last executing test programs: 9m40.672471121s ago: executing program 32 (id=99): r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x66eb, &(0x7f0000000080)=0x0) r2 = eventfd(0xfffffffd) setresuid(0xee01, 0xee01, 0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r0, 0x0, 0x0, 0x4, 0x0, 0x3, r2}]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001100), 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x3, 0x8, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB], 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x890) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) setsockopt$inet_icmp_ICMP_FILTER(r7, 0x1, 0x1, 0x0, 0x0) sendmsg$inet6(r4, 0x0, 0x40001) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x1000) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) write(r8, &(0x7f0000000100)="837d86", 0x3) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r9, 0x40045431, 0x0) dup3(r6, r8, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x1) 9m6.543369148s ago: executing program 3 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) chmod(0x0, 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 9m6.542716228s ago: executing program 3 (id=473): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'macsec0\x00', 0x0}) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r7, 0x2) r8 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r8, 0x1) flock(r8, 0x1) close(0x3) getsockopt$inet6_mreq(r1, 0x29, 0x12, &(0x7f00000006c0)={@initdev, 0x0}, &(0x7f0000000700)=0x14) r10 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r12}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='C)', 0x2}], 0x1}}], 0x1, 0x200400c1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6tnl0\x00', 0x0, 0x29, 0x6, 0xff, 0x3, 0x42, @mcast1, @empty, 0x80, 0x20, 0x1ff, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x44845}, 0x40040) r15 = syz_open_pts(r1, 0x0) dup3(r15, r1, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x17, 0x8, 0x1b0, &(0x7f0000000280)}) 9m5.647244785s ago: executing program 3 (id=485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x432, @loopback, 0xb}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="3898", 0x2, 0x1400c894, 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) 9m5.634472336s ago: executing program 3 (id=486): preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/custom1\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9b) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) syz_clone(0x12001800, &(0x7f0000000180)="759cc22ed4511cbc84ffcf6d6fcf7b4383f97295cc2c737a6d8e619f5c0d44697453e9120674406b33d7c68e9ee8d597d09d87a459fe7268025b67dca5a12b11ed38d14c725475ce83b9868179e447c3145f2b6581622457c249c5e13593f27a3d8554a8508c1c0b5cc227f418c994a790636cdfd635459235cc01aa5387b5648da9639a80cb", 0x86, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="bac05a71071c34182fda133a7fa7e1da0f8c5d30f536887591884efb9cea0ee476e3a7422f13ced55cd0311a70a9e6203a7d5655369cbad9ed91149c0aa9951293169c916b4e07d064def19a8bfdcc31b370e1c3cc4643688343933a8260a5db9a8a88ed99b3d0fc56a00520d0e9a6878e78963b9eeeb91e4c44d37ffb0313296031686e91223d61d56787e91db5a2e6b6953c0e95a3f230cd93915890ec9234937c608f387eeec68ccc3c88acf5fc36ec6fd03d2aee585462a0d8e5b05028eccfb0f43ca1abc3145e5432fca3fffff591348a62c68171dc0e1a5fe267932bb84fcb0f333df75e2d1d969c7696") 9m5.556478974s ago: executing program 3 (id=487): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6, 0x50, r0, 0x8fe6a000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) fadvise64(r0, 0x81, 0x9, 0x5) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 9m5.534580186s ago: executing program 3 (id=488): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "9a07245bef8c94c07e7fb6b7d0bb1063f1efc886e94b3b4aa0992c3265298455", "a7732af2a249db13d8fb5f4ab359e4ac8f8f4f09af92a89061629e2613346932", "5ae32942c078ae1fb18ea2d7c99832d05ec6f5483fc59687541ebf51475ca62a", "fcdf6fcfdabde50fd53da98126aa73b1100155a346c5fc5b6504579071865f72", "64364ddf5e887f2933934a16cbcf5a52c4d4fa02c14f0f49a3ab77cb2548c9d6", "e5bbca800ffc1c58a6e29216", 0x4, 0xfc5, 0x5, 0x10000, 0x1ff}}) (async) fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800a) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0x8000, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, r0, 0xd641a000) read(r0, &(0x7f0000000000)=""/42, 0x2a) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 9m5.474046332s ago: executing program 33 (id=488): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "9a07245bef8c94c07e7fb6b7d0bb1063f1efc886e94b3b4aa0992c3265298455", "a7732af2a249db13d8fb5f4ab359e4ac8f8f4f09af92a89061629e2613346932", "5ae32942c078ae1fb18ea2d7c99832d05ec6f5483fc59687541ebf51475ca62a", "fcdf6fcfdabde50fd53da98126aa73b1100155a346c5fc5b6504579071865f72", "64364ddf5e887f2933934a16cbcf5a52c4d4fa02c14f0f49a3ab77cb2548c9d6", "e5bbca800ffc1c58a6e29216", 0x4, 0xfc5, 0x5, 0x10000, 0x1ff}}) (async) fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x800a) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0x8000, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, r0, 0xd641a000) read(r0, &(0x7f0000000000)=""/42, 0x2a) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 8m39.476927606s ago: executing program 5 (id=954): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) 8m39.443566089s ago: executing program 5 (id=955): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x410, &(0x7f0000002740)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) write$FUSE_GETXATTR(r2, &(0x7f0000002bc0)={0x18, 0x0, 0x0, {0x1ff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) listxattr(&(0x7f0000002640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x280101, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0x7709, 0x0) 8m39.387729414s ago: executing program 5 (id=957): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x4000}}], 0x1, 0x14040804) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r1, 0x0, 0x44) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmsg$can_bcm(r2, 0x0, 0x4880) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0xb, 0x4, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdc02}, 0x10}}, 0x24000840) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x18\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r5, 0x10000) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505080040000000010109025100010100000309040000ff02020000052406000005240000000d240f0100000000000000000004241305052401020804241300"], 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x90041, 0x0) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0xfffff000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000440)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) 8m38.115729829s ago: executing program 5 (id=1001): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x9614, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="027ba1a5538bed5d002300010070639ee3000000000000343031302e3000"/59], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x168, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3d92}}]}, 0x168}, 0x1, 0x0, 0x0, 0x10000040}, 0x10) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="1bbc70b34df98a034e1e3684b37610ac2f57d3cf445032391277ff4556781c41eb60daa64d36fb07698a9de2032d736d6851b3ab141db6fccc85b16a36b51a2b46e95545ecc6f27412ed56b0a7a809c3849f8c22a6eb05000000fe18338dbd2bb611c00e86b2ff716375a308eea1b2510beeeb0f98a8", @ANYRES64=r8]) 8m37.990128531s ago: executing program 5 (id=1007): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x55) 8m37.542426974s ago: executing program 5 (id=1012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') fallocate(r2, 0x2, 0xf931, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x74038877b9ca972b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4c494) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) 8m37.489201049s ago: executing program 34 (id=1012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') fallocate(r2, 0x2, 0xf931, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x74038877b9ca972b, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4c494) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) 7m51.72683069s ago: executing program 0 (id=1817): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r1, 0x0, 0xffffffffffffffec) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0xff, r0, &(0x7f0000000180)=0x7, 0x7fffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 7m51.705031252s ago: executing program 0 (id=1820): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="80010000", @ANYRES16=r4, @ANYBLOB="efc3032c7000fddbdf2508000000580007800800010002000000080002000200000008000100ffff000008000100f8ffffff080002002c0000000c0003007f00000000000000080002000700000008000200160b000008000200030000000800010001010000140104800900010073797a31000000002400078008000300410a00000800030006000000080001001100000008000100030000000900010073797a30000000002400078008000100050000000800020001000000080002000200000008000200010000003c000780080002000200000008000100130000000800010002000000080004000f0000000800040000000000080001001800000008000400040000004c00078008000400070000000800010012000000080002000700000008010400060000000800030076000000080001000b0000000800040009000000080002003400000014000780a0a9f86b0400000008000400"], 0x180}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r2, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) listen(r5, 0x2) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0637bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e224e0004fcff", 0x58}], 0x1) io_setup(0x2007, &(0x7f0000000980)=0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) io_submit(r7, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 7m51.577929554s ago: executing program 0 (id=1825): r0 = socket(0x27, 0x0, 0x5) setregid(0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080009000d000000", 0x24) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/157) 7m51.576233234s ago: executing program 0 (id=1827): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7fffffff}}]}}) recvmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/80, 0x50}, {&(0x7f0000000200)}, {&(0x7f0000000280)=""/191, 0xbf}], 0x4, &(0x7f0000000380)=""/29, 0x1d}, 0x2}], 0x1, 0x40002001, &(0x7f0000000400)={0x0, 0x3938700}) 7m51.540258588s ago: executing program 0 (id=1830): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range(0xffffffffffffffff, r0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) recvmmsg(r3, &(0x7f0000005d00)=[{{&(0x7f0000000240)=@tipc=@id, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/144, 0x90}], 0x4, &(0x7f00000005c0)=""/185, 0xb9}, 0x4}, {{&(0x7f0000000680)=@rc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000780)=""/97, 0x61}], 0x2}, 0x8}, {{&(0x7f0000000840)=@alg, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/114, 0x72}], 0x3, &(0x7f0000000b00)=""/222, 0xde}, 0xb}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c00)=""/85, 0x55}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)=""/11, 0xb}, {&(0x7f0000001dc0)=""/126, 0x7e}, {&(0x7f0000001e40)=""/79, 0x4f}, {&(0x7f0000001ec0)=""/6, 0x6}], 0x8, &(0x7f0000001f80)=""/49, 0x31}, 0x81}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/47, 0x2f}, {&(0x7f0000003000)=""/170, 0xaa}, {&(0x7f00000030c0)=""/112, 0x70}, {&(0x7f0000003140)}], 0x5, &(0x7f0000003200)=""/149, 0x95}, 0x7ff}, {{&(0x7f00000032c0)=@xdp, 0x80, &(0x7f0000005680)=[{&(0x7f0000003340)=""/226, 0xe2}, {&(0x7f0000003440)=""/28, 0x1c}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/227, 0xe3}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/113, 0x71}, {&(0x7f0000005600)=""/112, 0x70}], 0x7, &(0x7f0000005700)=""/211, 0xd3}, 0x7fff}, {{&(0x7f0000005800)=@generic, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005880)=""/102, 0x66}, {&(0x7f0000005900)=""/106, 0x6a}, {&(0x7f0000005980)=""/249, 0xf9}, {&(0x7f0000005a80)=""/141, 0x8d}, {&(0x7f0000005b40)=""/20, 0x14}, {&(0x7f0000005b80)=""/176, 0xb0}], 0x6, &(0x7f0000005cc0)=""/29, 0x1d}, 0x40}], 0x7, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000005ec0)={0x9, r3, 'id1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000006080)={&(0x7f0000005f40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006040)={&(0x7f0000005fc0)={0x70, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x2, 0xffff]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3e, 0xbe, "d06b5e69bb752efa9039f1a2390a39f9e248705317af3ddc1d482d466d0c2028e47b78142e62b2d08560245a3f9eaa2108e682725063e478342f"}]}, 0x70}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000070c0)=@buf={0x1000, &(0x7f00000060c0)="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"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f00000071c0)={&(0x7f0000007100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007180)={&(0x7f0000007140)={0x20, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x69}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008805}, 0x20000001) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007240), r6) sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000007300)={&(0x7f0000007200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000072c0)={&(0x7f0000007280)={0x1c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) read$FUSE(r4, &(0x7f0000007340)={0x2020}, 0x2020) sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000009440)={&(0x7f0000009380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000009400)={&(0x7f00000093c0)={0x40, r1, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "cbaff8a7d52b6e9914dd"}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000094c0), r4) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000009600)={&(0x7f0000009480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000095c0)={&(0x7f0000009500)={0x90, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x8840) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000097c0)={&(0x7f0000009640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000009780)={&(0x7f0000009680)={0x100, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffff}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x24}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8570}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xcb1d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x9]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x60040804) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000009800)={{r8}, "1fe130eda7de06d9ff7b332ef928cf21d6c0be1034d8f9b2d8b5b6304cc458b3ef8ceed77acb37e08f552263fced6f549a7a2e91d1f6cee864d8d1ea3a387f48c3adbdcd30b30fdb9dbf27c2257b08e375441f3687848257f9588f7443fd6aa8e6dba4d389122b500483334f48c24a6569d18dc74d121d8f662a91a6da6bd6bb77b43cc780cd0c154f967573c6a9a5e71e8d51f4ea2d93cc158992b51b147918064c712254a2126ce3e709b6fc0acb241048fad673d03b6b7d0f5dc937e5e15994929f150a759560b1f54054bf954712df414fb53077e2f56864624af66c953129bbf471ae5facb8a0f9d4da12d73bb2bf7372e567bc6d13f7127b1a0011510c1b4ac5fcf57a4fbea96fa78e711ee188064fb2c7b62626f714100a76c34f28557b7b6e82cab3537d4d723d5e26807d0e663735ff685ac772108eebf096aae65aa02a011b18b7baf009a39a9129272445ab2281a4814b8c93ed328eddb05260213c16405d283e83e921ec3a5c0dee506163d0a6669112a22a4495bb5ffd02c05c4d662cc8c9867f4d8b25f63011450341278f56bce901737d2677d7d5a1a480e295c595373305628c5bae11324995d4730c8474d6f1eff7329c6864905c471f75df0fe1084fba79e327147db3960631a321963a7a310fad2a22a025d4c4b2995c674da4b68ee87b72ecff5219a85d5aa270e5f91247ff95467c24773abe98fe8d11b0eec9e8d052123aa6344116caaaca890120514e13899213264031b5a4aee5a1bd4f5343f29fa2e4a8e77aaf9c05ddb94d8d8761786b2ce1f0daebd6d7162871a7d06e252fd57646152544368ac5a91fb5d1e20ab67e000158c9774a336b4327dc10298387258b0e20618805807337e1fa27753521f05b9fd71c872166a140ee52a82131c9f3318066f8b84d6d565ad77bf8fdbe976fe4265c0f3069918ec7efe45c866ff9dc103c4e39fc50a987f627b5fc1cbbb65d5ce4ea235430b33dbb4fb158fde81d40fcb6d0b8ac52a6ac88476dd62e1a6d49df0eb9ba571f6dc2a8575e5dba473d25fdc19714eb7e699ab8e9b8428ee422b590fc7fb46d2d227660efe2074eb4596c782e86db73448abd0ed50b86619a243cd02197706b27f8233e5c28172ac6e3743a88547bffc6fcb78e27f0727fcb25e7080747f3dee745cd2f99adbe3be60e300c26b6cbecc21289d59be48d372a9243cc88c22f26558797e1f4e5b2c75d5974276fa9e73a962bbc7193d9a3c74fa97f3a9c199725d82ed5eeb2507cf128889e3dcddc3643079f7408772451107cf83b04bf6b578e6233c7f685d99710b579887887c0ee39588dd639ea7189ded2fc8cc943cb2bea4eb1cac40d6712245a3fa07e481f4731428015a18bf617e9108b4784917230b5af1203f9ef7335a0b49abbd40404eacc9d22aee938ae1a47bcbbbb4c74986db58ffe4c2f7e7ef0759447ae103f0db1fe03029682e564b8f93dac8b08e1921737ba63ff9c1eb614d61b130764e49f4b0672589b44d496a34839730d96dbad283fb260591edccca701684698d40759609c3c42e83e1492bf063a7c54ad319df08985c19f9a8689ad76087da57d73bd0346f0005220e2143600dbe6eb884eb0db9cdf44115d2fe22ce6b9ef4b64e3839346c1de0b8e3c3fd7de6993b57f2ea8c70d1a1dc7e5af4792763f516f8219e5b08d1928dce6ac57bba1c6337989d15138386dc4d1fe15fa9a0c66f8879aeaa554306ac2e9acbf35dd47454b9a3f5665a66897e4c003f3331749b303bcc7eb8a2a7d22066dda74e771f337247ee1301435535d2bea9ecd95358a4198ccf79aae95be5f17f574e47a9aab2bf2a393fa6261e2b241bee5333e61a1177ea842d9993f69de66ec460af5e52e4365f3161e9ff66a733401f3a33251ea865f70cf2ef099a6a94c1942d71e5b8b231dd69453bcc78ebeb2a3d8201ce1745fa6f582340c10341443d074a50ceb489a454ec614e3282b3e133eae49fa3efce34f2173dcc9b0a19996d3384ea162f80ca1f753abd6617b8c8f0da43bfb7abeec9aa0db35f9958a1fa3f363ca3d7fbd08831ef744490c0615b009d0cc5f1f19fa3b5be933b98bce64293664d7b9c1eab5e53224b381ca2c5e3fb19bfd3c2705d0e489681b8da9ae080bec382744449341ee077c3243188cb1eafcf3b30cf7276cc09c06a21f4e8de03464d40f56730886cd620fc3c598e4702adb02dbf69ff5eacb70ecb24293a462c7e249dc4b28722c5e023ab4094fee7ce15fdbba3f9599c9fe39f81a086c938d221d39a1be7a0ea642abe5679ba628a4f67b97c1c793efd2d22e15a105bbca915435883cd9161f20ebafd7154b43ca9713e0ee2bb9e3075ba1a9326660ea9b83d9581345ec437870f1e5fd2105096202f2b5af04f5a2ca3ea576ffac0b729ebd75cd2137fb01b53a4148d17926831b4bbf3d79ed77b3873aad0091b44890fc0667d1ece5025ffa00e6c4a9990e556b137587654704a07bd9004915a747c78c0a6aceeedad41a91998664b711e39ac3ccd0f19c7fbabb84e5b0702162e3d031b58dd1a94b6fadbe5be54a6e57db57bc51b2327acfaa62da000e684cb417f502a759d79a37b83ee441850ac75259ab2a8822cbd67df394db75e926eec4de8672f4eabbd4c22c32cdbe47e06a0d4f5bcabf77c0ebcfd749bba7723a4593fd5905409a6a5f125c73bfe27666297803e86d0b4f3969c69e7a2d9dc82d887154b52231845aeae410e8276c4fb7c8d25dcb5ed084ccfc4597d7cad8e1c013edbaabb2ae1b358dce5f80c6e81539cabb739a3150604dee3e196f615c30c37cde895a975e1c34e386d8c04dcc88741575dd73ce1044161ae724ff4349215aa17349b0ef02e6add506aafcad1dd053f5ec09c2541b180e0ae95592072b39629ab0a76dba66bf34bbdaff77c40703a8b46b6ee9e6e1be5e9d096a88a7fab6ce7d27e3a9bce687160a34919418bf32321ccd7f44534258f4d4d65ebe0fc9caee2654fb07b336755bf21bc287d5c97d655932dc6b385df1de6fe0ba549e8d5a4e82895bdd3cfe244cd04243dfd0880981fd0a2be1c9301b9c4656b1525e8b5262186b0ba74a35ed9915b4ee10a68ba003e292c1423203905f152979aab126a647d2d03ff15880eebe6ebabfa57e0c83c628af94e350a829b3f755624f5399162bdbd0763d2b8586e989c75438904c0c07d8c72154f2aa3e0b5f9d6ae01cef76bbda765f79f6a869575b072a9d6f352f1f7ba67cabb2e2b896b2caa9753b5294cf00005fa77fc9e93a4605eb0bcd48730bdbc034c2b979a43821338d86b27108955dfdfb6aef4eb2ab439f6864888ebe60688b7d4ebd316ded5e0ed50c6d180948da63950b4fbd1047cea9f0ef57962d820009eebed3842812daadd6476c863a9fc73c030e20c52e9b29de8e79af84d8c9a55de1182fee319f1c7aa51de0def1563615002e892207b5d4ff949693e4961ab5721636306d00c3160948c9868fb28fc7c11833371cbf6522425b4768f9061154222b09b0d041da8d46047a4cf047c85a26089923ea1389c553c92131c9ff40a3deb8e4497abfefaf274281d5597a94782d7c4385760529ef7086914d6ba73e8e3741bd497b75659df3dff57551f6430c36512f59ce174564114b705d508b5e8b739b90f8e016d7785f754c67fd0cf0e9651acb20d5ae88bffaf3db523be61d0a3b70ca7b3464cd92689facaeaae85fd4b13b6d51a4df42f4080b822a3e6cfe34e326ea2667cc1a30243bf81b91f8c732a777a92593b8e4ecd9249a4e702fef0b3525e9f0df24cba493673673665355f088079dfeb7053bd3ad0ebddd12110d24b5595371e117dc8c32bda45f5dd2bc6eb079ca6ca6c8f3ded8911e9303f50bc1a32c519128fa2f46dd96fad4c347899ab0006708d41d111cd126d403567244d38608d2ca3f8659df77a527ad842c18abaf8602193714d5a39e37e80d765c5c26396fae4716d61a52691b38b8f3b27a0ecd28993e3839e3205c985d02f8181ef2a019a1d883820e9bc6619e09747c672e01b1c7157ec9a09fcd9805997404e5b70bb90d765fe10e2529da0fcbc9f7c1936ab46772e48cc0d5bc050fe1ddc96405505dee4f093a910c9d7d46d4be0e6dff938ba5b40fa213201c2f09408f9dd48767693023caccd9177a60d70c57058dec06a01537a38a686b0df7f0c432c7bbe16ed7c4cf6ba46349a8ba7bd6e75beb70bac1a9118229e5857d22153a8cdfd2c65d6e4d4e95b9a3a0b51ffda5cda3bc47c4b24d17bfc4230dd456457eac8dede77cc82f563973398bc2ee06b3f4aca95ad3b591f5d1f55a58740d380b449ee18ac2e5b7701afb2adeec68bd78c005231d3f6da7cb077cf85caeb08431bf04069d3ad7d96a7f12c72a24d7e44d49c17244fb3a3d8ceb0c476264e8926809b42045e7e6fa42d46d78c7e14f6e5e13097c12344f3f837b88d07fabba277b720786f8d527fee2e74a2ab3b4b27a60d721d69a577fb6bd674f9fa3580ddb97601d99e09b238386cae71a73956897064c7f8639a2328a06d1528bd40b55b312f2750fc85cd01b4a9c701cd00bbaa69aad919b6c1ddb2869aead986c542be4ba43e58fcf96a4e711de9d590ac0753ea73354127a3d0694e10679a67dc54f6e6dd5bcaef26dada22c3b8b68b7750bcaacd2027d76ee1ac6e65b7547e6997fcc19c401d15eb42726730cae818d16196d96de010c91048c525d380eda036f0bfbc16dcbc6c74a90fecfc636c2d6f3a9854879489fb79da2dfad87902f9850f9db3ac08e94f84ccd057c1245ecbe088b9617952160cfcce9ff3256aa1117ffc95ce4ba702fb682e396555996db399ae3731b2ded1654216e66361ccb6a874c11b47278f61477b4f9583a3f76ea6604f6175013c74c9b926238024f6b86e70b9a010b0b323792f3afa8eae8e078b4ae1b207c0ab308797dc34300d75d46d9d51a9b84631197ebc90b2a31a340ba36ea9b00a3c8b0e5225a3c59f7b3f2bd763acab5cd4407dc79e36e2a5eaddf9120dd9c5bc67362a8b59283e545b7a4f775af65cffc738de3eb4db3e9328abfbff0a01556b374b0728b1f5d39a89cf233feb02b53f976b1c76a0051dae717dcaf8f236db1c9652a138a7997a8be93ea44972c382732d5672f1c7fccf81921c11bf18757accfe769e867addec3d7716d9d60cc4197dab576ac23b5835a1a2d8089fe7fbd421ce9dd8e6f2329ae9ed152f389ea1f153220348a502bfbd9e548e3f58f5e305ffd33ea3b0fb2f185434787d84e4e965f2105340d33818ca40d6fc833673679f8151588446be132322473b85f246fd696938390acdda17ca62a4a0110fa8b507a73a53aacee6b80c8928043e31243c53260c162918045dec224dfcd6553ded2d1024dcb417eac6e75fcb138b39d7690af4e3b822b0586aece82b6d374022f55ff7c8d0efa00c7751c98df232b141c85cf9a98037f0930076e1746f6fcf473efd2864e892b05719532e160bd5975df92db8685141c81381cc4e34afca1b9a2f6e5fa3453dd1e3646b2548f69a7b571537071d1b8c89c8fd451cf85f2fbb47939d776dbc208b0af07e192290784f80a7b7fb0e8b0a4d90022f975d49329e6326f678f7bc0eb27f20ba96175787c4589396b1f8cc8e388ddb76e97883345e1dae4adf4436504da1d81befab881df3231935db285453ec74f78878cba4ef2f907e2f2c48099e4ce4c07b3c2f5b5885c0b40c3f26abab160e7c3bb08086ba9e7095b1546280dfd23e27ee0128f65b570ede0dedc35855d35"}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f000000a840), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f000000a940)={&(0x7f000000a800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000a900)={&(0x7f000000a880)={0x48, r11, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xf}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f000000a9c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f000000aa80)={&(0x7f000000a980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f000000aa40)={&(0x7f000000aa00)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x10}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000850) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f000000aac0)=0x5, &(0x7f000000ab00)=0x2) 7m51.504958662s ago: executing program 0 (id=1834): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000140)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x18, r9, 0x1, 0x81}, 0x14) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ce"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@aname={'aname', 0x3d, '9P2000.u'}}], [], 0x6b}}) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan1\x00') r14 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r14, r13, 0x0, 0xffffffff) 7m36.384156875s ago: executing program 35 (id=1834): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1508000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000140)) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r7, &(0x7f00000000c0)={0x11, 0x18, r9, 0x1, 0x81}, 0x14) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ce"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) close_range(r3, 0xffffffffffffffff, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@aname={'aname', 0x3d, '9P2000.u'}}], [], 0x6b}}) r13 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan1\x00') r14 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r14, r13, 0x0, 0xffffffff) 7m17.913373656s ago: executing program 4 (id=2426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000480)="96bc2880bb35754af5ddd772cc00abbbbb65ae9bc80834c68300a80e65df8c96f2250d8a49867eb744e162195cdc60229a128cde0e4d8de7e9b78d802b380d2c49e1406ade4a9c30960be4d94233ff227949b33f0f7d5e6b1b131fa9ec2110a2594ef17fbe073e1e956390bf7a16ece31be464bb5672252afc96222fc9ef5a68ab45a81ff2a32a995fa8c70c482dc927ad3a558b8fc8083bce8a6c44faf71890e60bee0f977e080f8d3a06e79df221163dfd05ed90a040a3c5e435356f5b5bdc8480a3d4ff011c4cea824d94f79fe34d2a61b135aa4818", 0xd7}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24008004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0xffffffff, 0x9, {{0xd, 0x4, 0x1, 0x7, 0x34, 0x65, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp={0x44, 0x20, 0xb4, 0x0, 0x8, [0x2, 0x3, 0x3, 0x5, 0x3, 0xffff, 0x200]}]}}}}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc1, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x0, {[0xc, 0x7, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) 7m17.86458785s ago: executing program 4 (id=2428): prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001100)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000001080)=""/128, 0x80, 0x0, 0x10000, 0x7, 0x940, 0x100}}, 0x120) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000001480)={0xa, {0xa, 0x80, 0x7}}, 0xa) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x406, 0x0) 7m17.807600706s ago: executing program 4 (id=2431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) timerfd_create(0x0, 0x80800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200", @ANYRES8=r2], 0x1c}, {&(0x7f0000001880)={0x11e0, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="cb9994387ec671273da59f819f738257fc40e2ddb563d0b0964f61cceb013cdf4dc788119b27a2053e1f9b174870930378f51ddeb07b44d0c40d14d648e102f264d5e10468d8da9278b8a94bbf3e22812adf0ec3ebe8ffbb064e466900a1fcb0b8c21f3bfe75c7f90a6d45ee252f6ec978c968b038c1a23b6a533166b700c0448ba023109639563479f0a2d869666a92b95778539e7589926e70f732ad55cb5a1933c99df6faf38f484a488160c035d2080ac2f3c6788e0da3db7d59ed5d9901a9b149f11e80ab73d973d34eab7d433f6e0a5a010be2b96ee8794ee22c01", @nested={0x59, 0x82, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x8, 0x138, 0x0, 0x0, @pid=r4}, @nested={0x4}, @generic="5017d201d0705685dcc6287ad7cf278baba2132c7d1102019b62138067edd4647cabc712736cb602a5c4694868402fac95dd5d1b0da874085c53936d0e8fbc929572c573bf"]}, @nested={0x1094, 0x61, 0x0, 0x1, [@nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="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"]}, @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@local}, @typed={0xf, 0x134, 0x0, 0x0, @str='/dev/ttyS3\x00'}, @nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x40}]}, @nested={0x68, 0xae, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x5d}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x3d, 0x68, 0x0, 0x0, @binary="3662d8656d8bbd0e34baea5638e3c9f64ffeca6faf341d2ac77f33c580ffc280c7639a609a7fa7d9e72352728c15b57366e2dccb90abe77514"}, @typed={0x4, 0x13}]}]}]}, 0x11e0}], 0x2}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002200", @ANYRES8=r2], 0x1c}, {&(0x7f0000001880)={0x11e0, 0x1b, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="cb9994387ec671273da59f819f738257fc40e2ddb563d0b0964f61cceb013cdf4dc788119b27a2053e1f9b174870930378f51ddeb07b44d0c40d14d648e102f264d5e10468d8da9278b8a94bbf3e22812adf0ec3ebe8ffbb064e466900a1fcb0b8c21f3bfe75c7f90a6d45ee252f6ec978c968b038c1a23b6a533166b700c0448ba023109639563479f0a2d869666a92b95778539e7589926e70f732ad55cb5a1933c99df6faf38f484a488160c035d2080ac2f3c6788e0da3db7d59ed5d9901a9b149f11e80ab73d973d34eab7d433f6e0a5a010be2b96ee8794ee22c01", @nested={0x59, 0x82, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x8, 0x138, 0x0, 0x0, @pid=r4}, @nested={0x4}, @generic="5017d201d0705685dcc6287ad7cf278baba2132c7d1102019b62138067edd4647cabc712736cb602a5c4694868402fac95dd5d1b0da874085c53936d0e8fbc929572c573bf"]}, @nested={0x1094, 0x61, 0x0, 0x1, [@nested={0x1008, 0x28, 0x0, 0x1, [@nested={0x4, 0x17}, @generic="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"]}, @typed={0x8, 0xf2, 0x0, 0x0, @ipv4=@local}, @typed={0xf, 0x134, 0x0, 0x0, @str='/dev/ttyS3\x00'}, @nested={0x8, 0xf3, 0x0, 0x1, [@nested={0x4, 0x40}]}, @nested={0x68, 0xae, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x5d}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x3d, 0x68, 0x0, 0x0, @binary="3662d8656d8bbd0e34baea5638e3c9f64ffeca6faf341d2ac77f33c580ffc280c7639a609a7fa7d9e72352728c15b57366e2dccb90abe77514"}, @typed={0x4, 0x13}]}]}]}, 0x11e0}], 0x2}, 0x0) listen(r1, 0x9) close(0x3) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async) add_key$keyring(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000080)={0x21}) (async) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000080)={0x21}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) socket$packet(0x11, 0x3, 0x300) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) (async) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) ioctl$TCXONC(r5, 0x540a, 0x0) (async) ioctl$TCXONC(r5, 0x540a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m17.608203315s ago: executing program 4 (id=2435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000c00)={{r6}, "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"}) sendto$packet(r3, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0x40, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @local}, 0x14) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000580)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)="0bb9c8c379374c3f38068c2cc179f917ea9d6e59b268f7265bdb57168321de486bd1e379b5bf135a67fb3841f841f460729e30dbba3c3fd9da176d4cb800365ad1f88fe2211ee213e14bb683abce55ad4df7e930d79d244f6e4a1c52b81025cffba9ea59d13a765b05932814a12500c6d7c0e062e736355de8df641ddb7fbe081be75b43b971d36ce39d81bb685732d49306435cd6d0931e3cd36b799e9ae0c964915682a654c628e5f77c0e60303b688a4c6a2e06dbe2", 0xb7}, {&(0x7f00000006c0)="2aadb5ab53f1ee7ad821fa057e0695920a99592c55006f22d1dfc244a6c8654a5582ed805d322bcb4dd379d71e59188df8d74535b3350570749a4230510439ae993c8039a1eab09ee063f331bc46724507a05748bccb2f95df5399480164f75000ce8e26d8cb618b8a7ae6a7629f5d36069f113b3afe1e64c24a08005c58daa449e95008bac5a4c3a4c5ed417ceccf0f54e8", 0x92}, {&(0x7f0000000780)="ec16cf67b33cb350d490931f713cfd609ebd905b5b0eed03dd419154c7067d4a8f7df4e6886cc2b83aec6ab8e0f50f59b9142f3a2efbe930ba068140f4b21e7cf08ce26a3e8a0f881be22060220fd5a9b54483183ab87b3f60fbb9e424bbda36392dcbd07567ff5ee694b9422b0905ae40af5643b61937631f0ea468594998dd4578db94abebbcdbbf049d83df4a6d75fced99aefc7abeb5d5a3a1217cd58868e29f49f72df3f085c0899196440b29b1670d7fbfcae830236fe2bb17cdd86c7c4c61aea19b56325b7ea0", 0xca}, {&(0x7f00000000c0)='(', 0x1}, {&(0x7f0000000880)="66a886f9934cbeee893e49a9550b6e0ed89ecc99679efd6677ae07b9b73cca54798eed215ba52c3c0e7b03d5394ec56e92337ca5ccc32cf76c1ead68e22688d5a6de92e0ea88f288db1dc0e1ea35144b3c2be90ec305145fb998a8d7e8e4c6b561606d9b", 0x64}], 0x5, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0xf0}, 0x44010) (async) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000580)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)="0bb9c8c379374c3f38068c2cc179f917ea9d6e59b268f7265bdb57168321de486bd1e379b5bf135a67fb3841f841f460729e30dbba3c3fd9da176d4cb800365ad1f88fe2211ee213e14bb683abce55ad4df7e930d79d244f6e4a1c52b81025cffba9ea59d13a765b05932814a12500c6d7c0e062e736355de8df641ddb7fbe081be75b43b971d36ce39d81bb685732d49306435cd6d0931e3cd36b799e9ae0c964915682a654c628e5f77c0e60303b688a4c6a2e06dbe2", 0xb7}, {&(0x7f00000006c0)="2aadb5ab53f1ee7ad821fa057e0695920a99592c55006f22d1dfc244a6c8654a5582ed805d322bcb4dd379d71e59188df8d74535b3350570749a4230510439ae993c8039a1eab09ee063f331bc46724507a05748bccb2f95df5399480164f75000ce8e26d8cb618b8a7ae6a7629f5d36069f113b3afe1e64c24a08005c58daa449e95008bac5a4c3a4c5ed417ceccf0f54e8", 0x92}, {&(0x7f0000000780)="ec16cf67b33cb350d490931f713cfd609ebd905b5b0eed03dd419154c7067d4a8f7df4e6886cc2b83aec6ab8e0f50f59b9142f3a2efbe930ba068140f4b21e7cf08ce26a3e8a0f881be22060220fd5a9b54483183ab87b3f60fbb9e424bbda36392dcbd07567ff5ee694b9422b0905ae40af5643b61937631f0ea468594998dd4578db94abebbcdbbf049d83df4a6d75fced99aefc7abeb5d5a3a1217cd58868e29f49f72df3f085c0899196440b29b1670d7fbfcae830236fe2bb17cdd86c7c4c61aea19b56325b7ea0", 0xca}, {&(0x7f00000000c0)='(', 0x1}, {&(0x7f0000000880)="66a886f9934cbeee893e49a9550b6e0ed89ecc99679efd6677ae07b9b73cca54798eed215ba52c3c0e7b03d5394ec56e92337ca5ccc32cf76c1ead68e22688d5a6de92e0ea88f288db1dc0e1ea35144b3c2be90ec305145fb998a8d7e8e4c6b561606d9b", 0x64}], 0x5, &(0x7f0000000980)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @mark={{0x14, 0x1, 0x24, 0x81}}], 0xf0}, 0x44010) accept4$unix(r1, 0x0, 0x0, 0x0) (async) r7 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000280)=[{r9, 0xd201}, {r2, 0x280}], 0x2, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa4, 0x0, &(0x7f0000000b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f0000000b00)={0x0, 0x18, 0x30}}, 0x400}, @release={0x40046306, 0x3}, @enter_looper], 0x0, 0x0, 0x0}) 7m16.712453852s ago: executing program 4 (id=2453): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getpeername(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = accept(r1, 0x0, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r2) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x33}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x68}}, 0x4) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000280)=0x20d9, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000400)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r6, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x4b, 0x3, 0x11, @remote, @local, 0x8000, 0x1, 0x7, 0x5}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f00000006c0)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000700)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, r7, 0x2, 0x5, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000081}, 0x20048000) shutdown(r0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x8, 0x3) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000980)={'syz0\x00', {0x4, 0x6e, 0x8, 0x7}, 0x3a, [0x5, 0x9, 0xe8, 0x8000, 0xa6ef, 0x5fb3, 0x3, 0x6, 0x9, 0xc1, 0xffffffff, 0x4, 0x300, 0x8, 0x91, 0x7, 0x9, 0xfff80000, 0x4, 0xfffffffa, 0x7f, 0x8, 0xe3d, 0x5, 0x8001, 0x7fffffff, 0x1a0, 0xa6, 0x1000, 0x2, 0x4, 0x6, 0x1200000, 0x8000, 0x3, 0xc62f, 0x30c1, 0xe, 0x6, 0xfe6e, 0x69, 0x10001, 0x1a, 0x3, 0x2, 0x7f, 0xfffffffc, 0x11c7, 0x3, 0x5, 0x80, 0x5, 0x1ff, 0x7ff, 0x200, 0x0, 0xe, 0x3, 0x9, 0x3ff, 0x2, 0x3ff, 0x10000, 0xfffffffa], [0x0, 0x5, 0xfffffffe, 0xfc23, 0x4, 0x1, 0x6, 0x442, 0x9, 0x10001, 0xfff, 0xd, 0x3, 0x0, 0xb, 0x3, 0x1, 0x5932, 0x8, 0x1, 0xfffffffd, 0x1, 0x6000, 0x8298, 0x6, 0x7, 0x4e, 0x3, 0x9, 0x10001, 0x6, 0x3, 0x0, 0xef7, 0xffff, 0x0, 0x2, 0x1, 0x3, 0x4, 0xe, 0xc0, 0x7, 0x40, 0x1, 0x566, 0xda, 0x7, 0x967, 0x350f, 0x5, 0x5, 0x5, 0x9, 0x4, 0x1ff, 0x3, 0x8000, 0x5, 0x3, 0x2, 0x2800000, 0x7f], [0x7, 0x0, 0x8, 0x57c, 0x200, 0xd82, 0xa5, 0x8, 0x9, 0x0, 0xd, 0x80, 0x8, 0x1, 0x158, 0x9f29, 0xfae, 0x9, 0x7ce5, 0xff, 0x4, 0x6, 0x6, 0x3, 0x394d06ed, 0x9, 0xff, 0xc4000, 0x5, 0x6, 0x10, 0x7fffffff, 0x81, 0x1, 0x5, 0x4, 0x2, 0x2, 0x7, 0x8000, 0x1ff, 0x2, 0x0, 0x8001, 0x0, 0xfffffff8, 0x47, 0x0, 0xffffffff, 0x6, 0x9, 0x8, 0x7, 0x5, 0x82, 0x6, 0x7, 0x9, 0x0, 0xffff, 0x5, 0x1ff, 0x7, 0xd78], [0x6, 0x5, 0x5, 0x7, 0x5, 0x8001, 0x5, 0x9, 0x7fffffff, 0x8001, 0x2, 0x0, 0xd24, 0x1aacbb23, 0xc91, 0x6, 0xffffffff, 0x13, 0x200, 0x5, 0x3, 0x5, 0x5, 0xd9, 0xe, 0x5, 0xe7aff038, 0x1, 0x6, 0x8, 0x9, 0x8, 0x800, 0x2, 0x10001, 0x6a, 0x5, 0x0, 0x0, 0x4, 0xc8, 0x5, 0x2, 0xff, 0x24, 0x7, 0x9, 0x2, 0x10001, 0xfffffffc, 0x2e, 0xb20c, 0x588, 0x6, 0x10000, 0x6, 0x400000, 0x9, 0x7, 0x85e, 0x6, 0x8, 0x1, 0x80]}, 0x45c) write$uinput_user_dev(r10, &(0x7f0000000e00)={'syz0\x00', {0xb, 0x80, 0x800, 0x7a56}, 0x2f, [0x3, 0x3, 0xc3cd, 0x81, 0x0, 0xf, 0x80000001, 0x19, 0x2, 0x8, 0x6, 0x0, 0x5c8, 0x7, 0x5, 0xc0, 0x2, 0x108c, 0x4, 0x1d4307d1, 0x6, 0x200, 0x4, 0x2, 0x4, 0x40, 0x6, 0xce, 0x101, 0x1, 0x5, 0x4, 0x800, 0x6947, 0x1, 0x86, 0xe817, 0x10, 0x43, 0xc528, 0x80, 0x1ff, 0xffff705d, 0x5, 0x4, 0x8, 0x401, 0x6, 0x8001, 0x66, 0x4, 0xc87, 0x8, 0x9, 0x3, 0x10001, 0x8, 0x1, 0x7, 0x1000, 0x1, 0x0, 0x401, 0x80000000], [0x7a90, 0x800, 0xfff00000, 0x8, 0xf357, 0x0, 0xff, 0x40, 0x8, 0x4, 0x8, 0x7, 0xe18, 0x9, 0x3, 0x5, 0x0, 0xffffa1c4, 0x3, 0x4, 0x6, 0x8b4c2b7, 0x80000001, 0x6, 0x2, 0x5, 0x5, 0x80000000, 0x3, 0x761, 0xc, 0xe1d, 0x7, 0x8000, 0x7, 0x14, 0x6, 0x2, 0x81, 0x6, 0x400, 0x2, 0x1, 0x7, 0x4, 0x2, 0xe39a, 0x4, 0xe, 0x9, 0xe, 0x31cd, 0x1ff, 0xffff3713, 0x2, 0x4, 0x5, 0x8001, 0x7fff, 0x3, 0x4, 0x842, 0xff, 0xfffffffb], [0x1, 0x1, 0x1, 0x5, 0x7, 0x6, 0x7, 0x401, 0x66, 0xc, 0xb, 0x0, 0x80, 0x2, 0x7, 0x2, 0x7, 0x4, 0xff, 0x101, 0x4, 0x6, 0xf654, 0xd, 0x4, 0x800, 0x2, 0x81, 0x8, 0x8, 0x80, 0x6, 0x1, 0xffffffff, 0x6, 0x80000000, 0xfff, 0x2a0, 0xfffffff8, 0x8, 0x0, 0x398, 0xff, 0x7, 0x227ca6e9, 0x2, 0x10001, 0x9, 0x5, 0x8, 0x3, 0x7, 0x1, 0x7fff, 0x8, 0x5b36, 0x6, 0x50, 0x0, 0xa, 0x6, 0xb, 0x6, 0x9], [0x400, 0x2, 0x92a8, 0x4, 0x100, 0x6, 0xffffffff, 0x200, 0x3, 0x8a23, 0xe2da, 0x7fffffff, 0xb, 0x0, 0x8, 0x45, 0x33ef, 0xedf6, 0x8, 0x7fff, 0x4b1f, 0xbab5, 0x9, 0x7, 0x1ff, 0x400, 0x4, 0x9, 0x7f, 0x10000, 0xffffffff, 0x9, 0x8000, 0x3, 0x7, 0x73, 0x3, 0xc, 0x5, 0x1, 0x9, 0x8001, 0x5, 0x5, 0x3, 0x400000, 0x3, 0x7ff, 0x7fff, 0x20, 0x2, 0xf, 0x3, 0x8, 0x5, 0x18000000, 0x3, 0x6dda, 0x9, 0x6, 0x3, 0x1800000, 0xf, 0x7e91f430]}, 0x45c) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001280), 0x802, 0x0) ioctl$UI_SET_SWBIT(r11, 0x4004556d, 0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r12, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r14, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20108408}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r15, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40095}, 0x890) 7m16.709367313s ago: executing program 4 (id=2455): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0xbf, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f00000010c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001100)="934a6e6405eea1227265b187e5d6fdb9545d4dd0d845d24c5e72b06872d428ec79c3a9dfcf21f73611386b856ed22793cc50de0ac9b1424528148dd194326793961e6ecf3d5313ce11aa9a48fe955f8c3568c474644206645202885a7fe638d6bccfd35ca5bd04b9a37229bbd2697c48570e3c2cac2643bbf94e50511206de08b840a5ef677fdf6cd01bc396966773702688049c35f2cfc164510941981033bcdce310fa3e006af6d38008f391ef335a518f9d2cb120d285e1c9bd7973a84e9dacb9b234fd8e588daec82580bbcfef89c03297fb1ae8a7ed94", 0xd9}, {&(0x7f0000001200)="afe7", 0x2}, {&(0x7f0000001240)="0d2533bc4d50698008ff89ef06cbfbd62604d9e745a52c5558284b8bc75729f4fc6f32f550e3d0ba3b148fce7994fac5fd2730d6624452fd7b154339b49dfb04487c1b5668e6df368f382a8637649573d123fcc4075847f99fbf1dbde53d0a19d5df5e31132bf1868de8a8d6d3c377594d0189c6d4ecc044dd1dc9b8c29799ee3165fd551b20eb7a9dcb6107cdf3845f5a8d5198dd4833aace8480d976b9c560bdba21295467a9f7bd3ec6deae07b7634fcf0eb4fc0f19930d8f85b1cf56a5b7f2fbf0116e0392b9d6d372d7da9df4f701440b3170c02f7482eb2d0a7ed6fe83c00201d3d03576bf0e197072201187364beb924fef9f6567", 0xf8}, {&(0x7f0000001340)="86e0952992f893a58830caa529e67b8b7bef44677d3a183d52355761feb263c4b59a47740feace900d12a1c20386498a8776ee7a5adb2a80b4a2716e987428a3156d8068ebfae929bde5c0791f13bca28925fdc106861f139211c389a1a1f7f59570de2a51d8efc43bb55c80a6284df4fd58ebc886e140af7a53f76d781e1b110b45ac56c2c8b1067768f65e25f66503a0b5", 0x92}, {&(0x7f0000001400)="3b013d4228677f5d2b063e3530b96c47083a5c738f13596c1554f252000986163fc784d26c9a8fbe858ed2f945429dd6d11e0c61c8cb20c32e558d1b115c8b0d7c66603317d25594413153590fb159c4ca5deac9362963a19e3ebe9786c62e0cbfecae28168c2fc5105f2b765029cac8db3b52112e5c70812b15edfaf951bbb19695c89857f22ef63228139baeab214b8e34563dbd2c2ae206a5f4b4e8f49804ac1680b1e098838bc000bc32d5149b330c10270f0d2f1f36bef5e37204f6419a82f6031165d354a39c166c8a3af6f6cf2cbadb60e27b4392a02be7fc606bb45055b2d60ae0e1b2d8cf73d8bb5582dfc5f51436ff5d23", 0xf6}, {&(0x7f0000001500)="adea8aa0407154e9f88769bbbaf4d93b399eb73eb18035735657a529079e0f96558d759ac62d3e6b05fe63cbd70df92b3311d8900b235bf59ef897fe5d201da72e65a5bcbd9bebd75be4e04d890ffee0f70d4fb3aa4abc7279bc7b53024df360a238204c9311b4511cf6c7116ad331261e1734514c27ebc7e1160290c084ec03d63dda7e088c1997e9ef4f2047", 0x8d}], 0x6, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3d}}], 0x18}, 0x400) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002c8000/0x2000)=nil, &(0x7f0000842000/0x2000)=nil, 0x2000, 0x1}) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000001080)='./bus\x00', 0x753343, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20040840) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000001040)=0x2, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) 7m1.709384525s ago: executing program 36 (id=2455): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)={0xbf, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) sendmsg$inet(r2, &(0x7f0000001680)={&(0x7f00000010c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001100)="934a6e6405eea1227265b187e5d6fdb9545d4dd0d845d24c5e72b06872d428ec79c3a9dfcf21f73611386b856ed22793cc50de0ac9b1424528148dd194326793961e6ecf3d5313ce11aa9a48fe955f8c3568c474644206645202885a7fe638d6bccfd35ca5bd04b9a37229bbd2697c48570e3c2cac2643bbf94e50511206de08b840a5ef677fdf6cd01bc396966773702688049c35f2cfc164510941981033bcdce310fa3e006af6d38008f391ef335a518f9d2cb120d285e1c9bd7973a84e9dacb9b234fd8e588daec82580bbcfef89c03297fb1ae8a7ed94", 0xd9}, {&(0x7f0000001200)="afe7", 0x2}, {&(0x7f0000001240)="0d2533bc4d50698008ff89ef06cbfbd62604d9e745a52c5558284b8bc75729f4fc6f32f550e3d0ba3b148fce7994fac5fd2730d6624452fd7b154339b49dfb04487c1b5668e6df368f382a8637649573d123fcc4075847f99fbf1dbde53d0a19d5df5e31132bf1868de8a8d6d3c377594d0189c6d4ecc044dd1dc9b8c29799ee3165fd551b20eb7a9dcb6107cdf3845f5a8d5198dd4833aace8480d976b9c560bdba21295467a9f7bd3ec6deae07b7634fcf0eb4fc0f19930d8f85b1cf56a5b7f2fbf0116e0392b9d6d372d7da9df4f701440b3170c02f7482eb2d0a7ed6fe83c00201d3d03576bf0e197072201187364beb924fef9f6567", 0xf8}, {&(0x7f0000001340)="86e0952992f893a58830caa529e67b8b7bef44677d3a183d52355761feb263c4b59a47740feace900d12a1c20386498a8776ee7a5adb2a80b4a2716e987428a3156d8068ebfae929bde5c0791f13bca28925fdc106861f139211c389a1a1f7f59570de2a51d8efc43bb55c80a6284df4fd58ebc886e140af7a53f76d781e1b110b45ac56c2c8b1067768f65e25f66503a0b5", 0x92}, {&(0x7f0000001400)="3b013d4228677f5d2b063e3530b96c47083a5c738f13596c1554f252000986163fc784d26c9a8fbe858ed2f945429dd6d11e0c61c8cb20c32e558d1b115c8b0d7c66603317d25594413153590fb159c4ca5deac9362963a19e3ebe9786c62e0cbfecae28168c2fc5105f2b765029cac8db3b52112e5c70812b15edfaf951bbb19695c89857f22ef63228139baeab214b8e34563dbd2c2ae206a5f4b4e8f49804ac1680b1e098838bc000bc32d5149b330c10270f0d2f1f36bef5e37204f6419a82f6031165d354a39c166c8a3af6f6cf2cbadb60e27b4392a02be7fc606bb45055b2d60ae0e1b2d8cf73d8bb5582dfc5f51436ff5d23", 0xf6}, {&(0x7f0000001500)="adea8aa0407154e9f88769bbbaf4d93b399eb73eb18035735657a529079e0f96558d759ac62d3e6b05fe63cbd70df92b3311d8900b235bf59ef897fe5d201da72e65a5bcbd9bebd75be4e04d890ffee0f70d4fb3aa4abc7279bc7b53024df360a238204c9311b4511cf6c7116ad331261e1734514c27ebc7e1160290c084ec03d63dda7e088c1997e9ef4f2047", 0x8d}], 0x6, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3d}}], 0x18}, 0x400) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002c8000/0x2000)=nil, &(0x7f0000842000/0x2000)=nil, 0x2000, 0x1}) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') open(&(0x7f0000001080)='./bus\x00', 0x753343, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x10000, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20040840) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000001040)=0x2, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) 6m45.465499148s ago: executing program 6 (id=2891): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0x5, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x2, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x5, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x80000009, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x7ff, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0xc, 0x86, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000007, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xff, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x8, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x8401, 0x1, 0x200, 0x7, 0x8, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x6, 0x1, 0x30}, @fda={0x66646185, 0x4, 0x0, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m45.320584162s ago: executing program 6 (id=2892): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7b}]}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r3}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0xa036, 0x7fffffffffffffff, 0x8}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x5, 0x0, 0x19}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) 6m45.197353544s ago: executing program 6 (id=2893): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x1) faccessat2(0xffffffffffffff9c, 0x0, 0x3, 0x300) read$FUSE(r0, &(0x7f00000042c0)={0x2020}, 0x2020) 6m44.675602925s ago: executing program 6 (id=2897): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mprotect(&(0x7f0000754000/0x4000)=nil, 0x4000, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000000f7ffff000100000000003f621b9a0534d9be0000"], 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') 6m44.588706913s ago: executing program 6 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 6m33.574183357s ago: executing program 6 (id=2901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0x12, 0x20, "b894412ba1addb7d7d5b04002a960311bf1b8a5fc68b6ba3a98e6fff7724a62d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffef, r6, 0x201, 0x40400000, 0xfffffffe, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4900}, 0x4040) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) pipe2$9p(&(0x7f00000003c0), 0x4800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x8, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x10) close(r0) 6m29.54321466s ago: executing program 37 (id=2901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x20, 0x12, 0x20, "b894412ba1addb7d7d5b04002a960311bf1b8a5fc68b6ba3a98e6fff7724a62d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x40, 0x12, 0x1, "ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xffffffffffffffef, r6, 0x201, 0x40400000, 0xfffffffe, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4900}, 0x4040) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r7) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) pipe2$9p(&(0x7f00000003c0), 0x4800) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x8, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x10) close(r0) 5m23.587926647s ago: executing program 8 (id=3796): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e27, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f0000000b40)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb425705d6cdbb4a07ea786417aac814e03e5d80b297abe644830816977ccba1f493", 0x5a}], 0x3}}], 0x1, 0x8040) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 5m23.520298294s ago: executing program 8 (id=3797): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000)=0x81, 0x4) r1 = socket$tipc(0x1e, 0x7, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80, 0xc, 0xc}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000300)=0xe8) setreuid(r4, r6) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x4, 0x6, 0x280000, @vifc_lcl_addr=@local, @local}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x7}, 0x4) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getgroups(0x5, &(0x7f0000000440)=[0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee00]) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4000, &(0x7f0000000480)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x100}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@subj_role={'subj_role', 0x3d, '*\\\\]'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) sendto$inet(r7, &(0x7f0000000600)="6fadcd21206bdf744beb22471dddafe5ff3119c86bbc40e20cf1b6c569d31c6c478b54ffe73cae857d212138f68008f0a628253b65958398736d4c1694c6d32e77902f2b8515a0a47b4a67f497f18de66cd371b5817911359eb18ab7d0cb6f795eae60de890d88b32aea701354932a2a3d0159f39953fc8c9b9a379960c8ee844c07745cab23d9f2e5a357fd1875d6202b1847510d2e2f0505f2dee248783077ac497ae847f221bde4e50002373485cd62c5dc2661dd0957a9c15e1027804373f418e1ced9e9cad334f99a565bbcec1559ab4a86303982a1e0bb595fcdb0", 0xde, 0x80c1, 0x0, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x200400c1) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs2/binder0\x00', 0xc03, 0x0) r13 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r14 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000c40)={0xdc, 0x0, &(0x7f0000000b00)=[@clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000940)={@flat=@weak_handle={0x77682a85, 0x101}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f00000009c0)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}, @enter_looper, @free_buffer={0x40086303, r13}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a40)={@fda={0x66646185, 0x5, 0x1, 0x1}, @fd={0x66642a85, 0x0, r14}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}}, &(0x7f0000000ac0)={0x0, 0x20, 0x38}}, 0x400}, @clear_death], 0x35, 0x0, &(0x7f0000000c00)="7d2e754a950e6707b12340499f977faa40d9965db913b78cb32971bf6ed6842aef8942305c7bbfac94a58be51dc11ded05bc63ca21"}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000e40)=0x0) r16 = syz_clone(0x2111480, &(0x7f0000000e80)="55d213750a19892ca43c1c8548d8fe0fa33b9e97e7cfbbd6a714a51dc50b8c43aff28e748c816b860c2af5738b1bc3ed55a41b02c832b7c839c21d4b95b3389137a008cd724cada82ec4d9c36de4468717b7a800fb27a4a77a11391e865b7b345ac81984045a7a", 0x67, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)="ee1f99dbbf0c877c2b59d49ac6d7b832b7d0") r17 = syz_clone(0x200000, &(0x7f0000000fc0)="179ccbd2880f65b9db7f1bf58cffe414f03bdafdf56916f2d3835e556667f9f8ed519eae2c1d57814a53ea96083f7cef93f3f1cb10a958f20c32ea19940ee2cf318170d2670472287168aab9de969a026d3e68d4b3547d5c4bfb270bc7be5598df73681674d7afd6d7f9bf3c9419dc517447d423bd808d8d7160eb1d0f0aa0ca6fb08e50021bf1102175235f1a3cc7a4b68d9d34df801c0ea13f9afbfdbeec26b4ef39ed893c6ccb23f4564b6b4ee30b4e5b309fb0fcdf057579472caf1133a2c8951c57a6482083c9c68f86e579284f5e1203b5d6601f6203e302d05b509d1764b4055a5a53973f93365ac1f88ec5", 0xef, &(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)="ab2803a52e968c7d5505829e37f48021ef86ad725eee1c6b81147f6e795b4f200ad60db9a1b84f3684d0d3fc7105070eeab8a5a065626acfacf2a9d30c5ccf3f23963fb8e2af8cfe79c9342b16a684a0b6343b6aa8280232e5c847d2a7c66e835af32f413d899c18fbaada155a56479613c94df175726b62075ff22d90ed") ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000011c0)=0x0) r19 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001240)='/sys/kernel/kheaders.tar.xz', 0x4c2201, 0xc0) syz_clone3(&(0x7f0000001280)={0x8100000, &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00), {0x2a}, &(0x7f0000000d40)=""/68, 0x44, &(0x7f0000000dc0)=""/88, &(0x7f0000001200)=[r15, r16, r17, r18], 0x4, {r19}}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fstat(r2, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0}) r22 = geteuid() lsetxattr$system_posix_acl(&(0x7f0000001300)='./file1\x00', &(0x7f0000001340)='system.posix_acl_default\x00', &(0x7f0000001580)={{}, {0x1, 0x2}, [{0x2, 0x0, r20}, {0x2, 0x4, r4}, {0x2, 0x7, r21}, {0x2, 0x2, r4}, {0x2, 0x6, r6}, {0x2, 0x0, r4}, {0x2, 0x5, r4}, {0x2, 0x3, r22}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x7, r9}, {0x8, 0x2, r10}, {0x8, 0x3}, {0x8, 0x3, r10}, {0x8, 0x5, r8}], {0x10, 0x4}, {0x20, 0x6}}, 0x94, 0x1) 5m23.487226737s ago: executing program 8 (id=3798): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x800, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) (async) mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x800, 0x0) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) (async) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) (async) 5m23.296370925s ago: executing program 8 (id=3800): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000480)='./bus\x00', 0x121) write$FUSE_INIT(r3, &(0x7f00000006c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1007, 0x7, 0x3, 0x0, 0x0, 0x40}}, 0x50) syz_usb_connect$uac1(0x6, 0xea, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x1, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x8}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x5], 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x7, 0x9}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x3, 0x6, [0x3, 0x2, 0x8, 0x4, 0x4, 0x7], 0x8}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x3, 0x2, [0x4, 0x9], 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0x5, "16d7f8"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x303, 0x2, 0x6, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x3, 0x7, 0xff, "b2bcaa69"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf4, 0x1, 0x6, 0x4, "5304"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xe5, 0xdb, 0x1, {0x7, 0x25, 0x1, 0x0, 0x1, 0x101}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb, 0xc0, 0x2676ab902d9711f6}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0xe, 0xd, "06", "6f82"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0x26, 'h'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x7, 0x1, "88"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x5, 0x2, {0x7, 0x25, 0x1, 0x2, 0x33, 0x594c}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x9, 0x3, 0x40, 0x80}, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="050f1600020a100300293a1e53b4de185cedf73f9be75e2af0a8c0ef4bf2ac5e2c99b029de6ebcf407934ac51bf48ba8d8ff87574280f4e039215018dbff52ea9bc9317ae6cfbe62f0a12017d56ae7a33163ebcb9abcaa8894b56caa50c761de55c061a3a1571f49c12dbf3f6e6337cf2d8bb9e3e7c299746870ba73cbcc3bbf8e4b290597ccf825ec68648df3fd1a2af57d98fec9a18ed8bd7c51f07e47470b4a8d79866a4415e156b734597688b9c6318e3eb8bdef631e68ba920b40aec156ac7cdd39f1139f07a8904fc6faa2eed49544db310a"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}]}) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000440)={0x18, 0x1, 0x0, {0x3ff}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 5m22.648418428s ago: executing program 8 (id=3815): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in=@empty, 0x0, 0x8, 0x1, 0x4, 0xa, 0x0, 0x20}, {0xbd1, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x33}, 0x0, @in=@multicast1, 0x1, 0x0, 0x0, 0x1, 0xf0, 0x0, 0x10000}}, 0xe8) getresgid(&(0x7f0000002e00), 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0) mmap(&(0x7f00001ab000/0x2000)=nil, 0x2000, 0x1000002, 0x11012, r0, 0x108000) r2 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000000)=""/96) syz_usb_connect(0x2, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904580801"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2a, 0x0}]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r5, 0x4024700a, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) 5m22.376733025s ago: executing program 8 (id=3818): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) 5m22.362954177s ago: executing program 38 (id=3818): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) 4.016276245s ago: executing program 9 (id=9482): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x125799ed50544808, 0x0) 4.015564105s ago: executing program 9 (id=9484): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) syslog(0x300, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x300, 0xca, 0x8c, 0xa2, 0x10, 0x2a39, 0x3f8c, 0xdb4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x8, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0xff, 0xc8, 0x8f, 0x80, [], [{{0x9, 0x5, 0x3, 0x4, 0x0, 0x10, 0x65, 0xa}}]}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r1, 0xb075b000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x1000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r4, &(0x7f0000000240)={0x1, 0x2, 0x2, 0x1}, 0x8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x100010, r3, 0x52ed4000) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2.585491156s ago: executing program 9 (id=9509): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) socket(0x1f, 0x0, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000c280)="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", 0x2000, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000340)={0x30, 0x5, 0x0, {0x0, 0x1, 0x8}}, 0x30) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f00000000c0)={0x18, 0x4, 0x9}) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x4, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x108044}], 0x1) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) read(r1, &(0x7f0000000040)=""/32, 0x20) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0xb) 1.738462369s ago: executing program 9 (id=9518): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000002000)=ANY=[@ANYBLOB="71ab69b3", @ANYRESDEC, @ANYRESDEC=r0], 0x28) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "f67690c9da635b19", "0003c0f47c22ea0cc30c486b5cef55e4", "13f0de3d", "8acb4d05cbf91285"}, 0x25) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x23000009) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xd, &(0x7f0000000080)=0xfffffff6, 0xffffffffffffff4c) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000340)="05030006e8fe", 0x6, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r8}, 0x14) recvfrom$packet(r6, 0x0, 0x0, 0x40, 0x0, 0x0) sendfile(r2, r5, 0x0, 0xa26) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000180)={0xfffb, [0x5, 0x7ff], 0x7}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x700, 0x20, 0x9, 0x1, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x64, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @private=0xa010102, {[@timestamp_prespec={0x44, 0x2c, 0x8c, 0x3, 0x1, [{@local, 0x3}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, {@rand_addr=0x64010101, 0x1000}, {@loopback, 0x4}]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)) 1.643949648s ago: executing program 9 (id=9521): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000004100)='/proc/tty/ldiscs\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) write$binfmt_aout(r3, &(0x7f00000007c0)=ANY=[], 0x120) read$FUSE(r3, &(0x7f0000004580)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x14, r4, 0x309, 0x2, 0x25dfdbfc, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008915}, 0x20040000) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xce, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x129, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r7}]}]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @fd=r7}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f", @nested={0x4, 0xb8}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0xc, 0xa13ca8e5839881ac, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) execve(&(0x7f00000020c0)='./file0\x00', &(0x7f0000002280)={[&(0x7f0000002100)='/dev/ttyS3\x00', &(0x7f0000002140)='&\'\':\x00', &(0x7f0000002180)='m+&]-\x00', &(0x7f00000021c0)='/proc/tty/ldiscs\x00', &(0x7f0000002200)='((]}{#\x00', &(0x7f0000002240)='ethtool\x00']}, &(0x7f0000002300)={[&(0x7f00000022c0)='+[&\x9c\xcd(]\x00']}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r8, 0x5441, 0x1) 840.655397ms ago: executing program 1 (id=9528): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) (async, rerun: 64) listen(r2, 0x3) (async, rerun: 64) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000240)) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r0, 0x66053000) 840.282727ms ago: executing program 1 (id=9529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x3}}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)={0x40, 0x5, 0x2, "2bd8"}}) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000240)) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) 823.394659ms ago: executing program 9 (id=9532): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async, rerun: 64) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') (rerun: 64) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) syz_clone(0x100a0200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$cgroup_int(r2, &(0x7f0000000180), 0x12) (async, rerun: 64) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (rerun: 64) 388.609021ms ago: executing program 2 (id=9545): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000b80)="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", 0x5ad, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2}, 0x1c) (async) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xf, 0x4) (async) read(r0, &(0x7f0000000040)=""/244, 0xf4) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x151402, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 384.685662ms ago: executing program 2 (id=9546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) setresuid(0xee01, 0xee00, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000740)=0xc) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) connect$bt_l2cap(r5, &(0x7f00000001c0)={0x1f, 0x80}, 0xe) (async) syz_clone3(&(0x7f0000000480)={0x200000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x2b}, &(0x7f0000000380)=""/164, 0xa4, &(0x7f00000002c0)=""/25, &(0x7f0000000440)=[0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) (async) r8 = socket$packet(0x11, 0x2, 0x300) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r8, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2}]) (async) r10 = getpgrp(0x0) (async) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) (async) r12 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) (async) r13 = fsmount(r12, 0x0, 0x88) r14 = openat$cgroup(r13, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r15 = openat$cgroup_type(r14, &(0x7f0000000100), 0x2, 0x0) preadv(r15, &(0x7f0000000300)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x2, 0x4) (async) syz_clone3(&(0x7f00000006c0)={0x1004000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000780), {0x3d}, &(0x7f00000000c0)=""/146, 0x92, &(0x7f00000001c0)=""/51, &(0x7f00000005c0)=[r6, r7, r10], 0x3, {r11}}, 0x58) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308, 0x3}], 0xffffffffffffffaa, 0x1000000000000, 0x0}) 383.232102ms ago: executing program 2 (id=9547): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44b182, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r4], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x2f, 0x2, 0x7, 0xc30, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x8, 0x10, 0x4, 0xd}}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_RELEASEINTERFACE(r7, 0x80045510, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="111426bd7000fbdbdf252189240000080800dc0001000000dc00af0a"], 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x24008812) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 348.959495ms ago: executing program 2 (id=9548): umount2(&(0x7f00000003c0)='./cgroup\x00', 0xd) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) 338.480396ms ago: executing program 2 (id=9549): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) syslog(0x3, &(0x7f00000011c0)=""/234, 0xea) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)=@newsa={0x10c, 0x10, 0x100, 0x70bd2b, 0x25dfdbfb, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x2, 0x2, 0x80, 0x80, 0x4e, r2, r3}, {@in=@empty, 0x4d4, 0x33}, @in6=@loopback, {0x1000, 0x4, 0x7, 0x3, 0xfffffffffffffffd, 0xc, 0x6, 0x5}, {0xffffffffffffffff, 0x3, 0x3}, {0x101, 0x1619, 0x8000}, 0x70bd2d, 0x3501, 0x2, 0x4, 0xfd, 0x4}, [@proto={0x5, 0x19, 0x32}, @mark={0xc, 0x15, {0x350759, 0x6}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000000)="72d7201ced66ea6855f71efea5b114ce325dc4b27bce098e07db4b8d723887d3387f0ce3bc64ce187c21a31e19a1ce1f5f949b5aae9cb5025badb61885330df11c7d6dd42eef35a56dcdc6e8b35575b2667fe420a95c1f264305174b91fd952c93", 0x61}, {&(0x7f0000000080)="4b8dff2179cbbcca996177eb40c3d71801f67394c9e2605da4075a3af3a53b8cb0ef4de495d72d32eef1fbb5541ff69b7cff5a8541406027dba85884a0088bd3", 0x40}], 0x3, 0xfffff000, 0x7, 0x8) 272.674443ms ago: executing program 1 (id=9550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, 0x0) 272.340513ms ago: executing program 1 (id=9551): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000a4}, 0x40c1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000004080)={[{@workdir={'workdir', 0x3d, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 271.692043ms ago: executing program 2 (id=9552): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES16=r2]) read$FUSE(r2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000001c0)={0x3, 0x0, [{0x80000001, 0x6, 0x4, 0xc7, 0x6a6, 0x8, 0x7fff}, {0x80000007, 0x1, 0x5, 0x100, 0x1, 0x0, 0x47e735c3}, {0xb, 0x800, 0x4, 0x8, 0xfffffff6, 0xe, 0x4}]}) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f0000000240)=@nfc_llcp, 0x80, &(0x7f0000000a40), 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x7}, {{&(0x7f0000000b00)=@isdn, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000600)=""/139, 0x8b}, 0xbe4}, {{&(0x7f0000000fc0)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000003380)=[{0x0}, {&(0x7f00000031c0)=""/217, 0xd9}, {&(0x7f00000032c0)=""/163, 0xa3}, {&(0x7f0000000f80)=""/49, 0x31}, {&(0x7f0000001040)=""/37, 0x25}], 0x5, &(0x7f0000003400)=""/77, 0x4d}, 0x404}], 0x4, 0x2000, &(0x7f0000003700)={0x77359400}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) fcntl$setstatus(r0, 0x4, 0x4400) r4 = socket$inet6(0x10, 0xc819221c8db11f7f, 0x7ffffffe) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r4, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000300)="0290edf54bb8bfc324466a4c20cbdc3a67695d7dafcf779eaddb25766cdda04df701308ff7aa721faea7b1a659851664f771c8628320264a46f96f16d55723a3bf486bf200215dc27ca76ae737ef6a267f9ca5bb3e84122c832500c9ba7ae2749ac07a30eca961cc494354d249936217e97e1c68883d57228db20a8b466a8ef61dcc87dd24b7e0e284771b5f71f7823d797c037bda5f304cc722333c647a36978065b0a2d30db4a91550c54d1973334346aa861bb0ae3e1dbece88cccccc854e5ac6729cdf8140", 0xc7, 0x810, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @broadcast}, {0x50d, @link_local}, 0x60, {0x2, 0x4e22, @local}, 'pim6reg1\x00'}) write$P9_RGETLOCK(r7, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r6, 0x407, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff00", 0x5}]) 250.161155ms ago: executing program 1 (id=9553): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x10, r1, 0xbb624000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'wg0\x00', 0x2}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0xc080) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0xa1a}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4806}, 0xc010) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x3000200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xaa08}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100400}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x127}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040810}, 0x4800) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000600)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x7, 0x40, 0x4, 0x5, {{0x1e, 0x4, 0x3, 0x1, 0x78, 0x65, 0x0, 0xc9, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1f, 0xa8, [@remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x83, 0x3, "e8"}, @generic={0x82, 0xb, "c59fccd63b780608e7"}, @generic={0x82, 0xc, "3045ddedcaa4221bfcf1"}, @ssrr={0x89, 0xf, 0xee, [@broadcast, @empty, @local]}, @timestamp={0x44, 0x18, 0xb3, 0x0, 0xd, [0x4, 0x5, 0x97, 0x4, 0x7]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000000c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000740)={0x498, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x3d8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "597eab73377d51bd40f6483e615221b3c2b9bedc1ca3e652336c349ed64df8ea093c78b8b6aa727c0d63144f160e8860cba96fa3472369c99ed12ee270c48942a91c43b84e531ba9a2afd3b2f0f5ffc7c43fcaa480a25d7aea54fa73b5b70bfc097a5aff97fc92de5245d04c46933fa0c88724f76fb5d45df0dcdcecbf01fc13f1d2df001321c219bdc2b240edfa593fa2962a03343347a6047d72a3d208a3c5c1f80b8283abaa28205cb12c02bf7f27253def4059e7864a769c83cb1217c54500d76d6c0cf5e96073201b94fa6a88cca61b69de3b30434062322ea8f3c2c7d26cc32140049e2b2a0c3162d2035ec83d59891f6f"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa224}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/*-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xde0c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-()[^\xe9\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!)]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa2, 0x5, "eaf52ab2dfb52f727b3ea666dac1bb9b4d6e052985749cb5406f28e394b5775181daea0bae9da78184a7bf220f3e396cb8bfebd12e8103a18411aead819a02e91399c602c27704b24036b62e5cb95e83120b3b6c9f5ef185c710ea201f3302b4c08fbccf6bb91a1a0677c7b37e7af50d6e5e34a2c709c40f4bf5d8b64c61a03d07582446f48b0269cb8efe37c388a6eaa396fa83c433b47111432265510f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x134, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf31c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\'.'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'l2tp\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x39d}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '\'.#(!!:+,).()\'}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x23e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xda37}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x1801}, 0x2804888a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x1bc, r8, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9bd1ee16486ed6411df647404d5ae227287101053fcffecc"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da2486778522c9ac912f9a552f26a643eba4665bcd361f"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50fafd309b0064444fc0fc4a89593030249edf412022f9ce"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d2236b03752b8f11fce6bf483c61669f15624260a7c82b8b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "58f3646aa70ba077e06d880c46189b0129351fdaceb51701"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'syztnl2\x00', &(0x7f0000000fc0)={'syztnl1\x00', r7, 0x4, 0x5, 0x3, 0x3c6d5c28, 0x8, @mcast1, @local, 0x91, 0x700, 0x7fffffff, 0x2}}) getpeername$packet(r0, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000010c0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000001240)={{r1}, "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"}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000002240)={0x3, 0x2}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0xbc, r12, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x400, 0x75}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5a80d5debcf49c9ca284649acb4e84007391052cc2b7096d"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5550bd6a936cba81e19765f20f164b0a14c7eb6527bd1b9b"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x200080c1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r4) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x94120801}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x38, r13, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20008850}, 0x4090) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f0000002800)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002600)={0x194, r14, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xf, 0x4, "df201deafe99fa6b6a6274"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x12c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xa1),,$:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '(-^*\xbc-.\\,:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-()[^\xe9\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '::#&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "ac14d1e8033a8dd6975fd90bd621c281a27120ed479e143727628c0b671423aa430d76752a6629f6227721c27b6896d1e3c2c2ff2600d672c0a733fbc345b51cebbfbbc7e4caefa1f02fa1fb4fb0c0f1f7eaf0"}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "158f8df5fb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x8015}, 0x404c081) socket$packet(0x11, 0x3, 0x300) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002a00)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x108, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0xd8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0xa14df7d61cf81fe5}, 0x80) 210.717729ms ago: executing program 1 (id=9554): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80400, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2f) setresuid(r2, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, 0x0) r5 = syz_pidfd_open(r1, 0x0) setns(r5, 0x24020000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe2(&(0x7f0000000440), 0x4800) umount2(&(0x7f0000000040)='.\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f00000002c0)) openat$incfs(r6, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) r7 = syz_open_procfs$userns(r1, &(0x7f0000000140)) mount_setattr(r6, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={0x100003, 0x80, 0x80000, {r7}}, 0x20) r8 = getpid() getpriority(0x2, r8) capget(&(0x7f00000003c0)={0x20071026, r8}, &(0x7f0000000400)={0x40, 0x8, 0xff, 0xe, 0x100, 0x7}) 48.743805ms ago: executing program 7 (id=9555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4, 0x2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 48.486955ms ago: executing program 7 (id=9556): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8000, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file2\x00', 0xf1) renameat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00') r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='environ\x00') read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080), 0x2, 0x0) sendfile(r4, r4, 0x0, 0xc) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) memfd_secret(0x0) read$watch_queue(r2, &(0x7f0000000140)=""/61, 0x3d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 48.158375ms ago: executing program 7 (id=9557): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000180)={[{@grpquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x70, 0x30, 0x38]}}, {@huge_never}, {@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x2d, 0x31, 0x39, 0x30, 0x2f, 0x2f, 0x31, 0x34, 0x35]}}}}, {@inode32}, {@inode32}, {@inode32}], [{@uid_eq={'uid', 0x3d, r0}}]}) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) (async) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000001180)='stat\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x7d4) 45.352095ms ago: executing program 7 (id=9558): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="082b0000000000000025fe320000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000000)) 34.182536ms ago: executing program 7 (id=9559): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x2000c800) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dda865694e08605b702200000018000180140002006970365f7674693000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) inotify_init() (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x7}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async, rerun: 32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x9, 0x10, 0x6, 0x2}, {0x6, 0x0, 0x0, 0x7fc00100}]}) (async, rerun: 32) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={r7, 0x2, r6}) 0s ago: executing program 7 (id=9560): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1433bb29160051ecad6408243e647dfaf23300000000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x0, 'pimreg\x00', {0x3}, 0x3fc}) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000140)=0x2, 0x4) mount$9p_fd(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000000), 0x1815880, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@ignoreqv}, {@noxattr}, {@version_L}], [], 0x6b}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="100006000000000020"], 0x54, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) stat(&(0x7f0000007080)='./file0\x00', 0x0) r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000080)) sendfile(r8, 0xffffffffffffffff, 0x0, 0xffffffff) kernel console output (not intermixed with test programs): inder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:738 [ 544.033947][T25059] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 544.046776][T25059] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 544.057876][T25059] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:740 [ 544.487321][T25071] rust_binder: Error while translating object. [ 544.496754][T25071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 544.503504][T25071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:749 [ 544.536791][T25078] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 544.573800][T25080] netlink: 580 bytes leftover after parsing attributes in process `syz.1.8342'. [ 544.593315][T25082] binder: Bad value for 'defcontext' [ 544.600075][T11547] bridge_slave_1: left allmulticast mode [ 544.608844][T11547] bridge_slave_1: left promiscuous mode [ 544.620710][T11547] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.663922][T11547] bridge_slave_0: left allmulticast mode [ 544.683484][T11547] bridge_slave_0: left promiscuous mode [ 544.689214][T11547] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.729042][T25090] netlink: 316 bytes leftover after parsing attributes in process `syz.7.8345'. [ 544.758158][T25094] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 544.930694][T11547] veth1_macvtap: left promiscuous mode [ 544.936448][T11547] veth0_vlan: left promiscuous mode [ 544.983622][ T31] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 545.123674][ T31] usb 8-1: device descriptor read/64, error -71 [ 545.383564][ T31] usb 8-1: device descriptor read/64, error -71 [ 545.643685][ T31] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 545.693664][T25109] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 545.693777][T25109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:44 [ 545.765135][T25112] rust_binder: Write failure EINVAL in pid:17 [ 545.774249][ T31] usb 8-1: device descriptor read/64, error -71 [ 546.023481][ T31] usb 8-1: device descriptor read/64, error -71 [ 546.133959][ T31] usb usb8-port1: attempt power cycle [ 546.245930][T25128] binder: Bad value for 'max' [ 546.368029][T25141] overlay: Unknown parameter 'euid<00000000000000000000' [ 546.483499][ T31] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 546.504951][ T31] usb 8-1: device descriptor read/8, error -71 [ 546.644651][ T31] usb 8-1: device descriptor read/8, error -71 [ 546.753527][ T329] usb 10-1: new low-speed USB device number 56 using dummy_hcd [ 546.883527][ T31] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 546.903511][ T329] usb 10-1: Invalid ep0 maxpacket: 64 [ 546.904696][ T31] usb 8-1: device descriptor read/8, error -71 [ 547.033502][ T329] usb 10-1: new low-speed USB device number 57 using dummy_hcd [ 547.054540][ T31] usb 8-1: device descriptor read/8, error -71 [ 547.163610][ T31] usb usb8-port1: unable to enumerate USB device [ 547.183557][ T329] usb 10-1: Invalid ep0 maxpacket: 64 [ 547.189085][ T329] usb usb10-port1: attempt power cycle [ 547.245323][T25151] binder: Bad value for 'stats' [ 547.314819][T25156] fuse: Unknown parameter '' [ 547.349023][T25158] rust_binder: Error while translating object. [ 547.349074][T25158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 547.355541][T25158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 547.543475][ T329] usb 10-1: new low-speed USB device number 58 using dummy_hcd [ 547.573912][ T329] usb 10-1: Invalid ep0 maxpacket: 64 [ 547.623507][ T5673] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 547.707496][ T329] usb 10-1: new low-speed USB device number 59 using dummy_hcd [ 547.741248][ T329] usb 10-1: Invalid ep0 maxpacket: 64 [ 547.746955][ T329] usb usb10-port1: unable to enumerate USB device [ 547.785063][ T5673] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 547.798008][ T5673] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.808187][ T5673] usb 2-1: config 0 has no interfaces? [ 547.813709][ T5673] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 547.822973][ T5673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.831932][ T5673] usb 2-1: config 0 descriptor?? [ 548.038965][T25160] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 548.039287][ T5673] usb 2-1: USB disconnect, device number 9 [ 548.077369][T25190] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 548.077397][T25190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:787 [ 548.324820][T25219] rust_binder: Error while translating object. [ 548.334159][T25219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 548.340367][T25219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:796 [ 548.445178][T25225] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 548.454391][T25225] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:803 [ 548.747714][T25240] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 548.983564][T25258] rust_binder: 96: no such ref 3 [ 548.988574][T25258] rust_binder: 96: no such ref 1 [ 549.004491][T25258] rust_binder: Write failure EFAULT in pid:96 [ 549.545517][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8407'. [ 549.573477][ T10] usb 8-1: new full-speed USB device number 87 using dummy_hcd [ 549.734556][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.745612][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.756961][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.767981][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.776188][ T10] usb 8-1: Product: syz [ 549.780617][ T10] usb 8-1: Manufacturer: syz [ 549.785653][ T10] usb 8-1: SerialNumber: syz [ 549.999376][T25321] sock: sock_timestamping_bind_phc: sock not bind to device [ 550.195711][ T10] usb 8-1: 0:2 : does not exist [ 550.404247][ T10] usb 8-1: USB disconnect, device number 87 [ 550.551018][T25329] support for the xor transformation has been removed. [ 550.583565][T25333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 550.981540][T25336] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 550.990699][T25336] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:820 [ 551.025945][T25341] random: crng reseeded on system resumption [ 551.085737][T25341] rust_binder: 825: no such ref 2 [ 551.090837][T25341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:825 [ 551.163484][T24905] Bluetooth: hci0: command 0x1003 tx timeout [ 551.163484][ T2181] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 551.220676][T25345] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 551.220711][T25345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 551.229051][T25345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:829 [ 551.242500][T25354] /dev/rnullb0: Can't open blockdev [ 551.314199][ T36] audit: type=1400 audit(551.455:151227): avc: denied { map } for pid=25355 comm="syz.7.8435" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 551.425046][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 551.432605][T25367] binder: Bad value for 'max' [ 551.593504][ T10] usb 8-1: new full-speed USB device number 88 using dummy_hcd [ 551.663534][ T31] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 551.744538][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.754757][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.765287][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.774390][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.782405][ T10] usb 8-1: Product: syz [ 551.786615][ T10] usb 8-1: Manufacturer: syz [ 551.791227][ T10] usb 8-1: SerialNumber: syz [ 551.823464][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 551.830055][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.840389][ T31] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.850894][ T31] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.860098][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.868251][ T31] usb 10-1: Product: syz [ 551.872517][ T31] usb 10-1: Manufacturer: syz [ 551.877308][ T31] usb 10-1: SerialNumber: syz [ 552.068557][T25376] netlink: 'syz.2.8443': attribute type 11 has an invalid length. [ 552.085769][T25369] rust_binder: Error while translating object. [ 552.085837][T25369] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 552.092119][T25369] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:55 [ 552.102610][T25369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.120227][T25369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.198003][ T10] usb 8-1: 0:2 : does not exist [ 552.379118][T25398] SELinux: truncated policydb string identifier [ 552.385627][T25398] SELinux: failed to load policy [ 552.404658][ T31] usb 10-1: 0:2 : does not exist [ 552.412193][ T10] usb 8-1: USB disconnect, device number 88 [ 552.420671][ T31] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 552.442716][ T31] usb 10-1: USB disconnect, device number 60 [ 552.465969][T24260] udevd[24260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 552.753468][ T31] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 552.903527][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 552.910055][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.920392][ T31] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 552.931444][ T31] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.942466][ T31] usb 10-1: config 1 interface 2 has no altsetting 0 [ 552.950612][ T31] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 552.959809][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.967930][ T31] usb 10-1: Product: syz [ 552.972200][ T31] usb 10-1: Manufacturer: syz [ 552.977269][ T31] usb 10-1: SerialNumber: syz [ 552.987695][ T36] audit: type=1400 audit(553.125:151228): avc: denied { nlmsg_read } for pid=25400 comm="syz.7.8451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 553.149493][T25414] rust_binder: Error in use_page_slow: ESRCH [ 553.155677][T25414] rust_binder: use_range failure ESRCH [ 553.155729][T25414] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 553.161405][T25414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 553.170072][T25414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:850 [ 553.191156][T25398] rust_binder: Error while translating object. [ 553.191221][T25398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 553.197507][T25398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67 [ 553.209618][ T31] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 553.226691][ T31] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 553.235277][ T31] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 553.243377][ T31] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 553.251352][ T31] usb 10-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 553.259901][ T31] usb 10-1: found format II with max.bitrate = 3, frame size=7 [ 553.267661][ T31] usb 10-1: selecting invalid altsetting 0 [ 553.273731][ T31] usb 10-1: selecting invalid altsetting 0 [ 553.284952][ T31] usb 10-1: USB disconnect, device number 61 [ 553.297622][T24270] udevd[24270]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 553.483462][ T2181] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 553.483470][T24905] Bluetooth: hci0: command 0x1003 tx timeout [ 554.163529][ T329] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 554.174800][T25441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 554.174832][T25441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:861 [ 554.314570][ T329] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.329392][ T329] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 554.344579][ T329] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 554.353879][ T329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.362105][ T329] usb 10-1: Product: syz [ 554.367013][ T329] usb 10-1: Manufacturer: syz [ 554.371731][ T329] usb 10-1: SerialNumber: syz [ 554.516896][T25468] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 554.695078][T25489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8477'. [ 554.787550][ T329] usb 10-1: 0:2 : does not exist [ 554.834165][T25489] kthread_run failed with err -4 [ 554.863489][ T5673] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 554.991470][ T329] usb 10-1: USB disconnect, device number 62 [ 554.999898][T24260] udevd[24260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 555.023472][ T5673] usb 2-1: Using ep0 maxpacket: 8 [ 555.029614][ T5673] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 555.037915][ T5673] usb 2-1: config 0 has no interface number 0 [ 555.044141][ T5673] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 555.055821][ T5673] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 555.066886][ T5673] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 555.078121][ T5673] usb 2-1: config 0 interface 200 has no altsetting 0 [ 555.086513][ T5673] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 555.095832][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.103942][ T31] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 555.111531][ T5673] usb 2-1: Product: syz [ 555.115781][ T5673] usb 2-1: Manufacturer: syz [ 555.120433][ T5673] usb 2-1: SerialNumber: syz [ 555.126072][ T5673] usb 2-1: config 0 descriptor?? [ 555.131316][T25477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 555.273472][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 555.280001][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 555.291207][ T31] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 49361, setting to 1024 [ 555.302662][ T31] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 555.312944][ T31] usb 8-1: config 8 interface 0 has no altsetting 0 [ 555.330179][ T31] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 555.343349][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.351679][ T31] usb 8-1: Product: syz [ 555.357178][ T5673] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input73 [ 555.370108][ T31] usb 8-1: Manufacturer: syz [ 555.375895][ T31] usb 8-1: SerialNumber: syz [ 555.376491][ C0] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 555.382643][ T5673] usb 2-1: USB disconnect, device number 10 [ 555.387673][ C0] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 555.402653][T25493] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 555.526486][T25528] SELinux: security_context_str_to_sid () failed with errno=-22 [ 555.530403][T25527] SELinux: security_context_str_to_sid () failed with errno=-22 [ 555.613605][T25493] rust_binder: Error while translating object. [ 555.613645][T25493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 555.633693][T25493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:902 [ 555.646156][ T31] usb 8-1: selecting invalid altsetting 0 [ 555.681014][ T31] usb 8-1: USB disconnect, device number 89 [ 555.696611][T24270] udevd[24270]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 555.742623][T25531] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.749715][T25531] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.756833][T25531] bridge_slave_0: entered allmulticast mode [ 555.763092][T25531] bridge_slave_0: entered promiscuous mode [ 555.769987][T25531] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.777183][T25531] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.784308][T25531] bridge_slave_1: entered allmulticast mode [ 555.790571][T25531] bridge_slave_1: entered promiscuous mode [ 555.844060][T25531] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.851160][T25531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.858489][T25531] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.865566][T25531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.888018][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.895511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.906085][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.913167][T11553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.922764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.929845][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.957257][T25531] veth0_vlan: entered promiscuous mode [ 555.969507][T25531] veth1_macvtap: entered promiscuous mode [ 556.200970][ T36] audit: type=1400 audit(556.335:151229): avc: denied { mounton } for pid=25546 comm="syz.7.8492" path="/302/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 556.282318][T25549] rust_binder: Write failure EINVAL in pid:908 [ 556.297198][T25556] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 556.303514][T25556] rust_binder: Read failure Err(EFAULT) in pid:910 [ 556.330366][T25560] rust_binder: Error while translating object. [ 556.337083][T25560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 556.343367][T25560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:89 [ 556.487679][T25571] netlink: 5308 bytes leftover after parsing attributes in process `syz.9.8501'. [ 556.634685][T25586] overlayfs: workdir and upperdir must be separate subtrees [ 556.786502][T25596] rust_binder: Write failure EINVAL in pid:927 [ 556.876167][T25604] cgroup: fork rejected by pids controller in /syz7 [ 556.946437][T25735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=25735 comm=syz.2.8514 [ 556.959083][T25735] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8514'. [ 556.968995][T25735] IPv6: Can't replace route, no match found [ 557.204912][T25749] cgroup: subsys name conflicts with all [ 557.533453][ T329] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 557.684618][ T329] usb 8-1: config 0 has an invalid interface number: 225 but max is 0 [ 557.692882][ T329] usb 8-1: config 0 has no interface number 0 [ 557.700593][ T329] usb 8-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=4a.d2 [ 557.714037][ T329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.722236][ T329] usb 8-1: Product: syz [ 557.726769][ T329] usb 8-1: Manufacturer: syz [ 557.731555][ T329] usb 8-1: SerialNumber: syz [ 557.736903][T25769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 557.737991][ T329] usb 8-1: config 0 descriptor?? [ 557.749613][T25769] /dev/nullb0: Can't lookup blockdev [ 557.791484][T25772] rust_binder: Write failure EFAULT in pid:10 [ 557.806392][T25774] binder: Binderfs stats mode cannot be changed during a remount [ 557.821781][ T36] audit: type=1400 audit(557.955:151230): avc: denied { setattr } for pid=25773 comm="syz.2.8528" name="IEEE-802.15.4-RAW" dev="sockfs" ino=102006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 557.893417][T25781] netlink: 'syz.1.8531': attribute type 15 has an invalid length. [ 557.904180][T25781] usb usb7: usbfs: process 25781 (syz.1.8531) did not claim interface 0 before use [ 557.917161][T25781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 557.917196][T25781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:141 [ 558.075983][T25789] /dev/rnullb0: Can't open blockdev [ 558.137955][T25793] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 558.153874][T25762] netlink: 'syz.7.8524': attribute type 4 has an invalid length. [ 558.180009][ T329] asix 8-1:0.225 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 558.194687][ T329] asix 8-1:0.225 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 558.206859][ T329] asix 8-1:0.225: probe with driver asix failed with error -71 [ 558.216149][ T329] usb 8-1: USB disconnect, device number 90 [ 558.810996][T25812] fuse: Bad value for 'group_id' [ 558.816063][T25812] fuse: Bad value for 'group_id' [ 558.933464][ T329] usb 8-1: new full-speed USB device number 91 using dummy_hcd [ 558.998518][ T36] audit: type=1326 audit(559.135:151231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25815 comm="syz.1.8545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x0 [ 559.093490][ T9] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 559.102505][ T329] usb 8-1: unable to get BOS descriptor or descriptor too short [ 559.110618][ T329] usb 8-1: not running at top speed; connect to a high speed hub [ 559.120044][ T329] usb 8-1: string descriptor 0 read error: -22 [ 559.126281][ T329] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.135395][ T329] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.223014][ T36] audit: type=1404 audit(559.355:151232): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 559.243649][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 559.249444][ T36] audit: type=1400 audit(559.385:151233): avc: denied { ioctl } for pid=25813 comm="syz.9.8544" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 559.276486][ T36] audit: type=1400 audit(559.385:151234): avc: denied { create } for pid=25813 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 559.296733][ T36] audit: type=1400 audit(559.385:151235): avc: denied { create } for pid=25813 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 559.317384][ T36] audit: type=1400 audit(559.385:151236): avc: denied { create } for pid=25813 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 559.337796][ T36] audit: type=1400 audit(559.385:151237): avc: denied { write } for pid=25813 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 559.358319][ T36] audit: type=1400 audit(559.385:151238): avc: denied { create } for pid=25813 comm="syz.9.8544" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 559.381267][ T329] cdc_ncm 8-1:1.0: bind() failure [ 559.385070][T25826] rust_binder: Write failure EFAULT in pid:38 [ 559.386516][T25824] rust_binder: Write failure EFAULT in pid:38 [ 559.387850][ T329] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 559.406536][ T329] cdc_ncm 8-1:1.1: bind() failure [ 559.411650][ T36] audit: type=1400 audit(559.385:151239): avc: denied { create } for pid=25813 comm="syz.9.8544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 559.436324][ T329] usb 8-1: USB disconnect, device number 91 [ 559.765627][ T9] usb 10-1: device descriptor read/all, error -71 [ 559.783587][T25836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 559.783620][T25836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:131 [ 559.920947][T25852] /dev/md0: Can't lookup blockdev [ 559.984640][T25862] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 559.992045][T25862] rust_binder: Write failure EINVAL in pid:159 [ 559.992060][T25863] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 559.992081][T25863] rust_binder: Write failure EINVAL in pid:159 [ 560.010835][T25863] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 560.183866][ T31] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 560.353464][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 560.360063][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 560.374020][ T31] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice=19.01 [ 560.391986][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.408152][ T31] usb 3-1: Product: syz [ 560.412427][ T31] usb 3-1: Manufacturer: syz [ 560.417549][ T31] usb 3-1: SerialNumber: syz [ 560.632406][ T31] usb 3-1: USB disconnect, device number 27 [ 560.653452][ T5675] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 560.674968][T25874] netlink: 'syz.9.8564': attribute type 16 has an invalid length. [ 560.682843][T25874] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.8564'. [ 560.707279][T25877] EXT4-fs: dax option not supported [ 560.795715][T25888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 560.814054][ T5675] usb 2-1: Using ep0 maxpacket: 16 [ 560.864347][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.884029][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.894158][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 560.907208][ T5675] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 560.923733][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.926190][T25897] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 560.931765][T25897] rust_binder: Read failure Err(EFAULT) in pid:159 [ 560.934397][ T5675] usb 2-1: config 0 descriptor?? [ 561.047420][T25905] rust_binder: Error while translating object. [ 561.047455][T25905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 561.053795][T25905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1094 [ 561.105743][T25908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 561.302451][T25917] rust_binder: Error while translating object. [ 561.311722][T25917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 561.317948][T25917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 561.363031][ T5675] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input75 [ 561.374803][T25923] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 561.389972][ T5675] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 561.423468][ T9] usb 8-1: new low-speed USB device number 92 using dummy_hcd [ 561.558379][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8563'. [ 561.584889][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 561.593725][ T9] usb 8-1: config 64 has an invalid interface number: 43 but max is 0 [ 561.595999][ T5675] usb 2-1: USB disconnect, device number 11 [ 561.602017][ T9] usb 8-1: config 64 has no interface number 0 [ 561.602051][ T9] usb 8-1: config 64 interface 43 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 561.625311][ T9] usb 8-1: config 64 interface 43 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 561.636359][ T9] usb 8-1: config 64 interface 43 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 561.646842][ T9] usb 8-1: config 64 interface 43 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 561.657944][ T9] usb 8-1: config 64 interface 43 has no altsetting 0 [ 561.666999][ T9] usb 8-1: string descriptor 0 read error: -22 [ 561.673249][ T9] usb 8-1: New USB device found, idVendor=0af0, idProduct=8120, bcdDevice=5e.47 [ 561.682458][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.692220][T25915] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 561.702192][ T9] usbhid 8-1:64.43: couldn't find an input interrupt endpoint [ 561.753454][ T5666] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 561.902774][ T9] usb 8-1: USB disconnect, device number 92 [ 561.906298][ T5666] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 561.923519][ T5666] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 561.932685][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.940749][ T5666] usb 3-1: Product: syz [ 561.945008][ T5666] usb 3-1: Manufacturer: syz [ 561.949604][ T5666] usb 3-1: SerialNumber: syz [ 561.960297][ T5666] usb 3-1: config 0 descriptor?? [ 561.968257][ T5666] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 561.975953][ T5666] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 561.984228][ T5666] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 562.195066][T25935] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 562.233484][ T329] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 562.394683][ T329] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 562.404989][ T329] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.424031][ T329] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.441377][ T329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.450127][ T329] usb 10-1: Product: syz [ 562.454481][ T329] usb 10-1: Manufacturer: syz [ 562.459430][ T329] usb 10-1: SerialNumber: syz [ 562.663463][ T5666] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 562.870389][ T329] usb 10-1: 0:2 : does not exist [ 563.085925][ T329] usb 10-1: USB disconnect, device number 65 [ 563.145704][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 563.145726][ T36] audit: type=1400 audit(563.275:151345): avc: denied { getopt } for pid=25944 comm="syz.7.8590" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 563.214525][ T5666] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.225519][ T5666] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 563.234623][ T5666] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.243358][ T5666] usb 2-1: config 0 descriptor?? [ 563.458616][ T5666] usbhid 2-1:0.0: can't add hid device: -71 [ 563.471516][ T5666] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 563.481403][ T5666] usb 2-1: USB disconnect, device number 12 [ 563.483268][ T36] audit: type=1400 audit(563.625:151346): avc: denied { create } for pid=25953 comm="syz.1.8592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.508416][ T36] audit: type=1400 audit(563.645:151347): avc: denied { bind } for pid=25953 comm="syz.1.8592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.532596][ T36] audit: type=1400 audit(563.645:151348): avc: denied { ioctl } for pid=25953 comm="syz.1.8592" path="socket:[104684]" dev="sockfs" ino=104684 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.557688][ T36] audit: type=1400 audit(563.645:151349): avc: denied { setopt } for pid=25953 comm="syz.1.8592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 563.576871][T25954] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 563.576899][T25954] rust_binder: Error while translating object. [ 563.589229][T25954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 563.595592][T25954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 563.653834][T25963] rust_binder: Write failure EFAULT in pid:185 [ 563.715261][ T36] audit: type=1400 audit(563.855:151350): avc: denied { setopt } for pid=25969 comm="syz.9.8596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 563.782069][ T36] audit: type=1400 audit(563.855:151351): avc: denied { read } for pid=25969 comm="syz.9.8596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 563.823597][T25974] rust_binder: Write failure EFAULT in pid:190 [ 563.990291][ T36] audit: type=1400 audit(564.125:151352): avc: denied { map } for pid=25994 comm="syz.7.8598" path="pipe:[79962]" dev="pipefs" ino=79962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 564.034188][T25998] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8600'. [ 564.053048][T26000] batadv_slave_1: entered promiscuous mode [ 564.068874][T25999] rust_binder: Failed copying remainder into alloc: EFAULT [ 564.068897][T25999] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 564.070097][ T36] audit: type=1400 audit(564.195:151353): avc: denied { map } for pid=25997 comm="syz.7.8600" path="socket:[103706]" dev="sockfs" ino=103706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 564.076657][T25999] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 564.099990][ T36] audit: type=1400 audit(564.195:151354): avc: denied { read } for pid=25997 comm="syz.7.8600" path="socket:[103706]" dev="sockfs" ino=103706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 564.138609][T25999] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:176 [ 564.143585][T25996] batadv_slave_1: left promiscuous mode [ 564.226431][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8601'. [ 564.317775][T26007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8603'. [ 564.347604][T26007] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26007 comm=syz.9.8603 [ 564.398546][T26007] rust_binder: Write failure EFAULT in pid:182 [ 564.492300][T26015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 564.504190][T26014] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 564.510862][T26014] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:193 [ 564.528001][ T5666] usb 3-1: USB disconnect, device number 28 [ 564.573616][T26017] SELinux: failed to load policy [ 564.694082][T26037] IPv6: NLM_F_CREATE should be specified when creating new route [ 564.703324][T26037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:192 [ 564.705226][T26039] rust_binder: 87: no such ref 0 [ 564.720101][T26039] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 564.727291][T26039] rust_binder: 87: no such ref 2 [ 564.732366][T26039] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 564.753249][T26041] rust_binder: got new transaction with bad transaction stack [ 564.765911][T26041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 564.861049][T26048] rust_binder: Write failure EFAULT in pid:200 [ 564.888252][T26052] SELinux: security_context_str_to_sid () failed with errno=-22 [ 564.915794][T26055] binder: Unknown parameter 'max' [ 564.940825][T26058] /dev/rnullb0: Can't open blockdev [ 564.954682][T26060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 564.954709][T26060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:208 [ 564.965151][T26060] bridge0: entered allmulticast mode [ 565.353441][ T5666] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 565.443446][ T31] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 565.483480][ T5666] usb 2-1: device descriptor read/64, error -71 [ 565.593426][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 565.599875][ T31] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 565.608314][ T31] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 565.617012][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 565.626033][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 565.637031][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 565.647213][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 565.657026][ T31] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 565.666999][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.680150][ T31] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 565.689276][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.698117][ T31] usb 8-1: config 0 descriptor?? [ 565.703838][T26079] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 565.711867][ T31] usblp0: Disabling reads from problematic bidirectional printer [ 565.733416][ T5666] usb 2-1: device descriptor read/64, error -71 [ 565.771096][T26094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.776436][T26095] rust_binder: 200: no such ref 0 [ 565.780142][T26094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.785531][T26095] rust_binder: 200: no such ref 2 [ 565.797364][T26095] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 565.913936][T26079] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 565.924051][ T31] usblp 8-1:0.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 565.936607][ T31] usb 8-1: USB disconnect, device number 93 [ 565.944044][ T31] usblp0: removed [ 565.973441][ T5666] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 566.003467][ T329] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 566.103517][ T5666] usb 2-1: device descriptor read/64, error -71 [ 566.154680][ T329] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 566.165763][ T329] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 566.180071][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.189222][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 566.197276][ T329] usb 3-1: SerialNumber: syz [ 566.343489][ T5666] usb 2-1: device descriptor read/64, error -71 [ 566.406831][ T329] usb 3-1: USB disconnect, device number 29 [ 566.442445][T26098] /dev/rnullb0: Can't open blockdev [ 566.455557][ T5666] usb usb2-port1: attempt power cycle [ 566.617159][T26108] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 566.628414][T26108] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 566.723459][T25817] usb 8-1: new low-speed USB device number 94 using dummy_hcd [ 566.803469][ T5666] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 566.824564][ T5666] usb 2-1: device descriptor read/8, error -71 [ 566.883472][T25817] usb 8-1: Invalid ep0 maxpacket: 64 [ 566.924055][T26110] netlink: 'syz.2.8638': attribute type 1 has an invalid length. [ 566.932687][T26110] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8638'. [ 566.954550][ T5666] usb 2-1: device descriptor read/8, error -71 [ 567.023444][T25817] usb 8-1: new low-speed USB device number 95 using dummy_hcd [ 567.173441][T25817] usb 8-1: Invalid ep0 maxpacket: 64 [ 567.178875][T25817] usb usb8-port1: attempt power cycle [ 567.186503][T26124] tmpfs: Bad value for 'nr_inodes' [ 567.194316][ T5666] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 567.214464][ T5666] usb 2-1: device descriptor read/8, error -71 [ 567.344522][ T5666] usb 2-1: device descriptor read/8, error -71 [ 567.453554][ T5666] usb usb2-port1: unable to enumerate USB device [ 567.523522][T25817] usb 8-1: new low-speed USB device number 96 using dummy_hcd [ 567.543816][T25817] usb 8-1: Invalid ep0 maxpacket: 64 [ 567.673442][T25817] usb 8-1: new low-speed USB device number 97 using dummy_hcd [ 567.693791][T25817] usb 8-1: Invalid ep0 maxpacket: 64 [ 567.699247][T25817] usb usb8-port1: unable to enumerate USB device [ 567.716358][T26134] /dev/rnullb0: Can't open blockdev [ 567.722078][T26134] /dev/rnullb0: Can't open blockdev [ 567.944181][T26155] option changes via remount are deprecated (pid=26150 comm=syz.9.8650) [ 567.952570][T26155] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 568.015563][T26162] netlink: 37 bytes leftover after parsing attributes in process `syz.2.8653'. [ 568.130689][T26167] netlink: 'syz.9.8655': attribute type 4 has an invalid length. [ 568.143899][T26169] incfs_lookup_dentry err:-5 [ 568.151483][T26169] incfs: Can't find or create .incomplete dir in ./file0 [ 568.153529][T26168] netlink: 'syz.9.8655': attribute type 4 has an invalid length. [ 568.160100][T26169] incfs: mount failed -5 [ 568.172614][T26164] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 568.172706][T26164] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135 [ 568.187179][T26167] netlink: 'syz.9.8655': attribute type 4 has an invalid length. [ 568.205261][T26177] netlink: 'syz.9.8655': attribute type 4 has an invalid length. [ 568.226282][ T36] kauditd_printk_skb: 50 callbacks suppressed [ 568.226301][ T36] audit: type=1400 audit(568.365:151405): avc: denied { connect } for pid=26178 comm="syz.2.8658" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 568.281827][ T36] audit: type=1400 audit(568.415:151406): avc: denied { create } for pid=26184 comm="syz.1.8660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 568.342896][ T36] audit: type=1400 audit(568.475:151407): avc: denied { read write } for pid=24858 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.368362][ T36] audit: type=1400 audit(568.475:151408): avc: denied { open } for pid=24858 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.392167][ T36] audit: type=1400 audit(568.475:151409): avc: denied { ioctl } for pid=24858 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 568.395497][T26191] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 568.417442][ T36] audit: type=1400 audit(568.505:151410): avc: denied { read write } for pid=26187 comm="syz.1.8661" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 568.452507][ T36] audit: type=1400 audit(568.505:151411): avc: denied { open } for pid=26187 comm="syz.1.8661" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 568.479737][ T36] audit: type=1400 audit(568.505:151412): avc: denied { map } for pid=26187 comm="syz.1.8661" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 568.506949][ T36] audit: type=1400 audit(568.505:151413): avc: denied { create } for pid=26187 comm="syz.1.8661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 568.528928][ T36] audit: type=1400 audit(568.535:151414): avc: denied { read } for pid=26189 comm="syz.1.8662" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 568.577378][T26197] rust_binder: 245: no such ref 3 [ 568.582482][T26197] rust_binder: 245: no such ref 1 [ 568.587729][T26197] rust_binder: Write failure EFAULT in pid:245 [ 568.599851][T26199] /dev/rnullb0: Can't open blockdev [ 568.628089][T26204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8667'. [ 568.637420][T26204] netlink: 'syz.1.8667': attribute type 28 has an invalid length. [ 568.717167][T26218] netlink: 'syz.1.8673': attribute type 12 has an invalid length. [ 569.058057][T26228] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 569.116567][T26238] 9pnet_fd: Insufficient options for proto=fd [ 569.255473][T26242] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 569.262828][T26242] rust_binder: Write failure EINVAL in pid:249 [ 569.277497][T26242] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.430706][T26263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8691'. [ 569.458176][T26265] netlink: 'syz.1.8692': attribute type 27 has an invalid length. [ 569.575984][T26251] rust_binder: Failed copying remainder into alloc: EFAULT [ 569.576010][T26251] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 569.583446][T26251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 569.591742][T26251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:252 [ 569.828155][T26289] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8701'. [ 569.883465][ T31] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 570.033463][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 570.040351][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 570.048816][ T31] usb 8-1: config 8 has an invalid interface number: 132 but max is 0 [ 570.057107][ T31] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 570.067243][ T31] usb 8-1: config 8 has no interface number 0 [ 570.073341][ T31] usb 8-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.086732][ T31] usb 8-1: config 8 interface 132 has no altsetting 0 [ 570.095273][ T31] usb 8-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 570.104369][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.112640][ T31] usb 8-1: Product: syz [ 570.117076][ T31] usb 8-1: Manufacturer: syz [ 570.121812][ T31] usb 8-1: SerialNumber: syz [ 570.524952][ T31] usb-storage 8-1:8.132: USB Mass Storage device detected [ 570.533328][ T31] usb-storage 8-1:8.132: Quirks match for vid 07cf pid 1001: a [ 570.568012][ T31] usb 8-1: USB disconnect, device number 98 [ 571.049825][T26319] 9pnet_fd: Insufficient options for proto=fd [ 571.060936][T26322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 571.070235][T26322] overlayfs: missing 'lowerdir' [ 571.437012][T26329] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8714'. [ 571.473761][T26342] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 571.483672][ T31] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 571.543719][T26353] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 571.543860][T26353] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 571.673397][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 571.703113][ T31] usb 10-1: config 4 has an invalid interface number: 215 but max is 0 [ 571.715999][ T31] usb 10-1: config 4 has no interface number 0 [ 571.717539][ T31] usb 10-1: New USB device found, idVendor=76da, idProduct=6a4e, bcdDevice=8c.0b [ 571.739010][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.752813][ T31] usb 10-1: Product: syz [ 571.757456][ T31] usb 10-1: Manufacturer: syz [ 571.762468][ T31] usb 10-1: SerialNumber: syz [ 571.943465][ T5666] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 572.063456][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 572.105552][ T5666] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 572.117014][ T5666] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.126124][ T5666] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.134259][ T5666] usb 8-1: Product: Њ [ 572.138358][ T5666] usb 8-1: Manufacturer: á ‰ [ 572.142978][ T5666] usb 8-1: SerialNumber: syz [ 572.213425][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 572.219713][ T10] usb 3-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 572.228814][ T10] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 572.238710][ T10] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 572.247855][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.350475][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.359109][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.368660][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.377229][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.386073][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.394649][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.402834][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.412496][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.420747][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.429309][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.440855][ T5666] cdc_ncm 8-1:1.0: bind() failure [ 572.447290][ T5666] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 572.454380][ T5666] cdc_ncm 8-1:1.1: bind() failure [ 572.461272][ T5666] usb 8-1: USB disconnect, device number 99 [ 572.465306][ T10] usb 3-1: string descriptor 0 read error: -71 [ 572.481660][ T10] usb 3-1: USB disconnect, device number 30 [ 572.639287][T26367] rust_binder: Error in use_page_slow: ESRCH [ 572.639314][T26367] rust_binder: use_range failure ESRCH [ 572.645401][T26367] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 572.651104][T26367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 572.659272][T26367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1158 [ 572.989631][T26400] rust_binder: 167: no such ref 0 [ 573.004256][T26400] rust_binder: 167: no such ref 3 [ 573.009367][T26400] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167 [ 573.183681][T26408] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1161 [ 573.226105][T26414] rust_binder: Failed to allocate buffer. len:4224, is_oneway:true [ 573.235529][T26414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 573.243594][T26414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1167 [ 573.296865][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 573.296886][ T36] audit: type=1400 audit(573.435:151509): avc: denied { read write } for pid=26423 comm="syz.7.8743" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 573.323424][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 573.336174][ T36] audit: type=1400 audit(573.435:151510): avc: denied { open } for pid=26423 comm="syz.7.8743" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 573.368013][ T36] audit: type=1400 audit(573.435:151511): avc: denied { ioctl } for pid=26423 comm="syz.7.8743" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf76 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 573.416951][ T36] audit: type=1400 audit(573.555:151512): avc: denied { ioctl } for pid=26423 comm="syz.7.8743" path="socket:[106061]" dev="sockfs" ino=106061 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 573.442998][ T36] audit: type=1400 audit(573.585:151513): avc: denied { getopt } for pid=26423 comm="syz.7.8743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.524602][T26430] tmpfs: Bad value for 'size' [ 573.530066][T26430] binder: Unknown parameter 'pcr' [ 573.543418][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 573.554165][ T10] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 573.569977][ T10] usb 3-1: config 0 has no interface number 0 [ 573.576262][ T36] audit: type=1400 audit(573.705:151514): avc: denied { setopt } for pid=26433 comm="syz.7.8746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 573.597256][ T10] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 573.609102][ T10] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 573.620255][ T10] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 573.631590][ T10] usb 3-1: config 0 interface 200 has no altsetting 0 [ 573.639897][ T10] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 573.649595][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.657673][ T10] usb 3-1: Product: syz [ 573.661984][ T10] usb 3-1: Manufacturer: syz [ 573.666633][ T10] usb 3-1: SerialNumber: syz [ 573.672015][ T10] usb 3-1: config 0 descriptor?? [ 573.678651][T26406] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 573.700477][ T36] audit: type=1400 audit(573.835:151515): avc: denied { mount } for pid=26438 comm="syz.7.8747" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 573.755003][T26440] /dev/rnullb0: Can't open blockdev [ 573.881687][ T36] audit: type=1400 audit(574.015:151516): avc: denied { name_bind } for pid=26441 comm="syz.1.8748" src=4096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 573.910410][ T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input76 [ 573.930850][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 573.930870][ T36] audit: type=1400 audit(574.065:151517): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=959 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 573.938269][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 573.961702][ T10] usb 3-1: USB disconnect, device number 31 [ 573.967069][ C1] usb 3-1: hanwang_irq - usb_submit_urb failed with result -19 [ 573.982829][ T36] audit: type=1400 audit(574.065:151518): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=959 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 574.007362][T26444] 9pnet_fd: Insufficient options for proto=fd [ 574.081902][T26446] overlayfs: failed to clone lowerpath [ 574.097243][ T31] hub 10-1:4.215: bad descriptor, ignoring hub [ 574.103712][ T31] hub 10-1:4.215: probe with driver hub failed with error -5 [ 574.111428][ T31] usb 10-1: bad CDC descriptors [ 574.134834][ T31] usb 10-1: USB disconnect, device number 66 [ 574.506543][T26473] overlayfs: failed to clone upperpath [ 574.526433][ T31] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 574.558529][T26481] input: syz0 as /devices/virtual/input/input77 [ 574.565056][T26479] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 574.580410][T26484] netlink: 'syz.7.8761': attribute type 10 has an invalid length. [ 574.596143][T26484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 574.598523][T26484] rust_binder: 1196: no such ref 5 [ 574.610263][T26484] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1196 [ 574.611175][T26486] netlink: 'syz.7.8761': attribute type 10 has an invalid length. [ 574.634507][T26488] rust_binder: Error while translating object. [ 574.634573][T26488] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 574.640847][T26488] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:175 [ 574.703521][ T31] usb 10-1: Using ep0 maxpacket: 32 [ 574.719191][ T31] usb 10-1: config 36 has an invalid interface number: 228 but max is 0 [ 574.728280][ T31] usb 10-1: config 36 has no interface number 0 [ 574.734630][ T31] usb 10-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 574.744794][ T31] usb 10-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 574.763404][ T31] usb 10-1: config 36 interface 228 has no altsetting 0 [ 574.771962][ T31] usb 10-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 574.781257][ T31] usb 10-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 574.789539][ T31] usb 10-1: Product: syz [ 574.793871][ T31] usb 10-1: Manufacturer: syz [ 574.798622][ T31] usb 10-1: SerialNumber: syz [ 574.813451][T26498] overlayfs: conflicting options: verity=require,redirect_dir=follow [ 574.822068][T26498] rust_binder: Error while translating object. [ 574.822100][T26498] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 574.828479][T26498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:1209 [ 575.005430][T26454] binder: Unknown parameter 'fscontext?}wake_lock' [ 575.028835][ T31] usb 10-1: USB disconnect, device number 67 [ 575.036824][T24260] udevd[24260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:36.228/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 575.093441][T25817] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 575.188667][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8766'. [ 575.243415][T25817] usb 8-1: Using ep0 maxpacket: 32 [ 575.249751][T25817] usb 8-1: config 0 has an invalid interface number: 114 but max is 0 [ 575.258006][T25817] usb 8-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 575.267014][T25817] usb 8-1: config 0 has no interface number 1 [ 575.273116][T25817] usb 8-1: config 0 interface 114 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 575.286200][T25817] usb 8-1: too many endpoints for config 0 interface 0 altsetting 15: 49, using maximum allowed: 30 [ 575.297126][T25817] usb 8-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 575.310257][T25817] usb 8-1: config 0 interface 114 has no altsetting 0 [ 575.317070][T25817] usb 8-1: config 0 interface 0 has no altsetting 0 [ 575.325331][T25817] usb 8-1: New USB device found, idVendor=0421, idProduct=00fc, bcdDevice=7f.8a [ 575.334421][T25817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.342415][T25817] usb 8-1: Product: syz [ 575.346654][T25817] usb 8-1: Manufacturer: syz [ 575.351285][T25817] usb 8-1: SerialNumber: syz [ 575.356688][T25817] usb 8-1: config 0 descriptor?? [ 575.439248][T26505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:178 [ 575.638457][T25817] usb 8-1: bad CDC descriptors [ 575.646038][T25817] usb 8-1: USB disconnect, device number 100 [ 575.989925][T26558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 575.989950][T26558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:183 [ 576.303413][ T329] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 576.408866][T26572] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 576.464459][ T329] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 576.472629][ T329] usb 3-1: config 0 has no interface number 0 [ 576.480199][ T329] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 576.489322][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.497361][ T329] usb 3-1: Product: syz [ 576.501617][ T329] usb 3-1: Manufacturer: syz [ 576.510854][ T329] usb 3-1: SerialNumber: syz [ 576.521355][ T329] usb 3-1: config 0 descriptor?? [ 576.629000][T26584] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 576.637870][T26584] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8789'. [ 576.647545][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8789'. [ 576.678865][T26590] fuse: Bad value for 'user_id' [ 576.683881][T26590] fuse: Bad value for 'user_id' [ 576.712995][T26592] input: syz1 as /devices/virtual/input/input78 [ 576.722907][T26592] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 576.723028][T26592] rust_binder: Error while translating object. [ 576.731733][T26592] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 576.737976][T26592] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 576.740953][ T329] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 576.763301][ T329] usb 3-1: No valid video chain found. [ 576.769895][ T329] usb 3-1: USB disconnect, device number 32 [ 576.882054][T26601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 576.882127][T26600] rust_binder: Error in use_page_slow: ESRCH [ 576.888703][T26600] rust_binder: use_range failure ESRCH [ 576.894801][T26600] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 576.900291][T26600] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 576.908352][T26600] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:317 [ 576.929652][T26604] rust_binder: Write failure EFAULT in pid:321 [ 578.621046][T26666] netlink: 240 bytes leftover after parsing attributes in process `syz.2.8819'. [ 578.621055][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 578.621071][ T36] audit: type=1400 audit(578.755:151558): avc: denied { nlmsg_read } for pid=26665 comm="syz.2.8819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 578.640033][T26668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8820'. [ 578.666317][T26670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8821'. [ 578.681058][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8820'. [ 578.691442][ T36] audit: type=1400 audit(578.835:151559): avc: denied { getopt } for pid=26667 comm="syz.1.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 579.067705][T26692] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 579.068148][T26692] rust_binder: Error in use_page_slow: ESRCH [ 579.074646][T26692] rust_binder: use_range failure ESRCH [ 579.080716][T26692] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 579.086326][T26692] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 579.094374][T26692] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:337 [ 579.182347][ T36] audit: type=1326 audit(579.315:151560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.214593][ T36] audit: type=1326 audit(579.315:151561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.237953][ T36] audit: type=1326 audit(579.325:151562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.261203][ T36] audit: type=1326 audit(579.325:151563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.284576][ T36] audit: type=1326 audit(579.325:151564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.309367][ T36] audit: type=1326 audit(579.325:151565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9024b8d810 code=0x7ffc0000 [ 579.332630][ T36] audit: type=1326 audit(579.325:151566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9024b8d810 code=0x7ffc0000 [ 579.355884][ T36] audit: type=1326 audit(579.325:151567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26699 comm="syz.1.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9024b8efc9 code=0x7ffc0000 [ 579.383416][ T5666] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 579.434794][T26717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8836'. [ 579.510236][T26723] rust_binder: 215: no such ref 1 [ 579.543374][ T5666] usb 10-1: device descriptor read/64, error -71 [ 579.734659][T26736] overlayfs: failed to clone upperpath [ 579.793406][ T5666] usb 10-1: device descriptor read/64, error -71 [ 579.813392][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 579.963414][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 579.969556][ T31] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 579.977788][ T31] usb 3-1: config 0 has no interface number 0 [ 579.984091][ T31] usb 3-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 579.995796][ T31] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 580.006890][ T31] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 580.018150][ T31] usb 3-1: config 0 interface 200 has no altsetting 0 [ 580.026374][ T31] usb 3-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 580.035483][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.043616][ T5666] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 580.051321][ T31] usb 3-1: Product: syz [ 580.055812][ T31] usb 3-1: Manufacturer: syz [ 580.060470][ T31] usb 3-1: SerialNumber: syz [ 580.066005][ T31] usb 3-1: config 0 descriptor?? [ 580.071248][T26726] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 580.193403][ T5666] usb 10-1: device descriptor read/64, error -71 [ 580.291871][ T31] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input80 [ 580.305113][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 580.312441][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 580.319756][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 580.327051][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 580.334355][ C1] usb 3-1: hanwang_irq - nonzero urb status received: -71 [ 580.341591][ C1] usb 3-1: hanwang_irq - usb_submit_urb failed with result -1 [ 580.351815][ T31] usb 3-1: USB disconnect, device number 33 [ 580.473446][ T5666] usb 10-1: device descriptor read/64, error -71 [ 580.583705][ T5666] usb usb10-port1: attempt power cycle [ 580.757340][T26763] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8853'. [ 580.888106][T26778] /dev/rnullb0: Can't open blockdev [ 580.923459][ T5666] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 580.944409][ T5666] usb 10-1: device descriptor read/8, error -71 [ 581.048887][T26797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 581.048927][T26797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:236 [ 581.074627][ T5666] usb 10-1: device descriptor read/8, error -71 [ 581.307416][T26833] overlayfs: failed to clone upperpath [ 581.323530][ T5666] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 581.342396][T26835] overlay: Unknown parameter 'obj_role' [ 581.349681][ T5666] usb 10-1: device descriptor read/8, error -71 [ 581.355635][T26835] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5057 sclass=netlink_xfrm_socket pid=26835 comm=syz.7.8878 [ 581.383413][ T329] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 581.484443][ T5666] usb 10-1: device descriptor read/8, error -71 [ 581.533383][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 581.540210][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 581.548673][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.559106][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 581.568168][ T329] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.582639][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.591726][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.599761][ T329] usb 3-1: Product: syz [ 581.603562][ T5666] usb usb10-port1: unable to enumerate USB device [ 581.603951][ T329] usb 3-1: Manufacturer: syz [ 581.615063][ T329] usb 3-1: SerialNumber: syz [ 581.822791][T26802] binder: Unknown parameter 'statsHglobal' [ 581.830898][ T329] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 581.843394][ T329] cdc_ncm 3-1:1.0: bind() failure [ 581.850091][ T329] usb 3-1: USB disconnect, device number 34 [ 581.958189][T26851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=26851 comm=syz.1.8884 [ 581.971154][T26851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=26851 comm=syz.1.8884 [ 582.124772][T26862] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 582.252461][T26877] 9pnet_virtio: no channels available for device [ 582.405074][T26883] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 582.405124][T26883] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:246 [ 582.523392][ T31] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 582.673392][ T457] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 582.694511][ T31] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.704859][ T31] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.717668][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.727086][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.735343][ T31] usb 10-1: Product: syz [ 582.739724][ T31] usb 10-1: Manufacturer: syz [ 582.744764][ T31] usb 10-1: SerialNumber: syz [ 582.752380][ T31] cdc_mbim 10-1:1.0: skipping garbage [ 582.758622][ T31] usb 10-1: selecting invalid altsetting 1 [ 582.823406][ T457] usb 3-1: Using ep0 maxpacket: 32 [ 582.829845][ T457] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.841126][ T457] usb 3-1: config 0 interface 0 has no altsetting 0 [ 582.848103][ T457] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 582.857415][ T457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.866454][ T457] usb 3-1: config 0 descriptor?? [ 582.962393][ T31] cdc_mbim 10-1:1.0: failed GET_NTB_PARAMETERS [ 582.979747][ T31] cdc_mbim 10-1:1.0: bind() failure [ 582.999516][T26897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26897 comm=syz.9.8900 [ 583.000504][ T31] usb 10-1: USB disconnect, device number 72 [ 583.013148][T26897] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.162156][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8902'. [ 583.274964][ T457] lg-g15 0003:046D:C225.0015: item fetching failed at offset 3/6 [ 583.282917][ T457] lg-g15 0003:046D:C225.0015: probe with driver lg-g15 failed with error -22 [ 583.343368][T26908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.395002][T26908] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 583.401633][T26908] rust_binder: Read failure Err(EFAULT) in pid:361 [ 583.458420][T26911] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.466201][T26911] rust_binder: Error while translating object. [ 583.472724][T26911] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 583.479217][T26911] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:364 [ 583.492827][T26885] rust_binder: Read failure Err(EAGAIN) in pid:248 [ 583.512089][ T31] usb 3-1: USB disconnect, device number 35 [ 583.531800][T26918] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.581516][T26927] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 583.588793][T26927] netlink: 'syz.9.8910': attribute type 4 has an invalid length. [ 583.603358][T26927] netlink: 17 bytes leftover after parsing attributes in process `syz.9.8910'. [ 583.612716][T26927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 583.612746][T26927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:374 [ 583.665420][T26934] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 583.793622][T26942] overlayfs: failed to clone upperpath [ 583.846479][T26950] netlink: 'syz.1.8919': attribute type 4 has an invalid length. [ 583.854392][T26950] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8919'. [ 583.939178][T26960] netlink: 'syz.1.8922': attribute type 14 has an invalid length. [ 584.028897][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 584.028915][ T36] audit: type=1400 audit(584.165:151624): avc: denied { setattr } for pid=26962 comm="syz.2.8923" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 584.061807][T26963] binder: Unknown parameter 'defcontext01777777777777777777777' [ 584.092524][T26965] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 584.093978][ T36] audit: type=1400 audit(584.225:151625): avc: denied { lock } for pid=26964 comm="syz.2.8924" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 584.132915][T26967] rust_binder: Write failure EFAULT in pid:256 [ 584.258735][ T36] audit: type=1326 audit(584.395:151626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26976 comm="syz.9.8930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3dbd58efc9 code=0x0 [ 584.306347][ T36] audit: type=1400 audit(584.445:151627): avc: denied { accept } for pid=26983 comm="syz.1.8933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 584.405592][T26990] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 584.405619][T26990] rust_binder: Error while translating object. [ 584.416890][T26990] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 584.423221][T26990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:260 [ 584.626525][T27016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8942'. [ 584.645220][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8942'. [ 584.671720][ T36] audit: type=1400 audit(584.805:151628): avc: denied { unlink } for pid=27017 comm="syz.2.8943" name="#6d" dev="tmpfs" ino=509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.673053][T27018] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 584.694128][T27018] rust_binder: Error while translating object. [ 584.702888][T27018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 584.709284][T27018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 584.718006][ T36] audit: type=1400 audit(584.805:151629): avc: denied { mount } for pid=27017 comm="syz.2.8943" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 584.756315][ T36] audit: type=1400 audit(584.885:151630): avc: denied { unmount } for pid=25531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 584.777013][ T36] audit: type=1400 audit(584.915:151631): avc: denied { create } for pid=27019 comm="syz.2.8944" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.777184][T27020] rust_binder: Write failure EFAULT in pid:271 [ 584.798578][ T36] audit: type=1400 audit(584.915:151632): avc: denied { write } for pid=27019 comm="syz.2.8944" name="file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 584.828840][ T36] audit: type=1400 audit(584.915:151633): avc: denied { open } for pid=27019 comm="syz.2.8944" path="/92/file0" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 585.273484][T27048] rust_binder: Write failure EINVAL in pid:404 [ 585.318699][T27056] binder: Bad value for 'stats' [ 585.743444][ T456] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 585.905400][ T456] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 585.911054][T27095] rust_binder: Write failure EFAULT in pid:290 [ 585.923473][ T456] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 585.940054][ T456] usb 10-1: config 1 interface 0 has no altsetting 0 [ 585.954440][ T456] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 585.965228][ T456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.974095][ T456] usb 10-1: Product: syz [ 585.978395][ T456] usb 10-1: Manufacturer: syz [ 585.983103][ T456] usb 10-1: SerialNumber: syz [ 585.989292][T27083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 586.004849][T27083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 586.436406][T27144] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8984'. [ 586.603722][T27150] cannot load conntrack support for proto=3 [ 586.644697][T27138] netlink: 'syz.1.8981': attribute type 27 has an invalid length. [ 587.027924][T27083] rust_binder: Write failure EINVAL in pid:415 [ 587.028473][ T456] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:cf:6b:78:e8:f6 [ 587.047806][ T456] rtl8150 10-1:1.0: eth1: rtl8150 is detected [ 587.067532][ T456] usb 10-1: USB disconnect, device number 73 [ 587.186027][T27188] fuse: Unknown parameter '0x0000000000000005' [ 587.365243][T27203] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9005'. [ 587.543420][T27223] binder: Bad value for 'stats' [ 587.864654][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.872579][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.089580][T27239] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 588.092707][T27239] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:323 [ 588.113121][T27250] netlink: 37 bytes leftover after parsing attributes in process `syz.1.9017'. [ 588.186712][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9017'. [ 588.381484][T27280] overlayfs: failed to clone upperpath [ 588.547294][T27296] netlink: 'syz.9.9033': attribute type 4 has an invalid length. [ 588.556510][T27296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27296 comm=syz.9.9033 [ 588.569099][T27297] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27297 comm=syz.9.9033 [ 588.582655][T27296] rust_binder: Error while translating object. [ 588.582695][T27296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 588.590656][T27297] rust_binder: Error while translating object. [ 588.602929][T27296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:428 [ 588.609275][T27297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 588.618465][T27297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:428 [ 588.628091][T27296] /dev/rnullb0: Can't open blockdev [ 588.667995][T27300] 9pnet_fd: p9_fd_create_tcp (27300): problem connecting socket to 127.0.0.1 [ 588.769810][T27313] incfs: ino conflict with backing FS 3 [ 588.821139][T27316] netlink: 'syz.9.9039': attribute type 16 has an invalid length. [ 588.838309][T27316] netlink: 'syz.9.9039': attribute type 3 has an invalid length. [ 588.846489][T27316] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.9039'. [ 588.971261][T27325] xt_NFQUEUE: number of total queues is 0 [ 589.078157][T27344] can: request_module (can-proto-5) failed. [ 589.115160][T27342] overlayfs: failed to clone upperpath [ 589.134766][T27348] tipc: Enabling of bearer rejected, media not registered [ 589.153375][T27351] tipc: Enabling of bearer rejected, media not registered [ 589.172735][T27354] binder: Bad value for 'max' [ 589.193414][ T5673] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 589.358209][ T36] kauditd_printk_skb: 37 callbacks suppressed [ 589.358229][ T36] audit: type=1400 audit(589.495:151671): avc: denied { setopt } for pid=27370 comm="syz.1.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.395750][ T5673] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 589.411726][ T5673] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 589.453654][ T5673] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 589.463013][ T5673] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.474693][ T5673] usb 10-1: Product: syz [ 589.483522][ T5673] usb 10-1: Manufacturer: syz [ 589.491212][ T5673] usb 10-1: SerialNumber: syz [ 589.498749][ T5673] usb 10-1: config 0 descriptor?? [ 589.697959][ T36] audit: type=1400 audit(589.835:151672): avc: denied { bind } for pid=27397 comm="syz.2.9065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 589.731239][T27321] rust_binder: Error while translating object. [ 589.731294][T27321] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 589.745089][T27321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:440 [ 589.789482][T27406] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.826377][T27404] rust_binder: Error in use_page_slow: ESRCH [ 589.826409][T27404] rust_binder: use_range failure ESRCH [ 589.843719][T27404] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 589.856615][T27404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 589.873556][T27404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:354 [ 589.970547][T27422] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 589.980203][T27422] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 589.988312][T27422] rust_binder: Read failure Err(EFAULT) in pid:368 [ 590.072329][T27426] 9pnet: Unknown protocol version 9 [ 590.175677][ T36] audit: type=1400 audit(590.315:151673): avc: denied { remove_name } for pid=27429 comm="syz.2.9077" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 590.200029][ T36] audit: type=1400 audit(590.315:151674): avc: denied { unlink } for pid=27429 comm="syz.2.9077" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 590.281683][ T36] audit: type=1400 audit(590.415:151675): avc: denied { append } for pid=27435 comm="syz.2.9079" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 590.284044][T27436] rust_binder: Write failure EFAULT in pid:378 [ 590.401040][T27445] binder: Unknown parameter 'fscontext?}' [ 590.420501][T27445] binder: Unknown parameter 'fscontext?}' [ 590.447243][ T36] audit: type=1400 audit(590.585:151676): avc: denied { bind } for pid=27454 comm="syz.7.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.483100][T27460] netlink: 'syz.7.9087': attribute type 13 has an invalid length. [ 590.812659][T27465] overlayfs: failed to clone upperpath [ 591.337129][T27491] 9p: Unknown access argument : -22 [ 591.370270][ T36] audit: type=1400 audit(591.505:151677): avc: denied { listen } for pid=27492 comm="syz.1.9098" path=2F3235322FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 591.415914][ T36] audit: type=1400 audit(591.555:151678): avc: denied { read } for pid=27497 comm="syz.1.9100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 591.706299][ T36] audit: type=1400 audit(591.845:151679): avc: denied { ioctl } for pid=27529 comm="syz.7.9110" path="socket:[111762]" dev="sockfs" ino=111762 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 591.840256][ T5673] usb 10-1: USB disconnect, device number 74 [ 591.921349][ T36] audit: type=1400 audit(592.055:151680): avc: denied { mounton } for pid=27533 comm="syz.9.9112" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 592.539460][T27556] rust_binder: Write failure EFAULT in pid:445 [ 592.569044][T27560] rust_binder: got new transaction with bad transaction stack [ 592.575336][T27560] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:449 [ 592.675857][T27564] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 592.685199][T27564] rust_binder: Read failure Err(EFAULT) in pid:453 [ 592.693803][T27564] netlink: 'syz.9.9121': attribute type 4 has an invalid length. [ 592.708782][T27564] netlink: 'syz.9.9121': attribute type 4 has an invalid length. [ 592.717912][T27564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 593.053384][ T329] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 593.213363][ T329] usb 10-1: Using ep0 maxpacket: 16 [ 593.219774][ T329] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 593.229993][ T329] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 593.239973][ T329] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.253062][ T329] usb 10-1: config 1 interface 0 has no altsetting 0 [ 593.261279][ T329] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 593.270582][ T329] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.278708][ T329] usb 10-1: Product: syz [ 593.282977][ T329] usb 10-1: Manufacturer: syz [ 593.287700][ T329] usb 10-1: SerialNumber: syz [ 593.496284][ T329] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 593.825467][ T5673] usb 10-1: USB disconnect, device number 75 [ 593.838682][ T5673] usblp0: removed [ 594.505298][T27599] binder: Binderfs stats mode cannot be changed during a remount [ 594.593404][T25817] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 594.753375][T25817] usb 10-1: Using ep0 maxpacket: 8 [ 594.760239][T25817] usb 10-1: unable to get BOS descriptor or descriptor too short [ 594.769873][T25817] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.780378][T25817] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 594.795205][T25817] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 594.804663][T25817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.812838][T25817] usb 10-1: Product: syz [ 594.817461][T25817] usb 10-1: Manufacturer: syz [ 594.822225][T25817] usb 10-1: SerialNumber: syz [ 594.828161][T25817] usb 10-1: config 0 descriptor?? [ 594.843376][T25817] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 594.861780][T24270] udevd[24270]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 594.892446][T27627] sock: sock_timestamping_bind_phc: sock not bind to device [ 594.915307][T27630] overlayfs: failed to clone upperpath [ 595.036886][ T5673] usb 10-1: USB disconnect, device number 76 [ 595.545513][T27652] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423 [ 595.552677][T27655] binder: Binderfs stats mode cannot be changed during a remount [ 595.605306][T27663] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 595.638286][T27668] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 595.638928][T27667] rust_binder: Error while translating object. [ 595.645716][T27667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 595.651955][T27667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:425 [ 595.783332][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 595.783357][ T36] audit: type=1400 audit(595.915:151690): avc: denied { setopt } for pid=27677 comm="syz.2.9159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 596.121424][ T36] audit: type=1400 audit(596.255:151691): avc: denied { create } for pid=27687 comm="syz.1.9162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 596.185270][T27699] /dev/nbd9: Can't lookup blockdev [ 596.213772][T27702] netlink: 'syz.1.9164': attribute type 4 has an invalid length. [ 596.228998][T27702] netlink: 'syz.1.9164': attribute type 4 has an invalid length. [ 596.299942][T27691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=27691 comm=syz.1.9164 [ 596.332330][T27710] rust_binder: 484: no such ref 0 [ 596.683401][ T5673] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 596.853381][ T5673] usb 10-1: Using ep0 maxpacket: 8 [ 596.860269][ T5673] usb 10-1: unable to get BOS descriptor or descriptor too short [ 596.868928][ T5673] usb 10-1: config 6 has an invalid interface number: 254 but max is 0 [ 596.877351][ T5673] usb 10-1: config 6 has no interface number 0 [ 596.883689][ T5673] usb 10-1: config 6 interface 254 has no altsetting 0 [ 596.893236][ T5673] usb 10-1: string descriptor 0 read error: -22 [ 596.903943][ T5673] usb 10-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=30.2c [ 596.920359][ T5673] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.940100][ T5673] usb-storage 10-1:6.254: USB Mass Storage device detected [ 596.955380][ T5673] usb-storage 10-1:6.254: Quirks match for vid 054c pid 0069: 1 [ 597.051756][T27755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27755 comm=syz.2.9186 [ 597.065474][T27755] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27755 comm=syz.2.9186 [ 597.282819][ T329] usb 10-1: USB disconnect, device number 77 [ 597.364068][T27764] rust_binder: Write failure EINVAL in pid:461 [ 597.372997][T27764] rust_binder: 461: no such ref 0 [ 597.384622][T27764] rust_binder: 461: no such ref 0 [ 597.435554][ T9] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 597.443178][ T9] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 597.451877][ T9] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 597.461676][ T9] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 597.563979][T27784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9194'. [ 597.573060][T27783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9194'. [ 597.582206][T27784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9194'. [ 597.591256][T27783] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9194'. [ 597.642291][T27790] 9pnet_fd: Insufficient options for proto=fd [ 597.745629][ T36] audit: type=1400 audit(597.885:151692): avc: denied { append } for pid=27804 comm="syz.2.9200" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 597.793386][ T329] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 597.943369][ T329] usb 10-1: Using ep0 maxpacket: 32 [ 597.949711][ T329] usb 10-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 597.958932][ T329] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.972473][ T329] usb 10-1: config 0 descriptor?? [ 597.979855][ T36] audit: type=1400 audit(598.125:151693): avc: denied { connect } for pid=27823 comm="syz.2.9207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 598.002778][T27824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:485 [ 598.311602][ T36] audit: type=1400 audit(598.445:151694): avc: denied { bind } for pid=27829 comm="syz.1.9209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 598.383153][ T329] wacom 0003:056A:00B2.0017: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 598.394025][ T329] wacom 0003:056A:00B2.0017: hidraw1: USB HID v1.05 Device [HID 056a:00b2] on usb-dummy_hcd.9-1/input0 [ 598.413458][ T329] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:056A:00B2.0017/input/input81 [ 598.434232][ T36] audit: type=1400 audit(598.575:151695): avc: denied { name_bind } for pid=27837 comm="syz.7.9211" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 598.581153][T27771] rust_binder: Error while translating object. [ 598.581187][T27771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 598.587512][T27771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:505 [ 598.597563][ T5673] usb 10-1: USB disconnect, device number 78 [ 598.880449][ T36] audit: type=1400 audit(599.015:151696): avc: denied { load_policy } for pid=27842 comm="syz.2.9213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 598.880470][T27843] SELinux: policydb string length 0 does not match expected length 8 [ 598.880496][T27843] SELinux: failed to load policy [ 598.914463][T27843] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 598.935330][T27848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 598.944999][T27848] SELinux: failed to load policy [ 598.950255][T27848] random: crng reseeded on system resumption [ 598.975716][ T36] audit: type=1400 audit(599.115:151697): avc: denied { ioctl } for pid=27847 comm="syz.2.9215" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 598.975760][T27848] /dev/nbd2: Can't lookup blockdev [ 599.027906][ T36] audit: type=1400 audit(599.165:151698): avc: denied { write } for pid=27850 comm="syz.2.9216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 599.194536][T27872] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 599.204602][T27872] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:507 [ 599.312511][T27886] SELinux: policydb magic number 0x5b58728c does not match expected magic number 0xf97cff8c [ 599.339133][T27886] SELinux: failed to load policy [ 599.512997][T27903] binder: Bad value for 'stats' [ 599.518334][T27903] binder: Bad value for 'stats' [ 599.621860][ T36] audit: type=1400 audit(599.755:151699): avc: denied { setattr } for pid=27912 comm="syz.7.9238" name="NETLINK" dev="sockfs" ino=113276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.923347][ T5666] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 600.074452][ T5666] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.084646][ T5666] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.094939][ T5666] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.104066][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.112092][ T5666] usb 3-1: Product: syz [ 600.116344][ T5666] usb 3-1: Manufacturer: syz [ 600.120954][ T5666] usb 3-1: SerialNumber: syz [ 600.311668][T27920] rust_binder: Error while translating object. [ 600.311723][T27920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 600.318049][T27920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:519 [ 600.478573][T27933] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 600.528458][ T5666] usb 3-1: 0:2 : does not exist [ 600.577078][T27940] netlink: 'syz.7.9249': attribute type 4 has an invalid length. [ 600.734965][ T5666] usb 3-1: USB disconnect, device number 36 [ 600.745105][T24260] udevd[24260]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 600.800853][T27970] 9pnet_fd: Insufficient options for proto=fd [ 600.853846][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 600.853866][ T36] audit: type=1400 audit(600.995:151767): avc: denied { create } for pid=27977 comm="syz.9.9262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 600.893102][ T36] audit: type=1400 audit(601.025:151768): avc: denied { execute } for pid=27979 comm="syz.9.9263" path="/dev/ashmem" dev="devtmpfs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 600.915684][ T36] audit: type=1400 audit(601.035:151769): avc: denied { getopt } for pid=27979 comm="syz.9.9263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 600.935119][ T36] audit: type=1400 audit(601.055:151770): avc: denied { write } for pid=27981 comm="syz.9.9264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 600.948965][T27984] binder: Unknown parameter 'fscontext?}' [ 600.954241][ T36] audit: type=1400 audit(601.055:151771): avc: denied { ioctl } for pid=27981 comm="syz.9.9264" path="socket:[113517]" dev="sockfs" ino=113517 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 600.993376][T27988] rust_binder: Write failure EFAULT in pid:560 [ 601.008115][ T36] audit: type=1400 audit(601.145:151772): avc: denied { read } for pid=27989 comm="syz.9.9268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 601.196547][T27994] netlink: 'syz.7.9269': attribute type 1 has an invalid length. [ 601.753360][ T329] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 601.923334][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 601.939935][ T329] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 601.949305][ T329] usb 3-1: config 0 has no interface number 0 [ 601.957436][ T329] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 601.969326][ T36] audit: type=1400 audit(602.105:151773): avc: denied { mounton } for pid=28014 comm="syz.9.9276" path="/201/file0" dev="tmpfs" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 601.975599][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.013344][ T329] usb 3-1: Product: syz [ 602.017563][ T329] usb 3-1: Manufacturer: syz [ 602.022193][ T329] usb 3-1: SerialNumber: syz [ 602.033623][ T329] usb 3-1: config 0 descriptor?? [ 602.044904][ T329] smsc95xx v2.0.0 [ 602.072610][ T36] audit: type=1400 audit(602.205:151774): avc: denied { create } for pid=28016 comm="syz.9.9277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 602.095828][ T36] audit: type=1400 audit(602.235:151775): avc: denied { sys_admin } for pid=28016 comm="syz.9.9277" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 602.213502][T28024] fuse: Invalid rootmode [ 602.373333][ T456] usb 10-1: new full-speed USB device number 79 using dummy_hcd [ 602.440157][ T329] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 602.451600][ T329] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 602.524521][ T456] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.534819][ T456] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.545285][ T456] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 602.554528][ T456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.562645][ T456] usb 10-1: Product: syz [ 602.566946][ T456] usb 10-1: Manufacturer: syz [ 602.571657][ T456] usb 10-1: SerialNumber: syz [ 602.874040][ T329] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 602.884941][ T329] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 602.894684][ T329] usb 3-1: USB disconnect, device number 37 [ 602.979973][ T456] usb 10-1: 0:2 : does not exist [ 603.184283][ T456] usb 10-1: USB disconnect, device number 79 [ 603.288500][ T36] audit: type=1400 audit(603.425:151776): avc: denied { create } for pid=28054 comm="syz.1.9286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 603.377400][T28063] netlink: 'syz.1.9289': attribute type 4 has an invalid length. [ 603.386859][T28063] netlink: 'syz.1.9289': attribute type 4 has an invalid length. [ 603.782294][T28102] rust_binder: Write failure EFAULT in pid:589 [ 604.013361][ T31] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 604.053347][ T5666] usb 10-1: new full-speed USB device number 80 using dummy_hcd [ 604.173324][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 604.179599][ T31] usb 3-1: config index 0 descriptor too short (expected 30482, got 18) [ 604.188265][ T31] usb 3-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 604.197604][ T31] usb 3-1: config 0 has an invalid interface number: 255 but max is 100 [ 604.206249][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 604.215680][ T31] usb 3-1: config 0 has no interface number 0 [ 604.221900][ T31] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 604.233548][ T31] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 604.247388][ T31] usb 3-1: config 0 interface 255 has no altsetting 0 [ 604.254403][ T5666] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.264761][ T5666] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.274856][ T31] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 604.284076][ T31] usb 3-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 604.292898][ T31] usb 3-1: Product: syz [ 604.297247][ T31] usb 3-1: Manufacturer: syz [ 604.302074][ T5666] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.311338][ T5666] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.321809][ T31] usb 3-1: config 0 descriptor?? [ 604.332445][ T31] ftdi_sio 3-1:0.255: FTDI USB Serial Device converter detected [ 604.340183][ T5666] usb 10-1: Product: syz [ 604.344514][ T5666] usb 10-1: Manufacturer: syz [ 604.349223][ T5666] usb 10-1: SerialNumber: syz [ 604.354391][ T31] usb 3-1: Detected FT2232C/D [ 604.733547][T28153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.742132][T28153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.755750][ T31] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 604.763787][ T5666] usb 10-1: 0:2 : does not exist [ 604.769055][ T31] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 604.781076][ T31] usb 3-1: USB disconnect, device number 38 [ 604.788244][ T31] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 604.798400][ T31] ftdi_sio 3-1:0.255: device disconnected [ 604.817469][T28167] /dev/rnullb0: Can't open blockdev [ 604.870262][T28172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 604.967173][ T5666] usb 10-1: USB disconnect, device number 80 [ 605.090296][T28196] can: request_module (can-proto-0) failed. [ 605.122737][T28201] netlink: 'syz.1.9337': attribute type 4 has an invalid length. [ 605.183339][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 605.333329][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 605.339532][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 605.348425][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0062, bcdDevice= 0.40 [ 605.357604][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.365667][ T31] usb 3-1: Product: п [ 605.369777][ T31] usb 3-1: Manufacturer: 䀊 [ 605.374430][ T31] usb 3-1: SerialNumber: 촫詜煽俎 [ 605.585166][ T31] usbhid 3-1:1.0: can't add hid device: -22 [ 605.600894][ T31] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 605.610254][ T31] usb 3-1: USB disconnect, device number 39 [ 606.097272][T28248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9353'. [ 606.099576][T28249] rust_binder: Write failure EINVAL in pid:552 [ 606.125639][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 606.125656][ T36] audit: type=1326 audit(606.265:151781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.154844][ T36] audit: type=1326 audit(606.265:151782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.177935][ T36] audit: type=1326 audit(606.265:151783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.200970][ T36] audit: type=1326 audit(606.265:151784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.224460][ T36] audit: type=1326 audit(606.265:151785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.247416][ T36] audit: type=1326 audit(606.275:151786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.270671][ T36] audit: type=1326 audit(606.275:151787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.294191][ T36] audit: type=1326 audit(606.275:151788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.317309][ T36] audit: type=1326 audit(606.275:151789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.340380][ T36] audit: type=1326 audit(606.275:151790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28251 comm="syz.2.9354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ebdd8efc9 code=0x7ffc0000 [ 606.433426][ T329] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 606.486132][T28256] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 606.583387][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 606.589851][ T329] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 606.598089][ T329] usb 3-1: config 0 has no interface number 0 [ 606.606881][ T329] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 606.616215][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.624539][ T329] usb 3-1: Product: syz [ 606.628909][ T329] usb 3-1: Manufacturer: syz [ 606.633570][ T329] usb 3-1: SerialNumber: syz [ 606.638813][ T329] usb 3-1: config 0 descriptor?? [ 606.644822][ T329] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 606.651181][ T329] usb 3-1: No valid video chain found. [ 607.373496][T28282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.382572][T28282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.573509][T28293] binder: Unknown parameter 'defcontext01777777777777777777777' [ 607.684052][ T9] usb 3-1: USB disconnect, device number 40 [ 607.853341][ T31] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 608.004629][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.015720][ T31] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 608.024917][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.033832][ T31] usb 10-1: config 0 descriptor?? [ 608.441744][ T31] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 608.452927][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0018/input/input85 [ 608.533153][ T31] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 608.844544][ T31] usb 10-1: USB disconnect, device number 81 [ 609.457193][T28366] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:619 [ 609.554823][T28371] /dev/rnullb0: Can't open blockdev [ 610.345339][T28381] rust_binder: Error in use_page_slow: ESRCH [ 610.345353][T28381] rust_binder: use_range failure ESRCH [ 610.351537][T28381] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 610.357075][T28381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 610.365165][T28381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:627 [ 610.386599][T28384] random: crng reseeded on system resumption [ 610.422197][T28390] netlink: 328 bytes leftover after parsing attributes in process `syz.9.9401'. [ 610.435355][T28384] Unrecognized hibernate image header format! [ 610.441620][T28384] PM: hibernation: Image mismatch: architecture specific data [ 610.450904][T28392] rust_binder: Got transaction with invalid offset. [ 610.450988][T28392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 610.457827][T28392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:636 [ 610.505928][T28401] rust_binder: 638: no such ref 1 [ 610.682822][T28436] netlink: 'syz.1.9417': attribute type 1 has an invalid length. [ 610.725994][T28445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28445 comm=syz.1.9420 [ 610.857810][T28461] rust_binder: Error while translating object. [ 610.857865][T28461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 610.871607][T28461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:656 [ 610.928748][T28468] overlay: ./file0 is not a directory [ 611.293551][T28502] netlink: 96 bytes leftover after parsing attributes in process `syz.9.9434'. [ 611.461637][T28525] fuse: Bad value for 'fd' [ 611.485505][ T36] kauditd_printk_skb: 35 callbacks suppressed [ 611.485525][ T36] audit: type=1400 audit(611.625:151826): avc: denied { execute } for pid=28529 comm="syz.2.9443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 611.534503][T28535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9445'. [ 611.552191][T28535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 611.552229][T28535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:581 [ 611.599999][T28543] overlayfs: failed to clone upperpath [ 611.605440][T28541] rust_binder: Error in use_page_slow: ESRCH [ 611.608582][T28541] rust_binder: use_range failure ESRCH [ 611.614979][T28541] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 611.620797][T28541] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 611.630175][T28541] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:586 [ 611.658275][T28545] binder: Unknown parameter 'fscontext?}' [ 611.674236][T28547] binder: Unknown parameter 'fscontext?}' [ 611.777988][ T36] audit: type=1400 audit(611.915:151827): avc: denied { create } for pid=28552 comm="syz.2.9452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 611.867854][T28562] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 612.086971][T28573] rust_binder: Error in use_page_slow: ESRCH [ 612.086998][T28573] rust_binder: use_range failure ESRCH [ 612.100793][T28573] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 612.100826][T28573] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 612.108936][T28573] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:674 [ 612.120760][ T5666] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 612.303323][ T5666] usb 3-1: Using ep0 maxpacket: 8 [ 612.309634][ T5666] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 612.325521][ T5666] usb 3-1: config 179 has no interface number 0 [ 612.331873][ T5666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 612.343317][ T5666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 612.354798][ T5666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 612.366192][ T5666] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 612.399596][ T5666] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 612.462612][ T5666] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 612.502045][ T5666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.550468][T28562] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.989773][ T5666] usb 3-1: USB disconnect, device number 41 [ 612.989837][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 612.989879][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 613.209618][ T36] audit: type=1400 audit(613.345:151828): avc: denied { nlmsg_read } for pid=28624 comm="syz.1.9478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 613.245920][T28628] 9pnet_fd: Insufficient options for proto=fd [ 613.248991][T28631] rust_binder: Error while translating object. [ 613.252108][T28631] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 613.258494][T28631] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:689 [ 613.401079][T28657] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9489'. [ 613.506002][T28663] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9492'. [ 613.533319][ T9] usb 10-1: new full-speed USB device number 82 using dummy_hcd [ 613.563659][ T36] audit: type=1400 audit(613.705:151829): avc: denied { create } for pid=28671 comm="syz.2.9495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 613.694903][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 613.703183][ T9] usb 10-1: not running at top speed; connect to a high speed hub [ 613.711791][ T9] usb 10-1: config 15 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.723019][ T9] usb 10-1: config 15 interface 0 has no altsetting 0 [ 613.731858][ T36] audit: type=1400 audit(613.875:151830): avc: denied { mounton } for pid=28678 comm="syz.7.9497" path="/file0" dev="rootfs" ino=7043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 613.757492][ T9] usb 10-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=db.4d [ 613.767442][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.779207][ T9] usb 10-1: Product: syz [ 613.790490][ T9] usb 10-1: Manufacturer: syz [ 613.795758][ T9] usb 10-1: SerialNumber: syz [ 613.813351][ T329] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 613.973335][ T329] usb 3-1: Using ep0 maxpacket: 8 [ 613.979722][ T329] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.989810][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 613.996577][ T329] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 614.012643][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.033634][ T329] usb 3-1: config 0 descriptor?? [ 614.167824][ T36] audit: type=1400 audit(614.305:151831): avc: denied { shutdown } for pid=28702 comm="syz.7.9505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 614.188692][ T9] snd-usb-audio 10-1:15.0: probe with driver snd-usb-audio failed with error -22 [ 614.190017][T28703] netlink: 'syz.7.9505': attribute type 28 has an invalid length. [ 614.201396][ T9] usb 10-1: USB disconnect, device number 82 [ 614.216873][T24260] udevd[24260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:15.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 614.446133][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.453173][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.460191][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.467244][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.474261][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.481228][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.488218][ T329] holtek 0003:1241:5015.0019: unknown main item tag 0x0 [ 614.495929][ T329] holtek 0003:1241:5015.0019: hidraw0: USB HID v54.8a Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 614.501814][T28704] udevd[28704]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 614.507209][ T329] holtek 0003:1241:5015.0019: no inputs found [ 614.700231][ T5675] usb 3-1: USB disconnect, device number 42 [ 614.738783][T28716] 9pnet_fd: Insufficient options for proto=fd [ 615.219572][ T36] audit: type=1400 audit(615.355:151832): avc: denied { accept } for pid=28725 comm="syz.2.9513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 615.494393][T28739] netlink: 'syz.7.9517': attribute type 4 has an invalid length. [ 615.831762][T28749] netlink: 'syz.7.9520': attribute type 4 has an invalid length. [ 615.839661][T28748] netlink: 'syz.7.9520': attribute type 4 has an invalid length. [ 615.847530][T28749] netlink: 'syz.7.9520': attribute type 4 has an invalid length. [ 615.856647][T28748] x_tables: unsorted entry at hook 1 [ 615.858448][T28749] x_tables: unsorted entry at hook 1 [ 616.101255][T28764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9525'. [ 616.510764][T28785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9533'. [ 616.665603][ T36] audit: type=1400 audit(616.805:151833): avc: denied { unmount } for pid=25531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 616.706083][T28807] overlayfs: failed to clone upperpath [ 616.737696][T28811] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 616.816826][ T36] audit: type=1400 audit(616.955:151834): avc: denied { getopt } for pid=28821 comm="syz.2.9543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 616.851422][T28824] rust_binder: 630: no such ref 3 [ 616.856633][T28824] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 616.863720][T28824] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 616.870779][T28824] rust_binder: Write failure EFAULT in pid:630 [ 616.893484][T28830] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:636 [ 616.936103][T28835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9547'. [ 617.026685][T28847] fuse: Unknown parameter '' [ 617.251042][T28858] tmpfs: Unknown parameter 'grpquota' SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 617.332627][ T36] audit: type=1400 audit(617.465:151835): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[3004]" dev="pipefs" ino=3004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 617.934996][T11556] macsec0: left allmulticast mode [ 617.940094][T11556] veth1_macvtap: left allmulticast mode [ 617.946134][T11556] macsec0: left promiscuous mode [ 617.951197][T11556] bridge0: port 3(macsec0) entered disabled state [ 617.958204][T11556] bridge_slave_1: left allmulticast mode [ 617.963895][T11556] bridge_slave_1: left promiscuous mode [ 617.969618][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.977376][T11556] bridge_slave_0: left allmulticast mode [ 617.983047][T11556] bridge_slave_0: left promiscuous mode [ 617.989061][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.103601][T11556] tipc: Left network mode [ 618.164413][T11556] veth1_macvtap: left promiscuous mode [ 618.170146][T11556] veth0_vlan: left promiscuous mode [ 618.964213][T11556] bridge_slave_1: left allmulticast mode [ 618.969906][T11556] bridge_slave_1: left promiscuous mode [ 618.975623][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.983125][T11556] bridge_slave_0: left allmulticast mode [ 618.988892][T11556] bridge_slave_0: left promiscuous mode [ 618.994557][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.304221][T11556] veth1_macvtap: left promiscuous mode [ 619.309827][T11556] veth0_vlan: left promiscuous mode