last executing test programs: 9m47.83327405s ago: executing program 2 (id=2372): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x4) (async) unshare(0x20000400) (async) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc044) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C)', 0x2}], 0x1}}], 0x1, 0x200400c1) (async, rerun: 64) ioctl$EVIOCSMASK(r4, 0x40104593, 0xffffffffffffffff) (async, rerun: 64) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) bind$inet(r10, &(0x7f0000000140)={0x2, 0x810, @broadcast}, 0x10) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700", @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_pgetevents(r1, 0x3, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x5]}, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 9m47.823337201s ago: executing program 2 (id=2374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404100, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)=r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01052cbd7000fedbdf251b00000008009a000046"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m47.711406988s ago: executing program 2 (id=2376): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206"], 0x10}}, 0x0) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r1, 0xc0606610, &(0x7f0000000240)=0x60) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r4, 0x1) (async) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @remote}}}, 0x88) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 9m47.651128282s ago: executing program 2 (id=2377): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0xc0) (async) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0xc0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0xc0386723, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0xc0386723, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, 0x0, 0x378, 0x100000000000003) (async) ptrace$pokeuser(0x6, 0x0, 0x378, 0x100000000000003) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x7, 0x4d, 0x20, 0x6069, 0xf39, 0xe8f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x48, 0x1, 0x2, 0x1, 0x3, 0x91, 0x80, [], [{{0x9, 0x5, 0x2, 0x1, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x16, 0x200, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x9}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r6, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x40, 0x16}, &(0x7f0000000640)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0}) listen(r5, 0x2) (async) listen(r5, 0x2) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) (async) connect$unix(r4, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r4, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES16=r4], 0x18, 0x40001}}], 0x1, 0x0) accept(r5, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r7, &(0x7f0000000300)=@l2={0x1f, 0x0, @none}, &(0x7f0000000040)=0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) capget(&(0x7f0000002040)={0x19980330}, 0x0) (async) capget(&(0x7f0000002040)={0x19980330}, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 9m46.254832384s ago: executing program 2 (id=2390): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000002400070dfeffffff0000000001545f"], 0x3c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) (async) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = epoll_create1(0x80000) (async) r10 = epoll_create(0x4b) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)={0x80000001}) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001200)={0x60000010}) (async) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000100)={0xa000000d}) (async) close(r9) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) r12 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x103040, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0xd, 0xf241, 0x9, 0x3}) (async) move_mount(r12, &(0x7f0000000240)='./file0\x00', r6, &(0x7f0000000280)='./file0\x00', 0x80) 9m46.091157455s ago: executing program 2 (id=2391): r0 = getpgrp(0x0) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = gettid() ioprio_get$pid(0x1, r1) r2 = epoll_create(0x6) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x100002009}) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) preadv2(r4, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/121, 0x79}], 0x9, 0x1000, 0x8, 0x14) syz_clone(0x0, &(0x7f00000006c0)="51d65a902b61aa68d276981aad6c722258cabe831bed2f482fa1858607e945f9558d793a1c4d75e3fd015a0054749724dc4e809418b44115d44a4445c182e547183cec7cce4bb193482635794c9746f0a3e39219792f38cb8fcbe692e38f15db5e142dfaf4cd848eeee1e4c3a032ea8f3928a638778a7af65981f140ca3773afa6d187ec59267057cc37f70900461c3a48c719a3fa78ea837554576469479b689952ddfa140719dead7656e8d7976e7cb510ccff02790452eded5d355406c828e0a22230674910d42de676460187a4e493def0056a98c0069aa118d52360ebc3d2bf1a8f16f6e74d", 0xe8, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="619127554daa29f65e4ba22d5f71e2370498f33cd81d0f39ad1f6e1544c31140ecbe79667240a742") kcmp(r0, r1, 0x4, r4, r3) write$cgroup_subtree(r3, &(0x7f0000000880)={[{0x2b, 'devices'}, {0x2b, 'net'}, {0x2d, 'devices'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2d, 'blkio'}]}, 0x2a) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000008c0)=0xf, 0x4) mkdirat(r3, &(0x7f0000000900)='./file0\x00', 0x30) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000940)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000d40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000d80)='notify_on_release\x00', 0x0, r2) r5 = epoll_create(0x4d) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000dc0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000e00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001040)={"8dda14024fc3f98ba3f943e848e195ca", r6, r7, {0xffff}, {0x8001, 0x5}, 0x401, [0x4, 0x8, 0x6, 0x4, 0x10000, 0x8000, 0x5, 0x0, 0x3, 0x5, 0x7, 0x4, 0x2, 0x6, 0xd, 0x2a]}) r8 = accept$nfc_llcp(r3, &(0x7f0000001140), &(0x7f00000011c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000001200)=0x448, 0x4) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x8, 0x3) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f00000013c0)=0x1, 0x4) sendmsg$AUDIT_USER(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xb0, 0x3ed, 0x800, 0x70bd26, 0x25dfdbfe, "6b3a26f105cdd4cfcf7ae38255b647d32d79848dce776e4f0850c6516be8dc56c76144d69b80ab915c9d372385e8ca1a0a5905e28577e3e96b660d202bba4e7ca3cbd3601aa60ae7cb61293b2bcb8df758a03193b7ec558fe3f438a478567b013499db5ba35cb93cd05e23217676e4b06b998d7eb1d94959546ce18b274d65e48f555e212fd5dcaa2e9db0c3f481ae65ba9ef2a3d46b54c4931d0ec2b7cf4357", ["", "", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001580)={0x6, 0x0, [{0x0, 0x7, 0x2, 0x2, 0x0, 0x8000, 0x8}, {0xc0000000, 0x3, 0x2, 0x3, 0x0, 0x4}, {0x0, 0x1, 0xd, 0xc7ed, 0x81, 0x2}, {0x80000000, 0xfffffffc, 0x0, 0x8001, 0x4c7, 0x0, 0x5}, {0xc0000001, 0x3, 0x2, 0x6, 0x7, 0xfffffffb, 0x5}, {0x80000001, 0x2, 0x3, 0x7, 0x0, 0x3, 0x84}]}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2011}, 0x800) 9m46.090301985s ago: executing program 32 (id=2391): r0 = getpgrp(0x0) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r1 = gettid() ioprio_get$pid(0x1, r1) r2 = epoll_create(0x6) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x100002009}) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) preadv2(r4, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000000100)=""/122, 0x7a}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)=""/118, 0x76}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/121, 0x79}], 0x9, 0x1000, 0x8, 0x14) syz_clone(0x0, &(0x7f00000006c0)="51d65a902b61aa68d276981aad6c722258cabe831bed2f482fa1858607e945f9558d793a1c4d75e3fd015a0054749724dc4e809418b44115d44a4445c182e547183cec7cce4bb193482635794c9746f0a3e39219792f38cb8fcbe692e38f15db5e142dfaf4cd848eeee1e4c3a032ea8f3928a638778a7af65981f140ca3773afa6d187ec59267057cc37f70900461c3a48c719a3fa78ea837554576469479b689952ddfa140719dead7656e8d7976e7cb510ccff02790452eded5d355406c828e0a22230674910d42de676460187a4e493def0056a98c0069aa118d52360ebc3d2bf1a8f16f6e74d", 0xe8, &(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)="619127554daa29f65e4ba22d5f71e2370498f33cd81d0f39ad1f6e1544c31140ecbe79667240a742") kcmp(r0, r1, 0x4, r4, r3) write$cgroup_subtree(r3, &(0x7f0000000880)={[{0x2b, 'devices'}, {0x2b, 'net'}, {0x2d, 'devices'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2d, 'io'}, {0x2d, 'blkio'}]}, 0x2a) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f00000008c0)=0xf, 0x4) mkdirat(r3, &(0x7f0000000900)='./file0\x00', 0x30) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000940)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000d40)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x5}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000d80)='notify_on_release\x00', 0x0, r2) r5 = epoll_create(0x4d) ioctl$UFFDIO_POISON(r3, 0xc020aa08, &(0x7f0000000dc0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000e00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000001000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001040)={"8dda14024fc3f98ba3f943e848e195ca", r6, r7, {0xffff}, {0x8001, 0x5}, 0x401, [0x4, 0x8, 0x6, 0x4, 0x10000, 0x8000, 0x5, 0x0, 0x3, 0x5, 0x7, 0x4, 0x2, 0x6, 0xd, 0x2a]}) r8 = accept$nfc_llcp(r3, &(0x7f0000001140), &(0x7f00000011c0)=0x60) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000001200)=0x448, 0x4) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x8, 0x3) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x20004040) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f00000013c0)=0x1, 0x4) sendmsg$AUDIT_USER(r3, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xb0, 0x3ed, 0x800, 0x70bd26, 0x25dfdbfe, "6b3a26f105cdd4cfcf7ae38255b647d32d79848dce776e4f0850c6516be8dc56c76144d69b80ab915c9d372385e8ca1a0a5905e28577e3e96b660d202bba4e7ca3cbd3601aa60ae7cb61293b2bcb8df758a03193b7ec558fe3f438a478567b013499db5ba35cb93cd05e23217676e4b06b998d7eb1d94959546ce18b274d65e48f555e212fd5dcaa2e9db0c3f481ae65ba9ef2a3d46b54c4931d0ec2b7cf4357", ["", "", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4840) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001580)={0x6, 0x0, [{0x0, 0x7, 0x2, 0x2, 0x0, 0x8000, 0x8}, {0xc0000000, 0x3, 0x2, 0x3, 0x0, 0x4}, {0x0, 0x1, 0xd, 0xc7ed, 0x81, 0x2}, {0x80000000, 0xfffffffc, 0x0, 0x8001, 0x4c7, 0x0, 0x5}, {0xc0000001, 0x3, 0x2, 0x6, 0x7, 0xfffffffb, 0x5}, {0x80000001, 0x2, 0x3, 0x7, 0x0, 0x3, 0x84}]}) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x40, 0x7, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x2011}, 0x800) 3m33.829355697s ago: executing program 4 (id=8616): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000140)={0x18}, 0x18) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) writev(r3, &(0x7f00000023c0)=[{&(0x7f00000000c0)="8036005cff1df06a", 0x8}, {&(0x7f0000001280)="8f4e549f731512c8751729a0395907d68dbbb467d21d994c83d72acada94eba0459d8631dcf6180426e17b4fd3b3e0347aef1e31a0f087810bd1c66b4b31e9fcc50e1302a1b31cb85b7d451903f0b250d9000a2e22cc06edd749dec2750379c294a7a7ebdef2b2bc1d2428bca1656b495548c470636acd76e0030328799b595bd8a8e4a20bef117203ee23aa0a285ec99a86764e8d5193411b292314dfebb68e0be1a6e0d34373b772660bcee078d63d17f7051ce1d51b0930aeb6b5739e0c7c45e0c8d770182901d87ae5db7d32f04c537bfc7dd74232da31d35c06e077", 0xde}, {&(0x7f0000000180)="683ae904c3521bbb32ce252093c4d2d61bd30565381b53e0e12e099992f7dd9d28571a", 0x23}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="983ee7535ee8", 0x6}], 0x5) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000010c0)='~[\x1d\xe81\xc7 /)\x1d\x00\x9f\xf7\xc5\\R\xe6\x05/n\x1c\xf3B\x83\xf8p\xaa\xa9\x11P\xb1\xf9\xd4I\xc0\xf0\x15\xb0\xe7', 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c64656275673d3078303030303030303030303030303030372c0c000000000000000e95425486a7c776bbcde676906df94ede16fa4bae5fd0c680d7"]) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (rerun: 32) pread64(r4, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m33.829125437s ago: executing program 4 (id=8617): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0) (async) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) (async) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000000)='veth0\x00') (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x80000000, 0x2, 0x2, 0x6, 0x81, 0x7}, 0x20) 3m33.811273738s ago: executing program 4 (id=8620): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x84801, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x0, 0x2000}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x7a72d000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000000c0)={0x9, [0xfffffffffffffffb, 0x7ff, 0x4, 0x1000, 0x401, 0x7, 0x9, 0x6, 0x358c000000]}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000140)={0x15, 0x6, 0x8}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100409, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x31, 0x30, 0x65, 0x33, 0x32, 0x30, 0x65], 0x2d, [0x62, 0x38, 0x37, 0x31], 0x2d, [0x37, 0x65, 0x63, 0x65], 0x2d, [0x37, 0x36, 0x30, 0x36], 0x2d, [0x36, 0x35, 0x33, 0x36, 0x0, 0x65, 0x36, 0x38]}}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xac]}, 0x8) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000300)={0x6, 0x2, 0x7, 0x80000001, 0x3}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) memfd_create(&(0x7f00000023c0)='9p\x00', 0x2) r6 = socket(0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000049c0)={'vxcan0\x00', 0x0}) sendmmsg(r6, &(0x7f0000006a40)=[{{&(0x7f0000002400)=@phonet={0x23, 0x4, 0xc, 0x7}, 0x80, &(0x7f0000004800)=[{&(0x7f0000002480)="61da73109dad198c4affb3e90126d309745ee8193ea90c618aceec9f22a6e781c1695332c05a5b56ee122e4e74ad413482d681bb0e794b0797b324beb8959d2b3a462410da80b98786225cfcee4072f6a7fa1204a13c945e71e95dacbcd12739c524ad2f53e750f89855480eb5211840956ecd01540495", 0x77}, {&(0x7f0000002500)="86fd", 0x2}, {&(0x7f0000002540)="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", 0x1000}, {&(0x7f0000003540)="e76e21bbe29975bed548e385e127136043e41ff1fc7b42db28ea3b70e2a2c0ee72b71c3146d9a674e9439cd24c707bbd3cbd780b4dfe67ec05187d9bb0ff608471", 0x41}, {&(0x7f00000035c0)="1a8bc271c4fac7d8841f174f233336df2f08fa182bafba2126375054a23b25300283cdbeb24dc523e83d4df327c3b5274c0b090155042b37cb9671f226b880a0a7beb2f203ae62e26329d92b033f9717576d7f8a382f6a00e8da6f4387c85320950e44686fb56a8e1ab1531e91d487feee8d9cb79ec7f674e3b951e43937301d42de976fb569cd420592884df8bd5fb07655708638ea4389bb04275edc38fe04665f162c5a49f9ba2bc4f53c1afbfa43cabd21dd31ff71c6f7a11e3e97b4cb41436475ab4bc085001732b3e9caf2a8affd803aa371ec55398cf544833645aadca05ebc03a3e37b2a59aec5da3d5506a7022e2abbf707dabccf2f459ab450d392e4e8dff9f5e65cf870ccd7bb73764ed140891dca6adc767f6b305d61381a2b418dce2546ce7cb816bb1c4617dc3d0a8ebeb3805775e91f77f91b47d0bf10882e481e6bf28f5afd9cf8faae9e697a64424651dd98e4ebc39065e749c660f22c77f975b3019d8e13543dfdc5969ac2de11c66973590784f6dca48a2be29ba4adcc8d0b1303babed2c575196b6a96d36b306ea634590aabd18f4e147305e8d40284c3c9f1270e0f2e6a2451f5a01cfb67581d674b19830565858ddd6a5b0d750f17cc1bfd284b6fdb23f9957ecdfbdef24ee2dc5bb2393ecc24844fceae871e5f24f1329b83f954a347d438e6bd53c86f1222078cf2e6c6fdf1f88a4ba5787dc69b40a599fb24c64f79fc35e7cf15cf91ff8d05ec49fd6b61ef184d0ebe299531306ab647f2134d6257a67f90a145570c27bdcfa94d310aec9ab97b0ab8cef96e506865286a9a11bc6ce874d8838d371cd62cb00a700a0df5ae9b587f1fd9e4ba7fce08c3a192acc347af7c376dfa96d15b7ff48edfb058af398b8d5268d1c0f2e194942726a6cca7de1af17e52a551cbfad7970d6808e5f69e5be70b9222167412ee209937086d8d34b8283f774480eb59f2425429577810174493947d69701cfd6661cfbbcfed947f37e1fbfc2f9573fda568d29bef41e3bfdc4b7ab8052cfb342c794b101b0681d2b70d9cc76ce6cfd67a62b9d36d3cde5e4cfb96c2f651cdd5723934e73ce08129b6edc665a073c090596182cbfb968d461a1b737f84e110d56402b1380a836b7821cb37d9b1d2442fb1a55ab9de6886ee4ceb02c6e7f034ac8679d24c31ac3445497e56470ed5a0717f9321207174cd8c9b2e0f8dd460c901bf0ca900566706657a7214f39627b5fa08ebd32d7e082b2f780dde6f8725d85e29a53b5c5b686e6a56d1a42ea5dc4fb19415eb9c0fc644a1fa61c13d632e7f141843899cc20581ee990a85750c8759ba64cbb87d22ccfdf21b02efa06971f7e5cfa543f2b86acc4d140a2a2f3f4881e366dabbd73fc5ca380a63c397a0dd610108b86c8d5ac20759d848b5108c705c6adb60d356bbed95cfe62a12859c6e6b92a06b8ac7e39ba603af429cb3be5ea9ea3dbe53b8eca1660f062049d4dab08b8cac5689ce3ad6ba86dc99e86f5d762ff2b1bfb4ea76d7a8f0c7ef7abef711f636624c28540e81b05b2632a9568f560357b4136cb9132f9e2dcf9424cfc5d570e016188e46e6c0eecac183fd255c66605707ab56a76bb8561eb389313d89c85820b150dee67be060d2ae09af23c7934d962ed3f36c66480228e6608a7327142db716bd7f85aecc322d15d2e54f748005acc422b394aab7b41d47182a5e59c60627c3276d4b29e614ad6f536fe9373bcc77d95d85f44a68a457da6773fcf0322916778e0062a4e7a4e52a88b569e86bd739981520747251606340e4dad82700834b8a7498dcc449224ef826a2570587c85dd5f595e13ff3b3eb9744bf0524da5b104c0d7922a680219ef0011c79694ead30f57ff2780f1d9697d15651ed9b59aa5c6cfdcfd0f1f7a95ffd64b7e7a5c7e770981c1f9590ede0fd57bdf59fa75c2c7591e9faa89a9558541b96fac5428566c94299e389dc730608e5350281066c3cc459b8e4602bd73077e9eb62e20fcdf809c60b09bc4f02ceacbdb1d09614fb40d310011f25199b8e4ca63ca89949c885ac4a38ddf0fa7b59cd5b2460bab03e82c4b96d220afbb01d2f8f5b0cc0860ec10e139755eb5354168dbb4dc3f70f109af51c15b9e15cb9d3fa287f9618d93fe3be2b622b1028e8889e47ecc519986880ef7c22b2e27af440f96dc65ae66080bbe71743f1bba8c23b3e51e8c70cc8fd6d970318e74d4b0b40c8f6c274ff4ea6bdc2ea08e4b9e871b92c01b499bd56cb50b6e8610c4c3a17776fdf8767de5ef8c385bd3f548bbe87c78f8a0fea5355115988dc23e3033137f08f3ff371b3fe51476933e4a1e74a00a45f75646ad575ce121220cb671d6096fae3a1cea460f8365fee830ea35a38d3c7f86764a95af406035a56ee5f183e005df5df66075fed1753f4e77cba3254b7c95ee1cb0b6d6eb9a89cc4d97ec4b0e8451a51594abc201096897010158ec252ced1b8c1999589de2f725ff17dd0ccb327c4966a718a8a5ca6c8c8108120295fe1b95bb2f3bd2c06f6fa7babe8d9dc5b169e712c3c3a9a9d15441230b75d9a2e1187129724b3ad66a87f0f848e1ba2bc6fab91c0d1ff48947547f5880d31b5f0631b2f69be643177bc3550ea6a89a18d56e4b4b71e82282d05e9cc08d67e9e9b7ab754b9608edee1444efa561b18d4e0d6c0b62d67f0db1e6f2e7d720423f6e42288d4fff9958e59619377ad0747686b9e946192ddd42422fe07911244773bf62dcc39f3bc40baa392cbeb53df9552e133c45c1e4b4f21db779c767684f0051efdb5b3d506afbb198de4dee12454c7ad0ce4f4db904ef3d483ea36a8625b38b7f12b5053db50295cd4f04254714065f3c9b8bc1aa4a96381e8f57e69aecdd39b60e47666018586cb30b6c9e8359abcb7ac87f6034c3c85b2b24132599be255352871c3d1e7ec791c62cfb2353ab30db75ea1e31e58aac26e75bc166470e170b8492bf854b8e10fe28a925cae6969ea88ea8b9bc58197a31435e8977cfa93712a2c9dd07ad0b6eaa81d810b7fea5073de94e77daea0c00f9ac95b91eb11c4da101e27a87d392fee48b6724764c0502e37ad194a48fe473b4c1c4c9c5b66f0b82198a049fa4f349f74d9e6699d5f7f8eb3650d54a0d11a397e29500b3fde9e1c1a71bed44771a1607a6453bf5a79b627f6ae3da8248804000283c1c980c86f556c0c82485eb0051c05e7a3b69dc6c2f2339b92f9f5b3d386884b58fee5afa9142ceb301c667498af67dc3ee4dd81edcd3090404b7ec5ee9dd9c01732841b8a5285158d520271baf62e4e771bb11e4ccb9a5079cb0d8e07fd0fa5d3dfc7c3fd05dc8816627cb4e189f1e0d4ad94353d95977de0966ade433db5aa53a2decf93c9cb42453e8f83ae9d9a0eb1948056d7ee88c89dca0cb56a5400ed2fb2c2dc857f8466a67fa2614d26b819d8e01f07b3814abbafe87a7d81c4638fabfb549676409253dc8209ac2fbff8816d3706e5087d0f054c57677c7862a45da5ef401cfd1a096ab9c6b42fb0fb7ecc23a62757b37ef3da27eb3b374cbfd0a8e1c5c47d6f9b4a7e833ca2b9165e6296fa6ed0c730dbf4016d142632d4281b0d79b6fa1502b91fffd486b5366d77195436abde7a028a47f1484e67b59574260353b469ce870bcbe54315512d81082bbe9ef857d8e3375f690968e350658f7a1984207d0c5704bcc5a0cda65db764d2ffe828500829f0cf9445310725176272e75e3e5c6108d8f67bf34697f0650e6e6c743bd7798b4a755338498acc096050dc410a2f63ab0d17f98c6fb1f92e87b6d09f65ec75e93dde2649c5d74d24bb9c74303d5101776bcb75b404a05b8c644ff5ec5a65be80ff2b1deea104a15044f4e119e931995632a9acd6c7271e67207f266924da908fdbaff0e86767753e4bc4d95e0fb8eb32c49c1a83a5256b25947642ef468514aca74863c9cb3beaf5627aaf3256d5c0805273944a68635ad24801027717157aa3b51f2d537558cf6feca0695f768a7c971dfc05c58fc008160fd879c3ad2d1ff57dba088e689d562e848cec871ec1c62e4f44e1b26819e86d6b761ecf22e640fe8a9f4fbe96817ae440af2bfecdd8fa1c56dbffb0aba69fd57f3eb0cb3cc0492f396836c6720c858e3ece859ef85661cc116002a63bba45c237afc8f7f2297b2e455d91c599fdb9f73d2d89af6728ea7bc5c6f589c67ab9d6169c7121c4728e970ee9ab0b1ee2e399420ea298ca2af8874c41705c7e24b23feb52a575993f0988dffb4777e37c9272680eafd82c005f10144155708bc9b49cf6659dba7d166b6d7c7f4c03fd22a6308924223e43dcfb553efa25e6d2786aa9eee4e8e6393bdd3e8f58bfebb2e4dbbc76a6a7f1b8331294ac20d8f308a408cbedb8c31087ce3efb8af824f101c60cc8e6b8ba3f872a9dbb40fc3d453122b4b4911a865b58e6f2a12350b2f6d89bed118879efd4ca37e9fa1e8974d674cceff1fe94e6d6dd48da846347234e18613b13fb829165340a4755fb1fac4c189f8e8eb9fd6c7ef6d139992b7b696b898b1fd43c5134e875ff8080eb0bfe5e6cf7b51dca3d15b2006f52da4a5a0b2690ec921b49fdfbaf7e267b668d8adcf2a20e48f207ae83dd6f43b643fda07ab9e74a2e138fc794b0a5fcea169fd987b729ddab1a2838ad14c5a2ea9cee3a8b1b48d8ee70386a95da0c7f8dd738f13450a459af0b7f7e107da3015dfb805ce9c6ea73c8ae9ecffdd118d39210e83c2e8713d04bfc3b9d0fcccb49c3ee439d09405a7de3538fc716d3c872000298a57bca166deca13f29a700c59bd74404a4c509801c17172f404ddd3019674414b79a1a5a326e36138af006ea44db9e194bdde92e433cdb9268f45d615ae0f881690db20f21774bec75453f935400c40f04ad15e96ece121aa5848b3fbdff88dd0d2dd28472f98a4b5a2056cfb5fd0a1f3bca94dfe6dcf6cdf53be38afa8ba8b64a0bb6cc2fc1115afac8386fc756b4cfc4514fff289c86c08d4d7b33d10fc7a3ff46b5742c0c65c358be86d9212b3073309e20b4e2d4e947b2e8143daf1db062e3c3519501af040da98c5a4d9a169cc0e3fd523388f2f11a2217daa79c89a93cf1b867eb9db2b30144459611215b710b2fb41103a642b40aeb753ccc2a59d82f990e940a0f19dab82d8294e934df7c82e5a979edbd9d75c66167ebdcc1f0153f298a9881ebc605fb172686190e57f79cd4a34dff35eee5ddba7ca83afcd988bff13fe68e370e299456787b2b9f556bf0a55a0e791be95e03a6b5cc6a310f41c14d49df379e235f2da100dc72315e22d98f03066e728382033b2feb8eb8af1c9493113e61ced8da8bb4cc182c657feff0da9923170843bd93ec5ffd42b61d51d37c1069ee8db656842d0b434c6d6a3b430d6bd041940149b6f740338659a1173b728e0a186a009f265c64e9838f8a670a6e0a533e271df80108590b80c801a4269dd69f617b7afaa09dff861e5ddf864ab7aaa0b119b1427b95f4ea93fc37fa4a92e6ddeeafc06becb8ff3adeb7c74813bbb4566df88052454e088e13770c186eb6354dd29cc81df4d6de0bed39bc717228ef750b4a9964d5f8e93f5aac1e3f33cb5bb71d4a322a82ed8647f2feeb1d26c8329a64728b9ef1aa2941ee2ba2ee106c6f707b65bd2887aba67a68417513e58656cafb4fb552a07b7e31f5d97673da74aa5d38dda9960df44119306a57c968727d40819da96a427f112d720c5d0059fd8ca8448f542f32d92bf351437b2c568191fad7bda0d0fc08b94a004cf6484870dff0423b1f4ca4d74e0f", 0x1000}, {&(0x7f00000045c0)="c05206076ef1f460ce956240eee40f3840b21524d783ff3877f3ca41c8d2d77dd06977ecd5c8fe023b87ed1933582e258286906c1fccbe7f749a391ccd0bbe2dab2ae9b29bc0c398071ed4cd3ceafc672a2bd70c49571dfc8dfcd1a855282913cdfb6b", 0x63}, {&(0x7f0000004640)="c48ee23f0bb186a877e3f9622a90db13befe9ba81a8ffb60b51e296fe8dc5f5d60ff3d15f82953724bd61bb7345d3caa7e4c43cb743f1375cea824d3b9e55c2d19da838aef97823c5957b53d701ed7b5c155b16ac70298404dd013487ec1a99327c28651899d7c1609f216baa7580c7790c73dc1bafb3ccdc8774da6b30c06c42eed58d6e7a6962461843c7a9f60c999fb1dcd72fce52b7c5f6fcfd84c764e62c6bd2387d3c2dcc799a0f8546444683cc9ceeb82617b6c5463fe281a4b383cdfc7bccb6452c8837fef29514d7ae1db637e54866992", 0xd5}, {&(0x7f0000004740)="c369688ff261aeb4ce08366bdb6da327add5691eb9f3ca06c163be6482be51cc74647198362b4a707416fe9655dd291e2ace396bd20a6ae550bf2e7f3e92cfe387fd2db00dca42f5c40179319d0522f898af69bc56c6cb0e1dcbebf61532080a3a93ead66b8bcb342ad09192d302528a82e616db0907b7f9f636cf5969fb85bcf8cac9dd2de62a224f262aa954065c445e8c04dea435def4c6524573d7d18f7a", 0xa0}], 0x8, &(0x7f0000004880)=[{0x80, 0x104, 0xc, "815775037d620ed89a756ac3d06a5c184e4ebd49f02edb04f3d24a4382aaaf2b0c5ccb18c9ecf3471f62096ad1a4c605e634106b938eed79b1645726a7f37dcb34f6efa58f461ac7fb1c7fd2df74b999034f508f22dd31b2960cb1d86fe2a3e9d31aac0ebaea56278b6d28"}, {0xb8, 0x103, 0x0, "71a26004b51687bd0dae4aa9ec09c8d71eaf009cfa37b158a8d369e78c461c9872eafd090a84be1d2c970074389bb34e6b10e12544da526ff1868fa725e9c0c3521c047264bfc1e3b5e2e830b7cc633a292b7c9d4fe281e473dd7c87d876da0bf0a3fc9ff22cf46d08f9e920eacf45395066116288fcecbb03923ef304673d9d2b43db511cde4d3c29ec3acb46fa2c28fe71b810948a429f7252a14604e1659b009e682f4f"}], 0x138}}, {{&(0x7f0000004a00)=@can={0x1d, r7}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004a80)="55b54602fc39351db0c3dd1b56cc24f5cb66cf5bb6f1ff0b0b32adb7abb98ccdd74b266b7b4b38961f33a80eb4b6d1c14d754d59912266e4fe4fbe4569a7f7a280d197b2efc783c28cb38d64ae8d5211599c12c5065f2dcf61c0faed750775505c915b9e9f29ed48b193330b51bd6ef5d84dfe13ae67719a761fcbe16509aba47720f192beb78e6293463af847f3668a6c7e151e9168e3fdf5ec2d2657fe2e4e21406348554bd7bab48c4f582d", 0xad}, {&(0x7f0000004b40)="b46ddbd42bf9cda23abfaffebdea991c6c4a5b48ffc1cc4552b28712b00adffa7d6fa5357e6f3bf24ad9085d160b5cd8ce2f7a88f49e266f9349566b48d8165e4b6020bc9733f92ddfc10dca6e4499a90d8aa7cecdb5d8e4", 0x58}, {&(0x7f0000004bc0)="2004283306852645c1032453140af3805b1e85850de0c75037cb6d79b92130ba1938032f904a395afe06f1b5fc67898fc15d02741bb27c51524c646ca967a8ffea51c6730f6c6cc4ded152d0ed933179924ae39ebea4e88a8b776bb75377553dc6216cf61ae0a2ab2299bca9c027264ccd0fa10efe17b57eb1aaba194a0a58c3b5b480b6b95f6176181d2be0fd87bb2bf95fd6eb8730de207623467e6bbb039b78cf4407f7263ff064e4508289125c5fb840b982d1f12758d8dd367e8cc06656b073f6864c6ad75b3d6d439b1eb4443916bad6f49fbecf8ca9a7e32efcd500bcf08ece", 0xe3}, {&(0x7f0000004cc0)="f85af7264381a8540626d3f2214ef06a3b04", 0x12}, {&(0x7f0000004d00)="5fee9be8baf7ea5913dee35ef1b93156b2c5a0c38f2214089070a3b06a21122003a15134dfbb266480b235de3909485ff7bb5893825c603de5942b4ad8c22e56a490df0fa9ae2f5dbbf8663beb7a26527f34ad93e6d5d8e374c8c5b36fc117076f81b0714dd05f6fd86a247444407c7676c285250ce97fad3acd65060e276ed253c8f3cf340083e1635c", 0x8a}, {&(0x7f0000004dc0)="10d4109e179ac89d2d5dab23368af6", 0xf}, {&(0x7f0000004e00)="a0ee6db1141fd986b1e8452442a427d55116e02bb6f0117f4494638881de908ed298341c4668b176aeaf5a1ff03a06404fd1f4ac8c48bcba1e9bfd6d5c6a19f5fba52f64ee3c81092061601ed3ee1d128be124e9032613efbd1cf9017640af42fefe3634a35e540ea879035d450f30162a2d9aad4ae678e2847680293fa6f07afd9b047827d6402cf3030ee049e6e8904e134e7a5991f5c6833c4fe1b0672da76fce8b05affecb34769c30f54b0770f527838351ecd918f2c807c9830d0ab830ff373e3290b4ebfe0ce9f9ef0b7473e56a1c7a7430cd6b56e47cb93275ac0fae", 0xe0}, {&(0x7f0000004f00)="f2403e45ecae3d8407c005141823ceba5283919103f7fc16d8c5b75b7440b906c099b2eef3d0bb90a24fd4e6b8b18e819e2ba76abc256f8c2daecd1b928ca58d35697c117d765e750633a4774c3792c05a6913775385adc6109ea1e4c05999db4d6f41fc3d70d8fa5fe3758745d5f92ceb8fe79b58f5a7913f3f49126490f69c28847cf558f6b44239f2da25ffc5881192945c9f0e907a", 0x97}, {&(0x7f0000004fc0)="1eed6794b6ed0104fb596e69d1e058857c1433161b4f48b23e90162193c1dd6cf28ecbbf4be94e364a20c49e444f483ba78e71291722912b82f1ec8267066cf96864fa55151f6c0be4c47106a7ea2774c63b0ee2c5d802c2b3c8f38f7c8daa592c8693e90c6eae54ecf4cfd796b2986b7ef46ea5b2882b759c9f83d14369cfe082336bbcb4aec9fb31c0eebef06252c33fdeaef3756799a76f8bd2679980431210eced28333ff2ebfb06da958f940171ef4a92084f", 0xb5}], 0x9, &(0x7f0000005140)=[{0x10, 0x6, 0x7}, {0xc0, 0x10d, 0x9000, "75f55f7033a3eb9c9fa860a662f0744a55283342aa410b696e4c403acbd3e3661f637a7022531896fb3aec5a3dc4178269f798faa557fb45d24dbdeb995b65bc5e3c3889627949c0b5770a673e3dc29e7110d945803e853348b07781b195cc8a0419ace434ec744a39dde19746c589ebea8c705f4cc6f07f91996586c54b7c2a7e8e27efc3695283c649e887d029cd644138aae73effd802dfbbf79d5cd69042bcd5a63786c73f4ab2770c277762"}, {0x50, 0x108, 0x1, "d0151f0238b5d650785bef40059aa3132488f58773705c7c70dee632a8f84d926e97bc61888bb785f65709a2a870bf5752eb574fc10aad819d40c2a0426bf187"}, {0x38, 0xc, 0x0, "6c8f55ccbae7e37c22b6ae6531cd56d9906f63f049b2c45a0207b6b5e0d5e97525"}, {0xb8, 0x0, 0x81, "8bcf29147199616171688fcfa08a58550e6b729858fb84fc37fd4a7db7d513d7d2bb45fd255004c722b249e4470905311025208b3d5809c1f0dfdeee9510490cb9696aa2309224d038a0aeebb01581f2e0228f8e2214d1b07b696991134415f0c765acf22f1bc9df55a6e1985753f92ff03d6819004eb87bc9c91e0e7b208f85bc12600e50bc5b6fb30a8e0b4f7b5fc2e3ba1b2c537d266e311d3a4bce710ead117f68852b"}, {0x80, 0x10e, 0xbd, "ab1586fd14490be2b73e18df637750fc5cb327298109e72c89a1ef43f34bcbb708900a11ee650c2b07b49530eac7244d3ce10f2b7fb81f7e26c12a162c16ffd83ce2acf709e3345bc2b0482b3bf6a8ccd1f050bb2251ced969eb9201fb33bae7decce8ccb55ddd76cc7b"}, {0x1010, 0x110, 0xfffffff8, "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"}, {0x58, 0x11, 0x1ff, "57bb9c928c876364c7f32e6e3ceebefa8485d674a7a87ac1707399e321ca0ab8802ff3042f1b8c4630fd0efe340c34f3b90183b73e5f7ee37ac62f797428baccb24b492db9d65b1b"}, {0x110, 0x10b, 0x8, "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"}], 0x1408}}, {{&(0x7f0000006580)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x3, 0x2, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}}, 0x80, &(0x7f00000069c0)=[{&(0x7f0000006600)="1af342567f87c5e235994259c8c0d98ef6efe142", 0x14}, {&(0x7f0000006640)="651d005323e42c87636c536767e5e974f0bd023cc5fdc834512becd6c2a86dce53445d44bc19ac2aa9349b8bd51215b433481ad37eba5386f9ec24a44a2eb3553b3513088be0a69d51b80798a9b04cd985afa468b000382431431d8599448d0cd8a52841f502e555885c7751683890093c6705cc3c28312180c53271298d6ed0d1f990f469931b639a313b98be9dae2838f4a4f902d2bede6a84cfbf5a988f8c8ce2cccec8181c66a47b72f4f0a296085d9135ddd11ed328d103e7bec029422d428b5e7ac90b7b8f8034cf4a74f75fa9b36a572398ad7eeb301c3e10670faa7bc38cad73ea3910b654aeda3bd773dfb0702fd56724d625487c", 0xf9}, {&(0x7f0000006740)="867854deb9ce51372f565e3a5576f96758a1a9c3ccaf67191f18a24cbb9f090ad9508196b64eb9", 0x27}, {&(0x7f0000006780)="6a7c4ba5a43b9405f334c3a8455fc5b3c509ec46c3c53254515242566506808685495f461fbe2656cac2c06766e1093158ccfebce777c758bca98e335f08899186f94c93ff43a95ec67db9d3066bb0f22305bf3c918e31e68bd7eb5db2abf9601ad5f256273dd7d57c026ef88e9fc958f4ee8bce8296e977f4bd90da523481007e897369f97a11088cc3e2bccbb51f308ef5e72a7ae613440795b1feb62e99cb22c9e2b9ac", 0xa5}, {&(0x7f0000006840)="f24bff3b86f864c6ff5cd9bd963b63fe3819fac76c647e3155dec60620c9359e0ef050d7119157a023f939bde0fa9358e0278d926561aec444c46847c16c2dc5fce6b8aec1e80b175cd0992c510da637495a9ac0541068efbd775acef81a8047df1a8a29b53c7d877b35dcc04d9ea51cbb5757df", 0x74}, {&(0x7f00000068c0)="37d4d924df891a44b91a3487dc98bece415f133f4e2762c81e4f2fe0c1ba89c636b9bc3952244f5cb1cdad669170240552c6d8243969c1eb162d19c21618c2845d1dcc395ac867a1479bbf20063130664ce714c216fb716c8b2bb83881011a7f6ff645a693662b473651796c34420334b924b0cd91ef92bf9f1464680afdc0b7058516525f7be31fa44e43fcb7cbf357caeca38e152bd6f4ad44c3458f2fef8b802a9a8d155654d81227710e9fc16f373c10c06395c67a61c42a9bd21ca5d9aa7306c774acb2d19c29603db8", 0xcc}], 0x6}}], 0x3, 0x4095) ioctl$KVM_GET_MSRS_cpu(r0, 0xc008ae88, &(0x7f0000006b00)={0x1, 0x0, [{0xa57, 0x0, 0xf742}]}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000006c00)={&(0x7f0000006b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b80)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000001) timer_create(0x6, &(0x7f0000006c40)={0x0, 0x16, 0x2, @tid=r1}, &(0x7f0000006c80)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006cc0), 0x8000, 0x0) ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f0000006d00)=0x411) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000006d40), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000007ec0)={0x4, 0x0, [{0x4000, 0x38, &(0x7f0000006d80)=""/56}, {0x8080000, 0x44, &(0x7f0000006dc0)=""/68}, {0x80a0000, 0x1000, &(0x7f0000006e40)=""/4096}, {0x1, 0x71, &(0x7f0000007e40)=""/113}]}) mount(&(0x7f0000007f80)=@nullb, &(0x7f0000007fc0)='./file1\x00', &(0x7f0000008000)='pstore\x00', 0x40084a, &(0x7f0000008040)='vxcan0\x00') sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000008140)={&(0x7f0000008080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000008100)={&(0x7f00000080c0)={0x40, 0x6, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c080) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000008180)='/proc/keys\x00', 0x0, 0x0) write$FUSE_STATFS(r3, &(0x7f00000081c0)={0x60, 0x0, r5, {{0x3000000000000000, 0xffffffffffffffff, 0x8, 0x5, 0x800, 0x80000000, 0xeb24, 0x5}}}, 0x60) openat$binderfs(0xffffffffffffff9c, &(0x7f0000008240)='./binderfs2/binder1\x00', 0x0, 0x0) mount_setattr(r10, &(0x7f0000008280)='./file1\x00', 0x1000, &(0x7f00000082c0)={0x30, 0x4, 0x40000, {r3}}, 0x20) 3m33.747085942s ago: executing program 4 (id=8622): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x14b20000}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$incfs(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)='./file2\x00', &(0x7f0000000640), 0x10000, &(0x7f0000000680)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x9}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x9}}, {@no_bf_cache}, {@rlog_pages={'rlog_pages', 0x3d, 0xfffffffffffffff7}}, {@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xd5}}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@no_bf_readahead}, {@readahead={'readahead', 0x3d, 0x4}}], [{@obj_role}, {@subj_user={'subj_user', 0x3d, 'netdevsim'}}, {@measure}, {@dont_measure}, {@permit_directio}]}) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0107fcfffffffcdbdf250f"], 0x14}}, 0x4c040) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6a06}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000000}, 0x400) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x70, r5, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x84) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 3m33.736383603s ago: executing program 4 (id=8625): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) (async) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f00000004c0)) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x3, r4, 0x30}, 0x49) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m33.620346651s ago: executing program 4 (id=8631): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2b4, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x141, 0x2a, [@random_vendor={0xdd, 0x22, "fd17a60104365f741f2d7ec78bdfe5c11bfebdbd4362acc40c1f3bb4c006c12270b5"}, @ibss={0x6, 0x2, 0xb}, @perr={0x84, 0x102, {0x1d, 0x10, [{{0x0, 0x1}, @device_b, 0x8, @value, 0x1}, {{}, @broadcast, 0x4, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0xb463, @value, 0x25}, {{}, @device_b, 0x658bb983, @void, 0x6}, {{}, @device_a, 0x4, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x80, @value=@device_b, 0x20}, {{}, @device_b, 0xe, @void, 0x38}, {{}, @device_a, 0xd5fc, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x7, @value, 0xe}, {{}, @device_b, 0x3, @void, 0xc}, {{}, @broadcast, 0x9, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x4d, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0x45, @value, 0x10}, {{}, @broadcast, 0xffff, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x3a}]}}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0xb}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x28}}, @challenge={0x10, 0x1, 0x5a}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xab5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_IE={0x139, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x49, 0xb5}}, @random_vendor={0xdd, 0x49, "bad37dc5415c38b8872a5149252b1c1bb5f2f1d3099385b2a8912631ea07bb5cd45c533337853ef1e382e824c362bb00f2a25605fed6ec8c0cde7ec228d018402acf24424b768aab7e"}, @random_vendor={0xdd, 0xe2, "7fd27849b87c0719fb4a509ca1add78a4efd89e4a85eff02c57db8f8941fb98b5e24b6325caa13246c8172c16eb674160ae63ea1e0fc05d1357ca8abe0a1c8b14d4391c0e9621e43858ce8cfded18a40eeec6d1c5cca54c9a4993bb09cb80abe68365946bee419a8bbb896a061e00fe1efccd9c06569577b800f21bc0306e64af97f592349b5842f2efa2d8a5ecaf9c5172a5722cfe934c8fe36a58e931d752883b288eb6e96509d0098c44add07cae6dc26101086132ff85b99ec9c5f083712ea996c57fd77bd971b324dbc9f25e60b12e238ba77bbf29878355f439a35193db598"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r5 = dup(r0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5]) 3m33.566409864s ago: executing program 33 (id=8631): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2b4, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x141, 0x2a, [@random_vendor={0xdd, 0x22, "fd17a60104365f741f2d7ec78bdfe5c11bfebdbd4362acc40c1f3bb4c006c12270b5"}, @ibss={0x6, 0x2, 0xb}, @perr={0x84, 0x102, {0x1d, 0x10, [{{0x0, 0x1}, @device_b, 0x8, @value, 0x1}, {{}, @broadcast, 0x4, @void, 0x2a}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0xb463, @value, 0x25}, {{}, @device_b, 0x658bb983, @void, 0x6}, {{}, @device_a, 0x4, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x80, @value=@device_b, 0x20}, {{}, @device_b, 0xe, @void, 0x38}, {{}, @device_a, 0xd5fc, @void, 0x3}, {{0x0, 0x1}, @device_b, 0x7, @value, 0xe}, {{}, @device_b, 0x3, @void, 0xc}, {{}, @broadcast, 0x9, @void, 0x42}, {{0x0, 0x1}, @device_b, 0x4d, @value, 0x35}, {{0x0, 0x1}, @broadcast, 0x45, @value, 0x10}, {{}, @broadcast, 0xffff, @void, 0x29}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x3a}]}}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0xb}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x28}}, @challenge={0x10, 0x1, 0x5a}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xab5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xa}, @NL80211_ATTR_IE={0x139, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x49, 0xb5}}, @random_vendor={0xdd, 0x49, "bad37dc5415c38b8872a5149252b1c1bb5f2f1d3099385b2a8912631ea07bb5cd45c533337853ef1e382e824c362bb00f2a25605fed6ec8c0cde7ec228d018402acf24424b768aab7e"}, @random_vendor={0xdd, 0xe2, "7fd27849b87c0719fb4a509ca1add78a4efd89e4a85eff02c57db8f8941fb98b5e24b6325caa13246c8172c16eb674160ae63ea1e0fc05d1357ca8abe0a1c8b14d4391c0e9621e43858ce8cfded18a40eeec6d1c5cca54c9a4993bb09cb80abe68365946bee419a8bbb896a061e00fe1efccd9c06569577b800f21bc0306e64af97f592349b5842f2efa2d8a5ecaf9c5172a5722cfe934c8fe36a58e931d752883b288eb6e96509d0098c44add07cae6dc26101086132ff85b99ec9c5f083712ea996c57fd77bd971b324dbc9f25e60b12e238ba77bbf29878355f439a35193db598"}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r5 = dup(r0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0xc) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5]) 3m17.71894237s ago: executing program 0 (id=8915): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x12b8b000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m17.663258754s ago: executing program 0 (id=8916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0xa0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0xb}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x82, 0x4, 0x9, 0x10, "", "ca"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, "04000000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0xc8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x8, 0x1, "3a3882"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xc0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x50, 0x5, 0x8, 0x41, {0x7, 0x25, 0x1, 0x82, 0xfe, 0x7}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x38a, 0x2000000000000003}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x0, 0x1a}, @fda={0x66646185, 0x1, 0x1, 0x10000031}, @fda={0x66646185, 0x0, 0x10000000000001, 0x3d}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000040)=[@register_looper, @register_looper, @increfs, @acquire_done={0x40106309, 0x2}], 0x14, 0x0, &(0x7f0000000080)="e3a9f7241d99239b12705a59bd9688c88a3f1db5"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0xff, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x121}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xa}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0x81, 0x0, 0x20, 0x4}, 0x2d, &(0x7f00000001c0)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "1261d71548285fcdbab72a65aaee8eba"}, @ext_cap={0x7, 0x10, 0x2, 0x22, 0x3, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xfc, 0x7, 0x7}, @ptm_cap={0x3}]}, 0x1, [{0xa0, &(0x7f0000000240)=@string={0xa0, 0x3, "3fb9f9b78e605cfc2ada9c40bacfa8be3efed2aff99d0b08219b7f644469c95b6f986eb971dfd6556e3e6eced7b80aa59ee5515073338f70f88c180d164e92794ff4c2b92e04ee022384dffe17640759628d3c119f9b5c1c7d421289416c95b6c6ae57b427041a97d54d4116296e165f21e2d507f3eec434b7b629a1945c3ceb7d951a653c9fdd8526daf7837e777b868bb7bac61ac9253ee5f49e4849ed"}}]}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000340)=""/135, &(0x7f0000000440)=0x87) 3m14.447455286s ago: executing program 0 (id=8970): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="12000000180001002bbd7000fbdbdf251d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4044800) setsockopt$inet6_buf(r0, 0x29, 0xba, &(0x7f00000001c0)="8d3d39236ff68ea968c52165c410ed93f50176fc4ce670757f0d957958add76e6142666b2e706b99852d1e7b3a9cf17bbb367c8b624dbefc630cd957f3709a0a8689f23ec6e2c08939f4c35e14d9be87b45f0f584cf816bdc8975ffe09a710fee9ba5569f27204d69245443810cce05ba54c54700181307fe17a2f80b357bf929b12a7ad9795ff7ecd9c80b9eb290fc1175bb5c58d357ba47a12f903d85d3c1e8725db58b5a277eb5d241dda76", 0xad) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) 3m14.446899456s ago: executing program 0 (id=8971): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0\x00') (async, rerun: 64) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (rerun: 64) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udp6\x00') exit(0xfffffffffffffff7) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x0, 0x80000}, {0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x542080, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000001c0)={{0x2, 0x1, 0x80000081, 0x2, 0x10908e}}) (async, rerun: 64) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x21, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.38545836s ago: executing program 0 (id=8972): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x20000001}, 0x48800) r3 = syz_open_procfs(0x0, &(0x7f0000002240)='mounts\x00') read$FUSE(r3, &(0x7f00000062c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) socket(0x26, 0x2, 0x3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r6 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000080)=0xfffffffffffffffe, 0x12) setreuid(r1, r1) splice(r7, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) close(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000100)=ANY=[@ANYBLOB="680200002700"], 0x268}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) close(r3) splice(r4, 0x0, r6, 0x0, 0x1100000000f336, 0x1) getpid() syz_pidfd_open(r2, 0x0) 3m14.253959669s ago: executing program 0 (id=8973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 3m14.227015711s ago: executing program 34 (id=8973): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 10.77208492s ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 8.860508786s ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 6.952992752s ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 4.85536338s ago: executing program 5 (id=12113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x9, "811f3a85"}, @global=@item_012={0x1, 0x1, 0x8, "9e"}]}}, 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x47, @string={0x47, 0x3, "d0eadc052f6464d032d1ba222ca03be5ffaae7eabf983233b2b04ae0fb352df1a6352da366a4deaf858c57950779f95492e6bfd955f12ee9325d442f7394a968c02324e601"}}}, &(0x7f0000000640)={0x34, &(0x7f0000000280)={0x40, 0x5, 0x1f, "f26f30c3d26c96e196dec8a65a480c1bae3a26b2b27e460d2edcec0b7d6d9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='net/xfrm_stat\x00') fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000480)=0x3ff, 0x4) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000100)={0x14, &(0x7f00000001c0)={0x20, 0x1, 0x95, {0x95, 0x23, "9814b01d6670831ff4872c80dd2e475757e863658d31fce44c39cc0ca339b17fdfbefcf4d59c349cd40dfa6d70e107557ab558f46d9fd60d5d3604e5a5f11649bdca39e4b683b23789290b142db6773fe5013859b4f45b3b0700cf13df99a98c662b52dac521dbbcbccb707ae2f050ce56ecf1ec47009439549a137749ea2d859022a0003c405ca45a6d59eea84080fa86a3d8"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0x30, 0x16, "3c2dee802cb71f59bf05a9e46894e7be78afbe05d968"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x3}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "bb841979ea09ae5a6235b679b4dfa7c414277d7d6693a2a5f803015a9515442f9023c6da17a6949f8afc7762cb841a"}}) 4.848654831s ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 2.73709613s ago: executing program 5 (id=12117): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) io_setup(0x7, &(0x7f0000000700)=0x0) io_cancel(r2, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000740)="f80a799b8da8e66ebd3a8f440388fd6bc785422c2548766bb7b663afdc64c26c395040e45a8bed03f79bf09822c7d52adf69c9949b6f8222e2c1e2425ec4d00313323231579090ea363d244a5367d7c91101b49f4c9a12bc0c9987449098b6351285d05bd4d223aa23517272681c4c1221d2fbf483677086d22f1462297b295ee69c0bc565743d9c2325f0187971be", 0x8f, 0xb547, 0x0, 0x2, r1}, &(0x7f0000000840)) fchdir(r1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x4101, 0x1) (async) lseek(r3, 0x4101, 0x1) getdents64(r3, 0x0, 0x4f) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r4, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) getdents(r3, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x30, 0x0, 0x0) (async) setsockopt$inet_buf(r5, 0x0, 0x30, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_NMI(r7, 0xae9a) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000200)={0x1fe, 0x280, 0x180, &(0x7f0000000300)=[0xffffffffffffffff, 0x100000000, 0x9, 0x7, 0x4, 0x7, 0x7, 0x8000, 0xc000000000, 0x7, 0x80000001, 0x9, 0xa000000, 0xffffffffffff0000, 0x0, 0x6, 0x3, 0x8, 0x3e1, 0x80000001, 0x837, 0x9, 0x4, 0x5, 0x80000000, 0x2, 0xc9db, 0x3, 0x1, 0xffffffffffffffd4, 0x7bf, 0x40, 0x5, 0x89f9, 0x1ff, 0x6, 0x1, 0x6, 0xe4, 0x7, 0x9, 0x5, 0x2, 0x9, 0x9, 0x8, 0x7, 0xfffffffffffffffc, 0xc7e2, 0x9, 0x1d, 0x5, 0x8, 0x5, 0x800, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x6, 0x0, 0xfff, 0x5, 0x0, 0xa9, 0x4, 0x0, 0x5, 0x7, 0x5f5a, 0x4, 0x4, 0x4, 0x0, 0x9, 0x6, 0x0, 0x1000, 0x8, 0x11, 0x9f53, 0x27e, 0x3, 0x3b71, 0x5, 0x4, 0x5, 0x6, 0x100000001, 0x2f, 0x7fffffffffffffff, 0x3, 0x81, 0x5, 0x9, 0x1, 0x2, 0x6, 0x401, 0x100000001, 0x0, 0x6, 0x5, 0x3, 0x3, 0x6, 0x9, 0x6, 0xfffffffffffffff2, 0x4, 0x100000000, 0x5, 0x5, 0x0, 0x8, 0x2, 0x3, 0x63c, 0x300000000, 0x0, 0x5, 0x2, 0x0, 0x7, 0x8, 0x0, 0xfffffffffffffffa, 0x8]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r6, 0x8004f50e, &(0x7f0000000080)) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000880)=0x1) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x16, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x16, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x800, 0x0) userfaultfd(0x1) (async) userfaultfd(0x1) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, r6, 0x2) 2.603326729s ago: executing program 5 (id=12118): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 2.525206564s ago: executing program 5 (id=12119): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003500)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x68, 0x0, 0x7, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x5, 0x12, "ba9b8d22b9e3ca9ddb90f2919ee5f235"}]}, @cipso={0x86, 0x40, 0x0, [{0x0, 0x8, "39314dd1ff1e"}, {0x0, 0x12, "d0fe7453685300"/16}, {0x2, 0x6, "472f05e1"}, {0x0, 0x12, "104db1748fa23bccf5f545f391485d4e"}, {0x1, 0x8, "0bf44c51513c"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}], 0x80}}], 0x1, 0x8090) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000280)) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x800005}) ustat(0x1, &(0x7f0000000000)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r9, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(r9, 0x40087708, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 2.508168425s ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 269.153873ms ago: executing program 6 (id=12120): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/psched\x00') ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000000c0)={0x80}) ioctl$KVM_CAP_STEAL_TIME(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$unix(r3, &(0x7f0000000240), &(0x7f00000002c0)=0x6e, 0x80400) recvmsg$unix(r4, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000300)=""/201, 0xc9}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/14, 0xe}, {&(0x7f0000001440)=""/116, 0x74}, {&(0x7f00000014c0)=""/106, 0x6a}, {&(0x7f0000001540)=""/77, 0x4d}, {&(0x7f00000015c0)=""/59, 0x3b}, {&(0x7f0000001600)=""/10, 0xa}, {&(0x7f0000001640)=""/135, 0x87}], 0x9, &(0x7f00000017c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x120) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000001880)={[0xdddd1000, 0x2, 0xeeef0004, 0x1], 0x1, 0x98, 0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_COMPRESS_FILE(r2, 0xf518, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000001900)=@gcm_256={{0x304}, "1bc7f99f5f7dafcb", "660170925ad05f6cd6a8385e53ad9ffcde2af0b6e783ec2eb0270b42b56bc4d1", "ddf55b5b", "6ea891cb26007d4b"}, 0x38) ioctl$SNAPSHOT_FREE(r0, 0x3305) futimesat(r2, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={{0x77359400}, {0x77359400}}) recvfrom$unix(r4, &(0x7f00000019c0)=""/190, 0xbe, 0x2000, &(0x7f0000001a80)=@file={0x1, './file0\x00'}, 0x6e) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001b00)=0x5) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000001b40)={@broadcast, @empty, 0x0, "66c72491e2d4a4fe6e793b5db808d8a0587fd5975e194034e65207981b34eaf6", 0x0, 0xfffffffa, 0x8, 0x9}, 0x3c) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r5, 0x9000aea4, &(0x7f0000001b80)) r6 = accept4$inet6(r2, &(0x7f0000002b80)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002bc0)=0x1c, 0x80000) bind$inet6(r6, &(0x7f0000002c00)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00', 0xfff}, 0x1c) setsockopt$MRT_ASSERT(r2, 0x0, 0xcf, &(0x7f0000002c40), 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000002c80)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000002cc0)=r7) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000002d00)=0x9) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000002e40)={&(0x7f0000002d40), 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x60, 0x5, 0x6, 0x920045fe632a9a8a, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$KVM_NMI(r5, 0xae9a) 267.321283ms ago: executing program 5 (id=12122): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x800, 0x0) futex(0x0, 0x1, 0x4000000, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x400, 0x80) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[], 0x78) write$selinux_context(r2, &(0x7f0000000040)='system_u:object_r:pam_exec_t:s0\x00', 0x20) 247.078684ms ago: executing program 1 (id=12123): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x18, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1}, @exit_looper, @register_looper], 0x0, 0x0, 0x0}) 199.384827ms ago: executing program 5 (id=12124): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) syz_usb_connect(0x2, 0xb6, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x2, &(0x7f0000000180)=@string={0x2}}, {0x0, 0x0}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) socket$key(0xf, 0x3, 0x2) 198.844727ms ago: executing program 6 (id=12125): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010005bd7000fbdbdaf431087f"], 0x14}, 0x1, 0x0, 0x0, 0xafbeec54da1e82f}, 0x40) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b43, &(0x7f0000000300)={0x0, 0xc5f8, 0x0, 0x3, 0x3a4}, 0x0, 0x0) (async) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mremap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000703000/0x1000)=nil) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 197.400568ms ago: executing program 1 (id=12126): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x1d1ec2, 0x78) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x5, 0x48000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2009e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) pread64(r1, 0x0, 0xfdef, 0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2cc5b33808f2cf9a17d2cf73746174733d676c6f62616c2c61617a7974696d672c008c26845b239e6682aaae595a62d8"]) 194.065227ms ago: executing program 6 (id=12127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x17, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x16, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x1) 175.304999ms ago: executing program 1 (id=12128): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\x00'/10, 0x3a, '](\xdb\x96\r\xde\xf9.\x9a\x98\x00\x00\x00\x00', 0x3a, './file0'}, 0x3f) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async, rerun: 32) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x171) (async, rerun: 64) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (async, rerun: 32) r3 = socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r3, &(0x7f0000004ac0)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000200)=""/161, 0xa1}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/236, 0xec}], 0x4, &(0x7f0000001400)=""/192, 0xc0}, 0x2}, {{&(0x7f00000014c0)=@caif=@dgm, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001540)=""/88, 0x58}, {&(0x7f00000015c0)=""/20, 0x14}, {&(0x7f0000001600)=""/237, 0xed}, {&(0x7f0000001700)=""/250, 0xfa}, {&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f0000001880)=""/153, 0x99}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/139, 0x8b}, {&(0x7f0000002a00)=""/42, 0x2a}], 0x9, &(0x7f0000002b00)=""/207, 0xcf}, 0x9}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/136, 0x88}, {&(0x7f0000002d40)=""/43, 0x2b}], 0x2, &(0x7f0000002dc0)=""/98, 0x62}}, {{&(0x7f0000002e40)=@sco, 0x80, &(0x7f0000004200)=[{&(0x7f0000002ec0)=""/159, 0x9f}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/170, 0xaa}, {&(0x7f0000004040)=""/186, 0xba}, {&(0x7f0000004100)=""/12, 0xc}, {&(0x7f0000004140)=""/135, 0x87}], 0x6}, 0x2}, {{&(0x7f0000004280)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000004680)=[{&(0x7f0000004300)=""/146, 0x92}, {&(0x7f00000043c0)=""/161, 0xa1}, {&(0x7f0000004480)=""/133, 0x85}, {&(0x7f0000004540)=""/79, 0x4f}, {&(0x7f00000045c0)=""/19, 0x13}, {&(0x7f0000004600)=""/106, 0x6a}], 0x6, &(0x7f0000004700)=""/222, 0xde}, 0x8}, {{&(0x7f0000004800)=@ieee802154, 0x80, &(0x7f0000004980)=[{&(0x7f0000004880)=""/206, 0xce}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f00000049c0)=""/108, 0x6c}, {&(0x7f0000004a40)=""/51, 0x33}], 0x2}}], 0x7, 0x2, &(0x7f0000004c80)={0x0, 0x3938700}) (async, rerun: 32) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 32) syz_usb_connect(0x2, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x43, 0x7b, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x206e) 116.025453ms ago: executing program 6 (id=12129): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000001900150000001000fffffffe0a0000000004"], 0x28}], 0x1}, 0x0) (async) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0xa8ca3411d1c26009, 0x13, r0, 0x98b2f000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{r3, 0x7, 0x7, 0x9b, 0xd1, 0x347, 0x200, 0x10, 0x6, 0x9, 0x2, 0x3, 0xffffffffffffffff, 0xa, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 111.560043ms ago: executing program 1 (id=12130): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x7fffffff, 0x6, 0xfffffbfe, 0x3, "eaee00120000ebad661e3018b7a8ff0800b175", 0x4, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd, @fda={0x66646185, 0x4, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/4096, 0x1000, 0x0, 0x39}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 109.241473ms ago: executing program 6 (id=12131): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010025bd7000000000000b00"], 0x14}}, 0x24004084) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400010025bd7000000000000b00"], 0x14}}, 0x24004084) r2 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x06\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x3) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)}}], 0xac, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) 79.975905ms ago: executing program 1 (id=12132): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r0, 0xffffe000) (rerun: 64) 71.901346ms ago: executing program 6 (id=12133): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000031c0)={0x8, {"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", 0x1000}}, 0x1006) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) fstatfs(0xffffffffffffffff, 0x0) (async, rerun: 32) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) (rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r2, 0xa, 0x5, 0x0) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (async, rerun: 32) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) (async, rerun: 32) memfd_secret(0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) r4 = fcntl$dupfd(r1, 0x0, r3) ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece) (async) write(r3, &(0x7f00000006c0)="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", 0xfc) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1) (async, rerun: 64) recvmmsg(r5, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002d80)=""/254, 0xfe}, {&(0x7f00000004c0)=""/128, 0x80}], 0x9}, 0xf}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async, rerun: 32) sendto$inet6(r5, &(0x7f0000001880)="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", 0x1000, 0x0, 0x0, 0x0) (rerun: 32) 61.594226ms ago: executing program 3 (id=11997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x280201, 0x0) fchdir(r1) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') setns(r2, 0x10000000) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x22020400) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000029c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f00000000c0)={0xb}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) 0s ago: executing program 1 (id=12134): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = fsmount(r0, 0x0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xf890402818223f56, 0x1) fcntl$notify(r0, 0x402, 0x21) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000080)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000100)) getdents(r1, &(0x7f0000000140)=""/80, 0x50) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000001c0)=@x86={0x8, 0x7, 0x3f, 0x0, 0x3, 0x5, 0x6d, 0xd4, 0x22, 0x7, 0x73, 0x1d, 0x0, 0x9, 0x2, 0x0, 0x6, 0x81, 0x8, '\x00', 0xa2, 0x8}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x3, 0xfffffffffffff001, 0x6, 0xfffffffffffffffd, 0x9, 0x5, 0x1, 0x8, 0x9, 0x7, 0x0, 0x8, 0x4ff800000, 0x3, 0x80, 0x6d907345], 0x2, 0xa000}) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000002c0)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000300)={0x5, 0xb}) r2 = syz_init_net_socket$nfc_raw(0x27, 0x6, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000340)=""/241) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000440)=0x10001, 0x4) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000480)={0xa, 0x0, [{0x258, 0x0, 0x66}, {0xb8b, 0x0, 0x7}, {0x9bb, 0x0, 0x8}, {0x36e, 0x0, 0x5}, {0xa06, 0x0, 0xffffffffffff1090}, {0x2905b233d53a7524, 0x0, 0x8}, {0xc2, 0x0, 0xe15}, {0x9ae, 0x0, 0x1}, {0x286, 0x0, 0x4}, {0xafd, 0x0, 0xfffffffffffffffb}]}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000740)={'icmp\x00'}, &(0x7f0000000780)=0x1e) pselect6(0x40, &(0x7f00000007c0)={0x9, 0x0, 0xfffffffffffffff1, 0x6, 0x800, 0x7, 0x5, 0x1}, &(0x7f0000000800)={0x9, 0x9, 0x1, 0x8, 0x7, 0xb84, 0x1, 0x5}, &(0x7f0000000840)={0x4, 0x4, 0x8, 0xec3d, 0x1ff, 0x8, 0x2}, &(0x7f0000000880)={0x77359400}, &(0x7f0000000900)={&(0x7f00000008c0)={[0x6]}, 0x8}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/power/disk', 0x4001, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r4) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r6, 0x30a, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0xdc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbc}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @local, 0xfcf}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x800, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r8, &(0x7f0000000c80)=""/136, 0x88) preadv2(r0, &(0x7f0000001100)=[{&(0x7f0000000d40)=""/74, 0x4a}, {&(0x7f0000000dc0)=""/13, 0xd}, {&(0x7f0000000e00)=""/224, 0xe0}, {&(0x7f0000000f00)=""/47, 0x2f}, {&(0x7f0000000f40)=""/133, 0x85}, {&(0x7f0000001000)=""/35, 0x23}, {&(0x7f0000001040)=""/64, 0x40}, {&(0x7f0000001080)=""/125, 0x7d}], 0x8, 0xd, 0xffffff08, 0x4) kernel console output (not intermixed with test programs): tor read/64, error -71 [ 568.764546][T28167] rust_binder: Error while translating object. [ 568.764602][T28167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 568.784234][T28167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 568.826856][T28170] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 568.860360][T28170] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 568.908950][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9469'. [ 568.927564][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9469'. [ 568.943929][T28179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9469'. [ 568.954566][T28179] rust_binder: Write failure EFAULT in pid:242 [ 568.956725][T28179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9469'. [ 568.995000][T28177] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.002432][T28177] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.024332][T28177] bridge_slave_0: entered allmulticast mode [ 569.039328][ T9] usb 4-1: device descriptor read/64, error -71 [ 569.048965][T28177] bridge_slave_0: entered promiscuous mode [ 569.056629][T28177] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.063935][T28177] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.071097][T28177] bridge_slave_1: entered allmulticast mode [ 569.077724][T28177] bridge_slave_1: entered promiscuous mode [ 569.084614][T28190] gretap0: entered promiscuous mode [ 569.156652][ T9] usb usb4-port1: attempt power cycle [ 569.206712][T28177] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.213916][T28177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.221377][T28177] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.228431][T28177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.257832][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.267673][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.282463][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.289718][T11833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.297828][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.304935][T11833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.331800][T28177] veth0_vlan: entered promiscuous mode [ 569.343651][T28177] veth1_macvtap: entered promiscuous mode [ 569.375441][T28215] rust_binder: Error while translating object. [ 569.375488][T28215] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 569.382198][T28215] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 569.529679][ T9] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 569.562815][ T9] usb 4-1: device descriptor read/8, error -71 [ 569.701324][ T9] usb 4-1: device descriptor read/8, error -71 [ 569.966838][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 569.989158][ T9] usb 4-1: device descriptor read/8, error -71 [ 570.002336][T28219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:6 [ 570.014849][T28221] SELinux: failed to load policy [ 570.030321][T28222] SELinux: failed to load policy [ 570.138477][ T9] usb 4-1: device descriptor read/8, error -71 [ 570.254521][ T9] usb usb4-port1: unable to enumerate USB device [ 570.585095][T28225] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=56852 sclass=netlink_xfrm_socket pid=28225 comm=syz.1.9478 [ 570.895109][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 570.948589][T28242] 9pnet_fd: Insufficient options for proto=fd [ 570.967492][T28246] 9pnet_fd: Insufficient options for proto=fd [ 570.993381][T28248] SELinux: policydb version 751518731 does not match my version range 15-33 [ 571.002498][T28248] SELinux: failed to load policy [ 571.020514][T28251] binder: Binderfs stats mode cannot be changed during a remount [ 571.076493][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.088090][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.098331][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 571.109389][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.121984][ T9] usb 2-1: config 0 descriptor?? [ 571.395041][ T742] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 571.533464][ T742] usb 4-1: device descriptor read/64, error -71 [ 571.556936][T28233] rust_binder: Error while translating object. [ 571.556977][T28233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 571.563321][T28233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:20 [ 571.573804][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 571.589047][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 571.597793][ T9] usb 2-1: USB disconnect, device number 74 [ 571.740225][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 571.740243][ T36] audit: type=1326 audit(2000000137.383:22423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28158 comm="syz.5.9461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7fc00000 [ 571.773177][T28264] __nla_validate_parse: 2 callbacks suppressed [ 571.773199][T28264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9491'. [ 571.789305][ T742] usb 4-1: device descriptor read/64, error -71 [ 572.055718][ T742] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 572.194332][ T742] usb 4-1: device descriptor read/64, error -71 [ 572.375499][ T426] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 572.460827][ T742] usb 4-1: device descriptor read/64, error -71 [ 572.514096][ T426] usb 2-1: device descriptor read/64, error -71 [ 572.578090][ T742] usb usb4-port1: attempt power cycle [ 572.769879][ T426] usb 2-1: device descriptor read/64, error -71 [ 572.951061][ T742] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 572.993684][ T742] usb 4-1: device descriptor read/8, error -71 [ 573.036337][ T426] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 573.133414][ T742] usb 4-1: device descriptor read/8, error -71 [ 573.185599][ T426] usb 2-1: device descriptor read/64, error -71 [ 573.388097][ T742] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 573.421158][ T742] usb 4-1: device descriptor read/8, error -71 [ 573.441498][ T426] usb 2-1: device descriptor read/64, error -71 [ 573.558730][ T426] usb usb2-port1: attempt power cycle [ 573.570041][ T742] usb 4-1: device descriptor read/8, error -71 [ 573.686615][ T742] usb usb4-port1: unable to enumerate USB device [ 573.920986][ T426] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 573.943412][ T426] usb 2-1: device descriptor read/8, error -71 [ 574.082018][ T426] usb 2-1: device descriptor read/8, error -71 [ 574.336673][ T426] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 574.370095][ T426] usb 2-1: device descriptor read/8, error -71 [ 574.386988][T28310] kvm: pic: level sensitive irq not supported [ 574.387064][T28310] kvm: pic: non byte read [ 574.398386][T28310] kvm: pic: non byte read [ 574.403057][T28310] kvm: pic: non byte read [ 574.407523][T28310] kvm: pic: non byte read [ 574.412436][T28310] kvm: pic: non byte read [ 574.416886][T28310] kvm: pic: non byte read [ 574.421322][T28310] kvm: pic: non byte read [ 574.426155][T28310] kvm: pic: non byte read [ 574.430589][T28310] kvm: pic: non byte read [ 574.435276][T28310] kvm: pic: non byte read [ 574.447015][T28310] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 574.454911][T28310] rust_binder: Write failure EINVAL in pid:214 [ 574.513383][ T426] usb 2-1: device descriptor read/8, error -71 [ 574.541879][T28316] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 574.656579][ T426] usb usb2-port1: unable to enumerate USB device [ 575.265163][T28327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 575.365341][T28335] binder: Binderfs stats mode cannot be changed during a remount [ 575.397731][T28337] rust_binder: Write failure EINVAL in pid:32 [ 575.492563][T28339] rust_binder: Error while translating object. [ 575.499662][T28339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 575.506301][T28339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:34 [ 575.637074][ T426] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 575.807623][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 575.819972][ T426] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.836972][ T426] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.848236][ T426] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 575.857772][ T426] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 575.867057][ T426] usb 4-1: Product: syz [ 575.874483][ T426] usb 4-1: Manufacturer: syz [ 575.885877][ T426] hub 4-1:4.0: USB hub found [ 576.082185][ T36] audit: type=1326 audit(2000000141.455:22424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.106223][ T36] audit: type=1326 audit(2000000141.455:22425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.130124][ T36] audit: type=1326 audit(2000000141.483:22426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.154493][ T36] audit: type=1326 audit(2000000141.483:22427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.178524][ T36] audit: type=1326 audit(2000000141.483:22428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.202636][ T948] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 576.202808][ T36] audit: type=1326 audit(2000000141.483:22429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.234556][ T36] audit: type=1326 audit(2000000141.483:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.258868][ T36] audit: type=1326 audit(2000000141.483:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.283208][ T36] audit: type=1326 audit(2000000141.483:22432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.6.9531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 576.320355][T28335] rust_binder: Error while translating object. [ 576.320415][T28335] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 576.326708][T28335] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:233 [ 576.337207][ T426] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 576.372506][ T948] usb 2-1: Using ep0 maxpacket: 16 [ 576.378412][ T426] usb 4-1: USB disconnect, device number 78 [ 576.386106][ T948] usb 2-1: unable to get BOS descriptor or descriptor too short [ 576.396513][ T948] usb 2-1: config 1 interface 0 has no altsetting 0 [ 576.405461][ T948] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 576.414731][ T948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.423067][ T948] usb 2-1: Product: syz [ 576.427303][ T948] usb 2-1: Manufacturer: syz [ 576.431955][ T948] usb 2-1: SerialNumber: syz [ 576.651939][T28387] /dev/rnullb0: Can't open blockdev [ 576.659358][ T948] usblp0: Disabling reads from problematic bidirectional printer [ 576.667916][ T948] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 32 proto 2 vid 0x03F0 pid 0x0004 [ 576.680446][ T948] usb 2-1: USB disconnect, device number 79 [ 576.687781][ T948] usblp0: removed [ 576.969810][T28428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9545'. [ 576.993424][T28430] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9546'. [ 577.024239][T28435] binder: Bad value for 'stats' [ 577.139920][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 577.156623][T28448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9552'. [ 577.204608][T28452] netlink: 'syz.5.9554': attribute type 4 has an invalid length. [ 577.213130][T28452] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.9554'. [ 577.299982][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 577.307221][ T10] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 577.315414][ T10] usb 4-1: config 0 has no interface number 0 [ 577.321710][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 577.332174][ T10] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 577.344105][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 577.353330][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.361353][ T10] usb 4-1: Product: syz [ 577.365834][ T10] usb 4-1: Manufacturer: syz [ 577.370559][ T10] usb 4-1: SerialNumber: syz [ 577.376422][ T10] usb 4-1: config 0 descriptor?? [ 577.383473][T28410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.390775][T28410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 577.401140][T28471] cgroup2: Unknown parameter 'net_cls' [ 577.427437][T28466] netlink: 1351 bytes leftover after parsing attributes in process `syz.6.9559'. [ 577.662206][ T948] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 577.683399][ T10] usb 4-1: USB disconnect, device number 79 [ 577.823318][ T948] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 577.832325][ T948] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.842492][ T948] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 577.853633][ T948] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 577.867526][ T948] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 577.876801][ T948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 577.885000][ T948] usb 2-1: SerialNumber: syz [ 577.891610][ T948] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 577.899634][ T948] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 577.906169][ T948] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 578.109783][ T10] usb 2-1: USB disconnect, device number 80 [ 578.786975][T28500] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 578.787025][T28500] rust_binder: Error while translating object. [ 578.796081][T28500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 578.802433][T28500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:79 [ 579.028471][T28504] 9pnet_fd: p9_fd_create_tcp (28504): problem connecting socket to 127.0.0.1 [ 579.176864][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 579.176883][ T36] audit: type=1326 audit(2000000144.364:22437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28517 comm="syz.1.9575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 579.285033][T28521] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 579.285057][T28521] rust_binder: Error while translating object. [ 579.293948][T28521] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 579.300342][T28521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94 [ 579.356969][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 579.506277][ T10] usb 4-1: device descriptor read/64, error -71 [ 579.761976][ T10] usb 4-1: device descriptor read/64, error -71 [ 580.017808][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 580.156371][ T10] usb 4-1: device descriptor read/64, error -71 [ 580.412153][ T10] usb 4-1: device descriptor read/64, error -71 [ 580.529559][ T10] usb usb4-port1: attempt power cycle [ 580.693757][T28528] EXT4-fs: Ignoring removed check option [ 580.699504][T28528] No source specified [ 580.715626][T28530] netlink: 'syz.1.9580': attribute type 27 has an invalid length. [ 580.803765][T28535] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 580.891872][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 580.914341][ T10] usb 4-1: device descriptor read/8, error -71 [ 581.043400][T28548] netlink: 'syz.5.9585': attribute type 13 has an invalid length. [ 581.051826][T28548] erspan0: refused to change device tx_queue_len [ 581.053106][ T10] usb 4-1: device descriptor read/8, error -71 [ 581.318201][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 581.351486][ T10] usb 4-1: device descriptor read/8, error -71 [ 581.364502][T28572] cgroup: fork rejected by pids controller in /syz5 [ 581.490029][ T10] usb 4-1: device descriptor read/8, error -71 [ 581.627430][ T10] usb usb4-port1: unable to enumerate USB device [ 581.797135][T28609] rust_binder: 256: no such ref 0 [ 581.802599][T28609] rust_binder: Write failure EFAULT in pid:256 [ 581.824455][ T36] audit: type=1400 audit(2000000146.850:22438): avc: denied { compute_member } for pid=28612 comm="syz.3.9598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 581.864124][T28618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 581.864156][T28618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 581.937525][T28629] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 582.266808][ T336] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 582.288123][ T948] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 582.426675][ T336] usb 2-1: Using ep0 maxpacket: 8 [ 582.433852][ T336] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 582.442587][ T336] usb 2-1: config 179 has no interface number 0 [ 582.449133][ T948] usb 4-1: Using ep0 maxpacket: 8 [ 582.454354][ T336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 582.465882][ T336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 582.477479][ T948] usb 4-1: too many configurations: 129, using maximum allowed: 8 [ 582.485413][ T336] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 582.497087][ T336] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 582.510924][ T336] usb 2-1: config 179 interface 65 has no altsetting 0 [ 582.518451][ T336] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 582.528247][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.542978][ T948] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d9.40 [ 582.553480][ T948] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 582.562248][ T948] usb 4-1: Product: syz [ 582.566690][ T948] usb 4-1: Manufacturer: syz [ 582.571413][ T948] usb 4-1: SerialNumber: syz [ 582.576873][ T948] usb 4-1: config 0 descriptor?? [ 582.752016][ T331] usb 2-1: USB disconnect, device number 81 [ 583.050112][T28646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.058830][T28646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.105181][ T948] usb 4-1: USB disconnect, device number 84 [ 583.306719][T28678] 9pnet_fd: Insufficient options for proto=fd [ 583.321154][T28678] rust_binder: Error in use_page_slow: ESRCH [ 583.321190][T28678] rust_binder: use_range failure ESRCH [ 583.328892][T28678] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 583.330599][T28686] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 583.334796][T28678] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 583.353520][T28678] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:295 [ 583.698636][T28707] rust_binder: Error while translating object. [ 583.708499][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 583.733607][T28707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 583.733652][T28707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:336 [ 583.908204][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 583.940823][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 583.961562][ T10] usb 4-1: can't read configurations, error -61 [ 584.004591][T28715] netlink: 'syz.5.9628': attribute type 4 has an invalid length. [ 584.012967][T28715] netlink: 3649 bytes leftover after parsing attributes in process `syz.5.9628'. [ 584.023613][T28715] netlink: 'syz.5.9628': attribute type 4 has an invalid length. [ 584.031417][T28715] netlink: 3649 bytes leftover after parsing attributes in process `syz.5.9628'. [ 584.068103][T28717] netlink: 'syz.5.9629': attribute type 3 has an invalid length. [ 584.110728][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 584.206666][ T331] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 584.291977][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 584.298682][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.306505][ T10] usb 4-1: can't read configurations, error -61 [ 584.312915][ T10] usb usb4-port1: attempt power cycle [ 584.367836][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.379287][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.389277][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.402683][ T331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.411968][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.420907][ T331] usb 2-1: config 0 descriptor?? [ 584.686288][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 584.707993][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 584.715180][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.723294][ T10] usb 4-1: can't read configurations, error -61 [ 584.856100][ T331] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 584.865200][ T331] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 584.873302][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 584.882566][ T331] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 584.899894][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 584.907175][ T10] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.915617][ T10] usb 4-1: can't read configurations, error -61 [ 584.922686][ T10] usb usb4-port1: unable to enumerate USB device [ 585.124820][ T10] usb 2-1: USB disconnect, device number 82 [ 585.718891][T28749] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 585.751817][T28754] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9642'. [ 585.791391][T28756] rust_binder: Error while translating object. [ 585.791429][T28756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 585.798560][T28756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 586.221893][T28795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9655'. [ 586.402359][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 586.564084][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.573076][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 586.587330][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.596791][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.605159][ T10] usb 2-1: SerialNumber: syz [ 586.815615][T28802] overlayfs: failed to clone upperpath [ 586.835531][T28804] netlink: 'syz.5.9659': attribute type 46 has an invalid length. [ 587.012516][T28815] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 587.084529][ T331] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 587.229172][T28828] rust_binder: Write failure EFAULT in pid:357 [ 587.244996][T28830] netlink: 288 bytes leftover after parsing attributes in process `syz.6.9666'. [ 587.262111][T28830] netlink: 88 bytes leftover after parsing attributes in process `syz.6.9666'. [ 587.265605][ T10] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 587.290591][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.305611][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.315610][T28833] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.319005][ T331] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 587.322977][T28833] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.333026][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.339819][T28833] bridge0: entered allmulticast mode [ 587.351170][ T331] usb 4-1: config 0 descriptor?? [ 587.358781][T28833] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.366433][T28833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.373758][T28833] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.380896][T28833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.388849][T28833] bridge0: entered promiscuous mode [ 587.397508][ T36] audit: type=1400 audit(2000000152.076:22439): avc: denied { read } for pid=149 comm="dhcpcd" name="n16" dev="tmpfs" ino=12901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.419825][ T36] audit: type=1400 audit(2000000152.076:22440): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=12901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.443660][ T36] audit: type=1400 audit(2000000152.076:22441): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=12901 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.540487][ T36] audit: type=1400 audit(2000000152.207:22442): avc: denied { create } for pid=28835 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.564795][ T36] audit: type=1400 audit(2000000152.207:22443): avc: denied { write } for pid=28835 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=12912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.613704][ T36] audit: type=1400 audit(2000000152.207:22444): avc: denied { append } for pid=28835 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=12912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.638597][ T36] audit: type=1400 audit(2000000152.282:22445): avc: denied { unlink } for pid=28850 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=12912 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 587.904918][T28782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:175 [ 587.905386][T28664] usb 2-1: USB disconnect, device number 83 [ 588.015830][T28800] rust_binder: Error while translating object. [ 588.015883][T28800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 588.022210][T28800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:300 [ 588.037662][T28664] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 588.076421][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 588.086339][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.093602][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.100886][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.107927][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.115053][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.122144][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.129433][ T331] lg-g15 0003:046D:C222.0027: unknown main item tag 0x0 [ 588.139817][ T331] lg-g15 0003:046D:C222.0027: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 588.154213][ T331] usb 4-1: USB disconnect, device number 89 [ 588.187839][T28875] fido_id[28875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 588.272457][T28891] netlink: 'syz.6.9678': attribute type 27 has an invalid length. [ 588.281793][T28891] gretap0: left promiscuous mode [ 588.290794][T28891] bridge0: left promiscuous mode [ 588.296007][T28891] bridge0: left allmulticast mode [ 588.322214][T28891] rust_binder: Failed to allocate buffer. len:152, is_oneway:false [ 588.643150][T28927] netlink: 'syz.1.9687': attribute type 58 has an invalid length. [ 588.760455][ T948] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 588.772799][ T948] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 589.249335][T28966] fuse: Unknown parameter '' [ 589.267002][ T331] rust_binder: 28949: removing orphan mapping 0:1048 [ 589.281292][T28968] binder: Unknown parameter 'measure' [ 589.288186][T28968] netlink: 'syz.3.9699': attribute type 3 has an invalid length. [ 589.313958][T28973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.314583][T28973] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.321374][T28975] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 589.663908][ T948] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 589.791462][T29004] netlink: 'syz.1.9710': attribute type 27 has an invalid length. [ 589.845113][ T948] usb 4-1: Using ep0 maxpacket: 32 [ 589.851572][ T948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 589.865020][ T948] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 589.874236][ T948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.887893][ T948] usb 4-1: config 0 descriptor?? [ 590.250182][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 590.324351][ T948] elecom 0003:056E:00FE.0029: unknown main item tag 0x0 [ 590.331545][ T948] elecom 0003:056E:00FE.0029: unknown main item tag 0x0 [ 590.338728][ T948] elecom 0003:056E:00FE.0029: unknown main item tag 0x0 [ 590.346059][ T948] elecom 0003:056E:00FE.0029: unknown main item tag 0x0 [ 590.353199][ T948] elecom 0003:056E:00FE.0029: unknown main item tag 0x0 [ 590.361472][ T948] elecom 0003:056E:00FE.0029: hidraw0: USB HID v0.01 Device [HID 056e:00fe] on usb-dummy_hcd.3-1/input0 [ 590.410010][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 590.415727][ T9] usb 2-1: no configurations [ 590.420932][ T9] usb 2-1: can't read configurations, error -22 [ 590.539928][T29000] tipc: Enabling of bearer rejected, media not registered [ 590.549230][ T45] usb 4-1: USB disconnect, device number 90 [ 590.580586][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 590.661192][ T36] audit: type=1326 audit(2000000155.134:22446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29025 comm="syz.5.9717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x0 [ 590.740559][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 590.746529][ T9] usb 2-1: no configurations [ 590.751374][ T9] usb 2-1: can't read configurations, error -22 [ 590.757949][ T9] usb usb2-port1: attempt power cycle [ 591.124191][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 591.149594][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 591.155332][ T9] usb 2-1: no configurations [ 591.160436][ T9] usb 2-1: can't read configurations, error -22 [ 591.166294][T29032] rust_binder: Error while translating object. [ 591.166940][T29032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 591.173536][T29032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:338 [ 591.305385][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 591.327029][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 591.332992][ T9] usb 2-1: no configurations [ 591.337904][ T9] usb 2-1: can't read configurations, error -22 [ 591.344675][ T9] usb usb2-port1: unable to enumerate USB device [ 591.689049][ T9] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 591.857156][T29060] vfat: Unknown parameter 'discardy Hl' [ 591.863833][T29060] binder: Bad value for 'defcontext' [ 591.870241][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 591.878724][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 591.888803][ T9] usb 4-1: config 179 has no interface number 0 [ 591.895167][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 591.906627][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 591.918403][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 1024, setting to 64 [ 591.929925][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 591.943465][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 591.950599][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 591.960204][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.039455][T29066] tipc: Started in network mode [ 592.044450][T29066] tipc: Node identity ac14140f, cluster identity 4711 [ 592.051718][T29066] tipc: New replicast peer: 139.255.255.255 [ 592.057774][T29066] tipc: Enabled bearer , priority 10 [ 592.188366][ T45] usb 4-1: USB disconnect, device number 91 [ 592.196338][T29082] netlink: 176 bytes leftover after parsing attributes in process `syz.5.9737'. [ 593.147151][T29102] Unsupported ieee802154 address type: 0 [ 593.235170][T29107] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 593.235337][T29107] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 593.245231][ T9] tipc: Node number set to 2886997007 [ 593.346214][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9747'. [ 593.356651][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9747'. [ 593.696797][T29136] rust_binder: Error while translating object. [ 593.696831][T29136] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 593.703054][T29136] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:354 [ 594.202165][T29149] netlink: 'syz.1.9758': attribute type 11 has an invalid length. [ 595.440653][T29196] futex_wake_op: syz.6.9776 tries to shift op by 32; fix this program [ 595.513857][T29198] netlink: 188 bytes leftover after parsing attributes in process `syz.5.9775'. [ 595.892288][T29209] netlink: 'syz.1.9780': attribute type 27 has an invalid length. [ 596.091899][T29237] netlink: 'syz.1.9790': attribute type 6 has an invalid length. [ 596.099679][T29237] netlink: 'syz.1.9790': attribute type 4 has an invalid length. [ 596.108720][T29237] netlink: 'syz.1.9790': attribute type 6 has an invalid length. [ 596.116590][T29237] netlink: 'syz.1.9790': attribute type 13 has an invalid length. [ 596.124482][T29237] netlink: 'syz.1.9790': attribute type 15 has an invalid length. [ 596.134293][T29237] netlink: 'syz.1.9790': attribute type 19 has an invalid length. [ 596.142286][T29237] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.9790'. [ 596.203369][T29247] virtiofs: Unknown parameter 'always' [ 596.541698][T29274] netlink: 328 bytes leftover after parsing attributes in process `syz.3.9803'. [ 596.715206][T29294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 596.715245][T29294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 596.725026][T29295] incfs: Options parsing error. -22 [ 596.743723][T29295] incfs: mount failed -22 [ 596.804960][T29290] 9pnet_fd: Insufficient options for proto=fd [ 597.332498][T29363] __vm_enough_memory: pid: 29363, comm: syz.3.9832, bytes: 18014402804453376 not enough memory for the allocation [ 597.435590][ T36] audit: type=1107 audit(2000000161.495:22447): pid=29374 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 597.463555][ T36] audit: type=1326 audit(2000000161.514:22448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29374 comm="syz.3.9836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe35dd8eec9 code=0x0 [ 597.768644][T29383] overlayfs: failed to clone lowerpath [ 597.826839][T29394] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9842'. [ 597.836535][T29393] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9842'. [ 598.115987][T29418] overlayfs: failed to clone lowerpath [ 598.586628][T28664] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 598.665313][T29446] netlink: 196 bytes leftover after parsing attributes in process `syz.6.9859'. [ 598.723817][T28664] usb 4-1: device descriptor read/64, error -71 [ 598.795562][ T36] audit: type=1400 audit(2000000162.771:22449): avc: denied { append } for pid=29457 comm="syz.6.9863" name="pfkey" dev="proc" ino=4026532469 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 598.990273][T28664] usb 4-1: device descriptor read/64, error -71 [ 599.250610][T28664] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 599.260357][T29467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9866'. [ 599.382168][T29488] incfs: mount failed -22 [ 599.395339][T28664] usb 4-1: device descriptor read/64, error -71 [ 599.495993][T29500] fuse: Unknown parameter 'rootmod0000000000000040000' [ 599.651104][T28664] usb 4-1: device descriptor read/64, error -71 [ 599.768471][T28664] usb usb4-port1: attempt power cycle [ 599.921486][T29526] 9pnet_fd: Insufficient options for proto=fd [ 599.974888][ T36] audit: type=1400 audit(2000000163.878:22450): avc: denied { listen } for pid=29541 comm="syz.6.9890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 600.130755][T28664] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 600.153285][T28664] usb 4-1: device descriptor read/8, error -71 [ 600.294163][T28664] usb 4-1: device descriptor read/8, error -71 [ 600.546741][T28664] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 600.579469][T28664] usb 4-1: device descriptor read/8, error -71 [ 600.728688][T28664] usb 4-1: device descriptor read/8, error -71 [ 600.845541][T28664] usb usb4-port1: unable to enumerate USB device [ 600.920730][T29613] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9913'. [ 600.931031][T29613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29613 comm=syz.5.9913 [ 601.152268][T29654] netlink: 'syz.5.9924': attribute type 4 has an invalid length. [ 601.919072][T29706] __vm_enough_memory: pid: 29706, comm: syz.3.9944, bytes: 18014402804453376 not enough memory for the allocation [ 601.952472][ T36] audit: type=1326 audit(2000000165.727:22451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29721 comm="syz.6.9949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x0 [ 601.975998][ T36] audit: type=1326 audit(2000000165.727:22452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29721 comm="syz.6.9949" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x0 [ 602.849843][T29759] netlink: 240 bytes leftover after parsing attributes in process `syz.1.9963'. [ 602.867194][T29763] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 602.924005][T29775] overlayfs: empty lowerdir [ 603.025129][T29785] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9973'. [ 603.256450][T29821] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9984'. [ 603.504621][T29782] 9pnet_fd: Insufficient options for proto=fd [ 603.603478][T29883] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9999'. [ 603.630304][T29883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9999'. [ 603.654600][T29883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9999'. [ 603.896029][T29902] fuse: Bad value for 'group_id' [ 603.919127][T29902] fuse: Bad value for 'group_id' [ 604.908972][ T36] audit: type=1326 audit(2000000168.504:22453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29909 comm="syz.6.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7fc00000 [ 605.788952][T29964] overlayfs: failed to resolve './file0': -2 [ 605.951874][ T36] audit: type=1400 audit(2000000169.489:22454): avc: denied { append } for pid=29974 comm="syz.1.10033" name="file0" dev="tmpfs" ino=785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.588582][T30007] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 606.788842][T30027] fuse: Bad value for 'fd' [ 606.805492][T30029] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=22 sclass=netlink_tcpdiag_socket pid=30029 comm=syz.3.10051 [ 606.898335][ T36] audit: type=1400 audit(2000000170.371:22455): avc: denied { create } for pid=30041 comm="syz.1.10055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 606.920557][ T36] audit: type=1400 audit(2000000170.380:22456): avc: denied { map } for pid=30041 comm="syz.1.10055" path="socket:[111107]" dev="sockfs" ino=111107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 606.946273][ T36] audit: type=1400 audit(2000000170.380:22457): avc: denied { read } for pid=30041 comm="syz.1.10055" path="socket:[111107]" dev="sockfs" ino=111107 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 607.131101][T30062] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10063'. [ 607.140513][T30062] 0{X: renamed from bridge_slave_1 (while UP) [ 607.148179][T30062] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 607.240628][T30076] incfs_lookup_dentry err:-13 [ 607.245924][T30076] incfs: Can't find or create .index dir in ./bus [ 607.252630][T30076] incfs: mount failed -13 [ 607.571347][T30125] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 607.599335][T30124] 9pnet_fd: Insufficient options for proto=fd [ 607.787526][T30164] netlink: 'syz.6.10098': attribute type 4 has an invalid length. [ 607.798928][T30165] netlink: 'syz.6.10098': attribute type 4 has an invalid length. [ 607.831785][T30171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=30171 comm=syz.1.10100 [ 608.340211][T30209] netlink: 188 bytes leftover after parsing attributes in process `syz.5.10111'. [ 608.434827][ T36] audit: type=1326 audit(2000000171.815:22458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30210 comm="syz.1.10112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 608.591433][T30216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10113'. [ 608.995503][T30258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=30258 comm=syz.5.10128 [ 609.271531][ T36] audit: type=1400 audit(2000000172.594:22459): avc: denied { write } for pid=30279 comm="syz.1.10137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 609.311077][T30295] overlayfs: failed to clone lowerpath [ 609.317698][T30295] sock: sock_timestamping_bind_phc: sock not bind to device [ 609.780500][T30313] netlink: 188 bytes leftover after parsing attributes in process `syz.5.10149'. [ 609.958776][T30338] netlink: 'syz.6.10160': attribute type 16 has an invalid length. [ 609.970506][T30338] netlink: 'syz.6.10160': attribute type 25 has an invalid length. [ 609.986903][T30338] netlink: 64094 bytes leftover after parsing attributes in process `syz.6.10160'. [ 610.183151][T30378] netlink: 'syz.1.10173': attribute type 4 has an invalid length. [ 610.191163][T30378] netlink: 'syz.1.10173': attribute type 2 has an invalid length. [ 610.458211][T30408] 9pnet_fd: Insufficient options for proto=fd [ 611.027934][T30437] netlink: 68 bytes leftover after parsing attributes in process `syz.6.10197'. [ 611.101501][T30446] netlink: 'syz.3.10200': attribute type 11 has an invalid length. [ 612.243596][T30517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30517 comm=syz.5.10219 [ 612.989399][T30533] overlayfs: failed to clone lowerpath [ 612.996155][T30533] overlayfs: failed to clone lowerpath [ 613.152725][ T36] audit: type=1400 audit(2000000176.234:22460): avc: denied { mounton } for pid=30547 comm="syz.5.10231" path="/file0" dev="ramfs" ino=112990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 613.157576][T30549] 9pnet_fd: p9_fd_create_tcp (30549): problem connecting socket to 127.0.0.1 [ 613.628174][T30554] tipc: Started in network mode [ 613.633136][T30554] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 613.642350][T30554] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 613.650614][T30554] tipc: Enabled bearer , priority 10 [ 613.885331][T30566] tmpfs: Unknown parameter '' [ 614.672457][T30604] fuse: Bad value for 'fd' [ 614.850426][ T45] tipc: Node number set to 1 [ 615.611488][T30680] 9pnet_fd: Insufficient options for proto=fd [ 616.958446][ T36] audit: type=1326 audit(2000000179.809:22461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30764 comm="syz.3.10313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe35dd8eec9 code=0x0 [ 617.242120][T30790] overlayfs: failed to clone upperpath [ 617.872893][T30827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10332'. [ 618.283563][T30841] x_tables: unsorted underflow at hook 2 [ 618.507171][T30871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10348'. [ 618.572177][T30875] x_tables: duplicate underflow at hook 1 [ 618.620734][T30880] 9pnet_fd: Insufficient options for proto=fd [ 619.378468][T30936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30936 comm=syz.1.10368 [ 619.660296][T30968] netlink: 'syz.3.10378': attribute type 5 has an invalid length. [ 619.668536][T30968] netlink: 'syz.3.10378': attribute type 5 has an invalid length. [ 619.676557][T30968] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.10378'. [ 620.370628][T31041] netlink: '\': attribute type 4 has an invalid length. [ 620.474344][T31073] 9pnet_fd: Insufficient options for proto=fd [ 620.568539][T31101] 9pnet_fd: Insufficient options for proto=fd [ 620.594665][T31108] overlayfs: failed to clone upperpath [ 621.161664][T31150] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10444'. [ 621.171293][T31150] netlink: 43 bytes leftover after parsing attributes in process `syz.5.10444'. [ 621.180544][T31150] netlink: 'syz.5.10444': attribute type 5 has an invalid length. [ 621.189041][T31150] netlink: 43 bytes leftover after parsing attributes in process `syz.5.10444'. [ 621.813874][ T36] audit: type=1326 audit(2000000184.369:22462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 621.840568][ T36] audit: type=1326 audit(2000000184.369:22463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 621.865392][T31195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10460'. [ 621.916593][T31203] IPv6: NLM_F_CREATE should be specified when creating new route [ 621.932802][ T36] audit: type=1326 audit(2000000184.369:22464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 621.959011][T31203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 621.966357][T31203] IPv6: NLM_F_CREATE should be set when creating new route [ 621.973641][T31203] IPv6: NLM_F_CREATE should be set when creating new route [ 621.973768][ T36] audit: type=1326 audit(2000000184.369:22465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.001655][T31207] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10464'. [ 622.012855][ T36] audit: type=1326 audit(2000000184.369:22466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.039399][ T36] audit: type=1326 audit(2000000184.369:22467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.066532][ T36] audit: type=1326 audit(2000000184.369:22468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.093166][ T36] audit: type=1326 audit(2000000184.369:22469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.093177][T31222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10470'. [ 622.093206][ T36] audit: type=1326 audit(2000000184.397:22471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.160329][ T36] audit: type=1326 audit(2000000184.397:22472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.5.10456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a5b98eec9 code=0x7ffc0000 [ 622.534645][T11835] tipc: Subscription rejected, illegal request [ 622.826272][T31262] 9pnet_fd: Insufficient options for proto=fd [ 623.470781][T31293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31293 comm=syz.3.10497 [ 623.495086][T31293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31293 comm=syz.3.10497 [ 623.627260][T31301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10500'. [ 624.074351][T31310] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.10502'. [ 624.095499][T31312] tipc: Enabling of bearer rejected, failed to enable media [ 624.104220][T31312] 9pnet_fd: Insufficient options for proto=fd [ 624.125238][T31317] overlayfs: failed to clone upperpath [ 626.203955][T31458] 9pnet_fd: Insufficient options for proto=fd [ 626.279614][T31464] overlayfs: failed to clone upperpath [ 626.962893][T31513] netlink: 'syz.3.10577': attribute type 2 has an invalid length. [ 626.971543][T31513] 9pnet_fd: Insufficient options for proto=fd [ 627.383627][T31540] netlink: 'syz.6.10587': attribute type 1 has an invalid length. [ 627.393171][T31540] netlink: 'syz.6.10587': attribute type 2 has an invalid length. [ 627.445232][T31553] netlink: 'syz.3.10591': attribute type 58 has an invalid length. [ 627.454579][T31553] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 627.471819][T31553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=31553 comm=syz.3.10591 [ 627.540453][T31557] overlayfs: failed to clone upperpath [ 628.020808][T31570] overlayfs: missing 'lowerdir' [ 628.020860][T31569] overlayfs: missing 'lowerdir' [ 629.263130][T31622] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10619'. [ 630.042216][T31663] 9pnet_fd: Insufficient options for proto=fd [ 630.168374][T31671] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10634'. [ 630.287846][T31678] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10634'. [ 631.879946][T31731] netlink: 'syz.6.10657': attribute type 4 has an invalid length. [ 631.887848][T31731] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.10657'. [ 633.168920][T31817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10688'. [ 633.497480][ T36] kauditd_printk_skb: 149 callbacks suppressed [ 633.497501][ T36] audit: type=1326 audit(2000000195.327:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31782 comm="syz.6.10678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7fc00000 [ 633.700270][T31843] batadv_slave_0: mtu less than device minimum [ 634.059647][T11835] veth0_vlan: left allmulticast mode [ 634.065119][T11835] bridge0: port 3(veth0_vlan) entered disabled state [ 634.072403][T11835] bridge_slave_1: left allmulticast mode [ 634.078063][T11835] bridge_slave_1: left promiscuous mode [ 634.085396][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.093176][T11835] bridge_slave_0: left allmulticast mode [ 634.098881][T11835] bridge_slave_0: left promiscuous mode [ 634.104701][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.848056][T31875] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10707'. [ 635.216662][ T36] audit: type=1326 audit(2000000196.940:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31926 comm="syz.6.10725" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60558eec9 code=0x0 [ 635.514785][T31935] overlayfs: failed to resolve './file1': -2 [ 635.840886][T31980] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10741'. [ 635.851297][T31980] overlayfs: failed to clone upperpath [ 636.023330][T31972] netlink: 'syz.1.10739': attribute type 4 has an invalid length. [ 636.040006][T31972] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.10739'. [ 639.516831][T11835] bridge_slave_1: left allmulticast mode [ 639.522602][T11835] bridge_slave_1: left promiscuous mode [ 639.528548][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.536366][T11835] bridge_slave_0: left allmulticast mode [ 639.542034][T11835] bridge_slave_0: left promiscuous mode [ 639.547957][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.676290][T11835] tipc: Left network mode [ 639.681632][T11835] veth1_macvtap: left promiscuous mode [ 639.687472][T11835] veth0_vlan: left promiscuous mode [ 644.098811][T32064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=61 sclass=netlink_audit_socket pid=32064 comm=syz.3.10774 [ 644.113195][T32064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=32064 comm=syz.3.10774 [ 644.130981][ T36] audit: type=1326 audit(2000000465.307:22623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32068 comm="syz.6.10775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60558eec9 code=0x0 [ 644.676447][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10799'. [ 645.019203][T32136] netlink: 'syz.6.10800': attribute type 4 has an invalid length. [ 645.027167][T32136] netlink: 'syz.6.10800': attribute type 21 has an invalid length. [ 645.035339][T32136] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.10800'. [ 645.110257][ T36] audit: type=1326 audit(2000000466.217:22624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32145 comm="syz.6.10805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60558eec9 code=0x0 [ 645.156998][ T36] audit: type=1326 audit(2000000466.264:22625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32150 comm="syz.1.10807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 645.210862][ T36] audit: type=1326 audit(2000000466.320:22626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32150 comm="syz.1.10807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 645.234627][ T36] audit: type=1326 audit(2000000466.320:22627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32150 comm="syz.1.10807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 645.444019][T32173] fuse: Unknown parameter 'rootm0000040000' [ 645.450948][T32173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10814'. [ 645.594399][T32199] overlayfs: failed to clone upperpath [ 645.856722][T32221] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10833'. [ 645.941838][T32224] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.949729][T32224] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.956952][T32224] bridge_slave_0: entered allmulticast mode [ 645.963464][T32224] bridge_slave_0: entered promiscuous mode [ 645.970088][T32224] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.977375][T32224] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.984606][T32224] bridge_slave_1: entered allmulticast mode [ 645.991118][T32224] bridge_slave_1: entered promiscuous mode [ 646.077204][T32224] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.081065][T32246] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10840'. [ 646.084391][T32224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.084500][T32224] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.084519][T32224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.116554][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.124324][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.139233][T11835] bridge_slave_1: left allmulticast mode [ 646.145109][T11835] bridge_slave_1: left promiscuous mode [ 646.151054][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.158975][T11835] bridge_slave_0: left allmulticast mode [ 646.164723][T11835] bridge_slave_0: left promiscuous mode [ 646.171085][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.190941][T32251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10842'. [ 646.243300][T11848] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.250419][T11848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.258205][T32257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=32257 comm=syz.6.10845 [ 646.272485][T11848] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.279599][T11848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.288390][T32257] netlink: 4372 bytes leftover after parsing attributes in process `syz.6.10845'. [ 646.299766][T11835] veth1_macvtap: left promiscuous mode [ 646.306072][T11835] veth0_vlan: left promiscuous mode [ 646.368183][T32224] veth0_vlan: entered promiscuous mode [ 646.380653][T32224] veth1_macvtap: entered promiscuous mode [ 646.417439][ T36] audit: type=1400 audit(2000000467.446:22628): avc: denied { mounton } for pid=32224 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 646.450862][T32265] 9pnet_fd: Insufficient options for proto=fd [ 646.582252][ T36] audit: type=1400 audit(2000000467.596:22629): avc: denied { set_context_mgr } for pid=32287 comm="syz.5.10855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 646.646323][T32293] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10856'. [ 647.281459][T32319] tipc: Trying to set illegal importance in message [ 647.294986][T32322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 647.295017][T32322] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 647.429209][ T36] audit: type=1400 audit(2000000468.394:22630): avc: denied { map } for pid=32353 comm="syz.5.10876" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 648.342937][T32372] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10882'. [ 648.352803][T32374] rust_binder: 33: no such ref 0 [ 648.358553][T32374] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 648.365950][T32374] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 648.394089][ T36] audit: type=1400 audit(2000000469.304:22631): avc: denied { call } for pid=32380 comm="syz.5.10887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 648.394115][T32381] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 249) [ 648.414325][T32381] rust_binder: Error while translating object. [ 648.425351][T32381] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 648.431590][T32381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 648.442225][T32382] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 648.749425][T32403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 648.873779][T32417] netlink: 37 bytes leftover after parsing attributes in process `syz.6.10899'. [ 648.947538][ T36] audit: type=1326 audit(2000000469.820:22632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32418 comm="syz.6.10900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff60558eec9 code=0x7ffc0000 [ 649.142335][T32426] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 649.145592][T32426] rust_binder: Error in use_page_slow: ESRCH [ 649.152258][T32426] rust_binder: use_range failure ESRCH [ 649.158994][T32426] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 649.164755][T32426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 649.173419][T32426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:50 [ 649.276057][T32440] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 649.310724][T32446] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 649.330245][T32446] rust_binder: Write failure EINVAL in pid:59 [ 649.790754][T32494] 9pnet_fd: Insufficient options for proto=fd [ 650.018876][T32510] tmpfs: Unknown parameter 'm' [ 650.079681][T32512] rust_binder: Failed copying into alloc: EFAULT [ 650.079712][T32512] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 650.089437][T32512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 650.101094][T32512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:89 [ 650.275405][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 650.275428][ T36] audit: type=1400 audit(2000000471.068:22646): avc: denied { append } for pid=32532 comm="syz.5.10936" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 650.282103][T32533] __vm_enough_memory: pid: 32533, comm: syz.5.10936, bytes: 562954248388608 not enough memory for the allocation [ 650.327831][T32533] SELinux: security_context_str_to_sid () failed with errno=-22 [ 650.395578][ T36] audit: type=1326 audit(2000000471.180:22647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32534 comm="syz.5.10937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69afd8eec9 code=0x0 [ 650.686366][T32540] __nla_validate_parse: 1 callbacks suppressed [ 650.686383][T32540] netlink: 200 bytes leftover after parsing attributes in process `syz.1.10938'. [ 650.702311][T32540] tc_dump_action: action bad kind [ 650.868701][T32550] netlink: 'syz.1.10942': attribute type 12 has an invalid length. [ 651.309957][T32552] cgroup2: Unknown parameter 'me ory_recursiveprot' [ 651.645684][T32580] incfs: Error accessing: ./file0. [ 651.651716][T32580] incfs: mount failed -20 [ 652.276232][T32625] fuse: Unknown parameter 'fd|0xffffffffffffffff' [ 652.295397][ T36] audit: type=1326 audit(2000000472.972:22648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32628 comm="syz.5.10972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x0 [ 652.310709][T32620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10969'. [ 652.328613][T32620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10969'. [ 652.722512][T32673] 9pnet_fd: Insufficient options for proto=fd [ 652.895801][T32680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10989'. [ 654.256805][T32733] sock: sock_timestamping_bind_phc: sock not bind to device [ 654.264229][T32734] sock: sock_timestamping_bind_phc: sock not bind to device [ 654.861245][T32751] 9pnet_fd: Insufficient options for proto=fd [ 655.120664][ T323] netlink: 'syz.1.11028': attribute type 22 has an invalid length. [ 655.316911][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11039'. [ 655.468870][ T380] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.11050'. [ 656.123163][ T446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11072'. [ 656.223834][ T462] netlink: 'syz.1.11078': attribute type 1 has an invalid length. [ 656.231998][ T462] netlink: 'syz.1.11078': attribute type 2 has an invalid length. [ 656.452824][ T472] tipc: Started in network mode [ 656.459939][ T472] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 656.469066][ T472] tipc: Enabling of bearer rejected, failed to enable media [ 656.494316][ T477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11084'. [ 656.622898][ T484] overlayfs: failed to clone upperpath [ 656.702383][ T498] netlink: 'syz.1.11093': attribute type 16 has an invalid length. [ 656.711582][ T498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=498 comm=syz.1.11093 [ 656.742392][ T500] overlayfs: failed to clone upperpath [ 656.766332][ T507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11096'. [ 656.806945][ T513] batadv_slave_0: entered promiscuous mode [ 656.818900][ T512] batadv_slave_0: left promiscuous mode [ 657.028625][ T531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11104'. [ 658.729851][ T660] overlayfs: failed to resolve './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 659.050089][ T701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11167'. [ 659.174333][ T712] overlayfs: failed to clone upperpath [ 659.180727][ T712] netlink: 'syz.3.11171': attribute type 29 has an invalid length. [ 659.188725][ T712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11171'. [ 659.210587][ T714] netlink: 'syz.3.11172': attribute type 4 has an invalid length. [ 659.801894][ T772] netlink: 'syz.5.11193': attribute type 16 has an invalid length. [ 659.813747][ T772] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.11193'. [ 659.833825][ T36] audit: type=1326 audit(2000000480.037:22649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=771 comm="syz.1.11194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 660.200445][ T803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11205'. [ 660.257349][ T823] netlink: 'syz.5.11210': attribute type 19 has an invalid length. [ 660.258102][ T824] 9pnet: Unknown protocol version 9 [ 660.874396][ T901] 9pnet_fd: p9_fd_create_unix (901): problem connecting socket: ./file0: -111 [ 660.899387][ T905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11238'. [ 661.037844][ T923] netlink: 'syz.3.11245': attribute type 16 has an invalid length. [ 661.045941][ T923] netlink: 'syz.3.11245': attribute type 2 has an invalid length. [ 661.053896][ T923] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.11245'. [ 661.267776][ T958] netlink: 'syz.3.11256': attribute type 32 has an invalid length. [ 661.302910][ T963] 9pnet_fd: Insufficient options for proto=fd [ 661.358828][ T971] overlayfs: failed to clone upperpath [ 661.395810][ T972] overlay: ./file0 is not a directory [ 661.919230][ T1018] __nla_validate_parse: 1 callbacks suppressed [ 661.919254][ T1018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11280'. [ 661.934791][ T1018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11280'. [ 661.960283][ T1021] fuse: Bad value for 'fd' [ 662.338978][ T1034] veth1_macvtap: left promiscuous mode [ 662.344971][ T1034] macsec0: entered promiscuous mode [ 662.368388][ T1034] veth1_macvtap: entered promiscuous mode [ 662.379906][ T1034] macsec0: left promiscuous mode [ 662.441904][ T1036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11287'. [ 662.658117][ T1085] netlink: 'syz.6.11306': attribute type 3 has an invalid length. [ 662.952348][ T1105] x_tables: duplicate underflow at hook 1 [ 662.952387][ T1106] x_tables: duplicate underflow at hook 1 [ 663.116917][ T1128] Invalid ELF header magic: != ELF [ 663.122896][ T1128] netlink: 'syz.5.11320': attribute type 25 has an invalid length. [ 663.131392][ T1128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1128 comm=syz.5.11320 [ 663.144213][ T1128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1128 comm=syz.5.11320 [ 663.714434][ T1146] /dev/nbd5: Can't lookup blockdev [ 663.792716][ T1160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1160 comm=syz.5.11331 [ 664.104638][ T1180] 9pnet: Could not find request transport: fd5rfdno=0x0000000000000004 [ 664.362074][ T1201] fuse: Unknown parameter 'f' [ 664.496976][ T1215] netlink: 92 bytes leftover after parsing attributes in process `syz.5.11352'. [ 664.991425][ T36] audit: type=1326 audit(2000000484.878:22650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1222 comm="syz.6.11355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff60558eec9 code=0x0 [ 665.153051][ T1252] fuse: Bad value for 'fd' [ 665.704908][ T36] audit: type=1400 audit(2000000485.545:22651): avc: denied { listen } for pid=1253 comm="syz.3.11364" path=2F3536392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 665.979173][ T1268] overlay: Unknown parameter 'fowner<00000000000000000000' [ 666.161921][ T1291] incfs: Options parsing error. -22 [ 666.167342][ T1291] incfs: mount failed -22 [ 667.856179][ T36] audit: type=1326 audit(2000000487.571:22652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1349 comm="syz.3.11400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35dd8eec9 code=0x7fc00000 [ 667.954506][ T1405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11420'. [ 668.024531][ T1422] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 668.567827][ T1446] fuse: blksize only supported for fuseblk [ 668.687813][ T1450] netlink: 'syz.6.11435': attribute type 46 has an invalid length. [ 668.694597][ T1452] fuse: Bad value for 'user_id' [ 668.700791][ T1452] fuse: Bad value for 'user_id' [ 668.926747][ T1462] overlayfs: failed to clone upperpath [ 669.392921][ T1502] netlink: 68 bytes leftover after parsing attributes in process `syz.6.11454'. [ 669.814769][ T1504] overlayfs: failed to clone upperpath [ 670.164026][ T1559] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.171397][ T1559] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.178699][ T1559] bridge_slave_0: entered allmulticast mode [ 670.186191][ T1559] bridge_slave_0: entered promiscuous mode [ 670.193116][ T1559] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.200245][ T1559] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.207652][ T1559] bridge_slave_1: entered allmulticast mode [ 670.214607][ T1559] bridge_slave_1: entered promiscuous mode [ 670.221057][ T5503] 0{X: left promiscuous mode [ 670.226349][ T5503] bridge0: port 2(30{X) entered disabled state [ 670.233722][ T5503] bridge_slave_0: left allmulticast mode [ 670.239490][ T5503] bridge_slave_0: left promiscuous mode [ 670.245384][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.405262][ T5503] tipc: Disabling bearer [ 670.410674][ T5503] tipc: Left network mode [ 670.419590][ T5503] veth1_macvtap: left promiscuous mode [ 670.425458][ T5503] veth0_vlan: left promiscuous mode [ 670.475250][ T1559] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.482506][ T1559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.490240][ T1559] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.497336][ T1559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.522205][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.530027][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.541711][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.549119][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.558693][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.566116][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.596707][ T1559] veth0_vlan: entered promiscuous mode [ 670.608902][ T1559] veth1_macvtap: entered promiscuous mode [ 670.638955][ T1573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1573 comm=syz.3.11471 [ 670.653637][ T1573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1573 comm=syz.3.11471 [ 670.666569][ T1574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11471'. [ 670.935998][ T45] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 671.097062][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 671.105619][ T45] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 671.114035][ T45] usb 4-1: config 95 has no interface number 0 [ 671.120333][ T45] usb 4-1: config 95 interface 1 has no altsetting 0 [ 671.128699][ T45] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 671.137897][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.146081][ T45] usb 4-1: Product: syz [ 671.150496][ T45] usb 4-1: Manufacturer: syz [ 671.155225][ T45] usb 4-1: SerialNumber: syz [ 671.585907][ T1605] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11484'. [ 671.680127][ T45] usb 4-1: USB disconnect, device number 96 [ 671.711451][ T1613] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11487'. [ 671.830260][ T1624] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11491'. [ 671.877518][ T1637] 9pnet_fd: Insufficient options for proto=fd [ 671.896902][ T1639] netlink: 'syz.1.11495': attribute type 29 has an invalid length. [ 671.905509][ T1639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11495'. [ 672.259351][T11835] bridge_slave_1: left allmulticast mode [ 672.265227][T11835] bridge_slave_1: left promiscuous mode [ 672.271125][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.281021][T11835] bridge_slave_0: left allmulticast mode [ 672.286979][T11835] bridge_slave_0: left promiscuous mode [ 672.293558][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.330385][ T1654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11499'. [ 672.446730][ T1666] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 672.446770][ T1666] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 672.455066][ T1666] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:21 [ 672.485700][ T1671] tipc: Enabling of bearer rejected, failed to enable media [ 672.506096][T11835] veth1_macvtap: left promiscuous mode [ 672.511906][T11835] veth0_vlan: left promiscuous mode [ 672.555447][ T1679] rust_binder: Write failure EINVAL in pid:27 [ 672.670253][ T1697] rust_binder: Error while translating object. [ 672.676860][ T1697] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 672.683165][ T1697] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:34 [ 673.402768][ T1739] netlink: 'syz.5.11531': attribute type 1 has an invalid length. [ 673.656381][ T1758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 673.794710][ T1762] rust_binder: Error while translating object. [ 673.794761][ T1762] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 673.800995][ T1762] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:41 [ 673.880737][ T1766] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 673.889903][ T1766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 673.898347][ T1766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:45 [ 673.991852][ T1773] binder: Bad value for 'stats' [ 674.018428][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11544'. [ 674.020493][ T1776] rust_binder: Write failure EFAULT in pid:53 [ 674.103299][ T1790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1790 comm=syz.3.11547 [ 674.128467][ T1796] 9pnet_fd: Insufficient options for proto=fd [ 674.915298][T11854] bridge_slave_1: left allmulticast mode [ 674.921335][T11854] bridge_slave_1: left promiscuous mode [ 674.927849][T11854] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.936393][T11854] bridge_slave_0: left allmulticast mode [ 674.942337][T11854] bridge_slave_0: left promiscuous mode [ 674.948326][T11854] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.057174][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.064926][ T1857] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.072550][ T1857] bridge_slave_0: entered allmulticast mode [ 675.079276][ T1857] bridge_slave_0: entered promiscuous mode [ 675.088700][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.096058][ T1857] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.103284][ T1857] bridge_slave_1: entered allmulticast mode [ 675.110434][ T1857] bridge_slave_1: entered promiscuous mode [ 675.116704][T11854] tipc: Disabling bearer [ 675.121830][T11854] tipc: Left network mode [ 675.127539][T11854] veth1_macvtap: left promiscuous mode [ 675.133183][T11854] veth0_vlan: left promiscuous mode [ 675.199020][ T1869] rust_binder: Error while translating object. [ 675.199074][ T1869] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 675.209799][ T1869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:58 [ 675.248588][ T1857] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.265197][ T1857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.272792][ T1857] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.279946][ T1857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.304568][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.312653][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.322256][T11853] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.329506][T11853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.340053][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.347241][T11835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.381379][ T1857] veth0_vlan: entered promiscuous mode [ 675.388538][ T1879] __vm_enough_memory: pid: 1879, comm: syz.3.11579, bytes: 18014402804453376 not enough memory for the allocation [ 675.396705][ T1857] veth1_macvtap: entered promiscuous mode [ 675.501072][ T36] audit: type=1400 audit(2000000494.739:22653): avc: denied { transfer } for pid=1882 comm="syz.6.11580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 675.502108][ T1884] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 675.521948][ T1884] rust_binder: Error while translating object. [ 675.528716][ T1884] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 675.535264][ T1884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4 [ 675.545521][ T1885] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 675.572106][ T1888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 675.578724][ T1888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:9 [ 675.604145][ T1890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11582'. [ 675.622369][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11582'. [ 675.657688][T14587] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 675.790315][ T36] audit: type=1400 audit(2000000495.011:22654): avc: denied { execute } for pid=1901 comm="syz.6.11585" path="/selinux/context" dev="selinuxfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 675.828304][T14587] usb 4-1: device descriptor read/64, error -71 [ 676.094944][T14587] usb 4-1: device descriptor read/64, error -71 [ 676.202330][ T36] audit: type=1326 audit(2000000495.396:22655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1910 comm="syz.1.11587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 676.371893][T14587] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 676.510374][T14587] usb 4-1: device descriptor read/64, error -71 [ 676.776990][T14587] usb 4-1: device descriptor read/64, error -71 [ 676.810872][ T36] audit: type=1326 audit(2000000495.968:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1919 comm="syz.6.11590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc58918eec9 code=0x0 [ 676.894161][T14587] usb usb4-port1: attempt power cycle [ 677.231721][ T1959] 9pnet_fd: Insufficient options for proto=fd [ 677.256548][T14587] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 677.278983][T14587] usb 4-1: device descriptor read/8, error -71 [ 677.417691][T14587] usb 4-1: device descriptor read/8, error -71 [ 677.672136][T14587] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 677.694608][T14587] usb 4-1: device descriptor read/8, error -71 [ 677.821489][ T1978] fuse: Unknown parameter 'Fh&j<\`DtE^>' [ 677.844245][T14587] usb 4-1: device descriptor read/8, error -71 [ 677.863264][ T36] audit: type=1326 audit(2000000496.944:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1986 comm="syz.1.11613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7b8eec9 code=0x0 [ 677.915252][ T1990] 9pnet_fd: Insufficient options for proto=fd [ 677.960020][T14587] usb usb4-port1: unable to enumerate USB device [ 677.999688][ T1993] netlink: 'syz.6.11615': attribute type 1 has an invalid length. [ 678.008437][ T1993] netlink: 'syz.6.11615': attribute type 2 has an invalid length. [ 678.304707][ T2009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2009 comm=syz.5.11622 [ 678.647506][ T2022] netlink: 'syz.3.11626': attribute type 4 has an invalid length. [ 678.655675][ T2022] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.11626'. [ 678.750455][ T2030] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 678.757817][ T2030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:81 [ 678.769553][ T2032] binder: Unknown parameter 'euid<00000000000000000000' [ 679.047086][T14587] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 679.151686][ T2044] rust_binder: Error while translating object. [ 679.151729][ T2044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 679.158350][ T2044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 679.208231][T14587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.228525][T14587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.238456][T14587] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 679.251813][T14587] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 679.260951][T14587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.269720][T14587] usb 4-1: config 0 descriptor?? [ 679.705467][T14587] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 679.725605][T14587] plantronics 0003:047F:FFFF.002A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 680.230916][ T2071] rust_binder: Error while translating object. [ 680.230972][ T2071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 680.237318][ T2071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:61 [ 680.279177][ T2078] binder: Unknown parameter 'fscontext?}' [ 680.316158][ T2080] fuse: Bad value for 'fd' [ 681.304078][ T2101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11653'. [ 681.809569][ T2111] rust_binder: Error while translating object. [ 681.809609][ T2111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 681.816025][ T2111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 681.914602][ T31] usb 4-1: USB disconnect, device number 101 [ 682.072163][ T2123] netlink: 'syz.5.11662': attribute type 16 has an invalid length. [ 682.080217][ T2123] netlink: 40458 bytes leftover after parsing attributes in process `syz.5.11662'. [ 682.133952][ T2129] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 682.581333][ T2151] binder: Bad value for 'stats' [ 683.637969][ T2181] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11683'. [ 683.729119][ T2188] input: syz1 as /devices/virtual/input/input44 [ 683.741551][ T2188] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 683.741629][ T2188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 683.751670][ T2188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:119 [ 683.835314][ T2191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121 [ 684.218830][ T2193] rust_binder: Error while translating object. [ 684.228219][ T2193] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 684.234691][ T2193] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:77 [ 684.378867][ T2206] rust_binder: 90: no such ref 2 [ 684.393748][ T2206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 684.420973][ T2210] rust_binder: Error while translating object. [ 684.430265][ T2210] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 684.436579][ T2210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:94 [ 684.459386][ T2212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11696'. [ 684.479463][ T2212] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11696'. [ 684.489402][ T2212] netlink: 43 bytes leftover after parsing attributes in process `syz.6.11696'. [ 684.498630][ T2212] netlink: 'syz.6.11696': attribute type 5 has an invalid length. [ 684.506571][ T2212] netlink: 43 bytes leftover after parsing attributes in process `syz.6.11696'. [ 684.544976][ T2218] rust_binder: Write failure EFAULT in pid:102 [ 684.794561][ T2234] netlink: 260 bytes leftover after parsing attributes in process `syz.6.11704'. [ 684.813778][ T2234] rust_binder: Error while translating object. [ 684.813816][ T2234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 684.820197][ T2234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:113 [ 684.848743][ T2242] fuse: Unknown parameter 'fdipF5Y]xzp'*6{P5AhO+0x0000000000000005' [ 685.218689][ T9] usb 4-1: new low-speed USB device number 102 using dummy_hcd [ 685.330781][ T2258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.340019][ T2258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.379501][ T9] usb 4-1: No LPM exit latency info found, disabling LPM. [ 685.388029][ T9] usb 4-1: config 64 has an invalid interface number: 174 but max is 2 [ 685.397144][ T9] usb 4-1: config 64 has an invalid interface number: 252 but max is 2 [ 685.406282][ T9] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 685.416412][ T9] usb 4-1: config 64 has an invalid interface number: 140 but max is 2 [ 685.425556][ T9] usb 4-1: config 64 has no interface number 0 [ 685.432253][ T9] usb 4-1: config 64 has no interface number 1 [ 685.438513][ T9] usb 4-1: config 64 has no interface number 2 [ 685.444941][ T9] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 685.457198][ T9] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 685.468910][ T9] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 685.479500][ T9] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 685.491248][ T9] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 685.502891][ T9] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 685.514821][ T9] usb 4-1: config 64 interface 174 has no altsetting 0 [ 685.521920][ T9] usb 4-1: config 64 interface 252 has no altsetting 0 [ 685.528899][ T9] usb 4-1: config 64 interface 140 has no altsetting 0 [ 685.538655][ T9] usb 4-1: string descriptor 0 read error: -22 [ 685.545110][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 685.554303][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.564150][ T9] usb-storage 4-1:64.174: USB Mass Storage device detected [ 685.593562][ T9] usb-storage 4-1:64.252: USB Mass Storage device detected [ 685.615016][ T9] usb-storage 4-1:64.140: USB Mass Storage device detected [ 685.779266][ T31] usb 4-1: USB disconnect, device number 102 [ 685.996568][ T2273] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=44 sclass=netlink_xfrm_socket pid=2273 comm=syz.1.11716 [ 686.009427][ T2273] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=2273 comm=syz.1.11716 [ 686.036259][ T2275] 9pnet_fd: Insufficient options for proto=fd [ 686.170746][ T2292] IPv4: Oversized IP packet from 172.20.20.170 [ 686.177693][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 686.185663][ T2292] IPv4: Oversized IP packet from 172.20.20.170 [ 686.192678][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 686.199709][ T2292] IPv4: Oversized IP packet from 172.20.20.170 [ 686.206238][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 686.213476][ T2292] IPv4: Oversized IP packet from 172.20.20.170 [ 686.219779][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 686.227068][ T2292] IPv4: Oversized IP packet from 172.20.20.170 [ 686.233701][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 686.272657][ T2295] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11723'. [ 686.380000][ T2309] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11729'. [ 686.591414][ T36] audit: type=1326 audit(2000000505.134:22658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.615890][ T36] audit: type=1326 audit(2000000505.134:22659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.639926][ T36] audit: type=1326 audit(2000000505.153:22660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.646647][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 686.663771][ T36] audit: type=1326 audit(2000000505.153:22661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.695442][ T36] audit: type=1326 audit(2000000505.153:22662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.719862][ T36] audit: type=1326 audit(2000000505.153:22663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.727396][ T2321] 9pnet_fd: Insufficient options for proto=fd [ 686.743935][ T36] audit: type=1326 audit(2000000505.153:22664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69afd8eec9 code=0x7ffc0000 [ 686.774029][ T36] audit: type=1326 audit(2000000505.153:22665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69afd8eacb code=0x7ffc0000 [ 686.798248][ T36] audit: type=1326 audit(2000000505.153:22666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69afd8eacb code=0x7ffc0000 [ 686.822399][ T36] audit: type=1326 audit(2000000505.153:22667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2319 comm="syz.5.11733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69afd8eacb code=0x7ffc0000 [ 686.859798][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 686.867248][ T10] usb 4-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.878664][ T10] usb 4-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 686.892066][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 686.904625][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.40 [ 686.914187][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.922400][ T10] usb 4-1: Product: syz [ 686.926887][ T10] usb 4-1: Manufacturer: Ч [ 686.931451][ T10] usb 4-1: SerialNumber: syz [ 686.942661][ T2333] __nla_validate_parse: 1 callbacks suppressed [ 686.942682][ T2333] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11736'. [ 686.959866][ T2333] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11736'. [ 687.156217][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 687.162576][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 687.172199][ T10] usb 4-1: USB disconnect, device number 103 [ 687.761359][ T2340] 9pnet_virtio: no channels available for device ./file0 [ 688.021162][ T2347] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 688.779105][ T2400] overlayfs: failed to clone lowerpath [ 688.857058][ T2402] netlink: 7 bytes leftover after parsing attributes in process `syz.1.11758'. [ 688.871870][ T2405] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11751'. [ 688.981376][ T2417] EXT4-fs: Ignoring removed check option [ 688.987193][ T2417] No source specified [ 689.261649][ T2436] netlink: 'syz.5.11770': attribute type 1 has an invalid length. [ 689.333757][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 689.345594][ T2450] netlink: 5 bytes leftover after parsing attributes in process `syz.5.11776'. [ 689.425639][ T2467] 9pnet_fd: Insufficient options for proto=fd [ 689.492520][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 689.499009][ T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 689.507477][ T9] usb 4-1: config 179 has no interface number 0 [ 689.514119][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 689.526043][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 689.537937][ T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 689.548252][ T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 689.561964][ T9] usb 4-1: config 179 interface 65 has no altsetting 0 [ 689.569065][ T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 689.578430][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.646501][ T2490] cgroup2: Unknown parameter 'memory_locauevents' [ 689.810194][ T948] usb 4-1: USB disconnect, device number 104 [ 689.888324][ T2524] tipc: Enabling of bearer rejected, media not registered [ 689.897940][ T2526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11801'. [ 690.363229][ T2542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 690.363262][ T2542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:165 [ 690.633097][ T45] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 690.803452][ T45] usb 4-1: device descriptor read/64, error -71 [ 691.059248][ T45] usb 4-1: device descriptor read/64, error -71 [ 691.315097][ T45] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 691.453703][ T45] usb 4-1: device descriptor read/64, error -71 [ 691.672700][ T2603] bpf: Bad value for 'mode' [ 691.709457][ T45] usb 4-1: device descriptor read/64, error -71 [ 691.826717][ T45] usb usb4-port1: attempt power cycle [ 692.189061][ T45] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 692.232892][ T45] usb 4-1: device descriptor read/8, error -71 [ 692.371373][ T45] usb 4-1: device descriptor read/8, error -71 [ 692.626058][ T45] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 692.648475][ T45] usb 4-1: device descriptor read/8, error -71 [ 692.787137][ T45] usb 4-1: device descriptor read/8, error -71 [ 692.903345][ T45] usb usb4-port1: unable to enumerate USB device [ 707.651570][ T2628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11833'. [ 707.661317][ T2627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11834'. [ 707.687950][ T2626] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11833'. [ 707.698785][ T2628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11833'. [ 707.744483][ T2643] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 707.744521][ T2643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:170 [ 707.747068][ T2642] overlayfs: failed to clone lowerpath [ 707.801947][ T2651] overlayfs: failed to clone lowerpath [ 707.844347][ T2660] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 707.867409][ T2667] netlink: 393 bytes leftover after parsing attributes in process `syz.6.11846'. [ 707.894083][ T36] kauditd_printk_skb: 40 callbacks suppressed [ 707.894104][ T36] audit: type=1400 audit(2000000525.128:22708): avc: denied { nlmsg_tty_audit } for pid=2671 comm="syz.1.11848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 707.917097][ T2677] rust_binder: Write failure EINVAL in pid:160 [ 707.947556][ T2681] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 709.230176][ T2715] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 709.771584][ T2752] netlink: 'syz.1.11877': attribute type 1 has an invalid length. [ 709.781385][ T2752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11877'. [ 710.026745][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.034262][ T2757] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.041485][ T2757] bridge_slave_0: entered allmulticast mode [ 710.048700][ T2757] bridge_slave_0: entered promiscuous mode [ 710.055626][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.063010][ T2757] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.070506][ T2757] bridge_slave_1: entered allmulticast mode [ 710.078352][ T2757] bridge_slave_1: entered promiscuous mode [ 710.155651][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.162791][ T2757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.170134][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.177892][ T2757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.203171][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.210929][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.221345][T11854] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.228753][T11854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.238844][T11853] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.246070][T11853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.290024][ T2757] veth0_vlan: entered promiscuous mode [ 710.304605][ T2757] veth1_macvtap: entered promiscuous mode [ 710.415802][ T2776] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 710.415835][ T2776] rust_binder: Error while translating object. [ 710.436580][ T2776] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 710.443701][ T2776] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 710.947962][ T2789] netlink: 412 bytes leftover after parsing attributes in process `syz.5.11887'. [ 711.523669][ T9] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 711.639472][ T2825] binder: Bad value for 'max' [ 711.684282][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 711.692933][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 711.704486][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 711.718907][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.728098][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.736118][ T9] usb 2-1: Product: Ћ [ 711.741263][ T9] usb 2-1: Manufacturer: 鎾脸嬘洣銃둀꽷㰶湺龒ଥꜿ킪旞ퟯ堦颪홙壤ꡝጒ⋔綟桉뭨谩傳狤⽳⻒㨂ᘭ놘㢒ⲧ탶㥯ꬂܐ댿㭚新䃵쩈佂᥶癦ꇓ䏗蒵ᖡ䟵ᣁΐ폆ℱ㝺ꏣ糴ꙶ휐ം㘊篧뎢慅贙傕ㄴஉ职ꐃ穀⚺筣萒撪黜䥛葉㣫岹紑蹭ʊ뒩袞ほ霒⥘舒敒뉒᲼欐臎牙挶܌跰貣ᐕ穏쫨색脸㣖环㲽뷣캈 [ 711.777899][ T9] usb 2-1: SerialNumber: 侓⮭鼗劈膜ﶜ꩞胚ꇢᅢ﯒鉝⃞㘬Ȍ堔ࣛᖈꭗრ較牖쟄⬄嘡䤻뇿枋痂㸾憱ᔍ䘋걟艞ᓦ㒇䁛ꏏﺌↄ⑅ [ 711.786044][ T948] rust_binder: 2836: removing orphan mapping 0:1048 [ 711.797225][ T2804] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 711.814391][ T2840] rust_binder: Write failure EFAULT in pid:193 [ 711.846677][ T2845] netlink: 124 bytes leftover after parsing attributes in process `syz.3.11906'. [ 711.864032][ T2845] rust_binder: Write failure EFAULT in pid:198 [ 711.903935][ T2851] rust_binder: Write failure EFAULT in pid:204 [ 711.938531][ T2858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2858 comm=syz.3.11911 [ 711.959361][ T2858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2858 comm=syz.3.11911 [ 712.239410][ T9] cdc_ncm 2-1:1.0: bind() failure [ 712.245462][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 712.253060][ T9] cdc_ncm 2-1:1.1: bind() failure [ 712.265893][ T9] usb 2-1: USB disconnect, device number 88 [ 712.653838][ T2895] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11923'. [ 712.663289][ T2896] netlink: 44 bytes leftover after parsing attributes in process `syz.6.11923'. [ 712.676771][ T2895] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 712.677237][ T2895] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 712.684835][ T2896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 712.695477][ T2895] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 712.705721][ T2896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 712.786420][ T2908] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 712.812799][ T2914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 712.818118][ T36] audit: type=1400 audit(2000000529.744:22709): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=1150 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 712.856603][ T36] audit: type=1400 audit(2000000529.744:22710): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1150 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 712.882228][ T2925] erofs: dax options not supported [ 712.888189][ T2925] rust_binder: Write failure EFAULT in pid:15 [ 712.897576][ T36] audit: type=1400 audit(2000000529.744:22711): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1150 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 713.047520][ T2940] rust_binder: 2938 RLIMIT_NICE not set [ 713.059977][ T2936] rust_binder: Error in use_page_slow: ESRCH [ 713.065763][ T2936] rust_binder: use_range failure ESRCH [ 713.072057][ T2936] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 713.077565][ T2936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 713.085868][ T2936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:224 [ 713.399536][ T948] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 713.517109][ T2959] fuse: Unknown parameter 'rootmni' [ 713.571295][ T948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 713.582544][ T948] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 713.595517][ T948] usb 4-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 713.604759][ T948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.614126][ T948] usb 4-1: config 0 descriptor?? [ 713.619547][ T2949] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 713.623770][ T2973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=2973 comm=syz.5.11954 [ 713.630481][ T948] usbhid 4-1:0.0: can't add hid device: -22 [ 713.645895][ T948] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 713.841189][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.850035][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.858784][ T2949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.867647][ T2949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.883149][ T948] usb 4-1: USB disconnect, device number 109 [ 713.910545][ T2989] rust_binder: Failed copying remainder into alloc: EFAULT [ 713.910566][ T2989] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 713.917916][ T2989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 713.926251][ T2989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:239 [ 713.946318][ T2991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 714.135006][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 714.152029][ T3010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11965'. [ 714.292678][ T3027] rust_binder: Error while translating object. [ 714.292715][ T3027] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 714.299376][ T3027] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 714.317803][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 714.340676][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 714.360500][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 714.373639][ T9] usb 2-1: config 0 has no interface number 0 [ 714.381811][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 714.391218][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.399261][ T9] usb 2-1: Product: syz [ 714.404231][ T9] usb 2-1: Manufacturer: syz [ 714.408910][ T9] usb 2-1: SerialNumber: syz [ 714.418086][ T9] usb 2-1: config 0 descriptor?? [ 714.638523][ T948] usb 2-1: USB disconnect, device number 89 [ 714.656244][ T3043] binder: Bad value for 'stats' [ 715.278947][ T3055] 9pnet_fd: Insufficient options for proto=fd [ 715.289573][ T3055] overlay: ./file0 is not a directory [ 715.696043][ T3098] netlink: 'syz.5.11993': attribute type 4 has an invalid length. [ 715.704175][ T3098] netlink: 17 bytes leftover after parsing attributes in process `syz.5.11993'. [ 716.067757][T11835] bridge_slave_1: left allmulticast mode [ 716.073536][T11835] bridge_slave_1: left promiscuous mode [ 716.079555][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.087985][T11835] bridge_slave_0: left allmulticast mode [ 716.093744][T11835] bridge_slave_0: left promiscuous mode [ 716.099807][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.263684][T11835] veth1_macvtap: left promiscuous mode [ 716.270802][T11835] veth0_vlan: left promiscuous mode [ 716.455062][ T3118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=3118 comm=syz.1.12001 [ 716.468189][ T3118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=39 sclass=netlink_audit_socket pid=3118 comm=syz.1.12001 [ 716.481345][ T3118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=3118 comm=syz.1.12001 [ 716.523110][ T3122] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 717.114706][ T3143] netlink: 'syz.1.12010': attribute type 2 has an invalid length. [ 717.129725][ T3143] fuse: Bad value for 'group_id' [ 717.138529][ T3143] fuse: Bad value for 'group_id' [ 717.781278][ T3163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:79 [ 717.797209][ T3167] fuse: Bad value for 'user_id' [ 717.811551][ T3167] fuse: Bad value for 'user_id' [ 717.819627][ T3167] __vm_enough_memory: pid: 3167, comm: syz.1.12018, bytes: 18014402804453376 not enough memory for the allocation [ 717.878815][ T3174] input: syz0 as /devices/virtual/input/input45 [ 718.572352][ T3179] +$<: renamed from bridge0 (while UP) [ 718.609177][ T3182] syz.1.12024 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 719.632034][ T3214] rust_binder: Error in use_page_slow: ESRCH [ 719.632063][ T3214] rust_binder: use_range failure ESRCH [ 719.645722][ T3214] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 719.651331][ T3214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 719.665124][ T3214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:210 [ 719.733040][ T3249] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:212 [ 720.721097][ T3269] random: crng reseeded on system resumption [ 720.758349][ T3269] binder: Unknown parameter 'context[7' [ 720.803043][ T3281] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 720.803084][ T3281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 723.288334][ T336] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 723.313483][ T336] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 723.337542][ T3339] fido_id[3339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 724.515233][ T3345] SELinux: security_context_str_to_sid () failed with errno=-22 [ 724.561238][ T3351] netlink: 'syz.5.12069': attribute type 4 has an invalid length. [ 724.569147][ T3351] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.12069'. [ 724.650011][ T3359] __vm_enough_memory: pid: 3359, comm: syz.1.12072, bytes: 18014402804453376 not enough memory for the allocation [ 727.719206][ T36] audit: type=1400 audit(2000000543.731:22712): avc: denied { map } for pid=3414 comm="syz.6.12087" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 727.743207][ T36] audit: type=1400 audit(2000000543.731:22713): avc: denied { execute } for pid=3414 comm="syz.6.12087" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 729.611421][ T948] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 729.771263][ T948] usb 2-1: Using ep0 maxpacket: 8 [ 729.777900][ T948] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 729.789705][ T948] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 729.800730][ T948] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 729.811963][ T948] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 729.821196][ T948] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 729.829408][ T948] usb 2-1: Manufacturer: syz [ 729.836043][ T948] hub 2-1:32.0: Invalid hub with more than one config or interface [ 729.844086][ T948] hub 2-1:32.0: probe with driver hub failed with error -22 [ 730.049744][ T3432] rust_binder: Error while translating object. [ 730.049808][ T3432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 730.056045][ T3432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:195 [ 730.071575][ T948] usb 2-1: USB disconnect, device number 90 [ 731.108538][ T36] audit: type=1326 audit(2000000546.911:22714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3442 comm="syz.5.12095" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69afd8eec9 code=0x0 [ 731.359467][ T9] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 731.520678][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 731.530958][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 731.541816][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 731.550894][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.559391][ T9] usb 2-1: Product: syz [ 731.563645][ T9] usb 2-1: Manufacturer: syz [ 731.568304][ T9] usb 2-1: SerialNumber: syz [ 731.788695][ T9] usb 2-1: cannot find UAC_HEADER [ 731.796082][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 731.811576][ T2633] udevd[2633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 732.003149][ T3445] rust_binder: Error in use_page_slow: ESRCH [ 732.003170][ T3445] rust_binder: use_range failure ESRCH [ 732.009238][ T3445] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 732.014815][ T3445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 732.022897][ T3445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:197 [ 732.032811][ T31] usb 2-1: USB disconnect, device number 91 [ 732.943836][ T3456] rust_binder: 201: no such ref 3 [ 732.998040][ T3458] netlink: 44 bytes leftover after parsing attributes in process `syz.6.12096'. [ 733.007284][ T3458] netlink: 59 bytes leftover after parsing attributes in process `syz.6.12096'. [ 733.016853][ T3458] netlink: 59 bytes leftover after parsing attributes in process `syz.6.12096'. [ 734.892638][ T3465] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 734.892670][ T3465] rust_binder: Error while translating object. [ 734.908206][ T3465] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 734.917091][ T3465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 735.260492][ T31] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 735.432541][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 735.440676][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 735.449531][ T31] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 735.458064][ T31] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 735.466484][ T31] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 735.475853][ T31] usb 2-1: config 129 has no interface number 0 [ 735.482182][ T31] usb 2-1: config 129 has no interface number 1 [ 735.488663][ T31] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 735.502221][ T31] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 735.513156][ T31] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 735.526605][ T31] usb 2-1: config 129 interface 135 has no altsetting 0 [ 735.533629][ T31] usb 2-1: config 129 interface 5 has no altsetting 0 [ 735.542000][ T31] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 735.551243][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.559382][ T31] usb 2-1: Product: syz [ 735.563666][ T31] usb 2-1: Manufacturer: syz [ 735.568353][ T31] usb 2-1: SerialNumber: syz [ 735.962739][ T31] usb 2-1: MIDIStreaming interface descriptor not found [ 735.972890][ T31] usb 2-1: USB disconnect, device number 92 [ 735.990202][ T2792] udevd[2792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 736.983714][ T3489] netlink: 'syz.6.12105': attribute type 2 has an invalid length. [ 737.141103][ T3513] can0: slcan on ttyS3. [ 737.147363][ T3513] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:280 [ 737.915116][ T3491] can0 (unregistered): slcan off ttyS3. [ 739.275469][ T3574] picdev_read: 76 callbacks suppressed [ 739.275493][ T3574] kvm: pic: non byte read [ 739.300593][ T3574] kvm: pic: level sensitive irq not supported [ 739.300658][ T3574] kvm: pic: non byte read [ 739.322550][ T3574] kvm: pic: level sensitive irq not supported [ 739.322614][ T3574] kvm: pic: non byte read [ 739.365562][ T3574] kvm: pic: level sensitive irq not supported [ 739.365628][ T3574] kvm: pic: non byte read [ 739.405707][ T3574] kvm: pic: level sensitive irq not supported [ 739.405790][ T3574] kvm: pic: non byte read [ 739.428613][ T3574] kvm: pic: level sensitive irq not supported [ 739.428680][ T3574] kvm: pic: non byte read [ 739.465740][ T3574] kvm: pic: level sensitive irq not supported [ 739.465808][ T3574] kvm: pic: non byte read [ 739.486099][ T36] audit: type=1400 audit(2000000554.764:22715): avc: denied { getopt } for pid=3569 comm="syz.6.12115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 739.506335][ T3574] kvm: pic: level sensitive irq not supported [ 739.506400][ T3574] kvm: pic: non byte read [ 739.532346][ T3574] kvm: pic: level sensitive irq not supported [ 739.532412][ T3574] kvm: pic: non byte read [ 739.579341][ T3573] netlink: 32 bytes leftover after parsing attributes in process `syz.6.12115'. [ 741.744307][ T3595] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 741.805216][ T3609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12129'. [ 741.816320][ T3613] __vm_enough_memory: pid: 3613, comm: syz.6.12129, bytes: 18014402804453376 not enough memory for the allocation [ 741.835571][ T3616] rust_binder: Failed to allocate buffer. len:4240, is_oneway:true [ 741.835608][ T3616] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 741.850384][ T3616] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:229 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: tun: ioctl(TUNSETIFF) failed (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=3 req=11997 state=3 status=67 (errno 9: Bad file descriptor) [ 741.862164][ T3619] rust_binder: Write failure EFAULT in pid:300 [ 741.923116][ T3625] netlink: 188 bytes leftover after parsing attributes in process `syz.6.12133'. [ 741.973212][ T36] audit: type=1400 audit(2000000557.100:22716): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[1749]" dev="pipefs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 742.181762][ T5503] bridge_slave_1: left allmulticast mode [ 742.187499][ T5503] bridge_slave_1: left promiscuous mode [ 742.199572][ T5503] +$<: port 2(bridge_slave_1) entered disabled state [ 742.208735][ T5503] bridge_slave_0: left allmulticast mode [ 742.214762][ T5503] bridge_slave_0: left promiscuous mode [ 742.221161][ T5503] +$<: port 1(bridge_slave_0) entered disabled state [ 742.351333][ T5503] veth1_macvtap: left promiscuous mode [ 742.357121][ T5503] veth0_vlan: left promiscuous mode [ 742.637564][ T5503] bridge_slave_1: left allmulticast mode [ 742.643356][ T5503] bridge_slave_1: left promiscuous mode [ 742.649632][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.657418][ T5503] bridge_slave_0: left allmulticast mode [ 742.663286][ T5503] bridge_slave_0: left promiscuous mode [ 742.670011][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.788279][ T5503] veth1_macvtap: left promiscuous mode [ 742.794023][ T5503] veth0_vlan: left promiscuous mode