) syz_fuse_handle_req(r4, &(0x7f0000002280)="07e616298d34c5761b8c8a7320086b2fc198af22fe193346123d0b99774e2d7dd2e40eba838a9e03ad18e09b36484229fcc091815d186d1577b582a0eda799279bcaec081d7b25dad522d74e64da49c621923f0ac21aabd9986caa41cda8afdd09a998e64f7addfc71383e244bc969fea251ce257bead64de27aa847034e7e71fe66bb63f1d6c1e7a9d6ba07de42743f7adbaaa1ddba3b2bc9206958a59ef454209a1a4af49c6205ddca33284ffc0b41c1861a94faf276cfe868df37548b6e2a23517ebc99d59a82ee0ea2d973c385dd6eb611f5fc27dacd0740cfb7976fd2cd54d56f2bf37fff51aafa3127a3c2a70bbe39b9d93a351fe260e515a5315597b6966653e53abae1dff88fd9a1053e312ddd47fb9e5c610a53c75f4f3df3b8eb9e730eea75410014c29637fb94e77d5c646cfe620cdf83a0b0689f3091c8f6a440e37400fc408ecc26b9cf44695cc00ddafa77b937220cc8ea873d7b603a7ce26c86c484532727cb4778f66986defba4b1dbe3078b8c110b24d79e21036287053405851a303a7c9fa3b45d831495abfa684b225631001a1572f327642cf16833544c06c4244f15df4c4a799f45176f0d6f7d3619941e9a8895139e91b4c4f63ccd3708f580c6b5b8cb4ba9f90119ea63445478653ed95ee1c44046fb39eed192635678286e737c4307df97471a7ae76cedaa6601126348bf59c8792abc4f0d0243ed0e4c5ec184f90d1bee1e34a7094daa9167154ba6242d409cf6878bf97535863a9cb637bcd944d95c9f6e7861849696fdb098d5d0f5cb023e023fd6c836360b14f71cfb334672f85bc3f73157e98199935755043b7cd87de9fab38f1d594a14c111a0466be883e37612b19c69a6aca40535e6836d5b6edd84848fe1d50b787796ea9e8a152b15b83cb83a574ca5b001f597077848a892175837fd70bc2fd39533382b73ad26f4eb95cb76c8073a2e55e68c11873efbee78b8f5ba6cedc64c1619151d680ffb97f9cd52c2dd7d2df5df1f062d716b9d029b45f4f0fc4f985c62aa10dc56149b458a9afb4dda7b62100c3e01190528afa80c2848f0ecb86e3c8d88c4b0f6aec54d9c24fba27ab95b4fc3ca08a347513854e276fb2572bf153370fb0f23af2040a61c4e3fcffa4e7f52a43d4c92b35e97a74c1a2b5706e73351eb6b6cdb8b55cf4675fd6f2ae3987041f444cdd056305228d2de70682987ee9f1800e63d90be1d5cd10cc39cb9cd4e87285cbdb0fca8763b4b42c64fa554544420b3f0ab2884811d04158019775e316fe575f9f67d0db6db7e586c49024ef0e69475f594480614ce4ce69da05930c90ace0dec6f4d8075107c29102cb045eaa7b51a6bdf39af0943676e227b9968917828fa20a1aa7a1a206e98ef5525648262fb65393668ee0a40b7f8c80986a84a00a8850141dc702a0e39b2fe283f42afb65d130325691b08fbf286c88d075bc6ddb9c3a159cf90375a613ab6af6670f52887cbc08869fd0a04a08b70fc3f5d235a87e9614efd0d0105e7624a78bdcbe0e2a91c65bb062fa29f86e46145d2ed5321fc516c7f3ed314280eef272c7af19ab42f03912c92db2a6044c1fca41032d498307f1532e4b4ec5df8c7934e962e03d4c2c412f46cd6ec4f98ebb13eb129ebeb41d04bc57b1d4f845c075556e1ad953c84dc91f429c480af3641509ea1ebcf8a79eccbfad0c4df91b7469a2cbeb37bddcbdfad32db360459868fdaac9557f18fadea01ef4c941ee7c8ecfe0351a4e0090f1299abb6d590d35d26d347a2ca158457926cb17e10802199eef639c5b67be034e1b075ef036515a30428c62f7a71059de9258b63650980b3e840347bcea8dcf7cfe10a68ca273028b3fd932d9466d5478df932f30600a549947c6c4cd7ba850598c5b86298528c9fe2b025f420dbed21aa356be4b5d7afc7ced44dfe4029e1aac002632d0421b14c0a91a2e5d5405e7f37a6d97dcb2f0cd63fe76f642665459440a3c452255b08ac37978d9d1580a7120f57c552047d3969c343b826e57bd656adacd61b4a64c481cb3238ef51ef8a8151ade8247cec538da7aa79268f8be88a602a5bb8ed21b09e7ae353fa0c3aa33a888faadb51724f9c4dde7f01ea9b11429d952973ceb223fc480575628214c67e080916b96db00e2cca70d69592b0aafa4d26b5b893dfcd08368f506a8fc049ed2150fef66513e23fb430d90c1a22261f08c95e3a6da871efd663da9c0d47d0d618708b8583eb96c9180922f7b0f6613a81c36220fe47b79e129e031497d8620a07d9a2298da68c3e9d0bef68a3d6390125d09f86edb0ca35905cdca9c41ee3a44b19d1f4655e82ec03baf812dbfec8293fc010d687cfcf98463c26cc8880ed2ef58ea1d2532a426af7af55587ef829c377ca5df5f5a3041dcb0915a57a067728c32ceaa9307373b4a9f8ad298a061e8d137e40c34fdc3114894cbaacfb28bc67a0920e0fa44b197831c97981fde1fc674c7cfc81c7a10a3a4d8b90a8ecd5dde28d621046c2520e2a519fe623f7bf98a210fd33da3a1ce7507c6811c2651d2a96c547f67a97259713a2634e04e56c8c299a542c34fabe9a711961c630fda9cf1120f815f35855705dedd9b57e7d1657e370c32760155748bd9d5fabed0d344df4a6334273a120e0a6954b63b990770c43bb7cc9a58ea34a9067643a6adaa8742226b03404906e64b276c4d7ab51a115b28656829c1c968736e996e88c79b046552372b417d62d196415b389fe870e8585f4adf13925dfc9251b1ca376346b1ad4f9e3af12cda46bd2f1190755cf5bb0372a265aeecbe1c07d454bdd826ae8855634ecfc0bf25cb371fbf9b0e01240bdfd0a65e4336badf75010be668f02a4f30bbf12cf00fe000bce7d06b27523c32c8a8e637e5bab87d4da5d8a8f38138140ea4ff822afc78daa8efaf68fa14d4da88ac120ffe49b48c312f7f55d5a3e88a615b9442f7da74a5ae7509962b0cb0feb6ca6496be3a57b52b962633c379343945fec867d94112483122e73f53e9eb72e9a1b5cebd6526e281736e5b6f37ad9642d94b9732fb970e2fec14070558c01c77deb85eba1ad015d3a165061e4f222782d2211db0587b25f9f400c8e9882daeac8198592b35f8ecc2b0218c820d6e9198d5f96d77fe0b11e66300a84474c6d6d3fa4996a9cc398d9fb2ecec2cc74b200fc51fb1bbf4d4ecdc3383d5eb8813212c51645c383dbc2f5faae22c53961006fb28bab37385dae17ee006617e4882c676bd61c08c4a4021ed6d792ab2c7c9aebefb7780daece1e3b7dd20ab3193f310f54688fbb718cf9a134dbb5a28aca0ab4481dd030a42fb4c0f4db70775a3b3bf0f392b5c6f71eb284a873e0424e86a9f178cfb6902e36b4a6a458498633f62ce6a45c1f61b7b1f874007b40355a5cc84ef3e212d683fbea82cb7b84ea9b5f0602ff82c0ed6eed53e1fc5f88716efe5b12e875017844f71d5f4a14cbcfdffa4905e8f14972f15cd070fcffebfa9bccd0cf91fb5cf934d33f35617766d25898e32dd40a293c65222b4285cb6b755ff0c09093f0d89dfa0a284b4fbf0579136d8a658652d3973755d584b75a20cad769c7883637cb5c99b1f4260aae38204d47e78663607de55c1827d4320ba4dc4b50a200614e862fd5680fd50fefdfe87b882cd215161267d88f8f9b81c8b08d1e01c4884440649badcd406a9d2d8c96b4ca8807bfae01039c512605d1b342ff7aff2f47af0661b6c4f82a8101ae25556511b2347fdc4d113bb60a8e042ee78299b53716369c7ecf29445b876ff70ae283a804520f14e2f671ccbefc79c0d8df2823061bbb44b13e95b8483b3195c2383d7de9c7b831e0e51dc049d7c1ae500362238fa9f26e6fdd8416e0e39e70f42a9853fa6beaede7324ba2fc576c472d594c32fd11c28d7d58f5d6052a03c63bc00160b83d7c18db7a4afc6862629f21ea6b35e5b887982ed81fe9b574c4c3e8b84cb1538fa2bbc97ebc287d2029237759f7376174e5fa38fcc60d368e053d90eb29b9bde2a5fab922f36e420a04ddb1ac5c2e8829231131d2b5275d52d4bf26690e5114899f8903e8776fc23b19bff3c5f7b5393b926be63a614a69150637ca2787a6669a1dcc0e265ac7160059945a52d100fda2ebf8eafbe059f187610ee201c1cbc58b7fc657ef5c22e68f62259a94ac8d5d4d6fdf458725268cb3d8ea38331a6413faad710aa85d483cf1ae12d711bfe66f62966fc20f1bd267ed300b3484fa8e0a330512d0268f7c8ae15edea54f8660a1ee4dfcc36b2d3625c7d2f031c8b95334fd93837beb4649b7018a8b37aabf5d72a0b37e912071685cb2762e6f01e5b53bcda9d10b2035ef59b273b0bd84851c80e48bfeb4fe51fb5ede9890f5d0f1db64357e0f369d1ef150bc5970b2efdbea4a51d27e98b42d1bb991ca0956c519e6930f7cf7a968288aab14acf489fed2d5da4ac06ae69d9a6c96cde951e0400dde3b9d9b10514252881e9c20aa1416772aa7c8e9a3fbe38f6a9d25f0387cd6dafed313b8fe60c38b6ff57350129b0003855309cce46205bd9c8d83bdefbb4f5f34941cfb71e3e1d84c2b5d671aeab23249abc2000f28cfa087c93ea0d3673d23711aee3fe481fec526616b1c188dce3932a540d084e1f96bea04fad869c028f78ab3b0032ff23537ec329e88abd05aecc06ff04145c111a38e84e9974cc47527a9252bd29363afe0bb3f1e61c731d125745e2d3c19af8f3616d3f82268db55d780876bd2723000a04e53ca25c5ea4202efec26c2fc672c73241b53839531b44f9428c76aaef8e3b1957e1b31ecf4c2fbff9e1ba8aacfc852ddff70d795add6af25657c068ae8a2c6178cc0f061aad7776e532197d30c1850891723dab0963dd0350c4dc3a2c6ef51d174a103a2e5d8046327f624ead016eae8c1ca32777baa52170ff292cfcdd97580d8a643b0b4b304996f2788e1ab442c426131953242725999e4c98e0e368397b68822d2fa25393e201306e729e06258b7aec37afe194f9affbe250728743d1c517a672073fe6db654d8239049b6185bc3a00b89c0deeabeffba1d614ced1f59e07f32fb6f5e835b960cbc9b95a37f8148a96f29954b2c602fa8643f0c403e0cc1f832d6c8b761b6786fd56796dd5e37c61525bb568ea39537ec80aa3ee7ad752b25a5dfbb3ff011c234db45fbce6a4c0d48f549a1edd97836cc48ecb4ca05b8ac8f7321951932f2300af07abb883a9e24f52450e5319cb3dca3d130ce712b0aa04670948c9f71281a86decb5b56f40a0b633eab5a67ffbf9872a4edcd53f8a096fd6ebebc754d802c61d05d796d67450c4dc2f723f0c2923f370b37da24fecd4ade82dca949b99c0162cd6d8af2c6ed34dc795b4ed1ff371133cc0448ec6bd14e2afed516ff1cd4ed088a0a692d32daa9d43756dcc25ea24a71d495732b8f6487210726737311346ac2bb2d8a1b8da7221e1f0563ac81f575854ba01c9368a5e2b4c587b664855e067078e92106ab2810bbd19b97f1aeec692972045acb144b69649dd18bb17a6405272dc56c4f8b3cf915bdf2a430669a37ed076fa9aaaf268b2ba9bc7b72124dd66309619b43001c8ca4b2dbfcebf0b27a9cdc63abbc2988f1ee1bea3a28348b9f0366cd98fbe54f26f4ca05c641ef0650e2f08dc33f078a8826952a9f1d63fe5db31b4ebd96a6d6a006d4036c922573e5a9685b451b337ed2cc3d23a1fb6830e560cfdf44f37588e46eb83272e719efa84e256f3479449761d6e01b4027d5625f0858b7d55ed75493185c7650c05233e4e09b5ad742a3b2b24f18e80b8fc6f71172fab541b857d2c6b9b73a68e5cdaa193451c9630db3442f44f11a2b9ceba2097b6c75807eeb1f53a52ec4a105fe841c2c77a15d5f22fda378dc449a04a702c48db9bcbb7327d8eb75ee5db0766f7a1e22897ab28ba86cbc2c112c50288bfda6f3889c12282bf8cffb543f07a7d342f63ba216a1d950c114be7b7a935ea169214f0473400af3ef9d17a97278debd6b771fada5b545711175ccd38544b753b13a2c27ec5c2e8b15d27d703618799599cba6a0cf19c34f526613286a1d9e84567ed62423e380b95774f71d23553dae44d4b7909d516ffd15ce550245d2e40f3475871980c628844ffba0813a833fe66ed503f6260acdff6d5102d719eb9e407f95b43d14c73f88af0075463bd8cd22052e1daad4da3f86a1b0489561832281ce0ce6a2dcbc29fae720a89f3feb2bd4fdd5d680b462ec503949527a44c4bddaec8da636e0cf8f39ccd2dacfb806f8a6f27398222de74bd8affaf39b61d1c1abda3dd94f13954032ca8bdb3274d9d11d0182f193a52f7ace0eac95830ba38c05dab26f24c41d4d02617de559126b414a0b9294545e3e55555c543ae83523f343c293a5e519f441826a2633be78b6ab518a9f419cd0970b5417407c39eca92bc76cfdd4083b121ae0dcf718ef24560d50fff25b39cfdf0d08ab4590e1584b89c84e473b85289936bf230a985bc887c2ea60166614ddbfceb30c7691ca2158e63d4421f052b4bdb0a49f74260543ab10122628fe0f8330fabd5a7c3d98e83641fe0866fdfdeec74fc76b0f697b08489c112a1d3256d65500c15cbe01c4e066c18e33052e8d55133941e452a6c8cb0516f1becc29000e237242ec1beac2da48cdf0b8646d4e63e53e1d9e68b22d03469f6cc40f8fa3b2204985620f7cf65d11c474277def6714241b9a22b4da5a2411a1112206291082233f4aa5d95a2af41712440f984c500fd2662e41d1429899ab936e61e51c1f98a49cad3e97385f0fa042a9f77d28ddaef9c303241295bc41937d6dbda8a0ebaa1562dcf59a73938283f777724ef6ce79dad2fda6c2ef035a3709f4406ef4e03b6e0a4835efde1ea080da74248c3e53700b4be3868ae7c8e39aee8009eac1bf6c780d030ab39c9122e12f6790fc4c21f303ea5132519961ed25e585d2bff79b4e5ec56596c012af4eec58d187b137b21dffda4fbdfc3f3c471f4d2f6337fc54982312a792e629bfb46a469587730a3ec74dab22426161259ba86bd31fd50e4228a26cdfcee7fe13b125c76d79aab16b5fdc1b30a60bafbbe289e5c249fdfda4c9007455e3752e1f1fe2ec8e9fc93d09df125c0c1c80a81330ecbd05b8a8bb7a375baa1528356da36a5a576eac3b3430b5d8d767381ac9ac39e1be432ce911cd0d29c8d1b0ba96a05fce9957202ccd6408f718c35adbf385fec4cd030a06a2550dcf302f51e1ab25274e7acc87e5530ed47cf0756f68ae56d44bd1651366280fea7c60622402c4d3720e615a7ddef3fdd28658e9fb22a3c1e730322e59eb351c01000c9597c333f1ac76ee33cd0d441f34851ee86f2e1bdb3611d6b8e7eec61472ebb2e6c64ec761942e5d91515389b01149c7b11bb9eb6c6ac57c6dbe85828e6ec20a069e80fa495cdda673391dd3fd0a786ad7ef3863065b4e37f28bab0187c0609e77eea7cf8f22a31719c7788a52b7034158a78a3efa2435d3ab5bc8ca4b2c525449270643835bfddd766925f61e5f7579487edb6370ea09c61b7d3bdfe751fe5d3977b41027befd55e5c01b5025f228c3ea858a15bbb201dfbb5e493d4f874842be9db405e89d1108dd9c5756b22773fd7101947a44d1bbbcdbb1a404ebb3712a2f0ca7c8bdf616f5c9e33c43d708ad808575b9be0567ef7c1f021dc99d1335634d836eb52544dfa8a47d4fb9aff6d4feb25787c68d28b66b2ea1c2ee808e3fcd53d84e4dbb5b1185fb4526413720bdcf3871ad17aafb82ae667c1313f5281e4cd165b84a0e4e9a2c0c690aa7769158133d5837e1e76f4262783230b8215bcfde009802e7b1f2b31fbea4c25e1e879ab05b732ee316ae70d37a50c4cc2375c9aad43fd14af2646bcb5b1e66069198d87497ab892cde2bc7d1fc4c78681fc1cc55472f7cee1496b27740c62fa63fc36c2f04442670f3b0a3bf9fe2bebf1a26677da760b4aa349d9e8f7f849b531d61e4545f3e46c735d45b16c08557d18e0dd18926a66e37e49f28296917e6d5bac48ad96349d654019eb45a21b2f40a5100d17e303f0b5a1ed300479c4ccf81d1952bf9bd2877f4b4ea12e2b2aa1fa5c67e26034f9303aceddba282f314f4d0c2fc7fb43dbc86a422072d7799616e352bb4811ff43b358189b95ddd2b446f11e57c810847f3087a323f80c986f89f27a8779dedaa008b298e5e5e7530867750eda77ab84e2fb4dd1ec2c86c07ad6ad6d00a398176a93a8f77450c0224ced974de6c3c7bc68e2b3db5b7e1d88ae1a1f47454a3df1317a5d389bbd13a0a191f7672982ca4457f92824a62cea402ebc7b7679f61e41eab14b59396c7bc87176d10771d67c025329eaecf6a7149eb474ee6806fb62d7b6581c92333b2d180e67c7631048719070109df22ee6643a7a4f6cd26b821c450175afd12fff39a1b3c031afc79c4bc04bb54c70c20b3bca5e5891f081ad7ea96712d5f91c5f2ef7f0901d2cc3a7c9804e30d477da8987e349718e0833426aec0e484439b39fdf65ad5a5453ed9340695adfa3be878357ddf480e0d241bdfce8bb5a92ebe11e72546d6b24f1e7d75504531c6195144ca8c17f274f7de2c75cd909c7d70393048c3b12deea2f78ed972f324c1e58bf9f3737e37e2cf9dfdb80ee07ed93a8c4fe4ed4294881886cd67e0374af98d42cb1e496d3bd241d242762c3c47674475fd828d48c449e53e024fbd574c8e2b640369420c4be4908640c83cfff67c90133a35cc68514de07e58e44dd9049260f4ea04ae1df94e9b38fd59ce4983ef1e75d465a60ad64b359193e7250976884daeb6bf927dd9fc1e4063f76c1cb9658864aab033414039a681ec6e3628dc396334ecdcb375d7da8fe09dc3a23f731bf1e6a6d201961a6cd2a40e0e8af8963985e150931ea94fdff6460f586545a007180fe8bfd1c9afcae0a250149cf702a95d18d1f49acf657b78cd4580c4e348deb4f4f4c7bda10cc337f45ee1b28916419f7866a7e1251f631a5678aecdad28a54a9ee9d61fb8ee48c74b1e050001e9f80b790d186ae6e1bc318f24ba12e1c37387eca1404fd0e48bc0e84cfbc45cf12486073d6a893ab29b1aef7884c66792dc057070068e10e6c0c2fcc3bc8eca2a343248f413bfae0a45c2352237f7657fd71b1cc5240fc83c6fc13464a19f4edc06398044786891d18eb2d5f37705d11d2c1ce4767346aaeaea733ca8241c9eba6834f2d6f49b7a9027b916371aea9caaa65c97e6bd5d9af14e0b9367b7cba449523edf4ce979a68de8938bc6d25ea152944b84d5ebaf5aad69dc700bcb5c219a671439c2a565b753cfd2fa7a3aab0e25623a230bc074a4d03847b34add85a8f08f5b5c8d72fb54b9ec476b1b0ca1960e5addd8755c02b7ca65a1f38b7e437ba7638dc2d366b667c6fc6de32aed91b6ab17b71d61325f409830daae04740044a7dcc5cbb62d574244dc6aed5d198b61d9615eb64f011bb7285592a8c9eb77ea287767ff63e484c5f3b55dc0b5d19d0ca364c0812ce255543622cb909c036f425e0c1ae63b0f914a9a7d4104aa91dee6b6217b3702d1c02cdbb7ccb524b0cf525f4890204db880928e7b70b404e423131b4a7b6f28a35decc871a612fb84f3ef2e0b9a479b94da56e98d8609ed35014e9367c81245f2f450f1c3792772ecdbd52a9f42024368688857cba93f6777e7158722ccbee9f6e6a5f0fa50bf68b0628747889627ffbe354b7e6018e477ed1df9c4e276012e8e0916c18c90557aa50438cf933c2e6c93065197c1acb04cf1c4e483c0727682a52f6631a69ebdf7c7e5936009308811fb02c5bb11fe202fc95748225cd1b99373ce64057cd1c8ce0fa3a2a279d9c45e31273b1a43ab0b5697989f8f721650d6839c730eba017cc5b6d38605afdece9a97c8361168b1ef4baee433b6e5f9bb278ae076d55b668dff6feecf0b3c28b9a18c0b73c8f5a64539ea17622e65b80126dcc966535178337092af4e474d937082e85167328ba6c84af3ea73c74a27606caa5c17c6abc1eaaa8c84dd54cde80c8aad84c5dea4986d9e78bdf8024684b8758a125272cb0752638416a17dbc15a2b3857076ccaa1087d9524d0d2da41f7ce45d5927998af37f9c4291664b02c2c3eba83496ff55185628d94757cc1b1811191beeb3bb7331b77ba8125e4c97f9351be75d823604a018f7a2d50af59b2c3b4985a0d2fd03c448feb47248d87eb85e2c8fc888504de8ecd56fa6b1fd7f514e2161e9f2a1bb3737899a1240031d34eab78dea63707b9e2b6a566c7e9ebccc3f00f9d76167ec16b5634bf38c0f7bb1afe97fcc24533f48c3a78bd0c73069f378bbbd4334c85b9d6f30b1d53fda95651ce5aaa2bc1cb1112e050d9f53b208cfbf53d73d8789fd1b42cbb936487fe1316370fdf5f79507af6c7c88733affd005ebde4ada5f7cab5abc1d6eca1c409266d271f51da0cee37f0b36879732ecf92b3e46107139e773bc0c0ccd417c18c8ebbb11bfb342b42093e1b59d9125cd141407b6dff82659797c8a4203ae72f70f1d5c7981a4457e65b3982f63be99811856e32b028d4e7d86c309c95a2a1d938cc22cfa7ed11e3315e83c351bad372a4f80e7ed35a58a15e1a26291d9a8764539aebee227b380b34d6b83284e7e95017593b78fe6f41c0a0e3995f24feacc87cf44dd3b02be9372660c467fbb9415e8e1354523b8e3d2a1240816d34b2e7341092e51a9e2f95d777466f407c95064b2f0e63c9f821eb0771d2dd6e4d894a50291d66a561c0e4ef03aed66f1afecec2e799d58ed5074ca52fb95afdb6a577e772889a777e9bea25423f093a735d0f882f9948cae3a5c70f14617f09ee5d5df7f7f69ae269777a3c48e3b0600f74109c6402857666ed779ed750a3e6d3a7be5f2b5219fb53aa5d7cbf1e61b0300fcb1b87bc893e78cd3171085b7171c45053c5596bb09689c785af88d0e9d5c166858c1b308a68953a66aa92795847ec781f939ed126b8f22cca4df2d38cb3bd93175915d4ac7dad0db6ef4e404e72c3aacca2cfbabaf9eed692a20ab273137c85ae067b40a8e63dcd5bc9637ae0afaf1036c93a13f62d4ec41341f8910dd867afd2bf392584fb393d49a19afabf08e190a5482e7da9dc98ae58e2c1549972d51563361ced1d7642e7d763b07f051b2e43bfc68e02887d7ba75c70a9bbf3d3bac3288e86aa04464bb1d86fdf29321457c75aa8ee7157a3750f6782103741cfe3e3888e84f3fbc86641f01a1dfd007c0363fc0eaf7a398555b666c819de187c6e0747ab5f8a1ffea8f9a228225ae0489cd1c3d431f4d3988042ca1fa9091ee9eb477f13681d5011adad560cdb59a1b6b9e928020ad6f19663d965a8a3d084b210fec4f0e4ef5c84b8848251e5cb87bceea4b2884afbac4487e1659d4a77d334bebd42de382ded6b12b3be6b1e4b4f18c62e5ed6c29e0050d34fb08d27e73e425a8282ebb13882c987a765715c2eba2b72ef04264a1513a77661387e78532d33e0caf0bc9159e6a84bea6ef9d65aa3ce7181dde02a6ac0dd922c1f0dc474d700d46fa24dd9e254c3fbb8d16ec12b293886a1f739216bc4a265d1995fb64e69aea", 0x2000, &(0x7f0000005340)={&(0x7f0000004280)={0x50, 0x0, 0x10001, {0x7, 0x2b, 0x92e, 0x400000, 0x7, 0x100, 0x8001, 0x6, 0x0, 0x0, 0x10, 0x9}}, &(0x7f0000004300)={0x18, 0x0, 0x2, {0x4}}, &(0x7f0000004340)={0x18, 0x0, 0x1, {0x6}}, &(0x7f0000004380)={0x18, 0xffffffffffffffda, 0x0, {0x8000000}}, &(0x7f00000043c0)={0x18, 0x0, 0x3, {0x2}}, &(0x7f0000004480)={0x28, 0x0, 0x1, {{0xb3, 0x401, 0x1, r5}}}, &(0x7f00000044c0)={0x60, 0xfffffffffffffffe, 0xf26, {{0x2ea, 0xfffffffffffffffa, 0x681bfd54, 0x7ff, 0x5, 0x9, 0xfffff4ac, 0x2}}}, &(0x7f0000004540)={0x18, 0x0, 0x10, {0x1}}, &(0x7f0000004580)={0x15, 0x0, 0x6, {'-!)&\x00'}}, &(0x7f00000045c0)={0x20, 0xffffffffffffffda, 0x2, {0x0, 0x12}}, &(0x7f0000004600)={0x78, 0x0, 0x8, {0xff, 0x5, 0x0, {0x6, 0x6, 0x5, 0x4, 0x0, 0x5, 0x0, 0x9, 0x274b, 0xa000, 0x0, r1, r2, 0x6, 0x1000}}}, &(0x7f0000004680)={0x90, 0x0, 0xeb4, {0x0, 0x2, 0x9, 0x1, 0x4, 0x5, {0x3, 0x8000000000000000, 0x8, 0x101, 0x5, 0x400, 0xfff, 0x2, 0x5, 0xa000, 0x9, r1, r6, 0x1b68, 0xfffffffa}}}, &(0x7f0000004740)={0xd8, 0x0, 0xfffffffffffffffc, [{0x0, 0xaff3, 0xa, 0x96c5, '/dev/ptp0\x00'}, {0x4, 0x100000001, 0xb, 0x17dc2903, './binderfs\x00'}, {0x3, 0x0, 0xb, 0xd, './binderfs\x00'}, {0x6, 0xffffffffffffffff, 0xb, 0x40, './binderfs\x00'}, {0x0, 0x3, 0xa, 0x99, '/dev/ptp0\x00'}]}, &(0x7f0000004a80)={0x670, 0xffffffffffffffda, 0x400000000, [{{0x0, 0x2, 0xffffffffffff34ec, 0x2, 0x5, 0xc, {0x5, 0x5, 0x8, 0x9, 0x7, 0x8001, 0x80000001, 0x7, 0xb, 0xc000, 0x4, r1, r2, 0x9, 0xff}}, {0x5, 0xfffffffffffffff3, 0x0, 0xffff0000}}, {{0x2, 0x1, 0xbd, 0xffffffffffffffff, 0xfffffffb, 0x7, {0x6, 0x997, 0x6, 0x8b46, 0x1, 0x5, 0x8, 0x0, 0x4, 0x8000, 0x9b7, r1, r2, 0x7, 0x2}}, {0x5, 0x0, 0xa, 0x7, '/dev/ptp0\x00'}}, {{0x1, 0x0, 0x3b, 0x6, 0x6, 0x1, {0x4, 0x800000, 0x3, 0xd, 0x0, 0x0, 0x693, 0x1, 0x9, 0xc000, 0x0, r1, r2, 0x0, 0x3}}, {0x0, 0x4, 0xb, 0x6, './binderfs\x00'}}, {{0x5, 0x2, 0x9, 0x6, 0x1000, 0x2, {0x3, 0x9, 0x1, 0x545a, 0x2d5, 0xa00, 0x5, 0xfffffff8, 0x1, 0x65f800718053f2ce, 0x2, r7, r2, 0x6}}, {0x3, 0x7, 0xb, 0x0, './binderfs\x00'}}, {{0x1, 0x2, 0x4, 0x87b, 0x6, 0x2, {0x2, 0xffffffff00000000, 0x3e2, 0x9e3, 0x255c, 0x100000000, 0x9, 0x3, 0x2, 0x8000, 0x1, r1, r2, 0x8a, 0x1}}, {0x1, 0x4, 0xb, 0x49c6, './binderfs\x00'}}, {{0x2, 0x3, 0xfffffffffffffff7, 0xa, 0x7fff, 0x2, {0x6, 0x7fffffff, 0xca5, 0x7, 0xd3a, 0x7, 0x7553, 0x7fff, 0x10001, 0x2000, 0x7, r8, r9, 0x4, 0x200}}, {0x4, 0xfffffffffffffffe, 0xb, 0x4, './binderfs\x00'}}, {{0x1, 0x0, 0x3ff, 0x7fffffffffffffff, 0x4, 0x8, {0x1, 0x1, 0x80000000, 0x311, 0x96, 0x8000000000000000, 0x1, 0xf, 0x6, 0xab2cbd1be12dc6c9, 0x0, r1, r2, 0x4, 0x57b}}, {0x3, 0x0, 0x0, 0x7}}, {{0x0, 0x3, 0x0, 0x7, 0x81, 0x2, {0x5, 0xfffffffffffffff1, 0x7, 0x3, 0x4, 0x0, 0x6, 0x5, 0x6, 0x6000, 0x3, r1, r10, 0x1000, 0x8}}, {0x0, 0x1, 0xa, 0x800, '/dev/ptp0\x00'}}, {{0x4, 0x3, 0xf, 0x8, 0x4, 0x4, {0x6, 0x1, 0x6, 0x6, 0x0, 0xb, 0x4, 0x1, 0x1, 0x1000, 0x6, r1, r2, 0x99b8, 0x5}}, {0x4, 0x7f, 0xa, 0x0, '/dev/ptp0\x00'}}, {{0x4, 0x0, 0x7fff, 0x5, 0x2, 0xc, {0x4, 0x700000000000, 0x448, 0xfffffffffffffffd, 0x4, 0x6f9c5a03, 0x84, 0x0, 0x8, 0x8000, 0x3, r11, r2, 0xe4a, 0x2}}, {0x4, 0x7, 0x0, 0x7}}]}, &(0x7f0000005100)={0xa0, 0x0, 0x80, {{0x5, 0x1, 0x5, 0x100, 0x3, 0x2, {0x6, 0x81, 0x6, 0x8, 0x7, 0xffffffff7fffffff, 0x5, 0x2, 0x4, 0x4000, 0x2, r1, r2, 0x9, 0x80000000}}, {0x0, 0x18}}}, &(0x7f00000051c0)={0x20, 0xfffffffffffffffe, 0xff, {0x6, 0x4, 0x7fffffff, 0x5}}, &(0x7f0000005200)={0x130, 0x0, 0xfffffffffffffff9, {0x3, 0x3, 0x0, '\x00', {0x10000, 0x6, 0x7, 0x7, r12, r2, 0x1000, '\x00', 0xfff, 0x2, 0x8, 0x400, {0xa4c, 0x200}, {0x8000000000000001, 0x1}, {0x80000001, 0x10}, {0x6, 0x4}, 0x0, 0x4027, 0x2, 0x80000000}}}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r1, &(0x7f0000000000)={0xfffffffffffffffa, 0xfffffffffffffff9, 0x1, 0x3}) 5m49.385975285s ago: executing program 36 (id=1167): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc010000190001000000000000000000fe8000000000000000000000000000bbfc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000001100000000000000000000000000000000000000000000000100000000000000040105007f000001000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000000000000000000000000000000000040000000fc000000000000000000000000000000000000003300000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000002b00000000000000ac1414aa0000000000002937ebad9c06f7b10752d3"], 0x1bc}}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendto$inet(r2, &(0x7f0000000140)="84f8928f8abe492693ad2746e01f4f4dc465a23a", 0x14, 0xc000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5m41.403193229s ago: executing program 37 (id=1063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20008c0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c636163b975de023e05e43268653d667363616368652c6b"]) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x28e3c2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) (async) write$tun(r5, &(0x7f0000000340)=ANY=[], 0xe6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12, 0x0, 0xd, "fbdbf978598438d92f3db62d5d"}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) getgroups(0x7, &(0x7f0000000280)=[0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@loopback, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) (async) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x800, 0x2, &(0x7f0000000540)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2044084, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}], [{@flag='nolazytime'}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) 4m34.626817199s ago: executing program 38 (id=2835): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/33, 0x21}, 0x8}], 0x1, 0x832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009a, 0x0, 0x6}]}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 4m32.675030486s ago: executing program 39 (id=2887): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) recvfrom(r2, &(0x7f0000000040)=""/29, 0xfffffffffffffd43, 0x10002, 0x0, 0xdb) timer_create(0x3, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x814) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20040000) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (async) ioctl$TUNGETIFF(r6, 0x800454d2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) (async) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f0000000080)='macsec0\x00') 1m58.845760375s ago: executing program 40 (id=4965): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1ef841, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = socket$inet6(0xa, 0x800, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x6a857b5d, @mcast2, 0x1200000}, 0x1c) (async) sync() (async) sync() sync() sync() (async) sync() (async) sync() (async) sync() sync() sync() sync() (async) sync() (async) sync() sync() (async) sync() sync() (async) sync() (async) sync() (async) sync() (async) sync() (async) sync() sync() sync() (async) sync() sync() 1m57.378432593s ago: executing program 7 (id=5228): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x20, 0x1, 0x3, 0xfffff010}, {0x48, 0x40}, {0x16, 0x7, 0x2, 0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)="301487d5", 0x4}], 0x1}}], 0x1, 0x20044888) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000080)={0x9, r0, 'id0\x00'}) 1m57.370402003s ago: executing program 7 (id=5229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "237b61d575a0802ad4be1c8e369df41d90bd42a3df371fa430a6b4f71e65b13b30f8ddcaf2420eb1fb875c3d75c91d9886e2080f1d4b9bc3385a37f7db5534ed", 0x34}, 0x48, 0xfffffffffffffffb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x3, r4, 0x30}, 0x49) socket(0x26, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a00)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x206, 0x3601) r8 = socket(0x8000000010, 0x2, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000040)={'gretap0\x00', 0x1800}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) keyctl$invalidate(0x15, r3) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) r12 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r12) ptrace$getregset(0x4204, r12, 0x204, &(0x7f0000000040)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, r11, 0x45809000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.281628925s ago: executing program 7 (id=5233): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000300)={&(0x7f0000000100)={0x24, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x0, 0x3, 0x1, 0x0, 0x1}]}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.175527377s ago: executing program 7 (id=5235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000140)='\'\x00', 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000180)={r3, 0x1, 0xfffff000}) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r5, 0x4004ae8b, &(0x7f00000001c0)={0xd, "05a81510d3b3f4a4bef879fb89"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 1m57.096150619s ago: executing program 7 (id=5237): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 1m57.094819859s ago: executing program 7 (id=5238): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f0000000ec0), 0x80, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001640)}, 0x7}, {{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/27, 0x1b}], 0x1, &(0x7f0000001840)=""/187, 0xbb}, 0x7}], 0x4, 0x161, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0xdddd0000, 0x60, &(0x7f00000001c0)=""/96}]}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100), 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000)) r4 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r8, 0x8004af79, &(0x7f0000000380)) 1m45.444790943s ago: executing program 41 (id=5414): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x8, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000002840)=0xabb2) prctl$PR_SET_THP_DISABLE(0x41, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x14, r5, 0x132c5eba3bb8d9cf, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44080) prctl$PR_SET_THP_DISABLE(0x42, 0x0) ioctl$USBDEVFS_RESET(r0, 0x5514) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)={[], [{@seclabel}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x32, 0x32, 0x35, 0x38, 0x63, 0x34, 0x36], 0x2d, [0x63, 0x66, 0x35, 0x61], 0x2d, [0x38, 0x32, 0x34, 0x39], 0x2d, [0x36, 0x66, 0x30, 0x31], 0x2d, [0x30, 0x64, 0x63, 0x64, 0x66, 0x32, 0x66, 0x61]}}}]}) 1m41.720128924s ago: executing program 42 (id=5238): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x5}, {{&(0x7f0000000ec0), 0x80, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001640)}, 0x7}, {{&(0x7f0000001740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001800)=[{&(0x7f00000017c0)=""/27, 0x1b}], 0x1, &(0x7f0000001840)=""/187, 0xbb}, 0x7}], 0x4, 0x161, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0xdddd0000, 0x60, &(0x7f00000001c0)=""/96}]}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000100), 0x4) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000000)) r4 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r8, 0x8004af79, &(0x7f0000000380)) 1m35.911445876s ago: executing program 6 (id=5510): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000005c0)={0x1f, 0x1, 0x5}, 0x6) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m35.845531617s ago: executing program 6 (id=5512): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0) close_range(r1, r2, 0x0) 1m35.69879301s ago: executing program 6 (id=5514): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r2, &(0x7f0000000380)=""/4091, 0xff3a) (async) getdents64(r2, &(0x7f0000000380)=""/4091, 0xff3a) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x280000, 0x0) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x280000, 0x0) 1m35.507922624s ago: executing program 6 (id=5516): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da2000) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000800"], 0x130}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x3}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xfffffffd}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x3c}, 0x3, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x4, 0x2}]}]}, 0x17c}}, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m35.119873941s ago: executing program 6 (id=5519): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') write$cgroup_pid(r0, 0x0, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/143, 0x8f}, {0x0}, {0x0}], 0x6}, 0xe}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000, 0x0) syz_clone(0x1090800, &(0x7f0000000040)="6c9f9b0db9f33fca670d256ef0142ffcb6651e1ee4c9218e58126934e15b9c89a57ab1", 0x23, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x10000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f00000002c0)=0x8004004c, 0x4) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000080)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbfa, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 1m34.738720179s ago: executing program 6 (id=5521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) fchmod(r1, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) readv(r2, &(0x7f0000004b00)=[{&(0x7f0000003a00)=""/101, 0x65}, {&(0x7f0000003a80)=""/115, 0x73}], 0x2) sendto$inet6(r1, &(0x7f0000000240)="c62e04000000ffffff18a1a720000a22ce", 0x11, 0x8040, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.617665501s ago: executing program 43 (id=5521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) fchmod(r1, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000039c0), 0x0, 0x0) readv(r2, &(0x7f0000004b00)=[{&(0x7f0000003a00)=""/101, 0x65}, {&(0x7f0000003a80)=""/115, 0x73}], 0x2) sendto$inet6(r1, &(0x7f0000000240)="c62e04000000ffffff18a1a720000a22ce", 0x11, 0x8040, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m34.304739727s ago: executing program 2 (id=5524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r4, 0x29, 0x4d, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000040)=0x100, 0x4) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) (async) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x58a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0xc, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb"}) 1m34.200403319s ago: executing program 2 (id=5525): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000021c0), 0x40843, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f00000001c0)=[@exit_looper, @increfs_done={0x40106308, 0x1}, @release={0x40046306, 0x2}, @free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x1}, @enter_looper, @acquire={0x40046305, 0x3}], 0x28, 0x0, &(0x7f0000000240)="7b54f01c7e900470ca4b0bb7cc0470bd18447205b99074442f3a70d2d1046169991ca081fd0f6ad8"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100400, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@weak_binder={0x77622a85, 0x200a, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8800) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 1m34.048098082s ago: executing program 2 (id=5526): prctl$PR_GET_FP_MODE(0x2e) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f0000000080)) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYRES8=r0], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) prctl$PR_GET_FP_MODE(0x2e) 1m33.785611067s ago: executing program 2 (id=5529): setrlimit(0x7, &(0x7f0000000000)={0x4, 0xfffffffffffffffd}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') io_setup(0x1, &(0x7f00000004c0)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000140)='i', 0x1, 0xfffffffe}]) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x2080, 0x0) getdents(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x4040800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = epoll_create1(0x0) epoll_pwait2(r6, &(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100), 0x0, 0x0) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000300)={{0x0, 0xffffffffffff3a45, 0xd0, 0x2, 0x4, 0x18c1abd8, 0x9, 0xf154, 0x5, 0x9, 0x9, 0x10000, 0x17d32e4d, 0x3, 0x4}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{r8, 0x3, 0x8000000000000001, 0x7, 0x5, 0x5, 0x1, 0x437, 0x101, 0xc, 0x7, 0x8, 0x7, 0xdc, 0x7}, 0x8, [0x0]}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$cont(0x19, r10, 0xffffffffffffff7f, 0x6) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m32.783035786s ago: executing program 2 (id=5535): syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726c6f675f77616b6575705f636e743d3030303052cb7a2fea787f303030303030303030303030303030302c726c6f675f70616765733d30303030303030303030303030303030303030352c00a2dab4c14e4cc79ba9eabd0f9c149e24c3fcc17b02d4a8a7d3dff6df1af19e6a4abbe6ada78d8ad5974dfff6f02b7dee7f47c3bd3a4bf9dd3f0319f4488d54a5d5bb6e21a8b0237ba1d110e93b08a05d20a28a89a35bfe0d42492c08c5e4e8f064483a0118eacb2f2e161b90ae0129e8170a5fee2e97726155ccfd5627fa169ed37f5f0c2e4c2c"]) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd1, 0x0, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x1, 0x3032, 0xffffffffffffffff, 0x1263b000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 1m32.61126094s ago: executing program 2 (id=5538): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) (async) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39}, &(0x7f0000000080)=0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="ac141400000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000600)={0x80000004}) (async) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) syslog(0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r9, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r10, 0x10e, 0x3, 0x0, &(0x7f0000000080)) (async) fcntl$addseals(r9, 0x409, 0xc) (async) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000100)={{r7, r8+10000000}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x200000000, 0x4, 0x2ae8, 0x0, 0x3b9ac9ff, 0x3, 0xffffffffffffffff, 0x4000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x9) 1m32.55312399s ago: executing program 44 (id=5538): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) (async) timer_create(0x2, &(0x7f0000000000)={0x0, 0x39}, &(0x7f0000000080)=0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r3, @ANYBLOB="ac141400000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000600)={0x80000004}) (async) clock_gettime(0x7, &(0x7f00000000c0)={0x0, 0x0}) syslog(0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r9, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r10 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r10, 0x10e, 0x3, 0x0, &(0x7f0000000080)) (async) fcntl$addseals(r9, 0x409, 0xc) (async) futex_waitv(&(0x7f00000006c0)=[{0x7, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x1) (async) timer_settime(r3, 0x1, &(0x7f0000000100)={{r7, r8+10000000}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000) r11 = timerfd_create(0x0, 0x0) timerfd_settime(r11, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x200000000, 0x4, 0x2ae8, 0x0, 0x3b9ac9ff, 0x3, 0xffffffffffffffff, 0x4000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x9) 1m5.968334332s ago: executing program 3 (id=5718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x0, 0x0, [0xf, 0x53, 0x7, 0x3, 0xd, 0x9, 0x1, 0x2]}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "b28e0234d78864c2", "5a2ac8646dc10ea92249096bfa531401", "41a2b948", "0c525d527e675692"}, 0x28) r6 = openat$cgroup_ro(r4, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) sendfile(r5, r6, 0x0, 0xe74e) close_range(r3, 0xffffffffffffffff, 0x0) 1m5.787908926s ago: executing program 3 (id=5719): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r1 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, 0x0}) syz_clone3(&(0x7f00000004c0)={0x100000000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x9}, &(0x7f0000000380)=""/54, 0x36, &(0x7f00000003c0)=""/154, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)={0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r7 = gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setown(r8, 0x8, r7) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)=0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000740)={0x4000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2d}, &(0x7f0000000140)=""/208, 0xd0, &(0x7f0000000240)=""/58, &(0x7f00000006c0)=[r1, r2, r3, r4, r5, r6, r7, r9], 0x8, {r10}}, 0x58) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000000c0)={0x0, 0x0}, 0x10) (async) gettid() (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) (async) syz_clone3(&(0x7f00000004c0)={0x100000000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), {0x9}, &(0x7f0000000380)=""/54, 0x36, &(0x7f00000003c0)=""/154, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)) (async) gettid() (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) fcntl$setown(r8, 0x8, r7) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) syz_clone3(&(0x7f0000000740)={0x4000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x2d}, &(0x7f0000000140)=""/208, 0xd0, &(0x7f0000000240)=""/58, &(0x7f00000006c0)=[r1, r2, r3, r4, r5, r6, r7, r9], 0x8, {r10}}, 0x58) (async) 1m5.773502096s ago: executing program 3 (id=5720): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000fde000/0x4000)=nil, 0x4000}, 0x1}) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x800000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0xffffffff80000000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd22ffff32", 0x6}], 0x1, 0x0, 0x2) 1m5.697827317s ago: executing program 3 (id=5721): pread64(0xffffffffffffffff, 0x0, 0x0, 0x911) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='logfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x11f) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1m5.619803268s ago: executing program 3 (id=5723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000363f3e320ef170070eca10102030109021b0001000080040904"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) lsm_get_self_attr(0x68, 0x0, 0x0, 0x1) (async) r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x6422, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) sendfile(0xffffffffffffffff, r0, 0x0, 0x7ffff000) 1m5.619534089s ago: executing program 3 (id=5724): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000040)="1700000021002551241c0151ff00fc0202000000db73de", 0x17) ioctl$BLKRRPART(r1, 0x125f, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000001040)=0x9b18f72) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x2, 0x7ad, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000001080)) r5 = getpid() syz_open_procfs(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) flock(0xffffffffffffffff, 0x1) r8 = open(0x0, 0x0, 0x0) flock(r8, 0x2) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x1) timer_create(0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000340)=""/144, 0x90}], 0x1, 0x1, 0xe3d0) setitimer(0x1, &(0x7f0000000100)={{}, {r3, r4/1000+60000}}, &(0x7f0000000140)) 1m5.592480069s ago: executing program 45 (id=5724): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write(r2, &(0x7f0000000040)="1700000021002551241c0151ff00fc0202000000db73de", 0x17) ioctl$BLKRRPART(r1, 0x125f, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000001040)=0x9b18f72) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_usb_connect(0x2, 0x7ad, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000001080)) r5 = getpid() syz_open_procfs(r5, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip6_mr_cache\x00') r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) flock(0xffffffffffffffff, 0x1) r8 = open(0x0, 0x0, 0x0) flock(r8, 0x2) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x1) timer_create(0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000340)=""/144, 0x90}], 0x1, 0x1, 0xe3d0) setitimer(0x1, &(0x7f0000000100)={{}, {r3, r4/1000+60000}}, &(0x7f0000000140)) 46.908974658s ago: executing program 5 (id=5924): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket(0x1, 0x5, 0x0) getsockopt(r1, 0x1, 0x29, 0x0, &(0x7f0000003300)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) listen(r4, 0xfffffbeb) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffe82, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x2, 0x0}, @ptr={0x70742a85, 0xfffffffe, &(0x7f0000000240)=""/228, 0xe4, 0x2, 0x40000000034}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/83, 0x0, 0x1, 0x37}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 46.723881032s ago: executing program 5 (id=5926): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40801, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) 46.561919275s ago: executing program 5 (id=5928): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f0000002080), 0x8, 0x4082) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r0}) r3 = syz_open_dev$loop(&(0x7f0000000480), 0x2d77, 0x2e6c00) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000000)=0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) r5 = timerfd_create(0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = epoll_create1(0x0) epoll_pwait(r6, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) set_robust_list(0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') syz_io_uring_setup(0x11d39, &(0x7f0000000300)={0x0, 0x2649, 0x10000, 0x1, 0xc1, 0x0, r7}, 0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f00000002c0)={0x0, 0x0}) syz_open_procfs(r8, &(0x7f0000000140)='net/psched\x00') r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f00000003c0), 0x6) ioctl$TIOCGPTPEER(r4, 0x5441, 0x6) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000206a052c030000000000010902240001000000030904000201030000000921270b000122060009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 45.108674753s ago: executing program 5 (id=5940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000400)={{0x1, 0x1, 0xb, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x3, 0x7, 0x7}, {0x0, 0x6000, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0x4, 0x0, 0x2, 0xf, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x10, 0xfc, 0x3, 0x7, 0x2, 0xd, 0x6, 0x5, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x30, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x9, 0x8, 0x0, 0xb, 0x5, 0x9, 0x0, 0xf8}, {0x8000000, 0x6000, 0xd, 0x5, 0x3, 0x3, 0x6, 0x9, 0x54, 0x6, 0x0, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x0, 0x0, 0xf000, 0x300, 0x1, 0xda01, 0xe6e70c00, [0x7, 0x401, 0x10000000005, 0xc5]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000003808"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000000000000010000000200000004000000920e0000000000de0700008016"]) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x2}, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'pimreg1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000001000000000000000f0ffffffffffffff1000"]) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x2c020000) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0, 0x0) unshare(0x22020600) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r11, &(0x7f00000005c0)={0x2020}, 0x2020) 44.75611553s ago: executing program 5 (id=5942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') (async) exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 44.697205511s ago: executing program 5 (id=5943): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x40047705, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xcf5d}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0xffffff00, 0x7, 0x4, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x100, 0x7, 0x8, 0x81, 0x40, 0x5, 'veth0_to_hsr\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x34}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @multicast2, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 44.617939662s ago: executing program 46 (id=5943): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x890d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0xa, 0x0, &(0x7f0000000140)=[@exit_looper, @increfs_done={0x40046305, 0x3}, @increfs_done={0x40106308, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd}, &(0x7f0000000100)}}, @exit_looper], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x40047705, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xcf5d}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0xffffff00, 0x7, 0x4, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x100, 0x7, 0x8, 0x81, 0x40, 0x5, 'veth0_to_hsr\x00', 'ip6tnl0\x00', {}, {0xff}, 0x0, 0x34}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @multicast2, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 15.160856479s ago: executing program 9 (id=6280): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1, 0x0, 0x325, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = epoll_create1(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) 14.909301754s ago: executing program 9 (id=6285): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="0f23d50f07f283f9c7410f068fc918017571c462a59a110f013866baa0008f4978d1812e4b00006466460f78c7f08a", 0x2f}], 0x1, 0x6c, 0x0, 0x0) (async) clock_nanosleep(0xc, 0x1, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = fsmount(r7, 0x0, 0xa) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000100)=[@timestamp, @sack_perm, @window={0x3, 0x6, 0x1}, @timestamp, @mss, @sack_perm, @window={0x3, 0x100, 0xf1}], 0x7) (async) fchdir(r8) write$cgroup_pressure(r8, &(0x7f0000000000)={'full', 0x20, 0xfffffffffffffff7, 0x20, 0xfff}, 0x2f) 14.596833149s ago: executing program 9 (id=6293): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000006000/0x4000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x2, 0x1, 0xf4, 0x80000001}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x99f}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r3 = socket(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x40) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="580300001900010000000000fbdbdf251d010900500012804c00f8801400330000000000000000000000ffff640101013100fb80b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72000000f4020680f0"], 0x358}, 0x1, 0x0, 0x0, 0x5}, 0x20008080) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="ba210066b8eaffffff66ef260f01c9660f38815526ba4200b058ee6465f3e03dfec40f780d660f09baf80c66b8acd3068766efbafc0c66ed0f35", 0x3a}], 0x1, 0x0, 0x0, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) tgkill(0x0, 0x0, 0x22) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0xf000}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd4ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25a1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6a4ee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a6fffffffffffffe3be6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938ec40762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f646ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb3f9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182099b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') close_range(r0, 0xffffffffffffffff, 0x0) 14.287922216s ago: executing program 9 (id=6298): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4000000, 0x2ffffffff}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2df3063bab2fcbe6, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x100) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000002c0)={{0xae3, 0xfffd, 0x0, 0x7}, 'syz0\x00', 0xb}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) prctl$PR_MCE_KILL_GET(0x3d) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r8, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r7, &(0x7f00000001c0)='./file1\x00', r8, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) readlinkat(r6, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)=""/58, 0x3a) ioctl$USBDEVFS_SUBMITURB(r4, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r9, &(0x7f00000005c0)={0x2020}, 0x2020) 14.265958596s ago: executing program 9 (id=6299): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0xc011, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000001c0)={0x0, 0x1, 0x6, 0x81}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) rt_sigprocmask(0x3, &(0x7f0000000300)={[0x5]}, &(0x7f0000000340), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x2b, 0x4, 0x70bd27, 0x25dfdbfd, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x621424b2e484f412) sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a787ffffffff0000000007000000180001801400020069703667726574617030"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 14.187916578s ago: executing program 9 (id=6300): syz_usb_connect$cdc_ncm(0x1, 0x194, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x182, 0x2, 0x1, 0x73, 0xa8, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "2583c34f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x5, 0x29}, {0x6, 0x24, 0x1a, 0x30c, 0x2}, [@country_functional={0xa, 0x24, 0x7, 0xf4, 0x8, [0x9, 0x19]}, @dmm={0x7, 0x24, 0x14, 0x2}, @mdlm_detail={0xe2, 0x24, 0x13, 0x8, "fe042f40a53756c10ffa355d65105e305c5cda2cd229f5b4fb49c26fda1fb70cb582b0b86ab853f72b52eaedd676f4ca9dde98a9a79b963cc3e88834dcba5062897d1f512149c64613cf1d3b5d94a29c5047ac4848caddf16e2ec25600b030c687f1ed55f17f06af5975d5eec7865709bfec57eb044e4a32ecfb48669395eaf14113276c6c8fd3faecf2997ebde5bd94eae16a179550462a8dcd8d42062ac01d505680d1a38612b7386ab85b3b257dea54c030054c872772f3d903237762b940b64c7fb3b4872bbc421b56451f9617f49d3ae2d38a3d4739da29a62ebeb9"}, @country_functional={0xa, 0x24, 0x7, 0xa8, 0x9, [0x5, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x3, 0x8, [0x1000, 0x8001, 0x3, 0x0, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0xfe, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0xd, 0x18}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x5, 0xfa, 0x10, 0xf9}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x8, 0xd0ad}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x21, &(0x7f0000000140)=@string={0x21, 0x3, "e3654936eb70e0251eb48c728c06c39d869e76cb0cda0fbe9ba350a77c93a1"}}, {0xf1, &(0x7f0000000680)=@string={0xf1, 0x3, "6c8474a10b220fd248ffaa725f7040aeed1ab69344ffc6ac1d358bcdba3b426898e9d8eff215a5ca8cd9e99e6315f69bd46b7d4a206812a9cf6ccd2657db5547907fdc10ebfefc2caacc92cf62ed54d6ab1e2d3e3172fd81c4567ff53073e23dcee208e2bb5699a701616a5474f2000ec973f9e6e665b9b7ed0ef04f9790c9913eac27efe93c39a3478f6a202d0c9aa4ea2d5f7f9b255668095df3c97d86291fda9a7e5bba1e10733e30c00b0626893d482af9ac5b9a733149e79664d2d0df9bae4d27545277d144fdbe1da71cf232e1b9d0dc992154837839897f1facc481e8042d8cb9203c711e65a518e5313856"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x9, &(0x7f0000000200)=@string={0x9, 0x3, "153fc60b070136"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x801}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socket$can_bcm(0x1d, 0x2, 0x2) (async) read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) socket$igmp6(0xa, 0x3, 0x2) 14.152207828s ago: executing program 47 (id=6300): syz_usb_connect$cdc_ncm(0x1, 0x194, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x182, 0x2, 0x1, 0x73, 0xa8, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "2583c34f"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x5, 0x29}, {0x6, 0x24, 0x1a, 0x30c, 0x2}, [@country_functional={0xa, 0x24, 0x7, 0xf4, 0x8, [0x9, 0x19]}, @dmm={0x7, 0x24, 0x14, 0x2}, @mdlm_detail={0xe2, 0x24, 0x13, 0x8, "fe042f40a53756c10ffa355d65105e305c5cda2cd229f5b4fb49c26fda1fb70cb582b0b86ab853f72b52eaedd676f4ca9dde98a9a79b963cc3e88834dcba5062897d1f512149c64613cf1d3b5d94a29c5047ac4848caddf16e2ec25600b030c687f1ed55f17f06af5975d5eec7865709bfec57eb044e4a32ecfb48669395eaf14113276c6c8fd3faecf2997ebde5bd94eae16a179550462a8dcd8d42062ac01d505680d1a38612b7386ab85b3b257dea54c030054c872772f3d903237762b940b64c7fb3b4872bbc421b56451f9617f49d3ae2d38a3d4739da29a62ebeb9"}, @country_functional={0xa, 0x24, 0x7, 0xa8, 0x9, [0x5, 0x8]}, @mdlm={0x15, 0x24, 0x12, 0x7}, @country_functional={0x10, 0x24, 0x7, 0x3, 0x8, [0x1000, 0x8001, 0x3, 0x0, 0x0]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0xfe, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x2, 0x4, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0xd, 0x18}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x0, 0x5, 0xfa, 0x10, 0xf9}, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x16, 0xc, 0x8, 0xd0ad}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x21, &(0x7f0000000140)=@string={0x21, 0x3, "e3654936eb70e0251eb48c728c06c39d869e76cb0cda0fbe9ba350a77c93a1"}}, {0xf1, &(0x7f0000000680)=@string={0xf1, 0x3, "6c8474a10b220fd248ffaa725f7040aeed1ab69344ffc6ac1d358bcdba3b426898e9d8eff215a5ca8cd9e99e6315f69bd46b7d4a206812a9cf6ccd2657db5547907fdc10ebfefc2caacc92cf62ed54d6ab1e2d3e3172fd81c4567ff53073e23dcee208e2bb5699a701616a5474f2000ec973f9e6e665b9b7ed0ef04f9790c9913eac27efe93c39a3478f6a202d0c9aa4ea2d5f7f9b255668095df3c97d86291fda9a7e5bba1e10733e30c00b0626893d482af9ac5b9a733149e79664d2d0df9bae4d27545277d144fdbe1da71cf232e1b9d0dc992154837839897f1facc481e8042d8cb9203c711e65a518e5313856"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}, {0x9, &(0x7f0000000200)=@string={0x9, 0x3, "153fc60b070136"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x801}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socket$can_bcm(0x1d, 0x2, 0x2) (async) read$FUSE(r1, &(0x7f0000007100)={0x2020}, 0x941f) socket$igmp6(0xa, 0x3, 0x2) 5.416174136s ago: executing program 8 (id=6438): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x200820, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 5.391901096s ago: executing program 8 (id=6440): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote, 0xfffffffe}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x40047705, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r5 = socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e000000100000000000000"], 0x88}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x4, 0x0, 0xfffff020}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b00"], 0x20}], 0x1}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004e5000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000c40)={"e54c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774ca3d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa10aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4887906737c78821371dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7692a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34cc79c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240bb700b9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883cff7f000000000000aea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc00794d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea979a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbe8a970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad583779b97034f9400"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.340387128s ago: executing program 8 (id=6441): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000000)="0f01cf0f1c40190f06baf80c66b8a9b6568d66efbafc0cecba4300b0d3ee3e0f320fec2d440f20c0663509000000440f22c0660f3a219ab3d2060f20e06635000004000f22e0", 0x46}], 0x1, 0x70, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x80001, 0x0) (rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) (async) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) writev(r2, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000500)="9092", 0x2}], 0x3) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0'}, 0xb) (async, rerun: 64) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)={0x2b4, 0x15, 0x20, 0x70bd28, 0x25dfdbfe, {0x25}, [@INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "19f763c438bc28a64bfcdc833fd046aeb460aaef103649d492"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "d9c5a15755ce8f6f050720546f434b931fa2b71dfe9c3af1334a27e344b66234daefbb1e750933b47be2ea63ab2f66dc1ee090731c57a3c09d996e30a1eaadc5bc75b2063fd98367543dbdbae3a1815ad7342eac2f0371515439b5619bdc8878c7e07b9a0ea5d025aa1004176ca58cbcd0f22d2affacec00eb90ed60158671843510388bf42ce922da4802d47d1332878afa8852d29a27"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, 'D'}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "67a7620d4809402851061b18697465d2aaf072cb9b8265ae3f092a38d7cf4ddcfdb6"}, @INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "28f8f049538a85a56359f6c55ca51d3c82aba449ef72e09b565000c1f5dac1058a7f7845a522d9b170bd7a14720f3e232d873bcc26bf14d41289635f6ef48c0bb7fd5ab6bb234a5815f0a8ca0a6850494aba39c014ed5ae186f618f9ecda1901568c2aaff288a0cc50b15ca88490c45fc4c1d11f81176022697958b3b7abee18d544e525b7511b9c360f022db902fccf1d50b2e354a81ed743330274efe72611907626e25b70449dbac415ccbd4ffdec8fce677800d2b3c6a2533165d80a1bf497a020a2803b1fe0980223c425b050bf4cdc1ff01d76b7e545c31b91d14c32177ab9aa514cbe807f71592d1a8cfb6516"}, @INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "d3cb39cbd3bc2c3854ba836662ab15b86c6b0c3e4e829f439821d327911961f5f37c81962f8c5e1f566a7ef55b18e1d82cffffb4e596c56bf28848a447d08a5365107180fc9a34904f913f8727fac5514fcf11e9c0acd841be9f3adbb84d86ef609d85e2802f7f92c77c79afef4fadb982b7dae239e92b8b73b0bf543543c8e9eb65050dda03f3816c479e950880d3e1c250329fc32c46e9b437781edbbfeb58a9716ac57e0735da566b1368e3d1860bc61c737d2536be17ca"}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4000854}, 0x8000) (async, rerun: 64) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:klogd_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5'}, 0x5f) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async, rerun: 64) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0x9aa9b000) (async) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000000)={0x6, 0x5, 0x800000000000102}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x1}) (async) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) (async, rerun: 64) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, 0x0, 0x0, r3) (async, rerun: 64) r7 = gettid() prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) (async, rerun: 64) rt_sigqueueinfo(r7, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x120, 0x0, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5420}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfdd4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xc89d}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x44000}, 0x30000) 5.23590995s ago: executing program 8 (id=6442): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000020c0)=0x8400009, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) close(r0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) clock_gettime(0x0, &(0x7f0000001940)) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x271) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000001bc0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs/custom1\x00', 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r6 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) timer_create(0x5, &(0x7f0000001b80)={0x0, 0x35, 0x4, @thr={&(0x7f0000001e40)="d62db66aaff618f951680d3795c7d2607d04f9eeb1c7a9d59fbbdabf49e4b952d20e18fef099626ed8ba192473d6763c7a4896afedc142b6d4a94ef9046033437539d9a28ed16055ad8f6a4ebb63853adafdc913874eee6d1032e5f242fe729b825078ba54e4801a866df2452a49c79923fa4674698f584e0a2b377c72034dd25476b3d32704dde1b669dd5241fddbf47fcd3f5ca5dc23a6dc10d26bce066cae17669f2d6d2ab45863382416657ce7ae0f9c58fa84ffb206011f6436e4e6fc8d1cbe7917361cefa9bcbd7896c5253968bcf8e30c", &(0x7f0000001b40)="954c95a81a7def2bcf6a1540faa03df5fbc55c99c5184de293610b3d"}}, &(0x7f0000001cc0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000001c40)=[@free_buffer={0x40086303, r6}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x3}], 0xcd, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0bd1d0f0aca6836e768112db938863e35a5767c5915f661c40aac97e6bfc18a95bd354e77c6e6026ce26185686097d8d673ecb16748efa59c6ffd00271ad3c2dbbf6b4b357f4c289f45cf2f4618afe11"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001b00)={0x8c, 0x0, &(0x7f0000002100)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001fc0)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000001d00)={0x0, 0x18, 0x30}}, 0x1000}, @decrefs={0x40046307, 0x3}, @request_death, @acquire_done, @free_buffer={0x40086303, r6}], 0x4a, 0x0, &(0x7f0000001a80)="998af3bc304f18ecd373f39569b56704d1dafffa8d86f3788f1fe4138db4e575c67bcbe747d79f64c662f5bac80efb438f3070657da952130761b092ade1b6c935e6383a6760e87e869d"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) ppoll(&(0x7f0000000100)=[{r7, 0x100}, {r4, 0x48}], 0x2, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) 5.23555398s ago: executing program 8 (id=6443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xfffffffffffffeff}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000001c0000004d564b"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 5.21346553s ago: executing program 8 (id=6444): socket$packet(0x11, 0x0, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000003c0), 0x6) setregid(0x0, 0xee00) r3 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='personality\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000100)={0xf2, 0x80}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 3.847396326s ago: executing program 0 (id=6468): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r1, &(0x7f0000002100)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x54100, 0xa) r4 = syz_open_procfs(r2, &(0x7f00000021c0)='coredump_filter\x00') r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = accept4$inet(r4, &(0x7f0000002200)={0x2, 0x0, @local}, &(0x7f0000002240)=0x10, 0x80000) r7 = syz_usb_connect$cdc_ecm(0x3, 0x80, &(0x7f0000002280)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x1, 0x1, 0x40, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x65, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "790e289798"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x0, 0xa, 0x10}, [@acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x8001, 0xea, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x4a62, 0x6, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x1000, 0x9, 0x10, 0x7, 0x6, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x70, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x87, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0x7f, 0x9}}}}}]}}]}}, &(0x7f00000027c0)={0xa, &(0x7f0000002300)={0xa, 0x6, 0x250, 0x8b, 0xe, 0x80, 0x8, 0x2}, 0xc, &(0x7f0000002340)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "f1d8ecba"}]}, 0x9, [{0x4a, &(0x7f0000002380)=@string={0x4a, 0x3, "f13d62eeffda64a10b9957e6147c715ec31bac8e07f54f0c5ae977fb4a36d3268a2cebf6d2e713cb83e08bf62bc2d08de134a8703ffbac2cc42ba6f2f60f084cc469a0f75903bc6c"}}, {0x45, &(0x7f0000002400)=@string={0x45, 0x3, "d024b619c73ae156115ad9b5f4a2ac434311af31ff85eaf5e72550e1718e3c748bb7b32628198ac8ceec9494ab80ab309c2fca7332fd17eb66e91eeead8bebd2e1e306"}}, {0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x1002}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x44e}}, {0xbb, &(0x7f0000002540)=@string={0xbb, 0x3, "2f3c2d00f6f9f89ac1dbf37b4a149be538a8cec5e66d923fe131ca6f0e1e0c1c767bb014a9562a164bdea10aed83d26554c09ade83a352fafa9d5d7946430cc6aeea0335ce8edf09474670e80b32fa4b9090634ddc3694aa9a66f7acf6de8b012a73b98c251ef4175db6351b85e2cbddddaf039f264855194cb8903b25f63ff8f14daf8da44a46dac2de61d54af5c55222d4ea318182a173f6212cd78b2f20bc1a0b4144483c8993c0ffe7f740f49d54ee6f9a273b4ef919a0"}}, {0x9c, &(0x7f0000002600)=@string={0x9c, 0x3, "ebf5d768dab36eb0d5dadc094727aacee5508c276cea2b0b248a1a4a67194229ee2093a49f333be7828a32ec7dfeb3e702c5e6380feebc5b49b9e043b73498acefea6afae09f48aa99eaed26193fda3979f00ea4be61c4247dfc2efa3ac8acf9d3b2bebda6b95c8aeae185025b221ff39ee9eeb44f34c76bf4694cebcdb3d343fdd51facff061d93aa20beeab73f6242cff54380992711db5a9a"}}, {0x5, &(0x7f00000026c0)=@string={0x5, 0x3, "38bdc7"}}, {0xab, &(0x7f0000002700)=@string={0xab, 0x3, "de2d4347e752dd4c8b44c805ff94749565f66f7cbb1162dbe69017195cb192b6079b188515b886cd4ff536dce91212669739d627c466f1de2cbefda17565219bfe90046dc0027ff52ac797799c7eaef2f8fbc9b6cb256fb23c4ae53fcf01f6fa08f20d50cb6b7764d502c702e044e4c3c32a6afb0bae02947413a1a0cc6358aa4d762137e65ba82b9bc2b368eaccc068cbda2ddd92937fb1e69eaa4106815344fcc7f92b6d70fa0bf2"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000002900)={0x14, &(0x7f0000002880)={0x20, 0x2, 0x8, {0x8, 0x4, "3459390b5988"}}, &(0x7f00000028c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002940)={0x0, 0x6, 0x63, "ba0987a02fe810b35a3b448d4d926f994477257fad9a1d0bd4f45c6d99d5f94d58acd472b914c49bd587c884a8bb9963d521761024aa0e4d999207ef04e6d413ea7fb1712c948a3e6b7f1056e446963943a298fd169b65c8b5300cad62c637f0f8ed05"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x4}}) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r8 = open(&(0x7f0000002a80)='./file0\x00', 0x141242, 0x73) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000002cc0)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002b00)={0x17c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xb05}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7c0}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000020}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000002d00)={{r6}, 0x1, 0x2, 0x1}) syz_usb_connect(0x1, 0x661, &(0x7f0000002d40)={{0x12, 0x1, 0x300, 0x55, 0x7c, 0xb1, 0x10, 0x45e, 0x413, 0x7f5c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64f, 0x4, 0x5, 0x5, 0xf0, 0x4, [{{0x9, 0x4, 0x97, 0x2, 0x4, 0x1a, 0xee, 0x6e, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x5}, [@selector_unit={0x8, 0x24, 0x5, 0x2, 0x1, "74c741"}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x3, "4084"}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x5, "b2bb0dc7"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x0, 'H'}]}], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x8, 0x10, 0x9, [@generic={0x34, 0x6, "a7e6ed786a06479cb0b7f918521fac694b0a1bad576806179a4e781d7489416c374fd0c77867c951f4f02df077b17aba21d0"}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0xc, 0x6}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xe2, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0xb, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x13, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xfff}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x3, 0x81, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}]}}, {{0x9, 0x4, 0xbc, 0x9, 0x5, 0xff, 0xff, 0x40, 0x5, [], [{{0x9, 0x5, 0xe, 0x10, 0x400, 0x9, 0x5, 0x3, [@generic={0x6a, 0xa, "9d8c26a3263a62ebd58a68645aeccb76f627c52a2d5c161b4ed97e17537108c975e19aa0be746fd81ae98aaafa83f8924cf4b312bcdf52499df565fb8863e03a3f5ff4dd8780fe6f3aa79eb81c665b300128754dd4c273d6ac89d5305afc7ad5147635642c6966ec"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x6}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x5, 0xe2, 0xf0}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0xff, 0x6, 0xb4}}, {{0x9, 0x5, 0xa, 0x1, 0x400, 0x9, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x5d}, @generic={0xb6, 0x23, "6579c36665aec801b6a35c191908cc082405950782199dfa352525651cc2a69cd12f219c2229ae637dc7c983e92b6ee61789e2da8038f528899554d5204805866ca175ab56e8093eb9fe566f25f1a85e1b7f5723ed3136a4cad1f9c3a23ce99a0a165697365ff9cca77ae28e8b30876ca2cdb2df6f6527e12040f793f0deb16481edaec4ae82a1f3a7582ffdc66e2ea63bc3999e5d4e60306d05f2e448fa98d713dd650a2d0fad5b42600e3bd468d41cf3ab0223"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x10, 0x3, [@generic={0xf0, 0x10, "4c7767fe0f5be9503379ea2052e5481cd76aa65c647925070f7837604a8cc5398972249eadf573d9bf6c61a6e7557f6e05c36af1b29d76b91238059ae93ffbfc6834ff07a8d63c67abf50c799fbb1db302842129ec75967e5f0839d2560ed745e83fe9c0af62deef59b746b6ddc36414e4823527217d7a9a1ffc4e458a0047053545bce9bcc866d4f1d9cdbe354af94e273325363696ae2fd837973cf9bd71c2e4a131e247e978fcfe63ca92dc0dcc7b4230fabe0fe662e67ada62884f8322f1790d90e3d9f74967c1f32f77ab5b3ca0a9cd626bed6cacdbd21672d24392ad0d1d96eafec6583bc3041e1b214ff7"}, @generic={0x81, 0xe, "d4fc06c0739d09715cf49af908b48a5c4b36329845c4259a5ba8ab1d8a5cae0174e08a4f02abc3a869bba256af2eafc0b1f39809bbd9e22b109c5e2b5cfa9c017a81d743b81b4e53cdfcf09ac621cbba86eb66e6d305efa18229980a10bfda91f7efe5c82a10b5bc761ef7ef3ceaede76fa783e6cddb4a6778d0364050b62a"}]}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x3, 0x88, 0xa1, 0xb4, 0x5, [@generic={0xe9, 0x1, "bfb4aa39c849bbd8a2d602c5956ff9f66ed5404ee8f3834c588a52f93d4b010759335f226cd43fab6bb5cc72575e148846a4121402f404d884cfde57ece9521c4f0ede378c60aa77630008cba0a883404a5364dc92e06b7bc6260e2a5646e5e86c0a09a28c79b59878798af7e0a766d2d0fb90b51e1dffc95326897bc9397df46e384c8b134f9bf228067af98bf172f631e32174fa8c15b10f6ea5a9994bf367b40dd8d256c4fd0365eb031794cde6430bdf534ddfbfa7219719d21e32257e40e8fe0edc01cf57ae7e6d2d8f7a7a82fbae85e2a502cfa1ff091f1bc4e22b68cfe87cf5fed94d88"}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x1}}], [{{0x9, 0x5, 0x0, 0x1, 0x8, 0x2, 0x0, 0x6, [@generic={0x5b, 0x1, "317dbbdf4aac3f2c406505700e905e02ea78a57644ffe9779c533adaaf4237685514296c1a18aa61b1165b3f23687728e7773a00a54c58f10ce5a161d90e253dc2a6676020c96e9f918150fe7f9e5e2bb91390b1fdbdbd5a2e"}, @generic={0x89, 0x24, "1be77abf6202f3df0a3064ac085c31614df988620deb624413e07cbdbb6e7c8c5c2cd602fec4604de5a26ddc3f5e15a459781cfcdb51846c62663af7a086e0745be7012b433edb99ec02645bd68f2c681b3aba3531a61b39e5f1def1706bd19bc85f6308ca78c6ac12c7c0d41f3e4daeec2c5cb82190a46c7b6b7aab255eb97ca438ccfb611506"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0x2, 0xd9}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x83, 0x8, 0x8, [@generic={0x57, 0x24, "fa8320152517bb089e9564e0978585854c0f194b3921e850af9815617dbce41cf2a5a4550c12d76ff89a483d62e55fde9988f0263fce8651af056c1a04f6fa085b36d7b18588344fa41c869c4631ba61086851d577"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x8}]}}]}}, {{0x9, 0x4, 0x3d, 0xa, 0x5, 0x63, 0xa7, 0x74, 0x1, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x0, 0x8, 0xb}}, {{0x9, 0x5, 0xd, 0xee86352b3969d23b, 0x10, 0x5b, 0x3, 0x9}}, {{0x9, 0x5, 0x2, 0x3, 0x20, 0x9, 0xa, 0x7}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0x6, 0xd, 0xc1}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x5, 0x5, 0x9, [@generic={0x3f, 0x3, "56f5751aefb2b5ca397d36b8bd4af974628c35cab2cd99150392b28c6feba03b6627718d8f19f8d84d49b24808ecb47a93eaa2129f439ef8feb69dd171"}]}}]}}]}}]}}, &(0x7f0000003600)={0xa, &(0x7f00000033c0)={0xa, 0x6, 0x200, 0x4, 0x3, 0x9, 0x20, 0x7}, 0x4c, &(0x7f0000003400)={0x5, 0xf, 0x4c, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x4c, 0xff, 0xce, 0x1ff, 0x40}, @ssp_cap={0x24, 0x10, 0xa, 0x80, 0x6, 0x4, 0xf000, 0x36a9, [0xff3f30, 0x0, 0xff3f00, 0x3f00, 0xc00f, 0xc0cf]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x1, 0x0, 0x94b, [0xc000, 0x30, 0xc0]}]}, 0x3, [{0x4, &(0x7f0000003480)=@lang_id={0x4, 0x3, 0x429ec8eabe339de6}}, {0x4, &(0x7f00000034c0)=@lang_id={0x4, 0x3, 0x405}}, {0xe9, &(0x7f0000003500)=@string={0xe9, 0x3, "d124a8d3b41ec9bd19cb4b7fe5dfdd8a80681a7dab369eafc4901fc9ae1f273976df7b91aee195263f998addd2b734fadd9dab5eacce4fd4ee2ba5becbc6c6552b06b8dd5aca7e1a829391be2bd51456f0dc97ee9900bd6c0da4b8a219cdc47ef01e6b4148472a10a2788fcded22896904c9a0556803082f672013d8c742c2020d45307fd2e3d9bd7fdedd447aa720a8eb517b0c6e51c245d9f4fd52000d588bf330fa8bec24008622cebec2f11fabe5ad4f9886ba64c7f29d6f699e924ba9f124fed61dd5d65c8ef6795a2e382c5f8902bbff7c7baf1bae8d969f02613435adee686c0c4a2f6b"}}]}) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x16) syz_usb_connect$cdc_ncm(0xaa8d0b9a801c5efb, 0x6f, &(0x7f0000003640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x6, 0x90, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "1e"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7e, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x3ef, 0x3, 0x5, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xc6, 0x2, 0x8}}}}}}}]}}, &(0x7f0000003b40)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x6, 0x3, 0x2, 0x8, 0x8}, 0xec, &(0x7f0000003700)={0x5, 0xf, 0xec, 0x1, [@generic={0xe7, 0x10, 0xb, "02b409ce93f6ec0b9473dae73dc017ba4c1b55d727af8046b040b90ea493887a9f0c352038c842243cbd579bfcdca50f2c82c8b4aa8d4340fd31827cc73c5b9d5b372161d6b8ae6d2b12ddec74b51ddbe139910e86f8ecd859ab6a6237122a228c0b5cc8948ee6d099f1c166da331f510e57f9d7848ceea9d80f127afad7e7bb0a2579ee70b56c7a86aae1988045b603ad20560f55c0443afc9e415acfa5cf811ad6cbceec4cd044eb08ca1ddf143c813f153b21606b08353865fa31f44cad76ae8e48bb8079febfd21a1dcd31e13b7266df9b793d7e14bb36ead8d486ac809552da8f1b"}]}, 0x6, [{0xf1, &(0x7f0000003800)=@string={0xf1, 0x3, "f0d2f6fe121e669a968a52aa428c8efb26eb12200219ba6ceae19c1cc95389c5f63246a1cf64e1158cd11155f9fa51c5f2acca177e9799295fcf7e47576b982c4c286066d9616e9d5f352e90543655364944c0fd63c7ddeb44b9d45673f18f96b83ce18e2ff80dc4d6b3ac80a9d26c022fb2c3d14413543b67c93ae682ee945927e61153c1b7b82b0ebefdc93cd43906fd0b9646d44d8ae7079c4d0e1fed9c1b8bdff3955871b0fe5597e319aea62e7e0a2289452bbdf691aa7fd40aeea4a20239211a1312e1a07e49a1aa4144497609ee81474d6ba991c8a8675cb45df47ab0f79071886e42a2e9548cb4a93b88b6"}}, {0x4, &(0x7f0000003900)=@lang_id={0x4, 0x3, 0x1c03}}, {0x4, &(0x7f0000003940)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000003980)=@lang_id={0x4, 0x3, 0x82c}}, {0x68, &(0x7f00000039c0)=@string={0x68, 0x3, "f91bccf04a6660b3ac0890d9dbda5811032cf4100edd7249350584a3352fe47f523812a9288998cadc09418f8c458fa1852bf5cb812113ded5c66888d7c2a60de9616dd1238dce7029ba56df2144f9caffe31bf8013f36364040e5d165d71a2315989259d851"}}, {0xc4, &(0x7f0000003a40)=@string={0xc4, 0x3, "179369aa998b3e4647ea6c73db8b902eaa128f78ba2d332e4e68cc7a9acd60c4ed4c468740ee799291a1fae83b5500cf529cb229904f1d1e1e97521c4e32b3a8d15f2b509286dab80b6a7fd8a7200cf6889f3178c0e248500d65713344359eedfd47dd2f9012dd3a3870c8b4669e7a008aa02cf44a5e36038d2bf167594479681bd7c5422124c23398011f0f7ab52638a55554ae73e153a86b376a5ab57017e3ad0ad44b328ce423970e2a7a9c34eb1dccfa3b4560473b92ef4103291fc0e494cd5e"}}]}) r9 = fsmount(r4, 0x0, 0x4) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f0000003c00)={0xa3, 0x0, &(0x7f0000003bc0)}) ioctl$KVM_GET_FPU(r5, 0x81a0ae8c, &(0x7f0000003c80)) getdents(r9, &(0x7f0000003e40), 0x0) mknodat$null(r3, &(0x7f0000003e80)='./file0/../file0\x00', 0x188d, 0x103) ioctl$PIO_CMAP(r9, 0x4b71, &(0x7f0000003ec0)={0x0, 0x0, 0xffff, 0x3, 0x6, 0x7f}) accept4$tipc(r4, 0x0, &(0x7f0000003f00), 0x800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000004100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000003f40)=""/227, 0xe3, 0x0, &(0x7f0000004040)=""/132, 0x84}, &(0x7f0000004140)=0x40) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000041c0), r9) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000004280)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x2c, r10, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000004300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x28, r10, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6, 0x4e}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x810) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000004400), 0x4) 2.300125176s ago: executing program 0 (id=6484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x240240, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2.296927856s ago: executing program 0 (id=6485): ftruncate(0xffffffffffffffff, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100000000008aba, 0x4, 0x8, 0x804, 0x7, 0x12, 0x120000, 0x2, 0x0, 0x8, 0x8000000000000001, 0x2, 0x4a, 0x80000000000101, 0x3, 0x1], 0x2000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x7, 0x7f, 0xbb, '\x00', 0xc29}) syz_usb_connect$uac1(0x6, 0xad, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x2c, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0x2}, [@selector_unit={0x7, 0x24, 0x5, 0x1, 0x4, "f92e"}, @extension_unit={0xd, 0x24, 0x8, 0x6, 0x15b, 0x5, "3c86d1d5894c"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x6, 0x6, [0xa, 0x1, 0x4, 0x6, 0x4, 0x7], 0xfd}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x8}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0x8], 0xf8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x53, 0x43, {0x7, 0x25, 0x1, 0x0, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0x84, 0x1, 0x7}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x1, 0x9, 0x5, 0x8, 0x8, 0x6}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x813}}, {0x7c, &(0x7f00000004c0)=@string={0x7c, 0x3, "dcb2fc0a8e3845afb4bc810774d247afecd0a15d43b10191e6655f53cec9f0a5be3c6fe52df9cd91f6683c353fc27e2b1f227dfc8cbf012a08cc5778b42394f8eca51eb1e73c6266b6f0d5c6ad9722abd6b000ee26b92f3e0de0105176cbac07271bc96ec61a88424af26c46f6db68260ef91edc73935227c8ec"}}, {0x5d, &(0x7f0000000540)=@string={0x5d, 0x3, "5aef69197ce8442c511a9cdf282b5bb7d128acfc57fc523657060110fe92a7286b517aba31bbd405a7fa64eba7d956d566eb6324d7fc4f6deb4cbc8a6ad428d5e231a9038c8a20f2f6d19c2c39be56bbf5dc945c7ec8f243c2cfee"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x25, &(0x7f0000000380)=@string={0x25, 0x3, "a39333d51ba9c7f0ce81a335177b85f83408488b1f34d4d26c420d8205b3a35666ac02"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x449}}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000), 0xe) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20004005) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdb000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000730000400000000081"]) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) 1.956043813s ago: executing program 4 (id=6488): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) (async, rerun: 64) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4200}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) (rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 1.901669754s ago: executing program 4 (id=6489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, 0x0, 0xee00}, {@in6=@private2, 0x1000000, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x10000, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40001, 0x158a, 0xae8}, 0x70bd2c, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='cpuset\x00', 0x1000014, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in=@private=0xa010101, @in=@broadcast, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000300)) getpid() mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x8d4f1000) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000004c0)={0x0, "ee9c2a0309c64d1a8241e968d5a63d81"}) r8 = socket$inet6(0xa, 0x3, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='^\t*([%\x8e\x00', &(0x7f0000000200)='@!\x00', 0x0) sendmmsg(r8, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100", @ANYRES64=r8], 0x108}}], 0x2, 0xc040) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000014c0)={r7, 0x1000, 0x2}) getsockopt(r6, 0xff, 0x1, 0x0, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1.845371365s ago: executing program 4 (id=6490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a8507ee46579a7506ad6233a6d43468a7f34269bacb0706a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ad0e8925d5eae5a768ab03e12a1469be0ad9c947798de"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5ad7096504b96d1756708d66a566f8483b2c6fc2798c1784"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xdc}, 0x1, 0x0, 0x0, 0x8084}, 0x24000000) (async) read$FUSE(r1, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f00000023c0)={0x18, 0x0, r4, {0x1}}, 0x18) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002500)={&(0x7f0000002400), 0xc, &(0x7f00000024c0)={&(0x7f0000002440)={0x7c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x182, 0x55}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) utimensat(r1, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580)={{}, {0x0, 0xea60}}, 0x0) statx(r1, &(0x7f00000025c0)='./file0\x00', 0x100, 0x10, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002700)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0xda17, 0x401, 0x500b, 0x5, {0x1, 0x413, 0xffffffffffff0000, 0x8dd, 0x6, 0x6, 0x1000, 0x1, 0x401, 0x1000, 0xa1b, r7, r5, 0x1e, 0x2677af68}}, {0x6, 0xffffffffffffffff, 0x0, 0x1}}]}, 0xa8) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r1, 0x54a6) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x36) (async) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000027c0)=r6) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000002c00)={0x10003, 0x0, 0x300, &(0x7f0000002800)=[0x7fffffff, 0xb, 0xff, 0xc, 0x100, 0x59b4, 0x4, 0x80000000, 0x6, 0xfff, 0x2800000000000, 0x0, 0x6, 0x8, 0x9, 0x4, 0x9, 0x6, 0x3, 0x3aa, 0x9, 0x7fffffffffffffff, 0x7, 0x72f, 0x6, 0xcf, 0x6, 0x80000001, 0x8, 0x3b0a, 0x10, 0x3, 0x8, 0x9, 0x7, 0x0, 0x8000, 0xffffffffffff7fff, 0x8000000000000001, 0x38ee, 0x7c, 0x1ff, 0x4, 0x5, 0x10001, 0x1ff, 0x8000000000000001, 0x5, 0x6, 0x6, 0x7, 0x1, 0x7fffffffffffffff, 0x9, 0x7c0d, 0xe, 0x8000000000000001, 0xed, 0x3, 0x9ebf, 0x6, 0x9, 0x8, 0x401, 0xae56, 0xda7c, 0x9, 0x3, 0x1ff, 0x6, 0x4, 0x6c5, 0x0, 0xb763, 0x4, 0xff, 0x9, 0x9, 0x8, 0x800, 0x5, 0x800, 0x101, 0x0, 0x0, 0x9, 0xa1a1, 0xfffffffffffffffb, 0x9, 0x935e, 0xf7b4, 0x517, 0x0, 0x5feb, 0x400, 0x8, 0x2, 0x401, 0x5, 0x7f, 0x8, 0x80000001, 0x7, 0x5, 0x5, 0x0, 0x10000, 0x7, 0x9, 0xfffffffffffff39c, 0xfffffffffffffff7, 0x5, 0xfffffffeffffffff, 0x8, 0x7, 0x9, 0x6, 0x0, 0xffff, 0xf, 0x2, 0xfffffffffffff001, 0x81, 0x200, 0x4, 0x7, 0x8]}) (async, rerun: 64) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000002c40)={0x79, 0x0, 0x4ed}) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000002cc0)={0x0, 0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) r9 = openat(r1, &(0x7f0000002d00)='./file0/file0\x00', 0x40601, 0x102) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000002d40)={0x0, 0xffff, 0xfffffffffffffffb}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000003140)={r10, 0x10001, 0x0, [0xa0000000000, 0x0, 0x3, 0x4, 0x9], [0xf0, 0x4, 0xb411, 0x101, 0x7f, 0x864, 0x8, 0x8, 0x5, 0x314700000000000, 0x5, 0x3, 0x8, 0x0, 0x8, 0x40e3, 0x7, 0x4, 0x28000000000, 0x1, 0x1, 0xffffffffffffff73, 0x6, 0xb61, 0xc, 0x37ca, 0x9, 0x2, 0x7fffffffffffffff, 0x4, 0xe866, 0x2360, 0x1, 0xb, 0x8, 0x7fffffff, 0x3, 0x23, 0xd5, 0x101, 0x80000001, 0x8, 0x6, 0x90, 0x6, 0x1, 0x808, 0x10001, 0x8, 0x5, 0x9, 0x80000001, 0x9, 0x600000000, 0xe, 0x7, 0x518, 0x100, 0xb6ed, 0x5, 0x5, 0x8, 0x3, 0x40, 0xcb, 0x9, 0x7b1, 0x6, 0x4, 0x9, 0x7ff, 0x3, 0x1, 0x3, 0xfffffffffffffffb, 0x5, 0x8, 0x0, 0x8, 0x8, 0x2, 0x2, 0x8, 0xb63, 0x4, 0x952, 0x80000001, 0x5, 0x78, 0xb9ae, 0x8, 0x3, 0x2588afaa, 0x7, 0xbf, 0x40, 0x1, 0x8000000000000000, 0x0, 0xa, 0x3, 0x8000000000000000, 0x3, 0x100000000, 0x1e7e60ae, 0xb, 0x4, 0x8, 0x3deb23d8, 0x2, 0x3, 0x4, 0xe95, 0xc, 0x1, 0x8000000000000001, 0x6c0, 0x3, 0x4, 0x3, 0x6]}) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f0000003580)) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003600), r1) (async, rerun: 32) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000003640)={0x0, @remote, @local}, &(0x7f0000003680)=0xc) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003700)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000037c0)={'ip6tnl0\x00', &(0x7f0000003740)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x5, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x40, 0x7, 0xf49a}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000003880)={'sit0\x00', &(0x7f0000003800)={'syztnl2\x00', 0x0, 0x1, 0x10, 0xff, 0x0, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x65, 0x0, 0x27, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x17, 0x1, [{0x5, 0x8, "7b9108a56d6d"}, {0x5, 0x9, "856e24eedceb5c"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000038c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000039c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x78, r11, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x28c4) newfstatat(0xffffffffffffff9c, &(0x7f0000003a00)='./file0\x00', &(0x7f0000003a40), 0x0) 1.751773346s ago: executing program 4 (id=6491): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r4, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x1, 0x801001a, 0x66d, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0x0, {0x6, 0x0, 0x0, 0x300000000, 0xf, 0x0, {0x0, 0xf, 0x0, 0xfffffffffffffffc, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x0, 0x3, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0x7, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x0, 0x0, r5, 0x5, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200040, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}, {@max_read={'max_read', 0x3d, 0x10}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xe00}}], [{@obj_role={'obj_role', 0x3d, '/dev/ashmem\x00'}}, {@audit}, {@flag='silent'}, {@smackfshat={'smackfshat', 0x3d, '/dev/ashmem\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x8}}, {@appraise_type}]}}) remap_file_pages(&(0x7f000023f000/0x3000)=nil, 0x3000, 0x0, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES64=r7], 0x7a) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$ASHMEM_GET_NAME(r9, 0x81007702, 0x0) 1.701512157s ago: executing program 4 (id=6492): arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000000)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000040)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000080)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000000c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000100)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000140)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000180)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000001c0)) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000001c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000200)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000240)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000280)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f00000002c0)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000300)) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000340)) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000340)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc00c1}, 0x4001) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc00c1}, 0x4001) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}}, 0x4) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, &(0x7f0000000700)) syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '&'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '&'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x90, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8000000000000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2124e01a}]}, 0x90}, 0x1, 0x0, 0x0, 0xc000}, 0x24000000) 1.641659598s ago: executing program 4 (id=6493): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, 0x8, 0x7, 0x9, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd2b, 0x34ff}, @sadb_lifetime={0x4, 0x4, 0x10001, 0x68b2bd30, 0x43c, 0x1}]}, 0x48}}, 0x45) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0xd0, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0xb, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x567}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb6, 0xff, 0xa2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xee, 0xb, 0x8, 0x20, 0x40}, 0xc2, &(0x7f0000000180)={0x5, 0xf, 0xc2, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7f, 0x6, 0x2, 0xf00, 0x1, [0xc007, 0xc000, 0x0, 0x3f30, 0x3fc0, 0x3fcf]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x1, 0x2}, @generic={0x69, 0x10, 0x3, "49e9e0e07bac4cf96092b26d1a721ebafd96e51a6cc309a5cbf5d2eb301f410ae41d47a7e5e68d89d9731c1b83745266737a228ba6522a6c70d1208de10818905668ff2a1ebee207fc1ffeee132e066bd5cc6c2948c0a086a20f4552b22ee276eac456944ecb"}, @ssp_cap={0x1c, 0x10, 0xa, 0xd0, 0x4, 0x6d, 0xff0f, 0x0, [0xc000, 0x3f00, 0xff003f, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x6, 0x2}]}, 0x1, [{0x53, &(0x7f0000000280)=@string={0x53, 0x3, "17ea4da3f2028f913b42a762e43ec14aca4f9cb81d4c14ad4f7fb6c1f65d0c82d26c3be39471469bcd93ce920f92c91e3e8fec098fefc7c8cc338372b67969f7b2cf0f33da96e41ae3a0730f194dc54fe6"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, &(0x7f0000000340)={0x40, 0x1, 0xb, {0xb, 0x21, "a13b3063c2053125bb"}}, &(0x7f0000000380)={0x0, 0x3, 0x13, @string={0x13, 0x3, "b316bf1b8bd4abc3c6a3ca0434a1a8cdec"}}, &(0x7f00000003c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x9}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xff, 0x1, {0x22, 0xdf6}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x40, 0x13, 0x8, "1d2c14ccddb87411"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000540)={0x20, 0x1, 0x1a, "882d2c2f0886d9580229cb34cceb26287b484761713331fbd13c"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x7}}) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0x7, 0x200) syz_usb_connect$cdc_ecm(0x6, 0x70, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x5, 0x40, 0x3f, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0xd0a3}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x0, 0xf2e, 0x6}, [@country_functional={0x6, 0x24, 0x7, 0xb4, 0x7}, @dmm={0x7, 0x24, 0x14, 0x2, 0x2174}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x9, 0xad1, 0x1, 0x1, 0x6, 0xff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x0, 0xba}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0xc, 0x3}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x300, 0xa, 0x0, 0x4, 0x20, 0xfc}, 0xeb, &(0x7f0000000700)={0x5, 0xf, 0xeb, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x2, 0xf, 0x9, 0x69}, @generic={0xab, 0x10, 0x2, "95f776e3de6dfc43f2129035941f3e718da20d128d4e6f53de2a998437f8b832b9a95b828f54b4cabe316dc144295cddf51c192eb73f66ed5f4736d0a06fae32970395bc17a5a73c110e1317d0ba5f178863a32d4e784b03bcc6a81193af152ea5ba2c9f21277905486a9fce4624bd60dca845344e11b8abfb4fd997ad3177bb7d0ccef2eb97ebe95dbb4100d6ca8dab30287637c8dae3ec8b87988129ea80a8528bdf595c57e7b9"}, @generic={0x9, 0x10, 0xa, "c35346a77bb8"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8b, 0x4, 0x8, 0x1e00, 0x2, [0x3f0f, 0xcf, 0xf0, 0xff00c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x7, 0x9, 0x1d20, 0x5}]}, 0x2, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc7b}}]}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000900)=0x7, 0x4) sendmsg$key(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x2, 0x11, 0x3, 0x2, 0x14, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbe, 0xffffffff, {0x6, 0x3c, 0x7, 0x5, 0x0, 0x747, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}}, @sadb_address={0x5, 0x7, 0x2b, 0xc0, 0x0, @in6={0xa, 0x4e22, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}}, @sadb_key={0x5, 0x8, 0xc8, 0x0, "13ecfcdba3f339d94b09230b07c1c256c2147814c68371e591"}]}, 0xa0}}, 0xc000) r4 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xed, 0x90, 0x9e, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0xfc, {0x9, 0x21, 0x9, 0x59, 0x1, {0x22, 0xfdf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xfe, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0x51, 0x6}}]}}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x201, 0x2, 0x9, 0x25, 0x40, 0x2}, 0xa8, &(0x7f0000000b00)={0x5, 0xf, 0xa8, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "4172131714ef5932fd009b3dd51d9eb9"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f96cf76359464424d0fa394598f13a54"}, @generic={0x6b, 0x10, 0x4, "db7abdc6847c329a43cf9ba5434e9b1096f06ef18de32cfcb4b0c6d08b585fe7b84dd6fd83f0feae3b056f35f74ecb677a181d7419bafeeaa87e8ac384e8ddf1a45f7c17d9ca0ab52ae71cc2cd682e656a35c84abf40c2c3cc9347c6e5b018046333c4e6cab467b7"}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x0, 0xf, 0x810, [0xff0000]}]}, 0x7, [{0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x1001}}, {0x100, &(0x7f0000000c00)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x409}}, {0x88, &(0x7f0000000d80)=@string={0x88, 0x3, "50daca6dd98d062aeda9f64c5126673fa74743053ebd858c713b00d4ddaa55cf29714e3babc5b36391823a47b8dc74ca8b0ffa63ca6a0c73d3f26db9ee37b00457cce07ebff7ee773cc5082095c8ba7f61acc5f143c8a3a5204a8218c8a0b3cf085c6a60e16fb2a12525da2add26e9441b599b4a1ecd2178e17cd65880c0d5c3b128660370a7"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x340a}}, {0xe2, &(0x7f0000000e80)=@string={0xe2, 0x3, "a8e9c63e0c0cb756baa25f6b472f9612ebef1ead898b490c016f665712aa8e8d83dcf43d3c82aa9b0e58bf9ffba2a3bd44539619e11292802e725713e557cda93d17d850c5f986f1940ebd3f722a1888e28ee084f8ddd3a1dde29be45e3526f0b113877621d0d877b1be326ed3836a1933fd0f8a485b0eebe8911eea14c9ded96e0614a65eb4a072b743f10c2a1138f01ca75e4c1ab63893a67347b45a87a5d533725f435fb48ae3288d850160f714d5f32f0e743057a56929867292e849a10d23171583a783ca6dccdefb3a9b7f9643ce46e525a13994fe05d6dee8e5390177"}}]}) syz_usb_control_io(r4, &(0x7f0000001300)={0x2c, &(0x7f0000001000)={0x0, 0x5, 0xed, {0xed, 0x6, "53dd2bf9ba5c6410d20772d83bec910dfe33b0d9109cff50a4f76a6a75171dc1c757c7f94dcdafa9db8bc53e37f23dc52a272ea22869302a562f7bea1ebd3b6c935bad3901cfd1a6ef41bd179fae429f475fe820375e87aeedcbabbb105d3d7f2348c945968a978e3eb608719d3a3696ab746aab97fee365fa0c2c53c7c990333b71aab96d89f8753f174c0b4b8b16090e8677853be531668607c63023c8b5091b475dc4f04e483e6845272f03c8226599cceac4464fc710b95f66327fba720115a558527d6b24f2018b54a060073053904dc04dd80723aa6673260277e55efde2825d3489f45a76d5488c"}}, &(0x7f0000001100)={0x0, 0x3, 0xa3, @string={0xa3, 0x3, "8aea635ebf217040d7b3c58f8ed0a10c161c4da2f37bc4fafa3bd9a684cc7d4db2b6a895062e30567d8cf5aa883f445ded7df3a7c788d9c458c48c3324f578c986b99b909df3eefa2cf45365f206fb9a2f8b099e55ca8f5605810ca1d362d89407de797b5a79b14e7c48c17eed625f6b054bd090d0a317fa6fda535ba6b84704bd3055809b502df6f986e59e84892a54443500b4b7996d4abc0db7bae04ba68570"}}, &(0x7f00000011c0)={0x0, 0xf, 0xb4, {0x5, 0xf, 0xb4, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x94, 0xf00, 0x36ca, [0x0, 0x0, 0xff3fc0, 0x0, 0xf, 0x3ff0]}, @wireless={0xb, 0x10, 0x1, 0x6, 0x20, 0x1, 0x2, 0xe, 0xfe}, @generic={0x6f, 0x10, 0x3, "64c242014f75d1d7861b0849fb5a32ed7c78fc8bc2e20e4dff2fb5a3e966d597b7ac5659e19400bd159466d4fff4432376f33b5eee28f2308ea2cacce2112d54dc8dcedc3c0ccb21d1cd8a8377ce910e93111a2b7233d734d7bf8a8455ef20fc6b7e6f5e9eb524e12cd0f3bb"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x7, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf8, 0x3, 0x5}]}}, &(0x7f0000001280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x0, 0xd7, 0xc0, "2326d86d", "bb864c0e"}}, &(0x7f00000012c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x8, 0x7, 0x9, 0x8, 0x9, 0x5}}}, &(0x7f00000017c0)={0x84, &(0x7f0000001340)={0x40, 0x15, 0x86, "0104274cef7ea092aa2f5c8dd66916174c69e8ebba764d175a64ba25d7c358a6a7c74f42aa0d0ad550fa93f4adcc8cd88330e65522d91b170f684c7d15a938dc3fc989b26f0a3b1c8bb62bf96209c6495287b252ffe2a180a8a1bb247e99e5f889aebe9d95c784bf507516da115ecde21ac9dd62071608104b99a93cafdb5ddb925dec690595"}, &(0x7f0000001400)={0x0, 0xa, 0x1, 0x44}, &(0x7f0000001440)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000001480)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000014c0)={0x20, 0x0, 0x8, {0x1, 0x1, [0xff]}}, &(0x7f0000001500)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001540)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000001580)={0x40, 0xb, 0x2, "4ba7"}, &(0x7f00000015c0)={0x40, 0xf, 0x2, 0x4ba}, &(0x7f0000001600)={0x40, 0x13, 0x6}, &(0x7f0000001640)={0x40, 0x17, 0x6, @local}, &(0x7f0000001680)={0x40, 0x19, 0x2, "c104"}, &(0x7f00000016c0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001700)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001740)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001780)={0x40, 0x21, 0x1, 0x5}}) r5 = dup(r2) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000001880)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)={0xffffffffffffffff}) mkdir(&(0x7f0000001900)='./file0\x00', 0xc1) r7 = syz_open_dev$hidraw(&(0x7f0000001940), 0x9, 0x519101) recvmmsg$unix(r6, &(0x7f00000046c0)=[{{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/201, 0xc9}, {&(0x7f0000001b00)=""/217, 0xd9}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/62, 0x3e}, {&(0x7f0000001d40)=""/214, 0xd6}], 0x5, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002000)}, {&(0x7f0000002040)=""/114, 0x72}, {&(0x7f00000020c0)=""/217, 0xd9}, {&(0x7f00000021c0)=""/196, 0xc4}, {&(0x7f00000022c0)}, {&(0x7f0000002300)=""/125, 0x7d}], 0x6, &(0x7f0000002400)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000024c0), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002540)=""/167, 0xa7}, {&(0x7f0000002600)=""/125, 0x7d}, {&(0x7f0000002680)=""/151, 0x97}, {&(0x7f0000002740)=""/109, 0x6d}, {&(0x7f00000027c0)=""/123, 0x7b}, {&(0x7f0000002840)=""/240, 0xf0}, {&(0x7f0000002940)=""/203, 0xcb}], 0x7}}, {{&(0x7f0000002ac0), 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/234, 0xea}, {&(0x7f0000002c80)=""/200, 0xc8}, {&(0x7f0000002d80)=""/59, 0x3b}, {&(0x7f0000002dc0)=""/101, 0x65}, {&(0x7f0000002e40)=""/146, 0x92}, {&(0x7f0000002f00)=""/120, 0x78}, {&(0x7f0000002f80)=""/206, 0xce}, {&(0x7f0000003080)=""/35, 0x23}], 0x9, &(0x7f0000003180)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0xf8}}, {{&(0x7f0000003280)=@abs, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000003300)=""/103, 0x67}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/84, 0x54}, {&(0x7f0000004400)=""/130, 0x82}, {&(0x7f00000044c0)=""/142, 0x8e}, {&(0x7f0000004580)=""/58, 0x3a}], 0x6, &(0x7f0000004640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x60}}], 0x5, 0x101, &(0x7f0000004800)={0x0, 0x989680}) mount$9p_fd(0x0, &(0x7f0000004840)='./file0\x00', &(0x7f0000004880), 0x20e462, &(0x7f00000048c0)={'trans=fd,', {'rfdno', 0x3d, r21}, 0x2c, {'wfdno', 0x3d, r23}, 0x2c, {[{@access_client}, {@version_9p2000}, {@fscache}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@measure}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_type={'obj_type', 0x3d, '#^'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}]}}) r37 = openat$full(0xffffffffffffff9c, &(0x7f0000004a80), 0x404000, 0x0) r38 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000004ac0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) r39 = accept$inet6(r28, &(0x7f0000004b00)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000004b40)=0x1c) r40 = fcntl$getown(r30, 0x9) sendmsg$netlink(r15, &(0x7f0000004cc0)={&(0x7f00000049c0), 0xc, &(0x7f0000004a40)=[{&(0x7f0000004a00)={0x20, 0x1b, 0x208, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xb4, 0x0, 0x0, @u32=0x1d4000}, @typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@broadcast}]}, 0x20}], 0x1, &(0x7f0000004b80)=[@rights={{0x14, 0x1, 0x1, [r19]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r36}}}, @rights={{0x18, 0x1, 0x1, [r37, r19]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, r14}}}, @rights={{0x38, 0x1, 0x1, [r16, r20, r24, r5, r38, r39, r0, r31, r17, r7]}}, @cred={{0x1c, 0x1, 0x2, {r40, r35, r9}}}, @rights={{0x1c, 0x1, 0x1, [r18, r25, r29]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee01, r33}}}, @cred={{0x1c, 0x1, 0x2, {r8, r32, r34}}}], 0x128}, 0xc0) bind$inet6(r23, &(0x7f0000004d00)={0xa, 0x4e22, 0x9, @local, 0x5}, 0x1c) ioctl$EVIOCSABS2F(r16, 0x401845ef, &(0x7f0000004d40)={0xfff, 0x8, 0xfffffffb, 0x1000, 0x8, 0x8}) ioctl$UFFDIO_API(r27, 0xc018aa3f, &(0x7f0000004d80)={0xaa, 0x480}) connect$unix(r22, &(0x7f0000004dc0)=@file={0x0, './file0\x00'}, 0x6e) io_setup(0x1ff, &(0x7f0000004e40)=0x0) io_cancel(r41, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x5, 0x8a, r26, &(0x7f0000004e80)="9002b0276271c23de6f2488657e038535d54357afb9d91039dfdeb7036d892eabb6d78371480d7c7c04e5db0126ec1ac0cac2bf02fa1fb16f6dc0afa984318a77d78cf0df678e9c03cbed8a4d70c8ef4ccee81e14dfff0be40ecbaa9931a317f72a09c675730346b32ae86eff39e1af6de18f97102aed5e3144fb1b0e85f9a30bf06a7e9b2e7110321694fa75d2a4d929cefbf1cea729103de047fc8abb31b582711e93a12758e73e2", 0xa9, 0x3, 0x0, 0x3}, &(0x7f0000004f80)) write$FUSE_INIT(r10, &(0x7f0000007000)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200, 0x1000, 0x7f, 0x8, 0xffffffff, 0x6, 0x0, 0x0, 0x10, 0x1}}, 0x50) 1.641068679s ago: executing program 0 (id=6494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = getpgrp(0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x1e, 0x37, 0x2, {0x53d85d9f6349377e, 0x9, 0x4, r2}}, 0x1e) socket$inet6(0xa, 0x2, 0x8) (async) socket$inet6(0xa, 0x2, 0x8) 1.544013661s ago: executing program 0 (id=6495): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000340)=""/130, 0x82}], 0x2}, 0x3}], 0x1, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000005580)='./file0\x00', &(0x7f00000055c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r3, &(0x7f0000000100)=@abs={0x27}, 0x6e) r4 = socket(0x9, 0x3, 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001600010a00000000fbdbdf250a0000001800ca80140006800d00e400b1fc2df29cbe31852a000000"], 0x2c}}, 0x40) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000080)={0x0, 0x0, 0x7}) 792.068065ms ago: executing program 1 (id=6498): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0xc}) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendto$inet(r2, &(0x7f0000000140)="84f8928f8abe492693ad2746e01f4f4dc465a23a", 0x14, 0xc000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 791.210115ms ago: executing program 1 (id=6499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x5, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x15}, @flat=@weak_binder={0x77622a85, 0x200a, 0x2}, @flat=@weak_binder={0x77622a85, 0x0, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 783.289015ms ago: executing program 1 (id=6500): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x5}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) close_range(r2, 0xffffffffffffffff, 0x0) 649.191728ms ago: executing program 0 (id=6501): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) ioctl$int_in(r0, 0x73, &(0x7f0000000080)=0x5) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRESOCT]) 620.420829ms ago: executing program 1 (id=6502): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket(0xa, 0x1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000004) dup3(r5, r4, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote, 0x6}}}, 0x108) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) close(0xffffffffffffffff) socket(0x80000000000000a, 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0xe64, 0x7fff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x202}, 0x1c) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r7 = dup(r1) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) (async) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000001100)={0x5b279f6196f49b8d, 0x17, 0x5, 0x9, 0x0, 0xfffffffe, 0x0}) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) (async) sendto$inet(r9, 0x0, 0x0, 0x20000870, &(0x7f0000000240)={0x2, 0xffff, @remote}, 0x10) 579.874249ms ago: executing program 1 (id=6503): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000040)={0x24, @long}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) keyctl$session_to_parent(0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[], 0x2c, 0x1) keyctl$unlink(0x9, 0x0, 0xfffffffffffffff8) sched_rr_get_interval(0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=6504): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xe0c5}, 0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x8, 0x1004, 0x6, 0xc595, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') exit(0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000100)=""/222, 0xde}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', r4, &(0x7f0000000000)='./file0\x00', 0x220) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.2.5473'. [ 375.250091][T16526] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.273607][T16526] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 375.298523][T16526] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 375.300283][T16532] 9pnet_fd: Insufficient options for proto=fd [ 375.314088][T16526] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 375.402583][T16537] binder: Bad value for 'stats' [ 375.452171][T16539] rust_binder: Error while translating object. [ 375.452216][T16539] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 375.459341][T16539] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43 [ 375.480162][T16541] binder: Bad value for 'max' [ 375.516795][T16541] binder: Bad value for 'max' [ 375.594647][T16546] 9pnet_fd: Insufficient options for proto=fd [ 375.881143][ T8057] Bluetooth: hci0: Frame reassembly failed (-84) [ 376.109780][T16585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5491'. [ 376.176145][T16588] rust_binder: 60: no such ref 1 [ 376.181643][T16588] rust_binder: Write failure EFAULT in pid:60 [ 376.334871][T16596] binder: Unknown parameter 'context' [ 376.384653][T16598] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 5 [ 376.594726][T16601] rust_binder: Error while translating object. [ 376.594765][T16601] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 376.601140][T16601] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:42 [ 377.263634][T14185] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 377.473715][T14185] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.494271][T14185] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 377.517639][T14185] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 377.526957][T14185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.555530][T14185] usb 4-1: config 0 descriptor?? [ 377.838964][T16638] 9pnet_fd: Insufficient options for proto=fd [ 377.959020][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 377.963557][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 377.980738][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.012661][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.050960][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.083641][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.090943][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.116073][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.126568][T14185] lenovo 0003:17EF:60EE.0017: unknown main item tag 0x0 [ 378.147994][T16648] 9pnet_fd: Insufficient options for proto=fd [ 378.155358][T14185] lenovo 0003:17EF:60EE.0017: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 378.173942][T16605] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 378.447373][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5516'. [ 378.732998][T14193] usb 4-1: USB disconnect, device number 25 [ 379.015089][ T8057] bridge_slave_1: left allmulticast mode [ 379.025500][ T8057] bridge_slave_1: left promiscuous mode [ 379.050166][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.061087][ T8057] bridge_slave_0: left allmulticast mode [ 379.073356][ T8057] bridge_slave_0: left promiscuous mode [ 379.086165][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.214233][ T8057] veth1_macvtap: left promiscuous mode [ 379.219816][ T8057] veth0_vlan: left promiscuous mode [ 379.385981][T16665] rust_binder: Write failure EFAULT in pid:48 [ 379.539341][T16662] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.561895][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.570586][T16662] bridge_slave_0: entered allmulticast mode [ 379.577861][T16662] bridge_slave_0: entered promiscuous mode [ 379.590670][T16662] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.598664][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.607507][T16662] bridge_slave_1: entered allmulticast mode [ 379.614669][T16662] bridge_slave_1: entered promiscuous mode [ 379.680007][ T36] kauditd_printk_skb: 542 callbacks suppressed [ 379.680028][ T36] audit: type=1400 audit(2000000008.860:21602): avc: denied { sys_module } for pid=16662 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 379.733790][ T36] audit: type=1400 audit(2000000008.870:21603): avc: denied { read write } for pid=16303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.759325][ T36] audit: type=1400 audit(2000000008.870:21604): avc: denied { read write open } for pid=16303 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.831962][ T36] audit: type=1400 audit(2000000008.870:21605): avc: denied { ioctl } for pid=16303 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 379.889843][ T36] audit: type=1400 audit(2000000008.900:21606): avc: denied { sys_module } for pid=16662 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 379.913182][ T36] audit: type=1400 audit(2000000008.900:21607): avc: denied { sys_module } for pid=16662 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 379.953652][ T36] audit: type=1400 audit(2000000008.920:21608): avc: denied { create } for pid=16677 comm="syz.2.5526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.993538][ T36] audit: type=1400 audit(2000000008.940:21609): avc: denied { read append } for pid=16678 comm="syz.3.5527" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.063550][ T36] audit: type=1400 audit(2000000008.940:21610): avc: denied { read open } for pid=16678 comm="syz.3.5527" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.123599][ T36] audit: type=1400 audit(2000000008.940:21611): avc: denied { getopt } for pid=16677 comm="syz.2.5526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.252828][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.259954][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.298098][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.305212][ T8057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.505420][T16662] veth0_vlan: entered promiscuous mode [ 380.590552][T16662] veth1_macvtap: entered promiscuous mode [ 381.018740][T16715] netlink: 'syz.8.5534': attribute type 16 has an invalid length. [ 381.041233][T16715] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.5534'. [ 381.049293][T16717] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 381.121797][T16720] binder: Unknown parameter '0x000000000000000301777777777777777777777' [ 381.175755][ T8057] bridge_slave_1: left allmulticast mode [ 381.181549][ T8057] bridge_slave_1: left promiscuous mode [ 381.201085][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.222195][ T8057] bridge_slave_0: left allmulticast mode [ 381.236207][ T8057] bridge_slave_0: left promiscuous mode [ 381.242190][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.412888][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.420289][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.427629][T16729] bridge_slave_0: entered allmulticast mode [ 381.435060][T16729] bridge_slave_0: entered promiscuous mode [ 381.442916][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.451307][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.461438][T16729] bridge_slave_1: entered allmulticast mode [ 381.469493][T16728] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 381.469530][T16728] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18 [ 381.480800][T16729] bridge_slave_1: entered promiscuous mode [ 381.503836][ T8057] veth1_macvtap: left promiscuous mode [ 381.510238][ T8057] veth0_vlan: left promiscuous mode [ 381.631772][T16742] overlay: filesystem on ./bus not supported as upperdir [ 381.741557][T16749] syz.3.5545: attempt to access beyond end of device [ 381.741557][T16749] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 381.760339][T16749] EXT4-fs (loop3): unable to read superblock [ 381.814383][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.821554][T16729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.829005][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.836089][T16729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.873723][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.885582][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.033004][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.040149][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.049926][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.057053][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.128945][T16770] rust_binder: 99: no such ref 514 [ 382.173603][T16770] rust_binder: Write failure EINVAL in pid:99 [ 382.216745][T16729] veth0_vlan: entered promiscuous mode [ 382.312921][T16729] veth1_macvtap: entered promiscuous mode [ 382.388813][T16776] exFAT-fs (rnullb0): invalid boot record signature [ 382.396204][T16776] exFAT-fs (rnullb0): failed to read boot sector [ 382.402618][T16776] exFAT-fs (rnullb0): failed to recognize exfat type [ 382.483707][T14192] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 382.523198][T16793] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3 [ 382.544634][T16793] rust_binder: Write failure EINVAL in pid:2 [ 382.640425][T16803] cgroup: No subsys list or none specified [ 382.643630][T14192] usb 5-1: device descriptor read/64, error -71 [ 382.675128][T16803] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.5560'. [ 382.693944][T16804] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.5560'. [ 382.726192][T16803] rust_binder: Error while translating object. [ 382.726251][T16803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 382.743944][T16803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 382.935587][T14192] usb 5-1: device descriptor read/64, error -71 [ 383.213654][T14192] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 383.255607][T16840] SELinux: security_context_str_to_sid () failed with errno=-22 [ 383.353653][T14192] usb 5-1: device descriptor read/64, error -71 [ 383.406920][T16843] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 383.406947][T16843] rust_binder: Error while translating object. [ 383.473648][T16843] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 383.491605][T16843] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 383.503951][T16849] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 383.522505][T16849] rust_binder: Write failure EINVAL in pid:26 [ 383.613551][T14192] usb 5-1: device descriptor read/64, error -71 [ 383.743669][T14192] usb usb5-port1: attempt power cycle [ 383.902740][T16858] rust_binder: Write failure EFAULT in pid:120 [ 384.027121][T16865] rust_binder: Write failure EFAULT in pid:125 [ 384.093584][T14192] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 384.135871][T14192] usb 5-1: device descriptor read/8, error -71 [ 384.169463][T16876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 384.299160][T14192] usb 5-1: device descriptor read/8, error -71 [ 384.372780][T16892] netlink: 'syz.5.5588': attribute type 4 has an invalid length. [ 384.436269][T16896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 384.439440][T16897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 384.442710][T16898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 384.553552][T14192] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 384.605909][T14192] usb 5-1: device descriptor read/8, error -71 [ 384.627361][T16904] /dev/sg0: Can't lookup blockdev [ 384.686281][ T36] kauditd_printk_skb: 1260 callbacks suppressed [ 384.686302][ T36] audit: type=1400 audit(2000000013.865:22872): avc: denied { read } for pid=16906 comm="syz.5.5594" name="binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 384.715955][ T36] audit: type=1400 audit(2000000013.865:22873): avc: denied { read open } for pid=16906 comm="syz.5.5594" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 384.741225][ T36] audit: type=1400 audit(2000000013.865:22874): avc: denied { create } for pid=16906 comm="syz.5.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.774422][T14192] usb 5-1: device descriptor read/8, error -71 [ 384.783706][ T36] audit: type=1400 audit(2000000013.865:22875): avc: denied { read write } for pid=16906 comm="syz.5.5594" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 384.836703][ T36] audit: type=1400 audit(2000000013.865:22876): avc: denied { read write open } for pid=16906 comm="syz.5.5594" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 384.881501][ T36] audit: type=1400 audit(2000000013.865:22877): avc: denied { write } for pid=16906 comm="syz.5.5594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.913738][T14192] usb usb5-port1: unable to enumerate USB device [ 384.920215][ T36] audit: type=1400 audit(2000000013.875:22878): avc: denied { create } for pid=16905 comm="syz.8.5593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.947465][ T36] audit: type=1400 audit(2000000013.875:22879): avc: denied { setopt } for pid=16905 comm="syz.8.5593" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.999381][ T36] audit: type=1400 audit(2000000013.875:22880): avc: denied { mount } for pid=16905 comm="syz.8.5593" name="/" dev="ramfs" ino=74160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 385.033060][ T36] audit: type=1400 audit(2000000013.925:22881): avc: denied { read write } for pid=16729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 385.240663][T16940] tipc: Started in network mode [ 385.247164][T16940] tipc: Node identity 4638ee7c2151, cluster identity 4711 [ 385.254827][T16940] tipc: Enabled bearer , priority 0 [ 385.263972][T16940] tipc: Disabling bearer [ 385.499300][T16955] rust_binder: 66: no such ref 1 [ 385.514543][T16955] rust_binder: Write failure EFAULT in pid:66 [ 385.525959][T16957] fuse: Invalid gid '00000000000037777777777' [ 385.545086][T16959] rust_binder: 66: no such ref 1 [ 385.551899][T16959] rust_binder: Write failure EFAULT in pid:66 [ 385.716509][T16971] rust_binder: 16966 RLIMIT_NICE not set [ 385.752811][T14186] rust_binder: 16963: removing orphan mapping 0:4248 [ 385.861716][T16974] overlayfs: conflicting options: userxattr,metacopy=on [ 385.914927][T16974] rust_binder: Write failure EFAULT in pid:76 [ 385.927086][T16979] ptm ptm17: ldisc open failed (-12), clearing slot 17 [ 385.998260][T16985] netlink: 'syz.8.5618': attribute type 4 has an invalid length. [ 386.064504][T16986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 386.357827][T17003] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 386.374291][T17003] rust_binder: Write failure EINVAL in pid:173 [ 386.493116][T17008] rust_binder: Write failure EFAULT in pid:178 [ 386.529817][ T889] rust_binder: 17007: removing orphan mapping 0:24 [ 386.628153][T17018] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5630'. [ 386.757843][T17031] rust_binder: Read failure Err(EAGAIN) in pid:199 [ 386.995454][T17048] netlink: 'syz.3.5636': attribute type 20 has an invalid length. [ 387.032688][T17048] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5636'. [ 387.047560][T17050] exFAT-fs (rnullb0): invalid boot record signature [ 387.056866][T17050] exFAT-fs (rnullb0): failed to read boot sector [ 387.067189][T17048] binder: Bad value for 'stats' [ 387.072412][T17050] exFAT-fs (rnullb0): failed to recognize exfat type [ 387.203548][ T889] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 387.358423][ T889] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.364598][T17065] rust_binder: Error while translating object. [ 387.369647][T17065] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 387.376909][ T889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 387.391680][T17065] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:53 [ 387.398854][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 387.419878][ T889] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.439100][ T889] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 387.450503][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.460498][ T889] usb 6-1: Product: syz [ 387.465594][ T889] usb 6-1: Manufacturer: syz [ 387.470234][ T889] usb 6-1: SerialNumber: syz [ 387.477926][ T889] usb 6-1: config 0 descriptor?? [ 387.484869][T17047] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 387.498152][ T889] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input35 [ 387.707513][ T889] usb 6-1: USB disconnect, device number 14 [ 388.623557][T14186] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 388.773538][T14186] usb 6-1: Using ep0 maxpacket: 16 [ 388.786586][T14186] usb 6-1: unable to get BOS descriptor set [ 388.801106][T14186] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16 [ 388.811603][T14186] usb 6-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 388.821680][T14186] usb 6-1: config 1 interface 0 has no altsetting 0 [ 388.834298][T14186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.844188][T14186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.852415][T14186] usb 6-1: Product: Ё [ 388.865070][T14186] usb 6-1: Manufacturer: Ъ [ 388.869658][T14186] usb 6-1: SerialNumber: 杙௉術踅䘠澧⪢珚⹃㼼䊌ᨣ뎓籅礝좯圲턗ｄ檛 [ 388.884149][T17101] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 388.894508][T17101] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 389.143853][T14186] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 389.169194][T14186] usb 6-1: USB disconnect, device number 15 [ 389.313173][T17127] tipc: Enabled bearer , priority 0 [ 389.332167][T17126] tipc: Disabling bearer [ 389.403592][T14185] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 389.523569][T14186] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 389.556059][T14185] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 389.565281][T14185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.579764][T14185] usb 5-1: config 0 descriptor?? [ 389.630204][T17136] rust_binder: 228: no such ref 4294967295 [ 389.636281][T17136] rust_binder: Read failure Err(EAGAIN) in pid:228 [ 389.636696][T17136] rust_binder: Read failure Err(EAGAIN) in pid:228 [ 389.673557][T14186] usb 6-1: Using ep0 maxpacket: 8 [ 389.689335][T14186] usb 6-1: unable to get BOS descriptor or descriptor too short [ 389.697649][ T36] kauditd_printk_skb: 962 callbacks suppressed [ 389.697666][ T36] audit: type=1400 audit(2000000018.885:23844): avc: denied { ioctl } for pid=17122 comm="syz.5.5664" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.730728][ T36] audit: type=1400 audit(2000000018.885:23845): avc: denied { ioctl } for pid=17140 comm="syz.3.5669" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.758338][ T36] audit: type=1400 audit(2000000018.885:23846): avc: denied { read write } for pid=16303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.758415][T14186] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 389.782876][T14186] usb 6-1: config 0 has no interface number 0 [ 389.797704][T14186] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 389.809255][T14186] usb 6-1: config 0 interface 88 has no altsetting 0 [ 389.813021][ T36] audit: type=1400 audit(2000000018.885:23847): avc: denied { read write open } for pid=16303 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.834706][T14186] usb 6-1: string descriptor 0 read error: -22 [ 389.846141][ T36] audit: type=1400 audit(2000000018.885:23848): avc: denied { ioctl } for pid=16303 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 389.863598][T14186] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 389.873915][ T36] audit: type=1400 audit(2000000018.915:23849): avc: denied { read write } for pid=17143 comm="syz.3.5670" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.890324][T14186] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 389.923047][ T36] audit: type=1400 audit(2000000018.915:23850): avc: denied { read write open } for pid=17143 comm="syz.3.5670" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 389.950300][T14186] usb 6-1: config 0 descriptor?? [ 389.967418][T14186] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input36 [ 389.971339][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5672'. [ 389.983560][ T36] audit: type=1400 audit(2000000018.915:23851): avc: denied { read } for pid=17143 comm="syz.3.5670" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.012783][ T36] audit: type=1400 audit(2000000018.915:23852): avc: denied { read open } for pid=17143 comm="syz.3.5670" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 390.041835][ T36] audit: type=1400 audit(2000000018.915:23853): avc: denied { create } for pid=17143 comm="syz.3.5670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 390.198908][T14186] usb 6-1: USB disconnect, device number 16 [ 390.683585][ T889] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 390.733447][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5678'. [ 390.833606][ T889] usb 6-1: Using ep0 maxpacket: 16 [ 390.845052][ T889] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 390.853380][ T889] usb 6-1: config 0 has no interface number 0 [ 390.859618][ T889] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 390.870344][ T889] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 24896, setting to 1024 [ 390.882004][ T889] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 390.892283][ T889] usb 6-1: config 0 interface 41 has no altsetting 0 [ 390.903217][ T889] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 390.912483][ T889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.922427][ T889] usb 6-1: Product: syz [ 390.933577][ T889] usb 6-1: Manufacturer: syz [ 390.938311][ T889] usb 6-1: SerialNumber: syz [ 390.950396][ T889] usb 6-1: config 0 descriptor?? [ 390.958168][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 390.968783][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.024927][T17178] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 391.032378][T17178] rust_binder: Write failure EINVAL in pid:249 [ 391.066133][T17181] rust_binder: Write failure EFAULT in pid:252 [ 391.181888][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.197234][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.310892][T17191] fuse: Unknown parameter 'grouid' [ 391.610195][ T889] Error reading MAC address [ 391.626286][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.643998][T17166] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 391.994387][T17217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17217 comm=syz.8.5694 [ 392.244675][T14185] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 392.271772][T14185] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 392.307242][T14185] asix 5-1:0.0: probe with driver asix failed with error -71 [ 392.321108][ T889] sr9700 6-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, 16:82:51:80:77:a2 [ 392.322467][T14185] usb 5-1: USB disconnect, device number 28 [ 392.352337][ T889] usb 6-1: USB disconnect, device number 17 [ 392.384036][ T889] sr9700 6-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet [ 406.962560][ T36] kauditd_printk_skb: 434 callbacks suppressed [ 406.962578][ T36] audit: type=1400 audit(2000000036.135:24288): avc: denied { create } for pid=17242 comm="syz.5.5702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 406.998601][T17244] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 407.017004][ T36] audit: type=1400 audit(2000000036.155:24289): avc: denied { create } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.043786][ T36] audit: type=1400 audit(2000000036.155:24290): avc: denied { write } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.064593][ T36] audit: type=1400 audit(2000000036.155:24291): avc: denied { read } for pid=17243 comm="syz.4.5704" name="binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 407.090130][ T36] audit: type=1400 audit(2000000036.155:24292): avc: denied { read open } for pid=17243 comm="syz.4.5704" path="/dev/binderfs/binder1" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 407.116232][ T36] audit: type=1400 audit(2000000036.155:24293): avc: denied { write } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.153594][ T36] audit: type=1400 audit(2000000036.155:24294): avc: denied { create } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.219245][ T36] audit: type=1400 audit(2000000036.155:24295): avc: denied { write } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.219318][ T8062] Bluetooth: hci0: Frame reassembly failed (-84) [ 407.252093][T17266] rust_binder: Write failure EFAULT in pid:77 [ 407.284894][T17263] audit: audit_backlog=65 > audit_backlog_limit=64 [ 407.297859][ T36] audit: type=1400 audit(2000000036.155:24296): avc: denied { read } for pid=17246 comm="syz.3.5703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.411814][T17276] rust_binder: Failed copying remainder into alloc: EFAULT [ 407.411843][T17276] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 407.433638][T17276] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 407.450240][T17276] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:285 [ 407.588602][T17290] loop2: detected capacity change from 0 to 7 [ 407.604578][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.613990][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.622275][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.631892][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.640146][T17290] loop2: unable to read partition table [ 407.648213][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 407.658435][T17290] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 407.660270][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.681971][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.691328][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.700749][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.709604][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.719029][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.728645][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.737937][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.747069][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 407.756527][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 407.905438][T17300] binder: Unknown parameter 'defcontext01777777777777777777777' [ 407.931109][T17300] binder: Unknown parameter 'defcontext01777777777777777777777' [ 408.220984][T11903] bridge_slave_1: left allmulticast mode [ 408.227275][T11903] bridge_slave_1: left promiscuous mode [ 408.237070][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.251236][T11903] bridge_slave_0: left allmulticast mode [ 408.257218][T11903] bridge_slave_0: left promiscuous mode [ 408.264790][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.387689][T11903] tipc: Left network mode [ 408.404917][T11903] veth1_macvtap: left promiscuous mode [ 408.411396][T11903] veth0_vlan: left promiscuous mode [ 408.515402][T17314] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.523030][T17314] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.531755][T17314] bridge_slave_0: entered allmulticast mode [ 408.542013][T17314] bridge_slave_0: entered promiscuous mode [ 408.550398][T17314] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.559142][T17314] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.566895][T17314] bridge_slave_1: entered allmulticast mode [ 408.573438][T17314] bridge_slave_1: entered promiscuous mode [ 408.681413][T17314] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.688510][T17314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.696040][T17314] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.703097][T17314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.757696][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.765385][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.780708][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.787847][ T8076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.799285][ T8062] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.806486][ T8062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.887648][T17314] veth0_vlan: entered promiscuous mode [ 408.925252][T17314] veth1_macvtap: entered promiscuous mode [ 409.028488][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5725'. [ 409.037737][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5725'. [ 409.050152][T17331] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 409.067545][T17332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.076177][T17332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.091170][T17333] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.101375][T17333] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 409.110935][T17333] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.119178][T17333] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 409.127940][T17332] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.136022][T17332] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 409.144720][T17332] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 409.152946][T17332] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 409.226929][T17341] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5732'. [ 409.236183][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 409.236278][T17341] netlink: 35 bytes leftover after parsing attributes in process `syz.8.5732'. [ 409.242405][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 409.251439][T17341] netlink: 'syz.8.5732': attribute type 6 has an invalid length. [ 409.273027][T17341] netlink: 'syz.8.5732': attribute type 5 has an invalid length. [ 409.283558][T17341] netlink: 35 bytes leftover after parsing attributes in process `syz.8.5732'. [ 409.313758][T14193] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 409.324253][T17344] netlink: 'syz.5.5733': attribute type 27 has an invalid length. [ 409.354499][T17344] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.361860][T17344] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.453581][T14193] usb 10-1: device descriptor read/64, error -71 [ 409.693575][T14193] usb 10-1: device descriptor read/64, error -71 [ 409.860749][T17357] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5738'. [ 409.943553][T14193] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 410.083582][T14193] usb 10-1: device descriptor read/64, error -71 [ 410.333569][T14193] usb 10-1: device descriptor read/64, error -71 [ 410.443644][T14193] usb usb10-port1: attempt power cycle [ 410.720046][T17381] exFAT-fs (rnullb0): invalid boot record signature [ 410.726965][T17381] exFAT-fs (rnullb0): failed to read boot sector [ 410.733815][T17381] exFAT-fs (rnullb0): failed to recognize exfat type [ 410.783563][T14193] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 410.829407][T14193] usb 10-1: device descriptor read/8, error -71 [ 410.976942][T14193] usb 10-1: device descriptor read/8, error -71 [ 411.009890][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5752'. [ 411.225054][T14193] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 411.267054][T14193] usb 10-1: device descriptor read/8, error -71 [ 411.418224][T14193] usb 10-1: device descriptor read/8, error -71 [ 411.502495][T17428] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 411.525818][T17431] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5761'. [ 411.540156][T17430] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5761'. [ 411.554076][T14193] usb usb10-port1: unable to enumerate USB device [ 411.660535][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5763'. [ 412.037274][ T36] kauditd_printk_skb: 1128 callbacks suppressed [ 412.037294][ T36] audit: type=1400 audit(2000000041.215:25384): avc: denied { read write } for pid=17314 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.072358][T17446] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 412.081683][ T36] audit: type=1400 audit(2000000041.215:25385): avc: denied { read write open } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.133597][ T36] audit: type=1400 audit(2000000041.215:25386): avc: denied { ioctl } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.160490][ T36] audit: type=1400 audit(2000000041.245:25387): avc: denied { read } for pid=17445 comm="syz.9.5764" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 412.183530][ T36] audit: type=1400 audit(2000000041.245:25388): avc: denied { read open } for pid=17445 comm="syz.9.5764" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 412.208209][ T36] audit: type=1400 audit(2000000041.245:25389): avc: denied { ioctl } for pid=17445 comm="syz.9.5764" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 412.233945][ T36] audit: type=1400 audit(2000000041.245:25390): avc: denied { set_context_mgr } for pid=17445 comm="syz.9.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 412.254082][ T36] audit: type=1400 audit(2000000041.245:25391): avc: denied { read } for pid=17445 comm="syz.9.5764" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 412.277914][ T36] audit: type=1400 audit(2000000041.245:25392): avc: denied { read open } for pid=17445 comm="syz.9.5764" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 412.311762][ T36] audit: type=1400 audit(2000000041.245:25393): avc: denied { ioctl } for pid=17445 comm="syz.9.5764" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 413.131303][T17488] fuse: Unknown parameter 'gr' [ 413.137614][T17488] SELinux: policydb magic number 0x6875 does not match expected magic number 0xf97cff8c [ 413.155590][T17488] SELinux: failed to load policy [ 413.286171][T17495] 9pnet: p9_errstr2errno: server reported unknown error ottle.io_service_bytes_recursive [ 413.303767][T17492] pim6reg1: entered promiscuous mode [ 413.309369][T17492] pim6reg1: entered allmulticast mode [ 413.318373][T17492] netlink: 'syz.9.5778': attribute type 4 has an invalid length. [ 413.555205][T17500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 413.555246][T17500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 413.714678][T17508] rust_binder: Write failure EFAULT in pid:185 [ 414.077931][T17529] pim6reg1: entered promiscuous mode [ 414.113291][T17529] pim6reg1: entered allmulticast mode [ 414.298403][T17538] __vm_enough_memory: pid: 17538, comm: syz.5.5791, bytes: 18014402804453376 not enough memory for the allocation [ 414.967571][T17562] rust_binder: Write failure EFAULT in pid:27 [ 414.967874][T17560] rust_binder: Write failure EFAULT in pid:27 [ 415.251750][T17578] veth1_macvtap: left promiscuous mode [ 415.263640][T17578] macsec0: entered promiscuous mode [ 415.271614][T17578] veth1_macvtap: entered promiscuous mode [ 415.280504][T17578] macsec0: left promiscuous mode [ 415.290267][T17578] 9pnet_fd: Insufficient options for proto=fd [ 415.373732][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5807'. [ 415.453540][T14193] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 415.507542][T17591] netlink: 'syz.8.5809': attribute type 4 has an invalid length. [ 415.603531][T14193] usb 6-1: Using ep0 maxpacket: 16 [ 415.611986][T14193] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.625891][T14193] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.632662][T14193] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 415.643409][T14193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.659029][T14193] usb 6-1: config 0 descriptor?? [ 416.095978][T14193] hid-generic 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 416.119328][T17631] devpts: called with bogus options [ 416.701123][T14193] usb 6-1: USB disconnect, device number 19 [ 416.865610][T17662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5831'. [ 417.066362][ T36] kauditd_printk_skb: 529 callbacks suppressed [ 417.066381][ T36] audit: type=1400 audit(2000000046.245:25923): avc: denied { read write } for pid=17670 comm="syz.9.5834" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 417.100973][ T36] audit: type=1400 audit(2000000046.275:25924): avc: denied { read write open } for pid=17670 comm="syz.9.5834" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 417.126782][ T36] audit: type=1400 audit(2000000046.275:25925): avc: denied { create } for pid=17670 comm="syz.9.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 417.152111][ T36] audit: type=1400 audit(2000000046.335:25926): avc: denied { read write } for pid=17674 comm="syz.5.5835" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.177934][ T36] audit: type=1400 audit(2000000046.335:25927): avc: denied { read write open } for pid=17674 comm="syz.5.5835" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 417.231276][ T36] audit: type=1400 audit(2000000046.335:25928): avc: denied { create } for pid=17670 comm="syz.9.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 417.254721][ T36] audit: type=1400 audit(2000000046.395:25929): avc: denied { read write } for pid=16729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.280407][ T36] audit: type=1400 audit(2000000046.395:25930): avc: denied { read write open } for pid=16729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.308577][T17678] __vm_enough_memory: pid: 17678, comm: syz.5.5836, bytes: 18014402804453376 not enough memory for the allocation [ 417.321209][ T36] audit: type=1400 audit(2000000046.395:25931): avc: denied { ioctl } for pid=16729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.348621][ T36] audit: type=1400 audit(2000000046.405:25932): avc: denied { read write } for pid=17314 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 417.389397][T17680] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 417.508767][T17682] fuse: Bad value for 'user_id' [ 417.526325][T17682] fuse: Bad value for 'user_id' [ 417.736003][T17696] netlink: 'syz.8.5842': attribute type 63 has an invalid length. [ 417.753116][T17696] netlink: 5 bytes leftover after parsing attributes in process `syz.8.5842'. [ 417.813542][T14186] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 417.966719][T14186] usb 5-1: config 127 has an invalid interface number: 248 but max is 0 [ 417.981422][T14186] usb 5-1: config 127 has no interface number 0 [ 417.989179][T14186] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=77.41 [ 417.999168][T14186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.141969][T17713] rust_binder: 247: no such ref 3 [ 418.147283][T17713] rust_binder: Write failure EINVAL in pid:247 [ 418.215498][T14192] usb 5-1: USB disconnect, device number 29 [ 418.601517][T17739] rust_binder: Error in use_page_slow: ESRCH [ 418.601543][T17739] rust_binder: use_range failure ESRCH [ 418.617933][T17739] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 418.623462][T17739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 418.643577][T17739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:261 [ 418.857720][T17747] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131 [ 419.047825][T17751] rust_binder: Write failure EFAULT in pid:71 [ 419.283558][T17760] rust_binder: 73: no such ref 2 [ 419.370262][T17760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 419.639842][T17774] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 419.675120][T17773] pim6reg1: entered promiscuous mode [ 419.680580][T17773] pim6reg1: entered allmulticast mode [ 419.683616][T17774] rust_binder: Write failure EINVAL in pid:272 [ 419.696275][T17775] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.226231][T17796] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5877'. [ 420.503567][T14186] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 420.655967][T14186] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 420.667368][T14186] usb 5-1: config 0 interface 0 has no altsetting 0 [ 420.674307][T14186] usb 5-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 420.683449][T14186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.693450][T14186] usb 5-1: config 0 descriptor?? [ 420.835230][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5879'. [ 421.174834][T17802] devpts: called with bogus options [ 421.200231][T14186] usbhid 5-1:0.0: can't add hid device: -71 [ 421.220917][T14186] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 421.234646][T14186] usb 5-1: USB disconnect, device number 30 [ 421.523579][T14193] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 421.694422][T14193] usb 10-1: Using ep0 maxpacket: 8 [ 421.724556][T14193] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 421.753544][T14193] usb 10-1: config 1 has no interface number 1 [ 421.760352][T14193] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 421.804726][T17835] 9pnet_fd: Insufficient options for proto=fd [ 421.823114][T14193] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.863526][T14193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.871919][T14193] usb 10-1: Product: ⠊ [ 421.886570][T14193] usb 10-1: Manufacturer: ࠄ [ 421.891364][T14193] usb 10-1: SerialNumber: 靼ᕳ쾦⣶ဨ楘咠⠭ẹ螎ප蝋鮯ᶷ靻ԟ숄╣鮖铖힊蝮⡢鄸銎麇↪䥨㕔짧䰅筬䢭೛捗뢉 [ 422.085470][ T36] kauditd_printk_skb: 783 callbacks suppressed [ 422.085490][ T36] audit: type=1400 audit(2000000051.265:26716): avc: denied { mount } for pid=17848 comm="syz.8.5895" name="/" dev="ramfs" ino=79083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.140361][ T36] audit: type=1400 audit(2000000051.305:26717): avc: denied { read write } for pid=17850 comm="syz.4.5897" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.191079][ T36] audit: type=1400 audit(2000000051.305:26718): avc: denied { read write open } for pid=17850 comm="syz.4.5897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.225438][ T36] audit: type=1400 audit(2000000051.305:26719): avc: denied { ioctl } for pid=17850 comm="syz.4.5897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.252334][ T36] audit: type=1400 audit(2000000051.305:26720): avc: denied { ioctl } for pid=17850 comm="syz.4.5897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.277847][ T36] audit: type=1400 audit(2000000051.315:26721): avc: denied { ioctl } for pid=17820 comm="syz.9.5887" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.303458][ T36] audit: type=1400 audit(2000000051.315:26722): avc: denied { ioctl } for pid=17820 comm="syz.9.5887" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.340087][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.349837][ T36] audit: type=1400 audit(2000000051.315:26723): avc: denied { ioctl } for pid=17850 comm="syz.4.5897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.377039][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.387469][ T36] audit: type=1400 audit(2000000051.315:26724): avc: denied { ioctl } for pid=17850 comm="syz.4.5897" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.409650][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.413739][ T36] audit: type=1400 audit(2000000051.355:26725): avc: denied { read write } for pid=16729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 422.421951][T14184] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 422.472728][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.478689][T17860] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5899'. [ 422.623541][T14184] usb 5-1: device descriptor read/64, error -71 [ 422.687130][T14193] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 422.707786][T14193] usb 10-1: USB disconnect, device number 11 [ 422.843354][T17366] udevd[17366]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.883548][T14184] usb 5-1: device descriptor read/64, error -71 [ 423.123567][T14184] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 423.174543][T11903] Bluetooth: hci0: Frame reassembly failed (-84) [ 423.245308][T17891] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 423.245337][T17891] rust_binder: Error while translating object. [ 423.258369][T17891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 423.265416][T14184] usb 5-1: device descriptor read/64, error -71 [ 423.271842][T17891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 423.395302][T17899] __vm_enough_memory: pid: 17899, comm: syz.9.5911, bytes: 18014402804453376 not enough memory for the allocation [ 423.469672][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5912'. [ 423.513669][T14184] usb 5-1: device descriptor read/64, error -71 [ 423.601938][T17904] netlink: 2 bytes leftover after parsing attributes in process `syz.9.5913'. [ 423.624726][T14184] usb usb5-port1: attempt power cycle [ 423.633930][T17904] rust_binder: Failed to allocate buffer. len:120, is_oneway:true [ 423.963559][T14184] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 424.007549][T14184] usb 5-1: device descriptor read/8, error -71 [ 424.156155][T14184] usb 5-1: device descriptor read/8, error -71 [ 424.393555][T14184] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 424.416879][T14184] usb 5-1: device descriptor read/8, error -71 [ 424.556850][T14184] usb 5-1: device descriptor read/8, error -71 [ 424.674284][T14184] usb usb5-port1: unable to enumerate USB device [ 424.726494][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5915'. [ 425.234421][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 425.240494][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 425.253653][T17888] can0: slcan on ptm0. [ 425.298820][T17889] can0 (unregistered): slcan off ptm0. [ 425.760902][T17921] rust_binder: Write failure EFAULT in pid:112 [ 426.978506][T17942] netlink: 'syz.9.5925': attribute type 27 has an invalid length. [ 427.094786][ T36] kauditd_printk_skb: 433 callbacks suppressed [ 427.094805][ T36] audit: type=1400 audit(2000000056.275:27159): avc: denied { read write } for pid=17314 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.155435][ T36] audit: type=1400 audit(2000000056.305:27160): avc: denied { read write open } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.233657][ T36] audit: type=1400 audit(2000000056.305:27161): avc: denied { ioctl } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.320323][ T36] audit: type=1400 audit(2000000056.365:27162): avc: denied { read write } for pid=16729 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.375299][ T36] audit: type=1400 audit(2000000056.365:27163): avc: denied { read write open } for pid=16729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.431231][ T36] audit: type=1400 audit(2000000056.365:27164): avc: denied { ioctl } for pid=16729 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.495639][ T36] audit: type=1400 audit(2000000056.405:27165): avc: denied { read write } for pid=17949 comm="syz.9.5927" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 427.519274][ T36] audit: type=1400 audit(2000000056.405:27166): avc: denied { read write open } for pid=17949 comm="syz.9.5927" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 427.543897][ T36] audit: type=1326 audit(2000000056.415:27167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17949 comm="syz.9.5927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8df418ebe9 code=0x80000000 [ 427.567816][T14193] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 427.575953][ T36] audit: type=1400 audit(2000000056.445:27168): avc: denied { read write } for pid=17951 comm="syz.5.5928" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 427.753678][T14193] usb 6-1: Using ep0 maxpacket: 32 [ 427.773962][T14193] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.793726][T14193] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.813537][T14193] usb 6-1: config 0 interface 0 has no altsetting 0 [ 427.830591][T14193] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 427.843544][T14193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.866054][T14193] usb 6-1: config 0 descriptor?? [ 428.323329][T17975] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5932'. [ 428.355891][T17974] binder: Unknown parameter 'context' [ 428.485639][T17980] loop7: detected capacity change from 0 to 7 [ 428.633543][T14193] usbhid 6-1:0.0: can't add hid device: -71 [ 428.644704][T14193] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 428.654032][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 428.664152][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 428.715934][T14193] usb 6-1: USB disconnect, device number 20 [ 429.007196][ T8062] bridge_slave_1: left allmulticast mode [ 429.013006][ T8062] bridge_slave_1: left promiscuous mode [ 429.025669][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.040466][ T8062] bridge_slave_0: left allmulticast mode [ 429.048132][ T8062] bridge_slave_0: left promiscuous mode [ 429.055234][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.457311][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.483518][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.493570][T18000] bridge_slave_0: entered allmulticast mode [ 429.499991][T18000] bridge_slave_0: entered promiscuous mode [ 429.510760][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.518138][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.525417][T18000] bridge_slave_1: entered allmulticast mode [ 429.531833][T18000] bridge_slave_1: entered promiscuous mode [ 429.843162][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.850313][T18000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.857675][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.865008][T18000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.943288][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.952016][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.969018][ T8062] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.976215][ T8062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.983958][T14193] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 429.999321][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.006523][ T8076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.113221][T18000] veth0_vlan: entered promiscuous mode [ 430.143526][T14193] usb 10-1: Using ep0 maxpacket: 32 [ 430.157958][T14193] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 430.161574][T18000] veth1_macvtap: entered promiscuous mode [ 430.176324][T14193] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.195324][T14193] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.214670][T14193] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.225381][T14193] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.236427][T14193] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.251761][T14193] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.262162][T14193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.275852][T14193] usb 10-1: config 0 descriptor?? [ 430.497606][T14193] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 430.544259][T14193] usb 10-1: USB disconnect, device number 12 [ 430.562939][T14193] usblp0: removed [ 430.628107][T14184] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 430.818151][T14184] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.843538][T14184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.852543][T14184] usb 2-1: Product: syz [ 430.860028][T14184] usb 2-1: Manufacturer: syz [ 430.867512][T14184] usb 2-1: SerialNumber: syz [ 431.182596][T18086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.280105][T18086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.346146][T18051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.389407][T18051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.129698][ T36] kauditd_printk_skb: 545 callbacks suppressed [ 432.129734][ T36] audit: type=1400 audit(2000000061.305:27714): avc: denied { read append } for pid=18094 comm="syz.9.5974" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.129917][T18095] loop2: detected capacity change from 0 to 7 [ 432.143569][ T36] audit: type=1400 audit(2000000061.305:27715): avc: denied { read append open } for pid=18094 comm="syz.9.5974" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.179477][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.194293][ T36] audit: type=1400 audit(2000000061.305:27716): avc: denied { read append } for pid=18094 comm="syz.9.5974" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.200915][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.225323][ T36] audit: type=1400 audit(2000000061.305:27717): avc: denied { read append open } for pid=18094 comm="syz.9.5974" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.243289][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.260755][T14188] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.268177][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.283765][T18095] loop2: unable to read partition table [ 432.293233][T18095] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 432.316789][ T36] audit: type=1400 audit(2000000061.305:27718): avc: denied { ioctl } for pid=18094 comm="syz.9.5974" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 432.317595][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.352075][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.352327][ T36] audit: type=1400 audit(2000000061.405:27719): avc: denied { ioctl } for pid=18084 comm="syz.4.5971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.366478][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 432.397563][ T36] audit: type=1400 audit(2000000061.465:27720): avc: denied { ioctl } for pid=18084 comm="syz.4.5971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.398068][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.425464][ T36] audit: type=1400 audit(2000000061.475:27721): avc: denied { ioctl } for pid=18084 comm="syz.4.5971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.432845][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.461106][ T36] audit: type=1400 audit(2000000061.475:27722): avc: denied { ioctl } for pid=18084 comm="syz.4.5971" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.476894][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.501593][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.513556][T14188] usb 5-1: Using ep0 maxpacket: 8 [ 432.534995][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.543790][ T36] audit: type=1400 audit(2000000061.525:27723): avc: denied { ioctl } for pid=18050 comm="syz.1.5944" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 432.544575][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.591322][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.591869][T18051] rust_binder: Write failure EINVAL in pid:2 [ 432.600649][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 432.653524][T14188] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 432.661699][T14188] usb 5-1: config 0 has no interface number 0 [ 432.673653][T14184] cdc_ncm 2-1:1.0: failed to get mac address [ 432.688726][T14184] cdc_ncm 2-1:1.0: bind() failure [ 432.707457][T14188] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 432.733555][T14184] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 432.743512][T14188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.755264][T14184] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 432.774552][T14188] usb 5-1: Product: syz [ 432.778796][T14188] usb 5-1: Manufacturer: syz [ 432.786595][T14184] usb 2-1: USB disconnect, device number 27 [ 432.798309][T14188] usb 5-1: SerialNumber: syz [ 432.819202][T14188] usb 5-1: config 0 descriptor?? [ 432.908708][T18111] netlink: 'syz.8.5979': attribute type 11 has an invalid length. [ 432.917151][T18111] netlink: 'syz.8.5979': attribute type 1 has an invalid length. [ 432.943620][T18111] netlink: 3593 bytes leftover after parsing attributes in process `syz.8.5979'. [ 433.044378][T18122] FAT-fs (rnullb0): bogus number of reserved sectors [ 433.051214][T18122] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 433.059906][T14188] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 433.073847][T14188] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 433.082794][T14188] usb 5-1: Failed to create links for entity 5 [ 433.120381][T14188] usb 5-1: Failed to register entities (-22). [ 433.145796][T14188] usb 5-1: USB disconnect, device number 35 [ 433.204378][T18126] bridge0: entered allmulticast mode [ 433.234814][T18126] rust_binder: 182: no such ref 0 [ 433.262572][T18126] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 433.288025][T18126] rust_binder: 182: no such ref 0 [ 433.933563][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 434.086141][ T31] usb 2-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config [ 434.100019][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 434.110303][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.134565][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.144358][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.153356][ T31] usb 2-1: Product: syz [ 434.159329][ T31] usb 2-1: Manufacturer: syz [ 434.164615][ T31] usb 2-1: SerialNumber: syz [ 434.405576][ T31] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 434.407651][T18175] rust_binder: Error while translating object. [ 434.412599][ T31] cdc_ncm 2-1:1.0: bind() failure [ 434.424334][T18175] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 434.424368][T18175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 434.434071][ T31] usb 2-1: USB disconnect, device number 28 [ 434.741578][T18179] tc_dump_action: action bad kind [ 434.759457][T18179] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 434.832342][T14184] rust_binder: 18184: removing orphan mapping 0:24 [ 435.207009][T18211] 9pnet_fd: Insufficient options for proto=fd [ 435.375922][T18228] netlink: 80 bytes leftover after parsing attributes in process `syz.8.6019'. [ 435.403554][ T31] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 435.554919][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 435.563066][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.573374][ T31] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 435.581676][ T31] usb 5-1: config 0 has no interface number 0 [ 435.587946][T14193] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 435.596173][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 435.607642][ T31] usb 5-1: config 0 interface 88 has no altsetting 0 [ 435.620507][ T31] usb 5-1: string descriptor 0 read error: -22 [ 435.626855][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 435.636620][ T31] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 435.646472][ T31] usb 5-1: config 0 descriptor?? [ 435.656610][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input38 [ 435.767103][T14193] usb 10-1: config index 0 descriptor too short (expected 7768, got 18) [ 435.775972][T14193] usb 10-1: config 0 has an invalid interface number: 90 but max is 0 [ 435.785422][T14193] usb 10-1: config 0 has no interface number 0 [ 435.792124][T14193] usb 10-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 435.802942][T14193] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.813620][T14193] usb 10-1: config 0 descriptor?? [ 435.835960][T14193] ftdi_sio 10-1:0.90: FTDI USB Serial Device converter detected [ 435.854519][T14193] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 435.875335][T14184] usb 5-1: USB disconnect, device number 36 [ 436.192719][T18244] tipc: Enabling of bearer rejected, failed to enable media [ 436.298031][T18254] rust_binder: Error while translating object. [ 436.298088][T18254] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 436.305095][T18254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 437.182391][ T36] kauditd_printk_skb: 758 callbacks suppressed [ 437.182413][ T36] audit: type=1400 audit(2000000073.351:28482): avc: denied { create } for pid=18278 comm="syz.8.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.187273][T18279] fuse: Unknown parameter '' [ 437.200488][ T36] audit: type=1400 audit(2000000073.351:28483): avc: denied { mounton } for pid=18278 comm="syz.8.6035" path="/214/file0" dev="tmpfs" ino=1154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 437.281878][ T36] audit: type=1400 audit(2000000073.411:28484): avc: denied { create } for pid=18278 comm="syz.8.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.329297][ T36] audit: type=1400 audit(2000000073.411:28485): avc: denied { listen } for pid=18278 comm="syz.8.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 437.375283][ T36] audit: type=1400 audit(2000000073.411:28486): avc: denied { create } for pid=18278 comm="syz.8.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.440126][ T36] audit: type=1400 audit(2000000073.411:28487): avc: denied { ioctl } for pid=18278 comm="syz.8.6035" path="socket:[81707]" dev="sockfs" ino=81707 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.515644][ T36] audit: type=1400 audit(2000000073.481:28488): avc: denied { read write } for pid=18000 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.569101][ T36] audit: type=1400 audit(2000000073.481:28489): avc: denied { read write open } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.616098][ T36] audit: type=1400 audit(2000000073.481:28490): avc: denied { ioctl } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.656051][T18291] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 437.664390][T18287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 437.675099][ T36] audit: type=1400 audit(2000000073.541:28491): avc: denied { create } for pid=18280 comm="syz.1.6037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.716138][T18287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 437.727525][ T31] rust_binder: 18286: removing orphan mapping 0:24 [ 437.996101][T18308] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6045'. [ 438.046724][T18310] tipc: Started in network mode [ 438.053547][T18310] tipc: Node identity 9eb1ae90ea8d, cluster identity 4711 [ 438.062930][T18310] tipc: Enabled bearer , priority 0 [ 438.094302][T18309] tipc: Disabling bearer [ 438.331725][ T31] usb 10-1: USB disconnect, device number 13 [ 438.351785][ T31] ftdi_sio 10-1:0.90: device disconnected [ 438.539672][T18323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239 [ 438.857702][T18334] rust_binder: 243: no such ref 19 [ 438.892277][T18334] rust_binder: Read failure Err(EAGAIN) in pid:243 [ 438.973675][ T8062] Bluetooth: hci0: Frame reassembly failed (-84) [ 439.063061][T18347] block device autoloading is deprecated and will be removed. [ 439.221303][T18353] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 439.343558][T14184] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 439.499798][T14184] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 439.509592][T14184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.517652][T14184] usb 5-1: Product: syz [ 439.521926][T14184] usb 5-1: Manufacturer: syz [ 439.526667][T14184] usb 5-1: SerialNumber: syz [ 439.963334][T14184] rtl8150 5-1:1.0: couldn't reset the device [ 439.969513][T14184] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 439.979569][T14184] usb 5-1: USB disconnect, device number 37 [ 440.333673][T18360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:63 [ 440.630609][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6070'. [ 440.993543][ T364] Bluetooth: hci0: command 0x1003 tx timeout [ 440.999909][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 441.413522][T14193] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 441.573567][T14193] usb 10-1: Using ep0 maxpacket: 32 [ 441.587191][T14193] usb 10-1: unable to get BOS descriptor or descriptor too short [ 441.604895][T14193] usb 10-1: config 7 has an invalid interface number: 128 but max is 0 [ 441.616243][T14193] usb 10-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 441.626075][T14193] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 441.637825][T14193] usb 10-1: config 7 has no interface number 0 [ 441.641871][T18417] pim6reg1: entered promiscuous mode [ 441.646051][T14193] usb 10-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 441.650104][T18417] pim6reg1: entered allmulticast mode [ 441.663172][T14193] usb 10-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 441.678814][T14193] usb 10-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 441.690717][T14193] usb 10-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 441.707352][T14193] usb 10-1: config 7 interface 128 has no altsetting 0 [ 441.719023][T14193] usb 10-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 441.729645][T14193] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.737860][T14193] usb 10-1: Product: syz [ 441.742215][T14193] usb 10-1: Manufacturer: syz [ 441.746981][T14193] usb 10-1: SerialNumber: syz [ 441.760709][T18400] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 441.860775][T18422] netlink: 'syz.4.6081': attribute type 4 has an invalid length. [ 441.908778][T18424] binder: Bad value for 'max' [ 441.980465][T18400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.989509][T18400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.002619][T14193] usb 10-1: MIDIStreaming interface descriptor not found [ 442.021285][T14193] usb 10-1: USB disconnect, device number 14 [ 442.066759][T17822] udevd[17822]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.128/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 442.163580][T14184] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 442.245692][ T36] kauditd_printk_skb: 1727 callbacks suppressed [ 442.245713][ T36] audit: type=1400 audit(2000000078.421:30219): avc: denied { ioctl } for pid=18423 comm="syz.4.6082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.303524][T14184] usb 5-1: device descriptor read/64, error -71 [ 442.311816][ T36] audit: type=1400 audit(2000000078.481:30220): avc: denied { read write } for pid=18000 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.363514][ T36] audit: type=1400 audit(2000000078.481:30221): avc: denied { read write open } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.392222][ T36] audit: type=1400 audit(2000000078.481:30222): avc: denied { ioctl } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.423266][ T36] audit: type=1400 audit(2000000078.541:30223): avc: denied { read write } for pid=18000 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.449376][ T36] audit: type=1400 audit(2000000078.541:30224): avc: denied { read write open } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.478209][ T36] audit: type=1400 audit(2000000078.541:30225): avc: denied { ioctl } for pid=18000 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.504683][ T36] audit: type=1400 audit(2000000078.601:30226): avc: denied { ioctl } for pid=18423 comm="syz.4.6082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.532029][ T36] audit: type=1400 audit(2000000078.601:30227): avc: denied { ioctl } for pid=18423 comm="syz.4.6082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.559202][ T36] audit: type=1400 audit(2000000078.601:30228): avc: denied { ioctl } for pid=18423 comm="syz.4.6082" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.584981][T14184] usb 5-1: device descriptor read/64, error -71 [ 442.823556][T14184] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 442.963565][T14184] usb 5-1: device descriptor read/64, error -71 [ 443.203568][T14184] usb 5-1: device descriptor read/64, error -71 [ 443.314324][T14184] usb usb5-port1: attempt power cycle [ 443.570981][T18454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6092'. [ 443.633507][ T8057] Bluetooth: hci0: Frame reassembly failed (-84) [ 443.640034][ T8076] Bluetooth: hci0: Frame reassembly failed (-84) [ 443.663608][T14184] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 443.686807][T14184] usb 5-1: device descriptor read/8, error -71 [ 443.816286][T14184] usb 5-1: device descriptor read/8, error -71 [ 444.053583][T14184] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 444.076125][T14184] usb 5-1: device descriptor read/8, error -71 [ 444.206153][T14184] usb 5-1: device descriptor read/8, error -71 [ 444.313642][T14184] usb usb5-port1: unable to enumerate USB device [ 445.009455][T18486] x_tables: duplicate entry at hook 1 [ 445.637477][T18501] netlink: 165 bytes leftover after parsing attributes in process `syz.8.6107'. [ 445.643593][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 445.648019][T18501] netlink: 'syz.8.6107': attribute type 16 has an invalid length. [ 445.993526][ T31] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 446.196702][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.217942][ T31] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 446.253524][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.267574][ T31] usb 10-1: config 0 descriptor?? [ 446.481000][ T31] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 446.493576][ T31] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 446.510765][ T31] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 446.524161][ T31] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 446.531354][ T31] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 446.567244][ T31] holtek 0003:1241:5015.0019: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.9-1/input0 [ 446.590264][ T31] holtek 0003:1241:5015.0019: no inputs found [ 446.598453][T18538] rust_binder: 272: no such ref 2 [ 446.608234][T18538] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 446.633576][T18538] rust_binder: 272: no such ref 2 [ 446.642527][T18538] rust_binder: 272: no such ref 4294967293 [ 446.655005][T18542] rust_binder: 272: no such ref 0 [ 446.662762][T18538] rust_binder: 272: no such ref 3 [ 446.689987][ T45] usb 10-1: USB disconnect, device number 15 [ 446.747122][T18541] fido_id[18541]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 447.199755][T18576] veth1: entered allmulticast mode [ 447.215268][T18576] fuse: Bad value for 'fd' [ 447.220293][T18575] veth1: left allmulticast mode [ 447.253527][ T36] kauditd_printk_skb: 411 callbacks suppressed [ 447.253547][ T36] audit: type=1400 audit(2000000083.421:30640): avc: denied { read write } for pid=17314 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.286774][T18578] netlink: 'syz.9.6132': attribute type 4 has an invalid length. [ 447.343526][ T36] audit: type=1400 audit(2000000083.421:30641): avc: denied { read write open } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.350875][T18582] 9pnet_fd: Insufficient options for proto=fd [ 447.369349][ T36] audit: type=1400 audit(2000000083.421:30642): avc: denied { ioctl } for pid=17314 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 447.415634][ T36] audit: type=1400 audit(2000000083.451:30643): avc: denied { read write } for pid=18577 comm="syz.9.6132" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 447.440418][ T36] audit: type=1400 audit(2000000083.451:30644): avc: denied { read write open } for pid=18577 comm="syz.9.6132" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 447.488613][ T36] audit: type=1400 audit(2000000083.451:30645): avc: denied { read write } for pid=18577 comm="syz.9.6132" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 447.543184][ T36] audit: type=1400 audit(2000000083.451:30646): avc: denied { read open } for pid=18577 comm="syz.9.6132" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 447.548100][T18589] rust_binder: Error while translating object. [ 447.573559][ T36] audit: type=1400 audit(2000000083.451:30647): avc: denied { ioctl } for pid=18577 comm="syz.9.6132" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 447.598270][T18595] audit: audit_backlog=65 > audit_backlog_limit=64 [ 447.606693][T18589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 447.611850][T18589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:275 [ 447.621789][T18595] audit: audit_lost=61 audit_rate_limit=0 audit_backlog_limit=64 [ 447.835175][T18619] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6143'. [ 448.147158][T18644] pim6reg1: entered promiscuous mode [ 448.152773][T18644] pim6reg1: entered allmulticast mode [ 448.330101][T18653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.360278][T18653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.140963][T18708] rust_binder: Write failure EFAULT in pid:316 [ 450.146150][T18708] rust_binder: Write failure EFAULT in pid:316 [ 450.337867][T18722] rust_binder: 329: no such ref 1 [ 450.349550][T18722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:329 [ 450.445743][T18726] netlink: 157 bytes leftover after parsing attributes in process `syz.4.6177'. [ 450.578824][T18733] x_tables: duplicate underflow at hook 2 [ 450.588860][T18733] netlink: 995 bytes leftover after parsing attributes in process `syz.8.6180'. [ 450.858019][T18742] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 451.223638][T18750] fuseblk: Unknown parameter 'erouM_i' [ 451.224114][T18751] fuseblk: Unknown parameter 'erouM_i' [ 451.330194][T18757] 9pnet_fd: Insufficient options for proto=fd [ 451.902901][T18802] fuse: Unknown parameter 'r1[ootmode' [ 451.923531][ T31] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 452.083549][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 452.091083][ T31] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 452.099463][ T31] usb 5-1: config 0 has no interface number 0 [ 452.105616][ T31] usb 5-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 452.115642][ T31] usb 5-1: config 0 interface 137 has no altsetting 0 [ 452.125640][ T31] usb 5-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 452.134894][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.143037][ T31] usb 5-1: Product: syz [ 452.147240][ T31] usb 5-1: Manufacturer: syz [ 452.151856][ T31] usb 5-1: SerialNumber: syz [ 452.158444][ T31] usb 5-1: config 0 descriptor?? [ 452.167552][ T31] ftdi_sio 5-1:0.137: FTDI USB Serial Device converter detected [ 452.176866][ T31] usb 5-1: Detected SIO [ 452.181167][ T31] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 452.190339][ T31] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 452.336586][ T36] kauditd_printk_skb: 990 callbacks suppressed [ 452.336606][ T36] audit: type=1326 audit(2000000088.511:31625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.366797][ T36] audit: type=1326 audit(2000000088.511:31626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.390659][ T36] audit: type=1326 audit(2000000088.511:31627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.414951][ T36] audit: type=1400 audit(2000000088.511:31628): avc: denied { create } for pid=18813 comm="syz.8.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.434960][ T36] audit: type=1326 audit(2000000088.511:31629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.459653][ T36] audit: type=1326 audit(2000000088.511:31630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.473617][T18820] netlink: 428 bytes leftover after parsing attributes in process `syz.8.6208'. [ 452.484393][ T36] audit: type=1400 audit(2000000088.511:31631): avc: denied { connect } for pid=18813 comm="syz.8.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 452.512351][ T36] audit: type=1326 audit(2000000088.511:31632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.536409][ T36] audit: type=1326 audit(2000000088.511:31633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18813 comm="syz.8.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb56f18ebe9 code=0x7ffc0000 [ 452.545122][ T31] usb 5-1: USB disconnect, device number 42 [ 452.560367][ T36] audit: type=1400 audit(2000000088.511:31634): avc: denied { create } for pid=18813 comm="syz.8.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 452.576926][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 452.599181][ T31] ftdi_sio 5-1:0.137: device disconnected [ 452.636758][T18822] FAT-fs (rnullb0): bogus number of reserved sectors [ 452.643585][T18822] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 452.822906][T18827] random: crng reseeded on system resumption [ 453.205496][T18847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 453.205532][T18847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:316 [ 453.373044][T18856] overlayfs: failed to clone upperpath [ 454.296939][T18889] pim6reg1: entered promiscuous mode [ 454.302587][T18889] pim6reg1: entered allmulticast mode [ 455.108328][T18909] bpf: Bad value for 'gid' [ 455.361602][T18920] erofs: (device loop9): erofs_read_superblock: cannot find valid erofs superblock [ 455.381954][T18920] binder: Unknown parameter 'fscontext?}' [ 455.578516][T18942] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 455.587291][T18942] SELinux: failed to load policy [ 455.713802][T18951] veth0_vlan: entered allmulticast mode [ 455.727097][T18951] FAT-fs (rnullb0): bogus number of reserved sectors [ 455.734212][T18951] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 456.047398][T18965] loop2: detected capacity change from 0 to 7 [ 456.074035][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.083242][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.096831][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.106064][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.114083][T18965] loop2: unable to read partition table [ 456.141130][T18965] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 456.155549][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.165052][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.183128][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.192361][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.201494][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.210712][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.218509][T18970] tipc: Started in network mode [ 456.222192][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.223885][T18970] tipc: Node identity ff020000000000000000000000000001, cluster identity 4 [ 456.233128][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.241856][T18970] tipc: Enabling of bearer rejected, failed to enable media [ 456.252673][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 456.263672][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 456.267578][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 456.343533][ T31] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 456.493557][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 456.501915][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 456.511697][ T31] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 456.520013][ T31] usb 5-1: config 0 has no interface number 0 [ 456.526388][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 456.537459][ T31] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 456.547369][ T31] usb 5-1: config 0 interface 88 has no altsetting 0 [ 456.558756][ T31] usb 5-1: string descriptor 0 read error: -22 [ 456.565134][ T31] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 456.574230][ T31] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 456.584288][ T31] usb 5-1: config 0 descriptor?? [ 456.593747][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input39 [ 456.733069][T17366] udevd[17366]: Error opening device "/dev/input/event3": Input/output error [ 456.742275][T17366] udevd[17366]: Unable to EVIOCGABS device "/dev/input/event3" [ 456.750523][T17366] udevd[17366]: Unable to EVIOCGABS device "/dev/input/event3" [ 456.992742][T18974] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.003256][T18974] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 457.012666][T18974] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.021653][T18974] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 457.106669][T18975] 9pnet_fd: Insufficient options for proto=fd [ 457.316689][ T45] usb 5-1: USB disconnect, device number 43 [ 457.366253][ T36] kauditd_printk_skb: 642 callbacks suppressed [ 457.366273][ T36] audit: type=1400 audit(2000000093.541:32277): avc: denied { mounton } for pid=18984 comm="syz.8.6264" path="/259" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 457.442425][ T36] audit: type=1400 audit(2000000093.541:32278): avc: denied { mount } for pid=18984 comm="syz.8.6264" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 457.501311][ T36] audit: type=1400 audit(2000000093.671:32279): avc: denied { create } for pid=18976 comm="syz.9.6261" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.528362][ T36] audit: type=1400 audit(2000000093.671:32280): avc: denied { ioctl } for pid=18976 comm="syz.9.6261" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86048 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.538700][T18977] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6261'. [ 457.556020][ T36] audit: type=1400 audit(2000000093.671:32281): avc: denied { ioctl } for pid=18976 comm="syz.9.6261" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86048 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.591733][ T36] audit: type=1400 audit(2000000093.711:32282): avc: denied { ioctl } for pid=18976 comm="syz.9.6261" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86048 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 457.620283][ T36] audit: type=1400 audit(2000000093.711:32283): avc: denied { create } for pid=18976 comm="syz.9.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.658061][ T36] audit: type=1400 audit(2000000093.711:32284): avc: denied { write } for pid=18976 comm="syz.9.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.679615][ T36] audit: type=1400 audit(2000000093.711:32285): avc: denied { nlmsg_write } for pid=18976 comm="syz.9.6261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.701875][ T36] audit: type=1400 audit(2000000093.751:32286): avc: denied { map } for pid=18976 comm="syz.9.6261" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 457.817930][T18992] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 457.826454][T18992] rust_binder: Write failure EINVAL in pid:371 [ 457.901573][T18996] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6268'. [ 458.131722][T19006] pids.events: Can't lookup blockdev [ 458.256496][T19013] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 458.257211][T19015] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:384 [ 458.535515][T19031] overlayfs: conflicting options: nfs_export=on,index=off [ 458.677084][T19027] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6277'. [ 458.704046][T19027] erspan0: default FDB implementation only supports local addresses [ 458.719052][T19040] binder: Bad value for 'max' [ 459.307698][T19089] overlay: ./file1 is not a directory [ 459.585275][ T8062] bridge_slave_1: left allmulticast mode [ 459.591318][ T8062] bridge_slave_1: left promiscuous mode [ 459.598307][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.607347][ T8062] bridge_slave_0: left allmulticast mode [ 459.613249][ T8062] bridge_slave_0: left promiscuous mode [ 459.620662][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.655023][ T8062] bridge0 (unregistering): left allmulticast mode [ 459.748072][ T8062] veth1_macvtap: left promiscuous mode [ 459.885492][T19093] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.903967][T19093] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.911098][T19093] bridge_slave_0: entered allmulticast mode [ 459.927786][T19093] bridge_slave_0: entered promiscuous mode [ 459.943302][T19093] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.960752][T19093] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.967953][T19093] bridge_slave_1: entered allmulticast mode [ 459.975696][T19093] bridge_slave_1: entered promiscuous mode [ 460.144803][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.152807][ T8062] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.205615][T19115] rust_binder: Write failure EFAULT in pid:400 [ 460.285536][T19117] 9pnet_fd: Insufficient options for proto=fd [ 460.314625][ T8062] tipc: Left network mode [ 460.405224][T19117] veth1: entered allmulticast mode [ 460.415485][T19116] veth1: left allmulticast mode [ 460.433935][T19093] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.441055][T19093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.448847][T19093] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.455937][T19093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.514893][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.522410][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.564824][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.571919][T11903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.575835][T19129] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6309'. [ 460.586247][T11903] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.595816][T11903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.596459][T19129] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6309'. [ 460.604234][T14186] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 460.715800][T19093] veth0_vlan: entered promiscuous mode [ 460.770203][T19093] veth1_macvtap: entered promiscuous mode [ 460.783542][T14186] usb 5-1: Using ep0 maxpacket: 32 [ 460.794617][T14186] usb 5-1: config 0 has an invalid interface number: 137 but max is 0 [ 460.803508][T14186] usb 5-1: config 0 has no interface number 0 [ 460.809723][T14186] usb 5-1: config 0 interface 137 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 460.828951][T14186] usb 5-1: config 0 interface 137 has no altsetting 0 [ 460.841814][T14186] usb 5-1: New USB device found, idVendor=0c52, idProduct=2861, bcdDevice= 1.37 [ 460.856160][T14186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.870564][T14186] usb 5-1: Product: syz [ 460.875847][T14186] usb 5-1: Manufacturer: syz [ 460.880795][T14186] usb 5-1: SerialNumber: syz [ 460.893829][T14186] usb 5-1: config 0 descriptor?? [ 460.906861][T14186] ftdi_sio 5-1:0.137: FTDI USB Serial Device converter detected [ 460.933650][T14186] usb 5-1: Detected SIO [ 460.941330][T14186] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 8 [ 460.972681][T14186] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 461.245456][T19163] @: renamed from vlan0 (while UP) [ 461.600375][T19197] overlayfs: failed to clone upperpath [ 461.607561][T19198] overlayfs: failed to clone upperpath [ 461.627509][T14188] usb 5-1: USB disconnect, device number 44 [ 461.649509][T14188] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 461.669152][T14188] ftdi_sio 5-1:0.137: device disconnected [ 461.727263][T19204] overlayfs: failed to resolve './file1': -2 [ 461.967293][T19219] overlay: Bad value for 'uuid' [ 462.415019][ T36] kauditd_printk_skb: 1156 callbacks suppressed [ 462.415040][ T36] audit: type=1400 audit(2000000098.591:33443): avc: denied { create } for pid=19225 comm="syz.0.6341" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.463569][ T36] audit: type=1400 audit(2000000098.621:33444): avc: denied { ioctl } for pid=19225 comm="syz.0.6341" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87422 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.494667][ T36] audit: type=1400 audit(2000000098.621:33445): avc: denied { ioctl } for pid=19225 comm="syz.0.6341" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=87422 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 462.563512][ T36] audit: type=1400 audit(2000000098.621:33446): avc: denied { create } for pid=19225 comm="syz.0.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.601239][T19231] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 462.601276][T19231] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:22 [ 462.603525][ T36] audit: type=1400 audit(2000000098.621:33447): avc: denied { create } for pid=19225 comm="syz.0.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 462.664967][T19234] fuse: Bad value for 'group_id' [ 462.670146][T19234] fuse: Bad value for 'group_id' [ 462.701475][ T36] audit: type=1400 audit(2000000098.631:33448): avc: denied { read write } for pid=19225 comm="syz.0.6341" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 462.750985][ T36] audit: type=1400 audit(2000000098.631:33449): avc: denied { read write open } for pid=19225 comm="syz.0.6341" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 462.789338][ T36] audit: type=1400 audit(2000000098.641:33450): avc: denied { read write } for pid=19225 comm="syz.0.6341" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 462.825539][ T36] audit: type=1400 audit(2000000098.641:33451): avc: denied { read open } for pid=19225 comm="syz.0.6341" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 462.892388][ T36] audit: type=1400 audit(2000000098.641:33452): avc: denied { read } for pid=19225 comm="syz.0.6341" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 463.067053][T19260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 463.067095][T19260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:418 [ 463.213147][T19271] rust_binder: Failed copying remainder into alloc: EFAULT [ 463.224073][T19271] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 463.232285][T19271] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 463.247974][T19271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:420 [ 463.330011][T19282] option changes via remount are deprecated (pid=19281 comm=syz.0.6359) [ 463.354010][T19282] rust_binder: Error while translating object. [ 463.354071][T19282] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 463.360419][T19282] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 463.454292][T19290] fuse: Unknown parameter 'rox8N'otmode' [ 463.748642][T19315] netlink: 'syz.8.6368': attribute type 27 has an invalid length. [ 463.759190][T19318] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 463.759226][T19318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:432 [ 463.790100][T19315] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.809145][T19315] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.092612][T19337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 464.199820][T19345] rust_binder: Error while translating object. [ 464.208607][T19346] binder: Bad value for 'stats' [ 464.261571][T19345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 464.261604][T19345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 464.422837][T19360] tipc: Enabling of bearer rejected, failed to enable media [ 464.485302][T19368] 9pnet_fd: Insufficient options for proto=fd [ 464.829451][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6393'. [ 464.853583][T14188] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 465.013534][T14188] usb 5-1: Using ep0 maxpacket: 32 [ 465.043177][T14188] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 465.058780][T14188] usb 5-1: config 0 has no interface number 0 [ 465.076388][T14188] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 465.088916][T14188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.098427][T14188] usb 5-1: Product: syz [ 465.102686][T14188] usb 5-1: Manufacturer: syz [ 465.107440][T14188] usb 5-1: SerialNumber: syz [ 465.119550][T14188] usb 5-1: config 0 descriptor?? [ 465.129716][T14188] smsc95xx v2.0.0 [ 465.139700][T19399] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6398'. [ 465.548128][T19416] vcan0: entered allmulticast mode [ 465.548218][T14188] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 465.573695][T14188] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 465.877949][T19424] veth1: entered allmulticast mode [ 465.894050][T19423] veth1: left allmulticast mode [ 466.635074][T14188] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 466.659660][T14188] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 466.684022][T14188] usb 5-1: USB disconnect, device number 45 [ 467.319377][T19460] binder: Unknown parameter 'context' [ 467.424599][T19468] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6423'. [ 467.444879][ T36] kauditd_printk_skb: 854 callbacks suppressed [ 467.444899][ T36] audit: type=1400 audit(2000000103.611:34307): avc: denied { read write } for pid=19467 comm="syz.4.6423" name="binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.502855][ T36] audit: type=1400 audit(2000000103.611:34308): avc: denied { read write open } for pid=19467 comm="syz.4.6423" path="/dev/binderfs/binder1" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 467.528690][ T36] audit: type=1400 audit(2000000103.621:34309): avc: denied { read write } for pid=19467 comm="syz.4.6423" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 467.553328][ T36] audit: type=1400 audit(2000000103.621:34310): avc: denied { read write open } for pid=19467 comm="syz.4.6423" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 467.580843][ T36] audit: type=1400 audit(2000000103.621:34311): avc: denied { create } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.583604][T14193] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 467.602362][ T36] audit: type=1400 audit(2000000103.621:34312): avc: denied { connect } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.629909][ T36] audit: type=1400 audit(2000000103.621:34313): avc: denied { create } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 467.688916][ T36] audit: type=1400 audit(2000000103.621:34314): avc: denied { write } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 467.743502][ T36] audit: type=1400 audit(2000000103.621:34315): avc: denied { nlmsg_write } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 467.783502][ T36] audit: type=1400 audit(2000000103.621:34316): avc: denied { create } for pid=19467 comm="syz.4.6423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 467.814479][T14193] usb 1-1: Using ep0 maxpacket: 8 [ 467.849905][T14193] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 467.873508][T14193] usb 1-1: config 1 has no interface number 1 [ 467.879665][T14193] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 467.914916][T14193] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 467.935749][T14193] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.953559][T14193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.969058][T14193] usb 1-1: Product: syz [ 467.973894][T14193] usb 1-1: Manufacturer: syz [ 467.981184][T14193] usb 1-1: SerialNumber: syz [ 468.203675][T14193] usb 1-1: 2:1: cannot set freq 15828157 to ep 0x82 [ 468.233614][T14193] usb 1-1: USB disconnect, device number 28 [ 468.315045][T17989] udevd[17989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 468.643990][T19537] bridge_slave_0: left allmulticast mode [ 468.650016][T19537] bridge_slave_0: left promiscuous mode [ 468.656921][T19537] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.718445][T19542] rust_binder: Error while translating object. [ 468.718492][T19542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 468.734524][T19542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:493 [ 468.818433][T19546] rust_binder: Error while translating object. [ 468.828736][T19546] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 468.839269][T19546] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:495 [ 469.183528][T14193] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 469.190933][T19558] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.242828][T19560] fuse: Unknown parameter 'gro' [ 469.346847][T14193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.355500][T19569] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6457'. [ 469.358037][T14193] usb 5-1: config 0 has no interfaces? [ 469.373827][T14193] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 469.384651][T14193] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 469.392843][T14193] usb 5-1: Manufacturer: syz [ 469.400698][T14193] usb 5-1: config 0 descriptor?? [ 469.628050][T19550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.642919][T19550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.682024][T19550] binder: Bad value for 'max' [ 469.780825][T14193] usb 5-1: USB disconnect, device number 46 [ 469.953198][T19604] tipc: Started in network mode [ 469.958163][T19604] tipc: Node identity ac14140f, cluster identity 4711 [ 469.965097][T19604] tipc: New replicast peer: 255.255.255.255 [ 469.971250][T19604] tipc: Enabled bearer , priority 10 [ 469.978369][T19604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'. [ 469.987386][T19604] tipc: Disabling bearer [ 470.093661][ T45] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 470.243511][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 470.259869][ T45] usb 1-1: config 1 interface 0 altsetting 101 bulk endpoint 0x82 has invalid maxpacket 1023 [ 470.280079][ T45] usb 1-1: config 1 interface 0 altsetting 101 bulk endpoint 0x3 has invalid maxpacket 16 [ 470.291589][ T45] usb 1-1: config 1 interface 0 has no altsetting 0 [ 470.303333][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.313305][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.322033][ T45] usb 1-1: Product: ဂ [ 470.326427][ T45] usb 1-1: Manufacturer: ⓐᦶ㫇囡娑뗙ꋴ䎬ᅃㆯ藿◧蹱琼랋⚳ᤨ좊钔肫カ⾜珊ﴲ训틫 [ 470.339527][ T45] usb 1-1: SerialNumber: з [ 470.357584][T19595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.365929][T19595] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 470.807601][T19595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.818885][T19595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.873032][ T45] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 470.890215][ T45] usb 1-1: USB disconnect, device number 29 [ 471.018222][T19622] fuse: Unknown parameter '[rootmo000000000000100200Guser_id' [ 471.065545][T19636] fuse: Bad value for 'user_id' [ 471.070790][T19636] fuse: Bad value for 'user_id' [ 471.089914][T19625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 471.614023][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6486'. [ 471.951531][T19661] fuse: blksize only supported for fuseblk [ 472.333587][T14186] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 472.483520][T14186] usb 5-1: Invalid ep0 maxpacket: 16 [ 472.489524][ T36] kauditd_printk_skb: 668 callbacks suppressed [ 472.489545][ T36] audit: type=1400 audit(2000000108.661:34985): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.521175][ T36] audit: type=1400 audit(2000000108.661:34986): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.554096][ T36] audit: type=1400 audit(2000000108.731:34987): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.613591][T14186] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 472.621817][ T36] audit: type=1400 audit(2000000108.791:34988): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.648522][ T36] audit: type=1400 audit(2000000108.831:34989): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.674563][ T36] audit: type=1400 audit(2000000108.831:34990): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.714039][ T36] audit: type=1400 audit(2000000108.891:34991): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.793520][T14186] usb 5-1: Invalid ep0 maxpacket: 16 [ 472.799629][T14186] usb usb5-port1: attempt power cycle [ 472.804528][ T36] audit: type=1400 audit(2000000108.971:34992): avc: denied { ioctl } for pid=19666 comm="syz.4.6493" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.831117][ T36] audit: type=1400 audit(2000000108.971:34993): avc: denied { create } for pid=19676 comm="syz.1.6497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 472.852188][ T36] audit: type=1400 audit(2000000108.981:34994): avc: denied { setopt } for pid=19676 comm="syz.1.6497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.153521][T14186] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 473.174662][T14186] usb 5-1: Invalid ep0 maxpacket: 16 [ 473.303591][T14186] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 473.324739][T14186] usb 5-1: Invalid ep0 maxpacket: 16 [ 473.330818][T14186] usb usb5-port1: unable to enumerate USB device [ 473.333603][ T45] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 473.496145][ T45] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 473.504433][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.515112][ T45] usb 1-1: config 0 has no interface number 0 [ 473.524951][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 473.534103][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.542246][ T45] usb 1-1: Product: syz [ 473.546565][ T45] usb 1-1: Manufacturer: syz [ 473.551220][ T45] usb 1-1: SerialNumber: syz [ 473.557778][ T45] usb 1-1: config 0 descriptor?? [ 473.565224][ T45] hub 1-1:0.31: bad descriptor, ignoring hub [ 473.571263][ T45] hub 1-1:0.31: probe with driver hub failed with error -5 [ 473.580150][ T45] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 473.586615][ T45] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 473.595441][ T45] usb 1-1: Failed to create links for entity 6 [ 473.602170][ T45] usb 1-1: Failed to register entities (-22). [ 473.772717][T19686] binder: Unknown parameter 'defcontext01777777777777777777777' [ 473.883694][ T45] usb 1-1: USB disconnect, device number 30 [ 473.954654][ T37] INFO: task syz.1.4965:14981 blocked for more than 122 seconds. [ 473.962878][ T37] Not tainted syzkaller #0 [ 473.968432][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.977818][ T37] task:syz.1.4965 state:D stack:0 pid:14981 tgid:14980 ppid:8967 flags:0x00004004 [ 473.988580][ T37] Call Trace: [ 473.991908][ T37] [ 473.995010][ T37] __schedule+0x1322/0x1df0 [ 473.999584][ T37] ? __sched_text_start+0x10/0x10 [ 474.004746][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 474.010333][ T37] ? mutex_unlock+0x8b/0x240 [ 474.015064][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 474.021029][ T37] schedule+0xc6/0x240 [ 474.025146][ T37] super_lock+0x150/0x300 [ 474.029511][ T37] ? user_get_super+0x350/0x350 [ 474.035392][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 474.040894][ T37] ? __kasan_check_write+0x18/0x20 [ 474.046198][ T37] iterate_supers+0x8a/0x560 [ 474.050862][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 474.056895][ T37] ksys_sync+0x95/0x160 [ 474.061190][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 474.066034][ T37] ? switch_fpu_return+0x12/0x20 [ 474.071113][ T37] __ia32_sys_sync+0x12/0x20 [ 474.075958][ T37] x64_sys_call+0x2a58/0x2ee0 [ 474.080686][ T37] do_syscall_64+0x58/0xf0 [ 474.085524][ T37] ? clear_bhb_loop+0x50/0xa0 [ 474.090366][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 474.096519][ T37] RIP: 0033:0x7f0f1018ebe9 [ 474.101227][ T37] RSP: 002b:00007f0f110c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 474.109724][ T37] RAX: ffffffffffffffda RBX: 00007f0f103c5fa0 RCX: 00007f0f1018ebe9 [ 474.117928][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.126053][ T37] RBP: 00007f0f103c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 474.134088][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.142355][ T37] R13: 00007f0f103c6038 R14: 00007f0f103c5fa0 R15: 00007ffe03bc5ba8 [ 474.150588][ T37] [ 474.153669][ T37] INFO: task syz.1.4965:14982 blocked for more than 123 seconds. [ 474.161757][ T37] Not tainted syzkaller #0 [ 474.167734][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.176763][ T37] task:syz.1.4965 state:D stack:0 pid:14982 tgid:14980 ppid:8967 flags:0x00004004 [ 474.187059][ T37] Call Trace: [ 474.190360][ T37] [ 474.193576][ T37] __schedule+0x1322/0x1df0 [ 474.198206][ T37] ? __sched_text_start+0x10/0x10 [ 474.203240][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 474.208863][ T37] ? mutex_unlock+0xdc/0x240 [ 474.213672][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 474.219519][ T37] schedule+0xc6/0x240 [ 474.223958][ T37] super_lock+0x150/0x300 [ 474.228349][ T37] ? user_get_super+0x350/0x350 [ 474.233313][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 474.239128][ T37] ? __kasan_check_write+0x18/0x20 [ 474.244319][ T37] iterate_supers+0x8a/0x560 [ 474.248957][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 474.254770][ T37] ksys_sync+0x95/0x160 [ 474.258984][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 474.263994][ T37] ? switch_fpu_return+0x12/0x20 [ 474.268980][ T37] __ia32_sys_sync+0x12/0x20 [ 474.273799][ T37] x64_sys_call+0x2a58/0x2ee0 [ 474.278890][ T37] do_syscall_64+0x58/0xf0 [ 474.283512][ T37] ? clear_bhb_loop+0x50/0xa0 [ 474.288759][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 474.294735][ T37] RIP: 0033:0x7f0f1018ebe9 [ 474.299289][ T37] RSP: 002b:00007f0f110a8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 474.307790][ T37] RAX: ffffffffffffffda RBX: 00007f0f103c6090 RCX: 00007f0f1018ebe9 [ 474.315836][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.323930][ T37] RBP: 00007f0f103c6090 R08: 0000000000000000 R09: 0000000000000000 [ 474.343503][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.351543][ T37] R13: 00007f0f103c6128 R14: 00007f0f103c6090 R15: 00007ffe03bc5ba8 [ 474.359783][ T37] [ 474.362952][ T37] INFO: task syz.1.4965:14983 blocked for more than 123 seconds. [ 474.370930][ T37] Not tainted syzkaller #0 [ 474.376240][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.385065][ T37] task:syz.1.4965 state:D stack:0 pid:14983 tgid:14980 ppid:8967 flags:0x00004004 [ 474.395899][ T37] Call Trace: [ 474.399382][ T37] [ 474.402435][ T37] __schedule+0x1322/0x1df0 [ 474.408190][ T37] ? __sched_text_start+0x10/0x10 [ 474.413277][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 474.419178][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 474.425053][ T37] schedule+0xc6/0x240 [ 474.429158][ T37] super_lock+0x150/0x300 [ 474.433651][ T37] ? user_get_super+0x350/0x350 [ 474.438564][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 474.444108][ T37] ? __kasan_check_write+0x18/0x20 [ 474.449261][ T37] iterate_supers+0x8a/0x560 [ 474.453969][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 474.459669][ T37] ksys_sync+0x95/0x160 [ 474.463933][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 474.468945][ T37] ? __kasan_check_read+0x15/0x20 [ 474.474113][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 474.480230][ T37] ? arch_exit_to_user_mode_prepare+0x22/0x70 [ 474.486460][ T37] __ia32_sys_sync+0x12/0x20 [ 474.491086][ T37] x64_sys_call+0x2a58/0x2ee0 [ 474.496041][ T37] do_syscall_64+0x58/0xf0 [ 474.500588][ T37] ? clear_bhb_loop+0x50/0xa0 [ 474.505519][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 474.511449][ T37] RIP: 0033:0x7f0f1018ebe9 [ 474.515924][ T37] RSP: 002b:00007f0f11087038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 474.524679][ T37] RAX: ffffffffffffffda RBX: 00007f0f103c6180 RCX: 00007f0f1018ebe9 [ 474.532784][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.540921][ T37] RBP: 00007f0f103c6180 R08: 0000000000000000 R09: 0000000000000000 [ 474.549049][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.557204][ T37] R13: 00007f0f103c6218 R14: 00007f0f103c6180 R15: 00007ffe03bc5ba8 [ 474.565260][ T37] [ 474.568347][ T37] NMI backtrace for cpu 1 [ 474.568366][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 474.568386][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.568397][ T37] Call Trace: [ 474.568404][ T37] [ 474.568412][ T37] __dump_stack+0x21/0x30 [ 474.568443][ T37] dump_stack_lvl+0x10c/0x190 [ 474.568472][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 474.568507][ T37] dump_stack+0x19/0x20 [ 474.568528][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 474.568550][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 474.568571][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 474.568592][ T37] ? sched_show_task+0x379/0x560 [ 474.568613][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 474.568632][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.568653][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.568673][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 474.568696][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 474.568716][ T37] watchdog+0xd8f/0xed0 [ 474.568739][ T37] ? __cfi_watchdog+0x10/0x10 [ 474.568760][ T37] ? __kasan_check_read+0x15/0x20 [ 474.568783][ T37] ? __kthread_parkme+0x138/0x180 [ 474.568799][ T37] ? schedule+0xc6/0x240 [ 474.568813][ T37] kthread+0x2c7/0x370 [ 474.568829][ T37] ? __cfi_watchdog+0x10/0x10 [ 474.568850][ T37] ? __cfi_kthread+0x10/0x10 [ 474.568866][ T37] ret_from_fork+0x64/0xa0 [ 474.568887][ T37] ? __cfi_kthread+0x10/0x10 [ 474.568904][ T37] ret_from_fork_asm+0x1a/0x30 [ 474.568928][ T37] [ 474.568935][ T37] Sending NMI from CPU 1 to CPUs 0: [ 474.731453][ C0] NMI backtrace for cpu 0 [ 474.731469][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 6e508aa732f414f9d300b832ff15c50b3cf7cfdc [ 474.731491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.731502][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 474.731530][ C0] Code: cc cc cc b8 3c df d8 45 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 41 3b 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 474.731545][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 474.731561][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858c10ae [ 474.731575][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000402024 [ 474.731586][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 474.731599][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 474.731612][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87caf8a8 [ 474.731623][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 474.731638][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.731650][ C0] CR2: 00007f1c85b94198 CR3: 00000001255de000 CR4: 00000000003526b0 [ 474.731666][ C0] Call Trace: [ 474.731674][ C0] [ 474.731682][ C0] default_idle+0x17/0x30 [ 474.731703][ C0] arch_cpu_idle+0xd/0x20 [ 474.731723][ C0] default_idle_call+0x3f/0x80 [ 474.731744][ C0] do_idle+0x1a0/0x470 [ 474.731762][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 474.731781][ C0] cpu_startup_entry+0x48/0x70 [ 474.731798][ C0] rest_init+0x10b/0x130 [ 474.731819][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 474.731849][ C0] start_kernel+0x46a/0x4bb [ 474.731868][ C0] x86_64_start_reservations+0x2e/0x30 [ 474.731889][ C0] x86_64_start_kernel+0x6a/0x7b [ 474.731910][ C0] common_startup_64+0x13b/0x157 [ 474.731935][ C0]