last executing test programs: 8m2.669095151s ago: executing program 32 (id=412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1402, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000d54d62fa1ff4c861893784", 0xe}], 0x1) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000180)={0x0, r4}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x8ba15}, 0x1c) r6 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000480)={{0x3, 0x0, 0x80, {0x3000, 0x0, 0x1}}, "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", "b8ef6c5e32207410b5221a395d474e8d8d111b7262f585c2636848301735174937384008b00f63968357e1c2665f58220fd7f7188d535d648822ef2d761676fee768ef8b66c8bf6043187e6545b6dbe2bc903c3a968abdcdb5c824dd9b8eabc606b246b862ecb3aacdbdb67e8537fae35f5dfa72071511e2199859f45281017e4c78dab2aa71bc7eb2cf784f5307f1f00871ec2b9d58b4b5ab9ac9a51dc22dddb7072afc2722c5b0e8be3f42442a729fc7ed73227384556a885e78a36b33282c5d82312398fad418fc96e8206485f3a29e66481f226d09e964815221eaa110ef5e47d5dc660d12fae5c544d543fec533312abeb9449b75bed93723ffd34f40ec878d14403988430fb509a4e2b8576f2671497f424095390e222d38e1f6376ada46b476b1d78e68053a01a4d7e7671f2507ade51a6519fb88bd15d1d0b103149b71dd381e287f4f9df082551979d130daa9b9b51cea35dceb2bc2b3f4a99c350197b9947f76941b1e3e766db6c85eb932094438860e38d7012785095ccfe27845179d11215e6b73b887e8a4fe7e589d64f3d7b4bca1e83ee56fa37b7303c28e155f7576adf77857676250e4669f8ee29dbd9cb91ebae7a68aa2cf42b007a3f4df7d640149566c832a65886910f4167a76a32debed53a00599a606f0c8148fb0381c8ff1a6419fd35a0701f1edb60713bcd4b5adc01486446fc913cc048d3c566cadbbf93980f31b36735d952bfaa4ba708a3184f5d3ccf29561f10c24773937a4e2aec251422962f5949cba8f8a9f02f1aa359d747d978ba84f85892902f50b9338d39fa49b9952183d0945f6a97e2fc88192e2665f729b68fceef4d4decca9e8c91518e73c5e45910e45fc113cf72ac213b32cf774fc567e8686a784ebdfa7f06a494de99671cf5b5809476fbc2705871d0eb59e74bccffbdb77161a14f45684cce2621a85604982feed08c029dfa44ba69cb00d37b4450c30862d7ff54a55e84f03551c0b6e927447594dc7e80187543c78d7095e674f9dc2bf7cbb91f695c6ef7de0955f0f1eb7691e5644d0067fb9a909ba8efef6557ff4d1a60eb0e4e4cbc4feb2d5e3d9362c2d0856102e00db1d5a21de6cbed55da495ec00015e23d017f2bc551cf0a7e4ee2b4a1270aa6adbd60a2acde5bf4b13c777e6bea5319b8f6138801104828f91706e935bcd28c8283cbef68de34011572b4f61091846e96bb75695d31cefa3825171a1d1ac2c4ef21b314958587d756c68bf4626f249a6d2717789640386dc0191802b5e8eec0b05af9e4f64b20392f98d702ad9f973d1c37765552ddd1ec45ac07e31908feb45cfff3e82ff4d50614c7444b2e1b15d5ee03c053b1b27a153d383839e3df6deaf7c5e2d888a6354e36fbaf951b61caa60479ef14d9a3674d120d68666befa132f5b889da33a817e9ef58d5ae4915a065f1bdf2e20b6b207565eb7d0d938459c9281a2677d1d6dbc8964d9fb6fb85db423df58825b6b34d941ffc32cfffcf517d89a7345deaaa8bdf5418bf51c1227005aa3f865fcd00f8492a51ac869d474ac44576316e641268ac6fe5a843a97e9097e34d6f7b8300dd65c48cb89e58c04bc005af5e8da8ba7e8e138e3437ec648e663f2d4c9f49b9a81e06b000479d5b1924b977ca614fde19a1185501709546184f79f3d823ef4ff4c56aa3797b5208277a29a440a48bc8c50b92c56af72056f5c952d981556693cab95f35aba41c31ea98821f3f032328f23f8d1590a2b2228d585a0e7a87a7221d4233ec8c341c17244afe864ada6ec0ff244ccfb4d9c81d3ef6ab3276b00bebfe1c720f47b62a5bb39ababc17bdf2dee674c628f3dfd592d90f17bd1a6bc9a29db4efdac324937a15f3b781bd15965c99b28dec183a8ba8eecad9f8af1257409b8dbadaaa94b60e32d80144d01208bcf05d9119aeb6f77845891101b62c9bc2500c1f22c62da4bc6e9e49c8ef8d625eee23400ddb889e6eb278c184db23ef77b4eccd0642d55ef70b2c139fdff97da5ae694a8e3e7c31e074c21acd0fdb81880712c82f3e373d67c2aac335e340f213511a381fa98a0cd676ce359f0dade64ab30d20a9df8801f31bd4fb05fe16daee7b118fdb2a0e1330cc47bf9987d5436b86c258a528469b90f34db343e370c2d76b3ceb1aef29c3a344408274eb9da840ad34d044a2cde2c6c18be69f1a96a4d0e202d3c65a65d1403191ae8b1fc9706ce413acfe62d7af337dc0d4fa85a3120ee0d4b08f7fde966e102a6da6a696b90da9abbff642841a3cebd47353c2e2ba6f2a8ad69088f3ba666424860436db8d292256490e17324b51417da337799803778ae649aee9b1b38ffeac83d1eea630afe2fe1f72cdcb57ffec3c2005d2b5ce6b4718f58c580407defcb56b99ff9d0a65eec8caf714cbb37ca4ba485c3b73edea3466f86072e7b5ce0fa5e832b16641df891596f0bdf24a48968c7d842ca65854c8c68b64e1bbec80695b0237a547c0730c71d19022c7692c5585cf8a0ad7b35d1c9f276a15bd9ca3e06d418b77d2b0c79cc5e064864131fb2d7de4d31967667d5c4ffa3b3bd324e880145577e4813a6f8a41387f6a6697bbd8b3a0ed8e32f272ac61393da114fa3c9bc7cf4f823cc53f5124c14cc38bf5baa91eb0a8710557a831e67b74d01a9149338716fa03deceb88bac8a1e56b34f6df12ed0adc229aa739de88f3cedfcd51450692acda3433aa12c7ac10cd38d3bd973b62e40e784f2ca6270ea37bd597436bab624cf282a0669f901e3a0111e023aa70dfa3bbbf859fac38fe269be0c43f905b5cc0e88d7364de64399ce9e1794246c497ed7c023b53ff2d91372795c60fcc1680148b80c1e1d3195ccce4a40a2e7bc7cfae23112ed7edc5700100c54a7ddee7052df558c5fba7fd4ce55a143256f4eb3a324cc69f611d1d4e599ee8317b8c9531cf270ffa2297a7ce9d9b34dd640bd7b2a438ecf6fa5811a2c628d7da763f3884d38b2c19e7945051651843cb5fd8a5f0bb2b04504207c4c3fa066872f3a0b2b839c46295604dd023b2e42c2e152c51a262180b8afb0cb6f62d48427f3810fafa9e07732969e973ae6f2049d3042e53563b060b5422b75ecfa30eb69eb4bf3e15cc4d790829c7622773cbbc796601b3e09f7a1e28920e4df927c93db74766f3d02210749217c510c9e09abf95d9566b8fd35968c4ec1242fe2838051a792c0f01b5d7df0c3a82e125bd13dd14c4d38f17dd40e76776526371224d2421fafad1816ea8f3b88cc47975e14dbbfd15c9836cc8e43436684117845314d6711251536e6648b1e497f2778c5939c38dbbe3536e73998d9446af005e1cb859fce3f9bcfb2df8b5f327c2752aa5f29e69a0ce9b3124800762ebb186c6f2c1f20e0965acbda8385710ca0f65ca0c5e1a8825cb7effe9cf3bca6a244d74d770167ab61772a821aa2bb2839f203eecd4b1bd3dc34b08d282369b5430fd07888170ec9dc0ab474e5fd35e4a3503729bdbcd124945ab489ddda3f48c482f19757474d10c9f722281dc6709b14cd6eedf92fe34975a53fead45ab1bcbf54e0397bf6711dbe0e91869088d13d7b3bf53cc600bc2b1b58ff3102e270cb2629184a093ab21806f36db095fe04d0606719d73332e48cb6ad9753c2e2d9364c4c2a010c112fb8e7125435455589814cd7bb36d358e18b7d6e841ea688304e3c483aeb4eeffd35ad16368f9f45b6e67600ccd42c0c38877abc86a1e3e268de1ec32762a6b3d1b4887d3c8277c460209e8fd6c2107f34803f4a0de0a6fd7b82ee75dbf68f4909514bbfc4d27f8ca5d6112f3ea0f0b4e7a868ec917e10da1260a9441e666c3ae28fd76481e93ff9c1d2fa4816320cb4ccfc442b1667352af16650ef9fe79044ec1b2fbfee40dff7303415c6be2fea1a28afe5e42d53b8d67621667420437211136449154f205206e15043fa4bd24e0936b402e36251e745db0ca3583636283febf82f0ca5b418a3751d41489044f5d0c11223350d6562888735c53009866b0eb75aebe3bfc85b1c04458758ea33ad057ec52fa00f99dbd1a44ab57cba3eb724f0845c7d89e18ca75be87c4e941c19203c3a6e9e941a9e15cd2c0cad12e1a66e2bd82492d371212f7b3515b6214c4e66852e4cbf49cad5cb3af44216d5080f779069956630626bc536faaa574b6f82c824b79672a70e7b48d110c627010a369073274428af7109701c9e980bfe7d9042d4ff698a76d9f9b6287ceb56b742412d956357000599fca637925cbd8055d948c748c31fbe7b448c9de288ed04253151b59a170066380663feb0236a62fd9e8de4ffa8f9a27743cbbc34501462c3e94cd302ceb768584f2d3a7e6cea81f3e309647052d386839e47ec399042efe79c42e18b09456d1b3be313ac03342df2a65e483d002bde84231cc8b3aa6782563a2e232cc3b1269012bd0f1f76bab9803f63501bdd4bae8cc40d6272019498ad56db38332ddc5f3a18a2f63d83268446248aead285cbe6a6540a55b7813fb72d5d7e1f7c30a0f48f205f4c77cbfd4da860f0f31dc81984e6faac036342e5328a4f8ffdc1ddcd024644323f471182fb2d166f27fde3dada9353724e3b61bf7ea52162075d6ca61ceeae59e6c6fcc228c7b185add4bd54f0ac877839261828a41faee2aa130887f23e07ea62bf01b79e04da190a2e86b88e871218d4980441d0cf38810dbc542ae2d27115aeb68c76466f78b649273de52ead8340839b5dfcd22238df1484304124667ace8bf1f04e62ca01c4e2d76f26a915e1a2148a1033879003c9b281524f4c309b046d1cbde639d06f60e2261036131de5edb9b277ace0d1b01b6b7f18730fb720491ab3caa1e99e7e17ed5b782b31c1b29fd8bb6d8cacef54dbe5d6c6359441b2585fdd006b736432dc434f1c403ac060c49a01e4862c04dd51754f8b51fb018e46848fb1e7015bba7bba6c6071d7905c115e4bf42474919b32475c90b74c0bb2cea763e182fbcd0bb690541ca660f2a9d95e28ddc1da383f51ef333aedc75c61ce62e37d539836d7c39a3085af866d86d90b28d612c1c4a55d404e47362988073eb76ca3f2bf61120d707746cb04dc9899829a1d33b8979d1e199027338f1b53bae2e048de52bb6b0027e7a3febc78f318a104ef0473941bc76f09d7d56eaf89e05237e48321162df8b96b8af4c69ffc5748cd3110ba232d3273a0dd888e523b205c16ad0990d3db149bce52aef69e0f1c82baf6ba9975d16fa2f6a0e5466da4d64bdbef9b8f433d9d18e5f294b9b76e7b1bfa4492c1ad826609070042e04d7d7fd410bc9e066b782d7d429b39eecf1ef0c896144a845826e2bee838bfabe033424ee162787a992c8614cd28875d9006088638a3a8b0593b2b22d0f501358141f6511a261b7a3b29326fb75cbfc4b2087521b5d8bfede7b6d59577fd97e5daafb6201cbbc14fd823cd5b241921c98cfa556a192c1297d0d3196aed1d63b9a3367f508f5c360b7a1d3ae2c6f517d016938cd0fb18fcfdf19e0513206f963cc46355d7b2cc7d095dbd15e5f5b2666c70c85e885689b54259973ba50d866dd737a59b0dc533778022d96659a1960c2601a2cebbba137f2bd9a2ffa8dc0f8715716c8b1e72f969749b4ac437121d49fb381fb9506c0f673b831cf02e6b353ec554cbdb97c9e08e63210e748c194d1350d63b37225bbd9d7fb686d3ac85b59ae11f0829a48337fdd90260143e37036a816e800c0dbc6e0f67cf75025cdb02ccc90fe855e586a4171ce3357e6a4f212fd1a645ec0835905210578c9e81fb0947c153089"}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000040)) 6m54.628064963s ago: executing program 1 (id=1632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0x4, &(0x7f0000000bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000125bd7000fbdbdf250300000008000300000000002400068008000300ac1414bb08000600120000000500020081000000060005004e230000050005000700e2ff07000300f09300000500050006000000040001803e4a1b271ba738699e98581045fcc1e532561705f4eaf00b58091270a016aa094fd9823a358b082ff9047785b755226a97833c0f267bc5e9b8232125357f5376e06a66fa5a23c3d9249f50671d6eed1adac1d83d9369d073de90001f08550f278fcd21c1bebd0231549ae6db80444c32601603107df3bf47a0a7f9db0ad7a142d62966d4e891c85861ae715782", @ANYRES64=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004084) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x40, 0x750, 0x4, {{0x26, 0x4, 0x2, 0x2, 0x98, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @local, {[@noop, @ssrr={0x89, 0xf, 0x5a, [@private=0xa010102, @remote, @loopback]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0xf, 0xbe, [@dev={0xac, 0x14, 0x14, 0x27}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x7, 0x12, "989e126d6b2774b1a3d293db3cbb3cdc"}, @timestamp_addr={0x44, 0x4c, 0x9f, 0x1, 0x8, [{@private=0xa010101, 0x80ba}, {@broadcast, 0x9fe9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@loopback}, {@empty, 0xffffffe6}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0x3ff}, {@private=0xa010102, 0x9035}]}, @generic={0x86, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001840)={'sit0\x00', &(0x7f00000017c0)={'sit0\x00', r4, 0x7800, 0x786, 0x40, 0x8000, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x66, 0x0, 0xa, 0x29, 0x0, @empty, @empty, {[@lsrr={0x83, 0x2b, 0xf4, [@loopback, @loopback, @broadcast, @multicast2, @multicast2, @multicast1, @local, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}]}, @generic={0x44, 0x12, "d70867214d15683392734e3527dcdbab"}]}}}}}) (async) madvise(&(0x7f000078a000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m54.598141373s ago: executing program 1 (id=1633): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = getpgrp(0xffffffffffffffff) prlimit64(r3, 0x93256fa1f81eb668, &(0x7f0000000100)={0x1, 0xfff}, &(0x7f0000000140)) bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r4, 0x4068aea3, &(0x7f0000000180)) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0x0, &(0x7f0000000200)={0x25, 0xfffffc00, 0x4}) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000000)=0x6, 0x4) ioprio_set$pid(0x2, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ptrace$ARCH_MAP_VDSO_32(0x1e, r5, 0xb, 0x2002) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m54.360166408s ago: executing program 1 (id=1635): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)={0xfc, 0x75, 0x1, {0xf1, "bab3577283b2d2e8e962777fcc6e8ec5460e3ee95ab8ec536e08fd2d51c3fcf4874c9f67f1aa22054b373c96dc167fbb149a2a879fa4aa74305a1beacad815dac7a10230bd448001aae382f1e7c8f8ea9a23e6f96598fb69ef77977353b42447098cbf713a635b1f6b062915b4f8801d2fd0868734417ee5fac0419cbf65cb98304931d73fae2cf6bf319cd7e496fdf73e97b01ffa7d12d4f241a3b84453bd6048116a1ee0b5b90c6a006097d85c6404ee8ad2f2845ac8b1785a55c343d5b234cf67294e3812018d663129b78aba9f1197c698f66a63651766a3f5fe04afdae515ba801ed87cb53a61f8aa9d8372c0d156"}}, 0xfc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x2}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x2000000000000) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1001, 0x0, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 6m54.335216588s ago: executing program 1 (id=1636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r2, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd(0x5) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0xbed8, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r3, 0x3, 0x3, r3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x7fff]}, &(0x7f0000000200), 0x8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, &(0x7f00000000c0)=0x7fff) 6m54.263346129s ago: executing program 1 (id=1637): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xc5) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000480)=[@decrefs={0x40046307, 0x3}, @decrefs={0x40046307, 0x1}, @clear_death={0x400c630f, 0x1}, @request_death, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/230, 0x0, 0x0, 0x35}}, &(0x7f00000001c0)}}], 0x5d, 0x0, 0x0}) 6m54.160019071s ago: executing program 1 (id=1638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f00000000c0)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ea835e968b0b065f9b05b761528f1a99602d1efbf951db0000db05a03131114f7fd76664985726a9c0cf1c2c9b00d4eb026a6275a22b930a6400"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f00000000c0)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ea835e968b0b065f9b05b761528f1a99602d1efbf951db0000db05a03131114f7fd76664985726a9c0cf1c2c9b00d4eb026a6275a22b930a6400"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000cc0)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0xfffffffffffffffd, 0x40401) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000880)="88efbc65ef8fbccddb84643c75e661515e0d8242dd65030f5234edc55ec7543e08d0577b287141db1ac72f173c327043e9be548709ec07074e32be9c11cfbab430161ff09b92fe260dbba25d130411cd00c3501cccc783cd5a1605bd8a035fe1f24b565193452894ac901b00142277a1e6d46756a65b1b3149cb17aa62c04f38208b500b4604", 0x86}, {&(0x7f00000006c0)="5bd46cd8bad6f3748e645823dcb1f2cac39e1229199219a8214a0900d557e4c823d33ff58b3cb2ec3d369d9ad6e99e69fa83047256f14fec986ff373dc3a61b505f2001bdd4e7c0335c1cf519e0afde2b955abade533d2b284cf093e4b", 0x5d}, {&(0x7f0000000540)="125d6b7f0e0d4f43967e956ef494dc02afa3aa6e5a80286c68d99c14ecf07c56e6cca5b0fc9b65edc002dda1e41971b6242c8bc1f2e4cf0248105f", 0x3b}, {&(0x7f0000000780)}, {&(0x7f0000000a00)="dcb893e36e913230902aa4e80d8090d87f6d47fd530d310faf9ad8495eb82dabed5891e5c43cec7cba08035646ed75d67b4c354e5a4ea9f58c926b6f4f5f8a18db13d4a0bed259a54dfcd4d25fe136a421174eb940c9d0b9bee9e1900dace1d48c7c22d5b2a261b71a90810532eb0e4c068c52bcb07bb78708742b7c344b6e09f0741bd655a55f69374d57aafad975c6d5e2c36c3335bd8e7c00889a7d71e4373c7067461133273d74602cf7e3f3acfd868e2ff205a5b0", 0xb7}, {&(0x7f0000000ac0)="460899eef426bab3562ed474b999f18a2f83590d96bd2655b055a8a2b2caa24493944cf8cc4cc46676300890b23eee565f205e6f26f5083a6fe4a3043b692f2577ba2d65098a949d8326f595306ff131e2f4703d94296224bdaf8f14fe9547b79affbab6408c50d97bd99bcc5da1482b5010f13c1a30a18c2c066c4c2ba9e1a998c0232171d912f133969fb95b2b3769f76f7ea29477de3adb29dfc7a2b121766e16ad7aa965bb5e49befc2a872441c7d6e9975cdf9f719e4cdd8ae2b880a7b6227f2b40a6b1aa1990648ab03e07a3d53cae4a8f6273c67b777bb847f0b6baca937f3ea76991c6e9053b0e1a0925e4235ca4cbc73cfce19e30b77f", 0xfb}], 0x6, &(0x7f0000000c40)="bb64214f404f816a5f4806e57a3314df40d8f8fb64b29338e3cde8487c9604a2f15f876722306afd1be0ed0795dfe9683d1b7d33b6f24f5137bc677ff429223262339981147519f623", 0x49, 0x8000}, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0x10, 0xa, 0x0, 0x80, 0x2f}, {0x5, 0x2000000000000003, 0xfffffffffffffffe, 0x0, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0x10, 0xa, 0x0, 0x80, 0x2f}, {0x5, 0x2000000000000003, 0xfffffffffffffffe, 0x0, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r6 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) creat(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) ioctl$RTC_UIE_ON(r2, 0x7003) (async) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) close_range(r0, 0xffffffffffffffff, 0x0) 6m39.075664353s ago: executing program 33 (id=1638): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f00000000c0)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ea835e968b0b065f9b05b761528f1a99602d1efbf951db0000db05a03131114f7fd76664985726a9c0cf1c2c9b00d4eb026a6275a22b930a6400"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040) (async) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f00000000c0)=@canfd={{0x1, 0x1}, 0x39, 0x0, 0x0, 0x0, "3992ea835e968b0b065f9b05b761528f1a99602d1efbf951db0000db05a03131114f7fd76664985726a9c0cf1c2c9b00d4eb026a6275a22b930a6400"}, 0x48}, 0x1, 0x0, 0x0, 0x8490}, 0xc040) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000cc0)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = syz_open_dev$rtc(&(0x7f0000000140), 0xfffffffffffffffd, 0x40401) sendmsg$tipc(r1, &(0x7f0000000940)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x1}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000880)="88efbc65ef8fbccddb84643c75e661515e0d8242dd65030f5234edc55ec7543e08d0577b287141db1ac72f173c327043e9be548709ec07074e32be9c11cfbab430161ff09b92fe260dbba25d130411cd00c3501cccc783cd5a1605bd8a035fe1f24b565193452894ac901b00142277a1e6d46756a65b1b3149cb17aa62c04f38208b500b4604", 0x86}, {&(0x7f00000006c0)="5bd46cd8bad6f3748e645823dcb1f2cac39e1229199219a8214a0900d557e4c823d33ff58b3cb2ec3d369d9ad6e99e69fa83047256f14fec986ff373dc3a61b505f2001bdd4e7c0335c1cf519e0afde2b955abade533d2b284cf093e4b", 0x5d}, {&(0x7f0000000540)="125d6b7f0e0d4f43967e956ef494dc02afa3aa6e5a80286c68d99c14ecf07c56e6cca5b0fc9b65edc002dda1e41971b6242c8bc1f2e4cf0248105f", 0x3b}, {&(0x7f0000000780)}, {&(0x7f0000000a00)="dcb893e36e913230902aa4e80d8090d87f6d47fd530d310faf9ad8495eb82dabed5891e5c43cec7cba08035646ed75d67b4c354e5a4ea9f58c926b6f4f5f8a18db13d4a0bed259a54dfcd4d25fe136a421174eb940c9d0b9bee9e1900dace1d48c7c22d5b2a261b71a90810532eb0e4c068c52bcb07bb78708742b7c344b6e09f0741bd655a55f69374d57aafad975c6d5e2c36c3335bd8e7c00889a7d71e4373c7067461133273d74602cf7e3f3acfd868e2ff205a5b0", 0xb7}, {&(0x7f0000000ac0)="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", 0xfb}], 0x6, &(0x7f0000000c40)="bb64214f404f816a5f4806e57a3314df40d8f8fb64b29338e3cde8487c9604a2f15f876722306afd1be0ed0795dfe9683d1b7d33b6f24f5137bc677ff429223262339981147519f623", 0x49, 0x8000}, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0x10, 0xa, 0x0, 0x80, 0x2f}, {0x5, 0x2000000000000003, 0xfffffffffffffffe, 0x0, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x8, 0x8, 0xfffc, 0x10, 0xa, 0x0, 0x80, 0x2f}, {0x5, 0x2000000000000003, 0xfffffffffffffffe, 0x0, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@local, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) r6 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) creat(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r10, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) ioctl$RTC_UIE_ON(r2, 0x7003) (async) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$RTC_AIE_ON(r2, 0x7001) close_range(r0, 0xffffffffffffffff, 0x0) 6m29.955627022s ago: executing program 3 (id=1849): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @increfs], 0x5d, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010700000000000000000100000500010001"], 0x1c}}, 0x0) close_range(r1, r0, 0x0) 6m29.883917643s ago: executing program 3 (id=1850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/213, 0x0, 0x0, 0x21}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000a00)}, 0x1000}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) socket$can_raw(0x1d, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000340)={0x24, 0x26, 0x503, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x32, 0x0, 0x0, @pid}, @nested={0x4, 0x12f}]}, 0x24}], 0x1}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42201010}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000800}, 0x1) 6m29.878742293s ago: executing program 3 (id=1851): prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x0f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)~\xa7\x89\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%\x18\x8d$\x89\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') prctl$PR_SET_IO_FLUSHER(0x39, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) 6m29.861802513s ago: executing program 3 (id=1852): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x6, 0x20000008, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x66, 0x0, 0x80, 0x4, 0x0, @remote, @multicast1}}}}) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x77359400}, 0x1, 0x5, 0x5}, {{r1, r2/1000+10000}, 0x1, 0xc, 0x1400}, {{0x0, 0x2710}, 0x15, 0x2, 0xffffff81}, {{}, 0x15, 0x2, 0x5}], 0x60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x4049885) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 6m29.800092804s ago: executing program 3 (id=1853): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20400) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e03fdff"], 0xffdd) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x120002005}) close_range(r0, 0xffffffffffffffff, 0x0) 6m29.771835505s ago: executing program 3 (id=1854): r0 = getpid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) getpid() (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) 6m29.722912006s ago: executing program 34 (id=1854): r0 = getpid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) timer_create(0x3, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) getpid() (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) (async) syz_pidfd_open(r0, 0x0) (async) setns(r1, 0x24020000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) 5m58.104512895s ago: executing program 2 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mkdir(0x0, 0xcd8ea8b20b6faf8c) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000"], 0xfc}}, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) (async, rerun: 32) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (rerun: 32) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$char_usb(r3, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) 5m57.948518727s ago: executing program 2 (id=2526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000100)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8804) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0xa09ab000) madvise(&(0x7f00001e6000/0x1000)=nil, 0x1000, 0x16) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 5m57.892047329s ago: executing program 2 (id=2527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) setpriority(0x1, 0x0, 0x80000000) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$eventfd(r1, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, 0x0, 0x5b) socket$inet_icmp(0x2, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "4b2525ef3e7ee5dfe79877a3ff4ccdb5c72ae39a"}, 0x15, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) (async) setpriority(0x1, 0x0, 0x80000000) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) read$eventfd(r1, 0x0, 0x0) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x0) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) userfaultfd(0x80001) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x5b) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@sha1={0x1, "4b2525ef3e7ee5dfe79877a3ff4ccdb5c72ae39a"}, 0x15, 0x3) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 5m57.890618748s ago: executing program 2 (id=2528): syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092402010303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r2 = dup3(r0, r1, 0x80000) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000814) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="e8000000000101040000000000000000020000002400018014000180080001004eb6098823a2227ee000000108000200ac"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xe005) pipe2$9p(&(0x7f0000000200), 0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 5m57.383990738s ago: executing program 2 (id=2543): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents64(r3, &(0x7f0000001fc0)=""/4079, 0xfef) getdents64(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@volatile}]}) flock(r5, 0x5) r6 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) 5m57.305260429s ago: executing program 2 (id=2544): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES8=r0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000004) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc9a, 0x0, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x804) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8000}, {r2, 0x190}, {r2, 0x1000}, {r2, 0x20}, {r2, 0x10}, {r2}, {}], 0x7, &(0x7f0000000140), &(0x7f0000000180)={[0x10001]}, 0x8) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000ac0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x7, 0xcd4}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000", @ANYRESDEC=r4, @ANYBLOB=':00000000000000000002G']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000020100c00000000002"]) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 5m57.27213534s ago: executing program 35 (id=2544): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800de9c00000000000000", @ANYRES8=r0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000004) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xc9a, 0x0, {0x77359400}, {0x0, 0x2710}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x804) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x8000}, {r2, 0x190}, {r2, 0x1000}, {r2, 0x20}, {r2, 0x10}, {r2}, {}], 0x7, &(0x7f0000000140), &(0x7f0000000180)={[0x10001]}, 0x8) openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000ac0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000300)={0x0, 0x7, 0xcd4}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000", @ANYRESDEC=r4, @ANYBLOB=':00000000000000000002G']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001000000000020100c00000000002"]) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1m53.020371733s ago: executing program 6 (id=7234): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001040)=""/222, 0xde) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x8080000, 0x2000, &(0x7f0000000000/0x2000)=nil}) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r4, 0x29, 0x46, 0x0, &(0x7f0000000140)) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000540)) socket$key(0xf, 0x3, 0x2) ptrace$cont(0x20, r5, 0x0, 0x0) syz_open_procfs(r5, &(0x7f0000000040)='comm\x00') 1m53.018094333s ago: executing program 6 (id=7235): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x2010, r4, 0x5d83d000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r1) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x800, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') ioctl$RTC_AIE_ON(r5, 0x7001) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x70) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x80) gettid() ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000080)={0x0, 0x9}) socket(0x10, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) statfs(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES64=r2, @ANYRESHEX=r1], 0x0) 1m52.370429944s ago: executing program 6 (id=7247): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r3, &(0x7f0000000680)='N', 0x1) splice(r3, &(0x7f0000000040), r2, 0x0, 0x800000000ff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x1, &(0x7f0000000300)=[{0xe9, 0x101, 0x101}, {0x9, 0x850, 0x5}, {0x84f1, 0x80000001, 0x5}, {0x5, 0x63fb, 0x3ff}, {0x8000000000000001, 0xffffffffffff5c4b}, {0x2, 0x1, 0x81}, {0x7fffffff, 0x4, 0x7ff}, {0xfff, 0x9, 0x5fe}, {0x1, 0x4, 0x3ff}, {0x40b1, 0xffff, 0x33a}], 0xa, 0xfffffffffffffff2, 0x4b, 0x60, 0x1, 0x1}) close(r1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181482, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) prlimit64(0x0, 0x7, &(0x7f0000000240)={0x1, 0x8}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x26011000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250100000005000700130000000500110000000000"], 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20048004) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_BULK(r10, 0xc0185502, &(0x7f0000000680)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text32={0x20, &(0x7f0000000280)="66bad004b036eec4c1896523ea003800005e00b9700a00000f3266ba4000b8273ff361f30f511e3626360fc7a4eba8000000600fc7bc9a0e0000000f18b710992eba2e0f32", 0x45}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r5) 1m51.850877123s ago: executing program 6 (id=7272): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@empty, 0x0, 0x3c}, @in=@private=0xa010102, {0x400000080000001, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0x8}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r3 = socket(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x408c00) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x20}}, 0x10000001) ioprio_set$pid(0x1, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x5) 1m51.837269133s ago: executing program 6 (id=7274): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, r0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_FRAME={0x1f6, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac, {0x3, 0x3}}, 0x0, 0x0, 0x1e, @val={0x10, 0x1, 0xfd}, [{0xdd, 0xb1, "30432d2a45af5e68f0025a640d225a179c0de5ec8d2c78f81e4c7ae9a9678850daa504777657d6fad4b36528ac203b785f6c929883226c42f42e710779ac94cb0bc2606475537ac73275e220b7a718997fba629ca30bccb87ae8adb707be57ce3849755a56095b9365e80e70cdcdc9d2d440c075fd4d5ebd53cf372669fdf84c24c7019187e78689c0e0115ad693cb5106de282d1465f6f806ee1e206c0f4a483b94c879b7728025d0c62f9b517c81613b"}, {0xdd, 0x2b, "7ed7705221e49f362d485b55df4f54219d92c9e5f7e71f203dcce07a537cb90d9518190c60c8c4a54cddd7"}, {0xdd, 0xef, "a8e8870c007cf9e45d530bd31dc789cf23f01ec755268c526befa8df8ba7481223652ceddccc08a2e885edcd69ef532f668edcd20bba916beb74981a3e00919c16163b6aa783f09677b8fb9107f0b0919571dfde90d89bc62f842c91cc0368a1297e113b8e109decea7e3e2e57847e9e97d86a00d0f113a7a05c37e4d5232dc22a8c8ddbf951bebeb757abdfbd65a7931017dd9d91ddc9a136a7d0b671370df54ea4659a6bcb753131dabca9741bbb50bb1169d780ee88d8a74902550ba9e5bad5cecd852189c353493a497349682a0857ebde9be05d2d789344d30b74a02848364569a4405cf56d25617e2ad9252f"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40090}, 0x20008000) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x24c, r0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_FRAME={0x1f6, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac, {0x3, 0x3}}, 0x0, 0x0, 0x1e, @val={0x10, 0x1, 0xfd}, [{0xdd, 0xb1, "30432d2a45af5e68f0025a640d225a179c0de5ec8d2c78f81e4c7ae9a9678850daa504777657d6fad4b36528ac203b785f6c929883226c42f42e710779ac94cb0bc2606475537ac73275e220b7a718997fba629ca30bccb87ae8adb707be57ce3849755a56095b9365e80e70cdcdc9d2d440c075fd4d5ebd53cf372669fdf84c24c7019187e78689c0e0115ad693cb5106de282d1465f6f806ee1e206c0f4a483b94c879b7728025d0c62f9b517c81613b"}, {0xdd, 0x2b, "7ed7705221e49f362d485b55df4f54219d92c9e5f7e71f203dcce07a537cb90d9518190c60c8c4a54cddd7"}, {0xdd, 0xef, "a8e8870c007cf9e45d530bd31dc789cf23f01ec755268c526befa8df8ba7481223652ceddccc08a2e885edcd69ef532f668edcd20bba916beb74981a3e00919c16163b6aa783f09677b8fb9107f0b0919571dfde90d89bc62f842c91cc0368a1297e113b8e109decea7e3e2e57847e9e97d86a00d0f113a7a05c37e4d5232dc22a8c8ddbf951bebeb757abdfbd65a7931017dd9d91ddc9a136a7d0b671370df54ea4659a6bcb753131dabca9741bbb50bb1169d780ee88d8a74902550ba9e5bad5cecd852189c353493a497349682a0857ebde9be05d2d789344d30b74a02848364569a4405cf56d25617e2ad9252f"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40090}, 0x20008000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x85) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffff0a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x28}, 0x1, 0x0, 0x0, 0x44850}, 0x40080) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000880)={0x8, {{0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x4e22, 0x2, @empty, 0x5}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000880)={0x8, {{0xa, 0x4e20, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x4e22, 0x2, @empty, 0x5}}}, 0x108) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = dup(r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r6) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xcc1) sendmsg(r5, &(0x7f0000001c40)={&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @loopback}, 0x1, 0x2, 0x0, 0x2}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="27469d54ef1d8ebd715fa1f682", 0xd}, {&(0x7f0000001bc0)="574e4e65bca44e8102abad493462727de49a5a69589c", 0x16}], 0x3}, 0x40881) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000001c80)={0x3, 0x5742, 0x3}, 0x10) accept(r6, &(0x7f0000001cc0)=@qipcrtr, &(0x7f0000001d40)=0x80) (async) accept(r6, &(0x7f0000001cc0)=@qipcrtr, &(0x7f0000001d40)=0x80) accept4(r5, 0x0, &(0x7f0000001d80), 0x80000) (async) accept4(r5, 0x0, &(0x7f0000001d80), 0x80000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2) close(r5) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000001e00)=0x5) (async) ioctl$EVIOCREVOKE(r6, 0x40044591, &(0x7f0000001e00)=0x5) openat$null(0xffffffffffffff9c, &(0x7f0000001e40), 0x1ab400, 0x0) (async) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001e40), 0x1ab400, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f00), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x54, r9, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gre0\x00'}]}, 0x54}}, 0x40180) openat$kvm(0xffffffffffffff9c, &(0x7f0000002040), 0x100, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000002080)=0x4) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000002080)=0x4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r6, &(0x7f0000002240)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002200)={&(0x7f0000002100)={0xc4, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40c0}, 0x40) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000036c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003680)={&(0x7f0000002380)={0x12e8, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x1288, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffc}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff8c}, @ETHTOOL_A_BITSET_MASK={0x89, 0x5, "2f10f0d534b707b4f3cb6a48ccddd73902e42eae5985005efddda2dd83b771b32a44a8d43da1c14edf2440e2286bc6dc7b95d008f04ff6fa9a09e40e554b6b76c5047947313b8aeafd0fec04074a4ec373c0ad7530b204cb111f84f62763b6de804551ee47793e7ff23fb409392019b91177b583750da642129a3211a0a084f951a782768b"}, @ETHTOOL_A_BITSET_BITS={0x158, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5ee}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/udmabuf\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff1f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7a7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe935}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']+,#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*\'*%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x480}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6b82}, @ETHTOOL_A_BITSET_VALUE={0x78, 0x4, "a1cac0d4e41d9673dfbeb6f123addd12df804e9dfa1440a4e133e9e279b396abd89e75f636982c493b60442e2a1bee8c85bac877188c73e79bbe58bb4a7fc820b87bd9e637709da4ca7b7424c2ce5643acb43f1fe221c7eec6ac8d480cf0e25ded0d8447cd217b16d420696cb2145a0dd76c2aef"}]}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x4004884}, 0x1) 1m51.606627917s ago: executing program 6 (id=7278): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x200, 0x0, 0x0) (async) r1 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) (async) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x76) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='securityfs\x00', 0x4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) (async) r7 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000018000680140004"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (rerun: 32) 1m51.523877679s ago: executing program 36 (id=7278): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000540)=[{}], 0x1, 0x200, 0x0, 0x0) (async) r1 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) (async) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x76) (async) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffa) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='securityfs\x00', 0x4, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x40, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) (async) r7 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000018000680140004"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (rerun: 32) 1m13.628491933s ago: executing program 4 (id=8086): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004022, &(0x7f0000000100)=ANY=[@ANYBLOB="16759409000000301d0000000000000000000000000005e573734abf2d9ba7b52999761ece204cbb5b549ac6d56dc38f7355f89616d0d77a39000000000000001f000000005677213ab9c8676dddfffc46e952c0f2f5a85e7981163427dbbdd0aa1376bb51977aef65d4812b5188b1ece7c7dab13ffe04898f5f8d3c348eca5596bbc2d03fb16d5f4757dc71d77408733f05a7b37a85e97707f9f117c8e4a8b832dc179b8f2f43b80dbec7d3cdbaa266f044786583af5cc3174681ce0ff5607dcd15c51c560506ac2ffd586987c982f7b3f55540c11ec9cc8f487501"]) (async) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) read$FUSE(r0, &(0x7f0000004300)={0x2020}, 0x2020) 1m13.623982024s ago: executing program 4 (id=8087): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000002}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) close_range(r3, r2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x3fb, 0x1}, 0x14) dup(r5) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x492003, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRES32=r1, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES16]) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20800, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.623534904s ago: executing program 4 (id=8088): r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) io_destroy(r1) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) io_destroy(r1) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000180)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e20, @broadcast}}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0) 1m13.510147175s ago: executing program 4 (id=8090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r5, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000000000000370800"]) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "ab64337707aea0f466389eca00e8273fa681ce3683faa418b99df8f987d2dcc4", "c8adf18e5a8118824b62595c46fd5f3ee24b8e85334f1bb786f99f361953f788", "7a6d05b81fea90a253dd77725147d687026d26ca6f00", "d7a3a3c002fb00006d0dd00e2b9d475ee25503cfc59c30a17b27b179bc33d117", "6b72b1f095575b2ed10ba721d53a8bf9c29750ad9c2d5a7a05582a661306a6f7", "d85f4023183cb73b81c01cd4", 0xa00a, 0x7f, 0x8, 0x3ff, 0x8}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4018aee2, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r10, 0xfffffffffaa23000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x3}, &(0x7f0000000080)=0x28) 1m13.449763857s ago: executing program 4 (id=8091): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(r3) (async) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000840)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000003540)={0xc4, 0x24, 0x10, 0x2070bd2c, 0x25dfdbfb, "", [@generic="e6d8b421fb3b01243e81e2efb67c07759d1e91378946fc52df9604160e47503f12f7143e55d7b41f6178dea5dc9ecaad67a2d3bffa89d5eb29ad4aea2a4295474e5d1ece10d40318ab558021f8322be97ff21c62e6c51d2d64077a09deee1dc069815c98eb69c416d1409347deab3c0bd7a0e88845a8e663f3f1416da97313a66ebc997a5c7a4db0d97087092323c2d758b6a36987bbb80d58a30aa6056ce180", @typed={0x9, 0x10d, 0x0, 0x0, @str='sit0\x00'}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r4}]}, 0xc4}], 0x1}, 0x8080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001b"], 0x34}}, 0x0) (async, rerun: 64) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) (async) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) (async) clock_gettime(0x0, &(0x7f0000003440)={0x0, 0x0}) setrlimit(0x8, 0x0) (async) r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r12 = openat$cgroup_ro(r11, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r11, @ANYBLOB="05", @ANYRES16=r11, @ANYRES16=r12, @ANYRES16], 0x0) r13 = dup3(r10, r3, 0x0) ioctl$MON_IOCX_MFETCH(r13, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) (async) recvmmsg(r7, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000380)=""/78, 0xfffffffffffffdd2}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f00000004c0)=""/16, 0x10}, {&(0x7f0000000580)=""/227, 0xe3}, {&(0x7f0000000680)=""/160, 0xa0}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a80)=""/39, 0x27}, {&(0x7f00000008c0)=""/233, 0xe9}], 0xa, &(0x7f0000000a80)}, 0x2}, {{&(0x7f0000000ac0)=@isdn, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/187, 0xbb}], 0x1, &(0x7f0000000c40)=""/92, 0x5c}, 0x800}, {{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f00000034c0)=""/101, 0x65}, {&(0x7f0000000dc0)=""/45, 0x2d}], 0x2, &(0x7f0000000e40)=""/246, 0xf6}, 0x40000}, {{&(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1, &(0x7f0000002000)=""/122, 0x7a}, 0x1ff}, {{&(0x7f0000002080)=@nl=@proc, 0x80, &(0x7f0000003200)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/175, 0xaf}, {&(0x7f00000031c0)=""/17, 0x11}], 0x3, &(0x7f0000003240)=""/177, 0xb1}, 0xfffffff9}], 0x5, 0x11040, &(0x7f0000003480)={r8, r9+60000000}) 1m13.420529897s ago: executing program 4 (id=8093): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000001180)={0x7, 'vlan1\x00', {0x20}, 0x9}) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) (rerun: 64) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) 58.401595924s ago: executing program 37 (id=8093): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8}, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000001180)={0x7, 'vlan1\x00', {0x20}, 0x9}) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 64) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x1800000}, {}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]}) (rerun: 64) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) 30.623738917s ago: executing program 5 (id=8679): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0xa) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000003c0)=0x101, 0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="647455636f6e9fe5fe3df1ec8d52db3ad9f6862469b04d8a2d2c1e01b49448f58c58cfb24f0d4763fb2f906c5f490ac61d6d549da8e83cca7cbc42027b5b017e77379aa5bccfb15aa1d4ab2e0ed9ca5edbec968a45dc01e7ee26a1daa8a79859f421e56fbf8b472411bf1fec4c5a4776ae831ca1e452c5d9d7"]) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x2, 0x9}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7fff, 0x74, 0x9, 0xffcc}, 0x41, [0x2000, 0x2, 0x101, 0x6, 0x401, 0x2, 0xffffffff, 0xa, 0x4efb, 0x9, 0x6c7f0740, 0x68f9e54b, 0x6, 0x5, 0x10001, 0xb83b, 0x9, 0x7, 0x6, 0x0, 0x0, 0x81, 0x2, 0x10001, 0x3ff, 0xfffffff5, 0x8a, 0x2, 0x3, 0x0, 0x5, 0x6, 0xff, 0x90000000, 0x5, 0xd9, 0xfffffffd, 0x800, 0xc7, 0xe, 0x369136e2, 0x7fff, 0x665b, 0x5, 0x8, 0x2, 0x6, 0x6, 0x200, 0xa5, 0x711, 0x5, 0xffffffff, 0x1, 0x1, 0x3, 0x2, 0x80, 0x1dc, 0x2, 0xcb6, 0x4, 0x1, 0xffffffff], [0x5, 0x3, 0x200, 0x7fff, 0x5, 0x3, 0x2, 0x9, 0xf, 0x100, 0x4, 0x7, 0x4, 0x0, 0x6, 0xff, 0xe, 0xd, 0x9, 0x0, 0x24, 0x5, 0x5, 0x0, 0x0, 0x3, 0xcdd, 0xc86, 0x9, 0xdd87, 0x4, 0x2, 0x5, 0xffffffb6, 0x9, 0x7fff, 0x3ff, 0x2, 0x9e, 0x6, 0x7, 0x0, 0x59082dba, 0xc, 0x200, 0xffffff00, 0x2, 0x9, 0x8, 0x80000000, 0x5, 0x1, 0xe, 0x68e, 0xfffffffd, 0x1, 0xf8, 0x2, 0xfffffffd, 0xff, 0x2, 0x5, 0x80000001, 0xffff], [0x2, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x1, 0x6, 0x1, 0xffffffff, 0x80000000, 0x7fff, 0x8, 0x1, 0x8000, 0xff, 0x7, 0x4, 0xfffffff7, 0x0, 0xcf49, 0xfffffffc, 0x8, 0x0, 0x3, 0xfffffffd, 0x7f3, 0x5, 0x0, 0x1000, 0x6, 0x400, 0x1, 0x40, 0x6, 0xa, 0x4, 0xdf8, 0x5, 0x7b9f, 0x401, 0x3, 0x6, 0x8, 0xfffffffe, 0xff, 0x3, 0x2, 0x3, 0x2, 0x3, 0x81, 0x6, 0xfbe0, 0x8, 0xba39, 0x5, 0x8, 0x60000000, 0x1, 0x9, 0x1000, 0x6], [0x4, 0x3, 0x5, 0x1, 0xf, 0x1, 0x2, 0x10000, 0x800, 0x1, 0x1520b68d, 0x0, 0x0, 0xfffff739, 0xb35, 0x6, 0xfffffffc, 0x0, 0x7, 0x3ff, 0x10, 0xb, 0xffffff80, 0x5000000, 0x6, 0x4, 0x2, 0x3, 0x2, 0x9, 0x81, 0x8bed, 0x7, 0x6, 0x6, 0xcce, 0x1, 0x5, 0xc4b, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x7, 0x2, 0x0, 0xb112, 0x6, 0x5, 0xfffeffff, 0xfffe, 0xa, 0x3, 0xffffff81, 0x3, 0x7, 0x6, 0xfffffffe, 0x3, 0x9, 0x8, 0x2, 0xb87]}, 0x45c) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) listen(r0, 0xa) (async) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000003c0)=0x101, 0x4) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) (async) timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="647455636f6e9fe5fe3df1ec8d52db3ad9f6862469b04d8a2d2c1e01b49448f58c58cfb24f0d4763fb2f906c5f490ac61d6d549da8e83cca7cbc42027b5b017e77379aa5bccfb15aa1d4ab2e0ed9ca5edbec968a45dc01e7ee26a1daa8a79859f421e56fbf8b472411bf1fec4c5a4776ae831ca1e452c5d9d7"]) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x2, 0x9}) (async) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (async) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x7fff, 0x74, 0x9, 0xffcc}, 0x41, [0x2000, 0x2, 0x101, 0x6, 0x401, 0x2, 0xffffffff, 0xa, 0x4efb, 0x9, 0x6c7f0740, 0x68f9e54b, 0x6, 0x5, 0x10001, 0xb83b, 0x9, 0x7, 0x6, 0x0, 0x0, 0x81, 0x2, 0x10001, 0x3ff, 0xfffffff5, 0x8a, 0x2, 0x3, 0x0, 0x5, 0x6, 0xff, 0x90000000, 0x5, 0xd9, 0xfffffffd, 0x800, 0xc7, 0xe, 0x369136e2, 0x7fff, 0x665b, 0x5, 0x8, 0x2, 0x6, 0x6, 0x200, 0xa5, 0x711, 0x5, 0xffffffff, 0x1, 0x1, 0x3, 0x2, 0x80, 0x1dc, 0x2, 0xcb6, 0x4, 0x1, 0xffffffff], [0x5, 0x3, 0x200, 0x7fff, 0x5, 0x3, 0x2, 0x9, 0xf, 0x100, 0x4, 0x7, 0x4, 0x0, 0x6, 0xff, 0xe, 0xd, 0x9, 0x0, 0x24, 0x5, 0x5, 0x0, 0x0, 0x3, 0xcdd, 0xc86, 0x9, 0xdd87, 0x4, 0x2, 0x5, 0xffffffb6, 0x9, 0x7fff, 0x3ff, 0x2, 0x9e, 0x6, 0x7, 0x0, 0x59082dba, 0xc, 0x200, 0xffffff00, 0x2, 0x9, 0x8, 0x80000000, 0x5, 0x1, 0xe, 0x68e, 0xfffffffd, 0x1, 0xf8, 0x2, 0xfffffffd, 0xff, 0x2, 0x5, 0x80000001, 0xffff], [0x2, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x1, 0x6, 0x1, 0xffffffff, 0x80000000, 0x7fff, 0x8, 0x1, 0x8000, 0xff, 0x7, 0x4, 0xfffffff7, 0x0, 0xcf49, 0xfffffffc, 0x8, 0x0, 0x3, 0xfffffffd, 0x7f3, 0x5, 0x0, 0x1000, 0x6, 0x400, 0x1, 0x40, 0x6, 0xa, 0x4, 0xdf8, 0x5, 0x7b9f, 0x401, 0x3, 0x6, 0x8, 0xfffffffe, 0xff, 0x3, 0x2, 0x3, 0x2, 0x3, 0x81, 0x6, 0xfbe0, 0x8, 0xba39, 0x5, 0x8, 0x60000000, 0x1, 0x9, 0x1000, 0x6], [0x4, 0x3, 0x5, 0x1, 0xf, 0x1, 0x2, 0x10000, 0x800, 0x1, 0x1520b68d, 0x0, 0x0, 0xfffff739, 0xb35, 0x6, 0xfffffffc, 0x0, 0x7, 0x3ff, 0x10, 0xb, 0xffffff80, 0x5000000, 0x6, 0x4, 0x2, 0x3, 0x2, 0x9, 0x81, 0x8bed, 0x7, 0x6, 0x6, 0xcce, 0x1, 0x5, 0xc4b, 0x1, 0x9, 0x3ff, 0x7, 0x4, 0x7, 0x2, 0x0, 0xb112, 0x6, 0x5, 0xfffeffff, 0xfffe, 0xa, 0x3, 0xffffff81, 0x3, 0x7, 0x6, 0xfffffffe, 0x3, 0x9, 0x8, 0x2, 0xb87]}, 0x45c) (async) 30.211364724s ago: executing program 5 (id=8680): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_IO_FLUSHER(0x39, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000100)="aae0c1779c651b1640836a4e2a9b99b948c5d1454ca6bc4ca893a7292f4d9bb51a531c7d54233fcf7ba1bb4a6b483a5178d7b769f56555960cb79473b42efccaa30a4898fa5e706c58e420d46bc375b8"}) 30.143952166s ago: executing program 5 (id=8683): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket(0x2, 0x3, 0x5) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_SECUREBITS(0x1c, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x300, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r5, &(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) bind$unix(r5, &(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@delpolicy={0x50, 0x14, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in6=@mcast1, @in=@multicast2, 0x4e22, 0xfff8, 0x4e21, 0x9, 0xa, 0x80, 0x80, 0x4, r3, r4}, 0x6e6bb9, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x40084}, 0x44) setuid(0xee00) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200898, 0x0) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4e6) 30.143750586s ago: executing program 5 (id=8684): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) 30.143517395s ago: executing program 5 (id=8685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = syz_io_uring_setup(0x31c7, &(0x7f0000000400)={0x0, 0xa975, 0x2}, &(0x7f00000001c0), &(0x7f0000001540)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000300)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x14008000) time(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) close(0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r2, 0x0, 0x400000107ffff000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xfffffffffffffffd) bind$tipc(r6, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r7, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d3, &(0x7f0000000400)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x23) dup3(r6, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001f9000/0x1000)=nil, 0x1000, 0x2, 0x10, r1, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 30.085229697s ago: executing program 5 (id=8686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x8, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x2, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x7f}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0x39, 0x6, 0x1, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x4, 0x21, 0x80, '\x00', 0x5}, {0x3, 0x1}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0x9, '\x00', 0xd9}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfe, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x6, '\x00', 0x7}]}}) mmap$binder(&(0x7f0000605000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) setuid(0xee01) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001200)={0x7000000a}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 29.993499028s ago: executing program 38 (id=8686): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"73cce1a2b9fbcb97694043ebfb82442d7f428290538e75ff029908cebee95ac2b1febd018ae4703d3263c5b30d4db3243275dd57287ef3c41695e828a0e03b5098370515dc8c9b278addefde0e6ea6ef65a74a3e66e51ee0a646e634cd9cf3ceb03dcf88a235bd6d7a5e64ea39db4636dc9b79c3fc4b6c82b54a6bea17ebf522d474b39c4f6fee3ae29caeec81652b33e49426ec6481fe2262eebd869b7a14a8646751f0b15e94a6bb853e3b3443d254af5852a59766fd5aa457c444e713dbbd7699a8d887ab77e97cf1fd6dd2fe80662726aa9efd1d9c535c161a6b413a473c37876cf8be6867395fe6513e10f14d5c677d301612987f4b25a719961e7bc1d10de8eb93960e40c99b502d401556250d52c53d05eb471d675802ccbbc3de9366ccb6e096b235ae2b81c4f9168f4ce4e741d7e8b381daae4674eacd719870f1f113568e647f04109efd349cb74234c3a469d48e857b3e33ac6a7d7d332a72854c980b550af5a90d997c3c40fbc5fb22492f83675786435181dc40777c05c77ddf9432d2fd86cb3d56393e08f2d9b94b1cb579be8d4110c6a34689fa5972e6879e5c3a7ef48caf8cf42ca467d135665ce259b1dc5ea6c4b07a47260fd8661c29367a99f26a415bea9b5ed5e69d42b8f58ee3f245d4475b05def5960100ef1658d586e1066e24baa59543545c2cca981c6e100a966b52314a8d00863eb35faff0418b5285534298b7d677641b4a5aba2958e1ca74639cd17cf72972aaf8235354157b65f3f06e4e6036c81c33b0464bc6b2d3b9a76323930b1c4c7bf88aad05e2e5332719685c2968ebef1e26f2652bc37b5e4f53617e0bdf41059d7ccf00468537714b77478147d69decae6979b56fa0048f1a9ca8986ba81033850bffe420bed347ec85f23cf78084e5a2f384c9b8ebaf547289fa7b798f53ec2266a9d2150ae353bb8f9a1adc385081366708c819d6ed45a778e5d9ab90333b12d9346d28340d20293a7e9364312bd9ac1048b3ad5306d2f35defb6addea0e6cac0fd8937dbca03968f94433696e77aa48282661b4a3c6aacce6bf023dc078401daf8a7df4081d561fb48c9e6d706123fc273f63203a09addf81dba40f25c2e3ba9035d3678a0f289a3fb0f13baf9e827df7cf7a3b97c3b2504f00e0aa2bc4de28874eb8d88fe393fb165cb8acc6b029eba087bfb614962633e2b00db758e9309b5446e26fcd0634ae2ea70bfd47b9132dd91262554d8fcae51638e9faf2f9fb86a2d5749d56dbb6fb04fde46962ad52d9b9a4bc907ffaa30a007cdeb3df46fb2138bf5baa9ff06e3d708ff8b188d8889d9a8dd95ba74b8e2410bd94e88a3cdfe69927b4d656ff89ab16e8fe7440c707b0e9f308f7164908780c0c1e5e60e6b51281510318de838a4f1e3baf40418deefbc9ab7d4549044c124d0a509d9dc7175fdf469edb9a6"}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x6000, 0x8, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x82, '\x00', 0x7c}, {0xfc, 0x2, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x7f}, {0x0, 0xfa}, {0x1, 0x8f, 0x40, '\x00', 0x4}, {0x39, 0x6, 0x1, '\x00', 0x1}, {0xb}, {0x5, 0x99, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x3}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x4, 0x21, 0x80, '\x00', 0x5}, {0x3, 0x1}, {0x0, 0x2, 0x5, '\x00', 0x10}, {0x48, 0x0, 0x9, '\x00', 0xd9}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfe, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x6, '\x00', 0x7}]}}) mmap$binder(&(0x7f0000605000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) setuid(0xee01) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000001200)={0x7000000a}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.465697165s ago: executing program 0 (id=9291): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0xc, 0x1b, 0x0, 0x1, [@typed={0x3a, 0x0, 0x0, 0x0, @str='}\x00'}]}]}, 0x28}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x891d, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x43200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x1002, 0xd000, 0x0, 0xffffffffffffffff, 0x1}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1.355969987s ago: executing program 0 (id=9292): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0xe42}}, 0x30) close_range(r4, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) gettid() socket(0x10, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r7, @ANYBLOB="05"], 0x0) 1.004768523s ago: executing program 8 (id=9309): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) close(0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 983.742743ms ago: executing program 8 (id=9311): openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) timer_settime(0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0xfffffffffffffe35}}}], 0x50, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 799.222427ms ago: executing program 8 (id=9318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x322) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa02, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000080)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0x80, {0x2000, 0x80af000}}, "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", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023d9b423eb03ccfc0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c3162c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a10b13121e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5597465a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc50872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82e9cc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f685076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae04e89268611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3ffffff7f00000000aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f7fecbee4dea0b9eac600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd491e29f638c162c886a762b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 767.856767ms ago: executing program 8 (id=9319): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r1) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES64=r2], 0x0) (async) read$char_usb(r2, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 538.433821ms ago: executing program 9 (id=9327): syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902810003013140070904000000010120"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@ignoreqv}, {@access_any}, {@afid={'afid', 0x3d, 0x8}}]}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r4, 0xf09) syz_usb_connect$cdc_ncm(0x3, 0x7d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x4, 0x60, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "01"}, {0x5, 0x24, 0x0, 0x89e0}, {0xd, 0x24, 0xf, 0x1, 0x4e80ea52, 0xcb3c, 0xf91, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x39}, [@network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x39, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x7, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xd9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x9, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x4a, 0x7}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x7, 0x5, 0x9, 0xff, 0x7}, 0x48, &(0x7f0000000c00)={0x5, 0xf, 0x48, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x100, 0x1ef00, 0x5, [0x3f00, 0xff3f3f, 0x3f6f, 0x3f, 0xff3f3f, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "171cd6209dc3bf23e8f4904acc1b49ce"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xd5, 0x7, 0x4, 0x9, 0xd}]}, 0x9, [{0x9c, &(0x7f00000006c0)=@string={0x9c, 0x3, "72d346ce3751e04f36d6f0c7a78114d10229ddf6a8673bf9a89cfdee0d37687affba58c9735435de47a73103eb0d71a37065eded90febd9249bb41b87bfc45983511fe99b505002a839df8433becf2dbf8c0f5a271cf7d602775370b921966223e43611ebae1fb7db71c5d18134f5c53c3d3001c3d573d9064e36b88852ffa5b7fecb182f8471574480d05fef10918afbad63042574d5ed2b93d"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x1c09}}, {0x5f, &(0x7f0000000480)=ANY=[@ANYBLOB="5f031d59bd5a25d39b3e0892f90bfde4a99f420dbc242dd319b47c64668def902755708f56b9005eebf98b13245bc83a955a2675a8c47991f319e93d8d911c0b014a029594630c1943bd1f5f94a3f844000000001000000000000000009379dffd0dfb8b17547b2ed65218a87db26ef6839c6e8ff6f223816f6de76a60ae8e342c44cf88d3391f45b71d761088956f1ffa33cee88428aaa196e29f3ae8b4b7592b5520da3e47824c0e6ba7896a"]}, {0xc4, &(0x7f0000000840)=@string={0xc4, 0x3, "a1cb675ad427f1754f1b4383e99de547af186418f762e21aa952b7b90489c70b27bf5e831e09155b637f470f09ee213c4100d302e910b1fbd955c1115e4d84be03d2424e446a3df599b8b52ac77242350eabaf811e2009da6cc59265c47c49a63702c598044f7bdf343c9e16632a765a0bc70f4ae2f3542d6b8ed048f99123335846452d084037a83c18f115c17c41205c18720c5149dc26483d65e2f7db93061446145fedcf02d1356fe31394818f71b805abb5f949a60152244cd24353ad7e982d"}}, {0x1b, &(0x7f0000000940)=@string={0x1b, 0x3, "43b5e62c1bb768b18b68f5c79d77287d0395c9e962767b3a62"}}, {0x3d, &(0x7f0000000980)=@string={0x3d, 0x3, "514734d14908007fadd583188d1b689ffa2ab462d70867ec87b8f7146055a908f0787972711fc03c144deb3fb9e83d7a72eab199370fd3cdb5b92e"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x98, &(0x7f0000000a00)=@string={0x98, 0x3, "431e3718759db3d0638578a7239abeabc411895c63dd0e722ff8cced7a4a9834b6596e5c6c0be68acb28c8afac686cff84621853916ce59c7728a035dbdd96a2890e2bb8424fd3ffb3a63bb7f6dfee946889b85f54a2b3f81336ef65f79ed07bbed9f84fb57c1388fea90585d0dd4e178bcbc67c6ba4fa10b6483d3cb71f08320753c758f32d8a7d20f20736240f78d001ce757c0c29"}}, {0x37, &(0x7f0000000ac0)=@string={0x37, 0x3, "a5fac42625680f9b903ee37c9956aaf7fecfc3a197af14ff7d26d476fbc58f81412dbd6cf92bbac3da0d1b864cfd40176ee5397bb1"}}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6772705f69643d00006159f9e3c659901492835d131142880c337c9a10ce96a3ab6cd906f686a120dc7ca38539bca88025a832dd47c0802a4d9bd7d4177ff2a36a608bdb41d7d60cfc8eeca04a4f193881061a602735adcf4993b8c150d09c2bcf0260582ca39b9faef48c9c778f468192ac797f274e1e8807c106c86f9bc35b370415b0f35c03976121d1e2", @ANYRESDEC=0x0]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d", @ANYRES8], 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000001140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) chmod(&(0x7f0000000bc0)='./file1\x00', 0x80) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r7}, 0x50) 508.412282ms ago: executing program 7 (id=9328): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) timerfd_create(0x9, 0x800) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, 0x0]) io_destroy(r0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) 490.222162ms ago: executing program 9 (id=9329): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) (async) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}}]}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x800) pipe2(0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000140), 0x12) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x200, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bd30bd67c8b0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x23, 0x34, @random="6cefcf8af84df24cf6736fd85651e042b555241ef023701b2ddacdb7da2264"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x193, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @tim={0x5, 0xbe, {0x10, 0x75, 0x6, "2a14c9bf6daebca4ba47b8eca6357658e4914a76883a4597cddbc1c26a840a87119f9f5dc8e4d9853fab0ee3afdd7c3755a6ac7d055c47e2ca841ae1dd1cd626741046a10362143bfd8aa5febe393f5160f56649db70fd308b4d7be5c78a86ce4dbfd0effa144b0fd7adca333e2741924cefb10407d1df41018a175bf0ccc49da5f133e43f2474fc0cb00ae2ec8095f19bed4b717701c8da32e5328ceab24b10d2174fef49c3642480f48c41f521deffe668875808ee152cb78561"}}, @dsss={0x3, 0x1, 0xb8}, @perr={0x84, 0xb6, {0x20, 0xc, [{{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0xa}, {{}, @device_a, 0x7fff, @void, 0xb}, {{}, @broadcast, 0x6, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0xc}, {{}, @device_a, 0x5, @void, 0x2c}, {{}, @device_b, 0x148, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x2b}, {{}, @broadcast, 0x9, @void, 0x27}, {{}, @broadcast, 0x6, @void, 0x13}, {{}, @device_a, 0x6, @void, 0x23}, {{}, @device_b, 0x0, @void, 0x27}, {{0x0, 0x1}, @device_a, 0xe, @value=@device_b, 0x3e}]}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x400d4}, 0x8080) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x200, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bd30bd67c8b0"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x23, 0x34, @random="6cefcf8af84df24cf6736fd85651e042b555241ef023701b2ddacdb7da2264"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x193, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @tim={0x5, 0xbe, {0x10, 0x75, 0x6, "2a14c9bf6daebca4ba47b8eca6357658e4914a76883a4597cddbc1c26a840a87119f9f5dc8e4d9853fab0ee3afdd7c3755a6ac7d055c47e2ca841ae1dd1cd626741046a10362143bfd8aa5febe393f5160f56649db70fd308b4d7be5c78a86ce4dbfd0effa144b0fd7adca333e2741924cefb10407d1df41018a175bf0ccc49da5f133e43f2474fc0cb00ae2ec8095f19bed4b717701c8da32e5328ceab24b10d2174fef49c3642480f48c41f521deffe668875808ee152cb78561"}}, @dsss={0x3, 0x1, 0xb8}, @perr={0x84, 0xb6, {0x20, 0xc, [{{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0xa}, {{}, @device_a, 0x7fff, @void, 0xb}, {{}, @broadcast, 0x6, @void, 0x8}, {{0x0, 0x1}, @broadcast, 0x9, @value, 0xc}, {{}, @device_a, 0x5, @void, 0x2c}, {{}, @device_b, 0x148, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x1, @value, 0x2b}, {{}, @broadcast, 0x9, @void, 0x27}, {{}, @broadcast, 0x6, @void, 0x13}, {{}, @device_a, 0x6, @void, 0x23}, {{}, @device_b, 0x0, @void, 0x27}, {{0x0, 0x1}, @device_a, 0xe, @value=@device_b, 0x3e}]}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x400d4}, 0x8080) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x7200400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c002}, 0x804) syz_io_uring_setup(0x7e2e, &(0x7f0000000000)={0x0, 0x5180, 0x1880, 0x1, 0xc3}, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) pipe2(&(0x7f0000000040), 0x4800) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 275.741315ms ago: executing program 7 (id=9330): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x14, 0x28, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0x8e}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000100)=0xfffffffffffffdea) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x14, 0x28, 0x31f, 0x0, 0x0, "", [@nested={0x4, 0x8e}]}, 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r3, 0x29, 0xcf, 0x0, &(0x7f0000000100)=0xfffffffffffffdea) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) (async) 272.260376ms ago: executing program 7 (id=9331): getresuid(0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x81) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r1, 0xffffffffffffffff, 0x0) 262.470396ms ago: executing program 7 (id=9332): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) munlock(&(0x7f0000d9f000/0x3000)=nil, 0x3000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1c0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x16) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x800, &(0x7f0000000380)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_null}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_off}, {@redirect_dir_off}, {@uuid_on}, {@xino_auto}]}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000140)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @local}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r5, r3, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 240.589326ms ago: executing program 9 (id=9333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xa09ab000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 183.785697ms ago: executing program 9 (id=9334): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x48d01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x800, 0x8) tee(r2, r4, 0x8, 0x5) eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000040)={0x1, r5}) close_range(r2, 0xffffffffffffffff, 0x0) 182.874317ms ago: executing program 9 (id=9335): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1fffffe, 0xfffffffffffffcf0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0x0, 0x13aebce, 0x0, 0xfffffffd}}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x420000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000240)={{0x3, 0xdedf549c19397e4f, 0x80000001}}) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9) umount2(&(0x7f0000000040)='.\x00', 0x2) 174.696767ms ago: executing program 7 (id=9336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x12a) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000040), 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) timerfd_settime(r1, 0x3, &(0x7f0000000280), 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340), 0x8440, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000380)={"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"}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x10000, 0x0, 0x4, 0xefffffff, 0x0, [{0x2, 0x8, 0xfc, '\x00', 0x3}, {0x4, 0x9, 0xfc, '\x00', 0x7c}, {0xfc, 0x12, 0x4, '\x00', 0x1}, {0x11, 0xb, 0x0, '\x00', 0xea}, {}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x1f, 0x1, 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x2}, {0x0, 0xf, 0xf7, '\x00', 0xfc}, {0xa8, 0x6, 0x0, '\x00', 0x11}, {0xb}, {0x9, 0x9, 0x42, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x1}, {0x2, 0x0, 0x6}, {0xff, 0x9, 0x0, '\x00', 0x49}, {0x1, 0x1, 0x80}, {0x7, 0x0, 0x0, '\x00', 0x84}, {0x2, 0x2, 0x6, '\x00', 0x10}, {0x48, 0x4, 0xd, '\x00', 0xfd}, {0x8, 0xc0, 0x3}, {0x4, 0x12, 0x3, '\x00', 0x25}, {0xfd, 0x9, 0x0, '\x00', 0x5}, {0x2, 0x2, 0x9}, {0x9, 0xff, 0x3, '\x00', 0x7}]}}) getdents(r4, &(0x7f0000000100)=""/117, 0x75) getdents64(r4, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r8, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x7}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = creat(&(0x7f0000000080)='./file0\x00', 0x6f) cachestat(r10, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) 151.826357ms ago: executing program 7 (id=9337): prctl$PR_SET_SECUREBITS(0x1c, 0x25) setresuid(0xee01, 0xee01, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x40000000000009, 0x9, 0xfffffffffffffffd, 0x0, 0x10002, 0x2, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r7, 0x45809000) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000234000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, 0x0) 87.835219ms ago: executing program 9 (id=9338): getrandom(&(0x7f0000000040)=""/290, 0x122, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x15) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x49, 0x0, &(0x7f0000000000)) r5 = syz_open_dev$hiddev(&(0x7f0000000180), 0x2, 0x800) ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f00000001c0)={0x3, 0x0, 0x9}) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) fcntl$setpipe(r3, 0x407, 0x10ae) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r8, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000340), 0x2000011a) recvfrom$packet(r9, &(0x7f0000000280)=""/130, 0x82, 0x2002, 0x0, 0x0) 77.425379ms ago: executing program 0 (id=9339): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x80, 0x5}, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x80000006}, {0x6, 0xfa, 0x0, 0x4}]}, 0x10) (async) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[], 0xfdef) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x80, 0x5}, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) 56.705789ms ago: executing program 0 (id=9340): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000040)={0x0, 0x20, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) (async) mmap$binder(&(0x7f0000633000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @exit_looper, @increfs], 0x0, 0x0, 0x0}) 1.92815ms ago: executing program 0 (id=9341): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x90840, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="15fcd5a9fc387d2734df0dc8a5d6c2ebace9572a3ae9915c2488cc30aeb449bd570b59361f4f816a36acdcef1426964c6d7de9f54062925ed37b52339b0655bfb994203d04cd7b89b459a1b3d6f50cb6f11411", 0x53}, {&(0x7f00000000c0)="7e8e678f8b6eb908aa86bd56f897c00fcc0fd456388834aa98f88c621e112f47", 0x20}, {&(0x7f0000000100)}], 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4884}, 0x80c4) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000280)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000002c0)=[{{0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}], 0x8) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000300)=[{{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8) fstatfs(r0, &(0x7f0000000340)=""/21) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f00000003c0)=0x1c, 0x800) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000400)={0x4, {{0xa, 0x4e20, 0xe847, @local, 0x400}}}, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000580)={'erspan0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0xd9b3, 0x5, {{0x1b, 0x4, 0x0, 0x5, 0x6c, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x46, 0x12, "3acf9a7dcd110bd33398872caf35b0fd"}, @ssrr={0x89, 0x27, 0x5b, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @multicast2, @empty, @rand_addr=0x64010102]}, @end, @cipso={0x86, 0x12, 0x0, [{0x0, 0x2}, {0x8b89e0ae59bf0147, 0xa, "3481a480462339de"}]}, @generic={0x86, 0x9, "66012e86f51454"}]}}}}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x1, 0x77, 0xd2, 0x1}, {0x8001, 0x40, 0x0, 0xfe000000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000640)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r7, 0x4004af77, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0xc, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0xc29be9c46d01fc4a}, 0x4040) bind$can_raw(r3, &(0x7f00000008c0), 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r9, 0x118, 0x0, &(0x7f0000000900)=0xb, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000980)={0x8, &(0x7f0000000940)=[{0x8, 0x0, 0x0, 0x3}, {0xfffa, 0xf9, 0x7, 0x8}, {0x74, 0x7, 0x5, 0x3}, {0xa60, 0x5, 0xc}, {0xd9, 0x7, 0x9, 0x7}, {0xff63, 0x0, 0x1b, 0xc355}, {0xc, 0xfe, 0x0, 0x400}, {0x200, 0x19, 0xe, 0x9}]}, 0x10) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000ac0)=0x4, 0x4) r11 = memfd_secret(0x80000) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000b40)={0x0, @private, @broadcast}, &(0x7f0000000b80)=0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000000e40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x234, 0x0, 0x300, 0x9, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000000}, 0x44840) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000e80)) 743.27µs ago: executing program 8 (id=9342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x1, 0x2, 0x7cbbda779fe004e1, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000840) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) 439.02µs ago: executing program 8 (id=9343): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x5a59) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x7fffffff, 0x1000, 0x4a78, 0x4, 0x0, 0xf, 0x4, 0x0, 0x6, 0x3, 0x0, 0x5, 0x0, 0x10, 0xf996, [0x2, 0x400]}}) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000240)="984f28726c1d9ac6a704328262b0048baea7298fd8b6cc8c0acda20c61982b24cf77d4dc59fbd7ddf1488c14f4d1bc73856cdec2", 0x34}, {&(0x7f0000000300)="d4b51b1a3544a59e1e8d8c62a509364da858a2ca08f7712ac073253feedadc83f8353072d8d3e53e77f71dc111de357397fb492b321a82e33d92c570fc9e76f8f3278899d002640ebd79e7d069de6faf8e5abdb3de5105cf885fd3d6a9fcee83e43d5697b6408537c246a9e63eba295e8d25c999c03f4bf795f4f8b33429c2a429e940a73f81f666ac2caa6c94b5124dcaf306b08af686919b5ce2062af09541bb33f369f6db65626a15a74396316206f750e1536db3c253d4d3fbe703d182fff1f56af12dc66fe2457e122397c7972bb3258ac9100ae19538490edf72aabc3adc37", 0xe2}, {&(0x7f0000000400)="22f33870dcc32bc2a2c9f10895b25c4e46da8560031f682e76473b6508fd311d6d9e1b672fefc87ca274909e44457cd5ad75f2940adc72eab930c697c3de4f529c05219445161670d0adc2c4c7716fc0d64a82f57778db256edffcd67bcc0f248eef8e76a107ea1c43e91ea469daae96ccaa3358a7f329", 0x77}, {&(0x7f0000000480)="2ceffbd29f0ed5340b93dca59078e98f3bd5ce4efea80d56f52b94481d7f540bbb385a980aec50805a75f351246f11a19c1a36df1b1508a2ed66f1a15b4336d5e2514350e9d52060", 0x48}, {&(0x7f0000000500)="0a7b94cf4b07725a2137479ef541f78ca20506e429e3d75e9accd3a50ec1516d54ca98cd90635f8f2d0bd6ce39922c40ebb5e9ec249e6241b2d9bd981a30505b5a69b9b50a29341a26385fc989a5e98cebafd92998daa3f7d27f40c2fce0149cc65b1d6f3d0ee53e0ff77de1564429fc8709ebf1fdcba26ebbd0e78173aa8ae3334ede0853f76e9bf561b202a191d03c6fa6ee269c3acd92697ed159016e516d4c54352046bded1e08e004f64b6213e280ca86bc26bed3bf8410f33b6bc9c1e50a9833975df18492c5", 0xc9}, {&(0x7f00000029c0)="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", 0x2f7}], 0x6) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 0s ago: executing program 0 (id=9344): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x31d}) ioctl$KVM_NMI(r0, 0xae9a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) (async, rerun: 64) splice(r3, &(0x7f0000000200)=0x6, r2, &(0x7f0000000240)=0xffffffffffff1b8e, 0x2, 0x0) (rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mount$incfs(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x2010040, &(0x7f0000000180)={[{@rlog_pages={'rlog_pages', 0x3d, 0x5dd9}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0x4}}]}) kernel console output (not intermixed with test programs): interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 403.859069][T20405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 403.871502][ T7978] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 403.890000][ T7978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.899116][ T7978] usb 6-1: config 0 descriptor?? [ 404.125401][T20447] 9pnet_fd: Insufficient options for proto=fd [ 404.136702][T20448] tmpfs: Unknown parameter 'åISÕž8…dQm' [ 404.312713][ T7978] usbhid 6-1:0.0: can't add hid device: -71 [ 404.318806][ T7978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 404.332931][ T7978] usb 6-1: USB disconnect, device number 18 [ 404.808251][T20457] 9pnet_fd: Insufficient options for proto=fd [ 404.864370][T20466] IPv6: Can't replace route, no match found [ 405.543068][T20509] 9pnet_fd: Insufficient options for proto=fd [ 405.907619][T20551] fuse: Bad value for 'fd' [ 405.916359][T20551] 9pnet_fd: p9_fd_create_unix (20551): problem connecting socket: ./file0: -111 [ 406.095256][T20567] overlayfs: failed to clone upperpath [ 406.148003][T20574] overlayfs: failed to clone upperpath [ 406.327581][T20607] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6724'. [ 406.336652][T20607] tipc: Invalid UDP bearer configuration [ 406.336674][T20607] tipc: Enabling of bearer rejected, failed to enable media [ 406.380615][T20616] 9pnet_fd: Insufficient options for proto=fd [ 406.641533][T20645] overlayfs: failed to resolve './file0': -2 [ 406.848991][T20663] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6743'. [ 407.231615][T20703] fuse: Bad value for 'user_id' [ 407.236644][T20703] fuse: Bad value for 'user_id' [ 407.254353][T20706] overlayfs: missing 'lowerdir' [ 407.261122][T20706] overlayfs: missing 'lowerdir' [ 407.555892][T20732] overlayfs: failed to clone upperpath [ 407.748754][T20755] netlink: 'syz.5.6769': attribute type 58 has an invalid length. [ 408.167966][T20767] overlayfs: failed to clone upperpath [ 408.354444][T20786] fuse: Bad value for 'fd' [ 408.396884][T20794] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6783'. [ 408.406687][T20794] tipc: Invalid UDP bearer configuration [ 408.406719][T20794] tipc: Enabling of bearer rejected, failed to enable media [ 408.616599][T20828] bpf: Bad value for 'mode' [ 408.707253][T20842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6800'. [ 408.736295][T20847] fuse: Bad value for 'fd' [ 408.742886][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6802'. [ 408.830313][T20865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=20865 comm=syz.6.6808 [ 408.869905][ T36] audit: type=1326 audit(900.834:54992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20869 comm="syz.6.6810" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae5f8e9a9 code=0x0 [ 408.931784][T20876] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 408.941684][ T36] audit: type=1400 audit(900.904:54993): avc: denied { relabelto } for pid=20875 comm="syz.6.6811" name="cgroup" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 408.968409][ T36] audit: type=1400 audit(900.904:54994): avc: denied { associate } for pid=20875 comm="syz.6.6811" name="cgroup" dev="tmpfs" ino=301 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 408.995713][ T36] audit: type=1400 audit(900.934:54995): avc: denied { unlink } for pid=20229 comm="syz-executor" name="cgroup" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 409.065799][T20897] overlayfs: failed to clone lowerpath [ 409.136174][T20913] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000003ÿÿ00000000000000000003' [ 409.210624][T20926] overlayfs: failed to clone upperpath [ 409.217657][T20926] netlink: 'syz.4.6830': attribute type 27 has an invalid length. [ 409.341326][T20941] netlink: 424 bytes leftover after parsing attributes in process `syz.4.6836'. [ 409.600797][T20949] overlayfs: failed to clone upperpath [ 409.618511][T20951] tipc: Started in network mode [ 409.623417][T20951] tipc: Node identity 00000000000000000040000000000001, cluster identity 4711 [ 409.632476][T20951] tipc: Enabling of bearer rejected, failed to enable media [ 409.642305][T20951] netlink: 'syz.7.6839': attribute type 4 has an invalid length. [ 409.953356][T20991] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6852'. [ 410.529479][T21055] overlayfs: failed to clone upperpath [ 410.625059][T21071] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6884'. [ 411.196844][T21110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21110 comm=syz.6.6898 [ 411.341454][T21119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6902'. [ 411.478880][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6912'. [ 411.488965][T21144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21144 comm=syz.6.6912 [ 411.682697][T21158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21158 comm=syz.6.6918 [ 411.698523][T21162] overlayfs: failed to clone upperpath [ 411.704816][T21158] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 411.731951][T21170] netlink: 165 bytes leftover after parsing attributes in process `syz.4.6922'. [ 411.782101][T21183] netlink: 84 bytes leftover after parsing attributes in process `syz.4.6926'. [ 411.797433][T21191] overlayfs: failed to clone upperpath [ 411.816093][T21194] netlink: 'syz.7.6929': attribute type 19 has an invalid length. [ 411.848463][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6933'. [ 411.866415][T21210] netlink: 5820 bytes leftover after parsing attributes in process `syz.4.6935'. [ 412.130457][T21276] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6957'. [ 412.712267][ T36] audit: type=1400 audit(904.678:54996): avc: denied { create } for pid=21309 comm="syz.6.6971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 412.952396][T21337] overlayfs: failed to clone lowerpath [ 413.012524][T21350] x_tables: duplicate underflow at hook 1 [ 413.200242][T21370] overlayfs: failed to clone upperpath [ 413.220193][ T36] audit: type=1400 audit(905.188:54997): avc: denied { shutdown } for pid=21371 comm="syz.4.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 413.502090][T21382] 9pnet_fd: Insufficient options for proto=fd [ 413.587357][T21404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=21404 comm=syz.5.7002 [ 414.161777][T21423] fuseblk: Unknown parameter '0x0000000000000004' [ 414.351679][T21432] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7013'. [ 414.376168][T21436] 9pnet_fd: Insufficient options for proto=fd [ 414.414007][T21440] 2N: renamed from vcan0 (while UP) [ 414.576477][T21454] 9pnet_fd: Insufficient options for proto=fd [ 414.664039][T21481] 9pnet_fd: Insufficient options for proto=fd [ 414.683453][T21493] 9pnet_fd: Insufficient options for proto=fd [ 415.166914][T21525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7042'. [ 415.620421][T21544] overlayfs: failed to clone upperpath [ 415.648211][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=21547 comm=syz.5.7050 [ 415.730097][T21559] overlayfs: failed to clone upperpath [ 415.767763][T21568] overlayfs: failed to clone upperpath [ 415.813890][T21578] netlink: 'syz.5.7060': attribute type 4 has an invalid length. [ 415.999293][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7063'. [ 416.213149][T21605] overlayfs: failed to clone upperpath [ 416.234340][T21601] 9pnet_fd: Insufficient options for proto=fd [ 416.330812][T21616] overlayfs: failed to clone upperpath [ 416.390917][T21624] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7077'. [ 416.570329][T21637] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7082'. [ 416.935690][T21646] fuse: Unknown parameter '000000000000000000030x0000000000000003' [ 417.006276][T21660] netlink: 393 bytes leftover after parsing attributes in process `syz.4.7090'. [ 417.044216][T21667] netlink: 393 bytes leftover after parsing attributes in process `syz.4.7090'. [ 417.102469][T21678] 9pnet_fd: Insufficient options for proto=fd [ 417.106951][T21681] tipc: Started in network mode [ 417.113569][T21681] tipc: Node identity 4, cluster identity 4711 [ 417.120101][T21681] tipc: Node number set to 4 [ 417.126744][T21685] netlink: 'syz.7.7098': attribute type 13 has an invalid length. [ 417.232239][ T36] audit: type=1326 audit(909.198:54998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.279548][ T36] audit: type=1326 audit(909.198:54999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.314780][T21708] fuse: Unknown parameter 'rootmods' [ 417.320472][ T36] audit: type=1326 audit(909.198:55000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.356738][ T36] audit: type=1326 audit(909.198:55001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.388466][T21715] 9pnet_fd: p9_fd_create_unix (21715): problem connecting socket: ./file0: -111 [ 417.415486][ T36] audit: type=1326 audit(909.198:55002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.448169][ T36] audit: type=1326 audit(909.198:55003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.474195][ T36] audit: type=1326 audit(909.198:55004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.515379][ T36] audit: type=1326 audit(909.198:55005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.542576][ T36] audit: type=1326 audit(909.198:55006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.568589][T21718] tmpfs: Bad value for 'size' [ 417.575930][ T36] audit: type=1326 audit(909.198:55007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21698 comm="syz.7.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0dbb18e9a9 code=0x7ffc0000 [ 417.706485][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7115'. [ 417.717176][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7115'. [ 418.196492][T21745] overlayfs: failed to clone upperpath [ 418.390791][T21769] 9pnet_fd: Insufficient options for proto=fd [ 418.498531][T21778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7129'. [ 418.627664][T21781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7130'. [ 418.660439][T21779] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.668337][T21779] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.675500][T21779] bridge_slave_0: entered allmulticast mode [ 418.682291][T21779] bridge_slave_0: entered promiscuous mode [ 418.689384][T21779] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.696514][T21779] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.703676][T21779] bridge_slave_1: entered allmulticast mode [ 418.710095][T21779] bridge_slave_1: entered promiscuous mode [ 418.765213][T21779] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.772314][T21779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.779637][T21779] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.786709][T21779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.811128][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.818748][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.829317][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.836433][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.845807][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.852951][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.882245][T21779] veth0_vlan: entered promiscuous mode [ 418.894465][T21779] veth1_macvtap: entered promiscuous mode [ 419.050767][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.050802][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.062649][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.070913][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.077861][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.084692][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.092533][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.106398][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.118895][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.125670][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.132771][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.139635][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.146446][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.165286][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.172566][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.179395][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.186183][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.192740][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.199577][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.206511][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.213334][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.220147][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.226903][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.233447][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.240412][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.247411][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.254299][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.263908][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.271713][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.278532][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.285334][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.292994][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.299931][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.306678][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.314698][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.328159][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.335797][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.342835][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.351337][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.359088][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.365811][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.372839][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.386851][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.393602][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.400573][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.409158][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.417013][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.423751][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.430797][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.437853][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.444416][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.451210][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.458003][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.464571][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.471424][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.479773][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.487564][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.487593][T21811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7140'. [ 419.494100][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.510236][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.517057][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.523721][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.531703][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.538813][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 419.545388][T21793] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 420.024007][T21833] 9pnet_fd: Insufficient options for proto=fd [ 420.246831][T21844] overlayfs: failed to clone upperpath [ 420.252761][T21844] overlayfs: failed to clone upperpath [ 420.258743][T21844] overlayfs: failed to clone upperpath [ 420.264662][T21844] overlayfs: failed to clone upperpath [ 420.270569][T21844] overlayfs: failed to clone upperpath [ 420.276412][T21844] overlayfs: failed to clone upperpath [ 420.282213][T21844] overlayfs: failed to clone upperpath [ 420.288088][T21844] overlayfs: failed to clone upperpath [ 420.294005][T21844] overlayfs: failed to clone upperpath [ 420.314904][T21848] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 420.354043][T21852] fuse: Bad value for 'fd' [ 420.886657][T21865] netlink: 'syz.6.7157': attribute type 16 has an invalid length. [ 421.355704][T21898] netlink: 'syz.5.7168': attribute type 1 has an invalid length. [ 421.363629][T21898] netlink: 416 bytes leftover after parsing attributes in process `syz.5.7168'. [ 421.556807][T21907] 9pnet_fd: Insufficient options for proto=fd [ 421.598633][T21912] overlayfs: failed to clone upperpath [ 421.604555][T21912] overlayfs: failed to clone upperpath [ 421.610563][T21912] overlayfs: failed to clone upperpath [ 421.616571][T21912] overlayfs: failed to clone upperpath [ 421.622381][T21912] overlayfs: failed to clone upperpath [ 421.628443][T21912] overlayfs: failed to clone upperpath [ 421.634395][T21912] overlayfs: failed to clone upperpath [ 421.640380][T21912] overlayfs: failed to clone upperpath [ 421.646247][T21912] overlayfs: failed to clone upperpath [ 421.652128][T21912] overlayfs: failed to clone upperpath [ 421.658601][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.667575][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.677392][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.686328][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.695204][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.704725][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.714791][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.723895][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.733872][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.743165][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.752461][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.761861][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.771086][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.780422][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.789379][T21928] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7178'. [ 421.789930][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.807512][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.816580][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.825686][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.834781][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.843947][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.853522][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.862951][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.872232][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.881516][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.890821][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.900016][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.909078][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.918177][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.927123][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.936218][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.945203][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.954923][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.963975][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.973183][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.982256][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 421.991400][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.000697][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.009676][T21930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=21930 comm=syz.5.7178 [ 422.024167][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.033592][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.042893][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.052142][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.061330][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.070631][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.079736][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.089851][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.099656][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.108928][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.118396][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.127538][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.136643][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.145534][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.154646][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.163782][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.173045][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 422.182094][T21912] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 423.009478][T21968] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7192'. [ 423.072524][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 423.072567][ T36] audit: type=1326 audit(915.038:55039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21984 comm="syz.5.7197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb11f8e9a9 code=0x0 [ 423.668282][T22004] fuse: Unknown parameter '¸´³mv×qS#†>&ªóUÕÛ(Ú;1Äå-ZÜm%ßw*6 $®ðbA»ù¬ºÓ' [ 424.326332][T22067] netlink: 'syz.6.7225': attribute type 4 has an invalid length. [ 424.334092][T22067] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7225'. [ 425.194789][T22121] x_tables: duplicate underflow at hook 1 [ 425.259958][T22137] 9pnet_fd: Insufficient options for proto=fd [ 425.492730][T22173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7261'. [ 425.503715][T22173] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000002' [ 425.511115][T22173] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22173 comm=syz.5.7261 [ 425.539062][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7262'. [ 425.556919][T22177] netlink: 'syz.4.7263': attribute type 4 has an invalid length. [ 425.568765][T22177] netlink: 'syz.4.7263': attribute type 4 has an invalid length. [ 425.737909][T22197] netlink: 'syz.4.7271': attribute type 27 has an invalid length. [ 425.949761][T22213] netlink: 'syz.7.7277': attribute type 30 has an invalid length. [ 425.987829][ T46] bridge_slave_1: left allmulticast mode [ 425.999667][T22213] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7277'. [ 426.006129][ T46] bridge_slave_1: left promiscuous mode [ 426.014420][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.022415][ T46] bridge_slave_0: left allmulticast mode [ 426.030481][ T36] audit: type=1400 audit(917.998:55040): avc: denied { execute } for pid=22208 comm="syz.5.7276" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=73550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 426.055097][ T46] bridge_slave_0: left promiscuous mode [ 426.065817][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.220570][ T46] veth1_macvtap: left promiscuous mode [ 426.226346][ T46] veth0_vlan: left promiscuous mode [ 426.372545][T22230] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.379825][T22230] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.387020][T22230] bridge_slave_0: entered allmulticast mode [ 426.393310][T22230] bridge_slave_0: entered promiscuous mode [ 426.400260][T22230] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.407474][T22230] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.414636][T22230] bridge_slave_1: entered allmulticast mode [ 426.421143][T22230] bridge_slave_1: entered promiscuous mode [ 426.475424][T22230] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.482709][T22230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.490074][T22230] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.497144][T22230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.524027][ T3068] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.531942][ T3068] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.542793][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.549908][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.578370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.583276][ T36] audit: type=1326 audit(918.548:55041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22248 comm="syz.4.7289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0a6f8e9a9 code=0x0 [ 426.585466][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.606765][T22230] veth0_vlan: entered promiscuous mode [ 426.629853][T22230] veth1_macvtap: entered promiscuous mode [ 426.664487][T22251] can0: slcan on ttyS3. [ 426.706408][T22250] can0 (unregistered): slcan off ttyS3. [ 427.277143][T22305] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 427.285182][T22305] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 427.286073][T22309] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 427.329910][T22310] 9pnet_fd: Insufficient options for proto=fd [ 427.346190][T22312] rust_binder: Write failure EFAULT in pid:31 [ 427.394911][T22318] 9pnet_fd: Insufficient options for proto=fd [ 427.460610][T22332] ÿÿÿÿÿÿ: renamed from bridge0 (while UP) [ 428.208644][ T36] audit: type=1326 audit(920.178:55042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22362 comm="syz.4.7317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0a6f8e9a9 code=0x0 [ 429.231446][T22371] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7320'. [ 429.450817][T22386] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 429.474485][T22388] netlink: 388 bytes leftover after parsing attributes in process `syz.7.7325'. [ 429.494465][T22388] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7325'. [ 431.322216][T22409] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 431.702900][T22439] rust_binder: Write failure EFAULT in pid:59 [ 431.737167][T22444] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 432.725893][ T36] audit: type=1326 audit(924.682:55043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22463 comm="syz.7.7348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd45d8e9a9 code=0x0 [ 433.318675][T22480] 9pnet_fd: Insufficient options for proto=fd [ 433.384859][T22482] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7356'. [ 433.414776][T22483] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.588604][T22489] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 433.588642][T22489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 433.610789][T22491] batadv_slave_1: entered promiscuous mode [ 433.626053][T22489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:52 [ 433.725330][T22491] batadv_slave_1: left promiscuous mode [ 433.794261][ T36] audit: type=1404 audit(925.742:55044): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 433.810276][T22498] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 165) [ 433.810306][T22498] rust_binder: Error while translating object. [ 433.835929][T22498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 433.842199][T22498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56 [ 433.851703][ T36] audit: type=1404 audit(925.782:55045): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 433.924147][ T36] audit: type=1400 audit(925.782:55046): avc: denied { ioctl } for pid=22497 comm="syz.7.7361" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 434.006735][ T36] audit: type=1400 audit(925.782:55047): avc: denied { call } for pid=22497 comm="syz.7.7361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 434.027492][T22505] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 434.062916][ T36] audit: type=1400 audit(925.862:55048): avc: denied { read write } for pid=21779 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.086381][T22505] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 434.106950][ T36] audit: type=1400 audit(925.862:55049): avc: denied { open } for pid=21779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.165906][ T36] audit: type=1400 audit(925.862:55050): avc: denied { ioctl } for pid=21779 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 434.234017][ T36] audit: type=1400 audit(925.872:55051): avc: denied { create } for pid=22499 comm="syz.4.7362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 434.299277][ T36] audit: type=1400 audit(925.922:55052): avc: denied { name_bind } for pid=22501 comm="syz.7.7363" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 434.372575][ T36] audit: type=1400 audit(925.922:55053): avc: denied { node_bind } for pid=22501 comm="syz.7.7363" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 434.432250][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7369'. [ 435.237487][T22554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7378'. [ 435.268879][T22559] netlink: 'syz.4.7380': attribute type 12 has an invalid length. [ 435.277415][T22559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.284662][T22559] IPv6: NLM_F_CREATE should be set when creating new route [ 435.291923][T22559] IPv6: NLM_F_CREATE should be set when creating new route [ 435.501201][T22580] incfs_lookup_dentry err:-13 [ 435.506006][T22580] incfs: Can't find or create .index dir in ./bus [ 435.512490][T22580] incfs: mount failed -13 [ 436.558898][T22629] rust_binder: 90: no such ref 1 [ 436.563883][T22629] rust_binder: 90: no such ref 2 [ 436.587717][T22636] rust_binder: Write failure EINVAL in pid:95 [ 436.587829][T22638] 9pnet: Could not find request transport: f$ [ 436.845940][ T7979] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 436.969080][T22659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=22659 comm=syz.5.7417 [ 437.007279][ T7979] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.017471][ T7979] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 437.027104][ T7979] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 437.036234][ T7979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 437.044225][ T7979] usb 9-1: SerialNumber: syz [ 437.255029][ T7979] usb 9-1: 0:2 : does not exist [ 437.261640][ T7979] usb 9-1: USB disconnect, device number 2 [ 437.273355][T22227] udevd[22227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 437.588721][T22687] cgroup: Unknown subsys name 'dont_measure' [ 437.653405][T22702] overlayfs: failed to clone upperpath [ 437.837293][T22728] batadv_slave_0: entered promiscuous mode [ 437.843736][T22728] batadv_slave_0: left promiscuous mode [ 437.877738][T22731] netlink: 57 bytes leftover after parsing attributes in process `syz.5.7439'. [ 437.936929][T22737] syzkaller0: entered promiscuous mode [ 437.942520][T22737] syzkaller0: entered allmulticast mode [ 438.145809][T22757] tipc: Started in network mode [ 438.150800][T22757] tipc: Node identity 0000002d00000000000000625f953d01, cluster identity 4711 [ 438.159815][T22757] tipc: Enabling of bearer rejected, failed to enable media [ 438.189340][T22761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7451'. [ 438.435924][ T7978] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 438.579574][T22766] binder: Unknown parameter ' ' [ 438.587221][ T7978] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.598598][ T7978] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 438.611802][ T7978] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.620908][ T7978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.629790][ T7978] usb 9-1: config 0 descriptor?? [ 438.739367][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7457'. [ 438.748481][T22782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7457'. [ 438.780013][T22784] overlayfs: failed to clone upperpath [ 439.042174][ T7978] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 439.051198][ T7978] plantronics 0003:047F:FFFF.001C: usage index exceeded [ 439.061732][ T7978] plantronics 0003:047F:FFFF.001C: item 0 4 2 0 parsing failed [ 439.069659][ T7978] plantronics 0003:047F:FFFF.001C: parse failed [ 439.076122][ T7978] plantronics 0003:047F:FFFF.001C: probe with driver plantronics failed with error -22 [ 439.245639][T22761] binder: Unknown parameter 'ë¦' [ 439.246165][ T36] kauditd_printk_skb: 109 callbacks suppressed [ 439.246186][ T36] audit: type=1400 audit(931.202:55163): avc: denied { ioctl } for pid=22760 comm="syz.8.7451" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 439.251850][ T7978] usb 9-1: USB disconnect, device number 3 [ 439.265180][ T36] audit: type=1400 audit(931.202:55164): avc: denied { remount } for pid=22760 comm="syz.8.7451" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 439.308918][T22790] netlink: 'syz.5.7460': attribute type 1 has an invalid length. [ 439.613164][ T36] audit: type=1326 audit(931.572:55165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22783 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a6f8e9a9 code=0x7fc00000 [ 440.312586][ T36] audit: type=1400 audit(932.272:55166): avc: denied { execmem } for pid=22810 comm="syz.5.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 440.385971][T22814] 9pnet_fd: Insufficient options for proto=fd [ 440.427659][ T36] audit: type=1400 audit(932.392:55167): avc: denied { create } for pid=22822 comm="syz.4.7470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 440.453259][ T36] audit: type=1400 audit(932.412:55168): avc: denied { connect } for pid=22826 comm="syz.4.7471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 440.472486][ T36] audit: type=1400 audit(932.412:55169): avc: denied { write } for pid=22826 comm="syz.4.7471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 440.501427][ T36] audit: type=1400 audit(932.462:55170): avc: denied { create } for pid=22831 comm="syz.4.7473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 440.520637][ T36] audit: type=1400 audit(932.462:55171): avc: denied { wake_alarm } for pid=22831 comm="syz.4.7473" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.915934][ T7978] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 441.066987][ T7978] usb 9-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 441.076197][ T7978] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.084776][ T7978] usb 9-1: config 0 descriptor?? [ 441.090858][ T7978] usb 9-1: selecting invalid altsetting 1 [ 441.099453][ T7978] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 441.109449][T22227] udevd[22227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 441.256424][ T36] audit: type=1400 audit(933.222:55172): avc: denied { getopt } for pid=22854 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 441.292412][T22842] rust_binder: 22841 RLIMIT_NICE not set [ 441.292596][T22842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 441.303409][ T7978] usb 9-1: USB disconnect, device number 4 [ 441.306886][T22865] netlink: 'syz.5.7483': attribute type 2 has an invalid length. [ 441.384309][T22875] overlayfs: failed to resolve 'index=on': -2 [ 441.431747][T22878] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7487'. [ 441.441208][T22878] gretap0: entered promiscuous mode [ 441.822978][ T31] rust_binder: 22840: removing orphan mapping 0:4120 [ 441.845450][T22886] SELinux: policydb string SE Lim§x does not match my string SE Linux [ 441.853942][T22886] SELinux: failed to load policy [ 442.104768][T22920] veth1_macvtap: left promiscuous mode [ 442.110332][T22920] macsec0: entered promiscuous mode [ 442.115581][T22920] macsec0: entered allmulticast mode [ 442.602764][T22924] binder: Unknown parameter '00000000000000000000000' [ 442.720199][T22934] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:138 [ 443.276334][T22961] netlink: 5820 bytes leftover after parsing attributes in process `syz.8.7517'. [ 443.379895][T22976] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7520'. [ 443.389869][T22976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162 [ 443.390253][T22976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 443.399465][T22976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:162 [ 443.422204][T22978] netlink: 'syz.8.7521': attribute type 16 has an invalid length. [ 443.439374][T22979] netlink: 'syz.8.7521': attribute type 16 has an invalid length. [ 443.447217][T22979] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.7521'. [ 443.457038][T22978] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.7521'. [ 443.485679][T22983] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:169 [ 443.527020][T22992] fuse: Unknown parameter '1844674407370955161500000000000000000000003000000000000000000001844674407370955161500000000000000000000' [ 443.585954][T22998] overlayfs: failed to clone upperpath [ 444.060302][T23009] overlayfs: conflicting options: userxattr,metacopy=on [ 444.080452][T23011] 9pnet_fd: Insufficient options for proto=fd [ 444.118028][T23018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7534'. [ 444.123808][T23020] 9pnet_fd: Insufficient options for proto=fd [ 444.129058][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7534'. [ 444.165995][T23024] overlayfs: failed to resolve './file1': -2 [ 444.313380][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 444.313402][ T36] audit: type=1400 audit(936.272:55185): avc: denied { create } for pid=23047 comm="syz.5.7546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 444.370240][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7548'. [ 444.405795][T23055] rust_binder: Write failure EFAULT in pid:174 [ 444.436876][ T36] audit: type=1400 audit(936.402:55186): avc: denied { map } for pid=23058 comm="syz.8.7550" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.446852][T23060] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 444.480836][ T36] audit: type=1400 audit(936.402:55187): avc: denied { read write } for pid=23058 comm="syz.8.7550" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 444.525959][ T36] audit: type=1400 audit(936.402:55188): avc: denied { read } for pid=23058 comm="syz.8.7550" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 444.562966][ T36] audit: type=1400 audit(936.402:55189): avc: denied { open } for pid=23058 comm="syz.8.7550" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 444.596052][ T36] audit: type=1400 audit(936.412:55190): avc: denied { ioctl } for pid=23058 comm="syz.8.7550" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 444.623812][ T36] audit: type=1400 audit(936.452:55191): avc: denied { relabelto } for pid=23058 comm="syz.8.7550" name="54" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 444.659382][ T36] audit: type=1400 audit(936.452:55192): avc: denied { associate } for pid=23058 comm="syz.8.7550" name="54" dev="tmpfs" ino=302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 444.695336][T23066] fuseblk: Bad value for 'fd' [ 444.700828][T23066] netlink: 'syz.5.7553': attribute type 4 has an invalid length. [ 444.817141][T23073] overlay: Unknown parameter 'uid>00000000000000000000' [ 444.899767][ T36] audit: type=1400 audit(936.862:55193): avc: denied { ioctl } for pid=23077 comm="syz.5.7558" path="socket:[76188]" dev="sockfs" ino=76188 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.951674][ T36] audit: type=1400 audit(936.912:55194): avc: denied { connect } for pid=23077 comm="syz.5.7558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 445.029657][T23081] tipc: Cannot configure node identity twice [ 445.047742][T23081] tipc: Cannot configure node identity twice [ 445.323310][T23088] overlayfs: failed to resolve './file2': -2 [ 445.438643][T23102] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7567'. [ 445.736531][T23121] x_tables: duplicate underflow at hook 1 [ 447.200111][T23274] 9pnet_fd: Insufficient options for proto=fd [ 447.468508][T23296] tmpfs: Unknown parameter 'hug%' [ 448.073880][T23392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=23392 comm=syz.4.7657 [ 448.113318][T23391] fuse: Unknown parameter 'f7Îĉf•' [ 448.468679][T23404] netlink: 188 bytes leftover after parsing attributes in process `syz.5.7662'. [ 448.516479][T23412] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 448.832008][T23430] overlayfs: failed to clone upperpath [ 449.256669][T23458] overlay: Unknown parameter 'fowner' [ 449.352526][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 449.380612][ T36] audit: type=1400 audit(941.312:55224): avc: denied { read } for pid=23461 comm="syz.5.7683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.469573][T23472] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7686'. [ 449.697565][T23495] x_tables: duplicate entry at hook 2 [ 449.750303][T23498] new mount options do not match the existing superblock, will be ignored [ 449.780913][T23498] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 449.806119][T23498] netlink: 'syz.4.7694': attribute type 5 has an invalid length. [ 449.840855][T23498] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.7694'. [ 449.900656][T23502] overlayfs: failed to clone upperpath [ 450.283823][T23515] netlink: 4520 bytes leftover after parsing attributes in process `syz.4.7700'. [ 450.295411][T23515] tipc: New replicast peer: 172.30.0.1 [ 450.301882][T23515] tipc: Enabled bearer , priority 10 [ 450.386039][T23522] 9pnet_fd: Insufficient options for proto=fd [ 450.455004][T23543] overlayfs: failed to clone upperpath [ 450.568204][T23558] fuse: Bad value for 'fd' [ 450.775690][ T36] audit: type=1400 audit(942.732:55225): avc: denied { setopt } for pid=23566 comm="syz.8.7715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 450.821543][T23579] overlayfs: missing 'lowerdir' [ 451.025381][ T36] audit: type=1400 audit(942.982:55226): avc: denied { ioctl } for pid=23605 comm="syz.8.7728" path="socket:[78010]" dev="sockfs" ino=78010 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 451.052968][T23606] 9pnet_fd: Insufficient options for proto=fd [ 451.065715][T23618] fuse: Unknown parameter 'rootmïde' [ 451.170069][T23642] bpf: Bad value for 'mode' [ 451.403504][T23666] netlink: 'syz.8.7746': attribute type 4 has an invalid length. [ 451.413169][T23669] fuse: Bad value for 'fd' [ 451.473127][ T36] audit: type=1400 audit(943.432:55227): avc: denied { mounton } for pid=23685 comm="syz.7.7752" path="/65/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 451.475554][T23686] 9pnet_fd: Insufficient options for proto=fd [ 451.532272][ T36] audit: type=1400 audit(943.492:55228): avc: denied { shutdown } for pid=23692 comm="syz.5.7755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 452.244615][ T36] audit: type=1400 audit(944.202:55229): avc: denied { mount } for pid=23732 comm="syz.8.7767" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 452.331946][T23758] overlayfs: failed to clone upperpath [ 452.480419][T23794] 9pnet_fd: Insufficient options for proto=fd [ 452.623729][T23825] 9pnet_fd: Insufficient options for proto=fd [ 452.677995][ T36] audit: type=1400 audit(944.632:55230): avc: denied { setattr } for pid=23831 comm="syz.5.7796" name="KEY" dev="sockfs" ino=78892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 452.719415][T23838] tipc: Enabling of bearer rejected, media not registered [ 452.764829][T23840] bpf: Bad value for 'mode' [ 453.317113][T23889] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7815'. [ 453.329982][ T36] audit: type=1400 audit(945.292:55231): avc: denied { create } for pid=23888 comm="syz.4.7815" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 453.374072][ T36] audit: type=1400 audit(945.332:55232): avc: denied { unlink } for pid=19979 comm="syz-executor" name="file2" dev="tmpfs" ino=1800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 453.485659][T23914] /dev/loop0: Can't lookup blockdev [ 453.520054][T23921] futex_wake_op: syz.5.7827 tries to shift op by 144; fix this program [ 453.528412][T23920] futex_wake_op: syz.5.7827 tries to shift op by 144; fix this program [ 453.558327][T23933] netlink: 84 bytes leftover after parsing attributes in process `syz.7.7830'. [ 453.624918][ T36] audit: type=1400 audit(945.582:55233): avc: denied { setattr } for pid=23940 comm="syz.7.7833" name="RAW" dev="sockfs" ino=78486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 453.940967][T23963] veth0_vlan: entered allmulticast mode [ 454.083912][T23977] overlayfs: missing 'workdir' [ 454.470919][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 454.470940][ T36] audit: type=1400 audit(946.432:55235): avc: denied { ioctl } for pid=23982 comm="syz.7.7847" path="socket:[78572]" dev="sockfs" ino=78572 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 454.510977][ T36] audit: type=1400 audit(946.472:55236): avc: denied { bind } for pid=23984 comm="syz.7.7848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 454.700337][ T36] audit: type=1400 audit(946.662:55237): avc: denied { add_name } for pid=23998 comm="syz.5.7853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 454.730708][T24001] netlink: 'syz.5.7854': attribute type 12 has an invalid length. [ 454.755906][ T36] audit: type=1400 audit(946.662:55238): avc: denied { create } for pid=23998 comm="syz.5.7853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.776573][ T36] audit: type=1400 audit(946.662:55239): avc: denied { associate } for pid=23998 comm="syz.5.7853" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 454.798382][ T36] audit: type=1400 audit(946.662:55240): avc: denied { read open } for pid=23998 comm="syz.5.7853" path="/398/file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.821335][ T36] audit: type=1400 audit(946.662:55241): avc: denied { ioctl } for pid=23998 comm="syz.5.7853" path="/398/file0" dev="tmpfs" ino=2328 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.846063][ T36] audit: type=1400 audit(946.662:55242): avc: denied { unlink } for pid=19463 comm="syz-executor" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 454.891488][ T36] audit: type=1326 audit(946.852:55243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24009 comm="syz.4.7857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0a6f8e9a9 code=0x0 [ 454.923220][T24017] batadv_slave_0: entered promiscuous mode [ 454.930834][T24016] batadv_slave_0: left promiscuous mode [ 455.072074][ T36] audit: type=1400 audit(947.032:55244): avc: denied { accept } for pid=24028 comm="syz.7.7863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 455.741471][T24062] overlayfs: failed to resolve './file0': -2 [ 456.225062][T24109] Invalid ELF header type: 2 != 1 [ 456.265063][T24113] fuse: Unknown parameter '0x00000000000000030x00000000000000030000000000000000000000300000000000000000003' [ 456.318470][T24127] overlay: filesystem on ./bus is read-only [ 456.387788][T24142] netlink: 'syz.4.7906': attribute type 1 has an invalid length. [ 456.916678][T24161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7913'. [ 457.024883][T24189] netlink: 'syz.4.7924': attribute type 27 has an invalid length. [ 457.174234][T24213] overlayfs: failed to resolve './file0': -40 [ 457.582010][T24242] bridge0: port 3(vlan0) entered blocking state [ 457.588439][T24242] bridge0: port 3(vlan0) entered disabled state [ 457.594838][T24242] vlan0: entered allmulticast mode [ 457.600194][T24242] veth0_vlan: entered allmulticast mode [ 457.606477][T24242] vlan0: entered promiscuous mode [ 457.611774][T24242] bridge0: port 3(vlan0) entered blocking state [ 457.618155][T24242] bridge0: port 3(vlan0) entered forwarding state [ 458.078675][T24265] x_tables: duplicate underflow at hook 2 [ 458.726292][T24321] 9pnet_fd: Insufficient options for proto=fd [ 459.427779][T24391] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7989'. [ 459.643692][T24401] fuse: Bad value for 'rootmode' [ 459.649084][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 459.649103][ T36] audit: type=1326 audit(951.612:55256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24337 comm="syz.7.7973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd45d8e9a9 code=0x7fc00000 [ 459.783527][T24414] tmpfs: Unknown parameter 'mpo ¡' [ 459.789980][T24414] 9pnet: p9_errstr2errno: server reported unknown error [ 459.900629][T24419] 9pnet: p9_errstr2errno: server reported unknown error O»Ü‰›Xò۵רѳlú¶uË9ÿÿÿÿ [ 459.956410][ T36] audit: type=1400 audit(951.922:55257): avc: denied { setattr } for pid=24423 comm="syz.7.8003" name="[io_uring]" dev="anon_inodefs" ino=79532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.048709][ T36] audit: type=1400 audit(952.012:55258): avc: denied { connect } for pid=24431 comm="syz.5.8006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.068825][ T36] audit: type=1400 audit(952.012:55259): avc: denied { bind } for pid=24431 comm="syz.5.8006" lport=63 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 460.089348][ T36] audit: type=1400 audit(952.012:55260): avc: denied { name_bind } for pid=24431 comm="syz.5.8006" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 460.110131][ T36] audit: type=1400 audit(952.012:55261): avc: denied { node_bind } for pid=24431 comm="syz.5.8006" saddr=fc00:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 460.240861][T24459] overlayfs: failed to clone upperpath [ 460.258530][T24462] 9pnet_fd: Insufficient options for proto=fd [ 460.502429][T24474] fuse: Unknown parameter 'fdöˆÐè(‡œÞ°ŒÖìv¤äpЋÑ#' [ 460.534305][T24479] fuseblk: Unknown parameter '0x0000000000000004' [ 460.541448][ T36] audit: type=1400 audit(952.502:55262): avc: denied { bpf } for pid=24478 comm="syz.8.8024" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 460.870404][T24500] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8031'. [ 461.411071][ T36] audit: type=1400 audit(953.372:55263): avc: denied { write } for pid=24541 comm="syz.5.8045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 461.445921][ T36] audit: type=1400 audit(953.392:55264): avc: denied { read } for pid=24541 comm="syz.5.8045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 461.599897][ T36] audit: type=1326 audit(953.562:55265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24557 comm="syz.7.8050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd45d8e9a9 code=0x0 [ 461.934742][T24569] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8054'. [ 462.072528][T24579] tipc: Enabling of bearer rejected, failed to enable media [ 462.128057][T24588] 9pnet_fd: Insufficient options for proto=fd [ 463.172510][T24628] netlink: 388 bytes leftover after parsing attributes in process `syz.5.8077'. [ 463.206042][T24631] syzkaller0: entered allmulticast mode [ 463.223002][T24631] syzkaller0: entered promiscuous mode [ 463.244002][T24631] syzkaller0 (unregistering): left promiscuous mode [ 463.269989][T24631] syzkaller0 (unregistering): left allmulticast mode [ 463.962954][T24659] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8087'. [ 464.631303][T24682] netlink: 'syz.5.8094': attribute type 5 has an invalid length. [ 464.701008][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 464.701030][ T36] audit: type=1400 audit(956.662:55270): avc: denied { sqpoll } for pid=24690 comm="syz.5.8097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 464.789419][T24701] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 465.292546][ T36] audit: type=1400 audit(957.252:55271): avc: denied { setopt } for pid=24732 comm="syz.8.8112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 465.543504][T24747] netlink: 'syz.7.8116': attribute type 27 has an invalid length. [ 466.898628][ T36] audit: type=1400 audit(958.862:55272): avc: denied { accept } for pid=24782 comm="syz.8.8128" path="socket:[80522]" dev="sockfs" ino=80522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 466.921687][T24783] veth1_macvtap: left promiscuous mode [ 466.927230][T24783] macsec0: entered promiscuous mode [ 466.932721][T24783] macsec0: entered allmulticast mode [ 467.370740][T24800] tipc: New replicast peer: 255.255.255.255 [ 467.381574][T24800] tipc: Enabled bearer , priority 10 [ 467.641481][T24822] overlayfs: failed to clone lowerpath [ 468.441368][T24854] overlayfs: failed to clone upperpath [ 468.495905][ T310] tipc: Node number set to 1781556589 [ 469.763157][ T36] audit: type=1400 audit(961.722:55273): avc: denied { write } for pid=24925 comm="syz.7.8180" name="file0" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 469.785350][ T36] audit: type=1400 audit(961.722:55274): avc: denied { open } for pid=24925 comm="syz.7.8180" path="/179/file0" dev="tmpfs" ino=1020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 469.808383][ T36] audit: type=1400 audit(961.722:55275): avc: denied { ioctl } for pid=24925 comm="syz.7.8180" path="/179/file0" dev="tmpfs" ino=1020 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 470.108431][ T13] bridge_slave_1: left allmulticast mode [ 470.114194][ T13] bridge_slave_1: left promiscuous mode [ 470.119898][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.127488][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.238158][ T13] veth1_macvtap: left promiscuous mode [ 470.243843][ T13] veth0_vlan: left promiscuous mode [ 470.343816][T24936] 9pnet_virtio: no channels available for device syz [ 470.345367][T24935] 9pnet_virtio: no channels available for device syz [ 470.368601][T24938] 9pnet_fd: Insufficient options for proto=fd [ 470.412178][T24950] overlayfs: failed to clone upperpath [ 470.559498][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8197'. [ 471.242694][T25001] netlink: 'syz.5.8205': attribute type 4 has an invalid length. [ 471.250581][T25001] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.8205'. [ 471.283027][T25007] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8208'. [ 471.394693][T25008] netlink: 'syz.5.8205': attribute type 1 has an invalid length. [ 472.199052][ T36] audit: type=1400 audit(964.162:55276): avc: denied { accept } for pid=25048 comm="syz.8.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 472.730489][T25070] fuseblk: Bad value for 'user_id' [ 472.735695][T25070] fuseblk: Bad value for 'user_id' [ 473.599168][ T36] audit: type=1400 audit(965.562:55277): avc: denied { write } for pid=7978 comm="kworker/1:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81995 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 473.663074][ T36] audit: type=1400 audit(965.622:55278): avc: denied { create } for pid=25112 comm="syz.8.8245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 474.618707][T25172] netlink: 64 bytes leftover after parsing attributes in process `syz.7.8262'. [ 474.641479][T25175] /dev/loop0: Can't lookup blockdev [ 474.776516][T25184] 9pnet_fd: Insufficient options for proto=fd [ 474.873849][T25204] 9pnet_fd: Insufficient options for proto=fd [ 475.582007][T25245] overlayfs: failed to clone upperpath [ 475.600982][T25247] 9pnet_fd: Insufficient options for proto=fd [ 475.619396][T25249] overlayfs: failed to clone lowerpath [ 475.941961][T25261] netlink: 'syz.8.8295': attribute type 4 has an invalid length. [ 475.971634][T25267] 9pnet_fd: Insufficient options for proto=fd [ 475.994913][ T36] audit: type=1400 audit(967.952:55279): avc: denied { mounton } for pid=25270 comm="syz.8.8300" path="/file0" dev="ramfs" ino=82324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 476.035898][ T36] audit: type=1400 audit(967.952:55280): avc: denied { setopt } for pid=25273 comm="syz.7.8301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.073482][ T36] audit: type=1400 audit(967.972:55281): avc: denied { create } for pid=25275 comm="syz.7.8302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 476.092988][T25285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8306'. [ 476.097788][ T36] audit: type=1400 audit(967.982:55282): avc: denied { sys_admin } for pid=25275 comm="syz.7.8302" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 476.181718][ T36] audit: type=1400 audit(968.142:55283): avc: denied { create } for pid=25291 comm="syz.5.8309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 476.633106][ T36] audit: type=1400 audit(968.592:55284): avc: denied { create } for pid=25308 comm="syz.7.8314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.139409][T25329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=25329 comm=syz.8.8322 [ 477.152084][T25329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=25329 comm=syz.8.8322 [ 477.165496][T25329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=25329 comm=syz.8.8322 [ 477.180094][T25329] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8322'. [ 477.241370][T25349] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8328'. [ 477.279597][ T36] audit: type=1326 audit(969.242:55285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25356 comm="syz.5.8330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb11f8e9a9 code=0x0 [ 477.329517][T25361] netlink: 'syz.7.8332': attribute type 16 has an invalid length. [ 477.454459][ T36] audit: type=1400 audit(969.412:55286): avc: denied { bind } for pid=25369 comm="syz.7.8335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 477.492060][T25373] netlink: 'syz.7.8336': attribute type 12 has an invalid length. [ 477.710089][T25381] netlink: 'syz.7.8339': attribute type 2 has an invalid length. [ 478.464360][T25386] netlink: 'syz.7.8341': attribute type 1 has an invalid length. [ 478.494440][T25388] tipc: Started in network mode [ 478.500508][T25388] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 478.508205][T25388] tipc: Enabled bearer , priority 27 [ 479.036069][T25392] overlayfs: failed to resolve './file1': -2 [ 479.042429][T25391] overlayfs: failed to resolve './file1': -2 [ 479.073283][T25395] overlayfs: failed to clone upperpath [ 479.157359][T25404] netlink: 328 bytes leftover after parsing attributes in process `syz.7.8348'. [ 479.167411][ T36] audit: type=1400 audit(971.132:55287): avc: denied { create } for pid=25403 comm="syz.7.8348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 479.392182][ T36] audit: type=1400 audit(971.352:55288): avc: denied { mounton } for pid=25408 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 479.473982][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.481351][T25408] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.488755][T25408] bridge_slave_0: entered allmulticast mode [ 479.495325][T25408] bridge_slave_0: entered promiscuous mode [ 479.502666][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.510053][T25408] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.517491][T25408] bridge_slave_1: entered allmulticast mode [ 479.524120][T25408] bridge_slave_1: entered promiscuous mode [ 479.601763][T25408] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.608920][T25408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.616264][T25408] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.623326][T25408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.635885][ T10] tipc: Node number set to 9546410 [ 479.659735][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.668172][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.691641][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.698795][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.708600][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.715732][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.768541][T25408] veth0_vlan: entered promiscuous mode [ 479.800143][T25408] veth1_macvtap: entered promiscuous mode [ 480.225942][ T7978] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 480.313025][T25454] 9pnet_fd: Insufficient options for proto=fd [ 480.478179][T25473] fuse: Bad value for 'user_id' [ 480.483198][T25473] fuse: Bad value for 'user_id' [ 480.514453][T25475] 9pnet_fd: Insufficient options for proto=fd [ 480.650420][T25491] netlink: 'syz.7.8376': attribute type 4 has an invalid length. [ 481.188669][ T36] kauditd_printk_skb: 72 callbacks suppressed [ 481.188689][ T36] audit: type=1326 audit(973.152:55361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.218548][ T36] audit: type=1326 audit(973.152:55362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.241580][ T36] audit: type=1326 audit(973.152:55363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.264686][ T36] audit: type=1326 audit(973.152:55364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.287926][ T36] audit: type=1326 audit(973.152:55365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.311009][ T36] audit: type=1326 audit(973.152:55366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.334121][ T36] audit: type=1326 audit(973.152:55367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.357244][ T36] audit: type=1326 audit(973.152:55368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.380959][ T36] audit: type=1326 audit(973.152:55369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 481.404284][ T36] audit: type=1326 audit(973.152:55370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25461 comm="syz.8.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 493.711747][T25514] xt_NFQUEUE: number of total queues is 0 [ 493.774803][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 493.774825][ T36] audit: type=1400 audit(985.732:55416): avc: denied { read } for pid=25513 comm="syz.8.8385" name="file0" dev="tmpfs" ino=1546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 493.821863][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 493.829766][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 493.829773][ T36] audit: type=1400 audit(985.772:55417): avc: denied { append } for pid=25524 comm="syz.9.8387" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 493.863113][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 493.871069][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 493.897754][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 493.909419][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 493.917527][T25542] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 493.918919][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 493.934764][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 493.944411][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 493.950640][ T36] audit: type=1400 audit(985.912:55418): avc: denied { map } for pid=25545 comm="syz.9.8392" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 493.952781][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 493.984139][T25533] netlink: 1343 bytes leftover after parsing attributes in process `syz.7.8389'. [ 493.999910][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 494.014014][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 494.029965][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 494.045144][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 494.059937][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 494.075892][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 494.089594][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 494.100964][T25529] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.8388'. [ 494.110651][T25529] netlink: 'syz.8.8388': attribute type 5 has an invalid length. [ 494.925550][ T36] audit: type=1400 audit(986.882:55419): avc: denied { bind } for pid=25578 comm="syz.9.8404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.988595][ T36] audit: type=1400 audit(986.912:55420): avc: denied { write } for pid=25582 comm="syz.7.8405" path="socket:[82674]" dev="sockfs" ino=82674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 495.067946][T25599] rust_binder: Write failure EINVAL in pid:30 [ 495.097891][ T36] audit: type=1400 audit(987.062:55421): avc: denied { watch watch_reads } for pid=25603 comm="syz.9.8414" path="/file0" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 495.308140][T25632] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 495.341006][T25638] incfs: Options parsing error. -22 [ 495.346308][T25638] incfs: mount failed -22 [ 495.958153][T25665] tipc: Cannot configure node identity twice [ 496.669975][ T36] audit: type=1400 audit(988.632:55422): avc: denied { read } for pid=25718 comm="syz.5.8455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 496.713340][T25728] fuse: Bad value for 'fd' [ 496.717980][T25728] fuse: Bad value for 'fd' [ 496.740097][T25734] overlayfs: failed to clone upperpath [ 496.830458][T25753] overlayfs: failed to clone lowerpath [ 496.863542][T25757] sit0: entered promiscuous mode [ 496.917888][ T36] audit: type=1400 audit(988.882:55423): avc: denied { create } for pid=25763 comm="syz.9.8471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 497.191489][T25786] tmpfs: Unknown parameter 'fscon' [ 497.513667][ T36] audit: type=1400 audit(989.472:55424): avc: denied { mount } for pid=25787 comm="syz.5.8480" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 497.536935][T25788] overlayfs: failed to clone upperpath [ 497.709230][T25802] overlayfs: failed to clone upperpath [ 497.788215][ T36] audit: type=1400 audit(989.742:55425): avc: denied { create } for pid=25797 comm="syz.9.8484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 499.049564][T25863] validate_nla: 26 callbacks suppressed [ 499.049590][T25863] netlink: 'syz.9.8504': attribute type 4 has an invalid length. [ 499.073868][T25863] __nla_validate_parse: 26 callbacks suppressed [ 499.073894][T25863] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.8504'. [ 499.265255][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 499.265277][ T36] audit: type=1400 audit(991.222:55427): avc: denied { accept } for pid=25869 comm="syz.5.8507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 499.644006][ T36] audit: type=1400 audit(991.602:55428): avc: denied { nlmsg_write } for pid=25875 comm="syz.7.8509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 499.702051][T25880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8511'. [ 499.784985][ T36] audit: type=1400 audit(991.742:55429): avc: denied { accept } for pid=25892 comm="syz.7.8515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 499.871802][T25901] incfs: Backing dir is not set, filesystem can't be mounted. [ 499.887398][T25901] incfs: mount failed -2 [ 499.973711][T25924] netlink: 228 bytes leftover after parsing attributes in process `syz.8.8527'. [ 500.025913][ T36] audit: type=1400 audit(991.982:55430): avc: denied { map } for pid=25929 comm="syz.8.8530" path="socket:[82886]" dev="sockfs" ino=82886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 500.193992][ T36] audit: type=1326 audit(992.152:55431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.5.8533" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb11f8e9a9 code=0x0 [ 500.494951][ T36] audit: type=1400 audit(992.452:55432): avc: denied { map } for pid=25946 comm="syz.7.8536" path="socket:[82901]" dev="sockfs" ino=82901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.685764][T25957] netlink: 'syz.7.8537': attribute type 32 has an invalid length. [ 500.769333][T25961] overlayfs: failed to resolve './bus/file0': -2 [ 500.792960][T25966] 9pnet_fd: Insufficient options for proto=fd [ 500.793976][ T36] audit: type=1400 audit(992.752:55433): avc: denied { mounton } for pid=25964 comm="syz.7.8542" path="/file0" dev="rootfs" ino=33125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 500.877988][T25982] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8547'. [ 501.299158][T26005] 9pnet_fd: Insufficient options for proto=fd [ 501.305637][ T36] audit: type=1400 audit(993.252:55434): avc: denied { create } for pid=26004 comm="syz.5.8553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 501.487267][T26023] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8559'. [ 501.497698][T26023] IPv6: NLM_F_CREATE should be specified when creating new route [ 502.020607][T26045] 9pnet_fd: Insufficient options for proto=fd [ 502.057992][T26054] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8571'. [ 502.067225][T26054] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8571'. [ 502.076253][T26054] netlink: 'syz.7.8571': attribute type 6 has an invalid length. [ 502.084005][T26054] netlink: 'syz.7.8571': attribute type 5 has an invalid length. [ 502.091789][T26054] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8571'. [ 502.218521][T26072] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 502.298803][T26077] netlink: 'syz.7.8579': attribute type 27 has an invalid length. [ 502.318444][T26077] bridge0: port 3(vlan0) entered disabled state [ 502.324834][T26077] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.332106][T26077] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.394221][T26077] tipc: Resetting bearer [ 502.531114][T26085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8582'. [ 502.620762][ T36] audit: type=1400 audit(994.582:55435): avc: denied { checkpoint_restore } for pid=26089 comm="syz.8.8584" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 502.681268][T26099] cgroup: Invalid name [ 502.982639][ T36] audit: type=1400 audit(994.942:55436): avc: denied { accept } for pid=26134 comm="syz.5.8599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.016657][T26138] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8600'. [ 503.031785][T26138] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.046579][T26138] bridge_slave_1 (unregistering): left allmulticast mode [ 503.054262][T26138] bridge_slave_1 (unregistering): left promiscuous mode [ 503.061789][T26138] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.248959][T26174] netlink: 'syz.7.8612': attribute type 1 has an invalid length. [ 505.154193][T26297] overlayfs: failed to resolve './file0': -2 [ 505.172403][T26301] overlayfs: failed to clone upperpath [ 505.193675][T26304] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.201634][T26304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 505.263854][ T36] audit: type=1400 audit(997.222:55437): avc: denied { create } for pid=26311 comm="syz.7.8657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 506.009504][T26330] netlink: 'syz.7.8663': attribute type 27 has an invalid length. [ 506.017555][T26330] lo: entered promiscuous mode [ 506.022419][T26330] lo: entered allmulticast mode [ 506.029103][T26330] tunl0: entered promiscuous mode [ 506.034227][T26330] tunl0: entered allmulticast mode [ 506.040030][T26330] gre0: entered promiscuous mode [ 506.045054][T26330] gre0: entered allmulticast mode [ 506.051112][T26330] gretap0: entered promiscuous mode [ 506.056407][T26330] gretap0: entered allmulticast mode [ 506.062388][T26330] erspan0: entered promiscuous mode [ 506.067897][T26330] erspan0: entered allmulticast mode [ 506.073757][T26330] ip_vti0: entered promiscuous mode [ 506.079043][T26330] ip_vti0: entered allmulticast mode [ 506.085033][T26330] ip6_vti0: entered promiscuous mode [ 506.090495][T26330] ip6_vti0: entered allmulticast mode [ 506.096676][T26330] sit0: entered promiscuous mode [ 506.101660][T26330] sit0: entered allmulticast mode [ 506.108088][T26330] ip6tnl0: entered promiscuous mode [ 506.113325][T26330] ip6tnl0: entered allmulticast mode [ 506.119262][T26330] ip6gre0: entered promiscuous mode [ 506.124486][T26330] ip6gre0: entered allmulticast mode [ 506.130575][T26330] syz_tun: entered promiscuous mode [ 506.135885][T26330] syz_tun: entered allmulticast mode [ 506.141738][T26330] ip6gretap0: entered promiscuous mode [ 506.147278][T26330] ip6gretap0: entered allmulticast mode [ 506.153426][T26330] bridge0: entered promiscuous mode [ 506.158714][T26330] bridge0: entered allmulticast mode [ 506.164583][T26330] vcan0: entered promiscuous mode [ 506.169724][T26330] vcan0: entered allmulticast mode [ 506.175243][T26330] dummy0: entered promiscuous mode [ 506.180506][T26330] dummy0: entered allmulticast mode [ 506.186556][T26330] veth0: entered promiscuous mode [ 506.191600][T26330] veth0: entered allmulticast mode [ 506.197419][T26330] veth1: entered promiscuous mode [ 506.202485][T26330] veth1: entered allmulticast mode [ 506.208733][T26330] wg0: entered promiscuous mode [ 506.213717][T26330] wg0: entered allmulticast mode [ 506.219570][T26330] wg1: entered promiscuous mode [ 506.224478][T26330] wg1: entered allmulticast mode [ 506.230317][T26330] wg2: entered promiscuous mode [ 506.235221][T26330] wg2: entered allmulticast mode [ 506.240795][T26330] veth0_to_bridge: entered promiscuous mode [ 506.246784][T26330] veth0_to_bridge: entered allmulticast mode [ 506.253658][T26330] veth1_to_bridge: entered promiscuous mode [ 506.259762][T26330] veth1_to_bridge: entered allmulticast mode [ 506.266664][T26330] veth0_to_bond: entered promiscuous mode [ 506.272573][T26330] veth0_to_bond: entered allmulticast mode [ 506.279090][T26330] bond_slave_0: entered promiscuous mode [ 506.284751][T26330] bond_slave_0: entered allmulticast mode [ 506.290875][T26330] veth1_to_bond: entered promiscuous mode [ 506.296643][T26330] veth1_to_bond: entered allmulticast mode [ 506.303029][T26330] bond_slave_1: entered promiscuous mode [ 506.308758][T26330] bond_slave_1: entered allmulticast mode [ 506.314802][T26330] veth0_to_team: entered promiscuous mode [ 506.320585][T26330] veth0_to_team: entered allmulticast mode [ 506.327039][T26330] team_slave_0: entered promiscuous mode [ 506.332719][T26330] team_slave_0: entered allmulticast mode [ 506.338853][T26330] veth1_to_team: entered promiscuous mode [ 506.344599][T26330] veth1_to_team: entered allmulticast mode [ 506.351395][T26330] team_slave_1: entered promiscuous mode [ 506.357168][T26330] team_slave_1: entered allmulticast mode [ 506.363281][T26330] veth0_to_batadv: entered promiscuous mode [ 506.369341][T26330] veth0_to_batadv: entered allmulticast mode [ 506.376101][T26330] batadv_slave_0: entered promiscuous mode [ 506.381984][T26330] batadv_slave_0: entered allmulticast mode [ 506.388443][T26330] veth1_to_batadv: entered promiscuous mode [ 506.394362][T26330] veth1_to_batadv: entered allmulticast mode [ 506.400959][T26330] batadv_slave_1: entered promiscuous mode [ 506.406830][T26330] batadv_slave_1: entered allmulticast mode [ 506.413125][T26330] xfrm0: entered promiscuous mode [ 506.418502][T26330] xfrm0: entered allmulticast mode [ 506.424189][T26330] veth0_to_hsr: entered promiscuous mode [ 506.429881][T26330] veth0_to_hsr: entered allmulticast mode [ 506.436277][T26330] hsr_slave_0: entered promiscuous mode [ 506.441847][T26330] hsr_slave_0: entered allmulticast mode [ 506.447830][T26330] veth1_to_hsr: entered promiscuous mode [ 506.453487][T26330] veth1_to_hsr: entered allmulticast mode [ 506.459791][T26330] hsr_slave_1: entered promiscuous mode [ 506.465351][T26330] hsr_slave_1: entered allmulticast mode [ 506.471310][T26330] veth1_virt_wifi: entered promiscuous mode [ 506.477262][T26330] veth1_virt_wifi: entered allmulticast mode [ 506.483784][T26330] veth0_virt_wifi: entered promiscuous mode [ 506.489773][T26330] veth0_virt_wifi: entered allmulticast mode [ 506.496365][T26330] veth1_vlan: entered promiscuous mode [ 506.501847][T26330] veth1_vlan: entered allmulticast mode [ 506.509469][T26330] vlan1: entered promiscuous mode [ 506.514565][T26330] vlan1: entered allmulticast mode [ 506.519996][T26330] veth1_macvtap: left promiscuous mode [ 506.525476][T26330] veth1_macvtap: entered promiscuous mode [ 506.531225][T26330] veth1_macvtap: entered allmulticast mode [ 506.537747][T26330] veth0_macvtap: entered promiscuous mode [ 506.543503][T26330] veth0_macvtap: entered allmulticast mode [ 506.550097][T26330] macsec0: entered promiscuous mode [ 506.555400][T26330] macsec0: entered allmulticast mode [ 506.556139][T26337] 9pnet_fd: Insufficient options for proto=fd [ 506.561245][T26330] tipc: Resetting bearer [ 506.572805][T26330] tipc: Resetting bearer [ 506.578749][T26330] syztnl2: entered promiscuous mode [ 506.583985][T26330] syztnl2: entered allmulticast mode [ 506.598223][T26330] syztnl1: entered promiscuous mode [ 506.603632][T26330] syztnl1: entered allmulticast mode [ 506.611106][ T3090] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 506.621235][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.628332][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.644148][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.646095][T26348] overlayfs: failed to clone upperpath [ 506.651353][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.666092][T26348] tmpfs: Unknown parameter 'no' [ 506.681638][ T304] bridge0: port 3(vlan0) entered blocking state [ 506.687966][ T304] bridge0: port 3(vlan0) entered forwarding state [ 506.893830][ T36] audit: type=1400 audit(998.852:55438): avc: denied { listen } for pid=26368 comm="syz.5.8677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 506.926769][T26371] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 506.935456][T26371] tipc: Enabled bearer , priority 10 [ 507.120218][T26378] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.127393][T26378] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.134720][T26378] bridge_slave_0: entered allmulticast mode [ 507.141053][T26378] bridge_slave_0: entered promiscuous mode [ 507.147612][T26378] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.154650][T26378] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.161852][T26378] bridge_slave_1: entered allmulticast mode [ 507.168123][T26378] bridge_slave_1: entered promiscuous mode [ 507.220107][T26378] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.227310][T26378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.234602][T26378] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.241650][T26378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.264985][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.272506][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.283627][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.290741][ T3067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.299042][T26383] netlink: 'syz.7.8681': attribute type 46 has an invalid length. [ 507.308988][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.316075][ T3067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.352238][T26378] veth0_vlan: entered promiscuous mode [ 507.368738][T26378] veth1_macvtap: entered promiscuous mode [ 507.419929][T26387] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 507.493343][ T3067] bridge_slave_1: left allmulticast mode [ 507.507671][ T3067] bridge_slave_1: left promiscuous mode [ 507.513880][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.522873][ T3067] bridge_slave_0: left allmulticast mode [ 507.536040][ T3067] bridge_slave_0: left promiscuous mode [ 507.541982][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.586510][T26393] overlay: ./bus is not a directory [ 507.698788][ T3067] veth1_macvtap: left promiscuous mode [ 507.704558][ T3067] veth0_vlan: left promiscuous mode [ 507.846747][T26406] overlayfs: failed to clone upperpath [ 507.968380][T26405] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.975502][T26405] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.983867][T26405] bridge_slave_0: entered allmulticast mode [ 507.990507][T26405] bridge_slave_0: entered promiscuous mode [ 507.997724][T26405] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.005087][T26405] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.012461][T26405] bridge_slave_1: entered allmulticast mode [ 508.019085][T26405] bridge_slave_1: entered promiscuous mode [ 508.098426][T26405] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.105541][T26405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.113044][T26405] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.120205][T26405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.152789][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.161403][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.181545][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.188692][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.201417][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.208541][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.220545][T26415] fuse: Unknown parameter 'useò_id' [ 508.241952][T26405] veth0_vlan: entered promiscuous mode [ 508.254469][T26405] veth1_macvtap: entered promiscuous mode [ 508.339066][ T36] audit: type=1400 audit(1000.302:55439): avc: denied { setopt } for pid=26416 comm="syz.0.8687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 508.704765][T26430] 9pnet_fd: Insufficient options for proto=fd [ 508.745494][T26434] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 508.754161][T26434] overlayfs: missing 'lowerdir' [ 509.148949][ T36] audit: type=1400 audit(1001.112:55440): avc: denied { getopt } for pid=26438 comm="syz.0.8702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.291410][ T36] audit: type=1400 audit(1001.252:55441): avc: denied { map } for pid=26442 comm="syz.0.8704" path="socket:[85744]" dev="sockfs" ino=85744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.095798][ T36] audit: type=1400 audit(1002.052:55442): avc: denied { watch } for pid=26457 comm="syz.8.8710" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 510.135961][ T36] audit: type=1400 audit(1002.092:55443): avc: denied { unmount } for pid=26405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 510.143282][T26462] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.166848][ T36] audit: type=1400 audit(1002.122:55444): avc: denied { accept } for pid=26459 comm="syz.8.8711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 510.406094][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 510.556949][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.567170][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.577518][ T311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.586720][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.594722][ T311] usb 1-1: SerialNumber: syz [ 510.747864][T26499] tipc: New replicast peer: 255.255.255.255 [ 510.754062][T26499] tipc: Enabled bearer , priority 10 [ 510.780514][ T7978] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.791958][ T7978] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.804868][ T311] usb 1-1: 0:2 : does not exist [ 510.806282][ T7978] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.813550][ T311] usb 1-1: USB disconnect, device number 8 [ 510.838404][ T7978] rtc_cmos 00:00: Alarms can be up to one day in the future [ 510.855790][ T7978] rtc rtc0: __rtc_set_alarm: err=-22 [ 510.863712][T26465] udevd[26465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 510.990542][T26539] __nla_validate_parse: 4 callbacks suppressed [ 510.990568][T26539] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8736'. [ 511.021506][T26539] netlink: 59 bytes leftover after parsing attributes in process `syz.7.8736'. [ 511.052860][T26539] netlink: 59 bytes leftover after parsing attributes in process `syz.7.8736'. [ 511.067108][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 511.106958][T26555] x_tables: unsorted underflow at hook 3 [ 511.152546][T26562] 9pnet_fd: p9_fd_create_tcp (26562): problem connecting socket to 127.0.0.1 [ 511.178776][T26570] netlink: 'syz.7.8746': attribute type 19 has an invalid length. [ 511.186755][T26570] netlink: 5 bytes leftover after parsing attributes in process `syz.7.8746'. [ 511.333878][T26583] binder: Bad value for 'defcontext' [ 511.363218][T26591] fuse: Invalid rootmode [ 511.389443][T26585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=26585 comm=syz.9.8752 [ 511.433129][T26609] netlink: 6372 bytes leftover after parsing attributes in process `syz.7.8760'. [ 511.595923][ T7978] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 511.682152][T26619] fuse: Unknown parameter '\%0x0000000000000005' [ 511.760536][ T7978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 511.769841][ T7978] usb 1-1: not running at top speed; connect to a high speed hub [ 511.779930][ T7978] usb 1-1: config 1 interface 0 has no altsetting 0 [ 511.789246][ T7978] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 511.798432][ T7978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.806569][ T7978] usb 1-1: Product: syz [ 511.810808][ T7978] usb 1-1: Manufacturer: syz [ 511.815421][ T7978] usb 1-1: SerialNumber: syz [ 511.865872][ T31] tipc: Node number set to 1603616078 [ 512.031521][T26589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8754'. [ 512.653997][ T7978] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 5 proto 2 vid 0x0525 pid 0xA4A8 [ 512.666969][T26648] rust_binder: Error while translating object. [ 512.667042][T26648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 512.674973][ T7978] usb 1-1: USB disconnect, device number 9 [ 512.683241][T26648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:20 [ 512.684519][T26649] rust_binder: Error while translating object. [ 512.699196][T26649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 512.706179][T26649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:20 [ 512.707453][ T7978] usblp0: removed [ 512.764188][T26651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8778'. [ 512.786080][ T36] audit: type=1400 audit(1004.752:55445): avc: denied { read write } for pid=26658 comm="syz.0.8782" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 512.809306][ T36] audit: type=1400 audit(1004.752:55446): avc: denied { open } for pid=26658 comm="syz.0.8782" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 512.904574][T26662] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 512.904908][T26663] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 512.938180][T26668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 512.938217][T26668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33 [ 512.947718][ T36] audit: type=1400 audit(1004.902:55447): avc: denied { setopt } for pid=26664 comm="syz.7.8784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 512.983497][T26668] syzkaller0: entered promiscuous mode [ 512.989139][T26668] syzkaller0: entered allmulticast mode [ 512.995659][T26668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33 [ 513.002594][ T36] audit: type=1400 audit(1004.942:55448): avc: denied { create } for pid=26667 comm="syz.0.8785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.032124][ T36] audit: type=1400 audit(1004.942:55449): avc: denied { getopt } for pid=26667 comm="syz.0.8785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 513.301813][T26700] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8795'. [ 513.312310][T26699] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8795'. [ 513.343389][T26707] overlayfs: failed to clone upperpath [ 513.353674][T26709] overlayfs: failed to clone lowerpath [ 513.491973][T26731] netlink: 72 bytes leftover after parsing attributes in process `syz.8.8806'. [ 513.544597][T26733] exFAT-fs (rnullb0): invalid boot record signature [ 513.551422][ T36] audit: type=1400 audit(1005.502:55450): avc: denied { mounton } for pid=26732 comm="syz.0.8807" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 513.561608][T26733] exFAT-fs (rnullb0): failed to read boot sector [ 513.594962][T26733] exFAT-fs (rnullb0): failed to recognize exfat type [ 513.625907][T26734] overlay: Unknown parameter 'smackfshat' [ 513.746947][T26737] 9pnet_fd: Insufficient options for proto=fd [ 514.025079][T26756] overlayfs: failed to resolve './file1': -2 [ 514.139703][T26762] batadv_slave_1: entered promiscuous mode [ 514.146106][T26761] batadv_slave_1: left promiscuous mode [ 514.520397][T26776] 9pnet_fd: Insufficient options for proto=fd [ 514.781804][T26792] 9pnet_fd: Insufficient options for proto=fd [ 515.082567][ T36] audit: type=1400 audit(1007.042:55451): avc: denied { write } for pid=26827 comm="syz.0.8841" name="udplite6" dev="proc" ino=4026533722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 515.149046][T26843] overlayfs: failed to clone upperpath [ 515.170183][T26845] netlink: 'syz.9.8846': attribute type 27 has an invalid length. [ 515.192033][T26845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=26845 comm=syz.9.8846 [ 515.325967][ T36] audit: type=1326 audit(1007.282:55452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26850 comm="syz.7.8848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd45d8e9a9 code=0x7cc00000 [ 515.349284][ T311] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 515.506962][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.517999][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.536669][ T311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 515.545884][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.566165][ T311] usb 1-1: config 0 descriptor?? [ 515.979171][ T311] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 515.988093][ T311] pyra 0003:1E7D:2CF6.001D: unknown main item tag 0x0 [ 515.994935][ T311] pyra 0003:1E7D:2CF6.001D: unbalanced collection at end of report description [ 516.014881][ T311] pyra 0003:1E7D:2CF6.001D: parse failed [ 516.026682][ T311] pyra 0003:1E7D:2CF6.001D: probe with driver pyra failed with error -22 [ 516.189375][T26830] 9pnet_fd: Insufficient options for proto=fd [ 516.196042][ T310] usb 1-1: USB disconnect, device number 10 [ 517.508568][T26965] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25626 sclass=netlink_xfrm_socket pid=26965 comm=syz.7.8882 [ 517.567395][T26972] batadv_slave_0: entered promiscuous mode [ 517.573837][T26971] batadv_slave_0: left promiscuous mode [ 517.743950][ T36] audit: type=1400 audit(1009.702:55453): avc: denied { read } for pid=26997 comm="syz.0.8895" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 517.778279][ T36] audit: type=1400 audit(1009.702:55454): avc: denied { open } for pid=26997 comm="syz.0.8895" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 517.805209][T27008] overlayfs: failed to clone upperpath [ 518.104322][ T36] audit: type=1326 audit(1010.062:55455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26944 comm="syz.8.8876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d97d8e9a9 code=0x7fc00000 [ 518.150798][ T36] audit: type=1400 audit(1010.062:55456): avc: denied { listen } for pid=27043 comm="syz.7.8907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 518.185993][ T64] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 518.315881][ T64] usb 1-1: device descriptor read/64, error -71 [ 518.565876][ T64] usb 1-1: device descriptor read/64, error -71 [ 518.567846][T27076] netlink: 'syz.9.8922': attribute type 29 has an invalid length. [ 518.580174][T27076] __nla_validate_parse: 2 callbacks suppressed [ 518.580193][T27076] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.8922'. [ 518.623433][ T36] audit: type=1400 audit(1010.582:55457): avc: denied { accept } for pid=27080 comm="syz.9.8923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 518.834840][ T64] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 518.965880][ T64] usb 1-1: device descriptor read/64, error -71 [ 519.008842][T27116] netlink: 'syz.9.8935': attribute type 4 has an invalid length. [ 519.063536][T27118] overlayfs: failed to clone upperpath [ 519.144004][T27131] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8941'. [ 519.205885][ T64] usb 1-1: device descriptor read/64, error -71 [ 519.316058][ T64] usb usb1-port1: attempt power cycle [ 519.424245][T27157] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=27157 comm=syz.9.8950 [ 519.490975][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8952'. [ 519.503416][T27164] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8952'. [ 519.655893][ T64] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 519.677767][ T64] usb 1-1: device descriptor read/8, error -71 [ 519.836945][ T64] usb 1-1: device descriptor read/8, error -71 [ 519.978616][T27195] netlink: 'syz.7.8963': attribute type 4 has an invalid length. [ 520.016214][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 520.042578][ T36] audit: type=1400 audit(1012.002:55458): avc: denied { nlmsg_tty_audit } for pid=27201 comm="syz.7.8965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 520.085883][ T64] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 520.116920][ T64] usb 1-1: device descriptor read/8, error -71 [ 520.876856][ T64] usb 1-1: device descriptor read/8, error -71 [ 520.987452][ T64] usb usb1-port1: unable to enumerate USB device [ 521.168138][T27238] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 521.177973][ T36] audit: type=1400 audit(1013.152:55459): avc: denied { relabelto } for pid=27237 comm="syz.9.8978" name="file0" dev="tmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:event_device_t:s0" [ 521.219038][T27247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8980'. [ 521.247793][ T36] audit: type=1400 audit(1013.152:55460): avc: denied { associate } for pid=27237 comm="syz.9.8978" name="file0" dev="tmpfs" ino=970 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:event_device_t:s0" [ 521.787828][T27266] futex_wake_op: syz.9.8989 tries to shift op by 144; fix this program [ 521.878814][T27276] netlink: 388 bytes leftover after parsing attributes in process `syz.0.8992'. [ 521.915418][ T36] audit: type=1400 audit(1013.872:55461): avc: denied { create } for pid=27285 comm="syz.9.8995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 522.135920][ T311] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 522.286958][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.297135][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.306795][ T311] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 522.315980][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 522.324050][ T311] usb 1-1: SerialNumber: syz [ 522.341330][T27317] overlayfs: disabling nfs_export due to verity=require [ 522.348426][T27317] overlayfs: missing 'lowerdir' [ 522.354037][T27317] netlink: 100 bytes leftover after parsing attributes in process `syz.9.9006'. [ 522.464657][T27331] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9012'. [ 522.470468][T27333] netlink: 288 bytes leftover after parsing attributes in process `syz.9.9013'. [ 522.501359][T27337] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 522.535446][T27344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9018'. [ 522.537517][ T311] usb 1-1: 0:2 : does not exist [ 522.549459][ T311] usb 1-1: unit 5: unexpected type 0x0a [ 522.557856][ T311] usb 1-1: USB disconnect, device number 15 [ 522.568278][T26465] udevd[26465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 522.622827][ T36] audit: type=1400 audit(1014.582:55462): avc: denied { mounton } for pid=27350 comm="syz.7.9021" path="/510/file0" dev="tmpfs" ino=2821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.624792][T27351] fuse: Unknown parameter 'Îûn0x0000000000000005' [ 523.246788][T27361] 9pnet_fd: Insufficient options for proto=fd [ 523.294899][T27368] 9pnet_fd: Insufficient options for proto=fd [ 523.312635][T27373] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 523.349974][ T36] audit: type=1400 audit(1015.312:55463): avc: denied { listen } for pid=27378 comm="syz.0.9031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.350713][T27379] binder: Unknown parameter 'statl' [ 523.543599][T27395] 9pnet_fd: Insufficient options for proto=fd [ 523.543599][T27396] 9pnet_fd: Insufficient options for proto=fd [ 523.576961][T27398] 9pnet_fd: Insufficient options for proto=fd [ 523.644802][T27406] incfs: Options parsing error. -22 [ 523.650263][T27406] incfs: mount failed -22 [ 523.814668][ T36] audit: type=1400 audit(1015.772:55464): avc: denied { read } for pid=27391 comm="syz.0.9035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 524.153811][T27428] overlayfs: failed to clone upperpath [ 524.366101][T27463] netlink: 580 bytes leftover after parsing attributes in process `syz.7.9057'. [ 524.390788][ T36] audit: type=1400 audit(1016.352:55465): avc: denied { setopt } for pid=27464 comm="syz.9.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 524.447127][T27473] overlayfs: missing 'lowerdir' [ 524.526096][ T36] audit: type=1400 audit(1016.492:55466): avc: denied { ioctl } for pid=27480 comm="syz.0.9062" path="socket:[90351]" dev="sockfs" ino=90351 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.580700][T27488] rust_binder: 132: no such ref 3 [ 524.585866][ T36] audit: type=1400 audit(1016.542:55467): avc: denied { transfer } for pid=27487 comm="syz.0.9066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 524.692613][ T36] audit: type=1400 audit(1016.652:55468): avc: denied { read } for pid=27490 comm="syz.0.9067" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 524.726825][ T36] audit: type=1400 audit(1016.672:55469): avc: denied { open } for pid=27490 comm="syz.0.9067" path="/46/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 524.844084][ T36] audit: type=1400 audit(1016.802:55470): avc: denied { execute } for pid=27490 comm="syz.0.9067" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 524.909189][T27494] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 524.969835][T27497] rust_binder: Error while translating object. [ 524.969870][T27497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 524.976399][T27497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 524.999493][T27500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 525.008735][T27500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 525.039256][ T36] audit: type=1400 audit(1017.002:55471): avc: denied { ioctl } for pid=27503 comm="syz.0.9071" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 525.128101][ T36] audit: type=1400 audit(1017.092:55472): avc: denied { read } for pid=27521 comm="syz.0.9077" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 525.295191][T27550] overlayfs: failed to clone upperpath [ 525.295726][T27551] kvm: user requested TSC rate below hardware speed [ 525.320705][T27553] overlayfs: failed to resolve './file1': -2 [ 526.081869][T27573] overlayfs: failed to clone upperpath [ 526.365881][ T31] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 526.515870][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 526.645900][ T31] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 526.647109][T27601] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9106'. [ 526.675805][T27603] fuse: Bad value for 'group_id' [ 526.680928][T27603] fuse: Bad value for 'group_id' [ 526.687114][T27604] fuse: Bad value for 'group_id' [ 526.692125][T27604] fuse: Bad value for 'group_id' [ 526.795873][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 526.801377][ T31] usb usb1-port1: attempt power cycle [ 527.145928][ T31] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 527.175953][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 527.325903][ T31] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 527.346210][ T31] usb 1-1: Invalid ep0 maxpacket: 64 [ 527.351914][ T31] usb usb1-port1: unable to enumerate USB device [ 527.745014][T27642] netlink: 72 bytes leftover after parsing attributes in process `syz.8.9116'. [ 527.812592][T27658] 9pnet_fd: Insufficient options for proto=fd [ 528.414771][T27684] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9134'. [ 528.648929][ T36] kauditd_printk_skb: 59 callbacks suppressed [ 528.648951][ T36] audit: type=1400 audit(1020.612:55532): avc: denied { mounton } for pid=27706 comm="syz.8.9142" path="/file0/file0" dev="ramfs" ino=89744 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 529.048444][T27712] x_tables: duplicate underflow at hook 1 [ 529.202881][T27727] rust_binder: Write failure EFAULT in pid:171 [ 529.331022][ T36] audit: type=1400 audit(1021.292:55533): avc: denied { shutdown } for pid=27734 comm="syz.0.9149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.593307][ T36] audit: type=1400 audit(1021.552:55534): avc: denied { connect } for pid=27775 comm="syz.0.9162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.629563][ T36] audit: type=1400 audit(1021.592:55535): avc: denied { ioctl } for pid=27784 comm="syz.0.9166" path="socket:[90709]" dev="sockfs" ino=90709 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.665050][ T36] audit: type=1400 audit(1021.622:55536): avc: denied { unmount } for pid=26405 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 529.709898][ T36] audit: type=1326 audit(1021.672:55537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27791 comm="syz.8.9170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d97d8e9a9 code=0x0 [ 530.149314][ T36] audit: type=1326 audit(1022.112:55538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27804 comm="syz.7.9175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd45d8e9a9 code=0x0 [ 530.894363][ T31] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 530.905793][ T31] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 531.541744][T27832] overlayfs: missing 'lowerdir' [ 531.638336][T27848] fuse: Bad value for 'group_id' [ 531.643707][T27848] fuse: Bad value for 'group_id' [ 531.930619][T27861] overlayfs: failed to resolve './file1': -2 [ 531.939542][ T36] audit: type=1400 audit(1023.902:55539): avc: denied { read } for pid=94 comm="acpid" name="event7" dev="devtmpfs" ino=699 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 531.960834][ T36] audit: type=1400 audit(1023.902:55540): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=699 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 531.983051][ T36] audit: type=1400 audit(1023.902:55541): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=699 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 532.113486][T27875] 9pnet_fd: Insufficient options for proto=fd [ 533.064930][T27915] rust_binder: 27912 RLIMIT_NICE not set [ 533.139264][T27935] SELinux: ebitmap: truncated map [ 533.150119][T27935] SELinux: failed to load policy [ 533.352727][T27954] 9pnet_fd: Insufficient options for proto=fd [ 533.359011][T27955] 9pnet_fd: Insufficient options for proto=fd [ 533.395878][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 533.535924][ T10] usb 1-1: device descriptor read/64, error -71 [ 533.795869][ T10] usb 1-1: device descriptor read/64, error -71 [ 534.035903][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 534.185894][ T10] usb 1-1: device descriptor read/64, error -71 [ 534.241118][T27984] EXT4-fs: Ignoring removed check option [ 534.246867][T27984] No source specified [ 534.293207][T27990] overlayfs: failed to clone upperpath [ 534.426247][ T10] usb 1-1: device descriptor read/64, error -71 [ 534.439369][T28008] overlayfs: failed to clone upperpath [ 534.468606][T28013] netlink: 84 bytes leftover after parsing attributes in process `syz.7.9245'. [ 534.535972][ T10] usb usb1-port1: attempt power cycle [ 534.803301][T28035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9251'. [ 534.876022][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 534.897229][ T10] usb 1-1: device descriptor read/8, error -71 [ 535.027057][ T10] usb 1-1: device descriptor read/8, error -71 [ 535.265878][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 535.288394][ T10] usb 1-1: device descriptor read/8, error -71 [ 535.429494][ T10] usb 1-1: device descriptor read/8, error -71 [ 535.466429][T28067] can: request_module (can-proto-0) failed. [ 535.521322][T28080] ªªªªª2: renamed from lo (while UP) [ 535.546172][ T10] usb usb1-port1: unable to enumerate USB device [ 535.555483][T28088] 9pnet_fd: Insufficient options for proto=fd [ 535.562341][T28089] 9pnet_fd: Insufficient options for proto=fd [ 535.575168][T28091] netlink: 'syz.7.9270': attribute type 28 has an invalid length. [ 535.593981][T28097] netlink: 'syz.7.9270': attribute type 28 has an invalid length. [ 535.641235][T28104] netlink: 2 bytes leftover after parsing attributes in process `syz.7.9274'. [ 535.739161][T28120] fuse: Bad value for 'group_id' [ 535.744187][T28120] fuse: Bad value for 'group_id' [ 536.055986][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 536.056006][ T36] audit: type=1400 audit(1028.022:55544): avc: denied { listen } for pid=28123 comm="syz.7.9283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.091870][ T36] audit: type=1400 audit(1028.052:55545): avc: denied { shutdown } for pid=28123 comm="syz.7.9283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 536.153285][T28143] netlink: 76 bytes leftover after parsing attributes in process `syz.9.9289'. [ 536.154323][T28147] netlink: 'syz.0.9291': attribute type 27 has an invalid length. [ 536.174169][T28147] SELinux: security_context_str_to_sid () failed with errno=-22 [ 536.222117][T28150] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.347888][ T36] audit: type=1326 audit(1028.312:55546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28163 comm="syz.7.9296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd45d8e9a9 code=0x0 [ 536.373732][T28172] overlayfs: failed to clone upperpath [ 536.478957][T28186] overlayfs: failed to clone upperpath [ 536.535898][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 536.581377][ T36] audit: type=1400 audit(1028.542:55547): avc: denied { ioctl } for pid=28200 comm="syz.8.9309" path="socket:[91718]" dev="sockfs" ino=91718 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 536.581932][T28201] 9pnet_fd: Insufficient options for proto=fd [ 536.686946][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.703046][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 536.720927][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 536.734785][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 536.750134][ T31] usb 1-1: SerialNumber: syz [ 536.778080][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.785777][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.796677][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.815205][ T64] rtc_cmos 00:00: Alarms can be up to one day in the future [ 536.834621][ T64] rtc rtc0: __rtc_set_alarm: err=-22 [ 536.938036][ T36] audit: type=1400 audit(1028.902:55548): avc: denied { map } for pid=28234 comm="syz.7.9321" path="socket:[92285]" dev="sockfs" ino=92285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.962123][ T36] audit: type=1400 audit(1028.902:55549): avc: denied { read } for pid=28234 comm="syz.7.9321" path="socket:[92285]" dev="sockfs" ino=92285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 537.016464][ T31] usb 1-1: 0:2 : does not exist [ 537.024798][ T31] usb 1-1: USB disconnect, device number 24 [ 537.038653][T26465] udevd[26465]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 537.065677][T28254] 9pnet_fd: Insufficient options for proto=fd [ 537.551091][T28297] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 537.579738][ T36] audit: type=1400 audit(1029.542:55550): avc: denied { setopt } for pid=28303 comm="syz.0.9341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 537.615053][T28311] exFAT-fs (rnullb0): invalid boot record signature [ 537.622064][T28311] exFAT-fs (rnullb0): failed to read boot sector [ 537.634786][T28311] exFAT-fs (rnullb0): failed to recognize exfat type [ 537.648565][T28313] ------------[ cut here ]------------ [ 537.654202][T28313] WARNING: CPU: 0 PID: 28313 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 537.663787][T28313] Modules linked in: [ 537.667753][T28313] CPU: 0 UID: 0 PID: 28313 Comm: syz.0.9344 Not tainted 6.12.30-syzkaller-g8ca57d2ffdcb #0 e7fe04ce3820473f9afe76d0242464e721395bea [ 537.681556][T28313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.691691][T28313] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 [ 537.697703][T28313] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d b4 30 ee 05 00 0f 85 c4 00 00 00 c6 05 a7 30 ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 537.717395][T28313] RSP: 0018:ffffc9000667f880 EFLAGS: 00010246 [ 537.723513][T28313] RAX: 0000000000000000 RBX: 1ffff92000ccff14 RCX: 0000000000000000 [ 537.731592][T28313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000667f928 [ 537.739626][T28313] RBP: ffffc9000667f9b0 R08: ffffc9000667f927 R09: 0000000000000000 [ 537.747668][T28313] R10: ffffc9000667f910 R11: fffff52000ccff25 R12: ffffc9000667f8c0 [ 537.755668][T28313] R13: 000000000000000e R14: dffffc0000000000 R15: 0000000000000000 [ 537.763714][T28313] FS: 00007f6dd86206c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 537.772709][T28313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.779384][T28313] CR2: 0000200000001000 CR3: 000000013b6ae000 CR4: 00000000003526b0 [ 537.787433][T28313] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.795443][T28313] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.803453][T28313] Call Trace: [ 537.806784][T28313] [ 537.809767][T28313] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 537.815891][T28313] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 537.821648][T28313] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 537.827403][T28313] ___kmalloc_large_node+0x9c/0x1d0 [ 537.832642][T28313] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 537.838347][T28313] __kmalloc_large_node_noprof+0x1e/0xe0 [ 537.844105][T28313] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 537.849787][T28313] __kmalloc_noprof+0x26d/0x450 [ 537.854677][T28313] incfs_realloc_mount_info+0xa7/0x4d0 [ 537.860207][T28313] ? incfs_add_sysfs_node+0x118/0x240 [ 537.865615][T28313] incfs_alloc_mount_info+0x479/0x600 [ 537.871049][T28313] incfs_mount_fs+0x3ca/0x960 [ 537.875763][T28313] ? __cfi_incfs_mount_fs+0x10/0x10 [ 537.881008][T28313] ? vfs_parse_fs_string+0x102/0x170 [ 537.886348][T28313] ? selinux_capable+0x38/0x50 [ 537.891146][T28313] legacy_get_tree+0x106/0x1b0 [ 537.895976][T28313] ? __cfi_incfs_mount_fs+0x10/0x10 [ 537.901203][T28313] vfs_get_tree+0xa1/0x290 [ 537.905630][T28313] do_new_mount+0x251/0xb40 [ 537.910174][T28313] ? security_capable+0xcf/0xf0 [ 537.915051][T28313] path_mount+0x688/0x1050 [ 537.919513][T28313] ? putname+0x113/0x150 [ 537.923788][T28313] __se_sys_mount+0x2bd/0x480 [ 537.928513][T28313] ? __x64_sys_mount+0xf0/0xf0 [ 537.933355][T28313] ? __kasan_check_write+0x18/0x20 [ 537.938726][T28313] ? fpregs_restore_userregs+0x11d/0x260 [ 537.944393][T28313] __x64_sys_mount+0xc3/0xf0 [ 537.949040][T28313] x64_sys_call+0x2021/0x2ee0 [ 537.953752][T28313] do_syscall_64+0x58/0xf0 [ 537.958216][T28313] ? clear_bhb_loop+0x50/0xa0 [ 537.962942][T28313] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 537.968905][T28313] RIP: 0033:0x7f6dd778e9a9 [ 537.973338][T28313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.992991][T28313] RSP: 002b:00007f6dd8620038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 538.001464][T28313] RAX: ffffffffffffffda RBX: 00007f6dd79b6080 RCX: 00007f6dd778e9a9 [ 538.009490][T28313] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 538.017679][T28313] RBP: 00007f6dd7810d69 R08: 0000200000000180 R09: 0000000000000000 [ 538.025665][T28313] R10: 0000000002010040 R11: 0000000000000246 R12: 0000000000000000 [ 538.033753][T28313] R13: 0000000000000000 R14: 00007f6dd79b6080 R15: 00007ffe7d4feb78 [ 538.041788][T28313] [ 538.044845][T28313] ---[ end trace 0000000000000000 ]--- [ 538.050421][T28313] incfs: Error allocating mount info. -12 [ 538.056378][T28313] incfs: mount failed -12 [ 538.586429][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!