last executing test programs: 2m41.857999856s ago: executing program 3 (id=96): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @broadcast}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) r0 = memfd_secret(0x80000) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0x8, 0xf32, 0x698d, 0x513}, 0x3e, [0x2, 0x9, 0xffff, 0xfffffffa, 0x101, 0x3, 0xab0, 0x81, 0x7366, 0x8, 0x8, 0x9, 0xf53e, 0x800, 0x2, 0x6, 0xfffffd8c, 0xffffffff, 0x10001, 0x40, 0x5f1b, 0x7fff, 0x4, 0x3, 0xffffffff, 0x6cc8, 0x5, 0x10001, 0x3, 0x5, 0x8, 0x6, 0x7, 0x7, 0x6, 0x4, 0xffffff42, 0x1, 0xff, 0x7f, 0x10, 0xd, 0x3, 0x6, 0x9, 0x3, 0x3, 0xffff, 0x69, 0x100, 0xcd8, 0x7ff, 0x9, 0x1, 0x2, 0x2, 0x4, 0x3, 0xbfa9, 0x2, 0xf, 0xeb, 0x8001, 0x1ff], [0x8, 0x8, 0xc, 0x3ff, 0x2, 0x6, 0x7, 0x100, 0x9, 0x3, 0x4, 0x9, 0x4, 0x2, 0x800, 0xf, 0x4, 0x0, 0x20000000, 0xe4, 0x7, 0x6b, 0x0, 0x6, 0xf3, 0x7, 0x2, 0x3a4d, 0xfffffff7, 0x455a, 0x3, 0x6, 0x7, 0x6, 0x1c0000, 0x2, 0x42bbe051, 0x1, 0x40e47c46, 0x81, 0x0, 0xfffffffc, 0x2, 0x1, 0x3, 0x0, 0x7fff, 0x79, 0x0, 0x3, 0x4, 0x2, 0x8, 0x0, 0x6, 0x8, 0xffffffd3, 0x6, 0x80000000, 0x0, 0x9f0, 0x1ff, 0x0, 0x8001], [0x5, 0x5, 0x7, 0x7, 0x3, 0x5, 0x7f, 0x2, 0x4, 0x7, 0x84, 0x0, 0x1, 0x8d, 0x3, 0x3, 0x9, 0xc22, 0x6, 0x8f58, 0xc, 0x6bfdb25b, 0xf474, 0x40, 0x2, 0x8, 0xffffff80, 0x8, 0x5, 0x6df6, 0x5, 0xfffff800, 0x10, 0x3, 0xf09, 0x0, 0xb, 0x0, 0x6, 0x9f7b, 0x5, 0x8, 0x269e, 0x2, 0x3, 0x1, 0x2, 0x1, 0x0, 0xed, 0x3ff, 0x400, 0x5, 0xfffffff9, 0x6, 0xffffff7d, 0x0, 0x5, 0x3, 0x663abb76, 0xecb, 0x8, 0x71306a91, 0x8], [0x6, 0x9, 0xe, 0x2, 0x8, 0xffff0534, 0x9, 0x2, 0x1ff, 0xc81, 0xd, 0xb, 0x40, 0x6, 0x80000000, 0x6, 0x0, 0x2, 0x627d, 0xc, 0x41, 0x78, 0x4, 0x3, 0xb6a0, 0x9, 0x10001, 0x7fffffff, 0x7, 0x5, 0x9, 0x6, 0x3e291f6f, 0x6, 0x248, 0xff, 0x6, 0x8, 0x6, 0x7fffffff, 0x9, 0x8, 0x7, 0x5, 0x3, 0x2, 0x17c1dd4f, 0x9, 0x100, 0x3, 0x5, 0xa4, 0x8, 0x29b0, 0x9, 0x594, 0x8886, 0x9, 0x7f, 0x3, 0xffffff6e, 0x6a43dcd5, 0x0, 0x4]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setpgid(r2, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m41.741244006s ago: executing program 3 (id=99): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000030c0), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRES32=r1]) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.596828757s ago: executing program 3 (id=101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x66b}], 0x1, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r3, 0x52534000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x1000080002, 0x100000000000088) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) (async) socket$inet6(0xa, 0x802, 0x88) (async) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x66b}], 0x1, 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r3, 0x52534000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 2m41.466937348s ago: executing program 3 (id=104): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x1) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) dup3(r2, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x420000, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000180)='./file1\x00', 0x5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000001c0)={0x4}) renameat2(r4, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000001040)='./file1\x00', 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) accept(r2, &(0x7f00000006c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0xfffffef8) 2m41.43903919s ago: executing program 3 (id=105): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000300)=0x9, 0x4) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) (async) socket$key(0xf, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000000240)=0xffffffffffffff94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x40000000}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) (async) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r4) (async) close_range(r1, 0xffffffffffffffff, 0x0) 2m41.398253524s ago: executing program 3 (id=106): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="9444c1eb3cfb08b878fbd1ade5dc9fb22c6eba6b35a800e697917d2e363d0e9a7d0ff07a67e451af11c3d6ab7d7851a17aa24e159ed0d3dcd46924f9196e8ffd5f62db2bc4c733e54a3456a7bab8f7e4c10dccd17e7a5f46778f903d339a24ea84054b14d7c9637eba9da107db6341c701ac0ab4a03fbe1afa539dfcd75d08a42ed1577a01d860a36ce703df8c3726137cf9c7a5a168f4c510ecd2db2cb4d007919eda34cb2d8789f1afbb161246cc951f85bf403a0bb824214bb0a1ffce0d828fd66a98b9c82e2617e0193b972639793b468aaeb3", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,nodevmap,\x00']) r3 = socket(0x15, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') fstat(r0, &(0x7f0000000400)) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000400), 0x8) listen(r6, 0xf) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') setresuid(0xee01, 0xee01, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r4, &(0x7f00000026c0)={0x2020}, 0x2020) 2m41.367718276s ago: executing program 32 (id=106): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="9444c1eb3cfb08b878fbd1ade5dc9fb22c6eba6b35a800e697917d2e363d0e9a7d0ff07a67e451af11c3d6ab7d7851a17aa24e159ed0d3dcd46924f9196e8ffd5f62db2bc4c733e54a3456a7bab8f7e4c10dccd17e7a5f46778f903d339a24ea84054b14d7c9637eba9da107db6341c701ac0ab4a03fbe1afa539dfcd75d08a42ed1577a01d860a36ce703df8c3726137cf9c7a5a168f4c510ecd2db2cb4d007919eda34cb2d8789f1afbb161246cc951f85bf403a0bb824214bb0a1ffce0d828fd66a98b9c82e2617e0193b972639793b468aaeb3", @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,nodevmap,\x00']) r3 = socket(0x15, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e00050300000000000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') fstat(r0, &(0x7f0000000400)) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f0000000400), 0x8) listen(r6, 0xf) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='dn+\x88\xfe\xf7\x01') setresuid(0xee01, 0xee01, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r4, &(0x7f00000026c0)={0x2020}, 0x2020) 2m34.942905664s ago: executing program 1 (id=206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x139000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000700000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000303050000000000000000000500000a0c000200fffffff8"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24000844) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de18010040"]) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[], [], 0x2f}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000003c0)={'\x00', 0x10, 0x6, 0x94, 0x0, 0x2, 0x1, 0xf000, '\x00', 0x6}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r11}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.855921861s ago: executing program 1 (id=207): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x400, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd25, 0x70bd2a, 0x70bd2c, 0x2}}]}, 0x154}}, 0x4810) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'gre0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x6, 0x3b4f, {{0x6, 0x4, 0x3, 0x18, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @loopback, @private=0xa010100, {[@ra={0x94, 0x4}]}}}}}) ppoll(&(0x7f0000000240)=[{r0, 0xc4}], 0x1, 0x0, 0x0, 0x0) 2m33.958530773s ago: executing program 1 (id=212): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, 0x0, &(0x7f0000003c00)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 2m33.957424743s ago: executing program 1 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190028000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130) ioctl$SIOCSIFHWADDR(r3, 0x40106726, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0xfffffffffffff341) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.912491116s ago: executing program 1 (id=215): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone3(&(0x7f0000000340)={0x2000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x1b}, &(0x7f0000000180)=""/141, 0x8d, &(0x7f0000000240)=""/165, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='net/psched\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) 2m33.779176177s ago: executing program 1 (id=216): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) ioctl$ASHMEM_GET_NAME(r0, 0x40087708, 0x0) 2m33.770127398s ago: executing program 33 (id=216): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x0}) ioctl$ASHMEM_GET_NAME(r0, 0x40087708, 0x0) 42.578946449s ago: executing program 0 (id=2230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4001000010003306000000000000000064010102000000000000000000000000fe8000000000000000000000000000bb00004000001080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') unshare(0x28020480) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, 0x0) fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r5, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500000ee1a6a59294"], 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0x33, 0x5, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0xffff7ffc, 0xfffffffd, 0x6, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0xc}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/uts\x00') ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc0046209, &(0x7f0000001340)) 40.253405456s ago: executing program 0 (id=2253): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) timer_create(0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)) (async) timer_create(0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) timer_delete(r1) (async) timer_delete(r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) timer_delete(r1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000240)={0x2}) r2 = accept4(r0, &(0x7f0000000280)=@in={0x2, 0x0, @dev}, &(0x7f0000000300)=0x80, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xa3, 0x2, 0x101, 0x43, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x700, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x8000, 0x10, 0x1, 0x3, {{0x9, 0x4, 0x0, 0x15, 0x24, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0xe, 0x1, [{0x7, 0x8, "b59fa407dd9d"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x40, 0xf8, 0x4, 0x45, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x4bb007b2c914479f, 0x8, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x40, 0xf8, 0x4, 0x45, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x10, 0x4bb007b2c914479f, 0x8, 0x8}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x4c4, r3, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x439}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '$+T\xe0)(\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '}:Z#/**(-\xcb\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x164, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2e17}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xbe@#(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb11}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[])%\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'IDLETIMER\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2000000}, @ETHTOOL_A_BITSET_VALUE={0xae, 0x4, "a198c2e2cd3a52614338051c693b4bdce816cfdf33f7f63502961b78857d626622f6a18c38d7002c1e3dc710005e8872acaf9f3b6ac9acee54cc1fee56c345f481eba56d200027d85d74bdb7dae7aeb4f3fd6b2e33b670a5cfd3ab1a37eb10908f2c61574b8bbda909792e5712f21a5d6c0deaf62e1953912201fbc42bb6112b9d7ae409b9371eaea6a970e100b1f2c66628444d69ad905ab0ea87e641f6a6cb65f9c72efd990a4a7559"}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "1b9b809aff4255e1a333a545ac114382d2730087c29d5c340dde48040224df3e2b7923d9c3ecb23e19b6ba8593f74bbd10dc09f4e2f567c8ff4a5aced55649dcf72c5419f85383cdc4b8ce989c4fc6646db5e65d807a31d462749601fce8c4cc2656c0617b8f586e46443ebeef7fa459f3301923054a81ecdbad375a6ec2e6fc5d2897e6b13d31327b542439e6f926c564f671ca88c0ce6a52bacd25caf2378a44fca062fc47cf6f3c"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x44008085}, 0x8000) timer_gettime(r1, &(0x7f0000000b80)) setxattr$trusted_overlay_nlink(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)={'L+', 0x81}, 0x16, 0x2) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)={'L+', 0x81}, 0x16, 0x2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x3a3, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, 0x0, 0x200, 0x70bd2d, 0x3a3, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3ff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) add_key(&(0x7f0000000d80)='dns_resolver\x00', &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) r7 = add_key(&(0x7f0000000d80)='dns_resolver\x00', &(0x7f0000000dc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r7, 0x9, 0x8000000000000000, r8) (async) keyctl$reject(0x13, r7, 0x9, 0x8000000000000000, r8) openat$cgroup(0xffffffffffffffff, &(0x7f0000000e80)='syz1\x00', 0x200002, 0x0) (async) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e80)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, r9, 0x15a59000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r9, 0x80047213, &(0x7f0000000ec0)) keyctl$link(0x8, r8, r7) (async) keyctl$link(0x8, r8, r7) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000f40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000f80)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001440)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000000fc0)={0x40c, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r6}, {0x294, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7, 0x8, 0xd}, {0xfff1, 0x8, 0xb4, 0x1000}, {0x10, 0xea, 0xc, 0x7}, {0x5, 0x8, 0x27, 0x7}, {0x3, 0x6, 0x8, 0x6}, {0x4, 0x8, 0x14, 0x7}, {0xee, 0x6, 0x8, 0x3}, {0x209, 0x8, 0x6, 0x1}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x800, 0x2, 0x5, 0x5d}, {0x3, 0xa, 0x0, 0x2}, {0xf, 0x7, 0x8, 0xffffffff}, {0x3, 0x1, 0x84, 0x3}, {0x6, 0x3, 0x9, 0x4}, {0x0, 0x1, 0x8, 0xfffffff9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008804}, 0x10) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x6c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008804}, 0x10) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000015c0), 0x400, 0x0) r13 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r12, 0x4c81, r13) 40.252501106s ago: executing program 0 (id=2255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de9d000040"]) r3 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r3, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x485, 0x0, 0xa}]}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x7c, 0x0, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0xeeee0000, 0x8, 0x8, 0x3, 0xd2, 0x40, 0x7, 0x0, 0x2e, 0x19, 0x9}, {0x5000, 0xdddd0002, 0x3, 0x0, 0x40, 0x7, 0x7d, 0x6, 0x5, 0x0, 0x3, 0x5}, {0x3000, 0xdddd0000, 0x8, 0x5, 0x1, 0x7, 0x0, 0x9, 0x0, 0xa7, 0x5, 0x81}, {0x6000, 0x100000, 0xa, 0x6, 0x3, 0x42, 0xb, 0xf8, 0x8, 0x7, 0xe, 0xe}, {0x8000000, 0xffff1000, 0xb, 0x3, 0x15, 0x2, 0xab, 0x7f, 0x1, 0x83, 0xf7, 0x83}, {0x1000, 0x80a0000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x6000, 0x8000000, 0x4, 0x5, 0x0, 0x5, 0x4, 0x3, 0x5, 0x81, 0x3, 0x70}, {0x100000, 0xeeef0000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0x8, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0xdddd0000, 0x7}, 0x80000031, 0x0, 0x6000, 0x2024, 0x6, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x3]}) ioctl$KVM_GET_SREGS2(r7, 0x8140aecc, &(0x7f0000000500)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000180)=ANY=[@ANYBLOB="6d61783d30303030303030303030303030303030303030303030302c0066c539cc28f78ae8e58c4e5336caf02eaeccfde242bf8dd9e6546708051d1fa7e41e2e40eee7af08095297d1f1664dbb67f64ae3e5ceeb98b58337198eb6192712c0fee74d010c368927ecd4b0ee65a5b18e224a6785cbcf084e8eb089e5fe05d380e459630ec728e7dc9bec665583ac8c48f70ba72eb14c5a0b81e4b5ebfac870f68d2589e0b954"]) 40.049364403s ago: executing program 0 (id=2263): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') unshare(0x62040200) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x10000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3) sendmsg$netlink(r3, 0x0, 0xc815) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000fa5a000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x1, 0x7c) fchdir(r6) ioctl$VT_RELDISP(r6, 0x5605) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, 0x0, &(0x7f0000000200)=0x28) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f0000000040)=0xb, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000005c0)=0x1b) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) 39.970540889s ago: executing program 0 (id=2268): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) io_setup(0x8f0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000000)='./file0\x00', 0x5) 39.882893106s ago: executing program 0 (id=2270): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902940003011010060904000000010100000a60d50180000201020724080401005c2dc8ce55f1f88234ca050c240703000000d8857005850904010000010200000904010101010200000c24020102030301625171090905010910001404cd072501017fd1e6090402000001020000090402010101020000072401010102100f240202966802000078f4cd9535ca09058209080007040307250102f4000062b0ffeb2a3d2d15afea834fe7e19532d2862ea04129fb35ec353c2031460881e5b75b5a371f99b8f303b36a511d3f7f3d36526a4fb5"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = dup(r1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x3, &(0x7f0000000200)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r7, 0x0}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}}, 0x0) getgroups(0x1, &(0x7f0000002600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000026c0)={{{@in=@broadcast, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000027c0)=0xe8) statx(0xffffffffffffffff, &(0x7f00000029c0)='./file0\x00', 0x800, 0x800, &(0x7f0000000380)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b40)) r10 = getuid() setreuid(0x0, r10) stat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)) 39.881677776s ago: executing program 34 (id=2270): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902940003011010060904000000010100000a60d50180000201020724080401005c2dc8ce55f1f88234ca050c240703000000d8857005850904010000010200000904010101010200000c24020102030301625171090905010910001404cd072501017fd1e6090402000001020000090402010101020000072401010102100f240202966802000078f4cd9535ca09058209080007040307250102f4000062b0ffeb2a3d2d15afea834fe7e19532d2862ea04129fb35ec353c2031460881e5b75b5a371f99b8f303b36a511d3f7f3d36526a4fb5"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = dup(r1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa2) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x3, &(0x7f0000000200)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) io_submit(r6, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1, r7, 0x0}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}}, 0x0) getgroups(0x1, &(0x7f0000002600)=[0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000026c0)={{{@in=@broadcast, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f00000027c0)=0xe8) statx(0xffffffffffffffff, &(0x7f00000029c0)='./file0\x00', 0x800, 0x800, &(0x7f0000000380)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b40)) r10 = getuid() setreuid(0x0, r10) stat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)) 5.823345281s ago: executing program 4 (id=2782): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x7fffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r2}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@private1, 0x18, r2}) recvfrom$packet(r0, &(0x7f00000005c0)=""/147, 0x93, 0x0, &(0x7f00000000c0)={0x11, 0x1a, r2, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xfffffffffffffdf3) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='task\x00') fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80401, 0x0) write$cgroup_subtree(r8, 0x0, 0x0) lseek(r7, 0xffffff7f, 0x0) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25080000001800048013000100"], 0x2c}}, 0x26008890) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) connect$inet6(r9, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r10 = fcntl$dupfd(r9, 0x0, r9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRESDEC=r3, @ANYRESDEC=r0, @ANYRESHEX=r9, @ANYBLOB="08e99e42752fd87449d8cb793f8fc447560a5e4d718fcba2b2e916eab86ee92dbbf94ddf13b9e3afda790829cb"], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "3fb72a932325d560", "d2754beb616fd79605d84ccd1b3a91afae845cc075a59702f89188e0fcf97b96", "035c65b8", "ee2404089ab78eed"}, 0x38) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000000ac14140000000000ee7a637121831de5000000000000000014000d"], 0x48}}, 0x4014) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 5.796598073s ago: executing program 4 (id=2783): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 64) ptrace(0x19, r0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) 5.743116017s ago: executing program 4 (id=2784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0xfffffffffffffffe) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa, 0x2}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 3.482166479s ago: executing program 5 (id=2814): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x7) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f00000002c0)={'syz1\x00', {0x2, 0x1500, 0x4, 0x9}, 0x1e, [0x40000000, 0x4, 0x4, 0x9, 0x2b0, 0x2e, 0x80000001, 0x5f1, 0x6, 0x9, 0x4, 0x7fff, 0x8, 0x3, 0x0, 0x7fffffff, 0x1, 0x6, 0x0, 0x800, 0x7, 0x80, 0x5, 0x9, 0x0, 0x0, 0xe44, 0x4, 0x2, 0x401, 0x6, 0x3, 0xf2a, 0x9, 0x10001, 0x4, 0x80000000, 0x0, 0x2, 0x2, 0x9, 0x4, 0x66, 0x33, 0x7, 0x80, 0x0, 0x5, 0x5, 0x4, 0x5, 0x9, 0x3, 0xc, 0x2, 0x0, 0x93, 0x8, 0x2, 0x5, 0x6, 0x8, 0x3, 0xc], [0x2, 0x762f, 0x1, 0x100, 0x0, 0x4, 0x6, 0x80, 0x5, 0xe, 0x9, 0x9, 0x5, 0x7, 0x4, 0x3, 0x7, 0x3, 0x80000000, 0x2, 0x80000001, 0x2, 0x0, 0xff, 0x7, 0x2, 0x7, 0x3, 0x1, 0x8, 0x1, 0x1, 0x80, 0x3, 0x3, 0x9, 0x7, 0x9, 0x8, 0x3, 0x2, 0x90a, 0x5, 0x0, 0x6, 0x2, 0x2, 0x7c, 0x8c, 0x3ff, 0x8000, 0xf, 0x6, 0x1, 0x3, 0xc, 0x9, 0x5, 0xdec, 0x4, 0x4d9, 0x7, 0x7, 0x7fffffff], [0x0, 0xfff, 0x8, 0x7, 0x800, 0x1, 0x0, 0x0, 0x4, 0x4, 0xffffffff, 0x7fff, 0x10, 0x8, 0xd, 0x0, 0x9, 0x7, 0x7, 0x1f1, 0x1ff, 0x9, 0x9, 0x5, 0x1, 0xfffffc01, 0x8, 0xfffffff3, 0x8000, 0x2191, 0x5587, 0x9, 0x2, 0x9, 0x3, 0x7ff, 0x6, 0x9, 0x0, 0x7, 0x7, 0xa40, 0x4, 0x0, 0x800, 0x1, 0x3, 0x1748cfca, 0x10000, 0x8, 0xfffffffc, 0x8, 0xfffffffc, 0x1ff, 0x5, 0x4, 0xe7, 0x9, 0x20e6, 0x3, 0x8f, 0x1, 0x4, 0x80000000], [0x7, 0x5, 0x5, 0xfff, 0x1, 0xfff, 0x0, 0x2, 0x1ff, 0x2, 0x3, 0x9, 0x200, 0x1000, 0xffffffff, 0x1, 0xff, 0x8, 0x9, 0x9a5, 0x9, 0x1, 0x2, 0x4, 0x4, 0x5, 0x81, 0x23, 0x5, 0x8, 0x0, 0x3a6a, 0x7, 0x671, 0x3, 0x5, 0x4, 0x4, 0x6, 0x8, 0x7ec807e5, 0x0, 0x3, 0xffffffff, 0x6, 0x2, 0x8, 0x5, 0x1410, 0x6, 0x800, 0x1000, 0x4, 0xda02635, 0x2, 0x400, 0xff, 0x9128, 0x81, 0xb78, 0x1, 0x5, 0x9, 0x6]}, 0x45c) ioctl$UI_END_FF_ERASE(r5, 0x400c55cb, &(0x7f0000000d40)={0x9, 0x6, 0x8}) ioctl$BLKRRPART(r0, 0x125f, 0x0) r6 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=r6) 3.414894475s ago: executing program 5 (id=2817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4854}, 0x4000) (rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), r2) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r11, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000000) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r11, 0x520, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x2000000) (async) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r1, 0xc53c0427098a424, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004044) (async, rerun: 32) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1001}, 0x0) (async, rerun: 32) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x86100) ioctl$SNDRV_TIMER_IOCTL_START(r13, 0x54a0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x3f1d73e82b92e054}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x38, r11, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000044) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'ip_vti0\x00', &(0x7f0000000b00)={'syztnl1\x00', 0x0, 0x700, 0x8000, 0xb5, 0x9, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x66, 0x0, 0xd, 0x0, 0x0, @rand_addr=0x64010100, @local, {[@end]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x7a, 0x9, 0x60, @private1={0xfc, 0x1, '\x00', 0x92}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x700, 0x7800, 0x4, 0x3}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'erspan0\x00', 0x0, 0x700, 0x8, 0x9, 0xfffffff7, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x8, 0xd2, 0x0, 0x6, [0x3]}, @rr={0x7, 0xf, 0x34, [@multicast1, @local, @broadcast]}, @ssrr={0x89, 0x1b, 0xe6, [@multicast2, @rand_addr=0x64010102, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x3e}, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d40)={'gretap0\x00', 0x0, 0x8, 0x700, 0x0, 0x4, {{0xf, 0x4, 0x2, 0x8, 0x3c, 0x66, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast2, {[@lsrr={0x83, 0x27, 0x41, [@empty, @broadcast, @empty, @rand_addr=0x64010101, @broadcast, @broadcast, @local, @remote, @remote]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r14, &(0x7f00000018c0)={&(0x7f0000000ac0), 0xc, &(0x7f0000001880)={&(0x7f0000001200)={0x65c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1e4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a67}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']@{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1bc84d95}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7774}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'@\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')}&{$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "0ded221f1ce736974baf075135fdfffd"}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "b53111c6b1ec9746847848f4de616101e80e7996102d8687bafe309faf801e374cba0a61f7200608ed0a30d135a51dae217e38522b8b7810580799f840aa131f"}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "c3583bf20d9b9d9eb5203f9475d2df17aa7ead4e2013e0f10fbf1ade1813ff340d57d34c953b1e0bd8a7c0f04c811de8c42caac80e6ac18781db45a6d006fd24439a499aebbcb1046663e0b4a0368db2f93131126442"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x20c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x150d}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "c7a588edf9ff2dbc323a670949da4edc12d4477014be27b266ffb7c79c9178762dfa2c7808b8dabad16d63a4b25babc2c880336883be4c5cc5ddf5e7a6179428c6d2a69bb232faccec86b3aa19c7ee1f19a3c4a9d6112a61b8030fba6d341f0c6240a4b90e2814c34f3f453b86d1c603f8cee2fe2a964f73bded6bee5744669bb35a05db34f754b58f0d2abd1832ad0bacffbf62fffd05b72f8aa36043138b51886bf92018735d8cd0f93b5ba5ce38796cb0c00e5fc4f840417736cceb95933069bd9b3747a2ab0dcce235038a31cf6da8da"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "05e9300d91821a19faaf6e7d00867ffac125f58fcbf5f93d47118a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "bcc090610a1f215d31b0e0b8882106560109c775851522820ecc5e556559d9ebd17b746a784e1e6cbe1dfd01299d4b532454bc2a14a918bf8c7769b6c11b7df07e6e29208e5968216670574e36de1defdeabb83c6f0b672b5a99ff1e9dc3c8467fee4cb4cc396d37f44848df81620aa7dda46f57ea396b388a314fcf1962588303f1b57641844d12f564d8cfc9e649b2e49ff2715af101ca593d80829175cbdda621e12825a0f18626c9e90450012f6c4ea7594cc80b6dc8000b37aa082545eecc55772fc8c9892f6050efa3c66cb5d47d7c7731909c7f78b1481d54beb7334f63713e9d330ef6123a4f02f64bf00eed49e617"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8e7382a559d439aa}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "7f90"}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@+/}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/fuse\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "e4c965dde4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.414195285s ago: executing program 5 (id=2818): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='9p\x00', 0x23630aa, &(0x7f0000000240)='./\"inderfs/binder0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = timerfd_create(0x0, 0x0) fsync(r1) ppoll(&(0x7f0000000080)=[{r0, 0x2403}], 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffdfffffffb) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r3, 0x22fb5000) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10008, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) pipe2$9p(0x0, 0x0) dup(r2) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109023b00010104909c09040000030206004d05240600b4bafae479e6244c0f01090000"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 2.751679578s ago: executing program 4 (id=2834): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) (async, rerun: 32) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x20000) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) setresuid(0x0, 0xee00, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 2.306882784s ago: executing program 4 (id=2859): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getrusage(0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x800) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40, 0xc, 0x1e, "243544175172e8c9312728ff8eb4407dfc66cd84e98112a0bc713d25f335"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x6, 0x1f000, 0x1000, &(0x7f00003a8000/0x1000)=nil}) syz_usb_control_io$printer(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f00000000c0)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) 998.324049ms ago: executing program 2 (id=2877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffa) fsync(r0) mmap(&(0x7f0000700000/0x8000)=nil, 0x8000, 0x2, 0x12, r3, 0x295bd000) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1) 997.830199ms ago: executing program 2 (id=2878): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf8, r2, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x20a, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4) recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 994.02802ms ago: executing program 2 (id=2879): r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (rerun: 64) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000815000/0x3000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x200000000, 0x83}], 0x1, 0x1, 0x0, 0x1, 0x42}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x4000) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, r4, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) (async, rerun: 64) fsetxattr$trusted_overlay_upper(r1, 0x0, &(0x7f00000004c0)={0x0, 0xfb, 0x15, 0x5, 0xd, "6e1994616a5da7db7d35cec7ccf564d3"}, 0x15, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000) 974.332372ms ago: executing program 2 (id=2880): syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x1a382) (async) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x1a382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr0, 'id1\x00'}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x1, 0x8, 0x7fffffffffffffff, 0x2, 0x2, 0x1}, {0x1, 0x4, 0x7, 0xa, 0x4, 0x61}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async, rerun: 32) r2 = openat(r1, &(0x7f0000000380)='./file0\x00', 0x440040, 0x12) (rerun: 32) setns(r2, 0x40000000) (async) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e23, @private=0xa010101}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x3c, {0x2, 0x4e21, @private=0xa010102}, 'veth0_to_bond\x00'}) (async) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000440)=0x7) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000480)={'vxcan1\x00', 0x2000}) (async) inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x100) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) r3 = openat$cgroup_ro(r1, &(0x7f0000000740)='blkio.bfq.dequeue\x00', 0x0, 0x0) (rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000780), 0x303040, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0xa0) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r1, 0xffffffffffffffff, 0x4880) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000800)) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000840)={'vlan1\x00', 0x1000}) (rerun: 32) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000880)={0x84, @empty, 0x4e24, 0x0, 'sed\x00', 0x12, 0x9, 0x2d}, 0x2c) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000a80)=0xe8) (rerun: 32) mount$fuseblk(&(0x7f00000008c0), 0x0, &(0x7f0000000900), 0x4004000, &(0x7f0000000ac0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x6}}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}], [{@appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) (async, rerun: 64) r7 = accept(r4, &(0x7f0000000bc0)=@caif, &(0x7f0000000c40)=0x80) (rerun: 64) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000c80)=0x8, 0x4) (async) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0) move_mount(r1, &(0x7f0000000d00)='./file0\x00', r8, &(0x7f0000000d40)='./file0\x00', 0x204) (async) fchdir(r3) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d80)='./file0\x00', 0x86400, 0x10) renameat2(r9, &(0x7f0000000dc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000e00)='./file1\x00', 0x3) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r8, 0x111, 0x4, 0x0, 0x4) (rerun: 32) 526.482198ms ago: executing program 6 (id=2885): r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x9586730c31f01255) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) unshare(0x2a020480) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x7, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) (async) shutdown(r0, 0x9586730c31f01255) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8e0000b535277602c8be9a8567828f711330ff2bb17b550800", "dc5db43f", "80031f0000000200"}, 0x38) (async) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) (async) unshare(0x2a020480) (async) socket(0x10, 0x3, 0x0) (async) write(r4, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x7, 0x4) (async) 525.983677ms ago: executing program 6 (id=2886): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x2) clock_gettime(0x7, &(0x7f00000044c0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) fchdir(r2) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r1, r0, 0x0) (async) setsockopt$inet_buf(r4, 0x0, 0x40, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) (async) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000140)={0x50, 0x0, r6, {0x7, 0x2b, 0xd, 0x800000, 0xa, 0x8, 0x3, 0x6, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) splice(r5, &(0x7f00000001c0)=0x2, r5, &(0x7f0000000200)=0x8, 0x5, 0x8) (async) prlimit64(r7, 0xf, &(0x7f0000000100)={0x9, 0x1ff}, &(0x7f0000000140)) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}]}]}, 0x28}}, 0x4000) (async) r9 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x38) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x388, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5702}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc23}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x5, 0x3, 'J'}, @TIPC_NLA_NODE_ID={0xd0, 0x3, "8c1c4f697fab4f11bb2a585ab065db44c7634c52b359a0e9f5f3e39dbdd69e075b6d4a69d5cc76c3795a9f74f0529a0310952b059936afc78f8b073a63416bad72f4543b88ab5ab195fc61105f8fab8cbe4bcd266a683cc125a774612e444194c16828f11b7f1b083de61d0e4267cf9d9e0c1602c1e0c6979523d193d5e947f44d02a03a72ed3400b0892fdb83a915ddcaa315d590811c846d5f2b469d54e74245d98ab3176f849aa84fd5c2766e31c45df42087065fbd59eaac570c2f38c396049bc34dbfdc92d823e5565b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x90, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x63}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x82}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x363a}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff0001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x150f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe7b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x969}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffd8e}]}]}, 0x388}}, 0x4000001) 510.555039ms ago: executing program 6 (id=2887): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e22, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 461.925163ms ago: executing program 2 (id=2888): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=[@acquire, @acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) userfaultfd(0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000003c0)=[@increfs, @increfs], 0x0, 0x0, 0x0}) 404.575247ms ago: executing program 2 (id=2889): set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x5, &(0x7f0000000080)}, 0x18) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000000140)={0x20, 0x5, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000400)={0xe88, {{0xa, 0x4e23, 0x4, @private0, 0x2}}, {{0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}}], 0x58, 0x0, &(0x7f0000000d80)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000300)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 403.857437ms ago: executing program 5 (id=2890): fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000001c0)=@nullb, r0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7fffffff, 0x0, 0x1, 0x3, 0x1, 0x3}, 0x20) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRES16=r2]) 336.953623ms ago: executing program 5 (id=2891): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) socket$inet6(0x10, 0x2, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}, {0x40, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast1, 0xa, r6}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r6, 0x4, 0x1, 0x0, 0x6810, 0x0, @local, @private0, 0x60, 0x10, 0x5, 0x5}}) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80100020}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r11 = socket(0x11, 0x2, 0x54eb4371) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x1, 0x6, @multicast}, 0x14) 268.901288ms ago: executing program 5 (id=2892): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x440, 0x0) fcntl$setlease(r3, 0x400, 0x2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) (async) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r5, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0x20001, 0x0, 0xdcf, 0x7, 0xb, 0x800, 0x0, 0x0, 0x10, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x7, {0xb, 0x0, 0x0, {0x9, 0x2000000001, 0x7, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x35741061, 0x10000, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3c, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000007b40)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa90220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1cb93a7a144e7a8a704ce1af0657f950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88a0dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9497b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd53eecc58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r5, &(0x7f000000db40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f00000000c0)={0x10, 0xffffffffffffffda, r6}, 0x10) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x50, 0x0, &(0x7f0000000140)="b2e42e84a298b70dc371a2508c5d7046a67690ceea2fedb81a54a93848589c5421b0c5685ead66b31cd17726fb3b1a0eb732662bda7c1c601d561dbf9b5d5a96ece21ad4a238877ac077f502b80cabee"}) 0s ago: executing program 6 (id=2893): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)='\\^', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08e91", 0xa8}, {&(0x7f0000001a80)="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", 0x2f6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="9e816ef4b3bb28f735f8370cb5bbec7b062fdecbd804052ca1dde813e8ca43307d9bbf48ea24c36bb84bf4ec89d234453b01c57c1a3ee05d6b", 0x39}, {&(0x7f0000000040)="72ed92ab5f44202632020f74ecd01c9f82e6c72f719cadde031e0e9e525a", 0x1e}, {&(0x7f00000002c0)="9ba5c1ccf6a36a84fe8c0b9c637799ff8429f7265acc76d15175d1c4168fa969a542536a3ed7f7baf33f7788b5496402365515276bb43a27c51b630d7dbc0a35ef2c1ceb9cac1a858cfb2cd296d3c24d36d1c382f354de074d30a339e701189e475d8a826e2688bbaa872e", 0x6b}], 0x3}}], 0x3, 0x0) (async, rerun: 64) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @empty, 0x7fffd}}}, 0x108) (rerun: 64) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000000c0)='~\xe81\xc7\x00/!\x1d\x00\x9f\xf7\xe8BVE\xc5\\R\xe6\x05/\xd3\xcb\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\x04\x00f\x80Q\xfeb\xd9C`).ak\xdf1K\x00W\x19\x91p\xea\xa3\xc7\xbc\x03\xc3\xeb`\x1c9\x7f9\xc1b\x87\xdaE\xb5\xf8(\ri\x04\xfd\xba)\x16\xcbE&-\xf0e\x99\xbb\xd9\xcf\x9d\x02\t\xc5\f\x8c\x93\xfdW\x02x\x017\xf6|X\xcdO\xf2e7\xd5~\xb6\x18\xf4t\xfc\xfd\x7f\x1e\xca\x93Z\x95\x1f\x84\xc5\xc8:\xce1\xe5\x82\xaaQ\xac\xdc\xf8\xdd\x11\xde\x1a\xf0\xd6\x05\x04\x11\x99bd\xa2\xc4\xe0\xbf\nV\xcf\x1a\xf9\xf0^4\x84\x98/\xa5\xd7', 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) kernel console output (not intermixed with test programs): USB Serial Device converter detected [ 104.877074][ T454] ftdi_sio ttyUSB0: unknown device type: 0x2eef [ 104.892369][ T454] usb 3-1: USB disconnect, device number 39 [ 104.898991][ T454] ftdi_sio 3-1:3.1: device disconnected [ 105.328510][ T4813] validate_nla: 58 callbacks suppressed [ 105.328525][ T4813] netlink: 'syz.4.1472': attribute type 12 has an invalid length. [ 105.648937][ T36] audit: type=1400 audit(2000000059.161:660): avc: denied { write } for pid=4814 comm="syz.2.1473" path="socket:[25972]" dev="sockfs" ino=25972 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 105.764666][ T4828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:702 [ 106.141163][ T36] audit: type=1400 audit(2000000059.661:661): avc: denied { shutdown } for pid=4845 comm="syz.4.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.200762][ T36] audit: type=1326 audit(2000000059.721:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.4.1488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc52a58ebe9 code=0x0 [ 106.253764][ T4868] overlayfs: failed to clone upperpath [ 106.473333][ T36] audit: type=1400 audit(2000000059.991:663): avc: denied { create } for pid=4888 comm="syz.0.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.578690][ T4915] rust_binder: 712: no such ref 3 [ 106.899870][ T351] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 107.049784][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 107.056296][ T351] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 107.068803][ T351] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.081182][ T351] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.091143][ T351] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.104751][ T351] usb 3-1: config 7 interface 0 has no altsetting 0 [ 107.112056][ T351] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 107.121587][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.131725][ T4954] netlink: 'syz.4.1523': attribute type 4 has an invalid length. [ 107.147400][ T4954] netlink: 'syz.4.1523': attribute type 4 has an invalid length. [ 107.403131][ T4961] netlink: 'syz.0.1525': attribute type 4 has an invalid length. [ 107.413255][ T4961] netlink: 'syz.0.1525': attribute type 4 has an invalid length. [ 107.476452][ T4962] netlink: 'syz.0.1525': attribute type 15 has an invalid length. [ 107.672077][ T4974] overlayfs: failed to clone upperpath [ 107.734283][ T351] usbhid 3-1:7.0: can't add hid device: -71 [ 107.742073][ T351] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 107.751034][ T351] usb 3-1: USB disconnect, device number 40 [ 108.244196][ T36] audit: type=1326 audit(2000000061.761:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.0.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b8ff8ebe9 code=0x0 [ 108.267662][ T36] audit: type=1326 audit(2000000061.761:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4992 comm="syz.0.1536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b8ff8ebe9 code=0x0 [ 108.321216][ T5000] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 108.328425][ T5000] rust_binder: 722: no such ref 2 [ 108.333660][ T5000] rust_binder: 722: no such ref 2 [ 108.338766][ T5000] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 108.346176][ T5000] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 108.476899][ T5005] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:726 [ 108.477133][ T5007] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.489584][ T351] rust_binder: 5004: removing orphan mapping 0:24 [ 108.502644][ T351] rust_binder: 0: removing orphan mapping 24:1112 [ 109.042637][ T5023] cgroup: noprefix used incorrectly [ 109.098145][ T36] audit: type=1400 audit(2000000062.611:666): avc: denied { setattr } for pid=5035 comm="syz.0.1550" name="XDP" dev="sockfs" ino=26294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.128544][ T36] audit: type=1400 audit(2000000062.641:667): avc: denied { create } for pid=5043 comm="syz.0.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 109.154769][ T36] audit: type=1400 audit(2000000062.671:668): avc: denied { shutdown } for pid=5043 comm="syz.0.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.241185][ T5064] overlayfs: failed to clone upperpath [ 109.413348][ T5094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 109.451382][ T5103] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 109.463256][ T5103] overlayfs: missing 'lowerdir' [ 109.499381][ T5113] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1575'. [ 109.637578][ T5126] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 109.652621][ T5130] overlayfs: failed to clone upperpath [ 109.763942][ T5152] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1589'. [ 109.773822][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 109.785667][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 109.843143][ T5165] fuse: Bad value for 'group_id' [ 109.848377][ T5165] fuse: Bad value for 'group_id' [ 109.905059][ T5173] vcan0: entered allmulticast mode [ 111.180414][ T36] audit: type=1400 audit(2000000064.701:669): avc: denied { accept } for pid=5230 comm="syz.0.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 111.996870][ T5259] incfs: ino conflict with backing FS 1 [ 112.074174][ T36] audit: type=1326 audit(2000000065.591:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5270 comm="syz.0.1634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b8ff8ebe9 code=0x0 [ 112.396344][ T36] audit: type=1400 audit(2000000065.911:671): avc: denied { create } for pid=5265 comm="syz.4.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.441260][ T5286] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 112.450500][ T5286] netlink: 'syz.2.1639': attribute type 4 has an invalid length. [ 112.497561][ T5292] /dev/loop0: Can't lookup blockdev [ 113.449348][ T36] audit: type=1326 audit(2000000066.961:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5377 comm="syz.4.1660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fc52a58ebe9 code=0x0 [ 113.450767][ T5380] /dev/loop0: Can't lookup blockdev [ 113.477841][ T5380] /dev/loop0: Can't lookup blockdev [ 113.483539][ T5380] /dev/loop0: Can't lookup blockdev [ 113.489138][ T5380] /dev/loop0: Can't lookup blockdev [ 113.494856][ T5380] /dev/loop0: Can't lookup blockdev [ 113.500356][ T5380] /dev/loop0: Can't lookup blockdev [ 113.506478][ T5380] /dev/loop0: Can't lookup blockdev [ 113.512126][ T5380] /dev/loop0: Can't lookup blockdev [ 113.517669][ T5380] /dev/loop0: Can't lookup blockdev [ 113.523080][ T5380] /dev/loop0: Can't lookup blockdev [ 113.528660][ T5380] /dev/loop0: Can't lookup blockdev [ 113.534359][ T5380] /dev/loop0: Can't lookup blockdev [ 113.540436][ T5380] /dev/loop0: Can't lookup blockdev [ 113.546161][ T5380] /dev/loop0: Can't lookup blockdev [ 113.551965][ T5380] /dev/loop0: Can't lookup blockdev [ 113.557434][ T5380] /dev/loop0: Can't lookup blockdev [ 113.563182][ T5380] /dev/loop0: Can't lookup blockdev [ 113.570427][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1663'. [ 113.573738][ T5380] /dev/loop0: Can't lookup blockdev [ 113.579379][ T5387] erspan0: entered promiscuous mode [ 113.585054][ T5380] /dev/loop0: Can't lookup blockdev [ 113.595613][ T5380] /dev/loop0: Can't lookup blockdev [ 113.601832][ T5380] /dev/loop0: Can't lookup blockdev [ 113.607804][ T5380] /dev/loop0: Can't lookup blockdev [ 113.613495][ T5380] /dev/loop0: Can't lookup blockdev [ 113.618996][ T5380] /dev/loop0: Can't lookup blockdev [ 113.625952][ T5380] /dev/loop0: Can't lookup blockdev [ 113.631723][ T5380] /dev/loop0: Can't lookup blockdev [ 113.637211][ T5380] /dev/loop0: Can't lookup blockdev [ 113.643518][ T5380] /dev/loop0: Can't lookup blockdev [ 113.659470][ T5380] /dev/loop0: Can't lookup blockdev [ 113.666409][ T5380] /dev/loop0: Can't lookup blockdev [ 113.674294][ T5380] /dev/loop0: Can't lookup blockdev [ 113.679964][ T5380] /dev/loop0: Can't lookup blockdev [ 113.685986][ T5380] /dev/loop0: Can't lookup blockdev [ 113.695436][ T5380] /dev/loop0: Can't lookup blockdev [ 113.702557][ T5380] /dev/loop0: Can't lookup blockdev [ 113.708069][ T5380] /dev/loop0: Can't lookup blockdev [ 113.713665][ T5380] /dev/loop0: Can't lookup blockdev [ 113.719031][ T5380] /dev/loop0: Can't lookup blockdev [ 113.724462][ T5380] /dev/loop0: Can't lookup blockdev [ 113.730216][ T5380] /dev/loop0: Can't lookup blockdev [ 113.735590][ T5380] /dev/loop0: Can't lookup blockdev [ 113.740994][ T5380] /dev/loop0: Can't lookup blockdev [ 113.746468][ T5380] /dev/loop0: Can't lookup blockdev [ 113.752070][ T5380] /dev/loop0: Can't lookup blockdev [ 113.757776][ T5380] /dev/loop0: Can't lookup blockdev [ 113.763913][ T5380] /dev/loop0: Can't lookup blockdev [ 113.769533][ T5380] /dev/loop0: Can't lookup blockdev [ 113.775339][ T5380] /dev/loop0: Can't lookup blockdev [ 113.781084][ T5380] /dev/loop0: Can't lookup blockdev [ 113.786600][ T5380] /dev/loop0: Can't lookup blockdev [ 113.792341][ T5380] /dev/loop0: Can't lookup blockdev [ 113.798011][ T5380] /dev/loop0: Can't lookup blockdev [ 113.803786][ T5380] /dev/loop0: Can't lookup blockdev [ 113.809392][ T5380] /dev/loop0: Can't lookup blockdev [ 113.815629][ T5380] /dev/loop0: Can't lookup blockdev [ 113.821523][ T5380] /dev/loop0: Can't lookup blockdev [ 113.827054][ T5380] /dev/loop0: Can't lookup blockdev [ 113.832622][ T5380] /dev/loop0: Can't lookup blockdev [ 113.838113][ T5380] /dev/loop0: Can't lookup blockdev [ 113.843615][ T5380] /dev/loop0: Can't lookup blockdev [ 113.849191][ T5380] /dev/loop0: Can't lookup blockdev [ 113.854682][ T5380] /dev/loop0: Can't lookup blockdev [ 113.860161][ T5380] /dev/loop0: Can't lookup blockdev [ 113.865891][ T5380] /dev/loop0: Can't lookup blockdev [ 113.868978][ T5415] overlayfs: missing 'workdir' [ 113.871577][ T5380] /dev/loop0: Can't lookup blockdev [ 114.290626][ T5429] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1679'. [ 115.159063][ T5447] overlayfs: failed to clone upperpath [ 115.159866][ T5448] overlayfs: failed to clone upperpath [ 115.191630][ T36] audit: type=1400 audit(2000000068.711:673): avc: denied { listen } for pid=5449 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.016731][ T5495] overlayfs: failed to clone upperpath [ 116.107490][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.124523][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.144304][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.161001][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.179950][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.196636][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.218385][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.226575][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.235907][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.243985][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.259827][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.283191][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.302857][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.318499][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.337945][ T5508] 9pnet_fd: Insufficient options for proto=fd [ 116.344483][ T5502] netlink: 'syz.0.1705': attribute type 15 has an invalid length. [ 116.352681][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.362772][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 116.372362][ T5508] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1707'. [ 116.492683][ T5516] TCP: TCP_TX_DELAY enabled [ 116.712759][ T36] audit: type=1400 audit(2000000070.231:674): avc: denied { setopt } for pid=5540 comm="syz.5.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 116.746888][ T36] audit: type=1400 audit(2000000070.261:675): avc: denied { listen } for pid=5542 comm="syz.5.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.997160][ T36] audit: type=1400 audit(2000000070.511:676): avc: denied { create } for pid=5581 comm="syz.5.1734" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 117.417753][ T5617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:802 [ 117.556688][ T5630] overlayfs: missing 'lowerdir' [ 117.634304][ T5636] validate_nla: 28 callbacks suppressed [ 117.634327][ T5636] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 117.648986][ T5636] netlink: 'syz.0.1755': attribute type 4 has an invalid length. [ 117.777077][ T5645] netlink: 'syz.4.1758': attribute type 39 has an invalid length. [ 117.805138][ T5649] overlayfs: failed to clone upperpath [ 118.203927][ T5658] overlayfs: failed to clone upperpath [ 118.309806][ T5675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=64565 sclass=netlink_audit_socket pid=5675 comm=syz.5.1771 [ 118.331045][ T36] audit: type=1400 audit(2000032839.857:677): avc: denied { getopt } for pid=5676 comm="syz.4.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.460702][ T36] audit: type=1400 audit(2000032839.987:678): avc: denied { watch watch_reads } for pid=5707 comm="syz.2.1784" path="/290/cgroup" dev="tmpfs" ino=1583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 118.573835][ T5731] overlayfs: failed to clone upperpath [ 118.592467][ T5735] /dev/rnullb0: Can't lookup blockdev [ 118.777461][ T5761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:843 [ 119.159372][ T5773] syz.4.1807 uses obsolete (PF_INET,SOCK_PACKET) [ 119.280428][ T5781] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 119.322655][ T5785] netlink: 'syz.2.1811': attribute type 63 has an invalid length. [ 119.330545][ T5785] gretap0: entered allmulticast mode [ 119.336137][ T5785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.352723][ T5785] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.411700][ T5797] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.418586][ T5796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.425205][ T5797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.425418][ T5796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:860 [ 119.434819][ T5797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:860 [ 119.820946][ T36] audit: type=1400 audit(2000032841.347:679): avc: denied { accept } for pid=5809 comm="syz.0.1818" path="socket:[28533]" dev="sockfs" ino=28533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.854915][ T36] audit: type=1400 audit(2000032841.347:680): avc: denied { create } for pid=5809 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.961039][ T36] audit: type=1326 audit(2000032841.487:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5764 comm="syz.5.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb88b8ebe9 code=0x7fc00000 [ 119.986194][ T5815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5815 comm=syz.5.1820 [ 120.017364][ T5817] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 120.545937][ T36] audit: type=1400 audit(2000032842.067:682): avc: denied { read } for pid=5842 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.020448][ T5896] __nla_validate_parse: 29 callbacks suppressed [ 122.020472][ T5896] netlink: 2885 bytes leftover after parsing attributes in process `syz.5.1850'. [ 122.158005][ T5902] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1852'. [ 122.167886][ T36] audit: type=1400 audit(2000032843.687:683): avc: denied { sys_module } for pid=5901 comm="syz.0.1852" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 122.546026][ T5904] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.554260][ T36] audit: type=1400 audit(2000032844.077:684): avc: denied { bind } for pid=5903 comm="syz.5.1853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.586484][ T5906] fuse: Bad value for 'fd' [ 122.592245][ T5906] overlayfs: missing 'lowerdir' [ 122.603578][ T36] audit: type=1400 audit(2000032844.127:685): avc: denied { append } for pid=5912 comm="syz.2.1856" name="binder0" dev="binder" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 122.626966][ T36] audit: type=1326 audit(2000032844.127:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5912 comm="syz.2.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6ab8ebe9 code=0x7ff00000 [ 122.630287][ T5919] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 122.765557][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1861'. [ 123.054180][ T5932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3484950563 (55759209008 ns) > initial count (50642361344 ns). Using initial count to start timer. [ 123.157931][ T5937] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 123.165440][ T5937] rust_binder: Write failure EINVAL in pid:877 [ 123.209194][ T5947] rust_binder: Error while translating object. [ 123.221253][ T5947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.227478][ T5947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:882 [ 123.384338][ T36] kauditd_printk_skb: 4297 callbacks suppressed [ 123.384363][ T36] audit: type=1400 audit(2000032844.897:4984): avc: denied { append } for pid=5966 comm="syz.2.1876" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.449777][ T36] audit: type=1400 audit(2000032844.897:4985): avc: denied { ioctl } for pid=5966 comm="syz.2.1876" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 123.661170][ T5983] netlink: 'syz.4.1881': attribute type 4 has an invalid length. [ 123.727026][ T5988] netlink: 'syz.4.1881': attribute type 4 has an invalid length. [ 123.797104][ T6002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 123.797143][ T6002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:901 [ 123.820423][ T6007] rust_binder: 903: no such ref 1 [ 123.835430][ T6007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:903 [ 125.003768][ T6082] fuse: Bad value for 'user_id' [ 125.017815][ T6082] fuse: Bad value for 'user_id' [ 125.119879][ T65] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 125.249787][ T65] usb 3-1: device descriptor read/64, error -71 [ 125.489782][ T65] usb 3-1: device descriptor read/64, error -71 [ 125.729846][ T65] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 125.859781][ T65] usb 3-1: device descriptor read/64, error -71 [ 126.099781][ T65] usb 3-1: device descriptor read/64, error -71 [ 126.149986][ T6096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6096 comm=syz.4.1917 [ 126.189357][ T6100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1919'. [ 126.199309][ T6100] overlayfs: failed to clone upperpath [ 126.209953][ T65] usb usb3-port1: attempt power cycle [ 126.409690][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1924'. [ 126.549786][ T65] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 126.570939][ T65] usb 3-1: device descriptor read/8, error -71 [ 126.656833][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1929'. [ 126.700853][ T65] usb 3-1: device descriptor read/8, error -71 [ 126.787549][ T36] audit: type=1400 audit(2000032848.307:4986): avc: denied { nlmsg_read } for pid=6153 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 126.816247][ T36] audit: type=1326 audit(2000032848.337:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.0.1939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b8ff8ebe9 code=0x0 [ 126.939825][ T65] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 126.961450][ T65] usb 3-1: device descriptor read/8, error -71 [ 127.101135][ T65] usb 3-1: device descriptor read/8, error -71 [ 127.209913][ T65] usb usb3-port1: unable to enumerate USB device [ 127.552227][ T6189] fuseblk: Bad value for 'source' [ 127.584829][ T36] audit: type=1400 audit(2000032849.107:4988): avc: denied { write } for pid=6194 comm="syz.4.1951" name="/" dev="configfs" ino=2551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.608035][ T36] audit: type=1400 audit(2000032849.107:4989): avc: denied { add_name } for pid=6194 comm="syz.4.1951" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.632733][ T36] audit: type=1400 audit(2000032849.107:4990): avc: denied { create } for pid=6194 comm="syz.4.1951" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 127.654905][ T6202] overlayfs: failed to clone upperpath [ 127.663407][ T6202] overlayfs: failed to clone upperpath [ 127.672587][ T6202] overlayfs: failed to clone upperpath [ 127.679387][ T6202] overlayfs: failed to clone upperpath [ 127.685782][ T6206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1954'. [ 127.694924][ T6206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1954'. [ 127.695138][ T6202] overlayfs: failed to clone upperpath [ 127.703915][ T6206] netlink: 'syz.0.1954': attribute type 6 has an invalid length. [ 127.703930][ T6206] netlink: 'syz.0.1954': attribute type 5 has an invalid length. [ 127.703943][ T6206] netlink: 'syz.0.1954': attribute type 4 has an invalid length. [ 127.733110][ T6206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1954'. [ 127.742574][ T6202] overlayfs: failed to clone upperpath [ 127.748824][ T6202] overlayfs: failed to clone upperpath [ 127.755430][ T6202] overlayfs: failed to clone upperpath [ 127.761825][ T6202] overlayfs: failed to clone upperpath [ 127.768095][ T6202] overlayfs: failed to clone upperpath [ 127.774674][ T6202] overlayfs: failed to clone upperpath [ 127.780903][ T6202] overlayfs: failed to clone upperpath [ 127.787991][ T6202] overlayfs: failed to clone upperpath [ 127.796553][ T6202] overlayfs: failed to clone upperpath [ 127.802748][ T6202] overlayfs: failed to clone upperpath [ 127.808530][ T6202] overlayfs: failed to clone upperpath [ 127.814387][ T6202] overlayfs: failed to clone upperpath [ 127.820432][ T6202] overlayfs: failed to clone upperpath [ 127.826540][ T6202] overlayfs: failed to clone upperpath [ 127.832633][ T6202] overlayfs: failed to clone upperpath [ 127.838384][ T6202] overlayfs: failed to clone upperpath [ 127.844961][ T6202] overlayfs: failed to clone upperpath [ 127.850729][ T6202] overlayfs: failed to clone upperpath [ 127.856414][ T6202] overlayfs: failed to clone upperpath [ 127.862428][ T6202] overlayfs: failed to clone upperpath [ 127.868094][ T6202] overlayfs: failed to clone upperpath [ 127.873911][ T6202] overlayfs: failed to clone upperpath [ 127.883583][ T6202] overlayfs: failed to clone upperpath [ 127.891656][ T6202] overlayfs: failed to clone upperpath [ 127.899316][ T6202] overlayfs: failed to clone upperpath [ 127.905670][ T6202] overlayfs: failed to clone upperpath [ 127.911791][ T6202] overlayfs: failed to clone upperpath [ 127.918389][ T6202] overlayfs: failed to clone upperpath [ 127.926502][ T6202] overlayfs: failed to clone upperpath [ 127.932619][ T6202] overlayfs: failed to clone upperpath [ 127.938314][ T36] audit: type=1400 audit(2000032849.457:4991): avc: denied { execute } for pid=6228 comm="syz.2.1961" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 127.962394][ T6202] overlayfs: failed to clone upperpath [ 127.968453][ T6202] overlayfs: failed to clone upperpath [ 127.974632][ T6202] overlayfs: failed to clone upperpath [ 127.980732][ T6202] overlayfs: failed to clone upperpath [ 127.986828][ T6202] overlayfs: failed to clone upperpath [ 127.993010][ T6202] overlayfs: failed to clone upperpath [ 127.999075][ T6202] overlayfs: failed to clone upperpath [ 128.005177][ T6202] overlayfs: failed to clone upperpath [ 128.011268][ T6202] overlayfs: failed to clone upperpath [ 128.017162][ T6202] overlayfs: failed to clone upperpath [ 128.023374][ T6202] overlayfs: failed to clone upperpath [ 128.029516][ T6202] overlayfs: failed to clone upperpath [ 128.035742][ T6202] overlayfs: failed to clone upperpath [ 128.041979][ T6202] overlayfs: failed to clone upperpath [ 128.048028][ T6202] overlayfs: failed to clone upperpath [ 128.054674][ T6202] overlayfs: failed to clone upperpath [ 128.060584][ T6202] overlayfs: failed to clone upperpath [ 128.066423][ T6202] overlayfs: failed to clone upperpath [ 128.072187][ T6202] overlayfs: failed to clone upperpath [ 128.078954][ T6202] overlayfs: failed to clone upperpath [ 128.085249][ T6202] overlayfs: failed to clone upperpath [ 128.090984][ T6202] overlayfs: failed to clone upperpath [ 128.096762][ T6202] overlayfs: failed to clone upperpath [ 128.102575][ T6202] overlayfs: failed to clone upperpath [ 128.108501][ T6202] overlayfs: failed to clone upperpath [ 128.114673][ T6202] overlayfs: failed to clone upperpath [ 128.121311][ T6202] overlayfs: failed to clone upperpath [ 128.127744][ T6202] overlayfs: failed to clone upperpath [ 128.134098][ T6202] overlayfs: failed to clone upperpath [ 128.140638][ T6202] overlayfs: failed to clone upperpath [ 128.558600][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 128.585543][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 128.594652][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1972'. [ 128.810927][ T6268] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 129.229767][ T454] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 129.379757][ T454] usb 3-1: Using ep0 maxpacket: 16 [ 129.386350][ T454] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 129.395921][ T454] usb 3-1: config 1 has no interface number 0 [ 129.402450][ T454] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 129.412929][ T454] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 129.430999][ T454] usb 3-1: config 1 interface 105 has no altsetting 0 [ 129.439907][ T454] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 129.455315][ T454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.468579][ T454] usb 3-1: Product: syz [ 129.473716][ T454] usb 3-1: Manufacturer: syz [ 129.478642][ T454] usb 3-1: SerialNumber: syz [ 129.495433][ T6274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.502737][ T6274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.911365][ T6274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.918670][ T6274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.327087][ T454] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 130.355018][ T454] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 130.386485][ T454] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fa:39:da:60:32:0d [ 130.529503][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.551702][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.569850][ T6300] bridge_slave_0: entered allmulticast mode [ 130.577917][ T6300] bridge_slave_0: entered promiscuous mode [ 130.582493][ T6274] /dev/rnullb0: Can't open blockdev [ 130.586860][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.591044][ T454] usb 3-1: USB disconnect, device number 45 [ 130.596474][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.610038][ T6300] bridge_slave_1: entered allmulticast mode [ 130.616562][ T6300] bridge_slave_1: entered promiscuous mode [ 130.633467][ T454] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 130.704452][ T3695] veth0_to_bridge: left allmulticast mode [ 130.714527][ T3695] veth0_to_bridge: left promiscuous mode [ 130.715653][ T454] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 130.725127][ T3695] bridge0: port 3(veth0_to_bridge) entered disabled state [ 130.741535][ T3695] bridge_slave_1: left allmulticast mode [ 130.747356][ T3695] bridge_slave_1: left promiscuous mode [ 130.759808][ T454] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 130.769338][ T454] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 130.775834][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.798631][ T3695] bridge_slave_0: left allmulticast mode [ 130.804448][ T3695] bridge_slave_0: left promiscuous mode [ 130.824076][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.003355][ T3695] tipc: Left network mode [ 131.017444][ T3695] veth1_macvtap: left promiscuous mode [ 131.027211][ T3695] veth0_vlan: left promiscuous mode [ 131.083975][ T3695] vcan0 (unregistering): left allmulticast mode [ 131.105099][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.112285][ T6300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.119684][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.126791][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.192001][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.200597][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.221213][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.228429][ T3707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.236803][ T3707] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.244150][ T3707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.266938][ T6300] veth0_vlan: entered promiscuous mode [ 131.284293][ T6300] veth1_macvtap: entered promiscuous mode [ 131.409764][ T740] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 131.454415][ T36] audit: type=1400 audit(2000032852.977:4992): avc: denied { map } for pid=6347 comm="syz.0.1993" path="socket:[31455]" dev="sockfs" ino=31455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.480380][ T36] audit: type=1400 audit(2000032852.977:4993): avc: denied { ioctl } for pid=6347 comm="syz.0.1993" path="socket:[31461]" dev="sockfs" ino=31461 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.540420][ T6352] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 131.590998][ T740] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 131.600280][ T740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.613330][ T740] usb 3-1: config 0 descriptor?? [ 132.496261][ T36] audit: type=1400 audit(2000032854.017:4994): avc: denied { setattr } for pid=6391 comm="syz.0.2008" name="/" dev="incremental-fs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 132.535225][ T6394] rust_binder: Failed copying into alloc: EFAULT [ 132.535250][ T6394] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 132.541839][ T6394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 132.551581][ T6394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:28 [ 132.578579][ T36] audit: type=1400 audit(2000032854.097:4995): avc: denied { read } for pid=6395 comm="syz.0.2010" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 132.617709][ T6397] rust_binder: Write failure EFAULT in pid:30 [ 132.617775][ T36] audit: type=1400 audit(2000032854.097:4996): avc: denied { open } for pid=6395 comm="syz.0.2010" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 132.644168][ T6404] tipc: Started in network mode [ 132.653181][ T6404] tipc: Node identity , cluster identity 4711 [ 132.659311][ T6404] tipc: Failed to set node id, please configure manually [ 132.666486][ T6404] tipc: Enabling of bearer rejected, failed to enable media [ 132.841239][ T6426] overlayfs: failed to clone upperpath [ 133.251362][ T740] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 133.261701][ T740] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 133.273970][ T740] asix 3-1:0.0: probe with driver asix failed with error -71 [ 133.285367][ T740] usb 3-1: USB disconnect, device number 46 [ 133.295006][ T6462] overlayfs: failed to clone upperpath [ 133.433775][ T6471] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2035'. [ 133.434702][ T36] audit: type=1400 audit(2000032854.957:4997): avc: denied { append } for pid=6472 comm="syz.0.2036" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 133.554062][ T6491] overlayfs: failed to clone upperpath [ 134.199790][ T454] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 134.273797][ T6511] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 134.325291][ T6512] rust_binder: 6511 RLIMIT_NICE not set [ 134.329077][ T740] rust_binder: 6510: removing orphan mapping 0:4256 [ 134.344255][ T6514] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 134.351815][ T454] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 134.367218][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.378277][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.389213][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.400192][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.411284][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.422326][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.433197][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.444138][ T454] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.454273][ T454] usb 3-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.32 [ 134.463331][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.471972][ T454] usb 3-1: config 0 descriptor?? [ 134.609818][ T740] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 134.678327][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 134.687877][ T454] usb 3-1: USB disconnect, device number 47 [ 134.739773][ T740] usb 1-1: device descriptor read/64, error -71 [ 134.979782][ T740] usb 1-1: device descriptor read/64, error -71 [ 135.219776][ T740] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 135.251773][ T6519] rust_binder: Error while translating object. [ 135.251810][ T6519] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 135.258015][ T6519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:957 [ 135.267897][ T6519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:957 [ 135.350133][ T740] usb 1-1: device descriptor read/64, error -71 [ 135.599907][ T740] usb 1-1: device descriptor read/64, error -71 [ 135.709899][ T740] usb usb1-port1: attempt power cycle [ 135.912303][ T6525] /dev/rnullb0: Can't lookup blockdev [ 136.042279][ T36] audit: type=1400 audit(2000032857.567:4998): avc: denied { setattr } for pid=6533 comm="syz.2.2058" name="AF_VSOCK" dev="sockfs" ino=32807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 136.065670][ T740] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 136.090796][ T740] usb 1-1: device descriptor read/8, error -71 [ 136.206966][ T6552] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.213870][ T6551] rust_binder: Error in use_page_slow: ESRCH [ 136.213888][ T6551] rust_binder: use_range failure ESRCH [ 136.219978][ T6551] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 136.225557][ T6551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 136.234021][ T6551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:978 [ 136.234709][ T740] usb 1-1: device descriptor read/8, error -71 [ 136.287950][ T36] audit: type=1326 audit(2000032857.807:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.2.2066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf6ab8ebe9 code=0x0 [ 136.489834][ T740] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 136.511093][ T740] usb 1-1: device descriptor read/8, error -71 [ 136.553250][ T6575] overlayfs: conflicting options: userxattr,redirect_dir=on [ 136.561171][ T6575] 9pnet_fd: Insufficient options for proto=fd [ 136.583272][ T36] audit: type=1400 audit(2000032858.107:5000): avc: denied { nlmsg_write } for pid=6579 comm="syz.4.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 136.619349][ T6588] netlink: 'syz.5.2073': attribute type 22 has an invalid length. [ 136.642064][ T740] usb 1-1: device descriptor read/8, error -71 [ 136.749865][ T740] usb usb1-port1: unable to enumerate USB device [ 137.369767][ T740] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 137.453487][ T36] audit: type=1400 audit(2000032858.977:5001): avc: denied { create } for pid=6599 comm="syz.0.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 137.529785][ T740] usb 3-1: Invalid ep0 maxpacket: 16 [ 137.576326][ T6609] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 137.576366][ T6609] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:50 [ 137.658641][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.675480][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.679788][ T740] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 137.682678][ T6610] bridge_slave_0: entered allmulticast mode [ 137.696621][ T6610] bridge_slave_0: entered promiscuous mode [ 137.702992][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.710069][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.717563][ T6610] bridge_slave_1: entered allmulticast mode [ 137.723907][ T6610] bridge_slave_1: entered promiscuous mode [ 137.769225][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.776703][ T6610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.784033][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.791110][ T6610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.811272][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.818577][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.828031][ T3707] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.835138][ T3707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.843037][ T740] usb 3-1: Invalid ep0 maxpacket: 16 [ 137.849241][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.856305][ T3695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.863898][ T740] usb usb3-port1: attempt power cycle [ 137.879989][ T6610] veth0_vlan: entered promiscuous mode [ 137.890664][ T6610] veth1_macvtap: entered promiscuous mode [ 137.933677][ T6626] binder: Unknown parameter 'defcontext01777777777777777777777' [ 137.942973][ T36] audit: type=1400 audit(2000032859.467:5002): avc: denied { map } for pid=6625 comm="syz.5.2083" path="/dev/usbmon3" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.209820][ T740] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 138.230196][ T740] usb 3-1: Invalid ep0 maxpacket: 16 [ 138.359951][ T740] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 138.390853][ T740] usb 3-1: Invalid ep0 maxpacket: 16 [ 138.400698][ T740] usb usb3-port1: unable to enumerate USB device [ 138.585645][ T36] audit: type=1400 audit(2000032860.107:5003): avc: denied { accept } for pid=6670 comm="syz.4.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 138.818426][ T6680] rust_binder: Write failure EFAULT in pid:12 [ 138.851490][ T36] audit: type=1400 audit(2000032860.377:5004): avc: denied { connect } for pid=6683 comm="syz.5.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 138.859990][ T1207] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 138.899311][ T6692] rust_binder: 6690 RLIMIT_NICE not set [ 138.904139][ T454] rust_binder: 6689: removing orphan mapping 0:4232 [ 139.018852][ T6705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.018884][ T6705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.026149][ T6705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.032209][ T1207] usb 1-1: Using ep0 maxpacket: 32 [ 139.033239][ T6705] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 139.039787][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.061825][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.072259][ T1207] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.081589][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.091180][ T1207] usb 1-1: config 0 descriptor?? [ 139.097600][ T1207] hub 1-1:0.0: USB hub found [ 139.498431][ T1207] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 139.508646][ T6677] 9pnet_fd: Insufficient options for proto=fd [ 139.520170][ T1207] usbhid 1-1:0.0: can't add hid device: -71 [ 139.527055][ T1207] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.539111][ T36] audit: type=1400 audit(2000032861.027:5005): avc: denied { execute } for pid=6676 comm="syz.0.2100" path="/dev/binderfs/binder1" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.565620][ T1207] usb 1-1: USB disconnect, device number 13 [ 140.053229][ T36] audit: type=1400 audit(2000032861.577:5006): avc: denied { getattr } for pid=6714 comm="syz.0.2112" path="socket:[33409]" dev="sockfs" ino=33409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 140.214950][ T6727] rust_binder: Error in use_page_slow: ESRCH [ 140.214963][ T6727] rust_binder: use_range failure ESRCH [ 140.221064][ T6727] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 140.226623][ T6727] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 140.234961][ T6727] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:70 [ 140.539782][ T454] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 140.630049][ T1207] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 140.699783][ T454] usb 3-1: Using ep0 maxpacket: 16 [ 140.706564][ T454] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 140.716447][ T454] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.731525][ T454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.741165][ T454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.749252][ T454] usb 3-1: Product: ᠌ [ 140.753453][ T454] usb 3-1: Manufacturer: ಲ㉿ⓥ跢畇栔봗뤁簞޺쳍㡪᲋Ր慄ꦦ䱎隈靫ჰ悒㇯鞅⳯圌웶⁋䙂⫘繩䭩쬺ﲪ禭顒폄샵預Ꞓ⥹쎣鹧≼擸붨➼ᒎ凾筕繢㙁豶ܥ싦✗Ҁ륍Ƛ໥⳶ᩣ盌셁⭭鏌홡ꮔ⤁겲瞘瓴ꐢ辿ﲜ住舼ꈪ䚮৶㟈㹖쾍㭂鷜潭딚Ꮧﶢﷆ⑬૘괝ᤲ䔶籰浣ŰỨ抝癖㶜积ﰄᛔߋ髓ۉ [ 140.786719][ T454] usb 3-1: SerialNumber: 殁ᶸ삖쾨䟃㿱㛓튟␻슒ఞ੒췯ȇᮩ垆齬ဦ瘂⳯럊⊊톐밲傌㓲읳ﵩ╙ऑ絺ꪸ树㽖皔⒞㷒뽪Wᏻ뻲쌵ჸ崍杺툾⡾뀌ꌘ罡货멯鐩䆠企툙濿ퟥᴚ晕嚝枱蜽뾝蟯᳥㈛振⌟뷈眅噍貘좧ꅧ慙跒㙫⎨ꐯ [ 140.814834][ T6719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.822455][ T6719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.831208][ T1207] usb 6-1: unable to get BOS descriptor or descriptor too short [ 140.839245][ T1207] usb 6-1: not running at top speed; connect to a high speed hub [ 140.847777][ T1207] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 140.856023][ T1207] usb 6-1: config 1 has no interface number 0 [ 140.862185][ T1207] usb 6-1: config 1 interface 138 has no altsetting 0 [ 140.870473][ T1207] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 140.879908][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.888027][ T1207] usb 6-1: Product: syz [ 140.892433][ T1207] usb 6-1: Manufacturer: syz [ 140.897237][ T1207] usb 6-1: SerialNumber: syz [ 141.153070][ T1207] usb 6-1: USB disconnect, device number 9 [ 141.164197][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 141.232437][ T6719] netlink: 'syz.2.2114': attribute type 13 has an invalid length. [ 141.240738][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2114'. [ 141.303462][ T454] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 141.313092][ T454] usb 3-1: USB disconnect, device number 52 [ 141.913876][ T6738] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2121'. [ 141.931413][ T6738] netlink: 'syz.2.2121': attribute type 11 has an invalid length. [ 141.950095][ T6738] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 141.969776][ T6738] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2121'. [ 141.989047][ T6738] netlink: 'syz.2.2121': attribute type 1 has an invalid length. [ 141.997356][ T6738] rust_binder: Write failure EFAULT in pid:998 [ 142.435169][ T6771] /dev/loop4: Can't lookup blockdev [ 142.450373][ T6771] 9pnet_fd: Insufficient options for proto=fd [ 142.839630][ T36] audit: type=1400 audit(2000032864.357:5007): avc: denied { create } for pid=6782 comm="syz.5.2135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 142.962772][ T6799] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 142.971551][ T6799] rust_binder: 70: no such ref 3 [ 143.072611][ T6807] bridge0: entered allmulticast mode [ 143.183488][ T6813] netlink: 'syz.5.2145': attribute type 4 has an invalid length. [ 143.194124][ T6813] netlink: 'syz.5.2145': attribute type 4 has an invalid length. [ 143.218632][ T6815] fuse: Unknown parameter 'nd' [ 143.449898][ T740] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 143.599760][ T740] usb 6-1: Using ep0 maxpacket: 16 [ 143.606283][ T740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.617489][ T740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.627411][ T740] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.640568][ T740] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.649612][ T740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.658278][ T740] usb 6-1: config 0 descriptor?? [ 144.266193][ T740] usbhid 6-1:0.0: can't add hid device: -71 [ 144.273325][ T740] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 144.282335][ T740] usb 6-1: USB disconnect, device number 10 [ 144.509796][ T1207] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 144.659789][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 144.666032][ T1207] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 144.675319][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.683894][ T1207] usb 3-1: config 0 descriptor?? [ 144.893851][ T1207] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 144.907644][ T6871] netlink: 'syz.4.2169': attribute type 4 has an invalid length. [ 144.915855][ T6871] netlink: 'syz.4.2169': attribute type 5 has an invalid length. [ 144.924180][ T6871] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2169'. [ 144.938023][ T36] audit: type=1400 audit(2000032866.457:5008): avc: denied { mount } for pid=6877 comm="syz.5.2171" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 144.960835][ T36] audit: type=1400 audit(2000032866.457:5009): avc: denied { remount } for pid=6877 comm="syz.5.2171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 144.984683][ T36] audit: type=1400 audit(2000032866.457:5010): avc: denied { watch } for pid=6877 comm="syz.5.2171" path="/32/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 145.037619][ T36] audit: type=1400 audit(2000032866.557:5011): avc: denied { unmount } for pid=6610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 145.558547][ T6906] netlink: 'syz.4.2180': attribute type 4 has an invalid length. [ 145.566417][ T45] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 145.574443][ T6906] netlink: 'syz.4.2180': attribute type 4 has an invalid length. [ 145.695733][ T6856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.707209][ T6856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.729753][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 145.740599][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.750469][ T45] usb 6-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 145.759538][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.768887][ T45] usb 6-1: config 0 descriptor?? [ 146.175420][ T6919] tipc: Started in network mode [ 146.177439][ T45] kye 0003:0458:501A.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 146.182915][ T6919] tipc: Node identity , cluster identity 4711 [ 146.191425][ T45] kye 0003:0458:501A.000E: unknown main item tag 0x7 [ 146.197915][ T6919] tipc: Failed to obtain node identity [ 146.204025][ T45] kye 0003:0458:501A.000E: item fetching failed at offset 6/7 [ 146.210244][ T6919] tipc: Enabling of bearer rejected, failed to enable media [ 146.217226][ T45] kye 0003:0458:501A.000E: parse failed [ 146.231764][ T6920] fuse: Unknown parameter 'Urx<P25oE;50x0000000000000006' [ 146.240607][ T45] kye 0003:0458:501A.000E: probe with driver kye failed with error -22 [ 146.242124][ T1207] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 146.260296][ T1207] asix 3-1:0.0: probe with driver asix failed with error -71 [ 146.268931][ T1207] usb 3-1: USB disconnect, device number 53 [ 146.371908][ T6929] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 146.385939][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 146.407740][ T6890] rust_binder: Write failure EFAULT in pid:108 [ 146.408200][ T454] usb 6-1: USB disconnect, device number 11 [ 146.461982][ T6935] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 146.820553][ T6942] overlayfs: failed to resolve './bus': -2 [ 146.928021][ T6948] fuse: Bad value for 'user_id' [ 146.932998][ T6948] fuse: Bad value for 'user_id' [ 146.938678][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2196'. [ 147.189836][ T45] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 147.319805][ T45] usb 6-1: device descriptor read/64, error -71 [ 147.428622][ T6960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 147.428651][ T6960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1040 [ 147.450573][ T6962] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 147.459898][ T6962] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 147.467882][ T6962] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1042 [ 147.474543][ T6967] 9pnet_fd: Insufficient options for proto=fd [ 147.562289][ T36] audit: type=1400 audit(2000032869.087:5012): avc: denied { bpf } for pid=6980 comm="syz.4.2208" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.584298][ T45] usb 6-1: device descriptor read/64, error -71 [ 147.650344][ T6985] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1048 [ 147.829821][ T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 147.969922][ T45] usb 6-1: device descriptor read/64, error -71 [ 148.219822][ T45] usb 6-1: device descriptor read/64, error -71 [ 148.329884][ T45] usb usb6-port1: attempt power cycle [ 148.502308][ T6994] binder: Unknown parameter 'context' [ 148.669795][ T45] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 148.670082][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 148.686393][ T7000] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 148.697337][ T7000] rust_binder: Error while translating object. [ 148.697377][ T7000] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.703620][ T7000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1056 [ 148.723197][ T45] usb 6-1: device descriptor read/8, error -71 [ 148.860792][ T45] usb 6-1: device descriptor read/8, error -71 [ 149.099893][ T45] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 149.121012][ T45] usb 6-1: device descriptor read/8, error -71 [ 149.250916][ T45] usb 6-1: device descriptor read/8, error -71 [ 149.361476][ T45] usb usb6-port1: unable to enumerate USB device [ 149.365978][ T7033] binder: Bad value for 'stats' [ 149.849821][ T45] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.939770][ T7050] FAT-fs (rnullb0): bogus number of reserved sectors [ 149.946581][ T7050] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 150.000778][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.014505][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.028612][ T45] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 150.037873][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.047173][ T45] usb 1-1: config 0 descriptor?? [ 150.096398][ T7069] overlayfs: missing 'lowerdir' [ 150.098944][ T36] audit: type=1400 audit(2000032871.617:5013): avc: denied { getopt } for pid=7066 comm="syz.5.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.123438][ T7069] netlink: 'syz.4.2241': attribute type 16 has an invalid length. [ 150.131370][ T7069] netlink: 'syz.4.2241': attribute type 25 has an invalid length. [ 150.136538][ T7071] rust_binder: Error while translating object. [ 150.139800][ T7069] netlink: 64094 bytes leftover after parsing attributes in process `syz.4.2241'. [ 150.139841][ T7071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 150.155639][ T7071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 150.522930][ T36] audit: type=1400 audit(2000032872.047:5014): avc: denied { map } for pid=7083 comm="syz.2.2246" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 150.555779][ T36] audit: type=1400 audit(2000032872.047:5015): avc: denied { execute } for pid=7083 comm="syz.2.2246" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 150.659071][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 150.665236][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 150.674480][ T45] usb 1-1: USB disconnect, device number 14 [ 150.712878][ T7089] kvm: pic: non byte write [ 151.187346][ T36] audit: type=1400 audit(2000032872.707:5016): avc: denied { append } for pid=7103 comm="syz.0.2253" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 151.262336][ T7107] /dev/rnullb0: Can't open blockdev [ 151.355778][ T7110] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2254'. [ 152.002872][ T7137] netlink: 'syz.0.2263': attribute type 4 has an invalid length. [ 152.008987][ T7144] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 152.010784][ T7137] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2263'. [ 152.026774][ T7137] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 152.034595][ T7137] netlink: 'syz.0.2263': attribute type 2 has an invalid length. [ 152.172535][ T3707] bridge_slave_1: left allmulticast mode [ 152.189930][ T3707] bridge_slave_1: left promiscuous mode [ 152.195697][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.203824][ T3707] bridge_slave_0: left allmulticast mode [ 152.210111][ T3707] bridge_slave_0: left promiscuous mode [ 152.215871][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.249780][ T45] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 152.358974][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.366850][ T7157] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.374082][ T7157] bridge_slave_0: entered allmulticast mode [ 152.380806][ T7157] bridge_slave_0: entered promiscuous mode [ 152.388128][ T3707] veth1_macvtap: left promiscuous mode [ 152.393739][ T3707] veth0_vlan: left promiscuous mode [ 152.399881][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 152.406804][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.415787][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 152.423447][ T45] usb 6-1: can't read configurations, error -61 [ 152.448684][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.455892][ T7157] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.463067][ T7157] bridge_slave_1: entered allmulticast mode [ 152.469275][ T7157] bridge_slave_1: entered promiscuous mode [ 152.522857][ T7157] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.529967][ T7157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.537259][ T7157] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.544322][ T7157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.559841][ T45] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 152.568662][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.576296][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.588459][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.595689][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.617820][ T3676] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.624989][ T3676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.649595][ T7157] veth0_vlan: entered promiscuous mode [ 152.661156][ T7157] veth1_macvtap: entered promiscuous mode [ 152.691398][ T7175] /dev/loop0: Can't lookup blockdev [ 152.729781][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 152.742494][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.755769][ T7178] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 152.763216][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 152.771363][ T45] usb 6-1: can't read configurations, error -61 [ 152.778106][ T45] usb usb6-port1: attempt power cycle [ 152.807515][ T7179] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 152.807553][ T7179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:4 [ 153.119857][ T45] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 153.150492][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 153.157008][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.165985][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 153.173676][ T45] usb 6-1: can't read configurations, error -61 [ 153.187977][ T7197] /dev/loop0: Can't lookup blockdev [ 153.279820][ T454] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 153.309777][ T45] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 153.330218][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 153.337151][ T45] usb 6-1: unable to get BOS descriptor or descriptor too short [ 153.346034][ T45] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 153.354151][ T45] usb 6-1: can't read configurations, error -61 [ 153.360660][ T45] usb usb6-port1: unable to enumerate USB device [ 153.440816][ T454] usb 3-1: not running at top speed; connect to a high speed hub [ 153.449811][ T454] usb 3-1: config 1 interface 0 altsetting 229 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 153.460916][ T454] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.469273][ T454] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0106, bcdDevice= 0.40 [ 153.478788][ T454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.487321][ T454] usb 3-1: Product: Њ [ 153.491708][ T454] usb 3-1: Manufacturer: ꛵雸ꖄ䇽婡䩚薩䳠ꔡ揓ӷ㊣鮈儲ᙘ喝尅浚蚥캺ﾟ钠䈧ꤽ缶衭輇ᆯ壃섯ᣠ⨙ꞙ嶯ϛཿ딯掄쨅榦ꘞ㘜斑擶丳⽩橕擻Ԕ쯏ꍧⅺꔲ擿䷟㗡엤糝겄긚ᘰ펰꒪⬜䏓詾菡⥃䜟ﾸ㞼擞헮锭㒅쏧ẳ밦ꟽ胅ᡛ鲮밂䝄ꏴ齆 [ 153.520176][ T454] usb 3-1: SerialNumber:  [ 153.525973][ T7194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.748234][ T454] usbhid 3-1:1.0: can't add hid device: -71 [ 153.760511][ T454] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 153.770859][ T454] usb 3-1: USB disconnect, device number 54 [ 153.807139][ T7212] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false [ 153.988171][ T7237] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 154.006110][ T7237] rust_binder: Write failure EINVAL in pid:21 [ 154.164383][ T7244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 154.792049][ T7261] overlayfs: failed to clone upperpath [ 154.970387][ T7272] binder: Unknown parameter 'context' [ 154.976428][ T7272] binder: Unknown parameter 'euid>00000000000000060929' [ 154.997243][ T7274] netlink: 57 bytes leftover after parsing attributes in process `syz.6.2309'. [ 155.054615][ T7282] netlink: 182 bytes leftover after parsing attributes in process `syz.4.2311'. [ 155.414213][ T36] audit: type=1400 audit(2000032876.937:5017): avc: denied { write } for pid=7315 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 155.453236][ T36] audit: type=1400 audit(2000032876.937:5018): avc: denied { read } for pid=7315 comm="syz.4.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 155.529092][ T7319] 9pnet: Unknown protocol version 9 [ 155.556461][ T36] audit: type=1400 audit(2000032877.077:5019): avc: denied { view } for pid=7321 comm="syz.5.2324" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 155.679531][ T7330] netlink: 'syz.5.2327': attribute type 30 has an invalid length. [ 155.715027][ T7330] netlink: 'syz.5.2327': attribute type 30 has an invalid length. [ 155.756137][ T7344] SELinux: security_context_str_to_sid () failed with errno=-22 [ 155.942770][ T7355] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 155.942806][ T7355] rust_binder: Read failure Err(EFAULT) in pid:41 [ 155.951596][ T7355] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 155.965384][ T7355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41 [ 155.979864][ T740] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 155.999443][ T7358] netlink: 'syz.6.2336': attribute type 30 has an invalid length. [ 156.066903][ T7365] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.066943][ T7365] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 156.076908][ T7367] 9pnet_fd: Insufficient options for proto=fd [ 156.139772][ T740] usb 3-1: Using ep0 maxpacket: 32 [ 156.139814][ T7375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.146142][ T740] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.160873][ T740] usb 3-1: config 0 has no interface number 0 [ 156.167142][ T740] usb 3-1: config 0 interface 184 has no altsetting 0 [ 156.175618][ T740] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 156.184858][ T740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.192935][ T740] usb 3-1: Product: syz [ 156.197197][ T740] usb 3-1: Manufacturer: syz [ 156.197442][ T7376] rust_binder: 190: no such ref 3 [ 156.201881][ T740] usb 3-1: SerialNumber: syz [ 156.212520][ T740] usb 3-1: config 0 descriptor?? [ 156.218341][ T740] smsc75xx v1.0.0 [ 156.359775][ T31] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 156.444417][ T7393] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2350'. [ 156.514207][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.525401][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.534603][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.542946][ T7399] /dev/rnullb0: Can't lookup blockdev [ 156.549526][ T31] usb 7-1: config 0 descriptor?? [ 156.562985][ T36] audit: type=1400 audit(2000032878.087:5020): avc: denied { listen } for pid=7400 comm="syz.4.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 156.820774][ T740] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 156.831950][ T740] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.963135][ T31] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 156.972959][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.000F/input/input13 [ 156.990045][ T7426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.998842][ T7426] SELinux: failed to load policy [ 157.011155][ T7426] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 157.030448][ T7428] FAT-fs (rnullb0): bogus number of reserved sectors [ 157.037262][ T7428] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 157.049354][ T31] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 157.059788][ T7430] rust_binder: Error while translating object. [ 157.061509][ T7430] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 157.073543][ T7430] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:197 [ 157.103739][ T7434] SELinux: security_context_str_to_sid () failed with errno=-22 [ 157.148171][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.159390][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.167549][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.175633][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.183591][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.191531][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.199804][ T7438] netlink: 'syz.5.2365': attribute type 6 has an invalid length. [ 157.215798][ T7373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=7373 comm=syz.6.2342 [ 157.330688][ T7451] /dev/rnullb0: Can't lookup blockdev [ 157.346158][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2371'. [ 157.384017][ T7459] overlayfs: failed to resolve './file1': -2 [ 157.504334][ T7465] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 157.513700][ T7465] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.561405][ T36] audit: type=1400 audit(2000032879.087:5021): avc: denied { create } for pid=7468 comm="syz.4.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 157.655580][ T740] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 157.666956][ T740] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 157.678437][ T740] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 157.688088][ T740] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.697648][ T740] usb 3-1: USB disconnect, device number 55 [ 158.173249][ T7478] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.173749][ T7478] rust_binder: Error while translating object. [ 158.180490][ T7478] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.186713][ T7478] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1159 [ 158.209344][ T7480] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551610) [ 158.218761][ T7480] rust_binder: Error while translating object. [ 158.231371][ T7480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.237677][ T7480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1161 [ 158.499825][ T454] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 158.649839][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 158.659763][ T454] usb 3-1: Using ep0 maxpacket: 16 [ 158.667768][ T454] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.677490][ T454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.685885][ T454] usb 3-1: Product: syz [ 158.690506][ T454] usb 3-1: Manufacturer: syz [ 158.695149][ T454] usb 3-1: SerialNumber: syz [ 158.705367][ T454] r8152-cfgselector 3-1: Unknown version 0x0000 [ 158.711902][ T454] r8152-cfgselector 3-1: config 0 descriptor?? [ 158.720919][ T454] hub 3-1:0.0: bad descriptor, ignoring hub [ 158.727264][ T454] hub 3-1:0.0: probe with driver hub failed with error -5 [ 158.736151][ T7505] 9pnet_fd: Insufficient options for proto=fd [ 158.800832][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.812221][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 158.823798][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 158.834937][ T9] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 158.847302][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.856583][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.864654][ T9] usb 6-1: Product: syz [ 158.868860][ T9] usb 6-1: Manufacturer: syz [ 158.873869][ T9] usb 6-1: SerialNumber: syz [ 158.880127][ T7490] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 158.888315][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 158.919802][ T454] r8152-cfgselector 3-1: Unknown version 0x0000 [ 158.926284][ T454] r8152-cfgselector 3-1: bad CDC descriptors [ 159.088258][ T7490] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 159.095558][ T7490] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 159.121950][ T7482] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 159.134493][ T31] usb 7-1: USB disconnect, device number 2 [ 159.229991][ T740] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 159.652226][ T7540] rust_binder: Error while translating object. [ 159.652276][ T7540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 159.658552][ T7540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1167 [ 159.705951][ T7490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.723992][ T7490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.733361][ T7490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:215 [ 159.733677][ T9] cdc_mbim 6-1:1.0: bind() failure [ 159.748699][ T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 159.755622][ T9] cdc_ncm 6-1:1.1: bind() failure [ 159.761678][ T9] usb 6-1: USB disconnect, device number 20 [ 159.913192][ T36] audit: type=1400 audit(2000032881.437:5022): avc: denied { create } for pid=7551 comm="syz.4.2407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 159.934105][ T454] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 159.991314][ T7569] 9pnet_fd: Insufficient options for proto=fd [ 160.091139][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.102156][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.112105][ T454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.125139][ T454] usb 3-1: New USB device found, idVendor=056a, idProduct=003b, bcdDevice= 0.00 [ 160.134385][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.142993][ T454] usb 3-1: config 0 descriptor?? [ 160.295451][ T36] audit: type=1400 audit(2000032881.817:5023): avc: denied { map } for pid=7575 comm="syz.5.2415" path="/proc/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=40021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 160.295760][ T7576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:219 [ 160.338590][ T7579] overlayfs: cannot append lower layer [ 160.355159][ T7579] rust_binder: validate_parent_fixup: new_min_offset=58, sg_entry.length=0 [ 160.355179][ T7579] rust_binder: Error while translating object. [ 160.364357][ T7579] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 160.370870][ T7579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 160.561085][ T454] wacom 0003:056A:003B.0010: Unknown device_type for 'HID 056a:003b'. Ignoring. [ 160.735109][ T7618] rust_binder: Error in use_page_slow: ESRCH [ 160.735140][ T7618] rust_binder: use_range failure ESRCH [ 160.739057][ T7620] rust_binder: Error in use_page_slow: ESRCH [ 160.741361][ T7618] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 160.747682][ T7620] rust_binder: use_range failure ESRCH [ 160.753000][ T7618] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 160.761458][ T7620] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 160.769954][ T31] usb 3-1: USB disconnect, device number 57 [ 160.777854][ T7620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 160.785165][ T7618] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 160.790781][ T7627] /dev/loop0: Can't lookup blockdev [ 160.800850][ T7620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:240 [ 160.811209][ T7628] /dev/loop0: Can't lookup blockdev [ 160.863835][ T7632] 9pnet_fd: p9_fd_create_unix (7632): problem connecting socket: .: -111 [ 161.049136][ T7650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.049168][ T7650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 161.069421][ T7658] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 161.126272][ T7661] rust_binder: 7658 RLIMIT_NICE not set [ 161.130143][ T454] rust_binder: 7657: removing orphan mapping 0:4256 [ 161.155257][ T7667] rust_binder: Write failure EFAULT in pid:76 [ 161.304640][ T7675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.311008][ T7675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1177 [ 161.628208][ T7683] incfs: Options parsing error. -22 [ 161.642739][ T7683] incfs: mount failed -22 [ 161.649267][ T7683] cgroup: Unknown subsys name 'measure' [ 161.813712][ T7700] binder: Unknown parameter '' [ 161.855179][ T7704] rust_binder: Write failure EINVAL in pid:262 [ 161.886974][ T7708] tmpfs: Unknown parameter 'nr_inowC@ <6Is\CXЙAPڨf0b#֮e14Kb;92L`WT-kݷh1ֻ' [ 161.937075][ T7708] rust_binder: 83: no such ref 3 [ 161.950281][ T7708] rust_binder: 83: no such ref 3 [ 161.955275][ T7708] rust_binder: 83: no such ref 1 [ 161.970544][ T7708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83 [ 161.990657][ T36] audit: type=1326 audit(2000032883.517:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7711 comm="syz.2.2465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf6ab8ebe9 code=0x0 [ 162.148486][ T7716] rust_binder: Error while translating object. [ 162.148534][ T7716] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 162.156175][ T7716] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1182 [ 162.177030][ T7721] rust_binder: Write failure EFAULT in pid:89 [ 162.205837][ T36] audit: type=1326 audit(2000032883.727:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.6.2468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4c038ebe9 code=0x0 [ 162.304501][ T36] audit: type=1400 audit(2000032883.827:5026): avc: denied { write } for pid=7729 comm="syz.5.2471" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.316997][ T7733] deleting an unspecified loop device is not supported. [ 162.336178][ T7734] validate_nla: 29 callbacks suppressed [ 162.336201][ T7734] netlink: 'syz.6.2468': attribute type 4 has an invalid length. [ 162.352895][ T7734] netlink: 'syz.6.2468': attribute type 4 has an invalid length. [ 162.387050][ T7741] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2475'. [ 163.151004][ T7755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 163.309805][ T740] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 163.416791][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.424187][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.431510][ T7776] bridge_slave_0: entered allmulticast mode [ 163.437721][ T7776] bridge_slave_0: entered promiscuous mode [ 163.444479][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.451713][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.458948][ T7776] bridge_slave_1: entered allmulticast mode [ 163.465681][ T7776] bridge_slave_1: entered promiscuous mode [ 163.470891][ T740] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 163.479964][ T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 163.487568][ T740] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.497777][ T740] usb 7-1: config 0 has no interface number 0 [ 163.505159][ T3686] bridge_slave_1: left allmulticast mode [ 163.511046][ T3686] bridge_slave_1: left promiscuous mode [ 163.516828][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.524885][ T3686] bridge_slave_0: left allmulticast mode [ 163.530733][ T3686] bridge_slave_0: left promiscuous mode [ 163.530739][ T740] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 163.536480][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.546059][ T740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.560850][ T740] usb 7-1: Product: syz [ 163.565283][ T740] usb 7-1: Manufacturer: syz [ 163.570064][ T740] usb 7-1: SerialNumber: syz [ 163.577265][ T740] usb 7-1: config 0 descriptor?? [ 163.645591][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.652688][ T7776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.660105][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.667235][ T7776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.674607][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 163.681351][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.691214][ T31] usb 6-1: config 0 has an invalid interface number: 88 but max is 0 [ 163.699422][ T31] usb 6-1: config 0 has no interface number 0 [ 163.707686][ T31] usb 6-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 163.719093][ T3686] veth0_vlan: left promiscuous mode [ 163.719159][ T31] usb 6-1: config 0 interface 88 has no altsetting 0 [ 163.733824][ T31] usb 6-1: string descriptor 0 read error: -22 [ 163.740898][ T31] usb 6-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 163.750203][ T31] usb 6-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 163.761437][ T31] usb 6-1: config 0 descriptor?? [ 163.769767][ T31] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.88/input/input18 [ 163.796478][ T454] usb 7-1: USB disconnect, device number 3 [ 163.816312][ T7776] veth0_vlan: entered promiscuous mode [ 163.826959][ T7776] veth1_macvtap: entered promiscuous mode [ 163.859459][ T7787] netlink: 'syz.4.2487': attribute type 1 has an invalid length. [ 163.970309][ T31] usb 6-1: USB disconnect, device number 21 [ 164.070118][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.094531][ T7805] overlayfs: failed to resolve './file1': -2 [ 164.322311][ T7822] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 164.322900][ T7821] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 164.373356][ T7819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.431960][ T7835] rust_binder: Write failure EFAULT in pid:108 [ 164.525139][ T7851] veth1: entered allmulticast mode [ 164.605340][ T7853] rust_binder: Error while translating object. [ 164.605379][ T7853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 164.611670][ T7853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 164.635074][ T36] audit: type=1400 audit(2000032886.157:5027): avc: denied { ioctl } for pid=7856 comm="syz.6.2509" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 164.661112][ T7859] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 164.669447][ T7859] rust_binder: Read failure Err(EFAULT) in pid:125 [ 164.769780][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 164.862929][ T7876] /dev/loop0: Can't lookup blockdev [ 164.931032][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.942136][ T9] usb 5-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x4C, changing to 0xC [ 164.954465][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 108 [ 164.964800][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.974065][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.983870][ T7851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.127736][ T7882] netlink: 'syz.2.2517': attribute type 27 has an invalid length. [ 165.137403][ T7882] netlink: 'syz.2.2517': attribute type 4 has an invalid length. [ 165.145727][ T7882] rust_binder: 1186: no such ref 3 [ 165.194258][ T9] usb 5-1: USB disconnect, device number 37 [ 165.195956][ T7851] veth1: left allmulticast mode [ 165.726123][ T7885] exFAT-fs (rnullb0): invalid boot record signature [ 165.733057][ T7885] exFAT-fs (rnullb0): failed to read boot sector [ 165.735231][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2519'. [ 165.739451][ T7885] exFAT-fs (rnullb0): failed to recognize exfat type [ 165.749037][ T7888] rust_binder: Write failure EFAULT in pid:148 [ 165.755312][ T7887] rust_binder: Write failure EFAULT in pid:148 [ 165.800977][ T7901] rust_binder: Write failure EFAULT in pid:51 [ 165.801080][ T7897] rust_binder: 51: no such ref 0 [ 165.828146][ T7904] rust_binder: Write failure EFAULT in pid:56 [ 165.959128][ T3666] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.967043][ T3666] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.007034][ T36] audit: type=1400 audit(2000032887.527:5028): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 166.369818][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 166.521026][ T31] usb 6-1: config index 0 descriptor too short (expected 162, got 34) [ 166.529370][ T31] usb 6-1: config 127 has an invalid interface number: 54 but max is 0 [ 166.537887][ T31] usb 6-1: config 127 has no interface number 0 [ 166.544217][ T31] usb 6-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 166.553683][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.772166][ T31] usb 6-1: USB disconnect, device number 22 [ 166.893194][ T36] audit: type=1400 audit(2000032888.413:5029): avc: denied { setattr } for pid=7957 comm="syz.2.2541" name="NETLINK" dev="sockfs" ino=42014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.917990][ T36] audit: type=1400 audit(2000032888.413:5030): avc: denied { watch } for pid=7960 comm="syz.5.2542" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 166.947798][ T7963] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 166.955592][ T7963] rust_binder: Write failure EINVAL in pid:1208 [ 166.974334][ T36] audit: type=1400 audit(2000032888.493:5031): avc: denied { accept } for pid=7966 comm="syz.2.2545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 167.066136][ T7973] rust_binder: 297: no such ref 1 [ 167.071288][ T7973] rust_binder: Write failure EFAULT in pid:297 [ 167.529837][ T31] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 167.623093][ T7990] fuseblk: Unknown parameter 'group_id' [ 167.670040][ T31] usb 3-1: device descriptor read/64, error -71 [ 167.869806][ T351] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 167.910848][ T31] usb 3-1: device descriptor read/64, error -71 [ 167.989847][ T7928] Bluetooth: hci0: command 0x1003 tx timeout [ 167.996025][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 168.021062][ T351] usb 6-1: config 201 has an invalid interface number: 249 but max is 0 [ 168.029546][ T351] usb 6-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 168.040119][ T351] usb 6-1: config 201 has no interface number 0 [ 168.046403][ T351] usb 6-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 168.058452][ T351] usb 6-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 168.072054][ T351] usb 6-1: config 201 interface 249 has no altsetting 0 [ 168.080721][ T351] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 168.090059][ T351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.098704][ T351] usb 6-1: Product: syz [ 168.103210][ T351] usb 6-1: Manufacturer: syz [ 168.107998][ T351] usb 6-1: SerialNumber: syz [ 168.149857][ T31] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 168.279781][ T31] usb 3-1: device descriptor read/64, error -71 [ 168.314457][ T7990] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2552'. [ 168.325810][ T7990] SELinux: failed to load policy [ 168.335596][ T351] usb 6-1: USB disconnect, device number 23 [ 168.519785][ T31] usb 3-1: device descriptor read/64, error -71 [ 168.630240][ T31] usb usb3-port1: attempt power cycle [ 168.969828][ T31] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 168.992039][ T31] usb 3-1: device descriptor read/8, error -71 [ 169.012265][ T8005] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 169.122417][ T31] usb 3-1: device descriptor read/8, error -71 [ 169.135969][ T8012] rust_binder: Write failure EFAULT in pid:85 [ 169.203311][ T8026] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551438) [ 169.209665][ T8026] rust_binder: Error while translating object. [ 169.222934][ T8026] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 169.229211][ T8026] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 169.389746][ T31] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 169.436571][ T31] usb 3-1: device descriptor read/8, error -71 [ 169.572310][ T31] usb 3-1: device descriptor read/8, error -71 [ 169.679883][ T31] usb usb3-port1: unable to enumerate USB device [ 169.859594][ T36] audit: type=1326 audit(2000032891.373:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8049 comm="syz.4.2574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d5a78ebe9 code=0x0 [ 170.378194][ T36] audit: type=1400 audit(2000032891.893:5033): avc: granted { setsecparam } for pid=8062 comm="syz.2.2579" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 170.569804][ T454] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 170.706274][ T8074] exFAT-fs (rnullb0): invalid boot record signature [ 170.712973][ T8074] exFAT-fs (rnullb0): failed to read boot sector [ 170.719331][ T8074] exFAT-fs (rnullb0): failed to recognize exfat type [ 170.733361][ T454] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 170.745043][ T454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 170.756826][ T454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 170.765218][ T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 170.766713][ T454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.787473][ T454] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.796831][ T454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.806231][ T454] usb 6-1: config 0 descriptor?? [ 170.814972][ T8078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2585'. [ 170.921157][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.932545][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.942434][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.955548][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.964825][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.973604][ T31] usb 3-1: config 0 descriptor?? [ 170.979764][ T351] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 171.130984][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.142055][ T351] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.152045][ T351] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 171.161171][ T351] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.170101][ T351] usb 7-1: config 0 descriptor?? [ 171.213594][ T454] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 171.223444][ T454] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 171.232715][ T454] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 171.381227][ T31] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd [ 171.391907][ T31] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 171.394641][ T8083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 171.406178][ T31] plantronics 0003:047F:FFFF.0012: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 171.557876][ T8088] x_tables: duplicate underflow at hook 1 [ 171.799749][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 171.950964][ T31] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 171.961241][ T31] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.975755][ T31] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 171.985198][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.993371][ T31] usb 5-1: Product: syz [ 171.997642][ T31] usb 5-1: Manufacturer: syz [ 172.002347][ T31] usb 5-1: SerialNumber: syz [ 172.009783][ T31] rtl8150 5-1:1.0: couldn't find required endpoints [ 172.016487][ T31] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 172.532502][ T1207] usb 3-1: USB disconnect, device number 62 [ 172.600213][ T8076] binder: Unknown parameter 'context4' [ 172.621607][ T351] uclogic 0003:256C:006D.0013: v1 frame probing failed: -71 [ 172.629085][ T351] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 172.636757][ T351] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 172.647147][ T351] usb 7-1: USB disconnect, device number 4 [ 172.659788][ T31] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 172.789779][ T31] usb 6-1: device descriptor read/64, error -32 [ 173.030460][ T31] usb 6-1: device descriptor read/64, error -32 [ 173.057437][ T36] audit: type=1400 audit(2000032894.573:5034): avc: denied { mount } for pid=8095 comm="syz.2.2590" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 173.088357][ T8098] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.088555][ T8098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 173.095235][ T8098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:1250 [ 173.186713][ T8120] rust_binder: Write failure EFAULT in pid:189 [ 173.205663][ T8122] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1258 [ 173.231069][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2601'. [ 173.279755][ T31] usb 6-1: reset high-speed USB device number 24 using dummy_hcd [ 173.331153][ T8138] netlink: 'syz.6.2603': attribute type 4 has an invalid length. [ 173.339172][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2603'. [ 173.350048][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2603'. [ 173.406065][ T8150] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.419813][ T31] usb 6-1: device descriptor read/64, error -32 [ 173.639801][ T1207] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 173.790890][ T8160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 173.791021][ T1207] usb 3-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 173.791575][ T8161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8161 comm=syz.5.2610 [ 173.797662][ T1207] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.834156][ T1207] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 173.843488][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.854078][ T1207] usb 3-1: config 0 descriptor?? [ 173.860172][ T1207] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 173.895672][ T36] audit: type=1400 audit(2000032895.413:5035): avc: denied { read append } for pid=8166 comm="syz.5.2612" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 174.219634][ T8174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 174.311666][ T386] usb 6-1: USB disconnect, device number 24 [ 174.472104][ T1207] usb 5-1: USB disconnect, device number 38 [ 174.693859][ T8186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 174.693896][ T8186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 174.774622][ T8187] rust_binder: 1273: no such ref 1 [ 174.804160][ T8187] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1273 [ 174.964808][ T8199] overlayfs: failed to clone upperpath [ 175.088662][ T8205] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.182187][ T8214] cgroup: Name too long [ 175.379849][ T386] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 175.529743][ T386] usb 6-1: Using ep0 maxpacket: 16 [ 175.536243][ T386] usb 6-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.547767][ T386] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 175.558126][ T386] usb 6-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 175.567945][ T36] audit: type=1400 audit(2000032897.073:5036): avc: denied { map } for pid=8233 comm="syz.4.2632" path="socket:[44115]" dev="sockfs" ino=44115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 175.592519][ T386] usb 6-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.605857][ T386] usb 6-1: config 1 interface 0 has no altsetting 0 [ 175.613628][ T386] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.623051][ T386] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.631285][ T386] usb 6-1: SerialNumber: syz [ 175.637170][ T8210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 175.644567][ T8210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 175.889854][ T351] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 176.039770][ T351] usb 5-1: Using ep0 maxpacket: 8 [ 176.046541][ T351] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.055038][ T351] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 176.063913][ T351] usb 5-1: config 0 has no interface number 0 [ 176.070255][ T351] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 176.081376][ T351] usb 5-1: config 0 interface 88 has no altsetting 0 [ 176.090268][ T351] usb 5-1: string descriptor 0 read error: -22 [ 176.096581][ T351] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 176.105674][ T351] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 176.114556][ T351] usb 5-1: config 0 descriptor?? [ 176.122310][ T351] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input20 [ 176.263797][ T8210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 176.271108][ T8210] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 176.323628][ T351] usb 5-1: USB disconnect, device number 39 [ 176.417950][ T1207] usb 3-1: USB disconnect, device number 63 [ 176.521696][ T36] audit: type=1400 audit(2000032898.043:5037): avc: denied { setattr } for pid=8242 comm="syz.2.2636" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=44139 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 176.679388][ T8210] rust_binder: Error while translating object. [ 176.679430][ T8210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 176.685812][ T8210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 177.756199][ T36] audit: type=1400 audit(2000032899.273:5038): avc: denied { mount } for pid=8251 comm="syz.4.2640" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 178.047650][ T8257] usb usb8: usbfs: process 8257 (syz.4.2642) did not claim interface 0 before use [ 178.058983][ T8257] usb usb8: usbfs: process 8257 (syz.4.2642) did not claim interface 0 before use [ 178.114380][ T386] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 178.141798][ T386] usb 6-1: USB disconnect, device number 25 [ 178.144159][ T8269] rust_binder: Failed copying into alloc: EFAULT [ 178.147826][ T8269] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 178.155827][ T8269] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 178.164618][ T8269] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1293 [ 178.190743][ T8280] binder: Unknown parameter 's4ats' [ 178.205518][ T8284] rust_binder: Error while translating object. [ 178.205550][ T8284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 178.214095][ T8284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:172 [ 178.252829][ T8290] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2655'. [ 178.281097][ T8300] syzkaller0: entered promiscuous mode [ 178.287425][ T8300] syzkaller0: entered allmulticast mode [ 178.296397][ T8299] tipc: Started in network mode [ 178.301794][ T8299] tipc: Node identity 9a2a9aa5ce13, cluster identity 4711 [ 178.309049][ T8299] tipc: Enabled bearer , priority 0 [ 178.322643][ T8299] tipc: Resetting bearer [ 178.329924][ T8299] tipc: Disabling bearer [ 178.499825][ T351] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 178.659808][ T351] usb 3-1: Using ep0 maxpacket: 8 [ 178.666210][ T351] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 178.674693][ T351] usb 3-1: config 179 has no interface number 0 [ 178.681110][ T351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 178.692208][ T351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 178.703637][ T351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 178.714944][ T351] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 178.726461][ T351] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 178.739894][ T351] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 178.749134][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.758384][ T8288] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.971296][ T351] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input21 [ 179.170681][ T8288] tap0: tun_chr_ioctl cmd 1074025677 [ 179.176411][ T8288] tap0: linktype set to 802 [ 179.225967][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 179.234261][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 179.243056][ T351] usb 3-1: USB disconnect, device number 64 [ 179.249904][ T351] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 179.523891][ T8333] binder: Unknown parameter 'context' [ 179.823467][ T8364] /dev/loop0: Can't lookup blockdev [ 179.849448][ T8370] netlink: 'syz.6.2685': attribute type 1 has an invalid length. [ 179.857304][ T8370] netlink: 'syz.6.2685': attribute type 2 has an invalid length. [ 179.978675][ T8386] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2689'. [ 179.979404][ T36] audit: type=1400 audit(2000032901.493:5039): avc: denied { write } for pid=8385 comm="syz.2.2689" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 180.134003][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.134037][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.140966][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.147883][ T8404] rust_binder: 8403 RLIMIT_NICE not set [ 180.154586][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.160343][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.167153][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.173802][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.180391][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.187182][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.189554][ T8410] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.193894][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.206781][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.213379][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.219897][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.226331][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.233095][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.239988][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.246724][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.253412][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.260186][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.266771][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.273771][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.280738][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.287003][ T8418] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 180.288026][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.299048][ T8418] rust_binder: Write failure EINVAL in pid:1337 [ 180.303899][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.314194][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.317400][ T8420] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 180.320865][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.334248][ T8420] rust_binder: Read failure Err(EFAULT) in pid:196 [ 180.340703][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.343271][ T8420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196 [ 180.348345][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.364508][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.371306][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.373136][ T8424] binder: Bad value for 'stats' [ 180.377854][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.389456][ T8402] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.732271][ T8441] tipc: Started in network mode [ 180.743815][ T8441] tipc: Node identity ac14140f, cluster identity 4711 [ 180.750982][ T8441] tipc: New replicast peer: 255.255.255.255 [ 180.757252][ T8441] tipc: Enabled bearer , priority 10 [ 180.786599][ T8451] overlayfs: failed to resolve './file1/file0': -2 [ 180.814862][ T8456] /dev/loop0: Can't lookup blockdev [ 180.858173][ T36] audit: type=1400 audit(2000032902.373:5040): avc: denied { bind } for pid=8463 comm="syz.6.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.909763][ T36] audit: type=1400 audit(2000032902.423:5041): avc: denied { mounton } for pid=8459 comm="syz.4.2714" path="/syzcgroup/unified/syz4" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 180.911193][ T8465] FAT-fs (rnullb0): bogus number of reserved sectors [ 180.951382][ T8465] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 181.061922][ T8473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=8473 comm=syz.5.2717 [ 181.157889][ T8498] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 181.228459][ T8507] rust_binder: Write failure EINVAL in pid:1361 [ 181.469799][ T1207] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 181.629872][ T1207] usb 5-1: Using ep0 maxpacket: 16 [ 181.636273][ T1207] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 181.645374][ T1207] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 181.655156][ T1207] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 181.664883][ T1207] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 181.674835][ T1207] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 181.684864][ T1207] usb 5-1: config 1 interface 0 has no altsetting 0 [ 181.691551][ T1207] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 181.700813][ T1207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.712753][ T1207] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 181.741441][ T36] audit: type=1400 audit(2000032903.263:5042): avc: denied { remount } for pid=8514 comm="syz.2.2730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 181.772948][ T8515] netlink: 'syz.2.2730': attribute type 16 has an invalid length. [ 181.780844][ T8515] netlink: 64122 bytes leftover after parsing attributes in process `syz.2.2730'. [ 181.863569][ T8519] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.871816][ T386] tipc: Node number set to 2886997007 [ 181.871833][ T8519] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 181.886263][ T8519] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.894358][ T8519] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 181.913971][ T1207] scsi host1: usb-storage 5-1:1.0 [ 182.075680][ T8538] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.309802][ T386] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 182.469839][ T386] usb 6-1: Using ep0 maxpacket: 16 [ 182.476213][ T386] usb 6-1: config 1 has an invalid interface number: 8 but max is 0 [ 182.484441][ T386] usb 6-1: config 1 has no interface number 0 [ 182.490579][ T386] usb 6-1: config 1 interface 8 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 182.500421][ T386] usb 6-1: config 1 interface 8 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 64 [ 182.510176][ T386] usb 6-1: config 1 interface 8 has no altsetting 0 [ 182.518461][ T386] usb 6-1: New USB device found, idVendor=1199, idProduct=9056, bcdDevice=4d.90 [ 182.527595][ T386] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.535768][ T386] usb 6-1: Product: syz [ 182.539956][ T386] usb 6-1: Manufacturer: syz [ 182.544571][ T386] usb 6-1: SerialNumber: syz [ 182.550113][ T8538] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 182.557513][ T8538] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 182.662589][ T9] rust_binder: 8516: removing orphan mapping 0:8 [ 182.672954][ T36] audit: type=1326 audit(2000032904.193:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8541 comm="syz.2.2738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6ab8ebe9 code=0x0 [ 182.775406][ T8543] rust_binder: 1370: no such ref 3 [ 182.950097][ T3675] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 183.148470][ T8538] binder: Binderfs stats mode cannot be changed during a remount [ 183.164166][ T9] usb 5-1: USB disconnect, device number 40 [ 183.165057][ T8522] sddr09: could not read card info [ 183.175589][ T3666] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 183.182712][ T3666] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 183.189095][ T3666] sd 1:0:0:0: [sdb] Write Protect is off [ 183.189824][ T386] usb 6-1: USB disconnect, device number 26 [ 183.200998][ T3666] sd 1:0:0:0: [sdb] Asking for cache data failed [ 183.207569][ T3666] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 183.217114][ T3666] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 183.236983][ T6219] udevd[6219]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 183.262245][ T6218] udevd[6218]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 183.513643][ T8549] netlink: 'syz.2.2739': attribute type 27 has an invalid length. [ 183.702422][ T8559] rust_binder: 236: no such ref 3 [ 183.792755][ T8564] input: syz1 as /devices/virtual/input/input22 [ 183.892758][ T8567] netlink: 18 bytes leftover after parsing attributes in process `syz.4.2745'. [ 184.049802][ T386] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 184.072348][ T8574] fuse: Bad value for 'fd' [ 184.189785][ T386] usb 6-1: device descriptor read/64, error -71 [ 184.226815][ T8582] x_tables: duplicate underflow at hook 2 [ 184.287963][ T8587] netlink: 'syz.2.2753': attribute type 39 has an invalid length. [ 184.428372][ T8595] overlayfs: failed to clone upperpath [ 184.449806][ T386] usb 6-1: device descriptor read/64, error -71 [ 184.719744][ T386] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 184.869962][ T386] usb 6-1: device descriptor read/64, error -71 [ 184.955468][ T8626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 185.119763][ T386] usb 6-1: device descriptor read/64, error -71 [ 185.239974][ T386] usb usb6-port1: attempt power cycle [ 185.586087][ T386] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 185.610867][ T386] usb 6-1: device descriptor read/8, error -71 [ 185.644559][ T8639] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2771'. [ 185.749264][ T386] usb 6-1: device descriptor read/8, error -71 [ 185.999765][ T386] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 186.030810][ T386] usb 6-1: device descriptor read/8, error -71 [ 186.069775][ T8665] input: syz1 as /devices/virtual/input/input23 [ 186.160798][ T386] usb 6-1: device descriptor read/8, error -71 [ 186.208244][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2782'. [ 186.269905][ T386] usb usb6-port1: unable to enumerate USB device [ 186.391500][ T8681] 9pnet_fd: Insufficient options for proto=fd [ 186.579849][ T386] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 186.644278][ T8687] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2786'. [ 186.741341][ T386] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 186.750030][ T386] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 186.759152][ T386] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.769928][ T386] usb 5-1: config 220 has no interface number 2 [ 186.777435][ T386] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.791890][ T386] usb 5-1: config 220 interface 0 has no altsetting 0 [ 186.798830][ T386] usb 5-1: config 220 interface 76 has no altsetting 0 [ 186.806859][ T386] usb 5-1: config 220 interface 1 has no altsetting 0 [ 186.815316][ T386] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.824623][ T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.833010][ T386] usb 5-1: Product: syz [ 186.837242][ T386] usb 5-1: Manufacturer: syz [ 186.842148][ T386] usb 5-1: SerialNumber: syz [ 186.843986][ T8693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2790'. [ 186.857513][ T8693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50834 sclass=netlink_route_socket pid=8693 comm=syz.5.2790 [ 186.871701][ T8693] netlink: 'syz.5.2790': attribute type 30 has an invalid length. [ 187.000411][ T8701] cgroup: noprefix used incorrectly [ 187.048979][ T8680] rust_binder: Error while translating object. [ 187.049025][ T8680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 187.055320][ T8680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:272 [ 187.319772][ T45] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 187.479821][ T45] usb 6-1: Using ep0 maxpacket: 8 [ 187.486925][ T45] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.497994][ T45] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.507870][ T45] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 187.517892][ T45] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 187.529172][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.538591][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.546684][ T45] usb 6-1: Product: 훁眾ᕁ聹諼Ꙏ厮᧜䝯դ䘩緇䠃Ꝿ컐뮏馧 [ 187.555745][ T45] usb 6-1: Manufacturer: ⷦꭙ襹蠵侺맖暊䪊鐘ࣨ䟅꽶Ŀﱮ❐ӛ넥쀮厯ꤤᢻ뵇㽢Ṅ鶮刻捡垧ᒯ醃ㅟ쾣ރꁂᴊꤣ蜰슕㤚ࠀ䦡ꂒ꫒喈叉ᜤপ㠻롼륛℄嵐酦㊢뼿ᴀ࿳♢ [ 187.577624][ T45] usb 6-1: SerialNumber: 짲띗뺌ゾ䃟쁺ꕚ쳲ى둲햲抌뽂㟭Ꮈ镐 [ 187.992641][ T45] cdc_ncm 6-1:1.0: bind() failure [ 188.000280][ T45] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 188.007163][ T45] cdc_ncm 6-1:1.1: bind() failure [ 188.013973][ T45] usb 6-1: USB disconnect, device number 31 [ 188.635758][ T8769] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 188.889906][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 189.039806][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 189.241634][ T36] audit: type=1326 audit(2000032910.763:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8675 comm="syz.4.2784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5a78ebe9 code=0x7fc00000 [ 189.270318][ T386] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 189.285665][ T386] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 189.292840][ T386] usb 5-1: No valid video chain found. [ 189.298401][ T386] usb 5-1: selecting invalid altsetting 0 [ 189.314433][ T386] usb 5-1: USB disconnect, device number 41 [ 189.395369][ T8859] 9pnet_fd: Insufficient options for proto=fd [ 189.464388][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2847'. [ 189.541242][ T8881] netlink: 'syz.6.2852': attribute type 46 has an invalid length. [ 189.549937][ T8881] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2852'. [ 189.559205][ T8881] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2852'. [ 189.568347][ T8881] netlink: 'syz.6.2852': attribute type 6 has an invalid length. [ 189.576251][ T8881] netlink: 'syz.6.2852': attribute type 5 has an invalid length. [ 189.584044][ T8881] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2852'. [ 189.786196][ T8910] No source specified [ 189.846558][ T36] audit: type=1400 audit(2000032911.363:5045): avc: denied { create } for pid=8909 comm="syz.6.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 189.949774][ T386] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 190.101182][ T386] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 190.110425][ T386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.119370][ T386] usb 5-1: config 0 descriptor?? [ 190.729195][ T386] usb 5-1: Cannot set autoneg [ 190.734044][ T386] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 190.746793][ T386] usb 5-1: USB disconnect, device number 42 [ 190.856048][ T8938] netlink: 'syz.6.2870': attribute type 4 has an invalid length. [ 190.866706][ T8938] netlink: 'syz.6.2870': attribute type 4 has an invalid length. [ 190.996091][ T8950] 9pnet_fd: Insufficient options for proto=fd [ 191.471169][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 191.493047][ T8982] /dev/loop0: Can't lookup blockdev [ 191.499324][ T8982] tipc: Enabled bearer , priority 10 [ 191.579856][ T508] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 191.594449][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 191.602938][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 191.610803][ T9] usb 6-1: can't read configurations, error -71 [ 191.674496][ T8992] 9pnet_fd: Insufficient options for proto=fd [ 191.719803][ T508] usb 5-1: device descriptor read/64, error -71 [ 191.959775][ T508] usb 5-1: device descriptor read/64, error -71 [ 192.072974][ T9015] overlayfs: failed to clone upperpath [ 192.080820][ T9015] overlayfs: failed to clone upperpath [ 192.103549][ T9025] tipc: Can't bind to reserved service type 0 [ 192.209923][ T508] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 192.339771][ T508] usb 5-1: device descriptor read/64, error -71 [ 192.540491][ T8999] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN PTI [ 192.553559][ T8999] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 192.562082][ T8999] CPU: 1 UID: 0 PID: 8999 Comm: syz.5.2892 Not tainted syzkaller #0 487852573998b859d95f7a0f07f96e56ce6678e4 [ 192.573636][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 192.579755][ T508] usb 5-1: device descriptor read/64, error -71 [ 192.583689][ T8999] RIP: 0010:fuse_file_release+0x29e/0x400 [ 192.596592][ T36] audit: type=1400 audit(2000032914.113:5046): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1655]" dev="pipefs" ino=1655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 192.597205][ T8999] Code: 00 74 12 48 89 df e8 91 f1 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 44 f0 a0 ff 48 ba 00 00 00 00 00 fc [ 192.640159][ T8999] RSP: 0018:ffffc90007d37ae0 EFLAGS: 00010202 [ 192.646368][ T8999] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88813c0e2600 [ 192.654917][ T8999] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88813ccaa278 [ 192.663099][ T8999] RBP: ffffc90007d37b28 R08: 0000000000000003 R09: 0000000000000004 [ 192.671262][ T8999] R10: dffffc0000000000 R11: fffff52000fa6f2c R12: 0000000000008020 [ 192.679370][ T8999] R13: ffff88811da15b00 R14: ffff88813ccaa200 R15: 00000000000000c8 [ 192.687471][ T8999] FS: 00007f805e16a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 192.696581][ T8999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.703199][ T8999] CR2: 00007fe4c12a2f98 CR3: 000000012732a000 CR4: 00000000003526b0 [ 192.711214][ T8999] Call Trace: [ 192.713771][ T508] usb usb5-port1: attempt power cycle [ 192.714622][ T8999] [ 192.714636][ T8999] fuse_release+0x13e/0x1b0 [ 192.720163][ T36] audit: type=1400 audit(2000032914.183:5047): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 192.723057][ T8999] ? __cfi_fuse_release+0x10/0x10 [ 192.727556][ T36] audit: type=1400 audit(2000032914.183:5048): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.749516][ T8999] __fput+0x1fe/0xa00 [ 192.749546][ T8999] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 192.749574][ T8999] ____fput+0x20/0x30 [ 192.749597][ T8999] task_work_run+0x1e3/0x250 [ 192.780246][ T36] audit: type=1400 audit(2000032914.183:5049): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.780387][ T8999] ? __cfi_task_work_run+0x10/0x10 [ 192.786114][ T36] audit: type=1400 audit(2000032914.183:5050): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.790340][ T8999] get_signal+0x1307/0x14f0 [ 192.790368][ T8999] ? __kasan_slab_free+0x6a/0x80 [ 192.790392][ T8999] arch_do_signal_or_restart+0x96/0x720 [ 192.795351][ T36] audit: type=1400 audit(2000032914.183:5051): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.816383][ T8999] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 192.816421][ T8999] syscall_exit_to_user_mode+0x58/0xb0 [ 192.816445][ T8999] do_syscall_64+0x64/0xf0 [ 192.821930][ T36] audit: type=1400 audit(2000032914.183:5052): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.842896][ T8999] ? clear_bhb_loop+0x50/0xa0 [ 192.842936][ T8999] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 192.842957][ T8999] RIP: 0033:0x7f805d38ebe9 [ 192.842978][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.848117][ T36] audit: type=1400 audit(2000032914.183:5053): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 192.852421][ T8999] RSP: 002b:00007f805e16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 192.852448][ T8999] RAX: ffffffffffffff95 RBX: 00007f805d5c6090 RCX: 00007f805d38ebe9 [ 192.852464][ T8999] RDX: 0000000000000000 RSI: 0000200000001400 RDI: ffffffffffffff9c [ 193.001405][ T8999] RBP: 00007f805d411e19 R08: 0000000000000000 R09: 0000000000000000 [ 193.009386][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.017448][ T8999] R13: 00007f805d5c6128 R14: 00007f805d5c6090 R15: 00007fff0a675a58 [ 193.025512][ T8999] [ 193.028629][ T8999] Modules linked in: [ 193.032845][ T8999] ---[ end trace 0000000000000000 ]--- [ 193.098745][ T8999] RIP: 0010:fuse_file_release+0x29e/0x400 [ 193.104615][ T8999] Code: 00 74 12 48 89 df e8 91 f1 a0 ff 48 ba 00 00 00 00 00 fc ff df 4c 89 2b 4c 8b 75 b8 49 81 c7 c8 00 00 00 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 ff e8 44 f0 a0 ff 48 ba 00 00 00 00 00 fc [ 193.126861][ T8999] RSP: 0018:ffffc90007d37ae0 EFLAGS: 00010202 [ 193.135787][ T8999] RAX: 0000000000000019 RBX: 0000000000000000 RCX: ffff88813c0e2600 [ 193.144424][ T8999] RDX: dffffc0000000000 RSI: 0000000000000a06 RDI: ffff88813ccaa278 [ 193.152721][ T8999] RBP: ffffc90007d37b28 R08: 0000000000000003 R09: 0000000000000004 [ 193.163112][ T8999] R10: dffffc0000000000 R11: fffff52000fa6f2c R12: 0000000000008020 [ 193.171609][ T8999] R13: ffff88811da15b00 R14: ffff88813ccaa200 R15: 00000000000000c8 [ 193.180840][ T3669] bridge_slave_1: left allmulticast mode [ 193.186511][ T3669] bridge_slave_1: left promiscuous mode [ 193.189789][ T8999] FS: 00007f805e16a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 193.193075][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.201182][ T8999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.214908][ T8999] CR2: 000055808e140b98 CR3: 000000012732a000 CR4: 00000000003526b0 [ 193.215185][ T3669] bridge_slave_0: left allmulticast mode [ 193.223107][ T8999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.229190][ T3669] bridge_slave_0: left promiscuous mode [ 193.236905][ T8999] DR3: 00000000000000fb DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 193.242943][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.250734][ T8999] Kernel panic - not syncing: Fatal exception [ 193.257887][ T8999] Kernel Offset: disabled