last executing test programs: 2m29.991126272s ago: executing program 3 (id=102): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x5, 0xb559) getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0x21, 0x20000) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) r3 = signalfd4(r1, &(0x7f00000001c0)={[0x579100000000000]}, 0x8, 0x800) r4 = accept$inet6(r1, 0x0, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000280)={@empty, 0x48, r5}) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @local, 0x7}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', r5, 0x80, 0x7800, 0x80, 0xffff, {{0x23, 0x4, 0x0, 0x3f, 0x8c, 0x64, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@ssrr={0x89, 0xb, 0xe2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x2b, 0x0, 0x9, [0x5, 0x6, 0xe007, 0x7ff, 0x200]}, @ssrr={0x89, 0x13, 0x9e, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}, @generic={0x86, 0x10, "edf013abc4b56c1b8cc1d1b94a09"}, @cipso={0x86, 0x2f, 0x3, [{0x6, 0x3, "c2"}, {0x0, 0xe, "553607db59c9a3d151777a84"}, {0x5, 0xf, "2c9f5462a149607d8aeddc21bf"}, {0x7, 0x9, "e258e3b63a450e"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)={0x2c4, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x2c4}}, 0x40014) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000880)=0x80000001, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r9, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x84) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000a00)={0xa7c, 0x0, 0x80000000, 0x7, 0x2}) r10 = open(&(0x7f0000000a40)='./file0\x00', 0x280001, 0x100) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r10, 0x40089413, &(0x7f0000000a80)=0x6) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000ac0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) recvfrom$inet(r2, &(0x7f0000000b00)=""/121, 0x79, 0x40010102, 0x0, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000000b80)) ioctl$KVM_GET_TSC_KHZ_vm(r10, 0xaea3) umount2(&(0x7f0000000c00)='./file0\x00', 0x1) r11 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000c40), 0x20000, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f0000001f40)={0x4, &(0x7f0000001ec0)=[{0x400, 0xc2, &(0x7f0000000c80)="6b8a708a937161c513e1b0af349a5d7f134d2ce426d99043e1c4d20e2dcf53210a0013ff567b36e55d7a233619d8171cc47f012446b31d6fc721b1814d67ee437900f2f58b918733d509ae103105359b199e45a8b24f5a2659b30ee32df0d71ab74294e30d2830409edff3e1c92ea4c51a3287c92ba114d09393c7c17802c86d4e2d9e5d1356700031e24ec3d098d8b835d8c55238a5507c4f0d7bcc3525b2bce402ba7f81daad9dfce35166e53a95e143bc250732c713d886809635c0e14b5ada3a"}, {0x0, 0x1a, &(0x7f0000000d80)="27a339b1ad7a7977fefca9e05952383c6015b552f2e2d1d4836f", 0x1, 0x1}, {0x7ff, 0xeb, &(0x7f0000000dc0)="34c751dcc8dd9a33aaea7579c796dec60dd12558f7df47bdafc21ec430f3a5b71b347f90a427af4fe7e5dd2d492b202b6755efa285b14f2b5362d66934bfdfad9d403645312c920b6e6def8c8420ac6064cbc48471644e4794805d8e1758d78e99b2a45ce37ceca4fc7b67a5b9a574738abfe41bcc55011744ad78aa252cd9e61ba939e3d5b8358eb1230442857f47ced2ccf3592850457547f25306ab2c5fc33b2e098516e49bc8e6d198a4c156a7209b088a0277e3b90f427033634dbed8af0a5d109d30869d853445ba5086d5c005594f95d0b94827375f260a4b2a3e5ce178dae563629d3d331afbb5", 0x0, 0x1}, {0xd, 0x1000, &(0x7f0000000ec0)="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", 0x0, 0x1}]}) 2m29.955031853s ago: executing program 3 (id=103): read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204080, &(0x7f0000004000)={[{@uid={'uid', 0x3d, r2}}]}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000080)={[{@none}, {@noprefix}], [{@dont_appraise}, {@pcr={'pcr', 0x3d, 0xd}}, {@uid_lt={'uid<', r0}}]}) 2m29.840739825s ago: executing program 3 (id=104): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xb0, 0x6, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.755946617s ago: executing program 3 (id=107): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readlink(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x801, 0x2, 0x0, 0x5, 0x1, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x20002000}) 2m29.044503851s ago: executing program 0 (id=119): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}}, 0x40040041) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000004400)=0x5, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902"], 0x0) ioctl$EVIOCRMFF(r2, 0x4004550f, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_ep_read(r3, 0x5, 0x14, &(0x7f0000000100)=""/20) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2m28.505066162s ago: executing program 2 (id=121): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f00000020c0)="bbf73d0c1e2044a11659f21eff48036983349dc43874210e104912bffb8f598101112dcc8dcf8700a489490d63834f650565c06a604a6ee660b0b214d783319103131be66a34144db07a78eaaa009fefbb2509", 0x53}], 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.401372873s ago: executing program 2 (id=122): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000400)={[{0x8, 0x7, 0x6, 0x6, 0x8, 0x92, 0x8, 0xf2, 0x0, 0x6, 0xe, 0x80, 0x87}, {0x6b, 0x1, 0xf3, 0x0, 0x0, 0xa3, 0x4, 0x81, 0x40, 0x8, 0x5, 0x1, 0x7}, {0xf, 0x3b6, 0x6, 0xd0, 0x4, 0x63, 0x10, 0x9, 0x0, 0x9, 0x2, 0x6, 0x7fff}], 0x8}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x6, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid}, {@nodevmap}, {@access_uid}]}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f) 2m28.377579234s ago: executing program 2 (id=123): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee42000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xa) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f00000001c0)=0xe8) r5 = getuid() mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x12800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x80}}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x2}}, {@access_any}], [{@uid_gt={'uid>', r4}}, {@audit}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r5}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/rnullb0\x00'}}, {@flag='posixacl'}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 2m28.131257579s ago: executing program 1 (id=126): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) socket$key(0xf, 0x3, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) (rerun: 32) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) 2m28.10082403s ago: executing program 1 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x802, 0x0) unshare(0x2040400) socketpair$unix(0x1, 0x5, 0x0, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) unshare(0x62040200) r2 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.02861355s ago: executing program 1 (id=128): syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) process_madvise(r1, &(0x7f00000000c0), 0x0, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r4 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000580)={0x14, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00030300000000030000cefee874e5d5564a3478776372d0aa7e21906e41106fb58fc53aa4cf7272ad8bee6583103ce97a41b0cf93ac473e9cd262980e4491ed81582e56e00cedf2d9d17a02f651e97cae47f95dc742f8e95a2e7c9d0f7eb605f1b065ac795759a96b48720f353cebc4ca3495a44da70e6d21a2ccd3b197aec76636767f76aa7c72196250649579470a87ba2e4e8cb604d7ec6f91b776f48f267820779274b5c730748e14061f056d3819591980af90725690f6986c8427812e1c4fb982b7299b0f65e9c89913"]}, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r8, 0x0, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) close_range(r6, 0xffffffffffffffff, 0x0) 2m27.647528868s ago: executing program 0 (id=129): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) r2 = syz_clone(0x85240000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r2, 0x3, &(0x7f00000000c0)={0x3ff, 0x4}, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m27.487485991s ago: executing program 2 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000008840)=ANY=[@ANYBLOB="1c00000002030502000000000000005ff1f8ee2d080001000200000808000100040000063afe885d31005058757e5589d7f350f4405530a4aa3eee7291d3a49716669b17e87a76486e86ad560bfb223b62a9e131714977025696e5f907e93a18b2bb044e199663fac1bace8741cbb2f9b99ceb78707f8367a5879a5adbb899e833c177310567932579a9c1e7ec59196b7e4177fbbf040d6210abad97efa687fe64c26ca7afcd1e265fa1765500b5fa3296563a429346832f75a1af887e05d4368d6d7e354dc20f64e0aedd0bad4191f7c4693bc61a4e6527ebeb9d977df984dfc1c870bf3c74b5a1e6b9df"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) accept$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x18, &(0x7f0000000300)=0xffffffff, 0x4) bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) recvmmsg(r8, &(0x7f0000008680)=[{{&(0x7f0000000240)=@sco={0x1f, @none}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000400)=""/126, 0x7e}, {&(0x7f0000000480)=""/77, 0x4d}], 0x3, &(0x7f0000002600)=""/248, 0xf8}, 0x4aa8}, {{&(0x7f0000000540)=@isdn, 0x80, &(0x7f0000006a00)=[{&(0x7f0000002700)=""/90, 0x5a}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/97, 0x61}, {&(0x7f0000004800)=""/91, 0x5b}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/4096, 0x1000}, {&(0x7f0000006880)=""/162, 0xa2}, {&(0x7f0000006940)=""/133, 0x85}], 0x9}, 0x9}, {{0x0, 0x0, &(0x7f0000007d80)=[{&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/18, 0x12}, {&(0x7f0000007b00)=""/44, 0x2c}, {&(0x7f0000007b40)=""/51, 0x33}, {&(0x7f0000007b80)=""/112, 0x70}, {&(0x7f0000007c00)=""/60, 0x3c}, {&(0x7f0000007c40)=""/77, 0x4d}, {&(0x7f0000007cc0)=""/178, 0xb2}], 0x8, &(0x7f0000007e00)=""/187, 0xbb}, 0x5}, {{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000007ec0)=""/86, 0x56}], 0x1, &(0x7f0000007f80)=""/208, 0xd0}, 0x800}, {{&(0x7f0000008080)=@nl, 0x80, &(0x7f0000008380)=[{&(0x7f0000008100)=""/189, 0xbd}, {&(0x7f00000081c0)=""/40, 0x28}, {&(0x7f0000008200)=""/21, 0x15}, {&(0x7f0000008240)=""/215, 0xd7}, {&(0x7f0000008340)=""/63, 0x3f}], 0x5, &(0x7f0000008400)=""/166, 0xa6}, 0x8}, {{0x0, 0x0, &(0x7f0000008600)=[{&(0x7f00000084c0)=""/133, 0x85}, {&(0x7f0000008580)=""/113, 0x71}], 0x2, &(0x7f0000008640)=""/49, 0x31}, 0x2}], 0x6, 0x40010003, &(0x7f0000008800)) 2m27.428654232s ago: executing program 2 (id=131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x9b) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffe) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000140)=@v3={0x3000000, [{0x0, 0x8}, {0x0, 0x1e}], r6}, 0x18, 0x3) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) r7 = dup3(r3, r0, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000240)={@empty, r5}, 0x14) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xffffffffffffff02, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) 2m27.406494573s ago: executing program 2 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xec, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa0a6}, {0x6, 0x11, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c084}, 0x20008001) 2m27.341317564s ago: executing program 32 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xec, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa0a6}, {0x6, 0x11, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x1}}]}, 0xec}, 0x1, 0x0, 0x0, 0x400c084}, 0x20008001) 2m26.928533552s ago: executing program 4 (id=133): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000100)=0xc851, 0x4) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f0000000100)=0xc851, 0x4) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000080)='v', 0x1}], 0x1) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250100000004000180100002800c0001800800010003000080"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) (async) rt_tgsigqueueinfo(r8, r7, 0x5, &(0x7f0000000280)={0x0, 0xa4, 0x6}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) (async) r9 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r9, &(0x7f0000000740)=""/384, 0x200008c0) (async) read(r9, &(0x7f0000000740)=""/384, 0x200008c0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r10, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x9000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x40, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.728525526s ago: executing program 0 (id=134): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4}) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e23, @local}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x6f631b4376e74f1c, {0x2, 0x4e23, @rand_addr=0x64010100}}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfc}}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x4a, {0x2, 0xfffe, @broadcast}, 'syz_tun\x00'}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.643878437s ago: executing program 3 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/38, 0x26}, {&(0x7f0000000100)=""/22, 0x16}], 0x2, 0x2, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000000000)=""/78, 0x4e) getdents(r2, &(0x7f0000000200)=""/251, 0xfb) getdents64(r1, &(0x7f00000046c0)=""/4096, 0x1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0xfe, {{0x5}, {0x5, 0x24, 0x0, 0x175a}, {0xd, 0x24, 0xf, 0x1, 0x80000000}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x3, 0xfa}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xf8}}}}}]}}]}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e00"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.310886914s ago: executing program 0 (id=136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) bind$bt_hci(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.259072855s ago: executing program 4 (id=137): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e23, 0x80, @local, 0x9}, 0x1c) (async) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0xfffffffffffffdf8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fsopen(0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) 2m26.052675549s ago: executing program 4 (id=138): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010117}]}) ioctl$SIOCSIFMTU(r1, 0x8923, &(0x7f0000000140)={'vcan0\x00', 0x4e171e32}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0) ioctl$RNDADDENTROPY(r7, 0x40085203, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000eb00"]) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0xffffffffffffff43, 0x0, 0x4, 0x4a, 0x15c3, 0x7, 0x801, 0x1, 0xfffffffb, 'syz1\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r10, 0x401070cd, 0x3) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000000180)={0x52, 0x10, 0x101, {0x101, 0xffff}, {0x3ff, 0x4}, @cond=[{0x9, 0x0, 0x5, 0x8, 0x4fa, 0x5}, {0x5, 0x7, 0x4da, 0x0, 0xf6, 0x6}]}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@polexpire={0xcc, 0x1b, 0x301, 0x70bd2d, 0x25dfdbfb, {{{@in=@local, @in6=@local, 0x4e23, 0x0, 0x4e23, 0x8, 0x2, 0x80, 0x20, 0x84}, {0x0, 0x0, 0x401, 0x5, 0xf8, 0x5e, 0x1, 0x62f}, {0xc, 0xfffffffffffffff8, 0x7ffffffffffffffa, 0x1ff}, 0xfffffff9, 0x6e6bc0, 0x2, 0x0, 0x3, 0x1}, 0x2}, [@policy_type={0xa}]}, 0xcc}}, 0x0) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r12, 0x401c5504, &(0x7f0000000040)={0x0, {0x7, 0xffff, 0x0, 0x5, 0x8, 0x3}}) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000000)={'macvlan0\x00', 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.801138704s ago: executing program 4 (id=139): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000040)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}, {&(0x7f0000002a00)="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", 0x22c}], 0x2}}], 0x1, 0x4040001) r3 = dup(r2) syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), r3) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r6 = dup(r5) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd6) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xb0, 0x6, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/104, 0x68, 0x6, 0xfffffff9}) 2m24.200881345s ago: executing program 1 (id=140): sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r3, 0x0, 0x10000000000016, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="ff01000000000000000001ffffffff00000000000000000000000a00000000007600000000000000d55cce16", @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES32=r0], 0x174}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x20, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x3fa, 0x20, 0x70bd26, 0x25dfdbfe, {0x1, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000001c0)={0x0, 0x5, 0x9ca}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000001c0)={0x0, 0x5, 0x9ca}) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) (async) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r7, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESOCT=r2], 0x56}, 0x1, 0x0, 0x0, 0x8040}, 0x80) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) (async) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ppoll(&(0x7f0000000000)=[{r10, 0x1108}], 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r10, 0x1108}], 0x1, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) 2m23.926394731s ago: executing program 0 (id=141): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r0, 0x5147f000) ioperm(0x9, 0x7ff, 0x100000000) openat$kvm(0xffffffffffffff9c, 0x0, 0x40d00, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) munlock(&(0x7f0000123000/0x1000)=nil, 0x1000) r1 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 2m23.201194195s ago: executing program 3 (id=142): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x1000) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000080)={0x1000, 0x19c000}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x114000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="01000200e30001000600ffffffffffffbbbbbbbbbbbb88a84f0081001000000d0000008024030000f1cf0d3ca877095e9537c952641a5cfd4445fe888a962eace05f849edc155636b2cd043f8f000c9a9d5674e3a97ce97bbfdd5b9342d7a71708b968e0e93f951684bd6f0e6636ab7c4b048c92ad516bff60999d5330c99b86e40096a80930bb1719381776b1dec1553d0652fd581e3a366b1b9506d4dd039f4b19aaf92f337b3753068e511e8ed9020c228fce45ca66adc86ddcc9ec2fa72ee4032d7f4f3935ae71178792bfd7d3e10bb89eca596a21740ea1afb4fed98582af"], 0x68) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000540)="4acfb717f0892cf8a4940106b4aa39a71dc5a7541f61183c", 0x18}], 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) 2m16.363551868s ago: executing program 0 (id=143): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001ac0)=@urb_type_iso={0x0, {0x8, 0x1}, 0x2, 0x3, 0x0, 0x0, 0x4, 0x100, 0x44, 0x5, 0x2, 0x0, [{0x7fffffff, 0x200000, 0x5}, {0x9, 0x9, 0xa}, {0x80000001, 0xffffffff, 0x1ff}, {0xf, 0x2, 0x1}, {0x7, 0x3, 0xffffffff}, {0x200, 0xc, 0x40}, {0x5, 0xf, 0xe800000}, {0x3, 0x100, 0x9}, {0x911e, 0x40, 0x4}, {0x5, 0x5, 0x3}, {0x9, 0x7, 0x1}, {0x0, 0xe0000, 0x5}, {0x0, 0x5, 0x6a}, {0x1, 0x400000, 0x900}, {0x7, 0x7fff, 0xfffffff8}, {0x8, 0x5}, {0x0, 0x4, 0xff}, {0x0, 0x1, 0x7ff}, {0x2, 0xfffff657, 0xd6}, {0x7630, 0xb, 0x73e}, {0x6, 0x8, 0x3}, {0x1ff, 0x10000, 0x9}, {0x8, 0x8, 0x80000001}, {0x1f, 0x2, 0x68}, {0x80, 0x40, 0x2}, {0x401, 0x7, 0xffffffff}, {0x314d, 0xf3, 0x4}, {0x2, 0x9, 0x1}, {0x1000, 0x8001, 0x2}, {0x5, 0x101, 0x4}, {0xadd, 0x3ff, 0x1}, {0x3, 0xfffffff9, 0x4}, {0xfffffffd, 0x2, 0x2}, {0x4, 0x7, 0x624}, {0x4, 0x2, 0xfffffff9}, {0x10, 0x1, 0x7}, {0x5, 0x5, 0x4}, {0x4, 0x1b, 0x7b3a}, {0x3, 0x8}, {0x4, 0xc}, {0x6, 0xbab, 0x9}, {0x3, 0x4, 0x9}, {0xfffffff7, 0xff, 0x6}, {0x6, 0x1, 0x6a}, {0x5, 0x401, 0x2}, {0xfff, 0x7}, {0x9, 0x9, 0x6}, {0x1, 0xea2a, 0x8}, {0x3d5, 0x9ba, 0x4}, {0x9, 0x3, 0x2}, {0x5, 0x100, 0x6}, {0x10001, 0x6, 0x4}, {0x100, 0x5, 0x81}, {0x7fffffff, 0xfffffff9, 0xfffffff5}, {0xb, 0x2, 0x1}, {0xd, 0x4, 0x9}, {0x6, 0x8, 0xffffffff}, {0x8, 0x7, 0x280000}, {0x7, 0x6, 0x9}, {0xe2, 0xfffffff8, 0x4}, {0x1ff, 0x4, 0x1}, {0x10af2c3f, 0x2, 0x1}, {0x7, 0xd5b, 0x3}, {0xd066, 0x8, 0x800}, {0x3, 0x8, 0x1dd}, {0xe, 0x7}, {0x6, 0x9, 0x5652}, {0x6, 0xb, 0x2}]}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32], 0x24}}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth0_vlan\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x6], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x41, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 2m15.116950053s ago: executing program 1 (id=144): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100}, 0x1c) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="2401000012000501000000000000000005001900ff00000028001a000a010102000000000000000000000000fe8000000000000000000000000000aa020006d1ac"], 0x124}}, 0x4000800) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x86253ba60fa6b229, 0x72, 0x20000}, 0x20) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r7 = gettid() r8 = getpgrp(r7) kcmp(r7, r8, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 2m13.804753218s ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='binder\x00', 0x202c008, 0x0) link(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000180)) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x3) 2m6.193192997s ago: executing program 33 (id=142): r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x1000) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000080)={0x1000, 0x19c000}) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000040)={0x3000, 0x114000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="01000200e30001000600ffffffffffffbbbbbbbbbbbb88a84f0081001000000d0000008024030000f1cf0d3ca877095e9537c952641a5cfd4445fe888a962eace05f849edc155636b2cd043f8f000c9a9d5674e3a97ce97bbfdd5b9342d7a71708b968e0e93f951684bd6f0e6636ab7c4b048c92ad516bff60999d5330c99b86e40096a80930bb1719381776b1dec1553d0652fd581e3a366b1b9506d4dd039f4b19aaf92f337b3753068e511e8ed9020c228fce45ca66adc86ddcc9ec2fa72ee4032d7f4f3935ae71178792bfd7d3e10bb89eca596a21740ea1afb4fed98582af"], 0x68) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca", 0xe}, {&(0x7f0000000540)="4acfb717f0892cf8a4940106b4aa39a71dc5a7541f61183c", 0x18}], 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close_range(r1, 0xffffffffffffffff, 0x0) 2m4.439913501s ago: executing program 1 (id=147): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x579143, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) inotify_init1(0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x579143, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0) (async) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 1m59.093026075s ago: executing program 34 (id=143): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001ac0)=@urb_type_iso={0x0, {0x8, 0x1}, 0x2, 0x3, 0x0, 0x0, 0x4, 0x100, 0x44, 0x5, 0x2, 0x0, [{0x7fffffff, 0x200000, 0x5}, {0x9, 0x9, 0xa}, {0x80000001, 0xffffffff, 0x1ff}, {0xf, 0x2, 0x1}, {0x7, 0x3, 0xffffffff}, {0x200, 0xc, 0x40}, {0x5, 0xf, 0xe800000}, {0x3, 0x100, 0x9}, {0x911e, 0x40, 0x4}, {0x5, 0x5, 0x3}, {0x9, 0x7, 0x1}, {0x0, 0xe0000, 0x5}, {0x0, 0x5, 0x6a}, {0x1, 0x400000, 0x900}, {0x7, 0x7fff, 0xfffffff8}, {0x8, 0x5}, {0x0, 0x4, 0xff}, {0x0, 0x1, 0x7ff}, {0x2, 0xfffff657, 0xd6}, {0x7630, 0xb, 0x73e}, {0x6, 0x8, 0x3}, {0x1ff, 0x10000, 0x9}, {0x8, 0x8, 0x80000001}, {0x1f, 0x2, 0x68}, {0x80, 0x40, 0x2}, {0x401, 0x7, 0xffffffff}, {0x314d, 0xf3, 0x4}, {0x2, 0x9, 0x1}, {0x1000, 0x8001, 0x2}, {0x5, 0x101, 0x4}, {0xadd, 0x3ff, 0x1}, {0x3, 0xfffffff9, 0x4}, {0xfffffffd, 0x2, 0x2}, {0x4, 0x7, 0x624}, {0x4, 0x2, 0xfffffff9}, {0x10, 0x1, 0x7}, {0x5, 0x5, 0x4}, {0x4, 0x1b, 0x7b3a}, {0x3, 0x8}, {0x4, 0xc}, {0x6, 0xbab, 0x9}, {0x3, 0x4, 0x9}, {0xfffffff7, 0xff, 0x6}, {0x6, 0x1, 0x6a}, {0x5, 0x401, 0x2}, {0xfff, 0x7}, {0x9, 0x9, 0x6}, {0x1, 0xea2a, 0x8}, {0x3d5, 0x9ba, 0x4}, {0x9, 0x3, 0x2}, {0x5, 0x100, 0x6}, {0x10001, 0x6, 0x4}, {0x100, 0x5, 0x81}, {0x7fffffff, 0xfffffff9, 0xfffffff5}, {0xb, 0x2, 0x1}, {0xd, 0x4, 0x9}, {0x6, 0x8, 0xffffffff}, {0x8, 0x7, 0x280000}, {0x7, 0x6, 0x9}, {0xe2, 0xfffffff8, 0x4}, {0x1ff, 0x4, 0x1}, {0x10af2c3f, 0x2, 0x1}, {0x7, 0xd5b, 0x3}, {0xd066, 0x8, 0x800}, {0x3, 0x8, 0x1dd}, {0xe, 0x7}, {0x6, 0x9, 0x5652}, {0x6, 0xb, 0x2}]}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="06000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32], 0x24}}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) (async) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}], 0x4) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000380)={'veth0_vlan\x00', &(0x7f00000001c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0x8}]}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x6], 0x80a0000, 0x2010d3}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x41, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) 1m55.610409213s ago: executing program 35 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='binder\x00', 0x202c008, 0x0) link(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000180)) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x2}, 0x16, 0x3) 1m45.434757072s ago: executing program 36 (id=147): inotify_init1(0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x579143, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) inotify_init1(0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x579143, 0x0) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fedbdb25010000000000000002410000001000137564703a5379050c01ae394b8bca941d8a457a32"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8840) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x28, 0x81, 0x11, 0x40, 0x403, 0xfa78, 0xdefa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0x28, 0x0, 0x0, 0x92, 0x90, 0xfb}}]}}]}}, 0x0) (async) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 1m1.393285882s ago: executing program 8 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac05650200000000000109022400010000000309040000010300020009210000000122070009058103"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xc, "7f"}, @global=@item_4={0x3, 0x1, 0xb, "640ca309"}]}}, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000040)=0xa35) syz_clone(0x9040e00, &(0x7f0000000240)="b9aa1988bffb4f8ef36f80c0bf9ed87a602fa8a44fe26d7ac62ce2f898b9d38c34721b5e9e0ec2b8397c682c15c4edd5ef2d71f5f357574593b91c0b995c020bf614a0e4c3c66c1432514f5f7f49dceca1", 0x51, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000180)="8ec5b440c68e986356837e802c6281ed4afcd8870c68ec8c211a22d60a94168fcf7ce1d202071de24940ea931f207eda78ac3ae680a5") r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108"], 0x1f0}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) 59.643122796s ago: executing program 8 (id=245): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x10000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x57c9, 0x4) fcntl$setstatus(r1, 0x4, 0x4000) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x5) r3 = socket$inet(0x2, 0x2, 0x2) r4 = getpid() bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x2000}, 0xc) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, r4, 0x2000) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r1, &(0x7f0000000140)=0xed, 0x5) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) r8 = getpgid(r4) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000180)={0x2, 0x0, @ioapic={0xf000, 0x5, 0x4, 0x6, 0x0, [{0x2, 0xcb, 0x7, '\x00', 0x6}, {0x0, 0x1, 0xfd, '\x00', 0x8d}, {0x3, 0xa, 0x9, '\x00', 0x6}, {0x3, 0x1, 0x2, '\x00', 0xe}, {0x10, 0xf8, 0x8, '\x00', 0x9}, {0x9, 0x81, 0x3, '\x00', 0x9}, {0x6, 0x7, 0x0, '\x00', 0xb2}, {0x8, 0x8, 0x3, '\x00', 0x6}, {0x4, 0x8, 0x8, '\x00', 0x2}, {0xe, 0x9, 0x8d, '\x00', 0xe}, {0x1, 0x9, 0x39, '\x00', 0x4}, {0x5, 0x2, 0x5f, '\x00', 0x6}, {0xf, 0x8, 0x4, '\x00', 0x5b}, {0x80, 0x1, 0x1, '\x00', 0x6}, {0x1, 0x3, 0xa, '\x00', 0xa}, {0x8, 0x5, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x17, '\x00', 0x8}, {0x3, 0x2, 0x6, '\x00', 0x9}, {0x5, 0x6, 0x8, '\x00', 0x1}, {0x1, 0x77, 0x1, '\x00', 0xef}, {0x4, 0x8, 0x3, '\x00', 0x3}, {0xff, 0xfd, 0x3, '\x00', 0x5}, {0x4f, 0x9, 0x38, '\x00', 0x2}, {0x3, 0x0, 0x7, '\x00', 0xd}]}}) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000b00)=0x0) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) statx(r0, &(0x7f0000002e40)='./file0\x00', 0x4000, 0x10, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000002f80)='./file0\x00', 0x6000, 0x2, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000030c0)='./file0\x00', &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000032c0)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)=[{&(0x7f0000000400)={0x1ec, 0x14, 0x18, 0x70bd2d, 0x25dfdbfe, "", [@generic="e46bbc32143774a7a58dcf44d004ec4b2a03848e50f457aca16d7d6fd983a93ab2abe488f41e71e52da9bf61f7041d7163538a1e152a8fcda191c8f0e8ac31f7b77bd1f24390b6b5ad4e7669b4c060d00b55d36cba6e8b4071cbc7461e2bbd8a7e18b56b6a916be95223ef037b1d3cbeb8627096990a3ef2886c62d6674b16d057be2a57b12bbf9ecc73c79b6af8b3769f754fd0bdf74d52f36807bf8f4c134b2d884d65754ac0eb4ed50620f99b3d7d047bdd459346584ebdb89b28c385942930e131c8a1d00acfa6d09780ec2eb19a8cbd04281e0b281a4b7ace284d03174b96f86fcffcce111e0f81237b326adfd3acf5", @generic="6ecf03c6be0b98fefc21f9902328b3664801ca23b0b38bab463a9477b4ab19dff871057758a9ec59512817f470ff47ed8e10c541451f55b23c56a160412088a57042769c18582be317d84a776898e8829b25ee6338b3d4e465d3ead4a9948e48ae84f3916de2c3cf86c2787355ed6fdcab4d74e2f9200f47c20acf8488ebd813f9cb472d3bdc985bc79abea9067b130ac2024b719bdfebb96e3b917ba18cda707099e4e4c9a6f8c7596bb52427af6628ca877414322633532431e2615c5f726c1be35ccb611a849f68152968887bb450e2caf2ea6878c1a9bca8a0559d294de450dd7a41a594f4d871"]}, 0x1ec}, {&(0x7f00000006c0)={0x108, 0x41, 0x8, 0x70bd26, 0x25dfdbfd, "", [@nested={0x3c, 0x56, 0x0, 0x1, [@generic="4b4cdce311b3f9f0a86b0d0335304290be15389c9988748cbbe7711ff80ac68398356723b6954a7e2a54393285fba9c73b76c305e4c4d963"]}, @typed={0x4, 0x11c, 0x0, 0x0, @binary}, @nested={0xb8, 0x78, 0x0, 0x1, [@generic="f37d372957b75691dca9c5bc562a8060b1b3c7bcd2ec7cf7e43d643358eee26068f992f0fdbd", @nested={0x4, 0x24}, @typed={0x8, 0xfe, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x146}, @generic="0af89469d4b40af840db79455f10afb0fa16c8ca04d7053680ba6595a1db27ce8bd91e15be8fd4525f4d3edf0dc08c005e80f5da79a3efaaee0941feed8ce89d601e3fed292b32453002334c1ab5be8d2e9cbf98088b54c2d560e6af49d8a7aa208274a830c1cff503e705a796472321899cd5a4053a", @typed={0x8, 0x18, 0x0, 0x0, @uid=r9}]}]}, 0x108}, {&(0x7f0000000800)={0x29c, 0x37, 0x200, 0x70bd29, 0x25dfdbfc, "", [@generic="6c8d60b19ec371bece6b02aabba236c2ce83294c0b05f0d3c75d7b3fd1cb74f9993301b51b36e8925dfe9bf0b65039fb7a114a187fec75c3b166aa1ca82c6388f2dd900e702d6bd53b9ca1dadb7ff01ab7b4151d02e07ca09dccf76870152129edf261ebc00869e03339e6efdcc3cf1f33715d52c05d3b99d1d507ed28d7c1da46ee3f39f74e485207a1eb5b664a1288d3739402095858410cc40f8468b7b0a04777573687714c9820ea8d0f2bb4ece82024ef", @nested={0x10, 0x4, 0x0, 0x1, [@typed={0x8, 0xf8, 0x0, 0x0, @fd=r6}, @nested={0x4, 0xd4}]}, @generic="d132e41952e46d4581d397c90c229b7247d962f549523d81182624655151f9efc617e1ee4e4cf4fe591be36d1dc8a429fa3913502ca5408bfab58225cff735a6e0e255831a28008f013a7b93af6f5d39e679f59a5f43adb85a27b7a687a546fa4b9d67424dbfe9a03e7b9075403518d00d459a85222bcc784ba098d61a9a1865c8e4bfb3681c94b034cda46d100b4d5a5b7db105265b9c49c6e561a2c711200e31ef399639ab05fb992cc26766b7807a07d1e2b53b5f5434bcc68d7059bb2da6eebb3082cf4c055978591cc2a9e122f1", @nested={0x10, 0x14e, 0x0, 0x1, [@typed={0x4, 0x38}, @nested={0x4, 0x3d}, @nested={0x4, 0x5c}]}, @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="8a5eec8be183812291b2099f69d4b12948e8f35b5438fe965d5f040fd7e9caa25f56f5a3ac755db2c2732369a692dacafee964f4e1fbc5179a8feb973dec09bd554743696b099b72351ca2a9cc726a5c872dbdc3935aabe24843482a48e3d4401bda43e2ce95ca6fd1b758538e2d7734edd75aa59ec46571ced5937ac598d38100419e07430d02769266436325f78c00161f5c1dd85c388d1e65fd479f5622a3c68f4b5943488feb343cb8f0d8012e103bb7a7280ed14ba9cf37d11f9b436dc98d7a46af9b420db1a5ff79543679268f1be323ec94c52d49e3c2fa110495"]}, 0x29c}], 0x3, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r12}}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r4, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r4, r15, r16}}}, @rights={{0x30, 0x1, 0x1, [r1, r5, r3, r5, r7, r6, r5, r2]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r17}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r18}}}], 0x140, 0x200000c0}, 0x5) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) 59.556033037s ago: executing program 8 (id=247): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x208400, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c8c0) write$P9_RREADLINK(r0, &(0x7f0000000100)={0x11, 0x17, 0x1, {0x8, './cgroup'}}, 0x11) 59.555129418s ago: executing program 8 (id=248): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0xffffffffffffffe0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) pipe2$9p(&(0x7f0000000080), 0x800) (async) write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) unshare(0x22020600) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0xffffffffffffffe0) (async) 59.533735338s ago: executing program 8 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x402, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x18) getsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, &(0x7f0000000000)=0xa4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x2200c859, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x2}) 59.471935859s ago: executing program 8 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0xfe}]}]}, 0x28}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1a, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 59.381730961s ago: executing program 37 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x38, {0x2, 0x4e22, @empty}, 'veth1_to_bond\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0xfe}]}]}, 0x28}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1a, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x2, 0x1f}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)}}, @clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 7.079175262s ago: executing program 7 (id=700): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x1, {{@in=@empty, @in=@remote, 0x0, 0x2400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x84}, {0x0, 0x0, 0x0, 0xd07}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x20000, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x48, r3, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x40000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x8d8, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x3c}}}}, [@NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x4, 0x4, 0x2, 0x101, 0xffff, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x64e, 0x1, 0x0, 0xd916, 0x2, 0x3, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x400, 0x4, 0x5, 0x8, 0xfffa, 0x48c, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x2, 0x9, 0x1, 0x7, 0x0, 0x2ef]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x9, 0x48, 0x18, 0x2, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7fff, 0x5, 0xfe01, 0x8, 0x6, 0x1, 0x7ff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x0, 0x16, 0xb, 0x0, 0x24, 0x6, 0x1b, 0x2, 0x1b, 0x5, 0x6c, 0x2, 0x18, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x7}, {0x6, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x1, 0x9}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x2, 0x3}, {0x2, 0x4}, {0x7, 0x8}, {0x2, 0x1}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2ee2, 0x7, 0xc46d, 0xfff7, 0x2013, 0x508c, 0x5, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x800, 0x5, 0x4, 0xfbff, 0x10, 0x4, 0xb16]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x4, 0x9}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x0, 0x8}, {0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x5, 0xa}, {0x0, 0x1}, {0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x4}, {0x1, 0x8}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x1}, {0x7}, {0x3, 0x2}, {0x0, 0xa}, {0x1}, {0x7, 0x7}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x2}, {0x7, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x3, 0x2}, {0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x5}, {0x7, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x6, 0x6}, {0x4, 0x2}, {0x2}, {0x5, 0x5}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0xa}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x4}, {0x1, 0x8}, {0x6}, {0x6, 0x7}, {0x7, 0x8}, {0x7, 0x17}, {0x5, 0x9}, {0x4, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0xa}, {0x2, 0x1}, {0x3, 0x8}, {0x6, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x6, 0x4, 0x1, 0x60, 0x2, 0x24, 0x1d, 0x6c, 0x1b, 0x0, 0x60, 0x12, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x30, 0xc, 0x6c, 0x6c, 0x16, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3, 0x101, 0x4, 0x5, 0x2, 0x5, 0x3a2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7a, 0x7f, 0xd, 0xff, 0x800, 0x1ff]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0x3}, {0x6, 0x7}, {0x2}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0xa}, {0x4, 0x1}, {0x5}, {0x1, 0x16}, {0x3, 0x9}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x4}, {0x3, 0x4}, {0x2}, {0x6, 0x6}, {0x0, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x6}, {0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x2, 0x2, 0x16, 0x2, 0x2, 0x1b, 0xb, 0x60, 0x18, 0x48, 0x12, 0x0, 0xc, 0x4, 0x36, 0x48, 0x48, 0x6, 0x18, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0x36, 0x9, 0x48, 0x3, 0xb, 0x60, 0x6, 0x1, 0x1, 0x3, 0x9, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x3, 0xa}, {0x7, 0x5}, {0x7, 0x4}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x4, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x3}, {0x2, 0x7}, {0x4}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0xa}, {0x0, 0x9}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x2, 0x9}, {0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x3}, {0x2, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0x7}, {0x7, 0x8}, {0x6, 0x9}, {0x4, 0x6}, {0x5, 0x2}, {0x6, 0x3}, {0x4, 0x8}, {0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x6, 0x2}, {0x1, 0x5}, {0x6}, {0x1, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x4, 0x4}, {0x4, 0x7}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x2}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x1, 0x1}, {0x6, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x7}, {0x0, 0xa}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x1b, 0x18, 0x50, 0x18, 0x3, 0xc, 0x4, 0x6c, 0x3, 0x36, 0x18, 0x1, 0x6c, 0x5, 0x3, 0x24, 0x9, 0x6c, 0x30, 0x3, 0x24, 0x60, 0x3, 0xf, 0x24, 0x5, 0x6c, 0x9, 0x30, 0x48, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x401, 0xffff, 0xf801, 0x84, 0xfff, 0x101, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0x250, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa87, 0x4, 0x2, 0x8, 0x400, 0x3, 0x7, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x72, 0x5, 0x7, 0x40, 0x4, 0x1, 0xfffe, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x9}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x3}]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x8000, 0x4, 0x1, 0x7, 0x139, 0xffff, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9ef, 0x0, 0x8, 0x675, 0x7, 0x3, 0x0, 0xaa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x101, 0x5, 0xf801, 0x3, 0x9, 0x2]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x48, 0x9, 0x6c, 0xc, 0x3a, 0x16, 0x16, 0x48, 0xb, 0x1b, 0x1]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x2, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x8}, {0x4}, {0x5, 0x3}, {0x5}, {0x3, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x6, 0xa}, {0x4, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x1}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x3}, {0x3}, {0x4, 0x9}, {0x7}, {0x7}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x6, 0x6}, {0x3, 0x6}, {0x5, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x5, 0x9}, {0x6, 0x9}, {}, {0x2, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xbd, 0x2, 0x2, 0x9, 0x8001, 0x1, 0x7, 0x9]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4eb, 0x0, 0x2, 0x7, 0x2, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x9}, {0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x6, 0x7}, {0x5, 0x1}, {0x1, 0x5}, {}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x4, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x3}, {0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0x4}, {0x1, 0x4}]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x6}, {0x7}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x2}, {0x4, 0xa}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3ff, 0xc26, 0x7, 0x0, 0x7ff, 0x2, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3363, 0x10, 0xffff, 0x7ff, 0x2c9, 0x8, 0x97, 0x3]}}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x944, 0x1, 0x6, 0x10, 0x9, 0x1, 0x884, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x2, 0x7, 0x1, 0x8, 0x2, 0xd32]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x6, 0x401, 0xfffb, 0x8, 0x55, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x45, 0x1, 0x7ff, 0xd3, 0x4, 0x9, 0x0, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x60, 0x16, 0x3]}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x1, 0x43, 0x18, 0x36, 0x9, 0x1b, 0x6c, 0x1, 0x18, 0x18, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x2}, {0x7}, {0x1, 0x5}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {0x1, 0x6}, {0x4, 0x9}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0x4}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x7}, {0x0, 0x5}, {0x2, 0x7}, {0x0, 0x5}, {0x1}, {0x5, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0xa}, {0x7, 0x8}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x1, 0x8}, {0x4, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x3, 0x3}, {0x3, 0xa}, {0x0, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x4, 0xa}, {0x4, 0x6}, {0x1}, {0x7, 0x2}, {0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x9}, {0x5, 0x6}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x7}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x1}, {}, {0x6}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x1, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x5, 0x4}, {0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x4, 0x9}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x1, 0x1}, {0x7, 0x1}, {0x3, 0x5}, {0x3, 0x9}, {0x6, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x2}, {0x2}, {0x3, 0x3}, {0x5, 0x9}, {0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x3}, {0x7}, {0x4, 0x8}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x5, 0x1}, {0x3, 0x7}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x18, 0x12, 0x24, 0x12, 0x6, 0x60, 0x48, 0x4, 0x1b]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x8}, {0x2, 0x3}, {0x7, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {0x4, 0x5}, {0x5, 0xa}, {0x4, 0x7}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0x4}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x4, 0x6c, 0x1b, 0x4, 0x60, 0xc, 0x4c, 0x48, 0x9, 0x18, 0x6, 0x60, 0x30, 0x3, 0x2, 0x24, 0x60, 0x16, 0x36, 0x3, 0x24, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x391e, 0x4, 0x0, 0x80, 0x5, 0x5, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x24, 0x1, 0x16, 0x1]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x24, 0x1, 0x36, 0x0, 0x16, 0x60, 0x48, 0x2, 0x1b, 0xa, 0x60, 0x12, 0x24, 0x1, 0x60, 0x6, 0x6c, 0x36, 0x9, 0x63, 0x12, 0x13, 0x30, 0x6, 0x4, 0x18, 0x48, 0x0]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0x1, 0x36, 0xb, 0x5, 0x30, 0x48, 0x5, 0x0, 0x24, 0x7c, 0x2, 0xc, 0xb, 0xc, 0x2, 0x6c, 0x1b, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0x2, 0x2, 0x1, 0xc530, 0x3, 0x4ebd, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x8, 0x5, 0x0, 0x5, 0x100, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe00, 0x759, 0x55, 0x0, 0x72f4, 0x5, 0x81, 0x8]}}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x20, 0x2, [{0x1, 0x5}, {0x4, 0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x6}, {0x5, 0x7}, {0x5, 0x1}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x3}, {0x5, 0x7}, {0x3, 0x8}, {0x5, 0x7}, {0x2, 0x9}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x1}, {0x7, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xd, 0x80, 0xdd8]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x9}, {0x7, 0x5}, {0x7, 0x4}, {0x3}, {0x5, 0x1}, {}, {0x7, 0x4}, {0x1, 0xa}, {0x5, 0x5}, {0x6, 0x6}, {0x0, 0x9}, {0x6, 0x1}, {0x6, 0x1}, {0x7, 0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x3, 0x3}, {0x3, 0x9}, {0x6, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x5, 0x8}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x6}, {0x3, 0x7}, {0x5, 0x3}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x1}, {0x4, 0x6}, {0x2}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0x7}, {0x5, 0x4}, {0x1}, {0x6, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xc0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1, 0x3}, {0x4, 0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0xa}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xa, 0x1b, 0x9, 0x30, 0x0, 0x3, 0x36, 0x3, 0x9, 0x48, 0x1b, 0x0, 0x60, 0x24, 0xc, 0x24, 0xb, 0xc, 0xc, 0x4, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x7, 0x7, 0xfffa, 0x9, 0x9, 0x5, 0x6]}}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xb, 0x1, 0x3, 0x48, 0x36, 0x24, 0x4, 0x24, 0xc, 0x5, 0x67, 0x24, 0xc, 0x18, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1307, 0x8, 0x2, 0x7, 0x4, 0x400, 0x6397, 0x800]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.968712354s ago: executing program 7 (id=701): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x40, 0x15, 0x46, "f63e12d474b343087e9eb73f3588d0603e405cfb01d649c269469d4a6467ee57d4916a4da395cee28ee6d13e1bf8550fb44e1e845273a132ff4425581146b91279e42b8830ff"}, &(0x7f00000008c0)={0xa1, 0x1, 0x400, "2aac8ccbd1b0851b263ee5483bdeae474e9d9d7e6065ae5e06bba998857aaf1da65a2d3f25d4dcb6f240b457d2e41b9682eb046a634c1e087485f1cbfa03e60cb76b225d312cb1a95c93725e9838cc1369f0c5d67fdc9e664befb3ca6b09c9eea7210f2b16cf9c17f3a52bdc0f30bd09ead8c39eaa54fd759a8238cedd46ec5245312df46fb04f73a600ddab3052ec4abae491b94b34d53f2f69b82d67ea9575622f59b1671aab73441803a8256f55e0d3309e7c87478b9d24f35edbc62967d0763930ec907f00730c4c4926dcfd9f3391a4d70ddf68173cb43f3e7fe70b68321603a06b18add2d5eef89ede73b4c1e7a16dcaf0a9f75d6fe9d674f3ade7aedd4a39cc977d52f6f562d63c271e1b5399d828bbc7e8b3d238bb50871661ef6d2cee4a9a3e523167e395133dd4df2994a9d6958064229ed366ce5dd0f256c6cdf18bfda9da68cda4cd1443e8a8f67953c5b24258f1ccd9e514ed186c507bddd2477a9d6e953298c145c8a974f05c0ae2637ee01198d7f94de7ecbc0bb2d084c804f72e7393162f86fc7202e8395df0213bc5e1e0da856132ae00a649fc7a3a26a8a5b022a48dbfe81847ae08706c9c7366d5a16fb6ac68f0f436ad5fa0f289d74438a7c208c92bdc597fb2da2f19e222bde02b874e70e2f2a2a50b906f7fed4358450a8803950f68d7bdc3332fd645d03c61f177e0e602f69cc41772ccbdf70a35f5fdf313f5788f863ad5534d303b6dfe42fbffdd47efa0df5b7bf01dbd8e0038caa023b36e40988b5619d318c989a470d95bdd0ca9bb3610d19502d12c091256090d88d9345f9c89e1a24566e2536ad151a3e462160417319ba34979ac13fb7e713f0d2aa151f40b52d360a82e2a2420e4181bcffbe0f6c8007241fa6a0c2789beab1f366db4af3f28a114dd97eb1a4beffb99d7df3437fb8263cde23c44fcd8a6e73e1107360b8e417204e135464d8f996b86a1812c253408fb78737a368b1b88e4cc8585487fe39961896ed1b093c21cfc456c5dc6a177dcb881b776053468ee0d1ff7ffc05599a383b7c1c16b38fe3cd7c3d3386b4f974075f09a196cba336bbba2defa91763ab5c7bf973c12d8de66937a7a5a8116b47a98b01977970ce43772e78f5c4862ad2ca5a2cc1a5cc191dca2ae031c867c4cca9598ba2332bcba7379c7f5b97c91240870737686edf1b3c4d4fd32d091cf865f5596f24d9130b40a1e3a62b40dfa7908d8cb679400add3a72d06f6dd738aaf5cdae9c2979c56136a7f566d0062c38cdb3e472024ffb6fe1e3e1042d4411a7d9cf9936aa464dda64898d602a584024c3f6b0cc45c9009af1bffd80bebec4bf8a6aec280bf078dc82c0700b8394271eedd7debd57e5c9a09fb997da37fd3306ca0a51459f299b48bf0908f5c9be3c31379c4f1dea89841fa49cee8a459316e553fed7f31fbe714de"}, &(0x7f0000000100)=ANY=[@ANYBLOB="21000100008093e0fb"]}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) listen(r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) syz_usb_control_io$printer(r0, &(0x7f0000000340)={0x14, &(0x7f00000001c0)={0x20, 0x0, 0xbb, {0xbb, 0x4, "6b5ffd7f3954c2027312909dc0d2666cf8279561f1fd9fe11fdf457a730dd3f50f34174d3332dfd48e5f378a36a1fb5519ac6a36e0ac6b69ac8eda591339f9ef121de16eb53b41b9524fc7c45809156f6d0675ec45878fccb86f647faf42a697b2cbfd46c6cbaf6ead9769281c1f5637c32ea16348bed69da49da5e60855691e4871d64d2d46ab31e9c2699a365820d906a9e0b0c5af83c1eb9aebabee9f5f060ed932f14881efb077b9f34248c914a1cea07b2cd6a1743fae"}}, &(0x7f00000003c0)={0x0, 0x3, 0x87, @string={0x87, 0x3, "7fe0f8c130179c1788a384f7141338094ffff542d050eaa2442600ec27b72a0e888edaeb5eb028062152fabb2eba0832b638415406df46f2bd79e511a7d79a00a8fcbcdffedc404bdb300fdb31213772124b140f851470e23aeb647ca72a7d04503e5b3eb0086644181fd83d831a6c6935bff0b66279085819a4e6895d10a1a592657816d3"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000480)={0x40, 0x7, 0x22, "c60390f0ff06305dcf434302bdadadfbf8e37e2c6ac924affb3a00178185f250b650"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x6, "1825c0de5ca5"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x40}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x3}}) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r3, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x42) (async) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r4, 0x80000003) (async) close_range(r1, 0xffffffffffffffff, 0x0) 3.985232112s ago: executing program 7 (id=724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = socket$inet_udp(0x2, 0x2, 0x0) futex(0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.912614294s ago: executing program 7 (id=725): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) (async) fcntl$lock(r1, 0x26, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000003200)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000003200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setregs(0xd, 0x0, 0x3, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, 0x0, 0x3, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000180)={0x0}) (async) ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000180)={0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0}, &(0x7f0000000640)=0xc) fstat(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() (async) r7 = geteuid() syz_fuse_handle_req(r2, &(0x7f0000005240)="f44a8a9c25997816a55f8b6781347b75393396ecbf26576501a8eaf548927ba314e8b72bee8c3b32766dbeccbb7792d38dcf278c54bd2f1ed93e4ab1584bd0077583b7b35e856f7d85f2fe207fe339cf693f8ec5f526bf900657adcc958d979c1bcf488fc8df77f1ed1b510026fb30e75a420b268507663c911332689c2b918ea91bf980328feba06d8488d93cc54b3a6917a42fc129e99b43e40db038e5dd0d53acf4e0d8cb4325b84fc76b54c43441b08217fa1593590edc5d4f1cdd569809d9e8e17f089be8fb2b223fa21d169e78d70eb0c85f26e822fad7290d96fee227aa6e72a17a512a67e3e25d39b42a3bde90539d012f0c990373da0c2de033c5cc51cf26b598b7aba016fe950029e27f18a2a076605005a62d3d3c753258beb728cf6f55c899e13d2b69ca99ed7034b5beb9c6df65b02b0a4dc4dccfb1d1f5b096b1953e3c165dad17c7d8c35f7afb766645ad5428c9d3b3b710fe8bf6056a3fb3141be47dca00b5679d778b9102c352874d6906ce5145d5ab8c6cba335cd5fe6e9437b84def19f25bc7ac1c4032c390340f892981af59d0b341b4889aaa5dcb4d8caf1daa9136958243f1e4c5c8ef785b1ea29094c19dc43678e7cb25645d3a03fa32e23f45ed197863d427ef8b207228103717d3bb851f9ee93748bfbbc82751262358265587f9af9b6e08848f7bb646b001a88af9a827e6016315adbe9f1464b494322989f73ad1372fef8b89486a2157f9a6949320c29fe81bfc48c6470c86c28a4dd9e2270aac62e80ae2ef48c3eb84d139f78b9b7fba675a12bdf331ed5142e034d553253d5aee3c9c0016d21e983ac9dfac603dcc06f3dfe4f6257cd36ab0d04a79c142ea59169b660d2b81df78e6ab08a3a42266b70f886cd3237e66676f0594f55a8c774c184a3975aaefa98b3dbcc40c0b1e38cb9a125e758b02cb05b7c63d87071fd656a63fd4077ee42d348c1b7512d051c79cd9f0be7a525f8c932b67325874398fb252c9e7f2219445944506596847ab29aa8b963dc31b1dae1c430ab84963a6268c237210858407039068cb531a503f223c94a81e41696c8809f3a4e281563dcddf35c9cf6a72f2e0c5e7cc8e48bde306162e864bcde12152440a3978ae2f7c1ceec127be195e64bfe3947353adffcb4905838cf6a1e1d16f6d5af773b349b603639cc593c6e72e107da5dfe164e1ec29b035fa697d33dc9e7067607f77630cdee20589e00dd8a595750b27309b7e686f28968ccebfcbe2aaaee73c74a185e14dcf82a875dd08d93c202e4f6a442065d93c28e7fb0a6a5a865b207bf8da69b836ffa35d72d870026910b30cee075bbbd6e7553136da71bd98425070993f1286b865136582c03da5e7d9fd3235839e4ae41b1e0cfc44c71f02d9cbfe5348813907f156a8d66f86ab52bda66c8c68a234596741ab0cbbe34f548f408575e550e6c1662e796de630e2c8a7ac8339a41f1b7446c600ef33c8acf6daf7ca0bd335d65b69eb5676d7ed5349627b210d33344f1a06250ae67ae286b5e607ec99a934f97ae4738c10851c9718206f03816d5b709c05c6b1725265fc93c412d8096a5c1bbe61df2586f2c59efdf6690ef4129726acc7fe01d1a755e42b5700580013c28914d210a16fbd088fce2f802134003d049bb52a9466680ff52b7e006224bd6a5dc0c878c5e812dd89f2c0250028591736bf29df87539854436d1ae0fe85b0494514ed83bc3f615c51367eee58133d62783dc8ed8038a53ea40c56de912790101696fd665782a73371ab4096900a5e67ba05a103b41d617251b00984e3f49387798affa715b28ba01084e1abb598463718829b56ecf3c046bc76f40ededcadddaecdc70faef211c80d403ce05032537f5f81e700281991f49b708c6d346a70da5adc3e7836906b82e5161eb15b06eae857350e8d91cd79f2a5a10bc55184d8ab2950d2ce951ce44546c17b90a021c64e6232ede72bf2671417e20830e2bc248fb3156defbc1b300b15c7c0ca540500de0b8e975e0642508e78fc2826f4d47eb64068387abd5a4d971f73d05ee1c705a9940ef5c2e2421cef7cf95a20a4778c65f618c4b3c0952c3ee9b9784111990418b96dab7a517b0b4407001ebb62f9991fb048bf71635e407f7bc43ba548d648f5e952bfe56262ec01b9cccbbc8e6a74179dbaa8ff768c8d63db62641673ea4f4e5e60e031ddf023493852d45144f5abccf07d9500d8ac31652d96732643617bf8c2caebd30cf2ba30cae70c3a3499b48c8750d78fd6989f3d475916f9f99c0da533c11de985f173bbd67557a3274057d0a9bd6387fa78fe5cba4c4d8efff5a4f3206f16d3bdc9e4913b21b9459c74569daacc1e435d02dfbb5d7a5e293d16f174aaba3a78d637fdb6c1fbcead64fd39f959f001246f8c5fe8a6986c2ca86130ee53462feaed10c04a2be385a9674c232168f5ed1a48d508bbed73636815b70fb211bd16c68467eb116a41b9d042255b8e2d8b7e4de90e839a1336813ff062379dbb657254d7cc6d36aafac59dca0541a6b6b1cb84cd743f76f47af2cbe4e782aad7c79a30520ee1d1d1f543629b233494634ce49c703f4c7580b7402c658157240ab86a16387eebd6728474054ed472918ebf304355b3262cdc0b7d9c4593006e9229548cad380af1ed50ddf9ed8d2487303369339b10918440b8200c3c6e7870524513507bbbbebbd2ae5a2b6bacd353c0e77fc5c6ce91f2d178020a77f0f4b61e91cc465ceff77b2beae89294adf04b50e832700941b9e3cddfad2ab34ee5912f677d93f2e97e0489b15ebdb1810c5a3f2514c506d255070ca67425ca2e9a865455dd190cb0e9209ef5a345253a46c3c87facd3e2b57200d82a0b0dd54204661cc5ea848f3a9dfb973c5d75146e197706f3df30af25638ca97b58a665cfafd6b4ab74adc7e964bb704f9a9643704d78c39c7a5ac67f4ccb8a493755fba03cee020ec635177b8453769f72a326fea0076cca29cd7479fd679bad2abcdb96ca5ce44ea492a642b5e0f9a7c70c07b9ab9e283b28ca193a9ce654526750e43cdb82e810654723bf5acad7150a6401e73b69ede845ecfdad21ec5146d59e8de6a4951dacba8bb780ff5cdadeb236a32c7d7b06f521a3dffc2c3ed441e3e12fa253240d6ed1b7627cfd90582483d56b0b1f8f4e93ef780bf0453850d6405db355742cca55f8d18eea639128c5ec119921cb445272993b1cec6b469afd1fe05c16aef17d02f8820ae06b34fca7d7700b0f3c5d571ee95911ee224394036805d6445d6cbd35ddcc416f6f8f702e24c0f288f117cba2c5bd83d0a5512ed3b7af4e52235e36da62ffc1b190b60c4419797a562e6a7a815caf449b16978af7de62055d9c5b6ddf1e019ae1afa861604bf4c21d3c800eb0d37207e5b9a95aeb73abf48a648265c26b7ad8fa0c6ddb97b4027419d13fcfccacd5867035db81184170e5590b452258fe7d6be8849370c64b2373ff7833554eef103fdeaddb67577bf7caa39a0fa45a82cedbe9ee1a8fb23bd16f5329835776a16dc8f4003e487830bf43e37b71d462e36b33caac18e7ab02ab0a86a83513491bbea020dd35092acf64018ed7e9d61fb9f62a13679730828fb38e4c62fed9af7301c4c4c33814aad28bbef0a16bc5d4b2db428ff3acf5f2c11987e39f9c91d2fae49e97767b35e454eeef8c0e456da9bbd26d6cf04346d119dde99515ebdee2ad45b434b169e11851efbb7ebd4b2f6406ebe9e197add3e76df3d11fd5a24f4c10cd26fd6d5823ba06b0c471f3f12b825e9a5c6ba129f9f482b71c4103271ee01d31f925c696b613edafa3b107d44e9501c3510bc4ab7af4bb686f8661780f4c2673f7685020419a8227ba3d5b5d81f9e19553f4bfa7832f6483b17541c34acd249b0977d0436cf603200e4ad51193bcbdc52c23bed85353dc32a77e4c695a194fe01954b6fe5ebc4a8f92af1cc5e1ced5d23f9f7cb713bc6172907e09dddff7c298f257523cd91464bf56e1716f6daa66d57ec2541c5d977f3d97dd80efffb44dbdcc88c843823650746efb0f69f28aa489cf02299f4121f6ed10bad161b706e4d7bed9b28b4065b275f4978692eed665b8251f68ae10b8885cfff8dc146a19be17da0c252bb03ced43382e8b93d82d19513d968dde86487bf939b588bf93f13fe16b01bdd0fdb1a4d1093fa0390281dfdee38adcd3dad08c6806d21b8155aa45465f68a34ea25856c1c60be1ce582e4dc054a610b1808d8f4444f7be690d546be87b0d9e1992f7db590d15f7a786b648fd9615e4abda20f9783adf89a5de3f92443661fe3ff095c3c28cb3c46ec15997bac99de826c4a9dfbd8e0be27114d1df14b1ed7be30f8fb32c162b8eae3861c69d82e171e2ee14e5d3127f64c8e60e172fc97f009d948e57c320134f5451e220808779a0afee85e25afb173023b30d4944a9ac3732ca1185f87ce7a4a78071fc0feb2670e30dd01940c256965f4261d7297de9587c58e244474da063a1e91cf501a6cdb81b1e72557427d7ca1c65d211b8e8b311c2c2da376a8548fbf6694fc4ad4d5b4403a2178e8e661f2b7e1bb0c6931395f3bdeb2cc047e7c31e4be65b952e27f61577350f4c28e09bae301b68fb73bec2ff346b873e54b638e8e9ec6befc8541c36970e15aef79a103d1687a3e842225dac9bbfc8d09d2a41b4d73ae003e450fa0d7833abfd3248ee2bd3bae8cc8f2319bd2ac146d09afaea68646bf56733097094fe12731264a158efd87b5cfdd0155224ddd9f235f31ee891f885a4d44452875753f071c0ff416d7caa6ea0c239d53e77fe6b3814740917dd12f288e088e425634bef2c84167685c4839f420aef673e6249f8728f6f2233c6030aa93656ecd205b614d720db25cd90635536dac2896e113b516ee6c46f3640bda70a5be0ba125353e4b9c8472556a9b3fc4e27838600e78569548d8226edb219548168ebb37b4304767489c040c3d88864a572703b4d22c6b3225384566b2f875d34ba38094ba0867ce68177093ff77cdb2b4c5ac911ed3448b3e6b7373a493f976682cbccfe30876c4b30d66f45c30a817f26624cf348afd18a6cc33e29bd830108a8213533ca3eb7518b1591b85376b9d7dee240a78a26f5edcc1f7a99ff768ec35a93e6fafefffed26a6fd3a88d6f3718e90ba650c747e8b3334db205dc3e03065a8cd6bd643ba74bf6a380ec89f1e3d19d91755f0972daa2589a410434fce565df8cd0d820515ede46a1ef86fcad1222d800d5ec6f99446c9a40ee7522e24576b6623b291e00c033c9e2dba05af4caf04e048df1451d646ab1452ec9fe2924f85d12a9f6e3f45682954fd9bc4df47a2caae6d40cf89be7babcd761a464c1a459a6193ef469403808967a5b218895596feca3ec1b0e6361b35107bf053560cba0d99ab60e158f4bd7414dd762b965ef5dfa9560bfbc1cb42c93179a8d91aa6517ae4e59626b7dbf1db24d5fed5ad8ecfd7b67e4356836c6f5a5414d79a23fe2a89f33ff773f993ca3e56730b7af871a76057cf09395bdc7cf7094b18880c74f3bfd3a05b3c8faf2e6e67b3bddd99727d0957da594e8268278e5f08de950f4e64a04a602095d1ce6ec07faf230ddb059e236f5dff5b6f94493d2648a807f8251e7672b882d40600a046bdcae6b1f918208af8ca0b2278a39d5a8d2f9b8b24c7daa78322af03c3449e88028cbf34d9d6b2ee8c4500b40db67e5f2b7839fc0579db18296b8d9c20d730795e1a5f107baf77f1b2f88502fbaaf1fcd06b19cde309fb550a7b5406ef21d2afa775e69b831aef2235f9a9d937ee4d85a673a897b0de65849ae11a3c332903dedd3db7216f54fd888e99b7b291ea012a109b98e74b80da63685b285bbe41d476daf8145f67e6b2f036845edab874c225b1ca27af747ee9c41d27b211a0208f8a6e0da75920246759e4a2e4d639a855fa924a5f961db9fcff2cbb170d29f770d8d77a9e15f0accc42d444e8c30530ab20c8193f2a66b74b3761cefddf4b5ccae03a50d17f0b69b3bf20d7b4f7428143e521ee28aa92398dd94854a05eecfd62f7829bf83a9961d1a3cee92336216d7a183c12cfff033034bbbb89d715d9fb9ad87e13e804dd37a75b15883277306790e478457c7d34c30aee15759a650f0ee7801a8a70b91a920eebadd98fa5dd35cce6f29405c92dd2a0c05cc567d92e90179283324877df63a913e1dba093faaec4d144e774033bb4ff5f2c7de04bc6127378dfd2b4123ce28fa4922a1c0e91c986e4e2db4b6a6c11e44c9ba765a7cf75f8d6f327f5bdfe6a4e832a291373dce2e9b10406d6c20f81af5c4f7ac99cb22b738ad081100d14dd81b37d7011aa699951c4fdbf14c2142b36bf82dbc8d256cf7ef193c394379c0e27a3067b0859bbc843c43b52e8dde40f29975f8c1444a670ffab98dfbbb22d0f42e5b3a1a322b7048bb200612107890e122c13ef8ef4f4803de9b76f20aaf4a1539419aad536ba1338c121162bd039fbae1a03a86c3887e0be5eaf6ef77595654e03a8109813189c5974bfb615a570e549920e4cdd52ea7bcddf63a1c8ef9fe0c12d156d89759facff330acd3e4df1ba7bd28f6f77c17b2b1822eb9407efa2a3a6b257a170ebf6b80f43d3e9a0a71c38478a1fe6310b3064692e5ac966de855b442a463580ad960d0b9f5aabcfa69c63fee964345546ace0c1c6febb384626fd1a3df6073d5b76c355941669786b8dff30fa1e95cbcfec4e102cbd021e7cb8d71b6d43d1a6715728e530cbcb6308a675d244cac88ca87a3b52b1c1e2ac08f25b690e3a44624decfc7b81f5f875d96c2a0e7fa0daaedd2a37ed633c9e7721a44550f670fcb28435afb0f602f68997524fd8c563077a20937503631202853749edaadef1c89faec9cbc5d03cc81999af234e9658487f75007b83ec00a7e0bf075299087b21830ec05493f9f23390dc1fd4ac7cb6fc7353613a856d56f2c20b85a915916ac1e6b8290c0f907858114ca2bd81bc27e2168feaee3819de54a2bb392b13e553af8c0e310d4b6bb2609294a1262b90efbe1ebf3dadaf8ec193239f1a3587d0c514d85fe571b216ae62be63fb165c36abd652f37dfa3c3566da8bb54e0d93d3242aa46d996332f2f8087c7a8ead23a714b97975f74fffe868b1796162f4f8fc6dde4c699b63fc56b8a8a4bb8aa1b7a87903d1147960874c1315f59aa6fddd7befb27518667bfceb1241609b4cdb04d3d239df1953a49154b9972e15a589e2ef306b6125f8e7494ec5fad0793663750a5b061d462fb9776ebff88a36a8f20902480b7b26899c3d844d21af79bd298eacf80a26879efe4e5b5912de957d7378b6179c333d7699fba68372c2fbf723b32939c6fa7e98e75abeff6fcdb6b1f0b139dccff52f2c4452f7dfe3fa239072bd123231027679fedcaf0d8b5032856253410e7923be5c3ce0aa5c0fe12549860817403cd6438b0da4adaab6426117a1d8b3e82cb249bb8d4e102f1771a7ed8597b3b95525e4c202918dcc5ed6f1d5d2c769ec95571f82f2ef5a94286805c561de6d30c314e94a5d2aeb11e0fecbb894dfadafb66f57e7def49db58b718389e7e7ec11bb7261667698b9fd30be1962584848a578bb364248d56d102cafd48b77deada7cd13eb614b991b217203d2d49f61af4ebd540a42ab4b6d5725c1f650a761a9ece6d8955e66ff6a22b45343bf1e1fffa9ba8e6c275ff45141d2aa30d55648ebcd91ccc6b279fd1da918aa1ce9a1f2b4e1d975c43a5eb7978709097cd9f09719824c45059aa020539fb0930186298b3843b53fc2db0df8dee2ae57700721df1a3d71dc84f8d19a47ad2e1b66ce6f2762d936e50f5f9a9e1cf5cbf2f52ea96e00960eac9d27f3a71c64d1c2bac2f17aeb53455366e21d6e53fe5ef37827f173b717fb5494cd2281b0fdb7c7724b5d32937219230a5b0c73d94dd054e9e214db8b73f2a9dd4214046b683140cf812dbb0c06b6191bc4997980b269ab4cb6860f5d022efea27642213e1e998e12d984744c7be426bf5f6d9241c3d62d9e748c47eab32fd1cd6ac9f75e734cb078f43e23515c520f3f015b4211ab835f902ec3e1e23988d3d200c8b4adf87ff84fbac83589473ec7b5adfbb8b3188981e0805ebc5dbaff2f957da1bd6780013fa27ed302df14fd72ce91c8346d853f2a502b04d673327a4cdec1295951e1b143c4f37fe7f6a660bf431ee4882dba702a029a81886129d3a58de6ba498d8cc372a4e5dfd33ac09b2dc8e18aeb77006ef5532d8013ad1c65cbdd55cecc7bdf4e8178ea7b3272204ba9a0c1addcddb0dedd1108436482d0585cae080faa1e8f90416c9bbac8b3a8364c556a90242372e9d92e5518e174613caaeb1e661735ef996b812f7dffebf2593e7195659cb56686af5374a7f1a50f90dd710c7a48b432b291d6235429e7a11277b99c6f67ace9e4c04a50dc1a351cdec365b59a153f42699cb1f8671c976ae4bf161ae625c4da985483c78965ed466b1a38f13716ea251c6c667ff20e0b0b0f096240b90f049d41f79059e08cefc5ed82d12581326721d882e96e4b04703dc0d6742eb57aab349be2291b3c5bb588632761cd1c023136648d03b49d366a3aaf97efdcae41c08686405ca58cf955870590c87901ee7b37a3608b8cb8b857625c2896eb5e9daf1a26ce98aab9956ff40cc0a2826bf579fbcc45ab703fb64db9c567bc38a61cafea72856015f9bb6ec254d3744901ac98f535949c1fc00434c9b4938cf88cba1594e3018382932517e746fe0b9417168a7d2e08eab0a74b73be32ab387d80539684979c83eb0edfadea4affc9cda0cadfee2ab451681be820fb35ea980f2f2ad798fdb65347f7c41eb6698735584c24446e58bb2e083bc5e1d17d1a69969388dab052aae0e2c7ecc12aecdc643c381782514dcaebce7d31e941d52c942c6792edfa7178b1ad502d3df901a2e73cd363731b2ceb9ce150b5a2e45028d55d75df2acab8550d6260eae1695a4505919a05c1d1c638bf3fb85c0e5309d43290bd6f73ba51f39b80532bfad1af3ae9c044a08f506dfbb21892b03bd0a34fdf870a89afea15dee02cf890e0216f435e667223a9636d277b3fe9348bf9e02db4ff3488bcf7fa98c21c236d209a8591f95bc4f88964265bfc0ec505555390f7bfa970f4c7694a3f112e153a2bdc1ad0b338279ed336c5f4284eb3c287d426a05a59f1d44db9b749097a4990595d9610f8fe16651a60f47ed5c147e3c677f4db1c9ae5019adb0dbc2fd609e0d582befe26e3ef47cb8d5228de351caf8dd3a2a678c393e4f17711882bc7e8b25eb8054ae23e31a6d54797336118c9e79812a817bddd62a83e1b6fa0a326574e0c1dfe891a1c64600437272ec4ff707bf5f062cc85cea0ae9313d956829fbc9821fbe5daf9c3c324915c4d4b61d684c369cba823699f3aefd52b328716ee644848aef8050cfb994bb0147729837d5362db8fb95f2ffcb842ba2fa3b9dcf8394ebb819ab8a6b6ddafb0505876157ad48adf8cc32c7d47f96412b022bf06a59424f95224337a2b9eeaf093bee5af40e462f3e133d7095954c78955bc260a21fa1284dcb7aaf96c068ad9834e5368c97e8e5a0df1231975a83c09fd7287f168f66fcb0d65f07f33a17f7eb8d3e86cd7217daf082de77ba73785dc5329d613ed14ba99d8d36c74199e63c32c2b72f037b009bd84929d4a0159093fd30dea8b68ecd8adf199ed7009f1b71696c69db8eefc391f8928681fbd954f1056e208019cdc3196e2ccd6f8cdd622ffe0dec514ffd1a5e9f7287a076166b11f02c4fef8b203c2cc6b6e9f504cf2be0b0206df7867a4173c98c7dd6282cab4167869748bf46844cc35c4cee0ca027a24705862e9855447a1c565dd496426516a0243f40668a6df6c8eb7bcecb1f888c470abe4c79965d0059ca1f3ca84b54ed516629f12a7d1c4846334823d8b8cfe2ae68d3765f356861c750a6c9a2de4b372d41c007f9c36af28dfafea8ede7e319030596e86b66e5bb35bf525a9e03878e8b8f7f51682014d49c9e8e11f93461abc92575214c7af9c9ec0793dc665fddc1d8a7524ed39d8096743959b8b6076637a3441d3abc35ca340a2dcb678650b8c921442e663b2dfd1bbce775f4c0ef560cc628fc04d1e3c5a05498945aa8cb2d7aa1168fa9cfdb2205def320ab839084c08a6463617b2a99bd574832c6cc2f530c97aa2ba05cfb5a0253b11e1e9d6e2cefb3d973e73fc706e453ef25a9d9168a59e0dd6eaf2a61d764387905f911c88b7ada75db5ca9b3c009b14a2114c27a1dda3f6f7b2c33be1ae7f0da1beef53d075634c3ff61c660aad544db2548ee5de372dde905a3f9f421217a72db12377dd9503db4a318b4417062bebfc1d32883280e1c2ff50142aeb67bde78f7f4148db290c97aea735fae4f53e7d90e24a645acf6078c861741eda3479566b7299ccf0c76f6bddedfe6bc822176876af11339c7060ecbc434ca22317a0a6a34bfa29d47a4575fcbfbd85207ee9e9b5e2f68384c1b3e64893ad51d8d622e8a5fd5f38f07603c58459324d076fa4f08c7c1c0142481f0680c1aef48b479d7f51f3266e8a0bc780086ba8f1f8d5295d93319f7f160315ed45a8cb502e17411215fb1863b468867cc2fbead44bf76d6c0197c0f7cda7ba72a64667ce5df86bf9a4026e4ed5acdfbad6602a67531e4736db0441ba17e6eddcc0cbfa74bad6e3290ca31e816002b7763179df83e6e3d77d84771549c937a757cf50aa22238394d398e8df2b00f6f19da7c6e979fae1045fdb59f3f697a03f7f36b14f17cf7968630fde7dc76285a5fda02e54ca94e6a973b305a08e80739b7b7c4d7a350ae0f1b742f58d8f653cb0ba4b4309bafde673a5cc4d3c2292cd333d6b0331cec27a48c2cac5864c9e31640b386d5b5cee7796ac167c635d150e0078fa71930a567eb34a9c17dc9274bc7c50ea3c84fb97dbfa6a35ca5831eb1c101a666c1e78d3b49390bcef3084dfd27595bd92c707ba3350ca57b087db4b5e89ff775ff99cf4a9e6af76b9d0c943d64df0a8bdf9016a237cff1600c5538f9f178264ec2fe01788495918b4eb34790314850b34b86ae2f015d5739a348736fe009e51342ffd0a2a7b67cd1593adf176eef50d99ebd622be9836f4e5007108a4fdf9507af2db2869fea61ecaadc46c0afc7f65432759c523b71ac79eb44c0e80543647dfcda6ecbc9dd724d67d7e23844ee5bcf791913b26dcfdd4757dc000470fa00a5f6de512bbce03251d96175baf54d1d4910e26c400f7d9b50539d10c0eaa2c6cac8c358157cdf22eb04954148479de56f8dd5b3c7dd729e9ad4b7912d5a938a426eeb81348829db62fe43cac30821cca23e14ef7bd9e5983b362b55693c8be395ae49fdddd2c06c7b6f978514f241e58a9ad010ca99a631b92cb231152dcdec247a28458f7a2cee24c6f5f5f471f2fee0dee28b530e5dc8aa833f1379ef06a3dd694e67224022bd09c0df8ffcd7ac38a4c186bf477967d0f9e1d6145bbe9853b756849de9eb83c395333d62dd86fd4698ad255e96fa0c9ba5084b5bb59d7bd3b6fc7d220a84cc3cde610244ec6069", 0x2000, &(0x7f0000000c40)={&(0x7f0000000280)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x5, 0x420200a0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, 0x110, 0x300000}}, &(0x7f0000000100)={0x18, 0x0, 0xf2b, {0x400}}, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x100, {0x18e000000000}}, &(0x7f0000000340)={0x18, 0x0, 0xe20d, {0xe}}, &(0x7f0000000380)={0x18, 0x4c60ab125d3bd393, 0x6, {0x9}}, &(0x7f00000003c0)={0x28, 0x0, 0x1, {{0x1, 0xff}}}, &(0x7f0000000400)={0x60, 0x0, 0x3, {{0x1, 0x8, 0x9, 0x5, 0x7, 0x6, 0x9, 0x7}}}, &(0x7f0000000480)={0x18, 0xffffffffffffffea, 0x2000000000000, {0x6}}, &(0x7f0000000840)={0x14, 0x0, 0x2556, {')]:\x00'}}, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffbff, {0x0, 0x8}}, &(0x7f0000000680)={0x78, 0x0, 0x1ffc00, {0x8, 0x8, 0x0, {0x5, 0x2, 0x91, 0x100000000, 0xd8c, 0x1, 0x2, 0x7fff, 0x10001, 0xa000, 0xbe3, r5, r4, 0x1, 0xb}}}, &(0x7f0000000780)={0x90, 0x0, 0xc92, {0x2, 0x1, 0xff, 0x2, 0x2, 0x84, {0x6, 0x3, 0x81, 0x3ff, 0xf30, 0x40010001, 0x4, 0x7, 0x89, 0x8000, 0x7, r6, r4, 0x63af, 0x81}}}, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)=ANY=[@ANYBLOB="b8000000feffffffbf000000000000200abc000000000000010000000000000009000000000000000e000000000000000a000000010000000400000000000000f0ffffffffffffff0d000000000000000800000000000018f8ffffffffffffff0700000000000000000000889f230000000000000010000008000000e350d98f4a554bf60a316d88ed63ef5d4e80ef1813454a229240bc2fab38bbfbb76fa80d2527aba36d46ea9144a65c8bb79227994408feb8b34e199aecfc0548f452ca4a69d3c8c38091636fe494019b2e263a64f23e1cad6b1f6a", @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="02000000a3000000000000000300000000000000800500000000000009000000010000802f6465762f7070700000000000000000"], &(0x7f0000000a00)={0xa0, 0x0, 0x3, {{0x0, 0x2, 0x0, 0x9, 0x494b, 0x8, {0x6, 0x3, 0x0, 0x8, 0x7ff, 0x9, 0x0, 0x8, 0x5771, 0x2000, 0xfffffff9, r6, r4, 0x9, 0x8}}, {0x0, 0x9}}}, &(0x7f0000000ac0)={0x20, 0x0, 0xd, {0x5, 0x0, 0x10000, 0x6}}, &(0x7f0000000b00)={0x130, 0x0, 0xb4, {0xffffffff, 0x2, 0x0, '\x00', {0x2, 0x4, 0x4, 0x7, r3, r4, 0x1000, '\x00', 0x5, 0x3, 0x9, 0x4, {0xe, 0x7}, {0x4, 0xf0}, {0xfffffffffffffff9, 0x4}, {0x8, 0x6}, 0x0, 0xffffff80, 0x6, 0xd02}}}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2100) (async) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2100) read$FUSE(r8, 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r11 = openat$incfs(r10, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) (async) ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000140)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_IOC_FAIL(r13, 0x9361, 0xfffffffffffffff8) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f00000004c0)=0x1) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r11, 0x4068aea3, &(0x7f0000000200)) 3.889247024s ago: executing program 7 (id=726): openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000144c362995fee51eea2288f01000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x604, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x4) pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="80fd", 0x2}], 0x1, 0x0, 0x2fbb) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) accept4(r3, 0x0, &(0x7f0000000200), 0x80000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x402, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.145618058s ago: executing program 5 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@index_on}]}) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c005409c429eff5d73d9cb9d27193bb9b8108a87b9a0aa9bb21c2176caccd525d3ce589180515b81cb312dc9593e7c7f75ad3a65e626815cf6fe1a0f8c998f96a66943df11c8b9d096fe77a6527309cd1faffae6c7601413d0b75f2a9c29fb568bb5b84a5c7ab491181f411dd0e25b33f3e355e3288a2d3c601efd9cde2b438d4f6db0f0856227488954c4ebe51129063f4c73c4bf9fb3f7c0813c48036b8493dae0b624d25489aa0e8f26bf94962f2e5578993f8a490791a04370a31942bc7a5ac8a1f637cba6d4fd8942f7205ec6e147ddadeba3f356f6699bffc3508eac162c4d6b52e07c8e76c615641bd"]) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x31, 0x7, 0x3, 0x3, 0x3, "6537cc9f4e160404"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) 3.127607989s ago: executing program 5 (id=742): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8814}, 0xc0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x7, 0x10000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.996685371s ago: executing program 5 (id=743): r0 = inotify_init1(0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x8, r2, r3, 0xa000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x5) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r7, 0x22e7c000) 2.940779282s ago: executing program 5 (id=744): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x62, "9f9b1b1063013bebdfd426e96af5016bafbb1502c87a3bfbb0bc6e96f868471ce101a3d57571e6ce7eb4358cbdc4b11ad75483bc5672228440c3326758d70b1f932a047451072c1e97666b3be57459e87a71dbf3afa44ffc86ec05958e49b163f1cc"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfd}, 0x18}, 0x1, 0x0, 0x0, 0x1f048e83907ec8f}, 0x0) syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000c00)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001030000000000f900655a"], 0x14}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0x32feb97c}]}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 966.932001ms ago: executing program 5 (id=762): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000400)="b9800000c00f3235000400000f300f204164660f3a0844b6d07866baf80cb80c7d0780ef66bafc0cecc4c17a5b9f0c0000003e650f01c2c4c11dd56192c4c281bb461c66ba4100ec6467360f7f9e0000", 0x50}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = memfd_create(&(0x7f00000006c0)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb8\nR\xe8@\x99\xe8\x8e\x12\x1c\xb3U\xd7\xa4\x86\xe2\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5/\xae\xfa\xf8\xdd\xc8b', 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x12, r7, 0xff64000) r8 = socket$netlink(0x10, 0x3, 0xc) (async) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7}) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) (async) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) (async) r9 = socket$inet(0x2, 0x2, 0x0) fsetxattr$security_capability(r9, &(0x7f0000000380), &(0x7f00000003c0)=@v3={0x3000000, [{0xac, 0x2}, {0x6, 0x4}], 0xffffffffffffffff}, 0x14, 0x0) close(r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) 828.724594ms ago: executing program 7 (id=763): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000680)=[@clear_death], 0x0, 0x0, 0x0}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001e00000828bd7000fcdbdf25ac1414bb00000000000000ac1414bb000000000000000000080000060000000335000014000d00fc02000000000000000000000000000008001600050000001c0004000100080000000000200100000000000000bb445ef269a196b000"/120], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0xc00, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x6009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x81, 0x0, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="0025ac0000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300), 0x3f877817, 0x2f82) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x8000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000001c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r7 = syz_open_dev$loop(&(0x7f0000000380), 0xbfc1, 0x2c03) ioctl$BLKIOMIN(r7, 0x1278, &(0x7f0000000400)) 818.463104ms ago: executing program 5 (id=764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) pread64(r3, &(0x7f0000000100)=""/95, 0x5f, 0x6) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) bind$bt_hci(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 235.011465ms ago: executing program 9 (id=775): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000140)={@remote, @dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x64010102}, 0xc) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)) (async) getpid() (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x10) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f00000009c0)) (async) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x17) (async) socket$inet6(0xa, 0x800000000000002, 0x0) r9 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40020000) 207.547276ms ago: executing program 9 (id=776): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001440)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x0, 0x24}, @flat=@handle={0x73682a85, 0x1101, 0x3}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 178.287326ms ago: executing program 9 (id=777): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_setup(0x800, &(0x7f0000000440)=0x0) r5 = eventfd(0x0) setuid(0xee01) r6 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) io_submit(r4, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r5, 0x0, 0x4f}]) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = dup2(r0, r0) openat(r7, &(0x7f0000000040)='./file0\x00', 0x400080, 0x80) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r10, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x8020000, 0xdcd, 0x4005, 0x3, 0x3, 0x0, 0x0, 0x20, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f00000042c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x0, 0x6, 0x0, {0x5, 0x7, 0x0, 0x80000001, 0x3, 0x8001, 0x3, 0x35741061, 0x10000, 0x8001, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0xdad}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000006380)='./file0\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x2d8, 0x20, 0x0, 0x0) ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xdddd0000, 0x3, 0x0, 0x6, 0x7, 0x11, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4000, 0x9, 0x7f, 0x3, 0x9, 0x9, 0x6, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xeefee000, 0x9}, 0xc000000b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x401, 0x0, 0xc5]}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x5, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x5, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x4}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 104.465148ms ago: executing program 6 (id=780): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x2}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030001"], 0x54}}, 0x20004010) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@fda={0x66646185, 0x0, 0x0, 0x37}, @fda={0x66646185, 0x4, 0x1, 0xb}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2b}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}, 0x40}, @exit_looper], 0x0, 0x0, 0x0}) 103.691028ms ago: executing program 6 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000000c00)=""/217, &(0x7f0000003080)=0xd9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$loop(&(0x7f0000003400), 0x3, 0x8080) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000200)={0x168, 0x0, r4, [{0x5, 0x9, 0xb, 0x1000, '/dev/loop#\x00'}, {0x5, 0x0, 0x4, 0x6, '\'-)['}, {0x3, 0x9, 0x13, 0x7fff, './binderfs/binder0\x00'}, {0x4, 0x3896, 0x0, 0x2}, {0x0, 0xffffffff80000001, 0xb, 0x400000, '/dev/loop#\x00'}, {0x4, 0x40, 0xb, 0x8, '/dev/loop#\x00'}, {0x4, 0x13, 0xa, 0x4, '\\^]:^#!w-@'}, {0x2, 0xffff, 0x1, 0x80000000, '['}, {0x0, 0x7, 0x13, 0x8000, './binderfs/binder0\x00'}]}, 0x168) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @loopback}, &(0x7f0000002440)=0x10) sendto(r5, &(0x7f0000002480)="eeb52fa0389cb63cb3e82acb78c6e61c2c3a3d61cc4e751b5f5b07fd012776216d53b8527e5b1e386695de45c0382194cbf1cec0d295a3d1277dded53adf3f4d09476d3f9510b82c6aa672be436bfef6ff82e665b87bfeeb32941cb95e9dc139aef6eb74d9ee8ab11dada2d6e4f49b87d686f46b512ef7b6aa9b321f3a48d836cdf47781ae04a90bb5f8e9c9d19db0df39b54389132087f341b868cbd8435581409f74dfb4edfe1298630a57ecbe67481fd2e6f7649cc796a8b8d77ea33ddc3138b7eac235ead428e377125439d55cd8cb470245b129076a0170aaf5f04974e4c47e468120730e9e87b0746a7089a8066309c3", 0xf3, 0x20000000, &(0x7f0000002580)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000002680)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f0000003440)={0x12ec, 0x25, 0x10, 0x70bd2a, 0x25dfdbfb, {0x19}, [@nested={0xc, 0x50, 0x0, 0x1, [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x4}]}, @generic="37af92e5e710118228a95209aa0f352e58bdea458c2ae79821acf524241a5b84af901cb63b9059c90a356375728aaaf42597c1f18655476bf7d26f13b79d186fa86be882bd4b6cc164c057d6", @generic="7f328b5c18f34dac569f7289cb9febc5610cdb1629f099d017dbc725399ef6abf50ecb13900a5c60d3f78b6fed044b4ecb1dcedc68efcd5061a94fe600f89467991112fd2235a6893301f7990896e85cc9caa6e25805d71808572c520ccba630115048efe65bd9c3ca61234fcb936b35968014af3d79d2acc9021d5b24a0975c520f0dc8e4e33d1f09534f57eaaadf55753facd768754266706efca137d466631ddad49836f2b4737f6a3f5ad5a986886494e46c9031ec38827e22167304", @generic="68970b9ae3e93887a495fd0b5b286a5467bf53c88a4c62082ced9dc3e5f7affe55d70dfb8b75709917137dd0b4079b63208f3e33b0c9c14661f65555796f18165bdb00043b1ce82dfa12b7434a677648314f38ffeed74248dd76f97e37f01abd18b67649482ae1a94ea9bc9dbb4cfa5501c4c4fc59dbf910b23040b277176cd6bf5f864434c711a6e3eaee5be0ac8166acaa76087a2264f17b20ca7f00fa84245f735fb9d6a915f43990e43dcf0091043934c0023a95", @generic="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", @typed={0x8, 0x130, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="97c157a095f537101fa86b9ac190e51c388b97e3aeef", @nested={0xd9, 0xc8, 0x0, 0x1, [@generic="f6c8c39cb550ef00369d6285155058a297b6c4546b409e1a1f2a75ad6f67ce998749af93ac75bf260b69b0ac1d974371e8d7caf99fdbbb8cf82e96e0dd45e98f328656f61023e4176d813f779e47eae2992e5054e75db5eb1efa96b61feaa4778b35a6063902812015ca579e87b26e952ef99c6822540a53c86b0f13843f15b461d67d2bfdaf8306d5a4020eb061e56066010e7db321dd79518f994212144680ae926d287989711677", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @nested={0x4, 0x9c}, @typed={0x4, 0x103}, @nested={0x4, 0xf4}, @nested={0x4, 0x7f}]}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x8, 0x33, 0x0, 0x1, [@nested={0x4, 0x44}]}]}, 0x12ec}, 0x1, 0x0, 0x0, 0x10000}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) 73.490358ms ago: executing program 6 (id=782): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c01, 0x3) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xfffffe01, 0xa3, 0x7, 0x10, 0x52}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/18, 0x0, 0x1, 0x39}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x100, 0x3}}, &(0x7f0000000080)}, 0x40}, @increfs_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x2, 0x15}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x20, 0x40}}}], 0x27, 0x0, 0x0}) 71.523618ms ago: executing program 6 (id=783): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000200)={0xb, 0x0, [{0xfb, 0x0, 0x8}, {0xeb, 0x0, 0x8}, {0x1000, 0x0, 0x4}, {0x0, 0x0, 0x7}, {0x74, 0x0, 0x8}, {0xa39d, 0x0, 0x200}, {0x840, 0x0, 0x7fffffff}, {0x80, 0x0, 0x8000000000000001}, {0x8, 0x0, 0x3}, {0x9, 0x0, 0x1000000000003}, {0xffffffff, 0x0, 0x18}, {0x80000001, 0x0, 0x1}, {0x2, 0x0, 0x2}, {0xfff, 0x0, 0x3}, {0x2ac46eb, 0x0, 0x800}, {0x5689, 0x0, 0x401}]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x40000001, 0x7, 0x1, 0x5, 0x7, 0x70, 0x9fe00000}, {0xd, 0xa, 0x0, 0x7, 0x3, 0xe701, 0x5}]}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f00000003c0)={0x2, 0x240, 0x380, 0x0}) prctl$PR_SET_PDEATHSIG(0x1, 0x41) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000040)={0x2}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000140)=0x1f6, 0x4) sendmmsg$inet(r8, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[], 0xffdd) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048881) close_range(r0, 0xffffffffffffffff, 0x0) 70.649048ms ago: executing program 6 (id=784): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a00010200000000000000000a000003c09a287000000000"], 0x1c}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40afd03000000", 0x41d) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000001180)='./bus\x00') r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x5000, 0x3, 0xb0, 0x6, 0xd2, 0x81, 0x7, 0x0, 0x2b, 0x9}, {0x4000, 0xdddd0000, 0x3, 0x0, 0x40, 0x9, 0x80, 0x1, 0x5, 0x6, 0x3}, {0x80a0000, 0x1000, 0x0, 0x5, 0x1, 0x2, 0xfd, 0x9, 0x0, 0xa9, 0xb, 0x81}, {0xdddd1000, 0x100000, 0xa, 0xe7, 0x3, 0xf, 0x1, 0x4, 0x8, 0x7, 0xe, 0xf1}, {0x4, 0x2000, 0xd, 0xf7, 0x5, 0x86, 0xa, 0x7f, 0x2, 0x0, 0xf7, 0x43}, {0xeeee0000, 0xdddd1000, 0x3, 0x85, 0x7, 0xc, 0x4, 0x7, 0x80, 0xc, 0x1}, {0x100000, 0x11d004, 0xc, 0x7, 0x0, 0x5, 0x1, 0x3, 0x5, 0x80, 0x3, 0x6}, {0x100000, 0x1, 0x9, 0x9, 0x5, 0x7, 0x22, 0x37, 0x82, 0x8, 0xf0, 0xa}, {0x10000, 0x8}, {0xdddd0000, 0x7}, 0x80000037, 0x0, 0xeeee0000, 0x2005, 0xf, 0x0, 0xeeee8000, [0x5, 0x5, 0x15e, 0x200000000000002]}) lsm_set_self_attr(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="650000000000000bace68aa115ceb7610f0000000000000000000000004b0d814e10e14464ab3517e8b7d303000000000000004d9f6298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83600"/104], 0x66, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x8000}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="09000000010000", 0x7) r8 = eventfd(0x222) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000040)={0x8, 0x1000, 0x0, r8}) close_range(r1, 0xffffffffffffffff, 0x0) 16.8121ms ago: executing program 9 (id=785): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 16.63397ms ago: executing program 9 (id=786): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f000025a000/0x2000)=nil, 0x2000, 0x5, 0x13, r0, 0xdb0d4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0xc0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x10000, 0x100, 0x12}, 0x18) execveat$binfmt(r2, 0x0, &(0x7f0000000180)={[&(0x7f00000000c0)='&{\xb6\x00', &(0x7f0000000100)='/dev/rnullb0\x00', &(0x7f0000000140)='/dev/rnullb0\x00']}, &(0x7f0000000200)={[&(0x7f00000001c0)='/dev/rnullb0\x00']}, 0x400) 16.439689ms ago: executing program 6 (id=787): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r2, 0xfffffff2) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x2}, 0xe) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r3, 0xa0e4f000) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 9 (id=788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) futex_waitv(&(0x7f00000005c0)=[{0xfffffffffffffffd, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000000740)={0x0, 0x989680}, 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x10}) fstat(r3, &(0x7f0000000700)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ss permissive=1 [ 19.280684][ T36] audit: type=1400 audit(1757112884.470:63): avc: denied { siginh } for pid=245 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 27.480586][ T36] audit: type=1400 audit(1757112892.680:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.481987][ T281] cgroup: Unknown subsys name 'net' [ 27.503276][ T36] audit: type=1400 audit(1757112892.680:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.530725][ T36] audit: type=1400 audit(1757112892.710:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.530972][ T281] cgroup: Unknown subsys name 'devices' [ 27.737449][ T281] cgroup: Unknown subsys name 'hugetlb' [ 27.743102][ T281] cgroup: Unknown subsys name 'rlimit' [ 27.918547][ T36] audit: type=1400 audit(1757112893.120:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.941813][ T36] audit: type=1400 audit(1757112893.120:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.966805][ T36] audit: type=1400 audit(1757112893.120:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.969648][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.998783][ T36] audit: type=1400 audit(1757112893.200:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.024635][ T36] audit: type=1400 audit(1757112893.200:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.029571][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.050459][ T36] audit: type=1400 audit(1757112893.230:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.084620][ T36] audit: type=1400 audit(1757112893.230:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.265919][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.273008][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.280215][ T288] bridge_slave_0: entered allmulticast mode [ 29.286757][ T288] bridge_slave_0: entered promiscuous mode [ 29.293926][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.301075][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.308210][ T288] bridge_slave_1: entered allmulticast mode [ 29.314439][ T288] bridge_slave_1: entered promiscuous mode [ 29.425635][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.432721][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.439848][ T293] bridge_slave_0: entered allmulticast mode [ 29.446246][ T293] bridge_slave_0: entered promiscuous mode [ 29.456141][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.463198][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.470392][ T293] bridge_slave_1: entered allmulticast mode [ 29.476922][ T293] bridge_slave_1: entered promiscuous mode [ 29.534753][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.541943][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.549098][ T294] bridge_slave_0: entered allmulticast mode [ 29.555559][ T294] bridge_slave_0: entered promiscuous mode [ 29.569990][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.577176][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.584276][ T294] bridge_slave_1: entered allmulticast mode [ 29.590672][ T294] bridge_slave_1: entered promiscuous mode [ 29.607762][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.614840][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.622059][ T291] bridge_slave_0: entered allmulticast mode [ 29.628402][ T291] bridge_slave_0: entered promiscuous mode [ 29.638292][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.645396][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.652575][ T291] bridge_slave_1: entered allmulticast mode [ 29.659514][ T291] bridge_slave_1: entered promiscuous mode [ 29.695687][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.702864][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.710222][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.717288][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.827021][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.834100][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.841600][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.848654][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.876751][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.883822][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.891250][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.898347][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.907292][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.914822][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.922240][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.929576][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.937454][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.944722][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.960071][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.967254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.975263][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.982320][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.030519][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.037612][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.046162][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.053419][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.089032][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.096174][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.104224][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.111310][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.125652][ T288] veth0_vlan: entered promiscuous mode [ 30.135800][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.142872][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.156892][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.164230][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.174668][ T293] veth0_vlan: entered promiscuous mode [ 30.194111][ T288] veth1_macvtap: entered promiscuous mode [ 30.221764][ T293] veth1_macvtap: entered promiscuous mode [ 30.249131][ T291] veth0_vlan: entered promiscuous mode [ 30.259549][ T294] veth0_vlan: entered promiscuous mode [ 30.282047][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.288412][ T291] veth1_macvtap: entered promiscuous mode [ 30.303734][ T294] veth1_macvtap: entered promiscuous mode [ 30.359048][ T337] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.406520][ T341] Zero length message leads to an empty skb [ 30.438177][ T337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.469335][ T343] rust_binder: Write failure EFAULT in pid:2 [ 30.521980][ T351] rust_binder: Error while translating object. [ 30.522020][ T353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 30.528239][ T351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.541357][ T351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 30.570348][ T358] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 30.591920][ T358] rust_binder: Write failure EINVAL in pid:9 [ 30.955060][ T49] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.984775][ T373] rust_binder: Write failure EFAULT in pid:10 [ 31.129259][ T49] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 31.160696][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.169366][ T49] usb 1-1: Product: syz [ 31.173733][ T49] usb 1-1: Manufacturer: syz [ 31.178736][ T49] usb 1-1: SerialNumber: syz [ 31.365127][ T329] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 31.516084][ T329] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 31.528230][ T329] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 31.544492][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 31.551415][ T329] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 31.560808][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.570044][ T329] usb 3-1: config 0 descriptor?? [ 31.575543][ T381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.616284][ T385] 9pnet_fd: Insufficient options for proto=fd [ 31.650324][ T387] random: crng reseeded on system resumption [ 31.826471][ T329] usb 3-1: string descriptor 0 read error: -71 [ 31.837542][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 31.843594][ T329] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 31.853103][ T329] usb 3-1: USB disconnect, device number 2 [ 31.955250][ T331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.094996][ T331] usb 2-1: device descriptor read/64, error -71 [ 32.335001][ T331] usb 2-1: device descriptor read/64, error -71 [ 32.360093][ T392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 32.360966][ T394] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.405911][ T399] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.574955][ T331] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 32.644986][ T359] Bluetooth: hci0: command 0x1003 tx timeout [ 32.645147][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 32.704950][ T331] usb 2-1: device descriptor read/64, error -71 [ 32.924941][ T329] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 32.954377][ T331] usb 2-1: device descriptor read/64, error -71 [ 33.065135][ T331] usb usb2-port1: attempt power cycle [ 33.076360][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 33.087613][ T329] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 33.097087][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.106853][ T329] usb 4-1: config 0 descriptor?? [ 33.112303][ T401] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.404961][ T331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.426183][ T331] usb 2-1: device descriptor read/8, error -71 [ 33.523956][ T329] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 33.531991][ T329] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 33.539784][ T329] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 33.547725][ T329] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 33.555511][ T329] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 33.565571][ T329] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 33.578962][ T331] usb 2-1: device descriptor read/8, error -71 [ 33.624808][ T329] usb 1-1: USB disconnect, device number 2 [ 33.668910][ T407] tipc: Started in network mode [ 33.673858][ T407] tipc: Node identity 0e50ab44d376, cluster identity 4711 [ 33.681369][ T407] tipc: Enabled bearer , priority 0 [ 33.688761][ T408] tipc: Enabling of bearer rejected, already enabled [ 33.713136][ T408] syzkaller0: entered promiscuous mode [ 33.718713][ T408] syzkaller0: entered allmulticast mode [ 33.724770][ T408] tipc: Resetting bearer [ 33.731625][ T36] kauditd_printk_skb: 102 callbacks suppressed [ 33.731644][ T36] audit: type=1400 audit(1757112898.930:176): avc: denied { append } for pid=400 comm="syz.3.23" name="hidraw0" dev="devtmpfs" ino=443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.744739][ T9] usb 4-1: USB disconnect, device number 2 [ 33.767281][ T408] tipc: Resetting bearer [ 33.780332][ T408] tipc: Disabling bearer [ 33.825049][ T331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 33.848689][ T331] usb 2-1: device descriptor read/8, error -71 [ 33.970138][ T416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.970172][ T416] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.971027][ T36] audit: type=1400 audit(1757112899.170:177): avc: denied { read write } for pid=414 comm="syz.2.28" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 34.008925][ T36] audit: type=1400 audit(1757112899.170:178): avc: denied { open } for pid=414 comm="syz.2.28" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 34.033793][ T36] audit: type=1400 audit(1757112899.210:179): avc: denied { read write } for pid=419 comm="syz.2.29" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.057985][ T36] audit: type=1400 audit(1757112899.210:180): avc: denied { open } for pid=419 comm="syz.2.29" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.058001][ T331] usb 2-1: device descriptor read/8, error -71 [ 34.061767][ T420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 34.081452][ T36] audit: type=1400 audit(1757112899.210:181): avc: denied { create } for pid=419 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 34.087560][ T420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:39 [ 34.098250][ T36] audit: type=1400 audit(1757112899.260:182): avc: denied { transfer } for pid=419 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 34.118453][ T420] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.125908][ T422] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.145446][ T420] rust_binder: Read failure Err(EFAULT) in pid:39 [ 34.153075][ T422] rust_binder: Read failure Err(EFAULT) in pid:39 [ 34.165355][ T331] usb usb2-port1: unable to enumerate USB device [ 34.238662][ T36] audit: type=1400 audit(1757112899.440:183): avc: denied { mounton } for pid=423 comm="syz.2.30" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 34.238703][ T424] /dev/nullb0: Can't lookup blockdev [ 34.283773][ T36] audit: type=1400 audit(1757112899.480:184): avc: denied { create } for pid=425 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.544962][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.674963][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.726665][ T36] audit: type=1400 audit(1757112899.930:185): avc: denied { read } for pid=436 comm="syz.1.34" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.726693][ T435] overlayfs: failed to resolve './file0': -2 [ 34.930145][ T455] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 34.938102][ T456] netlink: 'syz.1.39': attribute type 2 has an invalid length. [ 34.944954][ T9] usb 4-1: device descriptor read/64, error -71 [ 34.946195][ T456] 9pnet: Could not find request transport: ffdno= [ 35.140498][ T473] rust_binder: 39: no such ref 0 [ 35.146550][ T473] rust_binder: 39: no such ref 2 [ 35.185043][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 35.304691][ T484] rust_binder: validate_parent_fixup: fixup_min_offset=64, parent_offset=37 [ 35.304718][ T484] rust_binder: Error while translating object. [ 35.313721][ T484] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.320759][ T484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 35.335015][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.394983][ T31] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 35.546772][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.557144][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 15 [ 35.566353][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 is Bulk; changing to Interrupt [ 35.576516][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 35.586499][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.598568][ T9] usb 4-1: device descriptor read/64, error -71 [ 35.601706][ T31] usb 2-1: string descriptor 0 read error: -22 [ 35.612958][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 35.622232][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.641094][ T31] usb 2-1: 0:2 : does not exist [ 35.715143][ T9] usb usb4-port1: attempt power cycle [ 35.865026][ T329] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.014971][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 36.021897][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.030617][ T329] usb 3-1: config 9 has an invalid interface number: 63 but max is 1 [ 36.038883][ T329] usb 3-1: config 9 has an invalid interface number: 159 but max is 1 [ 36.047149][ T329] usb 3-1: config 9 has no interface number 0 [ 36.053282][ T329] usb 3-1: config 9 has no interface number 1 [ 36.059574][ T329] usb 3-1: config 9 interface 63 has no altsetting 0 [ 36.066419][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 36.075590][ T329] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 36.084771][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.093006][ T329] usb 3-1: Product: syz [ 36.097998][ T329] usb 3-1: Manufacturer: syz [ 36.102707][ T329] usb 3-1: SerialNumber: syz [ 36.107997][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.236541][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.436678][ T508] netlink: 104 bytes leftover after parsing attributes in process `syz.0.55'. [ 36.446549][ T508] bridge0: port 3(veth0_to_bridge) entered blocking state [ 36.453709][ T508] bridge0: port 3(veth0_to_bridge) entered disabled state [ 36.461014][ T508] veth0_to_bridge: entered allmulticast mode [ 36.467532][ T508] veth0_to_bridge: entered promiscuous mode [ 36.473589][ T508] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 36.486000][ T508] bridge0: port 3(veth0_to_bridge) entered blocking state [ 36.493272][ T508] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 36.495037][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.504429][ T508] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.516275][ T508] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.542006][ T510] cgroup: noprefix used incorrectly [ 36.546014][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.594199][ T329] usb 3-1: USB disconnect, device number 3 [ 36.623976][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.63/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 36.676378][ T9] usb 4-1: device descriptor read/8, error -71 [ 36.785133][ T9] usb usb4-port1: unable to enumerate USB device [ 36.999347][ T513] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 37.006590][ T513] rust_binder: Write failure EINVAL in pid:67 [ 37.624581][ T537] netlink: 'syz.3.65': attribute type 4 has an invalid length. [ 37.644483][ T537] netlink: 'syz.3.65': attribute type 6 has an invalid length. [ 37.652410][ T537] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.65'. [ 37.673538][ T533] kvm: apic: phys broadcast and lowest prio [ 37.815833][ T544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 37.823310][ T65] rust_binder: 543: removing orphan mapping 0:96 [ 37.854963][ T548] binder: Bad value for 'max' [ 37.880291][ T550] random: crng reseeded on system resumption [ 37.929143][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 38.038859][ T552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2334 sclass=netlink_route_socket pid=552 comm=syz.2.70 [ 38.094318][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 38.101412][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.113116][ T31] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 38.122367][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.130580][ T31] usb 4-1: Product: syz [ 38.134775][ T31] usb 4-1: Manufacturer: syz [ 38.139648][ T31] usb 4-1: SerialNumber: syz [ 38.145071][ T31] usb 4-1: config 0 descriptor?? [ 38.155323][ T31] usb 4-1: bad CDC descriptors [ 38.160654][ T31] usb 4-1: unsupported MDLM descriptors [ 38.164604][ T9] usb 2-1: USB disconnect, device number 6 [ 38.191724][ T560] 9pnet_fd: Insufficient options for proto=fd [ 38.276538][ T568] rust_binder: Error while translating object. [ 38.276591][ T568] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 38.283072][ T568] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51 [ 38.369521][ T65] usb 4-1: USB disconnect, device number 7 [ 38.380707][ T578] syzkaller0: entered promiscuous mode [ 38.390855][ T578] syzkaller0: entered allmulticast mode [ 38.450129][ T582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.450157][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 38.459797][ T582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:65 [ 38.469479][ T583] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.520701][ T597] fuse: Bad value for 'user_id' [ 38.532565][ T597] fuse: Bad value for 'user_id' [ 38.540513][ T597] fuse: Unknown parameter 'euid' [ 38.601772][ T604] netlink: 'syz.1.85': attribute type 4 has an invalid length. [ 38.779507][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 38.779527][ T36] audit: type=1400 audit(1757112903.949:216): avc: denied { map } for pid=614 comm="syz.0.88" path="pipe:[2753]" dev="pipefs" ino=2753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 38.827748][ T621] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.827787][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 38.878698][ T36] audit: type=1400 audit(1757112904.036:217): avc: denied { relabelfrom } for pid=624 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.899727][ T625] syzkaller0: entered promiscuous mode [ 38.913434][ T625] syzkaller0: entered allmulticast mode [ 38.933655][ T36] audit: type=1400 audit(1757112904.036:218): avc: denied { relabelto } for pid=624 comm="syz.1.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.973353][ T36] audit: type=1400 audit(1757112904.046:219): avc: denied { execute } for pid=624 comm="syz.1.92" path="/27/cpuacct.usage_sys" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.989221][ T632] rust_binder: Write failure EFAULT in pid:91 [ 39.034521][ T635] rust_binder: 91: no such ref 5 [ 39.047639][ T635] rust_binder: Write failure EINVAL in pid:91 [ 39.063666][ T36] audit: type=1400 audit(1757112904.211:220): avc: denied { setopt } for pid=637 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.108080][ T36] audit: type=1400 audit(1757112904.250:221): avc: denied { ioctl } for pid=637 comm="syz.2.97" path="socket:[5833]" dev="sockfs" ino=5833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.166470][ T36] audit: type=1400 audit(1757112904.259:222): avc: denied { getopt } for pid=637 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.209233][ T36] audit: type=1400 audit(1757112904.259:223): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 39.270195][ T329] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 39.331425][ T36] audit: type=1400 audit(1757112904.473:224): avc: denied { getopt } for pid=643 comm="syz.3.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.436186][ T329] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 39.455607][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.464807][ T329] usb 2-1: config 0 descriptor?? [ 39.486565][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 39.570298][ T36] audit: type=1400 audit(1757112904.716:225): avc: denied { getopt } for pid=659 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.590740][ T660] tmpfs: Invalid uid '0x00000000ffffffff' [ 39.600045][ T660] binder: Bad value for 'defcontext' [ 39.641764][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 39.648156][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 39.665847][ T665] fuse: Bad value for 'rootmode' [ 39.672069][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 39.685075][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.708439][ T9] usb 3-1: config 0 descriptor?? [ 39.720885][ T670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 39.720914][ T670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:86 [ 40.001413][ T481] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.096092][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.108048][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.119049][ T636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.128066][ T636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.145869][ T9] apple 0003:05AC:021C.0002: hidraw0: USB HID v0.00 Device [HID 05ac:021c] on usb-dummy_hcd.2-1/input0 [ 40.155654][ T481] usb 4-1: device descriptor read/64, error -71 [ 40.350335][ T646] rust_binder: Error in use_page_slow: ESRCH [ 40.350367][ T646] rust_binder: use_range failure ESRCH [ 40.361299][ T646] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 40.367074][ T646] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 40.381870][ T646] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:98 [ 40.400654][ T9] usb 3-1: USB disconnect, device number 4 [ 40.422963][ T481] usb 4-1: device descriptor read/64, error -71 [ 40.669902][ T481] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.767569][ T636] tipc: Started in network mode [ 40.772588][ T636] tipc: Node identity , cluster identity 4711 [ 40.778687][ T636] tipc: Failed to obtain node identity [ 40.784530][ T636] tipc: Enabling of bearer rejected, failed to enable media [ 40.795705][ T329] usb 2-1: Cannot set autoneg [ 40.800557][ T329] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 40.813121][ T329] usb 2-1: USB disconnect, device number 7 [ 40.813893][ T481] usb 4-1: device descriptor read/64, error -71 [ 40.916466][ T49] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.070505][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 41.075838][ T481] usb 4-1: device descriptor read/64, error -71 [ 41.083781][ T49] usb 1-1: config 0 has no interfaces? [ 41.090251][ T49] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.099937][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.108207][ T49] usb 1-1: SerialNumber: syz [ 41.113810][ T49] usb 1-1: config 0 descriptor?? [ 41.193843][ T481] usb usb4-port1: attempt power cycle [ 41.327607][ T49] usb 1-1: USB disconnect, device number 3 [ 41.347016][ T724] netlink: 48 bytes leftover after parsing attributes in process `syz.1.125'. [ 41.542681][ T481] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.564263][ T481] usb 4-1: device descriptor read/8, error -71 [ 41.696587][ T329] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.697752][ T481] usb 4-1: device descriptor read/8, error -71 [ 41.830024][ T329] usb 2-1: device descriptor read/64, error -71 [ 41.953152][ T481] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.974816][ T481] usb 4-1: device descriptor read/8, error -71 [ 42.076095][ T329] usb 2-1: device descriptor read/64, error -71 [ 42.088923][ T330] bridge_slave_1: left allmulticast mode [ 42.094814][ T330] bridge_slave_1: left promiscuous mode [ 42.100775][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.108686][ T330] bridge_slave_0: left allmulticast mode [ 42.114457][ T330] bridge_slave_0: left promiscuous mode [ 42.118133][ T481] usb 4-1: device descriptor read/8, error -71 [ 42.120299][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.240205][ T481] usb usb4-port1: unable to enumerate USB device [ 42.258640][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.265861][ T739] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.273729][ T739] bridge_slave_0: entered allmulticast mode [ 42.280234][ T739] bridge_slave_0: entered promiscuous mode [ 42.287452][ T330] veth1_macvtap: left promiscuous mode [ 42.293145][ T330] veth0_vlan: left promiscuous mode [ 42.332250][ T329] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 42.340016][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.347441][ T739] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.354619][ T739] bridge_slave_1: entered allmulticast mode [ 42.361120][ T739] bridge_slave_1: entered promiscuous mode [ 42.418461][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.425565][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.432895][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.439963][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.462047][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.469761][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.479436][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.486617][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.494432][ T329] usb 2-1: device descriptor read/64, error -71 [ 42.497485][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.507992][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.536423][ T739] veth0_vlan: entered promiscuous mode [ 42.548080][ T739] veth1_macvtap: entered promiscuous mode [ 42.620149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.632297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.644408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.656775][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.669028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.681119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.693165][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.705324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.717597][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 42.729715][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 43.233629][ T329] usb 2-1: device descriptor read/64, error -71 [ 43.254048][ T708] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.287812][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.297710][ T766] incfs: Options parsing error. -22 [ 43.303368][ T766] incfs: mount failed -22 [ 43.387071][ T708] usb 4-1: device descriptor read/64, error -71 [ 43.432715][ T329] usb usb2-port1: attempt power cycle [ 43.469302][ T769] 2N: renamed from vcan0 (while UP) [ 43.642894][ T708] usb 4-1: device descriptor read/64, error -71 [ 43.829607][ T329] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 43.898628][ T708] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 43.899370][ T329] usb 2-1: device descriptor read/8, error -71 [ 44.078733][ T708] usb 4-1: device descriptor read/64, error -71 [ 44.461715][ T329] usb 2-1: device descriptor read/8, error -71 [ 44.631162][ T708] usb 4-1: device descriptor read/64, error -71 [ 45.421436][ T359] Bluetooth: hci0: command 0x1003 tx timeout [ 45.427523][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.661863][ T708] usb usb4-port1: attempt power cycle [ 47.733509][ C0] net_ratelimit: 84912 callbacks suppressed [ 47.733533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.733624][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 47.739640][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.751772][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 47.763677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 47.776006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 47.787698][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.799892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 47.811755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 47.823868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 48.273402][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 48.273423][ T36] audit: type=1400 audit(1757112913.202:255): avc: denied { nlmsg_write } for pid=774 comm="syz.1.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 48.924911][ T36] audit: type=1400 audit(1757112913.202:256): avc: denied { mount } for pid=774 comm="syz.1.140" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 49.645025][ T36] audit: type=1400 audit(1757112913.930:257): avc: denied { mounton } for pid=774 comm="syz.1.140" path="/35/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 51.339146][ C1] sched: DL replenish lagged too much [ 52.818536][ C0] net_ratelimit: 107027 callbacks suppressed [ 52.818559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.818583][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 52.824728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.837124][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 52.848937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.861248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 52.873217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 52.885489][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 52.897329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 52.909887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 54.137150][ T36] audit: type=1400 audit(1757112919.010:258): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 57.882631][ C0] net_ratelimit: 108248 callbacks suppressed [ 57.882657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.882749][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 57.888915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.901034][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 57.913104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.925164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 57.937151][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 57.949682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 57.961464][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 57.974104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 62.931671][ C0] net_ratelimit: 107711 callbacks suppressed [ 62.931694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.931800][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 62.937917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.950028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 62.961914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 62.974137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 62.985938][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 62.998114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 63.009943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 63.022042][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 67.969859][ C0] net_ratelimit: 110452 callbacks suppressed [ 67.969881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 67.969903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 67.976048][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 67.988220][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 68.000098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.012183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 68.024163][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 68.036256][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 68.048015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 68.060329][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 73.000241][ C0] net_ratelimit: 109711 callbacks suppressed [ 73.000265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.000387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 73.006374][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.018554][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 73.030432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.042515][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 73.054391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 73.066578][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 73.078450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 73.090544][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 78.024957][ C0] net_ratelimit: 107492 callbacks suppressed [ 78.024980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.025041][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 78.031135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.043266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 78.055060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.067251][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 78.079199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 78.091283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 78.103070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.115326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 83.045596][ C0] net_ratelimit: 110408 callbacks suppressed [ 83.045619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.045696][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 83.051725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.064018][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 83.075794][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.087868][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 83.099646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 83.111831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 83.123631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 83.135704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 88.063296][ C0] net_ratelimit: 108114 callbacks suppressed [ 88.063318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.063417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 88.069436][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 88.081803][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 88.093635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.105785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 88.117580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.129661][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 88.141500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 88.153599][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 93.078898][ C0] net_ratelimit: 111828 callbacks suppressed [ 93.078920][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.078961][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 93.085010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.097285][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 93.109169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 93.121240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 93.133005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.145217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 93.157040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.169131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 98.092907][ C0] net_ratelimit: 113028 callbacks suppressed [ 98.092930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.093131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 98.099033][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.111269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 98.123073][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 98.135179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 98.146944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.159163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 98.170941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 98.183045][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.105819][ C0] net_ratelimit: 112789 callbacks suppressed [ 103.105841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.105848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.106064][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.111977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.124081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.136026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.148174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.159987][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.172429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 103.184012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.117906][ C0] net_ratelimit: 104598 callbacks suppressed [ 108.117929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.118001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 108.124029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.136247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 108.148092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.160158][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 108.171968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 108.184176][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 108.197996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 108.208113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 113.129442][ C0] net_ratelimit: 106740 callbacks suppressed [ 113.129465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.129638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 113.135558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.147751][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 113.159609][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.171640][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 113.183456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 113.195612][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 113.207469][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 113.219638][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.140526][ C0] net_ratelimit: 107532 callbacks suppressed [ 118.140549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.140550][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.140762][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.146677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 118.160789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.170608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.182781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.194506][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 118.206659][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:71:4b:2d:bf:fe, vlan:0) [ 118.218388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 120.252484][ T330] veth0_to_bridge: left allmulticast mode [ 120.521471][ T330] veth0_to_bridge: left promiscuous mode [ 120.591937][ T330] bridge0: port 3(veth0_to_bridge) entered disabled state [ 120.601139][ T330] bridge_slave_1: left allmulticast mode [ 120.606827][ T330] bridge_slave_1: left promiscuous mode [ 120.612507][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.619923][ T330] bridge_slave_0: left allmulticast mode [ 120.625682][ T330] bridge_slave_0: left promiscuous mode [ 120.631366][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.733004][ T330] tipc: Left network mode [ 120.739416][ T330] veth1_macvtap: left promiscuous mode [ 120.745014][ T330] veth0_vlan: left promiscuous mode [ 120.879513][ T802] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.886740][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.893961][ T802] bridge_slave_0: entered allmulticast mode [ 120.900244][ T802] bridge_slave_0: entered promiscuous mode [ 120.906659][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.913818][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.920918][ T805] bridge_slave_0: entered allmulticast mode [ 120.927631][ T805] bridge_slave_0: entered promiscuous mode [ 120.938866][ T802] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.946022][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.953194][ T802] bridge_slave_1: entered allmulticast mode [ 120.959505][ T802] bridge_slave_1: entered promiscuous mode [ 120.968706][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.975811][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.982996][ T805] bridge_slave_1: entered allmulticast mode [ 120.989281][ T805] bridge_slave_1: entered promiscuous mode [ 121.012903][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.019986][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.027400][ T803] bridge_slave_0: entered allmulticast mode [ 121.033791][ T803] bridge_slave_0: entered promiscuous mode [ 121.051956][ T803] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.059030][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.066182][ T803] bridge_slave_1: entered allmulticast mode [ 121.072668][ T803] bridge_slave_1: entered promiscuous mode [ 121.091379][ T804] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.098479][ T804] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.105636][ T804] bridge_slave_0: entered allmulticast mode [ 121.112117][ T804] bridge_slave_0: entered promiscuous mode [ 121.128634][ T804] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.135738][ T804] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.142934][ T804] bridge_slave_1: entered allmulticast mode [ 121.149200][ T804] bridge_slave_1: entered promiscuous mode [ 121.186891][ T330] bridge_slave_1: left allmulticast mode [ 121.192611][ T330] bridge_slave_1: left promiscuous mode [ 121.198288][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.206033][ T330] bridge_slave_0: left allmulticast mode [ 121.211878][ T330] bridge_slave_0: left promiscuous mode [ 121.217558][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.225441][ T330] bridge_slave_1: left allmulticast mode [ 121.231141][ T330] bridge_slave_1: left promiscuous mode [ 121.236746][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.244425][ T330] bridge_slave_0: left allmulticast mode [ 121.250164][ T330] bridge_slave_0: left promiscuous mode [ 121.255905][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.263908][ T330] bridge_slave_1: left allmulticast mode [ 121.269569][ T330] bridge_slave_1: left promiscuous mode [ 121.275221][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.283638][ T330] bridge_slave_0: left allmulticast mode [ 121.289380][ T330] bridge_slave_0: left promiscuous mode [ 121.295033][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.586674][ T330] veth1_macvtap: left promiscuous mode [ 121.592258][ T330] veth0_vlan: left promiscuous mode [ 121.597781][ T330] veth1_macvtap: left promiscuous mode [ 121.603352][ T330] veth0_vlan: left promiscuous mode [ 121.608935][ T330] veth1_macvtap: left promiscuous mode [ 121.614550][ T330] veth0_vlan: left promiscuous mode [ 121.875379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.882516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.892720][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.899781][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.922258][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.929347][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.937347][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.944410][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.952813][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.959870][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.967913][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.975018][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.995648][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.002765][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.025309][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.032541][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.060413][ T803] veth0_vlan: entered promiscuous mode [ 122.080196][ T802] veth0_vlan: entered promiscuous mode [ 122.089103][ T805] veth0_vlan: entered promiscuous mode [ 122.111601][ T803] veth1_macvtap: entered promiscuous mode [ 122.124857][ T804] veth0_vlan: entered promiscuous mode [ 122.133185][ T805] veth1_macvtap: entered promiscuous mode [ 122.148093][ T802] veth1_macvtap: entered promiscuous mode [ 122.173269][ T804] veth1_macvtap: entered promiscuous mode [ 122.229549][ T36] audit: type=1400 audit(1757112986.913:259): avc: denied { setopt } for pid=845 comm="syz.6.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 122.294257][ T36] audit: type=1400 audit(1757112986.973:260): avc: denied { bind } for pid=850 comm="syz.8.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.329899][ T861] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.344445][ T36] audit: type=1400 audit(1757112986.973:261): avc: denied { listen } for pid=850 comm="syz.8.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 122.369402][ T36] audit: type=1400 audit(1757112986.983:262): avc: denied { ioctl } for pid=850 comm="syz.8.150" path="socket:[9544]" dev="sockfs" ino=9544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.395388][ T36] audit: type=1400 audit(1757112986.983:263): avc: denied { write } for pid=855 comm="syz.5.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.419076][ T36] audit: type=1400 audit(1757112987.113:264): avc: denied { write } for pid=866 comm="syz.5.155" name="ip6_tables_matches" dev="proc" ino=4026533124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 122.520362][ T404] rust_binder: 851: removing orphan mapping 0:4232 [ 122.546953][ T888] rust_binder: 7: no such ref 0 [ 122.552382][ T888] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 122.559640][ T888] rust_binder: 7: no such ref 0 [ 122.631041][ T894] netlink: 84 bytes leftover after parsing attributes in process `syz.7.161'. [ 122.641173][ T894] netlink: 72 bytes leftover after parsing attributes in process `syz.7.161'. [ 122.732180][ T36] audit: type=1400 audit(1757112987.423:265): avc: denied { setattr } for pid=897 comm="syz.6.162" name="timer" dev="devtmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 122.732704][ T898] rust_binder: 10: no such ref 4294967295 [ 122.764581][ T898] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 122.773442][ T898] rust_binder: Write failure EINVAL in pid:10 [ 122.904004][ T36] audit: type=1400 audit(1757112987.593:266): avc: denied { write } for pid=907 comm="syz.6.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.957159][ T36] audit: type=1400 audit(1757112987.643:267): avc: denied { create } for pid=913 comm="syz.8.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.967121][ T914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 122.979513][ T914] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.083679][ T925] binder: Bad value for 'defcontext' [ 123.405235][ T36] audit: type=1400 audit(1757112988.093:268): avc: denied { read } for pid=926 comm="syz.5.171" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 123.462788][ T933] syz.7.173 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.649461][ T952] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.750952][ T960] ======================================================= [ 123.750952][ T960] WARNING: The mand mount option has been deprecated and [ 123.750952][ T960] and is ignored by this kernel. Remove the mand [ 123.750952][ T960] option from the mount to silence this warning. [ 123.750952][ T960] ======================================================= [ 123.861500][ T481] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 123.993006][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 123.993160][ T966] rust_binder: 27: no such ref 1 [ 124.007358][ T966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:27 [ 124.011474][ T481] usb 8-1: Using ep0 maxpacket: 32 [ 124.026621][ T970] rust_binder: Error while translating object. [ 124.026670][ T970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 124.029003][ T971] rust_binder: Error while translating object. [ 124.033018][ T970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:31 [ 124.043433][ T971] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 124.057593][ T481] usb 8-1: too many configurations: 143, using maximum allowed: 8 [ 124.057615][ T971] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:31 [ 124.066984][ T708] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 124.099102][ T481] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 124.106891][ T481] usb 8-1: can't read configurations, error -61 [ 124.113588][ T843] Bluetooth: hci0: Frame reassembly failed (-84) [ 124.242485][ T481] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 124.263917][ T708] usb 9-1: config 127 has an invalid interface number: 32 but max is 0 [ 124.275158][ T708] usb 9-1: config 127 has no interface number 0 [ 124.281573][ T708] usb 9-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 124.290968][ T708] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.303668][ T708] ums-freecom 9-1:127.32: USB Mass Storage device detected [ 124.401573][ T481] usb 8-1: Using ep0 maxpacket: 32 [ 124.407222][ T481] usb 8-1: too many configurations: 143, using maximum allowed: 8 [ 124.416317][ T481] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 124.424408][ T481] usb 8-1: can't read configurations, error -61 [ 124.424775][ T987] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 124.430832][ T481] usb usb8-port1: attempt power cycle [ 124.505787][ T964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.515118][ T964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.523732][ T708] usb 9-1: USB disconnect, device number 2 [ 124.532676][ T989] netlink: 68 bytes leftover after parsing attributes in process `syz.5.194'. [ 124.555273][ T989] tipc: Started in network mode [ 124.560172][ T989] tipc: Node identity 125e534ab96f, cluster identity 4711 [ 124.567461][ T989] tipc: Enabled bearer , priority 0 [ 124.575144][ T989] tipc: Resetting bearer [ 124.589344][ T989] tipc: Disabling bearer [ 124.781634][ T481] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 124.802022][ T481] usb 8-1: Using ep0 maxpacket: 32 [ 124.807591][ T481] usb 8-1: too many configurations: 143, using maximum allowed: 8 [ 124.816666][ T481] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 124.824333][ T481] usb 8-1: can't read configurations, error -61 [ 124.951608][ T481] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 124.971996][ T481] usb 8-1: Using ep0 maxpacket: 32 [ 124.977577][ T481] usb 8-1: too many configurations: 143, using maximum allowed: 8 [ 124.986585][ T481] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 124.994212][ T481] usb 8-1: can't read configurations, error -61 [ 125.000665][ T481] usb usb8-port1: unable to enumerate USB device [ 125.281645][ T404] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 125.431688][ T404] usb 9-1: Using ep0 maxpacket: 8 [ 125.438504][ T404] usb 9-1: unable to get BOS descriptor or descriptor too short [ 125.447075][ T404] usb 9-1: config 0 has an invalid interface number: 88 but max is 0 [ 125.455245][ T404] usb 9-1: config 0 has no interface number 0 [ 125.461378][ T404] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 125.472394][ T404] usb 9-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 125.482265][ T404] usb 9-1: config 0 interface 88 has no altsetting 0 [ 125.490402][ T404] usb 9-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 125.499509][ T404] usb 9-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 125.507619][ T404] usb 9-1: Product: syz [ 125.511813][ T404] usb 9-1: Manufacturer: syz [ 125.516419][ T404] usb 9-1: SerialNumber: syz [ 125.521892][ T404] usb 9-1: config 0 descriptor?? [ 126.191799][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.192177][ T359] Bluetooth: hci0: command 0x1003 tx timeout [ 126.477996][ T1011] wireguard: wg2: Could not create IPv4 socket [ 126.484467][ T1012] wireguard: wg2: Could not create IPv4 socket [ 127.523543][ T1028] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 127.532803][ T1028] rust_binder: Write failure EINVAL in pid:57 [ 127.570962][ T1032] netlink: 'syz.5.208': attribute type 21 has an invalid length. [ 127.585075][ T1032] netlink: 388 bytes leftover after parsing attributes in process `syz.5.208'. [ 127.602629][ T1033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.611304][ T1033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.832018][ T708] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 127.981999][ T708] usb 8-1: Using ep0 maxpacket: 8 [ 127.989138][ T708] usb 8-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 127.999494][ T708] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.009927][ T708] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 128.019041][ T708] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.027082][ T708] usb 8-1: Product: syz [ 128.031262][ T708] usb 8-1: Manufacturer:  [ 128.036041][ T708] usb 8-1: SerialNumber: syz [ 128.056151][ T404] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.88/input/input6 [ 128.067592][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 128.067610][ T36] audit: type=1400 audit(1757112992.752:280): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.098609][ T404] usb 9-1: USB disconnect, device number 3 [ 128.107419][ T36] audit: type=1400 audit(1757112992.752:281): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=470 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.245556][ T708] usb 8-1: 0:2 : does not exist [ 128.259703][ T708] usb 8-1: USB disconnect, device number 6 [ 128.268687][ T848] udevd[848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 128.422023][ T404] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 128.534111][ T1049] rust_binder: Error while translating object. [ 128.534172][ T1049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 128.540534][ T1049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 128.571965][ T404] usb 9-1: Using ep0 maxpacket: 32 [ 128.587510][ T404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.598528][ T404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.608397][ T404] usb 9-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 128.617548][ T404] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.626850][ T404] usb 9-1: config 0 descriptor?? [ 128.707043][ T1053] __vm_enough_memory: pid: 1053, comm: syz.5.214, bytes: 18014402804453376 not enough memory for the allocation [ 128.825181][ T36] audit: type=1400 audit(1757112993.512:282): avc: denied { accept } for pid=1059 comm="syz.7.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.826670][ T1062] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 128.851599][ T1062] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 128.868062][ T1062] rust_binder: Write failure EINVAL in pid:78 [ 128.910689][ T1070] tipc: Enabled bearer , priority 0 [ 128.937907][ T1070] syzkaller0: entered promiscuous mode [ 128.943467][ T1070] syzkaller0: entered allmulticast mode [ 128.949291][ T1070] tipc: Resetting bearer [ 129.005072][ T1070] tipc: Resetting bearer [ 129.022909][ T1070] tipc: Disabling bearer [ 129.084025][ T404] hid (null): global environment stack underflow [ 129.088070][ T1073] binder: Unknown parameter '00000000000000000003' [ 129.099208][ T404] magicmouse 0003:05AC:0265.0003: collection stack underflow [ 129.112465][ T404] magicmouse 0003:05AC:0265.0003: item 0 1 0 12 parsing failed [ 129.120319][ T404] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed [ 129.128082][ T404] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22 [ 129.161372][ T1077] capability: warning: `syz.6.223' uses 32-bit capabilities (legacy support in use) [ 129.227006][ T1089] fuse: Bad value for 'fd' [ 129.232363][ T1089] incfs: Error accessing: ./file0. [ 129.237662][ T1089] incfs: mount failed -20 [ 129.242442][ T36] audit: type=1400 audit(1757112993.932:283): avc: denied { remount } for pid=1087 comm="syz.6.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 129.289141][ T36] audit: type=1400 audit(1757112993.972:284): avc: denied { mount } for pid=1094 comm="syz.6.230" name="/" dev="pstore" ino=2497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 129.289419][ T1095] 9pnet_fd: Insufficient options for proto=fd [ 129.316864][ T481] usb 9-1: USB disconnect, device number 4 [ 129.339266][ T1097] netlink: 'syz.6.231': attribute type 4 has an invalid length. [ 129.369035][ T1099] netlink: 'syz.6.232': attribute type 16 has an invalid length. [ 129.378197][ T708] rust_binder: 1100: removing orphan mapping 0:8 [ 129.401568][ T36] audit: type=1400 audit(1757112994.082:285): avc: denied { getopt } for pid=1106 comm="syz.5.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.501005][ T1111] netlink: 32 bytes leftover after parsing attributes in process `syz.5.237'. [ 129.510529][ T36] audit: type=1400 audit(1757112994.192:286): avc: denied { watch watch_reads } for pid=1110 comm="syz.5.237" path="/36" dev="tmpfs" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.863247][ T36] audit: type=1400 audit(1757112994.542:287): avc: denied { bind } for pid=1136 comm="syz.8.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 129.907950][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.246'. [ 129.917237][ T1146] /dev/rnullb0: Can't open blockdev [ 130.012272][ T843] bridge_slave_1: left allmulticast mode [ 130.018337][ T843] bridge_slave_1: left promiscuous mode [ 130.024136][ T843] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.032027][ T843] bridge_slave_0: left allmulticast mode [ 130.037981][ T843] bridge_slave_0: left promiscuous mode [ 130.043681][ T843] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.155322][ T843] veth1_macvtap: left promiscuous mode [ 130.160941][ T843] veth0_vlan: left promiscuous mode [ 130.263217][ T1154] netlink: 84 bytes leftover after parsing attributes in process `syz.6.252'. [ 130.367208][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.374377][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.381521][ T1152] bridge_slave_0: entered allmulticast mode [ 130.389915][ T1152] bridge_slave_0: entered promiscuous mode [ 130.398974][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.406309][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.413698][ T1152] bridge_slave_1: entered allmulticast mode [ 130.420307][ T1152] bridge_slave_1: entered promiscuous mode [ 130.579109][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.586260][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.593600][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.600674][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.606904][ T1176] SELinux: failed to load policy [ 130.608229][ T36] audit: type=1400 audit(1757112995.282:288): avc: denied { load_policy } for pid=1175 comm="syz.5.257" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 130.615654][ T1176] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 130.633006][ T1176] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 130.642638][ T1176] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 130.651880][ T1176] rust_binder: Read failure Err(EFAULT) in pid:128 [ 130.665711][ T843] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.694015][ T843] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.709401][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.716503][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.727048][ T843] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.734149][ T843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.768889][ T1152] veth0_vlan: entered promiscuous mode [ 130.777486][ T1181] rust_binder: 49: no such ref 3 [ 130.786392][ T1152] veth1_macvtap: entered promiscuous mode [ 130.792386][ T1181] rust_binder: 49: no such ref 0 [ 130.797408][ T1181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:49 [ 131.182308][ T404] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.342266][ T404] usb 6-1: Using ep0 maxpacket: 16 [ 131.348630][ T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.359869][ T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.370224][ T404] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 131.379596][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.391528][ T404] usb 6-1: config 0 descriptor?? [ 131.498297][ T1201] netlink: 56 bytes leftover after parsing attributes in process `syz.9.266'. [ 131.508032][ T36] audit: type=1400 audit(1757112996.192:289): avc: denied { setopt } for pid=1200 comm="syz.9.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.510577][ T1201] input: syz1 as /devices/virtual/input/input7 [ 131.746936][ T1203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 131.746971][ T1203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:57 [ 131.772092][ T1208] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 131.802121][ T404] magicmouse 0003:05AC:0324.0004: item fetching failed at offset 0/5 [ 131.811110][ T404] magicmouse 0003:05AC:0324.0004: magicmouse hid parse failed [ 131.819804][ T404] magicmouse 0003:05AC:0324.0004: probe with driver magicmouse failed with error -22 [ 131.853538][ T1212] rust_binder: Read failure Err(EAGAIN) in pid:66 [ 131.959779][ T1220] 9pnet: Could not find request transport: dd [ 131.989070][ T1223] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1223 comm=syz.6.273 [ 132.021540][ T1225] netlink: 36 bytes leftover after parsing attributes in process `syz.6.274'. [ 132.031372][ T1225] netlink: 'syz.6.274': attribute type 4 has an invalid length. [ 132.070716][ T1229] fuseblk: Bad value for 'source' [ 132.126588][ T708] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 132.150951][ T10] usb 6-1: USB disconnect, device number 2 [ 132.234546][ T1244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.281'. [ 132.282320][ T708] usb 8-1: Using ep0 maxpacket: 16 [ 132.288683][ T708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.300621][ T708] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.330715][ T708] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 132.340060][ T708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.353367][ T708] usb 8-1: config 0 descriptor?? [ 132.767997][ T708] magicmouse 0003:05AC:0324.0005: item fetching failed at offset 0/5 [ 132.785818][ T708] magicmouse 0003:05AC:0324.0005: magicmouse hid parse failed [ 132.802385][ T708] magicmouse 0003:05AC:0324.0005: probe with driver magicmouse failed with error -22 [ 132.981682][ T404] usb 8-1: USB disconnect, device number 7 [ 133.316809][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 133.316827][ T36] audit: type=1400 audit(1757112998.002:298): avc: denied { mount } for pid=1263 comm="syz.9.289" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.356332][ T36] audit: type=1400 audit(1757112998.042:299): avc: denied { mounton } for pid=1263 comm="syz.9.289" path="/4/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.379023][ T36] audit: type=1400 audit(1757112998.072:300): avc: denied { unmount } for pid=1152 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 133.405901][ T1267] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 133.415389][ T1267] rust_binder: Error while translating object. [ 133.415446][ T1267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 133.421654][ T1267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13 [ 133.530794][ T1273] rust_binder: Write failure EINVAL in pid:75 [ 133.597856][ T1276] binder: Unknown parameter 'defcontext01777777777777777777777' [ 133.855246][ T404] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 133.943224][ T36] audit: type=1400 audit(1757112998.632:301): avc: denied { write } for pid=1296 comm="syz.5.301" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 133.972712][ T36] audit: type=1400 audit(1757112998.632:302): avc: denied { open } for pid=1296 comm="syz.5.301" path="/55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 134.032445][ T404] usb 10-1: Using ep0 maxpacket: 32 [ 134.042744][ T404] usb 10-1: config 2 has no interfaces? [ 134.049797][ T404] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=6a.a7 [ 134.059990][ T404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.073611][ T404] usb 10-1: Product: syz [ 134.077998][ T404] usb 10-1: Manufacturer: syz [ 134.082795][ T36] audit: type=1400 audit(1757112998.762:303): avc: denied { mount } for pid=1302 comm="syz.5.302" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 134.105226][ T404] usb 10-1: SerialNumber: syz [ 134.126116][ T36] audit: type=1400 audit(1757112998.812:304): avc: denied { read append } for pid=1310 comm="syz.5.305" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.127119][ T1312] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 134.157300][ T36] audit: type=1400 audit(1757112998.812:305): avc: denied { open } for pid=1310 comm="syz.5.305" path="/57/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.190213][ T36] audit: type=1400 audit(1757112998.812:306): avc: denied { ioctl } for pid=1310 comm="syz.5.305" path="/57/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.224703][ T1315] KVM: debugfs: duplicate directory 1315-6 [ 134.317104][ T404] usb 10-1: USB disconnect, device number 2 [ 134.410362][ T1326] netlink: 'syz.7.310': attribute type 4 has an invalid length. [ 134.418195][ T1326] netlink: 17 bytes leftover after parsing attributes in process `syz.7.310'. [ 134.434033][ T1334] raw_sendmsg: syz.6.314 forgot to set AF_INET. Fix it! [ 134.435538][ T1336] overlayfs: conflicting options: userxattr,verity=require [ 134.645045][ T36] audit: type=1400 audit(1757112999.332:307): avc: denied { write } for pid=1354 comm="syz.5.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 134.664434][ T329] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 134.822993][ T329] usb 8-1: no configurations [ 134.829309][ T1370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206 [ 134.831099][ T329] usb 8-1: can't read configurations, error -22 [ 134.885752][ T1374] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.886224][ T1374] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 134.893184][ T1374] rust_binder: 208: no such ref 3 [ 134.906163][ T1374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208 [ 134.906587][ T1374] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 134.964931][ T1378] /dev/loop0: Can't lookup blockdev [ 134.982470][ T329] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 135.009931][ T1376] rust_binder: Error in use_page_slow: ESRCH [ 135.009959][ T1376] rust_binder: use_range failure ESRCH [ 135.016368][ T1376] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 135.021929][ T1376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 135.030815][ T1376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:22 [ 135.065385][ T1389] netlink: 16 bytes leftover after parsing attributes in process `syz.9.333'. [ 135.142890][ T329] usb 8-1: no configurations [ 135.147592][ T329] usb 8-1: can't read configurations, error -22 [ 135.157129][ T329] usb usb8-port1: attempt power cycle [ 135.162625][ T404] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 135.312514][ T404] usb 6-1: Using ep0 maxpacket: 16 [ 135.318858][ T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 135.330458][ T404] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.340439][ T404] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 135.349602][ T404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.358826][ T404] usb 6-1: config 0 descriptor?? [ 135.502514][ T329] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 135.523289][ T329] usb 8-1: no configurations [ 135.528087][ T329] usb 8-1: can't read configurations, error -22 [ 135.662556][ T329] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 135.683461][ T329] usb 8-1: no configurations [ 135.688266][ T329] usb 8-1: can't read configurations, error -22 [ 135.694827][ T329] usb usb8-port1: unable to enumerate USB device [ 135.766350][ T404] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 135.773419][ T404] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 135.780491][ T404] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 135.787521][ T404] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 135.796026][ T404] lenovo 0003:17EF:6009.0006: unknown main item tag 0x0 [ 135.803899][ T404] lenovo 0003:17EF:6009.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 135.894451][ T1410] incfs: Options parsing error. -22 [ 135.899803][ T1410] incfs: mount failed -22 [ 135.918715][ T1412] incfs: Error accessing: ./file0. [ 135.923927][ T1412] incfs: mount failed -20 [ 135.967597][ T404] usb 6-1: USB disconnect, device number 3 [ 136.433652][ T404] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 136.453240][ T1421] tipc: Enabling of bearer rejected, media not registered [ 136.471926][ T1425] 2N: renamed from vcan0 (while UP) [ 136.522002][ T1438] tmpfs: Unknown parameter 'noinode32' [ 136.528181][ T1438] loop2: detected capacity change from 0 to 7 [ 136.535987][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.545203][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.553247][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.562437][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.570346][ T1438] loop2: unable to read partition table [ 136.576733][ T1438] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 136.582711][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.599378][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.602866][ T404] usb 10-1: Using ep0 maxpacket: 32 [ 136.612788][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.621938][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.630241][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.639434][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.647501][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.648990][ T404] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 136.656679][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.665541][ T404] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 136.674180][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.682052][ T404] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 136.690879][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.700290][ T404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.708170][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.717942][ T404] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.726691][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.736845][ T404] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 136.744677][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 136.758046][ T404] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 136.766514][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 136.776702][ T404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.783562][ T1443] loop2: unable to read partition table [ 136.792861][ T404] usb 10-1: config 0 descriptor?? [ 136.819885][ T1449] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 136.820422][ T1449] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 136.827305][ T1449] rust_binder: 217: no such ref 3 [ 136.840649][ T1449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 136.841111][ T1449] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 137.023096][ T404] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 137.036900][ T404] usb 10-1: USB disconnect, device number 3 [ 137.043709][ T404] usblp0: removed [ 137.092659][ T329] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.242615][ T329] usb 6-1: Using ep0 maxpacket: 16 [ 137.248920][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 137.260125][ T329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.269917][ T329] usb 6-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 137.278987][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.287589][ T329] usb 6-1: config 0 descriptor?? [ 137.434785][ T1458] rust_binder: Write failure EFAULT in pid:86 [ 137.472643][ T708] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 137.512430][ T1476] overlayfs: missing 'workdir' [ 137.518609][ T1477] overlayfs: missing 'workdir' [ 137.632648][ T708] usb 10-1: Using ep0 maxpacket: 32 [ 137.639151][ T708] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 137.647935][ T708] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 137.656855][ T708] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 137.666220][ T708] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 137.676389][ T708] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 137.686478][ T708] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 137.693325][ T1488] capability: warning: `syz.6.368' uses deprecated v2 capabilities in a way that may be insecure [ 137.699944][ T708] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 137.714740][ T329] lenovo 0003:17EF:6009.0007: unknown main item tag 0x0 [ 137.725948][ T708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.734656][ T329] lenovo 0003:17EF:6009.0007: unknown main item tag 0x0 [ 137.742183][ T329] lenovo 0003:17EF:6009.0007: unknown main item tag 0x0 [ 137.742527][ T708] usb 10-1: config 0 descriptor?? [ 137.752989][ T329] lenovo 0003:17EF:6009.0007: unknown main item tag 0x0 [ 137.763116][ T329] lenovo 0003:17EF:6009.0007: unknown main item tag 0x0 [ 137.771391][ T329] lenovo 0003:17EF:6009.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.5-1/input0 [ 137.915701][ T65] usb 6-1: USB disconnect, device number 4 [ 138.163006][ T708] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.175562][ T708] usb 10-1: USB disconnect, device number 4 [ 138.182309][ T708] usblp0: removed [ 138.312496][ T1507] mmap: syz.7.373 (1507) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.324734][ T1507] rust_binder: 91: no such ref 0 [ 138.331115][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 138.331133][ T36] audit: type=1400 audit(1757113003.012:320): avc: denied { audit_control } for pid=1506 comm="syz.7.373" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 138.369858][ T1513] 9pnet_fd: Insufficient options for proto=fd [ 138.488206][ T36] audit: type=1400 audit(1757113003.172:321): avc: denied { write } for pid=1517 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.852807][ T329] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 138.920967][ T36] audit: type=1400 audit(1757113003.602:322): avc: denied { shutdown } for pid=1532 comm="syz.6.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.921917][ T1533] overlayfs: failed to clone upperpath [ 139.022713][ T708] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 139.023887][ T329] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 139.041827][ T329] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.048558][ T329] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 139.057651][ T329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.066776][ T329] usb 6-1: config 0 descriptor?? [ 139.072362][ T1522] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 139.158297][ T1548] rust_binder: Write failure EFAULT in pid:94 [ 139.172179][ T36] audit: type=1400 audit(1757113003.852:323): avc: denied { create } for pid=1550 comm="syz.7.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 139.198080][ T36] audit: type=1400 audit(1757113003.852:324): avc: denied { create } for pid=1550 comm="syz.7.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.203004][ T708] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.236401][ T708] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.246695][ T708] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.249502][ T1553] rust_binder: 99: no such ref 0 [ 139.257486][ T708] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.270054][ T708] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.278259][ T708] usb 10-1: Product: syz [ 139.282621][ T708] usb 10-1: Manufacturer: Ḑ騧ꝉ얞ᅉ찺羞찑瞩妌ṷ獒⃑䝸㤺ﳱ菀笼卌ӱ쫕⃍祶悹邜茲헚ࠂ퓶#頦燆힙ﶙᐡ꿄䔸짛敻鎉㴊崊♳⹇﨩⪬吢킫ꌘȲ㞂쾵樞ﶳ샽䗄Ȳࠌ䧼睩㦻蚸쎈雡ーᾇ컰嵒趣ળᮝ㈨森䵤ⶥ뢓뺟ʭ垎岑렧鍡턱ܺ덹癱䒽앞擲⸣쀹휈࠰㚞ẝ兮 [ 139.315420][ T708] usb 10-1: SerialNumber: syz [ 139.320405][ T36] audit: type=1400 audit(1757113004.002:325): avc: denied { write } for pid=1554 comm="syz.7.391" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.342758][ T329] lenovo 0003:17EF:60A4.0008: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0 [ 139.343502][ T36] audit: type=1400 audit(1757113004.002:326): avc: denied { remove_name } for pid=1554 comm="syz.7.391" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.381667][ T36] audit: type=1400 audit(1757113004.002:327): avc: denied { unlink } for pid=1554 comm="syz.7.391" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 139.516373][ T329] usb 6-1: USB disconnect, device number 5 [ 139.607366][ T1566] overlayfs: failed to clone upperpath [ 139.747741][ T708] usb 10-1: 0:2 : does not exist [ 139.755089][ T708] usb 10-1: USB disconnect, device number 5 [ 140.184579][ T1596] fuse: Unknown parameter '0x00000000000000e70x00000000000000030xffffffffffffffff000000000000000000000000000000000000000000300000000000000000000' [ 140.201098][ T1596] fuse: Unknown parameter '0x00000000000000e70x00000000000000030xffffffffffffffff000000000000000000000000000000000000000000300000000000000000000' [ 140.232746][ T329] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 140.298750][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.308287][ T1607] incfs: Options parsing error. -22 [ 140.313621][ T1607] incfs: mount failed -22 [ 140.382777][ T329] usb 8-1: Using ep0 maxpacket: 16 [ 140.389338][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 140.400617][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.410442][ T329] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 140.419724][ T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.430423][ T329] usb 8-1: config 0 descriptor?? [ 140.623924][ T36] audit: type=1400 audit(1757113005.312:328): avc: denied { create } for pid=1620 comm="syz.6.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 140.845688][ T329] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 140.852800][ T329] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 140.859812][ T329] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 140.866970][ T329] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 140.873969][ T329] lenovo 0003:17EF:6009.0009: unknown main item tag 0x0 [ 140.881773][ T329] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.7-1/input0 [ 141.047104][ T329] usb 8-1: USB disconnect, device number 12 [ 141.472836][ T329] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 141.609523][ T1652] rust_binder: Write failure EFAULT in pid:118 [ 141.624043][ T329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.641452][ T329] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.651746][ T329] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.664993][ T329] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.674301][ T329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.683432][ T329] usb 10-1: config 0 descriptor?? [ 141.937514][ T36] audit: type=1400 audit(1757113006.622:329): avc: denied { bind } for pid=1659 comm="syz.6.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 141.996551][ T1669] netlink: 596 bytes leftover after parsing attributes in process `syz.6.430'. [ 142.091449][ T329] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x2 [ 142.099017][ T329] plantronics 0003:047F:FFFF.000A: unknown global tag 0xd [ 142.106224][ T329] plantronics 0003:047F:FFFF.000A: item 0 1 1 13 parsing failed [ 142.114053][ T329] plantronics 0003:047F:FFFF.000A: parse failed [ 142.120356][ T329] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 142.352840][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 142.352860][ T359] Bluetooth: hci0: command 0x1003 tx timeout [ 143.243384][ T1704] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.442'. [ 143.253495][ T1704] rust_binder: Write failure EFAULT in pid:131 [ 143.325725][ T1715] 9pnet_fd: Insufficient options for proto=fd [ 143.384367][ T1719] rust_binder: 255: no such ref 3 [ 143.476409][ T1726] rust_binder: Error while translating object. [ 143.476451][ T1726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 143.482755][ T1726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:262 [ 143.517921][ T1728] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification cookie mismatch [ 143.522898][ T329] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 143.527252][ T1728] rust_binder: Write failure EINVAL in pid:264 [ 143.682893][ T329] usb 8-1: Using ep0 maxpacket: 16 [ 143.695398][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 143.706583][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.716518][ T329] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 143.725668][ T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.734856][ T329] usb 8-1: config 0 descriptor?? [ 144.142769][ T329] lenovo 0003:17EF:6009.000B: unknown main item tag 0x0 [ 144.151037][ T329] lenovo 0003:17EF:6009.000B: unknown main item tag 0x0 [ 144.158053][ T329] lenovo 0003:17EF:6009.000B: unknown main item tag 0x0 [ 144.165090][ T329] lenovo 0003:17EF:6009.000B: unknown main item tag 0x0 [ 144.172056][ T329] lenovo 0003:17EF:6009.000B: unknown main item tag 0x0 [ 144.179721][ T329] lenovo 0003:17EF:6009.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.7-1/input0 [ 144.244976][ T404] usb 10-1: USB disconnect, device number 6 [ 144.262036][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 144.262053][ T36] audit: type=1400 audit(1757113008.941:331): avc: denied { ioctl } for pid=1745 comm="syz.9.456" path="socket:[14905]" dev="sockfs" ino=14905 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.294063][ T36] audit: type=1400 audit(1757113008.951:332): avc: denied { connect } for pid=1745 comm="syz.9.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.314821][ T36] audit: type=1400 audit(1757113008.951:333): avc: denied { read } for pid=1745 comm="syz.9.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 144.347767][ T329] usb 8-1: USB disconnect, device number 13 [ 144.537937][ T1755] netlink: 3 bytes leftover after parsing attributes in process `syz.5.460'. [ 144.548000][ T1755] netlink: 3 bytes leftover after parsing attributes in process `syz.5.460'. [ 144.556888][ T1755] net_ratelimit: 52100 callbacks suppressed [ 144.556906][ T1755] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 144.580177][ T1755] rust_binder: Write failure EFAULT in pid:275 [ 144.664937][ T36] audit: type=1400 audit(1757113009.321:334): avc: denied { setopt } for pid=1768 comm="syz.6.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 144.690668][ T1759] SELinux: Context ϧ is not valid (left unmapped). [ 144.733325][ T36] audit: type=1400 audit(1757113009.421:335): avc: denied { associate } for pid=1779 comm="syz.6.470" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 144.757248][ T1772] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 144.773787][ T1782] overlayfs: failed to clone upperpath [ 144.845063][ T1788] netlink: 72 bytes leftover after parsing attributes in process `syz.6.474'. [ 144.980777][ T1803] mmap: syz.7.479 (1803): VmData 20688896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 145.052934][ T404] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 145.222953][ T404] usb 10-1: Using ep0 maxpacket: 32 [ 145.229492][ T404] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 145.238072][ T404] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 145.246952][ T404] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 145.256262][ T404] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.266115][ T404] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.275968][ T404] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 145.289210][ T404] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 145.298388][ T404] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.310987][ T404] usb 10-1: config 0 descriptor?? [ 145.316113][ T329] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 145.472941][ T329] usb 8-1: Using ep0 maxpacket: 16 [ 145.483997][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.495368][ T329] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.505463][ T329] usb 8-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 145.506078][ T36] audit: type=1400 audit(1757113010.191:336): avc: denied { read } for pid=1807 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.514897][ T329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.542396][ T404] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 145.553678][ T329] usb 8-1: config 0 descriptor?? [ 145.564809][ T404] usb 10-1: USB disconnect, device number 7 [ 145.571615][ T404] usblp0: removed [ 145.736642][ T1786] x_tables: unsorted underflow at hook 2 [ 145.963458][ T329] saitek 0003:06A3:0621.000C: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.7-1/input0 [ 145.983082][ T404] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 146.122976][ T404] usb 10-1: device descriptor read/64, error -71 [ 146.168082][ T329] usb 8-1: USB disconnect, device number 14 [ 146.239317][ T1824] cgroup: fork rejected by pids controller in /syz6 [ 146.326602][ T1959] rust_binder: Error while translating object. [ 146.326641][ T1959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 146.333104][ T1959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:283 [ 146.364676][ T404] usb 10-1: device descriptor read/64, error -71 [ 146.381216][ T1962] 2N: renamed from vcan0 (while UP) [ 146.453087][ T1964] netlink: 5 bytes leftover after parsing attributes in process `syz.6.491'. [ 146.469582][ T1964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.623028][ T404] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 146.643024][ T708] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 146.700550][ T1973] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 146.700578][ T1973] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:158 [ 146.724177][ T1976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.496'. [ 146.753033][ T404] usb 10-1: device descriptor read/64, error -71 [ 146.803073][ T708] usb 6-1: Using ep0 maxpacket: 16 [ 146.809533][ T708] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 146.820461][ T708] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.833002][ T708] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.842338][ T708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.850429][ T708] usb 6-1: Product: syz [ 146.854801][ T708] usb 6-1: Manufacturer: syz [ 146.859414][ T708] usb 6-1: SerialNumber: syz [ 147.003062][ T404] usb 10-1: device descriptor read/64, error -71 [ 147.067319][ T1996] incfs: Options parsing error. -22 [ 147.072620][ T1996] incfs: mount failed -22 [ 147.089551][ T36] audit: type=1326 audit(1757113011.771:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1997 comm="syz.6.505" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14f058ebe9 code=0x0 [ 147.113194][ T404] usb usb10-port1: attempt power cycle [ 147.163046][ T331] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 147.266712][ T708] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 147.313226][ T331] usb 8-1: Using ep0 maxpacket: 32 [ 147.319582][ T331] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.328010][ T331] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.336963][ T331] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.345979][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.355686][ T331] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.365473][ T331] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.378605][ T331] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.387694][ T331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.396550][ T331] usb 8-1: config 0 descriptor?? [ 147.453017][ T404] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 147.474090][ T404] usb 10-1: device descriptor read/8, error -71 [ 147.604290][ T331] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.615757][ T404] usb 10-1: device descriptor read/8, error -71 [ 147.623514][ T331] usb 8-1: USB disconnect, device number 15 [ 147.630370][ T331] usblp0: removed [ 147.853022][ T404] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 147.937635][ T2004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2004 comm=syz.6.507 [ 147.967177][ T2007] tipc: Enabling of bearer rejected, failed to enable media [ 148.020937][ T2015] overlayfs: failed to clone upperpath [ 148.039646][ T2017] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 148.050576][ T65] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 148.058563][ T2001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 148.058615][ T2001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73 [ 148.068832][ T708] usb 6-1: current rate 9306882 is different from the runtime rate 9338507 [ 148.213054][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 148.219586][ T65] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 148.228098][ T65] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 148.236861][ T65] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 148.245879][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.255589][ T65] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.265279][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 148.278332][ T65] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 148.287467][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.293042][ T404] usb 10-1: device not accepting address 11, error -71 [ 148.296639][ T65] usb 8-1: config 0 descriptor?? [ 148.307077][ T404] usb usb10-port1: unable to enumerate USB device [ 148.320665][ T708] usb 6-1: USB disconnect, device number 6 [ 148.509733][ T65] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 148.604717][ T36] audit: type=1400 audit(1757113013.291:338): avc: denied { create } for pid=2023 comm="syz.6.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 148.625546][ T36] audit: type=1400 audit(1757113013.291:339): avc: denied { write } for pid=2023 comm="syz.6.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 148.698538][ T2033] netlink: 'syz.6.517': attribute type 27 has an invalid length. [ 148.698595][ T36] audit: type=1400 audit(1757113013.381:340): avc: denied { write } for pid=2031 comm="syz.6.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.947323][ T2052] process 'syz.5.521' launched './file1' with NULL argv: empty string added [ 148.959459][ T2052] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 149.203086][ T404] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 149.354308][ T404] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 149.362484][ T404] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.373091][ T404] usb 6-1: config 0 has no interface number 0 [ 149.381028][ T404] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 149.390178][ T404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.398248][ T404] usb 6-1: Product: syz [ 149.402445][ T404] usb 6-1: Manufacturer: syz [ 149.407133][ T404] usb 6-1: SerialNumber: syz [ 149.412444][ T404] usb 6-1: config 0 descriptor?? [ 149.619143][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 149.619161][ T36] audit: type=1400 audit(1757113014.301:346): avc: denied { map } for pid=2051 comm="syz.5.521" path="socket:[16217]" dev="sockfs" ino=16217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.648858][ T36] audit: type=1400 audit(1757113014.301:347): avc: denied { read } for pid=2051 comm="syz.5.521" path="socket:[16217]" dev="sockfs" ino=16217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.682098][ T404] usb 6-1: USB disconnect, device number 7 [ 149.898951][ T36] audit: type=1400 audit(1757113014.581:348): avc: denied { remount } for pid=2057 comm="syz.6.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.939364][ T329] usb 8-1: USB disconnect, device number 16 [ 149.940707][ T2062] fuse: Bad value for 'group_id' [ 149.950866][ T2062] fuse: Bad value for 'group_id' [ 149.958548][ T2063] fuse: Bad value for 'group_id' [ 149.961466][ T329] usblp0: removed [ 149.966806][ T2065] 2N: renamed from vcan0 (while UP) [ 149.974354][ T2063] fuse: Bad value for 'group_id' [ 150.017086][ T2078] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=72 sclass=netlink_tcpdiag_socket pid=2078 comm=syz.6.530 [ 150.152047][ T2089] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 150.178161][ T2091] __vm_enough_memory: pid: 2091, comm: syz.7.535, bytes: 18014402804453376 not enough memory for the allocation [ 150.463159][ T329] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 150.553122][ T331] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 150.558570][ T36] audit: type=1400 audit(1757113015.241:349): avc: denied { mount } for pid=2107 comm="syz.6.540" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.582613][ T36] audit: type=1400 audit(1757113015.241:350): avc: denied { read } for pid=2107 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 150.624920][ T329] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.635414][ T329] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.644614][ T329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.652803][ T329] usb 8-1: Product: syz [ 150.657267][ T329] usb 8-1: Manufacturer: syz [ 150.661886][ T329] usb 8-1: SerialNumber: syz [ 150.705237][ T331] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 150.715637][ T331] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.728578][ T331] usb 6-1: config 1 interface 0 has no altsetting 0 [ 150.736944][ T331] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.746131][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.754197][ T331] usb 6-1: Product: syz [ 150.758385][ T331] usb 6-1: Manufacturer: syz [ 150.763010][ T331] usb 6-1: SerialNumber: syz [ 150.869895][ T2098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.878547][ T2098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.892708][ T329] usb 8-1: 0:2 : does not exist [ 150.899702][ T329] usb 8-1: USB disconnect, device number 17 [ 150.908351][ T848] udevd[848]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.976265][ T2113] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 150.983688][ T2113] rust_binder: Write failure EINVAL in pid:77 [ 150.984289][ T331] usb 6-1: bad CDC descriptors [ 150.998708][ T331] usb 6-1: USB disconnect, device number 8 [ 151.018660][ T36] audit: type=1400 audit(1757113015.701:351): avc: denied { append } for pid=2116 comm="syz.9.544" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.018983][ T2117] 9pnet_fd: Insufficient options for proto=fd [ 151.042932][ T36] audit: type=1400 audit(1757113015.701:352): avc: denied { ioctl } for pid=2116 comm="syz.9.544" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 151.078945][ T36] audit: type=1400 audit(1757113015.771:353): avc: denied { wake_alarm } for pid=2114 comm="syz.5.543" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.409330][ T2126] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 151.409355][ T2126] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 151.417984][ T2126] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:196 [ 151.677799][ T331] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 151.843124][ T331] usb 8-1: Using ep0 maxpacket: 16 [ 151.849596][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 151.860947][ T331] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.871134][ T331] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 151.880235][ T331] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.892525][ T331] usb 8-1: config 0 descriptor?? [ 151.961398][ T36] audit: type=1400 audit(1757113016.641:354): avc: denied { bpf } for pid=2147 comm="syz.5.556" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 151.992083][ T36] audit: type=1400 audit(1757113016.671:355): avc: denied { append } for pid=2150 comm="syz.9.557" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 152.012309][ T2151] 9pnet_fd: Insufficient options for proto=fd [ 152.042375][ T2155] rust_binder: Error in use_page_slow: ESRCH [ 152.042410][ T2155] rust_binder: use_range failure ESRCH [ 152.048536][ T2155] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 152.054119][ T2155] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 152.062301][ T2155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:91 [ 152.243118][ T49] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 152.302957][ T331] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 152.310153][ T331] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 152.317279][ T331] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 152.318650][ T2168] netlink: 44 bytes leftover after parsing attributes in process `syz.6.564'. [ 152.324390][ T331] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 152.333564][ T2168] netlink: 59 bytes leftover after parsing attributes in process `syz.6.564'. [ 152.340255][ T331] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 152.349389][ T2168] netlink: 59 bytes leftover after parsing attributes in process `syz.6.564'. [ 152.361411][ T331] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.7-1/input0 [ 152.444354][ T49] usb 6-1: config 0 has an invalid interface number: 65 but max is 0 [ 152.452660][ T49] usb 6-1: config 0 has no interface number 0 [ 152.459022][ T49] usb 6-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice= c.57 [ 152.468248][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.478161][ T49] usb 6-1: config 0 descriptor?? [ 152.505015][ T331] usb 8-1: USB disconnect, device number 18 [ 152.685480][ T2153] rust_binder: Write failure EFAULT in pid:309 [ 152.686007][ T49] usb 6-1: string descriptor 0 read error: -71 [ 152.701077][ T49] snd-usb-audio 6-1:0.65: probe with driver snd-usb-audio failed with error -2 [ 152.704710][ T848] udevd[848]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.65/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.711634][ T49] usb 6-1: USB disconnect, device number 9 [ 153.145110][ T2193] syz.6.571 uses obsolete (PF_INET,SOCK_PACKET) [ 153.351149][ T2222] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551607) [ 153.351173][ T2222] rust_binder: Error while translating object. [ 153.365539][ T2224] rust_binder: 2213 RLIMIT_NICE not set [ 153.371787][ T2222] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 153.371817][ T2222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 153.430186][ T49] rust_binder: 2220: removing orphan mapping 0:4232 [ 153.813934][ T2244] IPv6: Can't replace route, no match found [ 154.382673][ T2255] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 154.436836][ T2260] netlink: 20 bytes leftover after parsing attributes in process `syz.7.594'. [ 154.455046][ T2260] netlink: 44 bytes leftover after parsing attributes in process `syz.7.594'. [ 154.559339][ T2282] overlay: Unknown parameter 'audit' [ 154.577985][ T2288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.603'. [ 154.633177][ T331] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 154.693180][ T49] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 154.783162][ T331] usb 10-1: Using ep0 maxpacket: 16 [ 154.789669][ T331] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 154.800991][ T331] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.810963][ T331] usb 10-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 154.820215][ T331] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.828991][ T331] usb 10-1: config 0 descriptor?? [ 154.843190][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 154.849658][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.860847][ T49] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 154.869997][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.878986][ T49] usb 6-1: config 0 descriptor?? [ 155.236376][ T331] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 155.243450][ T331] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 155.250516][ T331] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 155.257562][ T331] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 155.264676][ T331] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 155.272634][ T331] lenovo 0003:17EF:6009.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.9-1/input0 [ 155.292433][ T49] hid-steam 0003:28DE:1102.000F: item fetching failed at offset 3/5 [ 155.304829][ T49] hid-steam 0003:28DE:1102.000F: steam_probe:parse of hid interface failed [ 155.314471][ T49] hid-steam 0003:28DE:1102.000F: probe with driver hid-steam failed with error -22 [ 155.352714][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 155.352733][ T36] audit: type=1400 audit(1757113020.031:365): avc: denied { map } for pid=2302 comm="syz.7.608" path="socket:[18035]" dev="sockfs" ino=18035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.352918][ T2303] rust_binder: Write failure EFAULT in pid:233 [ 155.358873][ T36] audit: type=1400 audit(1757113020.031:366): avc: denied { read accept } for pid=2302 comm="syz.7.608" path="socket:[18035]" dev="sockfs" ino=18035 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.429035][ T36] audit: type=1400 audit(1757113020.111:367): avc: denied { create } for pid=2310 comm="syz.7.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 155.452404][ T331] usb 10-1: USB disconnect, device number 12 [ 155.461363][ T2312] syzkaller0: entered promiscuous mode [ 155.467076][ T2312] syzkaller0: entered allmulticast mode [ 155.488457][ T2264] rust_binder: Read failure Err(EAGAIN) in pid:326 [ 155.489283][ T2315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.504429][ T2315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.517305][ T329] usb 6-1: USB disconnect, device number 10 [ 156.052082][ T36] audit: type=1400 audit(1757113020.731:368): avc: denied { execute } for pid=2328 comm="syz.9.614" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 156.148289][ T36] audit: type=1400 audit(1757113020.831:369): avc: denied { create } for pid=2333 comm="syz.9.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 156.148881][ T2334] rust_binder: Error while translating object. [ 156.169448][ T2334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.175683][ T2334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 156.204330][ T2339] fuse: Bad value for 'fd' [ 156.248116][ T2342] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 156.256911][ T2342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 156.256948][ T2342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:137 [ 157.128837][ T2349] netlink: 'syz.9.620': attribute type 4 has an invalid length. [ 157.213938][ T36] audit: type=1400 audit(1757113021.901:370): avc: denied { ioctl } for pid=2350 comm="syz.9.621" path="socket:[17141]" dev="sockfs" ino=17141 ioctlcmd=0xaea4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.007721][ T2356] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 158.253280][ T708] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 158.403234][ T708] usb 10-1: Using ep0 maxpacket: 16 [ 158.409619][ T708] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 158.421051][ T708] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.431002][ T708] usb 10-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 158.440205][ T708] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.449037][ T708] usb 10-1: config 0 descriptor?? [ 158.581871][ T2368] tmpfs: Invalid uid '0x00000000ffffffff' [ 158.605741][ T2376] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 158.620763][ T2382] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 158.628978][ T2382] rust_binder: Error while translating object. [ 158.639059][ T2382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 158.645366][ T2382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:342 [ 158.655364][ T2383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 158.732921][ T36] audit: type=1400 audit(1757113023.411:371): avc: denied { map } for pid=2397 comm="syz.7.638" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 158.793253][ T36] audit: type=1400 audit(1757113023.451:372): avc: denied { getopt } for pid=2397 comm="syz.7.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 158.858387][ T708] lenovo 0003:17EF:6009.0010: unknown main item tag 0x0 [ 158.865527][ T708] lenovo 0003:17EF:6009.0010: unknown main item tag 0x0 [ 158.872519][ T708] lenovo 0003:17EF:6009.0010: unknown main item tag 0x0 [ 158.879739][ T708] lenovo 0003:17EF:6009.0010: unknown main item tag 0x0 [ 158.886918][ T708] lenovo 0003:17EF:6009.0010: unknown main item tag 0x0 [ 158.901267][ T708] lenovo 0003:17EF:6009.0010: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.9-1/input0 [ 158.979786][ T2415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.990148][ T2415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.063410][ T331] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 159.069512][ T65] usb 10-1: USB disconnect, device number 13 [ 159.093578][ T36] audit: type=1400 audit(1757113023.781:373): avc: denied { load_policy } for pid=2418 comm="syz.7.643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 159.113712][ T2419] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 159.121307][ T2419] SELinux: failed to load policy [ 159.179402][ T2421] syzkaller0: entered promiscuous mode [ 159.185083][ T2421] syzkaller0: entered allmulticast mode [ 159.234366][ T331] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 159.245210][ T331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.257509][ T331] usb 6-1: config 0 descriptor?? [ 159.418878][ T2432] netlink: 4 bytes leftover after parsing attributes in process `syz.7.648'. [ 159.471477][ T2434] incfs: Options parsing error. -22 [ 159.477172][ T2434] incfs: mount failed -22 [ 159.612042][ T36] audit: type=1400 audit(1757113024.291:374): avc: denied { setattr } for pid=2457 comm="syz.9.656" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 160.574523][ T331] usb 6-1: Cannot set autoneg [ 160.579357][ T331] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 160.591671][ T331] usb 6-1: USB disconnect, device number 11 [ 178.988101][ T2466] tipc: Enabling of bearer rejected, failed to enable media [ 178.998697][ T36] audit: type=1400 audit(1757113043.691:375): avc: denied { mount } for pid=2465 comm="syz.5.660" name="/" dev="configfs" ino=2455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 179.022993][ T36] audit: type=1400 audit(1757113043.701:376): avc: denied { search } for pid=2465 comm="syz.5.660" name="/" dev="configfs" ino=2455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.109571][ T36] audit: type=1400 audit(1757113043.791:377): avc: denied { ioctl } for pid=2478 comm="syz.5.663" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0" [ 179.318806][ T2487] rust_binder: Error while translating object. [ 179.318848][ T2487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 179.325981][ T2487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 179.336750][ T2487] x_tables: unsorted underflow at hook 2 [ 179.376962][ T36] audit: type=1400 audit(1757113044.061:378): avc: denied { mounton } for pid=2493 comm="syz.5.667" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 179.437800][ T2503] random: crng reseeded on system resumption [ 179.468461][ T36] audit: type=1400 audit(1757113044.151:379): avc: denied { lock } for pid=2502 comm="syz.5.670" path="socket:[19663]" dev="sockfs" ino=19663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 179.585443][ T2505] binder: Unknown parameter 'fscontext?}<7I' [ 179.592836][ T36] audit: type=1400 audit(1757113044.271:380): avc: denied { create } for pid=2504 comm="syz.5.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 179.594019][ T2505] binder: Unknown parameter 'fscontext?}<7I' [ 179.630195][ T2509] sit0: entered promiscuous mode [ 179.636407][ T2509] netlink: 'syz.5.672': attribute type 1 has an invalid length. [ 179.644150][ T2509] netlink: 1 bytes leftover after parsing attributes in process `syz.5.672'. [ 179.674056][ T2512] __vm_enough_memory: pid: 2512, comm: syz.5.673, bytes: 18014402804453376 not enough memory for the allocation [ 179.709112][ T36] audit: type=1400 audit(1757113044.391:381): avc: denied { getopt } for pid=2518 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.776437][ T36] audit: type=1400 audit(1757113044.461:382): avc: denied { getopt } for pid=2527 comm="syz.6.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.907235][ T2534] overlayfs: failed to resolve './file1': -2 [ 179.957278][ T2536] netlink: 'syz.9.680': attribute type 4 has an invalid length. [ 179.965024][ T2536] netlink: 'syz.9.680': attribute type 5 has an invalid length. [ 179.965023][ T49] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 179.980315][ T2536] netlink: 'syz.9.680': attribute type 1 has an invalid length. [ 180.022393][ T2541] tmpfs: Unknown parameter ':;2SHDOkQ:ۘMck?3\7o+Y;W` zCU\v"I]:sUBr?ISY,8' [ 180.115030][ T49] usb 6-1: config index 0 descriptor too short (expected 162, got 34) [ 180.123493][ T49] usb 6-1: config 127 has an invalid interface number: 54 but max is 0 [ 180.131783][ T49] usb 6-1: config 127 has no interface number 0 [ 180.138234][ T49] usb 6-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 180.147607][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.157706][ T2548] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 180.363644][ T49] usb 6-1: string descriptor 0 read error: -71 [ 180.377149][ T49] usb 6-1: USB disconnect, device number 12 [ 180.403455][ T65] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 180.553380][ T65] usb 10-1: Using ep0 maxpacket: 16 [ 180.559852][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 180.571308][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.581200][ T65] usb 10-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 180.590405][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.599567][ T65] usb 10-1: config 0 descriptor?? [ 180.909677][ T2553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=2553 comm=syz.5.686 [ 181.015791][ T65] lenovo 0003:17EF:6009.0011: unknown main item tag 0x0 [ 181.023074][ T65] lenovo 0003:17EF:6009.0011: unknown main item tag 0x0 [ 181.030183][ T65] lenovo 0003:17EF:6009.0011: unknown main item tag 0x0 [ 181.037423][ T65] lenovo 0003:17EF:6009.0011: unknown main item tag 0x0 [ 181.044553][ T65] lenovo 0003:17EF:6009.0011: unknown main item tag 0x0 [ 181.061963][ T65] lenovo 0003:17EF:6009.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.9-1/input0 [ 181.218680][ T331] usb 10-1: USB disconnect, device number 14 [ 181.788540][ T2570] /dev/fuse: Can't lookup blockdev [ 181.996411][ T36] audit: type=1326 audit(1757113046.681:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2576 comm="syz.5.692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35e98ebe9 code=0x0 [ 182.027188][ T2585] syzkaller0: entered promiscuous mode [ 182.032706][ T2585] syzkaller0: entered allmulticast mode [ 182.044142][ T331] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 182.144139][ T36] audit: type=1400 audit(1757113046.831:384): avc: denied { lock } for pid=2588 comm="syz.7.695" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 182.194748][ T331] usb 10-1: config 0 has an invalid interface number: 140 but max is 0 [ 182.203197][ T331] usb 10-1: config 0 has no interface number 0 [ 182.209764][ T331] usb 10-1: too many endpoints for config 0 interface 140 altsetting 224: 252, using maximum allowed: 30 [ 182.221303][ T331] usb 10-1: config 0 interface 140 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 252 [ 182.236510][ T331] usb 10-1: config 0 interface 140 has no altsetting 0 [ 182.244597][ T331] usb 10-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 182.253981][ T331] usb 10-1: New USB device strings: Mfr=0, Product=5, SerialNumber=0 [ 182.262096][ T331] usb 10-1: Product: syz [ 182.270948][ T331] usb 10-1: config 0 descriptor?? [ 182.385500][ T2603] binder: Unknown parameter 'max 65?Khe{k6i_kZgH\r' [ 182.479541][ T331] ftdi_sio 10-1:0.140: FTDI USB Serial Device converter detected [ 182.489775][ T331] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 182.497007][ T331] usb 10-1: USB disconnect, device number 15 [ 182.503834][ T331] ftdi_sio 10-1:0.140: device disconnected [ 182.819447][ T2616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.703'. [ 183.233485][ T65] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 183.388299][ T65] usb 10-1: Using ep0 maxpacket: 16 [ 183.402249][ T65] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 183.411471][ T65] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.419614][ T65] usb 10-1: Product: syz [ 183.423960][ T65] usb 10-1: Manufacturer: syz [ 183.428661][ T65] usb 10-1: SerialNumber: syz [ 183.434120][ T65] usb 10-1: config 0 descriptor?? [ 183.440247][ T65] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 183.448326][ T65] usb 10-1: Detected FT232H [ 183.633458][ T331] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 183.783394][ T331] usb 6-1: Using ep0 maxpacket: 16 [ 183.789734][ T331] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.803495][ T331] usb 6-1: config 1 interface 0 has no altsetting 0 [ 183.814257][ T331] usb 6-1: New USB device found, idVendor=0fb8, idProduct=1109, bcdDevice= 0.40 [ 183.823388][ T331] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.831430][ T331] usb 6-1: Product: syz [ 183.835702][ T331] usb 6-1: SerialNumber: syz [ 184.047857][ T331] usbhid 6-1:1.0: can't add hid device: -71 [ 184.053962][ T331] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 184.063168][ T331] usb 6-1: USB disconnect, device number 13 [ 184.163957][ T2652] overlayfs: failed to clone upperpath [ 184.697481][ T2661] netlink: 5 bytes leftover after parsing attributes in process `syz.6.721'. [ 184.721392][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 184.721410][ T36] audit: type=1400 audit(1757113049.401:390): avc: denied { mount } for pid=2660 comm="syz.6.721" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 184.813378][ T708] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 184.964836][ T708] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.972980][ T708] usb 6-1: not running at top speed; connect to a high speed hub [ 184.981697][ T708] usb 6-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.994567][ T708] usb 6-1: config 1 interface 0 has no altsetting 0 [ 185.004471][ T708] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 185.013635][ T708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.021646][ T708] usb 6-1: Manufacturer: 탈ᖩ쒸阡翀⎇碭밨񦅡 [ 185.028511][ T708] usb 6-1: SerialNumber: syz [ 185.237566][ T708] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 185.249686][ T708] usb 6-1: USB disconnect, device number 14 [ 185.256741][ T708] usblp0: removed [ 185.506621][ T2668] rust_binder: Error while translating object. [ 185.506662][ T2668] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 185.512953][ T2668] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:323 [ 185.535858][ T36] audit: type=1400 audit(1757113050.221:391): avc: denied { lock } for pid=2669 comm="syz.7.725" path="socket:[20171]" dev="sockfs" ino=20171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 185.994340][ T2692] /dev/rnullb0: Can't open blockdev [ 186.023597][ T65] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 186.031613][ T65] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 186.039034][ T65] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 186.049066][ T65] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 186.059103][ T65] usb 10-1: USB disconnect, device number 16 [ 186.067196][ T65] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 186.079698][ T2699] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 186.085820][ T65] ftdi_sio 10-1:0.0: device disconnected [ 186.085928][ T2699] syzkaller0: owner set to 825 [ 186.097642][ T2699] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 186.207677][ T2712] netlink: 168 bytes leftover after parsing attributes in process `syz.5.737'. [ 186.332133][ T2723] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 186.340608][ T2723] overlayfs: missing 'lowerdir' [ 186.473406][ T65] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 186.633405][ T65] usb 10-1: Using ep0 maxpacket: 16 [ 186.639953][ T65] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.651435][ T65] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.664445][ T65] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.673660][ T65] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.682450][ T65] usb 10-1: config 0 descriptor?? [ 186.753435][ T708] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 186.904467][ T708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.915433][ T708] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.924514][ T708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.933259][ T708] usb 6-1: config 0 descriptor?? [ 187.193745][ T2750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2750 comm=syz.6.750 [ 187.220339][ T2752] 9pnet_fd: Insufficient options for proto=fd [ 187.240518][ T2754] netlink: 'syz.6.752': attribute type 4 has an invalid length. [ 187.341253][ T708] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 187.351725][ T708] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0012/input/input11 [ 187.421275][ T708] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 187.542874][ T36] audit: type=1400 audit(1757113052.221:392): avc: denied { nlmsg_tty_audit } for pid=2728 comm="syz.5.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 187.543499][ T2730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.572429][ T2730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.630774][ T36] audit: type=1400 audit(1757113052.311:393): avc: denied { read } for pid=2761 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 187.644306][ T2762] rust_binder: 203: no such ref 3 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK Stopping crond: stopped /usr/sbin/crond (pid 193) OK [ 187.659463][ T2762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203 [ 187.934785][ T36] audit: type=1400 audit(1757113052.621:394): avc: denied { sys_module } for pid=2775 comm="syz.6.757" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 Stopping dhcpcd... [ 187.989137][ T49] usb 6-1: USB disconnect, device number 15 stopped /sbin/dhcpcd (pid 147) [ 188.025164][ T36] audit: type=1400 audit(1757113052.711:395): avc: denied { search } for pid=2781 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 188.103368][ T36] audit: type=1400 audit(1757113052.781:396): avc: denied { read write } for pid=2792 comm="ip" path="/dev/console" dev="rootfs" ino=102 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 188.126839][ T2795] fuse: Bad value for 'rootmode' [ 188.130898][ T36] audit: type=1400 audit(1757113052.811:397): avc: denied { mounton } for pid=2793 comm="syz.6.760" path="/253/file0" dev="tmpfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 188.186057][ T36] audit: type=1400 audit(1757113052.871:398): avc: denied { execmem } for pid=2801 comm="syz.6.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 188.209282][ T36] audit: type=1400 audit(1757113052.901:399): avc: denied { execute } for pid=2801 comm="syz.6.761" path="/dev/rnullb0" dev="tmpfs" ino=273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 188.672190][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.673217][ T2830] incfs: Options parsing error. -22 [ 188.678701][ T330] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.684038][ T2830] incfs: mount failed -22 [ 188.738662][ T2834] overlayfs: failed to clone upperpath [ 189.169986][ T65] usbhid 10-1:0.0: can't add hid device: -71 [ 189.176140][ T65] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 189.184804][ T65] usb 10-1: USB disconnect, device number 17 [ 189.281703][ T2873] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 189.281734][ T2873] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 189.289709][ T2873] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:223 [ 189.416967][ T2895] overlayfs: failed to clone upperpath [ 189.488255][ T2904] rust_binder: BINDER_SET_CONTEXT_MGR already set OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 189.766257][ T36] kauditd_printk_skb: 27 callbacks suppressed Connection to 10.128.0.192 closed by remote host. [ 189.766278][ T36] audit: type=1400 audit(1757113054.451:427): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2729]" dev="pipefs" ino=2729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 189.930379][ T330] bridge_slave_1: left allmulticast mode [ 189.936140][ T330] bridge_slave_1: left promiscuous mode [ 189.941773][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.949412][ T330] bridge_slave_0: left allmulticast mode [ 189.955198][ T330] bridge_slave_0: left promiscuous mode [ 189.960808][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.106178][ T330] veth1_macvtap: left promiscuous mode [ 190.111723][ T330] veth0_vlan: left promiscuous mode [ 190.395439][ T330] bridge_slave_1: left allmulticast mode [ 190.401114][ T330] bridge_slave_1: left promiscuous mode [ 190.406844][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.414412][ T330] bridge_slave_0: left allmulticast mode [ 190.420056][ T330] bridge_slave_0: left promiscuous mode [ 190.425826][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.433659][ T330] bridge_slave_1: left allmulticast mode [ 190.439310][ T330] bridge_slave_1: left promiscuous mode [ 190.444966][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.452551][ T330] bridge_slave_0: left allmulticast mode [ 190.458281][ T330] bridge_slave_0: left promiscuous mode [ 190.464095][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.673512][ T359] Bluetooth: hci0: command 0x1003 tx timeout [ 190.673514][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.698461][ T330] veth1_macvtap: left promiscuous mode [ 190.704054][ T330] veth0_vlan: left promiscuous mode [ 190.709666][ T330] veth1_macvtap: left promiscuous mode [ 190.715240][ T330] veth0_vlan: left promiscuous mode Sent SIGKILL to all processes Requesting system poweroff [ 191.135186][ T330] bridge_slave_1: left allmulticast mode [ 191.140901][ T330] bridge_slave_1: left promiscuous mode [ 191.146625][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.154237][ T330] bridge_slave_0: left allmulticast mode [ 191.159884][ T330] bridge_slave_0: left promiscuous mode [ 191.165596][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.274843][ T330] tipc: Left network mode [ 191.279862][ T330] veth1_macvtap: left promiscuous mode [ 191.285451][ T330] veth0_vlan: left promiscuous mode [ 191.842308][ T2911] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 191.849205][ T2911] ACPI: PM: Preparing to enter system sleep state S5 [ 191.856242][ T2911] kvm: exiting hardware virtualization [ 191.861906][ T2911] reboot: Power down serialport: VM disconnected.