last executing test programs: 1m57.701217406s ago: executing program 1 (id=132): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_usb_connect(0x0, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYRES16=r1], 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 1m56.474905669s ago: executing program 1 (id=137): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x9}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/191, 0xbf, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) (async) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) (rerun: 64) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x100000001) (async) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x4c08, 0x0) 1m56.473305349s ago: executing program 1 (id=138): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 1m56.380212669s ago: executing program 1 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000600)={{0x0, 0x6, 0x94, 0x2, 0x4, 0x5, 0x9, 0xffff, 0x40, 0x6, 0x8, 0x10001, 0x3, 0x2, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001600)={0x0, r2, "0a04fa53b54a444508e454ae06a98fed7e3b9519a75c4fb041490763926de221a56bf7e07b494bfc2657a11a0d7d787963c1518267c77280d2826a49939d03a6d30865800d20cb830860d3beb46d023e423dbd7cf5e02e0e5a88e111fe65ef550d73d6cc00b6d8ac4d30b4f51e185bc2b1792a8a46020ecc7d4b4f4eef30d604be2f895e7fb1dcb291a01b3f0483ca18c7040237cc5df797a3eed3d52b9fb8fe89bc571c6e596250d5f4e6b875dee423794adaafbddc9df8a1facf06d42fad8ea779aa87715607a823b708e34fa1a0b50a71dec1d4852d0187923ebbbc982c515cb2b5048132c67105c32daf42e4b6809506276451b90ce4640aba5db643410e", "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"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001600)={0x0, r2, "0a04fa53b54a444508e454ae06a98fed7e3b9519a75c4fb041490763926de221a56bf7e07b494bfc2657a11a0d7d787963c1518267c77280d2826a49939d03a6d30865800d20cb830860d3beb46d023e423dbd7cf5e02e0e5a88e111fe65ef550d73d6cc00b6d8ac4d30b4f51e185bc2b1792a8a46020ecc7d4b4f4eef30d604be2f895e7fb1dcb291a01b3f0483ca18c7040237cc5df797a3eed3d52b9fb8fe89bc571c6e596250d5f4e6b875dee423794adaafbddc9df8a1facf06d42fad8ea779aa87715607a823b708e34fa1a0b50a71dec1d4852d0187923ebbbc982c515cb2b5048132c67105c32daf42e4b6809506276451b90ce4640aba5db643410e", "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"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) (async) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r5, 0x4068aea3, &(0x7f0000000180)={0x94, 0x0, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000300)={0x27800000084, 0x0, 0x1, r8, 0x1}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000080)={0x5, 0x0, 0x1, r8, 0x8}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, 0xffffffffffffffff, 0x22e7c000) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, 0xffffffffffffffff, 0x22e7c000) syz_open_procfs(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) 1m55.394908478s ago: executing program 1 (id=152): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x2}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xfe, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 1m55.379040929s ago: executing program 1 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r0, 0x0, 0x0, 0xfffffffffffffffd}]) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f0000000180)=""/84, &(0x7f0000000000)=0x54) 1m55.335758863s ago: executing program 32 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r0, 0x0, 0x0, 0xfffffffffffffffd}]) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=0xffffffffffffffff) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r3, 0x10e, 0x6, &(0x7f0000000180)=""/84, &(0x7f0000000000)=0x54) 1m34.783357125s ago: executing program 0 (id=494): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0xdc9) (async) r2 = dup(r1) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) 1m34.759730767s ago: executing program 0 (id=495): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x16c0, 0x75e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xc0, 0x2c, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x8, 0x91, 0x1, {0x22, 0x54}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xe, 0x2f, 0x2}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0xbc, 0x8, 0x4, 0x8, 0x2}, 0x51, &(0x7f0000000080)={0x5, 0xf, 0x51, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xfe, 0x6, 0x732, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "03c2a77d6c69d196f149b53a26740661"}, @ssp_cap={0x10, 0x10, 0xa, 0xfc, 0x1, 0x1, 0xf00f, 0xab8, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0x1c, 0x10, 0x1, 0x1, 0x9f8, 0x47}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa2, 0x1, 0xb, 0x4, 0xf4}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc04}}, {0xd0, &(0x7f0000000180)=@string={0xd0, 0x3, "5472bca99cdd00233e39c929912ed68d91c3abbe7979676f05043a20e829b87ac862c6987cb1d47cf532295b4dc174a1c33340add0e695e4a8630260fd82b9bac261ee2472c1627adc621928d0ba4426ef15c4fb238e78f43f12a2beb72d0f83057d5d512313e54135cf7aa71f948149c91cfe5552531fc42e8962b434b6d6d9bb7838277acd07ef695b6b90f14087e1d34734ad2b880825601604d6b1b988b1a77b3dc236871abbf7bd6ace5f145ce282c5608c1695a0e1c37deb1fae0c40abfc398029591215114b27bf7aaa7f"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000480)={0x24, &(0x7f00000002c0)={0x0, 0x9, 0xd0, {0xd0, 0x3, "654ee911efb9b6157c6cf6d385650ea2fbaef5c3ed56195eef12d9ddcba2c849b73fb0d5e1c4ce68e658b46b7ccf90cc79dad09b040d87d1959fbcb2df2f2ada1199f1de743e54eb544062ca3c8b4509406b5c9e7b19a2442fe5f13f389fe06e3cf26e69ea1d61e69e5e48a4f7c273a1eb0d4d126ea9537f844d59a39c9c09f9050774d7d95f4729ec013cde221d30b87508a78d5aa14f93c7b122fca1cc0bff3486c788e25b845597e498a6725607bfb1785c6edbc14a1fa4de08267c9321189f7268b494dfd4935cd06a1b995c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1067}}, &(0x7f0000000400)={0x0, 0x22, 0x15, {[@main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x2, 0x0, 0x9, "a9a1"}, @global=@item_4={0x3, 0x1, 0x8, "06c91660"}, @main=@item_4={0x3, 0x0, 0x9, "a811a9e7"}, @global=@item_012={0x1, 0x1, 0xa, 's'}, @global=@item_4={0x3, 0x1, 0x5, "21c84599"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1231, 0x0, 0x1, {0x22, 0xa8c}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x40, 0x15, 0x13, "34183d0a695b47571e84b66405a667d7a6a5fc"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0x30, "f6c713a8b6e9f06ecc92b84e77ead2732a9abdb0c5ee5040cf4d2d26222408db98f81b3ba1243e2e1d44c5f00c70be16"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xf}}) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r0, 0x1e25b000) 1m34.190846274s ago: executing program 0 (id=504): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x20040600) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x12, r3, 0xa4840000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 1m34.160857417s ago: executing program 0 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x94, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x30}, @NL80211_ATTR_PMK={0x14, 0xfe, "f5899a1c9c2f24bed10def9bc631c166"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8e733bff058cd1f95a82ccf50ade9a26"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x41}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1f}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "e8aed0fee589adb2956e49898219070c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x40004}, 0x20040050) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000006b40)={0x2020}, 0x2020) 1m34.144045439s ago: executing program 0 (id=506): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x341142) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000040)=0xf9) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4044000) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xffff}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7fffffff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48004}, 0x4004) r3 = syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x20000) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000380)={0x51, 0x4, 0x1000, {0x1, 0xc}, {0xffff, 0x8}, @rumble={0x800, 0x6}}) (async) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSETLED(r4, 0x4b32, 0xffff) (async) ioprio_set$uid(0x0, 0xee00, 0x6000) (async) r5 = socket(0x1a, 0x80802, 0xd76a) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {0x1, 0x1bef, 0x2, 0x3}, 0x39, [0x6, 0xc3ac, 0x1, 0x4, 0x8, 0x49c1, 0x9f, 0x7389, 0x3, 0xfffffe01, 0x9, 0x8, 0x3, 0x3, 0x2, 0x4, 0x2, 0x7, 0x3, 0x3ff, 0x6d, 0x9, 0xd, 0x6ee08317, 0x3, 0x2, 0x0, 0x87, 0x80200, 0x2, 0xee, 0x6, 0xe5b, 0x5, 0x52c, 0x8, 0x9, 0xc, 0x7, 0x9, 0x0, 0x8000, 0x9, 0x7, 0x9, 0x81, 0x6, 0x40, 0x1, 0x1c00000, 0x3, 0x4, 0x7, 0xa, 0xb, 0x6, 0x4, 0x2b, 0x8, 0x7, 0x81, 0x8, 0x5, 0x4], [0xbf92, 0x8, 0x0, 0x4, 0x9, 0x68a, 0x8, 0x8000, 0x3, 0xf, 0x2, 0x401, 0x80000000, 0x9, 0xffff, 0x9, 0x7f, 0x1, 0x0, 0x100, 0x8001, 0x8, 0x80000001, 0x60020542, 0xaf2, 0x200, 0x6, 0x8, 0x8001, 0x9, 0x3, 0x800, 0x602, 0xb, 0x5, 0x5, 0xffffff81, 0x417, 0x7, 0x2, 0x1000, 0x4, 0x8001, 0x2, 0xa, 0x5, 0x11, 0x2, 0xfffffff1, 0x401, 0x9818, 0xc, 0x1, 0x4e, 0xfffff800, 0xffffffff, 0x8, 0x3, 0x7, 0x6, 0x400, 0x0, 0x5, 0xd7dd], [0xffffffff, 0x7, 0x7fff, 0x2, 0x7, 0x982, 0x4, 0x7, 0x5, 0x2b, 0x9, 0x0, 0xfffff000, 0x9, 0x82e, 0xc, 0x9, 0x2, 0x0, 0x8, 0x4, 0x8, 0x0, 0x9, 0x4, 0x3, 0x6b, 0xfffffff7, 0x4, 0xffffffff, 0x8000, 0xfe3, 0x7f, 0x4, 0xa, 0xfffffff6, 0x1, 0xf9, 0xffff7fff, 0x40, 0x7, 0xffff, 0x8, 0xffffffff, 0x7, 0x1000, 0x3, 0x800, 0x1ff, 0x0, 0x6, 0x4, 0x4aa6, 0x5, 0x7, 0x4, 0x0, 0x7fff, 0x8001, 0x0, 0xffff5a57, 0x0, 0x9, 0x4], [0x100, 0x5, 0x3, 0x5, 0x9, 0x8, 0x9, 0x8, 0xe1, 0xfffffbff, 0x0, 0x5, 0x4c7, 0x8, 0x9, 0x4, 0x3, 0x3, 0x4, 0x7fffffff, 0x9, 0x1, 0x1, 0x8, 0x3, 0x40, 0x5, 0x3105200f, 0x4, 0x4a, 0xea6, 0x1, 0x6, 0x800, 0x5, 0x3, 0x5, 0x2, 0x7, 0xfff, 0x110, 0x80000001, 0xfffffffa, 0x7fff, 0x9, 0xfffffc00, 0x4, 0x6, 0xffffffdd, 0xa, 0x6, 0x0, 0x80000000, 0x0, 0x99e5, 0x6, 0x2, 0x1, 0xa, 0x7, 0x7, 0x579, 0x7fff, 0x400]}, 0x45c) r7 = accept4$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80400) bind$vsock_stream(r7, &(0x7f00000008c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) write$uinput_user_dev(r6, &(0x7f0000000900)={'syz1\x00', {0x1, 0x90, 0x6, 0x6}, 0x4, [0x3, 0x4, 0x1b2, 0x7, 0xb, 0x9, 0x3, 0x9, 0x9, 0x5, 0xde13, 0x7, 0x6, 0xfffffffe, 0x6, 0x0, 0xf, 0x8000, 0x5, 0x3, 0xfffff20d, 0x4, 0x8, 0x4, 0x1, 0x4, 0x7ff, 0xf91, 0x7, 0x10, 0x7ff, 0x3d2a, 0x5, 0x4, 0x5, 0x32a, 0xe3, 0x60000000, 0xe4, 0x9, 0x5, 0x6, 0x2, 0x400, 0x1, 0x25c, 0x8001, 0x5, 0x63, 0xc4, 0x5, 0x6, 0x5, 0x2665, 0x7, 0x3ff, 0x5, 0x5, 0x6, 0x8, 0xe0000, 0x0, 0xfe22, 0x9], [0xa, 0x2, 0xe, 0x9, 0x5, 0xfff, 0x6, 0x0, 0xe, 0x8, 0x5, 0x81, 0xe7, 0x10000, 0x9, 0x8, 0x72, 0xdff, 0x4, 0xffffff15, 0x4, 0xb8, 0x6, 0x47e75a56, 0x7, 0x1000, 0x7, 0x9, 0x4, 0xfa4, 0x4, 0x6, 0x1, 0x5, 0xfffffffa, 0x1, 0x2f2, 0x8, 0x568, 0x4, 0x0, 0x3, 0x9, 0x8, 0xffff0001, 0x61, 0x80000000, 0x73c, 0xd02, 0x2, 0x7, 0x0, 0xfffffff9, 0x7, 0x728e, 0x8001, 0x5, 0x1, 0x10000, 0x7ff, 0x80000001, 0xfffffff9, 0x1, 0x7], [0x8, 0x3, 0xffffff81, 0xb, 0x8, 0x800, 0x5df4c96, 0x8, 0x1, 0xd4, 0x401, 0x400, 0x2, 0x7b4000, 0xfff, 0xfffffff9, 0x7, 0x3, 0x1, 0x1000, 0xadb, 0x7, 0x800, 0x5, 0x7, 0x6, 0x9, 0x0, 0xf, 0xfff, 0xcb, 0x9, 0x6, 0x3, 0x2, 0x4, 0xff, 0x7, 0x6, 0x9, 0x8, 0xffff, 0x81, 0x6, 0x9e, 0x65, 0x5, 0x6, 0x7, 0x49, 0xb45, 0x1, 0x9f81, 0x4, 0x101, 0x7, 0x6, 0x2556, 0xe, 0x2, 0x4, 0x7, 0xef0, 0x1000], [0x400, 0x81, 0x80000000, 0x9, 0x0, 0x1ff, 0x9, 0x2, 0x10001, 0x0, 0x4, 0x7, 0x7, 0xd86, 0xc9, 0xc, 0x69, 0x5, 0x5, 0x778f, 0x3, 0x2, 0xd, 0x5, 0x8, 0x3, 0x4, 0x3, 0x7, 0xfffffffd, 0x3, 0x3, 0x7, 0x4, 0x1, 0xaea, 0x2, 0x6, 0x400, 0x8, 0xe, 0x1, 0x38236c63, 0x5, 0x2, 0x10001, 0x100, 0x7, 0x4, 0x5, 0x4, 0x9, 0x0, 0x4, 0x3, 0x100, 0x8, 0x2, 0xba8, 0x7fffffff, 0x8, 0x8, 0x0, 0x2]}, 0x45c) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), r5) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x30, r8, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x40800) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000ec0)={0x400, 0x6, 0x9, 0xfffc}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) ioctl$PTP_PIN_SETFUNC2(r9, 0x40603d10, &(0x7f0000000f40)={'\x00', 0x0, 0x3, 0xc}) write$tun(0xffffffffffffffff, &(0x7f0000000fc0)={@val={0x0, 0x88a2}, @void, @llc={@llc={0x6, 0x0, "db", "ccc8b41747817d8e2233cfc33eda1841307ffbdee8b132745ad6bf158b35556a06569a5acb564c1f6c90e51479503e32890d9d659857f9f85e6ab68aae0146a21f3a985e9e21b400f1c7a45de804837f9e6b650f15e538c00d4e44a8bd1545b859d8b37229066f9759f7634f84a49e0ef2db01cc359b2d645b6756660c148f04683e0f6206eadb169c47b747d3e6"}}}, 0x95) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r10, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xcad2}]}, 0x24}}, 0x2000c010) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000001200)={0x8, 0xffffffff, 0x8, 0x4, 0x1000, 0x2}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)) 1m33.906980932s ago: executing program 0 (id=507): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) (async) syz_clone(0xa001000, &(0x7f00000000c0)="751e92e7d0148961084401888db7a73e0a13e958b1d0b20bf4479cba05221609b2a0fb0e7e3af1f64317194e5d0a56b8487e23b95aee6e0f82f305242c4fd2666a4e89898b43500acd08ba2a885528ad93997b2d863b23c3f25ee98103a145f5f995edc2ea4e7c9ba2ef5f2952745e66ac0743f5515553be9b73556a30494d386bd6ed7e979f71325aac7dff78b8b33bb6754afcc065c1c43e3152b94e299dfd2fbc22a2b42961f7c101c4537fdca8fb2189dc8d6d59fe3b8281a4f0e34e05501badd43ed6c84689afb45ee43df3e1f7eb9ae228d6bedb2c70d58cfbe6", 0xdd, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="2785c7fae26f2e414919c5da7744cb337afdfe012c0d26936bc607563da81402760a91c4e8c25e77cee2075a4dd0ca9f2288a102da417f99e060aa4d110765504ff2cc8ee4a02025491ff882badbf588ce64b0b9ca0af392cfed16fa905af75fd5e6a667272cf28a5ed7968e571dd2309164c80d2b4849fd6c16e8") 1m33.906832732s ago: executing program 33 (id=507): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xc, 0x13, r0, 0xca639000) (async) syz_clone(0xa001000, &(0x7f00000000c0)="751e92e7d0148961084401888db7a73e0a13e958b1d0b20bf4479cba05221609b2a0fb0e7e3af1f64317194e5d0a56b8487e23b95aee6e0f82f305242c4fd2666a4e89898b43500acd08ba2a885528ad93997b2d863b23c3f25ee98103a145f5f995edc2ea4e7c9ba2ef5f2952745e66ac0743f5515553be9b73556a30494d386bd6ed7e979f71325aac7dff78b8b33bb6754afcc065c1c43e3152b94e299dfd2fbc22a2b42961f7c101c4537fdca8fb2189dc8d6d59fe3b8281a4f0e34e05501badd43ed6c84689afb45ee43df3e1f7eb9ae228d6bedb2c70d58cfbe6", 0xdd, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)="2785c7fae26f2e414919c5da7744cb337afdfe012c0d26936bc607563da81402760a91c4e8c25e77cee2075a4dd0ca9f2288a102da417f99e060aa4d110765504ff2cc8ee4a02025491ff882badbf588ce64b0b9ca0af392cfed16fa905af75fd5e6a667272cf28a5ed7968e571dd2309164c80d2b4849fd6c16e8") 1m17.07498957s ago: executing program 2 (id=825): r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x100000000}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7}, 0x7) bind$bt_sco(r2, &(0x7f0000000140), 0x8) ioctl$TCFLSH(r1, 0x540b, 0x1) r3 = syz_socket_connect_nvme_tcp() ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000180)={{r3}, "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"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000001180)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000001200)={'gretap0\x00', 0x0, 0x40, 0x0, 0x1, 0xdc4, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0xd36d}, {@multicast2, 0xef3}, {@multicast2, 0xdc}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffff8}]}, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x9, [{@remote, 0x7}, {@rand_addr=0x64010100, 0xc694}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@multicast1, 0x5}]}, @ssrr={0x89, 0xf, 0x90, [@rand_addr=0x64010102, @private=0xa010100, @multicast2]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x4e, [@remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000012c0)={'erspan0\x00', &(0x7f0000001200)={'gretap0\x00', 0x0, 0x40, 0x0, 0x1, 0xdc4, {{0x22, 0x4, 0x1, 0x11, 0x88, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0xee, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x28}, 0xd36d}, {@multicast2, 0xef3}, {@multicast2, 0xdc}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffff8}]}, @timestamp_addr={0x44, 0x2c, 0x25, 0x1, 0x9, [{@remote, 0x7}, {@rand_addr=0x64010100, 0xc694}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x5}, {@multicast1, 0x5}]}, @ssrr={0x89, 0xf, 0x90, [@rand_addr=0x64010102, @private=0xa010100, @multicast2]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x4e, [@remote]}]}}}}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001300)={0x0, @empty, @empty}, &(0x7f0000001340)=0xc) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001300)={0x0, @empty, @empty}, &(0x7f0000001340)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001400)={'syztnl1\x00', &(0x7f0000001380)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x56, 0xf, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000, 0x80, 0x0, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001440)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001440)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001500)={'gre0\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x7, 0x2, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x68, 0x0, 0x25, 0x29, 0x0, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x3b, 0x1, [{0x7, 0x11, "7e7c44b8737f7a193bed000727cef6"}, {0x5, 0xf, "38fc333729a34e719d00a80887"}, {0x1, 0x7, "a70da42286"}, {0x1, 0x3, 'z'}, {0x0, 0xb, "d71a1e1e2cb59faec9"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001600)={'tunl0\x00', &(0x7f0000001540)={'gretap0\x00', 0x0, 0x20, 0x40, 0x9, 0x9, {{0x19, 0x4, 0x1, 0x2e, 0x64, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@lsrr={0x83, 0x23, 0x76, [@empty, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @empty, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x2c, 0x87, 0x1, 0x3, [{@loopback, 0xffffff80}, {@multicast1, 0x2}, {@multicast1, 0xa}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@loopback, 0x37a}]}]}}}}}) getpeername$packet(r2, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001680)=0x14) getpeername$packet(r1, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001800)={'erspan0\x00', &(0x7f0000001780)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x8, {{0xb, 0x4, 0x2, 0x2c, 0x2c, 0x64, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x6, [{@private=0xa010102, 0xfffffffc}, {@local, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x8, 0xfffffffd, 0x4a, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x20, 0x2, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000018c0)={'syztnl1\x00', &(0x7f0000001840)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x8, 0xfffffffd, 0x4a, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x20, 0x2, 0x2}}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000001900)={@dev, 0x0}, &(0x7f0000001940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001980)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f00000019c0)={0x218, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x22) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001c00)={&(0x7f00000019c0)={0x218, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x22) socket(0x2c, 0x80000, 0x5) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001c80)) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001c80)=0x0) ptrace$cont(0x7, r17, 0x8, 0x6) (async) ptrace$cont(0x7, r17, 0x8, 0x6) r18 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/kernel/uevent_seqnum', 0xa80, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r2) (async) r19 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r18, &(0x7f0000001f00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x50, r19, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40000) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r18, &(0x7f0000001f00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x50, r19, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 1m17.015096927s ago: executing program 2 (id=828): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x8}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'lo\x00', {0x1}, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x1000, 0x6, '9P2000'}, 0x13) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3dcc160125373da799e7e9ec50c9cb11935d39283aae72545cad69082b6c2e951e87ddc3192b966e9b620b2b1349a0224c234db23a5327", @ANYRESHEX=r3, @ANYBLOB=',k']) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 1m17.013791316s ago: executing program 2 (id=830): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010002, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0}) recvfrom$unix(r1, 0x0, 0x0, 0x40002143, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x8}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) 1m13.953295804s ago: executing program 2 (id=882): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040851}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x0) getsockname$unix(r3, &(0x7f0000000240), &(0x7f00000001c0)=0x6e) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160009000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'pim6reg1\x00'}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000340)={r5, 0x1, 0x6, @multicast}, 0x10) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000009c0)=0xc43, 0x4) sendmmsg$inet6(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ccba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e0132269c182e5d0186448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190d54bd6f6c2c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b109584", 0x239}], 0x1}}], 0x1, 0x4000001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000600)={0x2020}, 0x2020) 1m13.924588926s ago: executing program 2 (id=883): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x2, 0x0, 0x29, r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) (async) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) userfaultfd(0x80000) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) sendfile(r2, r2, 0x0, 0x80000004) 1m13.822781256s ago: executing program 2 (id=884): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x3, 0x7d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cfadcb403d1bda0168790102030109026b0001000000100904630002fc3eaa000b24060001d615817b6fb6052c0000000d240f01800000008200ff010806241a0200060724148000390007241402000600122407060000090004000700bd40010004000424020009058602ff0300000009058202"], 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) syz_usb_connect$uac1(0x4, 0xdf, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x41, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x314, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0xea, 0x0, "bd"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x81, 0x7, "c2"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa5, 0x3, 0x9, 0xf9, "b5ba381bd3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7, 0x4, "f4", "eb"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff, 0xe, 0x4, "620336449f"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x4, 0x3, "8d4f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x10, 0x3, 0x4, {0x7, 0x25, 0x1, 0x1, 0x56, 0x7e1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x6, "30c043f1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4559, 0x4, 0x5, "9921e0f773"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2b2, 0x7, 0x6, "cb218a38f41473da"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x7, 0x8, {0x7, 0x25, 0x1, 0x2, 0x4, 0x3293}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x2, 0x81, 0x20, 0x2}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x36, &(0x7f00000001c0)=@string={0x36, 0x3, "2825cfe94e1bf9ba96a49108e436d0549184bf46d914214f10095d4e2a89d5dfe293604ef028e78890837cc44a5c10d50bbcd203"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x62, &(0x7f0000000300)=@string={0x62, 0x3, "c7e1bae71b13e3be2230cf6fe8e484329684921e3a7bc0c9abf2d55e3d29b01ff5fc16261aa7e35939dc1a4a10faf8a31e5d775fedddd93440ee97a41992d2477476f686fdfe366289a53c37fcd93ba5d25da7e54c14dd1e97c4ef0602beedc2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x480a}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "e17693181688dcdc41508ec440c7bda38b2cb75febcd5143c71016a8529d5afc32e53f2a6b9dea1488e72b766915889d58279a34b0fa03a50bc9354ad0b6dcb3c1f3bae8cee0851cfdf4a2"}}]}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1800011, 0x13, r0, 0xb5ee9000) 1m13.822495527s ago: executing program 34 (id=884): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x3, 0x7d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cfadcb403d1bda0168790102030109026b0001000000100904630002fc3eaa000b24060001d615817b6fb6052c0000000d240f01800000008200ff010806241a0200060724148000390007241402000600122407060000090004000700bd40010004000424020009058602ff0300000009058202"], 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) syz_usb_connect$uac1(0x4, 0xdf, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x41, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x314, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0xea, 0x0, "bd"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x81, 0x7, "c2"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xa5, 0x3, 0x9, 0xf9, "b5ba381bd3"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7, 0x4, "f4", "eb"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xff, 0xe, 0x4, "620336449f"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x1, 0x4, 0x3, "8d4f"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x10, 0x3, 0x4, {0x7, 0x25, 0x1, 0x1, 0x56, 0x7e1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x8, 0x6, "30c043f1"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4559, 0x4, 0x5, "9921e0f773"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2b2, 0x7, 0x6, "cb218a38f41473da"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x7, 0x8, {0x7, 0x25, 0x1, 0x2, 0x4, 0x3293}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x2, 0x81, 0x20, 0x2}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x36, &(0x7f00000001c0)=@string={0x36, 0x3, "2825cfe94e1bf9ba96a49108e436d0549184bf46d914214f10095d4e2a89d5dfe293604ef028e78890837cc44a5c10d50bbcd203"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x62, &(0x7f0000000300)=@string={0x62, 0x3, "c7e1bae71b13e3be2230cf6fe8e484329684921e3a7bc0c9abf2d55e3d29b01ff5fc16261aa7e35939dc1a4a10faf8a31e5d775fedddd93440ee97a41992d2477476f686fdfe366289a53c37fcd93ba5d25da7e54c14dd1e97c4ef0602beedc2"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x480a}}, {0x4d, &(0x7f00000003c0)=@string={0x4d, 0x3, "e17693181688dcdc41508ec440c7bda38b2cb75febcd5143c71016a8529d5afc32e53f2a6b9dea1488e72b766915889d58279a34b0fa03a50bc9354ad0b6dcb3c1f3bae8cee0851cfdf4a2"}}]}) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1800011, 0x13, r0, 0xb5ee9000) 5.67611956s ago: executing program 4 (id=2679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x40000000}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r6, &(0x7f0000000000)={0x90, 0x0, r7, {0x2, 0x2, 0x1, 0x7fffffff, 0x6, 0xfffffff6, {0x2, 0x80000000, 0x7, 0x9, 0x9, 0x9, 0x3, 0x9, 0x4, 0x2000, 0x8, r8, r9, 0x7, 0xbb7}}}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r11, r11, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r15 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r16) read$FUSE(0xffffffffffffffff, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x1, 0xee00}, {0x2, 0x0, r5}, {0x2, 0x5, r8}, {0x2, 0x2, r10}, {0x2, 0x0, r11}, {0x2, 0x6, r12}], {0x4, 0x7}, [{0x8, 0x2, r13}, {0x8, 0x0, r14}, {0x8, 0x4, r16}, {0x8, 0x4, 0xee01}, {0x8, 0x56ec0c582c165d0a, r17}], {0x10, 0x2}}, 0x8c, 0x2) fadvise64(r0, 0x1fe, 0x8000000000000000, 0x3) 4.814531037s ago: executing program 4 (id=2703): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f0000000000)={0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x3, 0x1c, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x700, 0x0, 0x4}}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000c10}, 0x20004091) (async) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async, rerun: 32) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x20000, 0xf3) (rerun: 32) read$FUSE(r9, &(0x7f0000001540)={0x2020}, 0xfffffffffffffef6) (async) r10 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000000)={0x0, &(0x7f0000000240)=[@wr_drn={0x6e, 0x20, {0x6, 0x7fffffffffffffff}}], 0x20}) r12 = openat$kvm(0x0, &(0x7f0000000040), 0x1c1040, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r14, 0x0) (async) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x458, 0x138, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x30, 0xd2, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x2e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9f, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0xb5, 0x0, 0x25}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xbf, 0xc1, 0x1, 0x40, 0x6}, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x457}}, {0x0, 0x0}]}) (async) r15 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x4, 0x10000, 0x4, 0x80, 0xfffffff9, 0x4}, 0x1c) setsockopt$packet_int(r15, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x2, 0xf000, 0x1000, &(0x7f0000e82000/0x1000)=nil}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12011001000000ff6a057a0340000102030109022430000000200209040003020301000609217f00090122c409090581035d5a6df37627cd3bfc0dc2a8ff030901c1"], &(0x7f0000000940)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x300, 0x3, 0x1, 0x6, 0xff, 0x7}, 0x194, &(0x7f0000000540)={0x5, 0xf, 0x194, 0x6, [@generic={0xa2, 0x10, 0x3, "098c56db8013bf7486ba59703e2457c301213287c87884cdb7d5384549eb746725618727631f35188abda0d05bb8a8519fd75876915eb8aea9144b3207b049a5c4926624aa126b4e6b2adde5248e46c615149976d8a0345d45aec73b7a04892012a5fec7b5e3a25d8f54f3a46f6c153271fc3fd5cf3c9201ecdaf0d94d9c82093628ca36db396cd1f672a8aca1178d25e9940beed66560a12f88005cb23a9a"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fd436edf9bdd5800fcbc2419a9a3a7cf"}, @generic={0xb1, 0x10, 0xa, "d3a3694c5bd88e3be0c76e689c1960206871c88dfc73e16051b809c2737c47ab7456ce54c3123bb28590f3dad70b54ab7fe745f6b0c175efc49777efe0968ec59178268b15b20c5d44d36cecd0d7deee0fd9cd6afe3055c25c23786b89bdbcb410c934d88eec2bf90658252a0d25ef9baf8cbb936f7de392929e65f6345125d4cf9a0a7a9d1027cbf5a3be31ac3fe8544c556734832acf01c01a2d0b4f9a7eb4029a8969e8e2cd982787cfc3869e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0xff, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb5, 0xfc, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "0df17071dc22df4d63a772a8f4d15bfb"}]}, 0x8, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x443}}, {0x5c, &(0x7f00000009c0)=ANY=[@ANYBLOB="5c03808620598632de110eb430de863db743e196caeb2364abba76e77889e3368245c6d398694151049dde5539de12a529a72120fe82184a62cf4a8c036b5c0ed62f6dbdf5a648de8b6d6430dabca9092c6ef4ffc2cc82bf5e707729d1ef964bd1eeffb7b052094fe7f290c7"]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x409}}, {0xa5, &(0x7f0000000a40)=@string={0xa5, 0x3, "0255555cec871eb8016634140cec6daa10fdafd1d6124776468af7516c388ebeb210f764e2b979ebd0a63f3e05a722d4daf1c176a14522fa4dff0e33bda6c651879da2699b7b263dcd580e7a7d6aef3b3b5a8f3e8ee917565b2de0ae73fd46d6f8c0e659349395e42ab5277400e00f5583c8dd7e42eb3869b2cc539075735d10c6e13358b75016c790e12abc9c4307cb2740c0f0e31d6561b96409f8dd6a812b44a973"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x9, &(0x7f0000000900)=@string={0x9, 0x3, "75cbd03172e2c8"}}]}) 1.802744519s ago: executing program 4 (id=2784): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@tclass={{0x14, 0x29, 0x32, 0x9}}], 0x18}}], 0x1, 0x0) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000040)) 952.438854ms ago: executing program 4 (id=2815): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffffffff, 0x5, 0x6f0, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8044) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000080)={0xc0, 0x0, 0x3000}) 735.012636ms ago: executing program 5 (id=2823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x96}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000008c}, 0x8010) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x50, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410f68d9c8f59cea}, 0x800) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4084}, 0x40000) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)}}], 0xac, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) (async) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f00000004c0)) 726.624647ms ago: executing program 5 (id=2824): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4881}, 0x11) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x7fffffff}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x8800) r2 = socket$netlink(0x10, 0x3, 0x5) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40000000}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x244, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_USERDATA={0xfa, 0x6, "1e99fa8d5344e7d370c14bc5f7334f3bc81c350097817c7c144a773fc9fd1684085a58fff014035f41239b7660f755cc94237f9ebb912dd09cb2a5c21171780ab5c64bec0d82fa2f1d9aacd2fc98c3283f0e4aee8cae249c502601ec91edb0019baa9f53239154e86f4840568bd60a5e65208a21d9ab317ef7f10657e350a22050dedbf47f77d0b38141dedc5a228a2126d1175f71644698db2a47dbf70539538acbbed02c959de6ec53cadfa14c396e84a62b1f95301803dce7e642bb6b7788a6fcd3ad7c1d00a5d370ab3feaa2467630cffb5a20a38cda2ce7861d506de2291fd34c368bb80f24323b615bb4880c4d7742b230e71f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xf2, 0x6, "5bc53a126346a245c12eebc151d04b746c9aa22b3e47e5ad04b1ff6c66ac4f1e0596eb7773aa570bbb9aeeedabe47398b421c1fcfe96fec615b15c68219fd6aac7210f30db0d5d7b582748ce4eaa3fb85a16b5794bfd5315aba412921009d719414be5a77de0a3845529fe610ade9106ca750da185ae54cb94d0e214d6c295d56ab3db6450119b24df07e36c77bf0f98c474a87a82559c799216218d0d41fdae0901b545bdb7394dce40eb8a6fcaf2f4e4f468f6c45bb8eb54df83b5a8312baecde4bf2929c7fea19e60c154a070b64cbed73fb495c81c86dfbea57403f0317c9d0145677d60f36ae0e3a0be7225"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x244}, 0x1, 0x0, 0x0, 0x4010}, 0x24000104) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) copy_file_range(r3, &(0x7f0000000700)=0x5, r2, &(0x7f0000000740)=0x3ff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x40000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x4000, 0x10, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000402, r6, &(0x7f0000000a80)) r7 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000ac0), &(0x7f0000000b00)={'syz', 0x3}, 0x0, 0x0, r7) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xb8, r9, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x90, 0x111, 0x0, 0x1, {0x8c, 0x5, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x39}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40010}, 0x10) keyctl$link(0x8, r8, r8) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000dc0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x220, 0x110, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000d80), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 0x6, 0x3, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xd, 0x3, 0x4, 0x2, 0x101, 0xff, 'hsr0\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x0, 0x212}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @multicast1, @loopback, 0x4, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) recvmsg(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)=""/55, 0x37}], 0x1}, 0x3) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x2b}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d4}, 0xc44) r10 = accept4$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001400)=0x1c, 0x80800) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r10, r11, &(0x7f0000001440)=0x9, 0x5) r12 = socket$inet_udplite(0x2, 0x2, 0x88) write(r12, &(0x7f0000001480)="1d4de889b32055dcb0866494bc5e2a5b84995b7396dd1fb9a88f2ac183eb289578f8", 0x22) syz_genetlink_get_family_id$l2tp(&(0x7f00000014c0), r2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040845}, 0x20000080) 687.083921ms ago: executing program 5 (id=2826): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000040)=0x100) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/vlan/vlan0\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000540)={r3, 0x7fffffff, 0x0, [0xffffffffffffffff, 0x3, 0x4, 0x7fff, 0x9ac], [0x7ff, 0xefb3, 0x6, 0x100000000, 0x0, 0xa, 0xe, 0x0, 0x9, 0x0, 0x4, 0x1ff, 0x1, 0x8, 0xe6bc, 0x7f, 0x401, 0x7, 0x6, 0x6, 0x1, 0x4, 0x4ce, 0x1, 0x1, 0x7fffffffffffffff, 0xa, 0x3, 0x7, 0x4, 0x8c, 0x2, 0x2, 0x407, 0x5, 0x4226, 0x6, 0x4000000000000, 0x5, 0x2, 0x8000000000000000, 0x7, 0x5, 0x10, 0xbc, 0x3, 0x3b, 0x7f, 0x0, 0x8, 0x0, 0x2, 0x3, 0xfffffffffffffff4, 0x848, 0x146267f4, 0x0, 0xc6, 0xd2, 0x200, 0x3, 0xfff, 0x5, 0x2ec, 0x9420, 0x6, 0x7, 0x5, 0x4, 0x8, 0x1, 0x47f7, 0x1, 0x7, 0xb46e, 0x6, 0x3, 0xffffffff00000000, 0xfffffffffffffe00, 0x0, 0x2, 0x7, 0xb7a6, 0x9, 0x6, 0x9, 0x5, 0x1ff, 0x4, 0x2, 0xb, 0x4adbd754, 0x4, 0x4, 0x5, 0x1, 0x400000000000000, 0x4, 0x7, 0xffff, 0x10001, 0x5, 0x3, 0xa, 0x9, 0x4, 0xffff, 0x68, 0x8, 0x2, 0x8, 0x5, 0x40, 0x5, 0x400000000000000, 0x9, 0x9, 0x7, 0x6, 0xa04, 0x3c6]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/stat\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000b80)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x80042, &(0x7f0000000d00)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize}, {@allow_other}], [{@fowner_lt={'fowner<', r7}}]}}) r8 = socket$inet(0x2, 0x5, 0x400) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) getpeername$netlink(r2, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) clock_settime(0x5, &(0x7f0000000ec0)) bind$inet(r2, &(0x7f0000000f00)={0x2, 0x4e22, @broadcast}, 0x10) recvmsg$unix(r4, &(0x7f0000001440)={&(0x7f0000000f40)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000fc0)=""/19, 0x13}, {&(0x7f0000001000)=""/51, 0x33}, {&(0x7f0000001040)=""/155, 0x9b}, {&(0x7f0000001100)=""/233, 0xe9}, {&(0x7f0000001200)=""/63, 0x3f}, {&(0x7f0000001240)=""/150, 0x96}, {&(0x7f0000001300)=""/142, 0x8e}], 0x7}, 0x2) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001480), 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r9, 0x82307202, &(0x7f00000014c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) clock_settime(0x5, &(0x7f0000001700)={0x77359400}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000001780)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000001740), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @rand_addr=0x64010100, 0xf, 0xffffffff}}}, {{@arp={@remote, @rand_addr=0x64010101, 0xff000000, 0x0, 0x10, 0x2, {@mac=@random="c60e5cd0fca2", {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x7, 0x3, 0x2, 0x7f8, 0x8, 'veth0_to_team\x00', 'geneve0\x00', {}, {0x1fe}, 0x0, 0x106}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 0xf, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x4, 0x9, 0xbc9, 0x3, 0x74b5, 0x7, 'veth0_virt_wifi\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @empty, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) futex_waitv(&(0x7f0000002400)=[{0x10000, &(0x7f0000001bc0)=0x100000001, 0x2}, {0x9, &(0x7f0000001c00)=0x8, 0x82}, {0x1, &(0x7f0000001c40)=0x9, 0x82}, {0x1, &(0x7f0000001c80)=0x4, 0x82}, {0x5, &(0x7f0000001cc0)=0xfe, 0x82}, {0x8, &(0x7f0000001d00), 0x82}, {0x10001, &(0x7f0000001d40)=0x1ff, 0x82}, {0x4, &(0x7f0000001d80)=0x7, 0x2}, {0x450, &(0x7f0000001dc0)=0x2, 0x82}, {0x8000000000000001, &(0x7f0000001e00)=0x1800000000000, 0x2}, {0x4, &(0x7f0000001e40), 0x82}, {0x0, &(0x7f0000001e80)=0x100000001, 0x2}, {0xffffffff, &(0x7f0000001ec0)=0x1, 0x2}, {0x1b8a, &(0x7f0000001f00)=0x70ed3984, 0x2}, {0x8f2, &(0x7f0000001f40)=0xf7a, 0x2}, {0x8, &(0x7f0000001f80)=0xda6, 0x82}, {0x42, &(0x7f0000001fc0)=0x7, 0x82}, {0x2, &(0x7f0000002000)=0x4, 0x82}, {0x6, &(0x7f0000002040)=0x6, 0x2}, {0x936f, &(0x7f0000002080)=0xb9c7, 0x2}, {0x1, &(0x7f00000020c0)=0x1, 0x2}, {0x4, &(0x7f0000002100)=0x6, 0x2}, {0x34f0, &(0x7f0000002140)=0x8, 0x2}, {0x4, &(0x7f0000002180)=0x6, 0x2}, {0x0, &(0x7f00000021c0)=0x20000000000000, 0x82}, {0x0, &(0x7f0000002200)=0x1, 0x2}, {0x3, &(0x7f0000002240), 0x82}, {0x26, &(0x7f0000002280), 0x80}, {0x4, &(0x7f00000022c0)=0x1, 0x82}, {0x100000000, &(0x7f0000002300)=0x2460, 0x2}, {0xc, &(0x7f0000002340)=0x4, 0x82}, {0x6, &(0x7f0000002380)=0x4, 0x2}, {0xffffffffffffffff, &(0x7f00000023c0)=0xd39, 0x2}], 0x21, 0x0, &(0x7f0000002740)={0x0, 0x989680}, 0x0) sendmsg$AUDIT_SET(r2, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x3c, 0x3e9, 0x300, 0x70bd2a, 0x25dfdbfb, {0x12, 0x1, 0x0, r1, 0xfff, 0x7, 0xfffffffa, 0x2, 0x0, 0x8, 0x9bb}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x1) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000028c0)={0x8, &(0x7f0000002880)=[{0x8, 0x7, 0x4, 0x6}, {0x40, 0x8, 0x2, 0x5}, {0x96d, 0x9, 0xf0, 0x7}, {0x3ff, 0x2, 0x8, 0x6}, {0x4, 0x8, 0x91, 0xdbd}, {0x1, 0x1, 0x0, 0x6}, {0x0, 0x0, 0xc6, 0x4cea}, {0x3, 0x7d, 0x3, 0x8}]}) syz_open_procfs$namespace(r1, &(0x7f0000002900)='ns/pid_for_children\x00') 641.625445ms ago: executing program 5 (id=2830): r0 = socket(0x1e, 0x1, 0x0) recvfrom$packet(r0, &(0x7f0000000280)=""/130, 0x82, 0x2002, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4508) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 640.639646ms ago: executing program 5 (id=2832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) brk(0x200000ffd000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x11, 0x0, 0x401, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @binary="748cf8e8"}]}]}, 0x28}}, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001300)=0x7fff, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000200)) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7ff, {0x40}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x34}, 0xff, 0x0, 0x7, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0x0, 0x8000, 0x400, 0x1, 0x3, 'veth0_to_batadv\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x222}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010102, @remote, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x1000}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x8080000, 0x6000}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) (async) brk(0x200000ffd000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, 0x11, 0x0, 0x401, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @binary="748cf8e8"}]}]}, 0x28}}, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001300)=0x7fff, 0x4) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x4, 0x2, 0x32}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000200)) (async) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x1f0, 0x0, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7ff, {0x40}}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x34}, 0xff, 0x0, 0x7, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4, 0x0, 0x8000, 0x400, 0x1, 0x3, 'veth0_to_batadv\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x222}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @private=0xa010102, @remote, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x1000}) (async) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000080)={0x8080000, 0x6000}) (async) 638.655936ms ago: executing program 5 (id=2834): r0 = timerfd_create(0x8, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000100)={0x100, 0x20}) 578.092922ms ago: executing program 3 (id=2836): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x1000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) (async, rerun: 32) setregid(0xffffffffffffffff, r2) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) (rerun: 64) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0x2000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000140)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @fda={0x66646185, 0x3, 0x1, 0x4}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0xc4, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x83}, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x0, 0x0, &(0x7f00000008c0)}) syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000550001f3ff0000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) madvise(&(0x7f00001b4000/0x4000)=nil, 0x4000, 0x4) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x1000000201005) (async, rerun: 64) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r8, 0x0, 0x7fffefff) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$khugepaged_scan(r9, &(0x7f0000000000), 0x8) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x2710}, 0xb, 0xfff8, 0x4}], 0x18) 577.324992ms ago: executing program 3 (id=2837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r1 = syz_open_dev$loop(0x0, 0x2, 0x2001) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_clone(0x26000, 0x0, 0x1e, 0x0, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) (async) syz_open_procfs(r3, &(0x7f0000000900)='environ\x00') (async) close_range(r0, 0xffffffffffffffff, 0x0) 576.810342ms ago: executing program 3 (id=2838): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088800}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x403, 0x0) syz_clone(0x218000, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)="c006cb4400a6acc2362220831fb782b1d207e03f5c628229c2e1c32e97d9f7b7d923f51e72df6ddf147900") r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r3}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1281, 0x3}) 568.324263ms ago: executing program 3 (id=2839): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'team_slave_0\x00', {0x2, 0x4e21, @empty}}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1101, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) 550.460915ms ago: executing program 3 (id=2840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078002e4fccfc00000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$setlease(r6, 0x400, 0x3) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlink(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c3"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r8, 0x4018480c, &(0x7f00000001c0)={0x3, 0xfffffeff, 0xf, 0x5, 0x80000000, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) close_range(r2, r4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x48080) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 260.763134ms ago: executing program 6 (id=2856): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 214.876838ms ago: executing program 6 (id=2857): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 211.814169ms ago: executing program 6 (id=2858): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) (async) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x18, 0x1, 0x2, {r2, r3, r4}}}], 0x18, 0x40804}}], 0x1, 0x14008004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) readahead(r5, 0xe9, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x44, r8, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ba2fc1041a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1656a9bbf8b3b32a228140f245"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8f5cf48e28"}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8810) (async) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ba2fc1041a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1656a9bbf8b3b32a228140f245"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8f5cf48e28"}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8810) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) pipe2$9p(&(0x7f0000000340), 0x4800) (async) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RSTATu(r11, &(0x7f0000000380)={0x5b, 0x7d, 0x2, {{0x0, 0x40, 0x0, 0x4, {0x1, 0x4, 0x1}, 0xc3210000, 0x5c6c, 0x5, 0x7632, 0x6, '\x01\x01\x01\x01\x01\x01', 0x0, '', 0x6, 'PPPPPP', 0x1, ','}, 0x6, '\x01\x01\x01\x01\x01\x01', r3, r4, r3}}, 0x5b) (async) write$P9_RSTATu(r11, &(0x7f0000000380)={0x5b, 0x7d, 0x2, {{0x0, 0x40, 0x0, 0x4, {0x1, 0x4, 0x1}, 0xc3210000, 0x5c6c, 0x5, 0x7632, 0x6, '\x01\x01\x01\x01\x01\x01', 0x0, '', 0x6, 'PPPPPP', 0x1, ','}, 0x6, '\x01\x01\x01\x01\x01\x01', r3, r4, r3}}, 0x5b) readv(r10, &(0x7f0000000d80)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0xa, 0x13, r0, 0x5f454000) 208.775579ms ago: executing program 6 (id=2859): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000000)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r2, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',debug=C']) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000680)=0x6, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x12, r3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ef8000/0x4000)=nil, 0x4000, 0x5, 0x40010, r3, 0x0) read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000002200)={0x20, 0x0, r8, {0x0, 0x4, 0xf}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00004ec000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000002240)={0x0, 0x441fa, 0x20, 0x1, 0x12, 0x0, r0}, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) r9 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r9, 0x10e, 0x3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x81007702, 0x2) 207.533659ms ago: executing program 6 (id=2860): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getrandom(&(0x7f0000000180)=""/290, 0xfffffeca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000002500)=@ethtool_regs={0x7}}) shutdown(0xffffffffffffffff, 0x9586730c31f01255) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x200}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) lsm_get_self_attr(0x8868edce2fed839c, 0x0, &(0x7f0000003540), 0x0) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r1, 0x1e25b000) 128.446787ms ago: executing program 6 (id=2861): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$P9_RVERSION(r2, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x7fffffff, 0x6, '9P2000'}, 0x13) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, 'igp\xfe\xcb:qv5\x91\x02\xa8\xa9!'}}, {@noxattr}, {@version_L}], [], 0x6b}}) (async) r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x1d, [{{0x9, 0x4, 0x0, 0xf7, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffed, 0x2a, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0xfd, 0xd}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000000)={0x18, &(0x7f0000000300)={0x40, 0xd, 0x7, {0x7, 0x21, "940977459b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r6 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3800008) (async) sendfile(r6, r5, 0x0, 0xffffffff) 82.535251ms ago: executing program 4 (id=2863): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0xfffffffffffffffe) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.88932ms ago: executing program 4 (id=2864): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xae, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xc}}}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x0, 0x4f, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x8f, 0x83, 0xf7}}]}}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x7, 0x7, 0xff, 0x2}, 0x82, &(0x7f0000000100)={0x5, 0xf, 0x82, 0x1, [@generic={0x7d, 0x10, 0x4, "1465aa1effdb26d7ea0e015d04f8d1631d079e4937e291510830c3a047327dd25198c56a4c4cc8fc781ee86ee9ec1a97b825968a8cf938d1fbc64ea293145de903ded1eb972120d23805104a9f36cbc5550f7228c0c93f02af836222d841e2fcd570b2f829d05a7e8ec9a7492bf2e10fd7eeac9db5843089860c"}]}, 0x4, [{0x8c, &(0x7f00000001c0)=@string={0x8c, 0x3, "453e8921a872e5b2784ce15eaedd16855aea7d7ab88585821e2af8784ff47360fe65d4d4b0a252c2ecfd7fcc0487f36ca4ee1075b055f145d26d0a1660f4faa706546de8bf118ef175458d229ae4a6ff1f7cb85c22decf6bc8fe13b8a530c71bbc8c27b2309b0d56be2b1cb954b302c094df3fa05e0e65277f7cc7050d2e17f7ea492d566c19c0175fd5"}}, {0x7b, &(0x7f0000000280)=@string={0x7b, 0x3, "7e8afd58aa38300571a55477628e152b572e2aba3d93b6760de06b36852e2ed60dd78723bffd6592d9be683337887aa8109f883b5ff816b731bfc210ac6ea1fc2237eb6a4aa3933400e96fe0d33879b0aff9e6b20ffc08a3c1de171d2797397e0a875a96f5767f97ef9c1185ca2c2073e06cf70d91d33a1d52"}}, {0xd9, &(0x7f00000023c0)=@string={0xd9, 0x3, "2fc3404ff45d2fe0b5546f57c4b1ada08869e399578e333ae712376600e8f608e1e3650b1380ac6a7c6bc3d72f4ddd609a67da0bb0e33a234ad966c1796557c2a9ceead85ca18b31da076a807701232e95924c651502151bf2a40a95f0a9389803a5a7b0764eee040e4da1ecd9749a0d82b0b30acec7b8b15b527b3ccf11c784d9d9a82ee64f5d911305f459fdf96fcd93a200f551366743a49f27b11416671159077399c44ddc3fa11f97194bb3cdbdc726c5d5192060260ea9926c3ca8d4dc8430a075d7057d96c32bf9a0a48b0c1dff681187e10a69"}}, {0xc6, &(0x7f00000024c0)=@string={0xc6, 0x3, "ebcde4cb09ddcdb7972fe9f28d59acf2a2b76559140bd0a24dc4e3423e7b0f0e857f6fb747b72c0502829a8a0b0c181969eb6b35c719c71e20e0f45101888c74670f50e46c4dbef20c804ffc79eac2bbc923c137eaddb9d6be0caa7cc4faf98c7e7879d041a93fc9b84d98bf54d35f723bbb3f73dbfe1429627d49fd168c80b762d6b001441bed36e28fbb9aa174c3358d68f82d0c64a30d854bff9057d13a9f6ba5792101ef54a11b43770ea2a125e847e671bb7e80dffc9cce0e6e1f047b39e61f9454"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0x7, 0x0, &(0x7f0000000000)) 0s ago: executing program 3 (id=2865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0xc011) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, r1, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0xc011) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd9}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x44e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x260}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf02}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6e1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc0800}, 0x20000000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x88408}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008054) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x88408}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008054) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r7, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffff7, 0xe}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4045}, 0x4000804) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r8, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, r1, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000980), r6) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x30}}, 0x8d0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r8, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x30}}, 0x8d0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r8, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xffffff7f}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x96}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x14}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x3d}}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3ff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, r11, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x1c, 0x18, {0x4, @bearer=@l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x841}, 0xa000) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xe0, r7, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_SSID={0x19, 0x34, @random="64e018406bdfb34de977674ee2d36fe7bcea9d4add"}, @key_params, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x804}, 0x40) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x28, &(0x7f0000001000)="e0007e3808e319b951d3742dba7965b12948d5ebb35d543016648e94014da462385bfbddff916743") (async) syz_usb_ep_write(0xffffffffffffffff, 0x8, 0x28, &(0x7f0000001000)="e0007e3808e319b951d3742dba7965b12948d5ebb35d543016648e94014da462385bfbddff916743") sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000001140)={0x4, 0x2, 0xd0, 0xb8e2d5af}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000001140)={0x4, 0x2, 0xd0, 0xb8e2d5af}, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x90, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20010010) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r12, &(0x7f0000001440)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r12, &(0x7f0000001440)={&(0x7f0000001300), 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) kernel console output (not intermixed with test programs): 9][ T10] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 50.316894][ T10] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 50.327318][ T10] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.340751][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.352468][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.363563][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 50.376393][ T10] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 50.385759][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.394026][ T10] usb 5-1: Product: syz [ 50.398285][ T10] usb 5-1: Manufacturer: syz [ 50.403201][ T10] usb 5-1: SerialNumber: syz [ 50.408645][ T10] usb 5-1: config 0 descriptor?? [ 50.415926][ T1676] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 50.516473][ T1682] rust_binder: Write failure EFAULT in pid:204 [ 50.679021][ T423] usb 5-1: USB disconnect, device number 7 [ 50.872348][ T1696] GUP no longer grows the stack in syz.0.459 (1696): 200000004000-200000005000 (200000002000) [ 50.882718][ T1696] CPU: 1 UID: 0 PID: 1696 Comm: syz.0.459 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 50.882752][ T1696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.882774][ T1696] Call Trace: [ 50.882780][ T1696] [ 50.882790][ T1696] __dump_stack+0x21/0x30 [ 50.882820][ T1696] dump_stack_lvl+0x10c/0x190 [ 50.882837][ T1696] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.882851][ T1696] ? find_vma+0xcd/0x110 [ 50.882862][ T1696] ? unwind_get_return_address+0x51/0x90 [ 50.882875][ T1696] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 50.882891][ T1696] dump_stack+0x19/0x20 [ 50.882904][ T1696] __get_user_pages+0x1e34/0x22d0 [ 50.882918][ T1696] ? __kasan_check_write+0x18/0x20 [ 50.882936][ T1696] ? down_read_killable+0x79/0xf0 [ 50.882948][ T1696] ? populate_vma_page_range+0x230/0x230 [ 50.882961][ T1696] __gup_longterm_locked+0xcb1/0x1580 [ 50.882973][ T1696] ? __cfi___update_load_avg_cfs_rq+0x1/0x10 [ 50.882988][ T1696] ? __pte_offset_map+0x1b0/0x230 [ 50.883002][ T1696] gup_fast_fallback+0x12ae/0x14a0 [ 50.883018][ T1696] ? get_user_pages_fast_only+0xc0/0xc0 [ 50.883030][ T1696] ? ___sys_sendmsg+0x220/0x2a0 [ 50.883045][ T1696] ? x64_sys_call+0x2a4c/0x2ee0 [ 50.883058][ T1696] ? do_syscall_64+0x58/0xf0 [ 50.883070][ T1696] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.883082][ T1696] ? kvm_sched_clock_read+0x15/0x30 [ 50.883092][ T1696] pin_user_pages_fast+0xa4/0xf0 [ 50.883104][ T1696] iov_iter_extract_pages+0x3c9/0x6d0 [ 50.883119][ T1696] bio_iov_iter_get_pages+0x476/0x1430 [ 50.883133][ T1696] ? bio_associate_blkg_from_css+0x958/0xb10 [ 50.883146][ T1696] ? __cfi_bio_iov_iter_get_pages+0x10/0x10 [ 50.883159][ T1696] ? bio_init+0x142/0x2a0 [ 50.883171][ T1696] blkdev_direct_IO+0xcbb/0x1350 [ 50.883184][ T1696] ? blkdev_get_block+0xe0/0xe0 [ 50.883197][ T1696] ? schedule+0xc6/0x240 [ 50.883210][ T1696] ? futex_unqueue+0x136/0x160 [ 50.883221][ T1696] blkdev_read_iter+0x24c/0x450 [ 50.883233][ T1696] do_iter_readv_writev+0x628/0x810 [ 50.883245][ T1696] ? vfs_iter_read+0x5f0/0x5f0 [ 50.883255][ T1696] ? bpf_lsm_file_permission+0xd/0x20 [ 50.883269][ T1696] vfs_readv+0x2fb/0xa50 [ 50.883280][ T1696] ? do_readv+0x2d0/0x2d0 [ 50.883293][ T1696] do_readv+0x14d/0x2d0 [ 50.883303][ T1696] ? generic_atomic_write_valid+0x1c0/0x1c0 [ 50.883315][ T1696] ? __kasan_check_write+0x18/0x20 [ 50.883329][ T1696] ? fpregs_restore_userregs+0x11d/0x260 [ 50.883341][ T1696] __x64_sys_readv+0x81/0x90 [ 50.883351][ T1696] x64_sys_call+0x2a64/0x2ee0 [ 50.883364][ T1696] do_syscall_64+0x58/0xf0 [ 50.883376][ T1696] ? clear_bhb_loop+0x50/0xa0 [ 50.883387][ T1696] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.883397][ T1696] RIP: 0033:0x7fe62f18f6c9 [ 50.883412][ T1696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.883422][ T1696] RSP: 002b:00007fe630077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 50.883440][ T1696] RAX: ffffffffffffffda RBX: 00007fe62f3e6090 RCX: 00007fe62f18f6c9 [ 50.883448][ T1696] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 50.883456][ T1696] RBP: 00007fe62f211f91 R08: 0000000000000000 R09: 0000000000000000 [ 50.883463][ T1696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.883470][ T1696] R13: 00007fe62f3e6128 R14: 00007fe62f3e6090 R15: 00007ffd10376668 [ 50.883480][ T1696] [ 50.885696][ T1695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 51.251283][ T1700] VFS: Mount too revealing [ 51.409805][ T1711] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 51.427180][ T1711] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 51.449233][ T1711] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 51.551361][ T392] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 51.778954][ T1705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.802090][ T1705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.943041][ T392] usb 3-1: unable to get BOS descriptor or descriptor too short [ 51.960132][ T392] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 51.976920][ T392] usb 3-1: can't read configurations, error -71 [ 52.016851][ T1734] rust_binder: Write failure EINVAL in pid:224 [ 52.064998][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 52.065015][ T36] audit: type=1400 audit(1762966383.565:936): avc: denied { read } for pid=1739 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 52.097081][ T36] audit: type=1400 audit(1762966383.565:937): avc: denied { create } for pid=1739 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 52.509494][ T1761] netlink: 6508 bytes leftover after parsing attributes in process `syz.4.484'. [ 52.658769][ T1768] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.658896][ T1768] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 52.718747][ T1770] incfs: Error accessing: ./file0. [ 52.765491][ T1770] incfs: mount failed -20 [ 52.770234][ T1771] netlink: 328 bytes leftover after parsing attributes in process `syz.0.487'. [ 52.814814][ T1770] fuse: Bad value for 'group_id' [ 52.825362][ T1770] fuse: Bad value for 'group_id' [ 52.839209][ T36] audit: type=1400 audit(1762966384.335:938): avc: denied { ioctl } for pid=1769 comm="syz.0.487" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 52.935655][ T1778] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 52.960563][ T1778] rust_binder: Write failure EINVAL in pid:344 [ 53.026284][ T1793] /dev/rnullb0: Can't open blockdev [ 53.037949][ T36] audit: type=1400 audit(1762966384.525:939): avc: denied { connect } for pid=1791 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.061605][ T36] audit: type=1400 audit(1762966384.565:940): avc: denied { listen } for pid=1794 comm="syz.0.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.102769][ T36] audit: type=1400 audit(1762966384.595:941): avc: denied { create } for pid=1800 comm="syz.4.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 53.330878][ T1806] syz.2.498 (1806): attempted to duplicate a private mapping with mremap. This is not supported. [ 53.341671][ T462] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 53.385681][ T1814] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 53.385700][ T1814] rust_binder: Error while translating object. [ 53.394463][ T1814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.400683][ T1814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 53.420713][ T1816] netlink: 'syz.2.501': attribute type 11 has an invalid length. [ 53.437719][ T1816] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 53.445482][ T1816] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.501'. [ 53.455146][ T1816] binder: Unknown parameter 'fscontext?}' [ 53.487173][ T1821] netlink: 'syz.2.503': attribute type 11 has an invalid length. [ 53.491112][ T1820] netlink: 'syz.2.503': attribute type 11 has an invalid length. [ 53.504397][ T462] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 53.514687][ T462] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 53.528700][ T462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.540238][ T462] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 53.618257][ T1824] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.618789][ T36] audit: type=1400 audit(1762966385.115:942): avc: denied { map } for pid=1823 comm="syz.0.504" path="socket:[11442]" dev="sockfs" ino=11442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 53.765119][ T1801] rust_binder: 188: no such ref 0 [ 53.846800][ T462] usb 5-1: USB disconnect, device number 8 [ 54.050929][ T1828] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.058065][ T1828] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.065295][ T1828] bridge_slave_0: entered allmulticast mode [ 54.071846][ T1828] bridge_slave_0: entered promiscuous mode [ 54.078562][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.087504][ T1828] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.094710][ T1828] bridge_slave_1: entered allmulticast mode [ 54.101053][ T1828] bridge_slave_1: entered promiscuous mode [ 54.175206][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.182341][ T1828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.189636][ T1828] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.196715][ T1828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.220220][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.227768][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.238998][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.246117][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.259935][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.267063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.303854][ T1828] veth0_vlan: entered promiscuous mode [ 54.318042][ T1828] veth1_macvtap: entered promiscuous mode [ 54.389531][ T1843] netlink: 'syz.4.510': attribute type 15 has an invalid length. [ 54.399092][ T1843] netlink: 'syz.4.510': attribute type 15 has an invalid length. [ 54.407111][ T1843] netlink: 'syz.4.510': attribute type 15 has an invalid length. [ 54.590367][ T36] audit: type=1400 audit(1762966386.085:943): avc: denied { mount } for pid=1862 comm="syz.5.516" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 54.590517][ T1865] SELinux: security_context_str_to_sid () failed with errno=-22 [ 54.681765][ T1867] rust_binder: Write failure EINVAL in pid:264 [ 54.829851][ T1884] SELinux: Context ϧ®-·)ç:EØ2¡Ù­ìؾò)Ä‘Ju36·ÒÆÞ¢{à@˜mý[ is not valid (left unmapped). [ 54.847266][ T36] audit: type=1400 audit(1762966386.345:944): avc: denied { lock } for pid=1883 comm="syz.2.522" path="socket:[12743]" dev="sockfs" ino=12743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 55.031681][ T36] audit: type=1400 audit(1762966386.535:945): avc: denied { getopt } for pid=1889 comm="syz.2.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.169826][ T1893] binder: Bad value for 'max' [ 55.228199][ T1896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 55.671447][ T462] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.781426][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.831391][ T462] usb 6-1: Using ep0 maxpacket: 16 [ 55.837564][ T462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.848636][ T462] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.858482][ T462] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 55.867695][ T462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.876428][ T462] usb 6-1: config 0 descriptor?? [ 55.941353][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 55.948182][ T31] usb 5-1: config 7 has an invalid interface number: 199 but max is 0 [ 55.956508][ T31] usb 5-1: config 7 has no interface number 0 [ 55.963938][ T31] usb 5-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5a.a6 [ 55.973065][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.981088][ T31] usb 5-1: Product: syz [ 55.985900][ T31] usb 5-1: Manufacturer: syz [ 55.990515][ T31] usb 5-1: SerialNumber: syz [ 56.202323][ T1928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.263902][ T31] ums-cypress 5-1:7.199: USB Mass Storage device detected [ 56.285865][ T462] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 56.292794][ T462] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 56.299692][ T462] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 56.308063][ T462] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 56.316440][ T31] usb 5-1: USB disconnect, device number 9 [ 56.322393][ T462] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 56.333538][ T462] savu 0003:1E7D:2D5A.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 56.370358][ T1938] sock: sock_timestamping_bind_phc: sock not bind to device [ 56.487292][ T31] usb 6-1: USB disconnect, device number 2 [ 56.694724][ T1949] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=1949 comm=syz.2.544 [ 56.782512][ T1962] exFAT-fs (rnullb0): invalid boot record signature [ 56.789216][ T1962] exFAT-fs (rnullb0): failed to read boot sector [ 56.796473][ T1962] exFAT-fs (rnullb0): failed to recognize exfat type [ 56.879145][ T31] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 56.897508][ T31] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.059877][ T1982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=1982 comm=syz.5.554 [ 57.213666][ T1969] netlink: 'syz.2.550': attribute type 16 has an invalid length. [ 57.235606][ T1969] netlink: 'syz.2.550': attribute type 3 has an invalid length. [ 57.243702][ T1969] netlink: 22062 bytes leftover after parsing attributes in process `syz.2.550'. [ 57.273315][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 57.273332][ T36] audit: type=1400 audit(1762966388.775:951): avc: denied { nlmsg_write } for pid=1966 comm="syz.2.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 57.666657][ T1999] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.701899][ T2001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 57.708433][ T2001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 57.785904][ T2003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 57.922708][ T36] audit: type=1326 audit(1762966389.425:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2030 comm="syz.5.571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x0 [ 58.028082][ T2036] TCP: TCP_TX_DELAY enabled [ 58.033774][ T2036] exFAT-fs (rnullb0): invalid boot record signature [ 58.040506][ T2036] exFAT-fs (rnullb0): failed to read boot sector [ 58.047198][ T2036] exFAT-fs (rnullb0): failed to recognize exfat type [ 58.117092][ T2037] rust_binder: 236: no such ref 1 [ 58.122238][ T2037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:236 [ 58.462421][ T2050] netlink: 'syz.3.578': attribute type 4 has an invalid length. [ 58.480416][ T2049] netlink: 'syz.3.578': attribute type 4 has an invalid length. [ 58.585774][ T36] audit: type=1400 audit(1762966390.085:953): avc: denied { search } for pid=2060 comm="syz.3.583" name="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 58.624328][ T2067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.584'. [ 58.935342][ T36] audit: type=1400 audit(1762966390.435:954): avc: denied { create } for pid=2074 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.971973][ T2079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239 [ 59.001924][ T2088] rust_binder: inc_ref_done called when no active inc_refs [ 59.018085][ T2088] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 59.037424][ T2088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:36 [ 59.053072][ T2095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.592'. [ 59.073701][ T2095] netlink: 31 bytes leftover after parsing attributes in process `syz.4.592'. [ 59.074726][ T2097] netlink: 'syz.5.594': attribute type 4 has an invalid length. [ 59.082776][ T2095] netlink: 'syz.4.592': attribute type 3 has an invalid length. [ 59.099644][ T2095] netlink: 'syz.4.592': attribute type 2 has an invalid length. [ 59.107401][ T2095] netlink: 31 bytes leftover after parsing attributes in process `syz.4.592'. [ 59.123071][ T2099] fuseblk: Bad value for 'group_id' [ 59.128311][ T2099] fuseblk: Bad value for 'group_id' [ 59.134655][ T2097] netlink: 'syz.5.594': attribute type 4 has an invalid length. [ 59.299661][ T2109] rust_binder: Write failure EFAULT in pid:339 [ 59.315310][ T2120] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 59.407772][ T36] audit: type=1400 audit(1762966390.905:955): avc: denied { write } for pid=2126 comm="syz.5.603" name="usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.441399][ T2131] __vm_enough_memory: pid: 2131, comm: syz.5.603, bytes: 18014402804453376 not enough memory for the allocation [ 59.536206][ T36] audit: type=1400 audit(1762966390.905:956): avc: denied { open } for pid=2126 comm="syz.5.603" path="/dev/usbmon7" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.556533][ T2144] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 59.559875][ T36] audit: type=1400 audit(1762966390.905:957): avc: denied { ioctl } for pid=2126 comm="syz.5.603" path="/dev/usbmon7" dev="devtmpfs" ino=111 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.572150][ T2144] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:49 [ 59.594832][ T36] audit: type=1400 audit(1762966391.045:958): avc: denied { mounton } for pid=2139 comm="syz.2.605" path="/proc/349/task" dev="proc" ino=13419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 59.729412][ T2154] rust_binder: inc_ref_done called when no active inc_refs [ 59.749857][ T36] audit: type=1400 audit(1762966391.245:959): avc: denied { append } for pid=2139 comm="syz.2.605" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.138755][ T36] audit: type=1400 audit(1762966391.635:960): avc: denied { read } for pid=2175 comm="syz.4.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.315533][ T2180] veth1: entered allmulticast mode [ 60.321202][ T2179] veth1: left allmulticast mode [ 60.336081][ T2183] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 60.336568][ T2184] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.514114][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.520827][ T2194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 60.527339][ T2194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:58 [ 60.537563][ T2194] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.553657][ T2196] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 60.564009][ T2198] 9pnet_fd: Insufficient options for proto=fd [ 60.577191][ T2198] SELinux: policydb version 808464401 does not match my version range 15-33 [ 60.586531][ T2203] rust_binder: Read failure Err(EAGAIN) in pid:65 [ 60.586825][ T2198] SELinux: failed to load policy [ 60.677887][ T2213] netlink: 72 bytes leftover after parsing attributes in process `syz.4.631'. [ 61.413841][ T2238] rust_binder: Error while translating object. [ 61.413866][ T2238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 61.420142][ T2238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:372 [ 61.470257][ T2248] __vm_enough_memory: pid: 2248, comm: syz.5.642, bytes: 18014402804453376 not enough memory for the allocation [ 61.555751][ T2253] rust_binder: Error while translating object. [ 61.555778][ T2253] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 61.562104][ T2253] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:381 [ 61.615749][ T2268] 9pnet: Could not find request transport: f]+˜O^]pççÝdÖrfdno=0x0000000000000003 [ 61.891388][ T462] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 62.042409][ T462] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.052603][ T462] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.066891][ T462] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 62.075969][ T462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.083972][ T462] usb 3-1: Product: syz [ 62.088133][ T462] usb 3-1: Manufacturer: syz [ 62.092740][ T462] usb 3-1: SerialNumber: syz [ 62.097890][ T462] usb 3-1: config 0 descriptor?? [ 62.103827][ T462] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 62.349081][ T2298] netlink: 32 bytes leftover after parsing attributes in process `syz.5.658'. [ 62.367398][ T462] usb 3-1: USB disconnect, device number 15 [ 62.553284][ T2310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 62.701387][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.851359][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 62.857513][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 62.864275][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 62.873587][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.884857][ T10] usb 6-1: config 0 descriptor?? [ 63.080874][ T2321] __vm_enough_memory: pid: 2321, comm: syz.4.668, bytes: 21200491888640 not enough memory for the allocation [ 63.103331][ T2325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35190 sclass=netlink_route_socket pid=2325 comm=syz.4.669 [ 63.141383][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 63.300687][ T10] uclogic 0003:28BD:0042.000A: interface is invalid, ignoring [ 63.310259][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 63.318595][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 63.328910][ T9] usb 3-1: config 220 has no interface number 2 [ 63.335245][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 63.348449][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 63.355336][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 63.362210][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 63.370321][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 63.379412][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.387423][ T9] usb 3-1: Product: syz [ 63.391601][ T9] usb 3-1: Manufacturer: syz [ 63.396194][ T9] usb 3-1: SerialNumber: syz [ 63.486907][ T2350] netlink: 'syz.3.679': attribute type 4 has an invalid length. [ 63.492896][ T2304] rust_binder: Error while translating object. [ 63.494649][ T2304] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 63.500859][ T2304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:87 [ 63.501023][ T2350] netlink: 'syz.3.679': attribute type 4 has an invalid length. [ 63.511290][ T423] usb 6-1: USB disconnect, device number 3 [ 63.606459][ T9] usb 3-1: selecting invalid altsetting 0 [ 63.612362][ T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 63.618747][ T9] usb 3-1: No valid video chain found. [ 63.627589][ T9] usb 3-1: USB disconnect, device number 16 [ 64.046673][ T2359] netlink: 'syz.3.682': attribute type 12 has an invalid length. [ 64.180850][ T2378] pim6reg1: entered promiscuous mode [ 64.186293][ T2378] pim6reg1: entered allmulticast mode [ 64.317650][ T2388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2388 comm=syz.2.690 [ 64.414698][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 64.414714][ T36] audit: type=1400 audit(1762966395.915:966): avc: denied { mount } for pid=2395 comm="syz.5.692" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 64.497280][ T2400] binder: Unknown parameter 'defcontextÀ' [ 64.563249][ T36] audit: type=1400 audit(1762966396.065:967): avc: denied { map } for pid=2416 comm="syz.3.698" path="pipe:[1621]" dev="pipefs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.585733][ T36] audit: type=1400 audit(1762966396.075:968): avc: denied { create } for pid=2416 comm="syz.3.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 64.616611][ T2419] loop7: detected capacity change from 0 to 7 [ 64.623690][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.632887][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.640879][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.650023][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.657882][ T2419] loop7: unable to read partition table [ 64.664386][ T2419] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 64.665342][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.687061][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.695288][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.704456][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.712697][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.721842][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.729871][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.739058][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.747184][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 64.756405][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 64.950935][ T2435] rust_binder: Write failure EINVAL in pid:130 [ 64.963947][ T462] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 64.981859][ T36] audit: type=1400 audit(1762966396.485:969): avc: denied { getopt } for pid=2436 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 65.119647][ T36] audit: type=1326 audit(1762966396.615:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.144065][ T2443] netlink: 'syz.3.706': attribute type 63 has an invalid length. [ 65.150784][ T36] audit: type=1326 audit(1762966396.615:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.155175][ T2443] netlink: 5 bytes leftover after parsing attributes in process `syz.3.706'. [ 65.184039][ T36] audit: type=1326 audit(1762966396.645:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.184771][ T2443] gretap0: entered allmulticast mode [ 65.213064][ T462] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 65.213188][ T36] audit: type=1326 audit(1762966396.645:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.222363][ T462] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.245424][ T36] audit: type=1326 audit(1762966396.645:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.253874][ T2443] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.277164][ T36] audit: type=1326 audit(1762966396.645:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2442 comm="syz.3.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f65c8f8f6c9 code=0x7ffc0000 [ 65.294138][ T462] usb 3-1: config 0 descriptor?? [ 65.362834][ T2451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 65.379921][ T2453] fuse: Bad value for 'fd' [ 65.727136][ T462] sony 0003:12BA:0100.000B: hidraw0: USB HID v6d.00 Device [HID 12ba:0100] on usb-dummy_hcd.2-1/input0 [ 65.738410][ T462] sony 0003:12BA:0100.000B: failed to claim input [ 65.941555][ T2415] kvm: kvm [2414]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x23303027 [ 65.994780][ T423] usb 3-1: USB disconnect, device number 17 [ 66.020226][ T2490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.020747][ T2489] rust_binder: Error while translating object. [ 66.027283][ T2489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 66.033520][ T2489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:142 [ 66.059996][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.075803][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.082456][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.088854][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.095360][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.101778][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.108200][ T2494] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.521425][ T2504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2504 comm=syz.2.723 [ 66.911376][ T462] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 67.041367][ T462] usb 3-1: device descriptor read/64, error -71 [ 67.281386][ T462] usb 3-1: device descriptor read/64, error -71 [ 67.436203][ T2544] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.477328][ T2611] x_tables: duplicate underflow at hook 1 [ 67.509066][ T2618] netlink: 'syz.3.744': attribute type 29 has an invalid length. [ 67.516965][ T2618] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.744'. [ 67.526221][ T462] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 67.661395][ T462] usb 3-1: device descriptor read/64, error -71 [ 67.778831][ T2645] fuse: Unknown parameter '' [ 67.914005][ T462] usb 3-1: device descriptor read/64, error -71 [ 67.983031][ T2658] No source specified [ 68.021489][ T462] usb usb3-port1: attempt power cycle [ 68.048725][ T2659] netlink: 44 bytes leftover after parsing attributes in process `syz.3.759'. [ 68.141412][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.141500][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 68.361370][ T462] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 68.382387][ T462] usb 3-1: device descriptor read/8, error -71 [ 68.401398][ T392] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 68.512541][ T462] usb 3-1: device descriptor read/8, error -71 [ 68.551375][ T392] usb 6-1: Using ep0 maxpacket: 16 [ 68.557689][ T392] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.568842][ T392] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 68.577956][ T392] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.586659][ T392] usb 6-1: config 0 descriptor?? [ 68.751377][ T462] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 68.772382][ T462] usb 3-1: device descriptor read/8, error -71 [ 68.902541][ T462] usb 3-1: device descriptor read/8, error -71 [ 69.011478][ T462] usb usb3-port1: unable to enumerate USB device [ 69.020750][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.028775][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.036533][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.044301][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.052206][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.060010][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.067800][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.075574][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.083425][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.091107][ T2714] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 69.195903][ T462] usb 6-1: USB disconnect, device number 4 [ 69.218692][ T2737] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.787'. [ 69.648776][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 69.648795][ T36] audit: type=1400 audit(1762966401.145:1005): avc: denied { getopt } for pid=2779 comm="syz.4.803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.684459][ T36] audit: type=1326 audit(1762966401.185:1006): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.4.804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 69.735210][ T2787] rust_binder: Write failure EFAULT in pid:439 [ 70.083828][ T2822] overlayfs: failed to clone upperpath [ 70.483680][ T2828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:443 [ 70.502690][ T2831] netlink: 104 bytes leftover after parsing attributes in process `syz.2.812'. [ 70.521601][ T2831] rust_binder: Error in use_page_slow: ESRCH [ 70.521622][ T2831] rust_binder: use_range failure ESRCH [ 70.538219][ T2831] rust_binder: Failed to allocate buffer. len:1192, is_oneway:true [ 70.544025][ T2831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 70.552221][ T2831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:446 [ 70.672038][ T2853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 70.721351][ T36] audit: type=1400 audit(1762966402.207:1007): avc: denied { create } for pid=2862 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.081435][ T392] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 71.231370][ T392] usb 3-1: Using ep0 maxpacket: 16 [ 71.238894][ T392] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 71.248013][ T392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.256046][ T392] usb 3-1: Product: syz [ 71.260199][ T392] usb 3-1: Manufacturer: syz [ 71.264923][ T392] usb 3-1: SerialNumber: syz [ 71.271579][ T392] r8152-cfgselector 3-1: Unknown version 0x0000 [ 71.277889][ T392] r8152-cfgselector 3-1: config 0 descriptor?? [ 71.409292][ T2909] overlayfs: failed to clone lowerpath [ 71.413503][ T2910] overlayfs: failed to clone lowerpath [ 71.688853][ T36] audit: type=1326 audit(1762966403.177:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2882 comm="syz.2.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c48d8f6c9 code=0x0 [ 73.054367][ T2954] rust_binder: Error while translating object. [ 73.054419][ T2954] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 73.060958][ T2954] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:173 [ 73.759882][ T36] audit: type=1326 audit(1762966405.247:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3034 comm="syz.4.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 73.882681][ T423] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 73.899408][ T3038] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.882'. [ 74.101574][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.108623][ T3053] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.115749][ T3053] bridge_slave_0: entered allmulticast mode [ 74.121958][ T3053] bridge_slave_0: entered promiscuous mode [ 74.128491][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.135568][ T3053] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.142784][ T3053] bridge_slave_1: entered allmulticast mode [ 74.148958][ T3053] bridge_slave_1: entered promiscuous mode [ 74.159768][ T12] bridge_slave_1: left allmulticast mode [ 74.165480][ T12] bridge_slave_1: left promiscuous mode [ 74.171072][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.178684][ T12] bridge_slave_0: left allmulticast mode [ 74.184508][ T12] bridge_slave_0: left promiscuous mode [ 74.190140][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.239649][ T3061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196 [ 74.308952][ T3053] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.325160][ T3053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.332484][ T3053] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.339551][ T3053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.365149][ T2572] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.372607][ T2572] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.391461][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.398527][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.406359][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.413425][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.423430][ T12] tipc: Disabling bearer [ 74.428800][ T12] tipc: Left network mode [ 74.439278][ T12] veth1_macvtap: left promiscuous mode [ 74.445209][ T12] veth0_vlan: left promiscuous mode [ 74.486531][ T3053] veth0_vlan: entered promiscuous mode [ 74.497319][ T3053] veth1_macvtap: entered promiscuous mode [ 74.535332][ T3077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.895'. [ 74.541398][ T3076] __vm_enough_memory: pid: 3076, comm: syz.6.885, bytes: 18014402804453376 not enough memory for the allocation [ 74.546003][ T3077] rust_binder: 201: no such ref 0 [ 74.561622][ T3077] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 74.575166][ T3077] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 74.582447][ T3077] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 74.595031][ T3077] rust_binder: 201: no such ref 0 [ 74.645890][ T3094] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.656926][ T3094] netlink: 64 bytes leftover after parsing attributes in process `syz.6.902'. [ 74.874496][ T3125] overlayfs: failed to clone lowerpath [ 74.889017][ T36] audit: type=1400 audit(1762966406.377:1010): avc: denied { read write } for pid=3129 comm="syz.4.913" name="file1" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.912377][ T36] audit: type=1400 audit(1762966406.377:1011): avc: denied { open } for pid=3129 comm="syz.4.913" path="/211/file1" dev="tmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 74.976058][ T36] audit: type=1400 audit(1762966406.467:1012): avc: denied { mounton } for pid=3144 comm="syz.3.918" path="/file0" dev="ramfs" ino=17711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 75.291985][ T3173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 75.511390][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 75.662553][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.672885][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.685148][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.694459][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.702503][ T9] usb 6-1: Product: syz [ 75.706699][ T9] usb 6-1: Manufacturer: syz [ 75.711375][ T9] usb 6-1: SerialNumber: syz [ 75.717471][ T9] cdc_mbim 6-1:1.0: skipping garbage [ 75.722907][ T9] usb 6-1: selecting invalid altsetting 1 [ 75.819513][ T3178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3178 comm=syz.3.930 [ 75.832703][ T3178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.930'. [ 76.095223][ T36] audit: type=1400 audit(1762966407.587:1013): avc: denied { audit_write } for pid=3212 comm="syz.3.942" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 76.116441][ T36] audit: type=1107 audit(1762966407.587:1014): pid=3212 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 76.123878][ T3170] rust_binder: Write failure EFAULT in pid:210 [ 76.126400][ T9] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 76.229856][ T9] cdc_mbim 6-1:1.0: bind() failure [ 76.239029][ T3219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 76.241681][ T9] usb 6-1: USB disconnect, device number 5 [ 76.359852][ T36] audit: type=1400 audit(1762966407.847:1015): avc: denied { execute } for pid=3235 comm="syz.3.948" path="/memory.events.local" dev="ramfs" ino=17860 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 76.767596][ T3258] validate_nla: 59 callbacks suppressed [ 76.767611][ T3258] netlink: 'syz.4.956': attribute type 27 has an invalid length. [ 76.920727][ T36] audit: type=1400 audit(1762966408.407:1016): avc: denied { getopt } for pid=3260 comm="syz.5.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.921917][ T3261] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 76.944606][ T36] audit: type=1400 audit(1762966408.437:1017): avc: denied { ioctl } for pid=3260 comm="syz.5.957" path="socket:[17970]" dev="sockfs" ino=17970 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 76.951139][ T3261] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 77.040082][ T36] audit: type=1400 audit(1762966408.527:1018): avc: denied { accept } for pid=3273 comm="syz.5.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.289056][ T3287] binder: Unknown parameter 'contextÌðÔð[7’' [ 77.322443][ T3300] binder: Unknown parameter '01777777777777777777777000000000000000000000030x00000000000000030x0000000000000003' [ 77.459940][ T36] audit: type=1400 audit(1762966408.947:1019): avc: denied { ioctl } for pid=3312 comm="syz.5.977" path="socket:[18126]" dev="sockfs" ino=18126 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 77.562388][ T3331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 77.591981][ T3342] overlayfs: failed to clone upperpath [ 77.619511][ T3346] rust_binder: Write failure EFAULT in pid:267 [ 77.640209][ T3352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 77.656842][ T3354] rust_binder: Error while translating object. [ 77.656876][ T3354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 77.663889][ T3354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:271 [ 77.763657][ T3370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:275 [ 77.775176][ T3370] rust_binder: 275: no such ref 1 [ 77.790762][ T3370] rust_binder: Failed to allocate buffer. len:18446744073709551240, is_oneway:false [ 77.790788][ T3370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 77.800364][ T3370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:275 [ 77.868055][ T3378] rust_binder: Error in use_page_slow: ESRCH [ 77.868081][ T3378] rust_binder: use_range failure ESRCH [ 77.868153][ T3377] rust_binder: Error in use_page_slow: ESRCH [ 77.881144][ T3378] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 77.887463][ T3378] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.896248][ T3377] rust_binder: use_range failure ESRCH [ 77.905826][ T3378] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:25 [ 77.911520][ T3377] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 77.920548][ T3377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 77.929537][ T3377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:25 [ 77.952110][ T3380] netlink: 'syz.6.998': attribute type 63 has an invalid length. [ 77.969855][ T3380] netlink: 5 bytes leftover after parsing attributes in process `syz.6.998'. [ 78.037153][ T3386] bpf: Bad value for 'mode' [ 78.055842][ T3388] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1001'. [ 78.065709][ T3386] netlink: 'syz.6.1000': attribute type 5 has an invalid length. [ 78.142803][ T3401] __vm_enough_memory: pid: 3401, comm: syz.5.1005, bytes: 18014402804453376 not enough memory for the allocation [ 78.288570][ T3415] /dev/md0: Can't lookup blockdev [ 78.380453][ T3423] netlink: 'syz.6.1013': attribute type 27 has an invalid length. [ 78.406957][ T3423] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.414249][ T3423] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.485171][ T3430] rust_binder: 53: no such ref 3 [ 79.212942][ T3455] rust_binder: Write failure EINVAL in pid:296 [ 79.231459][ T3458] rust_binder: Write failure EFAULT in pid:299 [ 79.268064][ T3467] rust_binder: 308: no such ref 0 [ 79.287590][ T3472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.296158][ T3472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.471929][ T3486] binder: Unknown parameter 'defcontext01777777777777777777777' [ 79.555017][ T3498] raw_sendmsg: syz.4.1037 forgot to set AF_INET. Fix it! [ 79.801416][ T462] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.951402][ T462] usb 6-1: Using ep0 maxpacket: 16 [ 79.958255][ T462] usb 6-1: config 255 has an invalid interface number: 120 but max is 0 [ 79.966854][ T462] usb 6-1: config 255 has no interface number 0 [ 79.973368][ T462] usb 6-1: config 255 interface 120 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 79.984545][ T462] usb 6-1: config 255 interface 120 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 79.996238][ T462] usb 6-1: config 255 interface 120 altsetting 2 endpoint 0xC has an invalid bInterval 213, changing to 7 [ 80.007583][ T462] usb 6-1: config 255 interface 120 altsetting 2 endpoint 0x2 has invalid maxpacket 1600, setting to 1024 [ 80.018922][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 80.029794][ T462] usb 6-1: config 255 interface 120 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 80.040842][ T462] usb 6-1: config 255 interface 120 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 80.051894][ T462] usb 6-1: config 255 interface 120 altsetting 2 endpoint 0xD has invalid maxpacket 88, setting to 64 [ 80.062884][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 80.073803][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 80.084680][ T462] usb 6-1: config 255 interface 120 altsetting 2 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 80.096520][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0x8B, skipping [ 80.107575][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 80.118444][ T462] usb 6-1: config 255 interface 120 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 80.129312][ T462] usb 6-1: config 255 interface 120 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 80.142723][ T462] usb 6-1: config 255 interface 120 has no altsetting 0 [ 80.151029][ T462] usb 6-1: New USB device found, idVendor=16c0, idProduct=09b0, bcdDevice= a.78 [ 80.160192][ T462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.168203][ T462] usb 6-1: Product: ᷘ᱀㹒轜á·ï±‹ëŒšåŒî’¨ä€¦é¿î‘ší‚Ÿé—ߜ墈哌ç¸î¾ [ 80.176984][ T462] usb 6-1: Manufacturer: 阂ా虹薸䋬힆⎜⠆åµâƒ¤åˆ—à á¤äºâ¿’ê¿Ã­ä²¶î—¥ë™‘猀㤨݅埰꧵㱥讀躂曊施薆 [ 80.189238][ T462] usb 6-1: SerialNumber: †[ 80.194958][ T3486] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 80.243537][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 80.243554][ T36] audit: type=1326 audit(1762966411.737:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.4.1050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 80.272818][ T36] audit: type=1326 audit(1762966411.737:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.4.1050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 80.407527][ T462] usb 6-1: USB disconnect, device number 6 [ 80.793256][ T3535] fuseblk: Bad value for 'fd' [ 80.805897][ T3537] netlink: 'syz.3.1052': attribute type 4 has an invalid length. [ 80.818746][ T3537] netlink: 'syz.3.1052': attribute type 4 has an invalid length. [ 80.828213][ T36] audit: type=1400 audit(1762966412.317:1034): avc: denied { connect } for pid=3536 comm="syz.3.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.866784][ T3544] 9pnet_fd: Insufficient options for proto=fd [ 80.917510][ T3549] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 80.917695][ T3549] rust_binder: Write failure EINVAL in pid:319 [ 81.113794][ T3557] fuse: Bad value for 'fd' [ 81.171382][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.321359][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 81.327443][ T9] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 81.335782][ T9] usb 6-1: config 0 has no interface number 0 [ 81.342040][ T9] usb 6-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 81.353335][ T9] usb 6-1: config 0 interface 96 has no altsetting 0 [ 81.361230][ T9] usb 6-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 81.370305][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.378324][ T9] usb 6-1: Product: syz [ 81.382517][ T9] usb 6-1: Manufacturer: syz [ 81.387117][ T9] usb 6-1: SerialNumber: syz [ 81.392312][ T9] usb 6-1: config 0 descriptor?? [ 81.553079][ T3587] overlay: ./file0 is not a directory [ 81.848390][ T3601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1073'. [ 81.865844][ T9] usb 6-1: USB disconnect, device number 7 [ 81.950496][ T3614] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3614 comm=syz.4.1080 [ 81.999952][ T36] audit: type=1400 audit(1762966413.487:1035): avc: denied { accept } for pid=3620 comm="syz.4.1082" path="socket:[19364]" dev="sockfs" ino=19364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.077104][ T36] audit: type=1107 audit(1762966413.567:1036): pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='X¡Š Äú±íuXÑ‹˜S“ÔGáê’Qj¬*Ñ´îj¹÷É"ÃÁ1>Ï5Mx“ÃÛˆ0haÊœ]ý‡bKÿ<‹%'.ϸÏuÏŠn†QRѹVǪ»Mñ¤÷' [ 82.098573][ T36] audit: type=1107 audit(1762966413.567:1037): pid=3641 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='X¡Š Äú±íuXÑ‹˜S“ÔGáê’Qj¬*Ñ´îj¹÷É"ÃÁ1>Ï5Mx“ÃÛˆ0haÊœ]ý‡bKÿ<‹%'.ϸÏuÏŠn†QRѹVǪ»Mñ¤÷' [ 82.176268][ T3648] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 82.375805][ T3652] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 82.639592][ T3656] virtiofs: Unknown parameter 'always' [ 82.869433][ T3670] rust_binder: Read failure Err(EAGAIN) in pid:339 [ 83.138980][ T3688] netlink: 'syz.3.1103': attribute type 27 has an invalid length. [ 83.193168][ T3700] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1107'. [ 83.232765][ T3704] futex_wake_op: syz.3.1109 tries to shift op by 32; fix this program [ 83.249776][ T3706] overlayfs: failed to clone lowerpath [ 83.281419][ T462] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 83.328450][ T3724] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1116'. [ 83.345267][ T3727] netlink: 'syz.3.1117': attribute type 64 has an invalid length. [ 83.353201][ T3727] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1117'. [ 83.372748][ T3729] netlink: 'syz.3.1118': attribute type 30 has an invalid length. [ 83.431806][ T462] usb 6-1: too many configurations: 151, using maximum allowed: 8 [ 83.446324][ T462] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 83.455444][ T462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 83.463683][ T462] usb 6-1: Product: syz [ 83.467845][ T462] usb 6-1: Manufacturer: syz [ 83.472470][ T462] usb 6-1: SerialNumber: syz [ 83.477545][ T462] usb 6-1: config 0 descriptor?? [ 83.750446][ T462] usb 6-1: bad CDC descriptors [ 83.756193][ T462] usb 6-1: USB disconnect, device number 8 [ 83.932777][ T36] audit: type=1400 audit(1762966415.427:1038): avc: denied { setopt } for pid=3763 comm="syz.3.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.936799][ T3764] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 83.972727][ T3766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 84.411231][ T3782] rust_binder: 351: no such ref 1 [ 84.416407][ T3782] rust_binder: Failed to allocate buffer. len:18446744073709551240, is_oneway:false [ 84.416427][ T3782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 84.425960][ T3782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:351 [ 84.769085][ T3787] overlayfs: failed to clone upperpath [ 84.793173][ T3792] 9pnet_fd: Insufficient options for proto=fd [ 85.262746][ T3805] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 85.262772][ T3805] rust_binder: Read failure Err(EFAULT) in pid:357 [ 85.274340][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1145'. [ 85.290763][ T36] audit: type=1400 audit(1762966416.777:1039): avc: denied { compute_member } for pid=3804 comm="syz.5.1145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.352393][ T3810] 9pnet_fd: Insufficient options for proto=fd [ 85.561427][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 85.638944][ T36] audit: type=1326 audit(1762966417.127:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.4.1162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 85.721395][ T10] usb 6-1: device descriptor read/64, error -71 [ 85.920514][ T3858] fuse: Bad value for 'fd' [ 85.961374][ T10] usb 6-1: device descriptor read/64, error -71 [ 86.201387][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 86.331375][ T10] usb 6-1: device descriptor read/64, error -71 [ 86.454489][ T36] audit: type=1326 audit(1762966417.947:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.3.1166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65c8f8f6c9 code=0x0 [ 86.571376][ T10] usb 6-1: device descriptor read/64, error -71 [ 86.681457][ T10] usb usb6-port1: attempt power cycle [ 87.031388][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 87.052426][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.137330][ T3897] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 87.147338][ T36] audit: type=1400 audit(1762966418.647:1042): avc: denied { relabelto } for pid=3896 comm="syz.4.1178" name="file0" dev="tmpfs" ino=1738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 87.174233][ T36] audit: type=1400 audit(1762966418.647:1043): avc: denied { associate } for pid=3896 comm="syz.4.1178" name="file0" dev="tmpfs" ino=1738 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 87.202924][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.352395][ T3903] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 87.441360][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 87.462463][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.592345][ T10] usb 6-1: device descriptor read/8, error -71 [ 87.701496][ T10] usb usb6-port1: unable to enumerate USB device [ 87.762592][ T36] audit: type=1326 audit(1762966419.257:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.4.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x0 [ 88.371557][ T3917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1184'. [ 88.472408][ T3923] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 88.482740][ T36] audit: type=1400 audit(1762966419.977:1045): avc: denied { remount } for pid=3922 comm="syz.5.1186" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 88.718773][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1198'. [ 88.744709][ T3965] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1200'. [ 88.909631][ T3967] 9pnet_fd: Insufficient options for proto=fd [ 88.974123][ T36] audit: type=1326 audit(1762966420.467:1046): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.5.1205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5438f6c9 code=0x0 [ 89.027279][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 89.635636][ T36] audit: type=1400 audit(1762966421.127:1047): avc: denied { create } for pid=3985 comm="syz.4.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 89.733803][ T3991] rust_binder: Error in use_page_slow: ESRCH [ 89.733830][ T3991] rust_binder: use_range failure ESRCH [ 89.747176][ T3991] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 89.760793][ T3991] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 89.776473][ T3991] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:94 [ 89.786037][ T3991] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 89.807450][ T3991] rust_binder: Read failure Err(EFAULT) in pid:94 [ 90.179993][ T36] audit: type=1400 audit(1762966421.667:1048): avc: denied { create } for pid=4004 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 90.305233][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 90.314849][ T4022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1222'. [ 90.361750][ T36] audit: type=1400 audit(1762966421.857:1049): avc: denied { accept } for pid=4038 comm="syz.3.1226" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.490233][ T4047] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 90.499096][ T4047] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.532161][ T4053] rust_binder: Write failure EINVAL in pid:102 [ 90.559959][ T36] audit: type=1400 audit(1762966422.047:1050): avc: denied { lock } for pid=4054 comm="syz.6.1230" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.051364][ T462] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 91.201387][ T462] usb 6-1: Using ep0 maxpacket: 8 [ 91.207599][ T462] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.217729][ T462] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.230640][ T462] usb 6-1: config 0 interface 0 has no altsetting 0 [ 91.237312][ T462] usb 6-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.00 [ 91.246402][ T462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.255135][ T462] usb 6-1: config 0 descriptor?? [ 91.403518][ T4131] x_tables: duplicate underflow at hook 2 [ 91.461145][ T4131] binder: Unknown parameter 'fscontext?}' [ 91.665736][ T462] wacom 0003:056A:0030.000D: hidraw0: USB HID v0.00 Device [HID 056a:0030] on usb-dummy_hcd.5-1/input0 [ 91.915462][ T4082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4082 comm=syz.5.1240 [ 91.928239][ T4082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1240'. [ 91.937265][ T4082] erspan0: entered promiscuous mode [ 91.971659][ T36] audit: type=1400 audit(1762966423.467:1051): avc: denied { execute } for pid=4081 comm="syz.5.1240" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.530459][ T4164] rust_binder: Write failure EINVAL in pid:123 [ 92.540922][ T36] audit: type=1400 audit(1762966424.027:1052): avc: denied { map } for pid=4165 comm="syz.6.1269" path="/proc/127/net/vlan/vlan1" dev="proc" ino=4026533070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 92.547194][ T4166] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.571485][ T36] audit: type=1400 audit(1762966424.027:1053): avc: denied { execute } for pid=4165 comm="syz.6.1269" path="/proc/127/net/vlan/vlan1" dev="proc" ino=4026533070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 92.714020][ T4183] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1275'. [ 92.748881][ T4189] SELinux: security_context_str_to_sid (syste_uÝGй ‰:ÿß) failed with errno=-22 [ 92.883416][ T4197] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 92.883560][ T4197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 92.890207][ T4197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:149 [ 92.943377][ T4202] SELinux: security_context_str_to_sid () failed with errno=-22 [ 92.977724][ T4204] SELinux: security_context_str_to_sid () failed with errno=-22 [ 93.123065][ T4211] SELinux: security_context_str_to_sid () failed with errno=-22 [ 93.143738][ T4216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 93.143771][ T4216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:163 [ 93.153561][ T4215] rust_binder: Write failure EFAULT in pid:163 [ 93.183267][ T4218] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:166 [ 93.822018][ T10] usb 6-1: USB disconnect, device number 13 [ 93.923431][ T4247] incfs_lookup_dentry err:-13 [ 93.928150][ T4247] incfs: Can't find or create .index dir in ./bus [ 93.940548][ T4247] incfs: mount failed -13 [ 93.969394][ T36] audit: type=1326 audit(1762966425.457:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.5.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7ffa54386567 code=0x0 [ 94.044879][ T4253] rust_binder: 433: no such ref 2 [ 94.899968][ T4330] fuse: Bad value for 'fd' [ 94.917877][ T4333] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.1327'. [ 95.225859][ T4356] SELinux: Context KNáDd«5è·ÓQ3‘BkÙ”yb˜ÏðÓ­ü£sÐÿ¿„,~úÔ;c3˜poš¹ÍºÐfP×Ò¸62òùAi®]Ý is not valid (left unmapped). [ 95.247240][ T36] audit: type=1326 audit(1762966426.737:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.5.1338" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7ffa5438f6c9 code=0x0 [ 95.725771][ T4374] sit0: entered promiscuous mode [ 95.736701][ T4374] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 95.745911][ T4374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1343'. [ 96.086204][ T4382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4382 comm=syz.5.1346 [ 96.145186][ T36] audit: type=1400 audit(1762966427.637:1056): avc: denied { read } for pid=4388 comm="syz.5.1349" name="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.167681][ T36] audit: type=1400 audit(1762966427.637:1057): avc: denied { open } for pid=4388 comm="syz.5.1349" path="/" dev="configfs" ino=2490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.376841][ T4427] overlayfs: missing 'workdir' [ 96.767014][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1380'. [ 96.801351][ T36] audit: type=1326 audit(1762966428.287:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4484 comm="syz.6.1381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x0 [ 96.860911][ T36] audit: type=1400 audit(1762966428.347:1059): avc: denied { write } for pid=4484 comm="syz.6.1381" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 96.916600][ T4504] wireguard: wg2: Could not create IPv4 socket [ 97.039393][ T36] audit: type=1400 audit(1762966428.527:1060): avc: denied { map } for pid=4514 comm="syz.3.1391" path="socket:[22969]" dev="sockfs" ino=22969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.406392][ T4522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1394'. [ 97.416055][ T4522] 9pnet_fd: p9_fd_create_tcp (4522): problem binding to privport [ 97.472499][ T4536] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 97.480674][ T4536] SELinux: security_context_str_to_sid (-H^$-) failed with errno=-22 [ 97.604346][ T4552] sock: sock_timestamping_bind_phc: sock not bind to device [ 97.832718][ T4562] 9pnet_fd: Insufficient options for proto=fd [ 97.839189][ T4562] 9pnet_fd: Insufficient options for proto=fd [ 97.898175][ T36] audit: type=1400 audit(1762966429.387:1061): avc: denied { map } for pid=4573 comm="syz.3.1413" path="socket:[23044]" dev="sockfs" ino=23044 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.923702][ T4576] 9pnet_virtio: no channels available for device 127.0.0.1 [ 97.947050][ T36] audit: type=1400 audit(1762966429.437:1062): avc: denied { setattr } for pid=4582 comm="syz.5.1416" name="PPTP" dev="sockfs" ino=22325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.532110][ T4616] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1430'. [ 98.554880][ T4619] fuse: Unknown parameter ' ' [ 98.600070][ T36] audit: type=1400 audit(1762966430.087:1063): avc: denied { watch watch_reads } for pid=4622 comm="syz.4.1432" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 98.807375][ T4629] netlink: 'syz.5.1435': attribute type 4 has an invalid length. [ 98.882988][ T4639] overlayfs: failed to clone upperpath [ 98.900297][ T4643] tipc: Started in network mode [ 98.905226][ T4643] tipc: Node identity 0000000000002d210000000000000001, cluster identity 4711 [ 98.914115][ T4643] tipc: Enabling of bearer rejected, failed to enable media [ 99.078560][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1446'. [ 99.088071][ T4660] bridge_slave_0 (unregistering): left allmulticast mode [ 99.095324][ T4660] bridge_slave_0 (unregistering): left promiscuous mode [ 99.102414][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.230693][ T4680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=158 sclass=netlink_route_socket pid=4680 comm=syz.3.1454 [ 99.283281][ T4688] 9pnet_fd: Insufficient options for proto=fd [ 99.317246][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1462'. [ 99.324169][ T4708] bridge0: port 3(erspan0) entered blocking state [ 99.332793][ T4708] bridge0: port 3(erspan0) entered disabled state [ 99.339379][ T4708] erspan0: entered allmulticast mode [ 99.345104][ T4708] erspan0: entered promiscuous mode [ 99.350382][ T4708] bridge0: port 3(erspan0) entered blocking state [ 99.356844][ T4708] bridge0: port 3(erspan0) entered forwarding state [ 99.492707][ T4725] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 99.643066][ T4777] fuse: Bad value for 'fd' [ 99.728953][ T4801] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1495'. [ 99.738514][ T4801] netlink: 316 bytes leftover after parsing attributes in process `syz.5.1495'. [ 100.009692][ T4869] tipc: Enabled bearer , priority 10 [ 100.098744][ T4890] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1525'. [ 100.299462][ T4916] overlayfs: failed to clone lowerpath [ 100.344089][ T4931] netlink: 'syz.6.1538': attribute type 27 has an invalid length. [ 100.364618][ T4931] veth0_vlan: left promiscuous mode [ 100.370692][ T4931] veth0_vlan: entered promiscuous mode [ 100.378543][ T4931] veth1_macvtap: left promiscuous mode [ 100.384942][ T4931] veth1_macvtap: entered promiscuous mode [ 100.392061][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.399156][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.412787][ T36] audit: type=1400 audit(1762966431.907:1064): avc: denied { read } for pid=4930 comm="syz.6.1538" path="socket:[23675]" dev="sockfs" ino=23675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.506850][ T4944] netlink: 'syz.5.1543': attribute type 19 has an invalid length. [ 100.514802][ T4944] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1543'. [ 100.557020][ T36] audit: type=1400 audit(1762966432.047:1065): avc: denied { create } for pid=4951 comm="syz.5.1547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.945739][ T4991] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1559'. [ 100.964380][ T4995] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1560'. [ 101.001383][ T423] tipc: Node number set to 11552 [ 101.114982][ T5002] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1563'. [ 101.471566][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 101.471582][ T36] audit: type=1400 audit(1762966432.967:1067): avc: denied { ioctl } for pid=5012 comm="syz.3.1566" path="socket:[23775]" dev="sockfs" ino=23775 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 101.505779][ T36] audit: type=1400 audit(1762966432.987:1068): avc: denied { read } for pid=5012 comm="syz.3.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 101.508540][ T5015] overlayfs: failed to clone lowerpath [ 102.093619][ T5039] fuseblk: Bad value for 'fd' [ 102.170272][ T5060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1584'. [ 102.179240][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1584'. [ 102.188957][ T5060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1584'. [ 102.320484][ T5069] fuseblk: Bad value for 'fd' [ 102.366511][ T36] audit: type=1400 audit(1762966433.857:1069): avc: denied { mounton } for pid=5070 comm="syz.3.1588" path="pipe:[1621]" dev="pipefs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 102.400132][ T5075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 102.616317][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1592'. [ 102.634206][ T5086] netlink: 'syz.5.1592': attribute type 4 has an invalid length. [ 103.053132][ T5131] fuse: Bad value for 'group_id' [ 103.058120][ T5131] fuse: Bad value for 'group_id' [ 103.123875][ T36] audit: type=1400 audit(1762966434.617:1070): avc: denied { create } for pid=5147 comm="syz.6.1616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.293360][ T36] audit: type=1400 audit(1762966434.787:1071): avc: denied { setattr } for pid=5168 comm="syz.6.1623" name="XDP" dev="sockfs" ino=23926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.345474][ T36] audit: type=1400 audit(1762966434.837:1072): avc: denied { shutdown } for pid=5168 comm="syz.6.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.978769][ T5215] fuse: Bad value for 'fd' [ 104.578858][ T5304] 9pnet: p9_errstr2errno: server reported unknown error [ 104.661569][ T36] audit: type=1326 audit(1762966436.157:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.3.1674" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f65c8f8f6c9 code=0x0 [ 105.119183][ T36] audit: type=1400 audit(1762966436.607:1074): avc: denied { bind } for pid=5449 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.855795][ T5528] tmpfs: Unknown parameter 'usrquota' [ 106.878002][ T36] audit: type=1326 audit(1762966438.367:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 106.901563][ T36] audit: type=1326 audit(1762966438.367:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 106.925266][ T36] audit: type=1326 audit(1762966438.367:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 106.948964][ T36] audit: type=1326 audit(1762966438.367:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.009770][ T36] audit: type=1326 audit(1762966438.497:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.033278][ T36] audit: type=1326 audit(1762966438.517:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.056930][ T36] audit: type=1326 audit(1762966438.527:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.080458][ T36] audit: type=1326 audit(1762966438.527:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.104282][ T36] audit: type=1326 audit(1762966438.527:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 107.128229][ T36] audit: type=1326 audit(1762966438.527:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5553 comm="syz.4.1790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f361c78f6c9 code=0x7ffc0000 [ 108.323537][ T5618] overlayfs: failed to clone upperpath [ 108.352146][ T5624] 9pnet_fd: Insufficient options for proto=fd [ 108.740370][ T5649] tipc: Enabled bearer , priority 10 [ 109.698246][ T5728] __nla_validate_parse: 5 callbacks suppressed [ 109.698265][ T5728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 110.090391][ T5760] overlayfs: failed to clone upperpath [ 110.728858][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.735952][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.743035][ T5798] bridge_slave_0: entered allmulticast mode [ 110.749837][ T5798] bridge_slave_0: entered promiscuous mode [ 110.756204][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.763265][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.770345][ T5798] bridge_slave_1: entered allmulticast mode [ 110.776747][ T5798] bridge_slave_1: entered promiscuous mode [ 110.818284][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.825378][ T5798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.832674][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.839703][ T5798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.858889][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.866348][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.875550][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.882628][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.891610][ T2572] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.898652][ T2572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.921862][ T5798] veth0_vlan: entered promiscuous mode [ 110.933158][ T5798] veth1_macvtap: entered promiscuous mode [ 111.184333][ T5849] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.541612][ T462] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.691392][ T462] usb 4-1: Using ep0 maxpacket: 8 [ 111.699188][ T462] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 111.708658][ T462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.717001][ T462] usb 4-1: Product: syz [ 111.721568][ T462] usb 4-1: Manufacturer: syz [ 111.726229][ T462] usb 4-1: SerialNumber: syz [ 111.738106][ T462] usb 4-1: config 0 descriptor?? [ 112.119421][ T5924] 9pnet_fd: Insufficient options for proto=fd [ 112.140105][ T5928] 9pnet_fd: Insufficient options for proto=fd [ 112.882385][ T5952] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1976'. [ 113.247151][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 113.247169][ T36] audit: type=1326 audit(1762966444.737:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.277023][ T36] audit: type=1326 audit(1762966444.737:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.300519][ T36] audit: type=1326 audit(1762966444.747:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.323852][ T36] audit: type=1326 audit(1762966444.747:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.347515][ T36] audit: type=1326 audit(1762966444.747:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.370898][ T36] audit: type=1326 audit(1762966444.747:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.394371][ T36] audit: type=1326 audit(1762966444.747:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.417698][ T36] audit: type=1326 audit(1762966444.747:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.441274][ T36] audit: type=1326 audit(1762966444.747:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.464743][ T36] audit: type=1326 audit(1762966444.747:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5972 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 113.984296][ T6003] 9pnet_fd: Insufficient options for proto=fd [ 114.496808][ T10] usb 4-1: USB disconnect, device number 6 [ 114.707712][ T6019] tmpfs: Unknown parameter 'usrquota' [ 114.979638][ T6047] overlayfs: failed to clone upperpath [ 115.013975][ T6058] netlink: 'syz.6.2024': attribute type 12 has an invalid length. [ 115.141374][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 115.291393][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 115.297599][ T10] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 115.306845][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.315414][ T10] usb 4-1: config 0 descriptor?? [ 116.284967][ T6133] overlayfs: failed to clone upperpath [ 116.290907][ T6133] overlayfs: failed to clone upperpath [ 117.096818][ T6216] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2096'. [ 117.860220][ T10] usb 4-1: USB disconnect, device number 7 [ 117.933883][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 118.509080][ T6300] tipc: Can't bind to reserved service type 2 [ 119.745866][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2185'. [ 120.168368][ T6430] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2194'. [ 122.256768][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 122.270591][ T36] audit: type=1400 audit(1762966453.747:1134): avc: denied { read } for pid=6563 comm="syz.4.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.463819][ T6575] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 122.523442][ T6575] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 122.679235][ T6601] __vm_enough_memory: pid: 6601, comm: syz.3.2271, bytes: 18014402804453376 not enough memory for the allocation [ 122.874478][ T6617] rust_binder: Write failure EINVAL in pid:169 [ 122.937805][ T6619] binder: Unknown parameter 'ÿÿ' [ 122.963128][ T36] audit: type=1400 audit(1762966454.457:1135): avc: denied { setopt } for pid=6618 comm="syz.3.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 122.965281][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6621 comm=syz.6.2280 [ 123.077579][ T6621] tipc: MTU too low for tipc bearer [ 123.591432][ T392] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 123.741724][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 123.747961][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.758917][ T392] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.768702][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.781635][ T392] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.790654][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.799367][ T392] usb 4-1: config 0 descriptor?? [ 124.008316][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.018129][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.025844][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.033549][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.041098][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.048593][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.055945][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.062321][ T6665] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.063506][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.070294][ T6665] overlayfs: failed to set xattr on upper [ 124.077943][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.090805][ T392] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 124.095189][ T6665] overlayfs: ...falling back to uuid=null. [ 124.098690][ T392] HID 045e:07da: Invalid code 65791 type 1 [ 124.110172][ T392] HID 045e:07da: Invalid code 768 type 1 [ 124.115966][ T392] HID 045e:07da: Invalid code 769 type 1 [ 124.122244][ T392] HID 045e:07da: Invalid code 770 type 1 [ 124.129601][ T392] HID 045e:07da: Invalid code 771 type 1 [ 124.136655][ T392] HID 045e:07da: Invalid code 772 type 1 [ 124.142698][ T392] HID 045e:07da: Invalid code 773 type 1 [ 124.148364][ T392] HID 045e:07da: Invalid code 774 type 1 [ 124.155640][ T392] HID 045e:07da: Invalid code 775 type 1 [ 124.162216][ T392] HID 045e:07da: Invalid code 776 type 1 [ 124.178332][ T392] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000E/input/input12 [ 124.194522][ T36] audit: type=1400 audit(1762966455.687:1136): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.217076][ T392] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 124.236436][ T36] audit: type=1400 audit(1762966455.687:1137): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=563 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.267484][ T423] usb 4-1: USB disconnect, device number 8 [ 124.295451][ T36] audit: type=1400 audit(1762966455.757:1138): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=563 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.321887][ T6692] netlink: 'syz.6.2304': attribute type 1 has an invalid length. [ 124.441763][ T6719] overlayfs: failed to clone upperpath [ 124.449508][ T6719] overlayfs: failed to clone lowerpath [ 124.518059][ T36] audit: type=1326 audit(1762966456.007:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.5.2313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x0 [ 124.851916][ T6727] overlayfs: failed to clone upperpath [ 125.031373][ T423] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 125.182554][ T6725] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2314'. [ 125.193159][ T6725] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 125.193511][ T6725] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 125.199983][ T6725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 125.208067][ T6725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:193 [ 125.219053][ T423] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.236348][ T423] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 125.243932][ T423] usb 4-1: can't read configurations, error -71 [ 125.441641][ T6745] x_tables: duplicate underflow at hook 4 [ 125.457114][ T6749] overlay: Bad value for 'redirect_dir' [ 125.733367][ T36] audit: type=1400 audit(1762966457.227:1140): avc: denied { create } for pid=6759 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 125.823098][ T36] audit: type=1400 audit(1762966457.317:1141): avc: denied { execute } for pid=6761 comm="syz.3.2327" path="/84/rdma.current" dev="tmpfs" ino=451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.901133][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2336'. [ 125.927848][ T6795] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2338'. [ 125.937729][ T36] audit: type=1400 audit(1762966457.427:1142): avc: denied { mounton } for pid=6794 comm="syz.5.2338" path="/447/bus" dev="tmpfs" ino=2373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.937744][ T6795] erofs: dax options not supported [ 126.032099][ T36] audit: type=1326 audit(1762966457.527:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x50000 [ 126.786622][ T6855] overlayfs: failed to clone upperpath [ 126.821256][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.828639][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.835986][ T6846] bridge_slave_0: entered allmulticast mode [ 126.842517][ T6846] bridge_slave_0: entered promiscuous mode [ 126.849929][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.857331][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.865020][ T6846] bridge_slave_1: entered allmulticast mode [ 126.871497][ T6846] bridge_slave_1: entered promiscuous mode [ 126.881546][ T423] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.938235][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.945361][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.952680][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.959743][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.003485][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.012742][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.033596][ T2572] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.040698][ T2572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.051381][ T423] usb 4-1: Using ep0 maxpacket: 16 [ 127.057896][ T423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.066167][ T6882] netlink: 'syz.5.2366': attribute type 12 has an invalid length. [ 127.085374][ T6878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=6878 comm=syz.6.2367 [ 127.091386][ T423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.101612][ T2571] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.114816][ T2571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.118994][ T423] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.145214][ T423] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.157757][ T423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.167064][ T423] usb 4-1: config 0 descriptor?? [ 127.173731][ T6846] veth0_vlan: entered promiscuous mode [ 127.189777][ T6846] veth1_macvtap: entered promiscuous mode [ 127.366180][ T6919] fuse: Unknown parameter 'fuse' [ 127.401057][ T36] kauditd_printk_skb: 433 callbacks suppressed [ 127.401075][ T36] audit: type=1400 audit(1762966458.887:1577): avc: denied { shutdown } for pid=6926 comm="syz.5.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.692356][ T6937] rust_binder: 13: no such ref 0 [ 127.697416][ T6937] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 127.705091][ T6937] rust_binder: 13: no such ref 524290 [ 127.710581][ T6937] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 127.730806][ T6939] rust_binder: Write failure EFAULT in pid:15 [ 127.788063][ T6845] netlink: 'syz.3.2356': attribute type 4 has an invalid length. [ 127.811367][ T6845] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2356'. [ 127.835933][ T6845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6845 comm=syz.3.2356 [ 127.862604][ T6845] /dev/rnullb0: Can't open blockdev [ 127.887731][ T423] usbhid 4-1:0.0: can't add hid device: -71 [ 127.902342][ T423] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 127.933771][ T423] usb 4-1: USB disconnect, device number 11 [ 128.052570][ T6955] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.070448][ T36] audit: type=1400 audit(1762966459.537:1578): avc: denied { create } for pid=6953 comm="syz.5.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.099367][ T6955] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 128.121678][ T6955] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 128.134585][ T6955] overlayfs: failed to set xattr on upper [ 128.140482][ T6955] overlayfs: ...falling back to redirect_dir=nofollow. [ 128.149155][ T6955] overlayfs: ...falling back to uuid=null. [ 128.789252][ T6974] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:209 [ 129.001366][ T462] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 129.088024][ T36] audit: type=1400 audit(1762966460.577:1579): avc: denied { create } for pid=7005 comm="syz.6.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.161369][ T462] usb 5-1: Using ep0 maxpacket: 32 [ 129.172850][ T462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.186306][ T462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.197543][ T462] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 129.216615][ T462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.226031][ T462] usb 5-1: config 0 descriptor?? [ 129.232119][ T462] hub 5-1:0.0: USB hub found [ 129.431865][ T462] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 129.640098][ T6969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.640199][ T6968] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 129.646804][ T6968] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:20 [ 129.658181][ T462] usbhid 5-1:0.0: can't add hid device: -71 [ 129.673260][ T462] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.701776][ T462] usb 5-1: USB disconnect, device number 10 [ 129.795462][ T7047] tipc: Bearer : already 2 bearers with priority 10 [ 129.802801][ T7047] tipc: Bearer : trying with adjusted priority [ 129.809613][ T7047] tipc: Enabling of bearer rejected, failed to enable media [ 129.909382][ T7054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.909553][ T7054] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 129.916070][ T7054] rust_binder: Error while translating object. [ 129.924872][ T7054] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.931080][ T7054] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:229 [ 129.963167][ T7059] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 129.972577][ T7060] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 216, size: 226) [ 129.979083][ T7060] rust_binder: Error while translating object. [ 129.989722][ T7060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 129.995955][ T7060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 130.064816][ T7062] overlay: Bad value for 'verity' [ 130.117271][ T7067] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 130.124824][ T7067] rust_binder: Write failure EINVAL in pid:240 [ 130.186245][ T7071] netlink: 37 bytes leftover after parsing attributes in process `syz.4.2432'. [ 130.212119][ T7071] rust_binder: Write failure EINVAL in pid:23 [ 130.240732][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2433'. [ 130.833558][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2441'. [ 130.846876][ T7094] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2441'. [ 130.921073][ T7111] netlink: 'syz.3.2442': attribute type 5 has an invalid length. [ 131.030755][ T36] audit: type=1326 audit(1762966462.517:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7126 comm="syz.5.2449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5438f6c9 code=0x0 [ 131.253215][ T7145] x_tables: duplicate underflow at hook 2 [ 131.327409][ T2571] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.708651][ T7155] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:251 [ 132.096957][ T7197] fuse: Unknown parameter 'T+V{Fz0x0000000000000004' [ 132.128745][ T7201] fuse: Unknown parameter 'f$' [ 132.891386][ T392] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 133.009772][ T7227] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2481'. [ 133.052397][ T392] usb 4-1: config 16 has an invalid interface number: 236 but max is 1 [ 133.060699][ T392] usb 4-1: config 16 has an invalid interface number: 175 but max is 1 [ 133.068998][ T392] usb 4-1: config 16 has no interface number 0 [ 133.075242][ T392] usb 4-1: config 16 has no interface number 1 [ 133.081457][ T392] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has an invalid bInterval 201, changing to 4 [ 133.092694][ T392] usb 4-1: config 16 interface 175 altsetting 3 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 133.103546][ T392] usb 4-1: config 16 interface 175 has no altsetting 0 [ 133.110757][ T392] usb 4-1: language id specifier not provided by device, defaulting to English [ 133.124349][ T392] usb 4-1: New USB device found, idVendor=2040, idProduct=c61a, bcdDevice=f4.96 [ 133.133479][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.341419][ T2495] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.341581][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 133.356651][ T392] usb 4-1: bad CDC descriptors [ 133.362626][ T392] usb 4-1: USB disconnect, device number 12 [ 133.866995][ T7232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.867497][ T7232] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 133.874569][ T7233] rust_binder: validate_parent_fixup: new_min_offset=60, sg_entry.length=0 [ 133.886341][ T7233] rust_binder: Error while translating object. [ 133.895860][ T7233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 133.904487][ T7233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273 [ 133.921860][ T7245] >: renamed from veth0_vlan (while UP) [ 133.929354][ T7247] rust_binder: 53: no such ref 0 [ 133.937553][ T7249] rust_binder: 278: no such ref 3 [ 133.942397][ T7247] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.946943][ T7249] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.953923][ T7247] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.961067][ T7249] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 133.968024][ T7247] rust_binder: 53: no such ref 2 [ 133.975676][ T7249] rust_binder: Write failure EFAULT in pid:278 [ 133.979931][ T7247] rust_binder: 53: no such ref 0 [ 134.048277][ T36] audit: type=1326 audit(1762966465.537:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.071888][ T36] audit: type=1326 audit(1762966465.537:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.096027][ T36] audit: type=1326 audit(1762966465.537:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.120450][ T36] audit: type=1326 audit(1762966465.537:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.149368][ T36] audit: type=1326 audit(1762966465.537:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.173514][ T36] audit: type=1326 audit(1762966465.537:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.197654][ T36] audit: type=1326 audit(1762966465.537:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.205287][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2489'. [ 134.222109][ T36] audit: type=1326 audit(1762966465.537:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.264714][ T36] audit: type=1326 audit(1762966465.537:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.291177][ T36] audit: type=1326 audit(1762966465.537:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7263 comm="syz.6.2493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 134.315058][ T2572] tipc: Subscription rejected, illegal request [ 134.345229][ T7310] netlink: 'syz.4.2504': attribute type 6 has an invalid length. [ 134.353086][ T7310] netlink: 'syz.4.2504': attribute type 4 has an invalid length. [ 134.360889][ T7310] netlink: 'syz.4.2504': attribute type 6 has an invalid length. [ 134.368741][ T7310] netlink: 'syz.4.2504': attribute type 13 has an invalid length. [ 134.376664][ T7310] netlink: 'syz.4.2504': attribute type 15 has an invalid length. [ 134.384821][ T7310] netlink: 'syz.4.2504': attribute type 19 has an invalid length. [ 134.392720][ T7310] netlink: 3684 bytes leftover after parsing attributes in process `syz.4.2504'. [ 134.436633][ T7323] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:71 [ 134.493622][ T7329] __vm_enough_memory: pid: 7329, comm: syz.3.2510, bytes: 18014402804453376 not enough memory for the allocation [ 134.655523][ T7348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 134.656211][ T7347] rust_binder: Write failure EFAULT in pid:311 [ 135.390486][ T7391] rust_binder: Write failure EFAULT in pid:98 [ 135.423213][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2533'. [ 135.446834][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.463385][ T7394] bridge_slave_0 (unregistering): left allmulticast mode [ 135.470537][ T7394] bridge_slave_0 (unregistering): left promiscuous mode [ 135.479101][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.518609][ T7401] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 135.518753][ T7401] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 135.525763][ T7401] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:318 [ 135.556656][ T7403] exFAT-fs (rnullb0): invalid boot record signature [ 135.580478][ T7403] exFAT-fs (rnullb0): failed to read boot sector [ 135.587572][ T7403] exFAT-fs (rnullb0): failed to recognize exfat type [ 135.649324][ T7415] rust_binder: 326: no such ref 0 [ 135.658538][ T7415] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 135.676105][ T7415] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 135.834148][ T7435] rust_binder: Write failure EINVAL in pid:335 [ 135.866688][ T7439] netlink: 'syz.3.2549': attribute type 25 has an invalid length. [ 135.931531][ T7405] rust_binder: Read failure Err(EAGAIN) in pid:104 [ 136.001030][ T7456] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.008904][ T7456] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 136.052929][ T7466] rust_binder: 117: no such ref 1 [ 136.070703][ T7466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 136.149243][ T7471] netlink: 4432 bytes leftover after parsing attributes in process `syz.4.2561'. [ 136.151380][ T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.207894][ T7475] __vm_enough_memory: pid: 7475, comm: syz.4.2562, bytes: 18014402804453376 not enough memory for the allocation [ 136.333092][ T31] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 136.341500][ T31] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 136.351889][ T31] usb 4-1: config 220 has no interface number 2 [ 136.361218][ T31] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 136.374754][ T31] usb 4-1: config 220 interface 0 has no altsetting 0 [ 136.382043][ T31] usb 4-1: config 220 interface 76 has no altsetting 0 [ 136.389307][ T31] usb 4-1: config 220 interface 1 has no altsetting 0 [ 136.397878][ T31] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 136.407112][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.436594][ T31] usb 4-1: Product: syz [ 136.444380][ T31] usb 4-1: Manufacturer: syz [ 136.452582][ T31] usb 4-1: SerialNumber: syz [ 136.547330][ T7507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 136.547387][ T7507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129 [ 136.611530][ T7519] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 136.629875][ T7519] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 136.664453][ T7439] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 136.692340][ T31] usb 4-1: selecting invalid altsetting 0 [ 136.701478][ T31] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 136.710788][ T31] usb 4-1: No valid video chain found. [ 136.724657][ T31] usb 4-1: USB disconnect, device number 13 [ 136.819491][ T7538] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2584'. [ 137.037398][ T7548] __vm_enough_memory: pid: 7548, comm: syz.4.2591, bytes: 18014402804453376 not enough memory for the allocation [ 137.210837][ T7560] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 137.227505][ T7562] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 137.259041][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2597'. [ 137.259780][ T7566] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 137.521370][ T31] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.671362][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 137.678779][ T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.687990][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.696135][ T31] usb 5-1: Product: syz [ 137.700347][ T31] usb 5-1: Manufacturer: syz [ 137.704960][ T31] usb 5-1: SerialNumber: syz [ 137.711872][ T31] r8152-cfgselector 5-1: Unknown version 0x0000 [ 137.718125][ T31] r8152-cfgselector 5-1: config 0 descriptor?? [ 138.114797][ T7578] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 138.114940][ T7578] rust_binder: Failed to allocate buffer. len:1176, is_oneway:true [ 138.121488][ T7578] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 138.129511][ T7578] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:348 [ 138.131737][ T64] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 138.326069][ T7584] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 138.334344][ T7584] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 138.436718][ T7593] binder: Unknown parameter '00000000000000000000007' [ 138.514198][ T7600] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2611'. [ 138.560058][ T7604] rust_binder: Write failure EINVAL in pid:369 [ 138.738488][ T7621] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2618'. [ 138.782660][ T7630] tipc: Started in network mode [ 138.787550][ T7630] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 138.796639][ T7630] tipc: Enabled bearer , priority 10 [ 138.804555][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2621'. [ 138.814597][ T7630] rust_binder: 383: no such ref 1 [ 138.829700][ T7632] can: request_module (can-proto-0) failed. [ 138.846313][ T7637] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 138.853869][ T7637] rust_binder: Write failure EINVAL in pid:390 [ 139.021670][ T392] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 139.181400][ T392] usb 5-1: Using ep0 maxpacket: 32 [ 139.188051][ T392] usb 5-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 139.197039][ T392] usb 5-1: config 0 has an invalid interface number: 196 but max is 32 [ 139.205696][ T392] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 139.215050][ T392] usb 5-1: config 0 has no interface number 0 [ 139.221544][ T392] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 139.231916][ T392] usb 5-1: config 0 interface 196 has no altsetting 0 [ 139.240331][ T392] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 139.249843][ T392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.258129][ T392] usb 5-1: Product: syz [ 139.262666][ T392] usb 5-1: Manufacturer: syz [ 139.267401][ T392] usb 5-1: SerialNumber: syz [ 139.273671][ T392] usb 5-1: config 0 descriptor?? [ 139.279092][ T7629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.791403][ T10] tipc: Node number set to 4269801488 [ 140.004523][ T7676] fuse: Bad value for 'user_id' [ 140.009472][ T7676] fuse: Bad value for 'user_id' [ 140.155081][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 140.155113][ T36] audit: type=1326 audit(1762966471.647:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.6.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a85d8f6c9 code=0x7ffc0000 [ 140.191550][ T392] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 140.201161][ T392] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 140.226407][ T36] audit: type=1400 audit(1762966471.717:1616): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 140.261543][ T36] audit: type=1400 audit(1762966471.727:1617): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.283926][ T36] audit: type=1400 audit(1762966471.727:1618): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=4576 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.305692][ T36] audit: type=1400 audit(1762966471.727:1619): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4576 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.329347][ T36] audit: type=1400 audit(1762966471.727:1620): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=4576 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.360259][ T36] audit: type=1400 audit(1762966471.757:1621): avc: denied { read } for pid=7701 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.384391][ T36] audit: type=1400 audit(1762966471.757:1622): avc: denied { open } for pid=7701 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.392390][ T462] usb 5-1: USB disconnect, device number 12 [ 140.409740][ T36] audit: type=1400 audit(1762966471.757:1623): avc: denied { getattr } for pid=7701 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.440662][ T36] audit: type=1400 audit(1762966471.827:1624): avc: denied { write } for pid=7696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 140.484033][ T462] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 141.371666][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 141.522403][ T10] usb 5-1: config 32 has an invalid descriptor of length 129, skipping remainder of the config [ 141.532896][ T10] usb 5-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.546251][ T10] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 141.555807][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.567136][ T10] usbhid 5-1:32.0: couldn't find an input interrupt endpoint [ 141.828629][ T64] usb 5-1: USB disconnect, device number 13 [ 142.026291][ T7815] batadv_slave_1: entered promiscuous mode [ 142.040080][ T7818] batadv_slave_1: left promiscuous mode [ 142.500477][ T7840] 9pnet_fd: Insufficient options for proto=fd [ 142.586373][ T7852] fuse: Bad value for 'fd' [ 142.636769][ T7866] cgroup2: Unknown parameter 'obj_user' [ 142.982033][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.990953][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.211371][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 143.341550][ T10] usb 5-1: device descriptor read/64, error -71 [ 143.359448][ T7911] netlink: 'syz.5.2705': attribute type 4 has an invalid length. [ 143.367289][ T7911] netlink: 'syz.5.2705': attribute type 5 has an invalid length. [ 143.375043][ T7911] netlink: 'syz.5.2705': attribute type 1 has an invalid length. [ 143.581611][ T10] usb 5-1: device descriptor read/64, error -71 [ 143.831376][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 143.961367][ T10] usb 5-1: device descriptor read/64, error -71 [ 144.172592][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 144.183761][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2721'. [ 144.195128][ T7960] netlink: 'syz.3.2722': attribute type 4 has an invalid length. [ 144.205903][ T7960] netlink: 'syz.3.2722': attribute type 4 has an invalid length. [ 144.221414][ T10] usb 5-1: device descriptor read/64, error -71 [ 144.331475][ T10] usb usb5-port1: attempt power cycle [ 144.671707][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 144.692359][ T10] usb 5-1: device descriptor read/8, error -71 [ 144.822369][ T10] usb 5-1: device descriptor read/8, error -71 [ 145.061375][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 145.082416][ T10] usb 5-1: device descriptor read/8, error -71 [ 145.212385][ T10] usb 5-1: device descriptor read/8, error -71 [ 145.288623][ T8067] overlayfs: missing 'lowerdir' [ 145.321441][ T10] usb usb5-port1: unable to enumerate USB device [ 145.561744][ T8090] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2770'. [ 145.894210][ T8113] fuse: Bad value for 'fd' [ 145.906306][ T8115] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2778'. [ 146.010927][ T423] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 146.029038][ T423] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 146.045767][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 146.045781][ T36] audit: type=1326 audit(1762966477.537:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.081786][ T36] audit: type=1326 audit(1762966477.537:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.120903][ T36] audit: type=1326 audit(1762966477.537:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.144604][ T36] audit: type=1326 audit(1762966477.537:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.169679][ T36] audit: type=1326 audit(1762966477.537:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.194028][ T36] audit: type=1326 audit(1762966477.537:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.217763][ T36] audit: type=1326 audit(1762966477.537:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.241413][ T36] audit: type=1326 audit(1762966477.537:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.265122][ T36] audit: type=1326 audit(1762966477.537:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 146.288788][ T36] audit: type=1326 audit(1762966477.537:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.5.2785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5438f6c9 code=0x7ffc0000 [ 147.136667][ T8248] x_tables: duplicate underflow at hook 1 [ 147.192630][ T8265] tipc: Enabling of bearer rejected, failed to enable media [ 147.378529][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2842'. [ 147.765277][ T8343] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 147.832009][ T6583] ------------[ cut here ]------------ [ 147.844199][ T6583] WARNING: CPU: 0 PID: 6583 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 147.853661][ T6583] Modules linked in: [ 147.857578][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.5.2264 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 147.869185][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 147.879290][ T6583] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 147.885035][ T6583] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 147.904923][ T6583] RSP: 0018:ffffc9000f8a7768 EFLAGS: 00010293 [ 147.911063][ T6583] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888115e73900 [ 147.919106][ T6583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.927126][ T6583] RBP: ffffc9000f8a7790 R08: ffff88811df9f37f R09: 1ffff11023bf3e6f [ 147.935166][ T6583] R10: dffffc0000000000 R11: ffffed1023bf3e70 R12: 0000000000000000 [ 147.943181][ T6583] R13: dffffc0000000000 R14: ffff88811df9f2e0 R15: ffff8881315d9110 [ 147.951170][ T6583] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 147.960156][ T6583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.966801][ T6583] CR2: 00007f5a34c69f98 CR3: 000000013b3fa000 CR4: 00000000003526b0 [ 147.974821][ T6583] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 147.982827][ T6583] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 147.991161][ T6583] Call Trace: [ 147.994483][ T6583] [ 147.997421][ T6583] ovl_do_remove+0x7b8/0xcf0 [ 148.002054][ T6583] ? ovl_set_redirect+0x780/0x780 [ 148.007096][ T6583] ? down_write+0xe9/0x2a0 [ 148.011553][ T6583] ? __cfi_down_write+0x10/0x10 [ 148.016420][ T6583] ovl_rmdir+0x1e/0x30 [ 148.020505][ T6583] vfs_rmdir+0x3dd/0x560 [ 148.024841][ T6583] incfs_kill_sb+0x109/0x230 [ 148.029448][ T6583] deactivate_locked_super+0xd5/0x2a0 [ 148.034884][ T6583] deactivate_super+0xb8/0xe0 [ 148.039572][ T6583] cleanup_mnt+0x3f1/0x480 [ 148.044043][ T6583] __cleanup_mnt+0x1d/0x40 [ 148.048501][ T6583] task_work_run+0x1e0/0x250 [ 148.053165][ T6583] ? __cfi_task_work_run+0x10/0x10 [ 148.058299][ T6583] ? free_nsproxy+0x223/0x290 [ 148.063237][ T6583] do_exit+0x9bc/0x2630 [ 148.067463][ T6583] ? __sched_text_start+0x10/0x10 [ 148.072551][ T6583] ? __cfi_do_exit+0x10/0x10 [ 148.077154][ T6583] ? __kasan_check_write+0x18/0x20 [ 148.081394][ T423] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 148.082328][ T6583] ? _raw_spin_lock_irq+0x8d/0x120 [ 148.094942][ T6583] ? __kasan_check_read+0x15/0x20 [ 148.099993][ T6583] ? cgroup_update_frozen+0x160/0x990 [ 148.105436][ T6583] do_group_exit+0x22a/0x300 [ 148.110040][ T6583] ? cgroup_leave_frozen+0x16c/0x2b0 [ 148.115403][ T6583] get_signal+0x139d/0x14f0 [ 148.119928][ T6583] arch_do_signal_or_restart+0x96/0x720 [ 148.125520][ T6583] ? common_nsleep+0x93/0xb0 [ 148.130112][ T6583] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 148.136295][ T6583] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 148.142086][ T6583] ? __kasan_check_read+0x15/0x20 [ 148.147117][ T6583] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 148.153236][ T6583] syscall_exit_to_user_mode+0x58/0xb0 [ 148.158708][ T6583] do_syscall_64+0x64/0xf0 [ 148.163154][ T6583] ? clear_bhb_loop+0x50/0xa0 [ 148.167933][ T6583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.173865][ T6583] RIP: 0033:0x7ffa543c1f85 [ 148.178281][ T6583] Code: Unable to access opcode bytes at 0x7ffa543c1f5b. [ 148.185314][ T6583] RSP: 002b:00007ffa552c1f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 148.193772][ T6583] RAX: fffffffffffffdfc RBX: 00007ffa545e5fa0 RCX: 00007ffa543c1f85 [ 148.201778][ T6583] RDX: 00007ffa552c1fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.209749][ T6583] RBP: 00007ffa54411f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.217766][ T6583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.225776][ T6583] R13: 00007ffa545e6038 R14: 00007ffa545e5fa0 R15: 00007ffc7d7f7bc8 [ 148.233800][ T6583] [ 148.236822][ T6583] ---[ end trace 0000000000000000 ]--- [ 148.243170][ T6583] ------------[ cut here ]------------ [ 148.248648][ T6583] WARNING: CPU: 0 PID: 6583 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 148.258112][ T6583] Modules linked in: [ 148.262065][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.5.2264 Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 148.275156][ T6583] Tainted: [W]=WARN [ 148.278967][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.289077][ T6583] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 148.294781][ T6583] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 148.314466][ T6583] RSP: 0018:ffffc9000f8a7768 EFLAGS: 00010293 [ 148.320552][ T6583] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888115e73900 [ 148.328573][ T6583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.336657][ T6583] RBP: ffffc9000f8a7790 R08: ffff88811df9f37f R09: 1ffff11023bf3e6f [ 148.344679][ T6583] R10: dffffc0000000000 R11: ffffed1023bf3e70 R12: 0000000000000000 [ 148.352682][ T6583] R13: dffffc0000000000 R14: ffff88811df9f2e0 R15: ffff8881315d9110 [ 148.360660][ T6583] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 148.369644][ T6583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.376260][ T6583] CR2: 00007f5a34c69f98 CR3: 000000010bb98000 CR4: 00000000003526b0 [ 148.384253][ T6583] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 148.392520][ T6583] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 148.400498][ T6583] Call Trace: [ 148.403801][ T6583] [ 148.406730][ T6583] ovl_do_remove+0x7b8/0xcf0 [ 148.411378][ T6583] ? ovl_set_redirect+0x780/0x780 [ 148.416407][ T6583] ? down_write+0xe9/0x2a0 [ 148.420809][ T6583] ? __cfi_down_write+0x10/0x10 [ 148.425680][ T6583] ovl_rmdir+0x1e/0x30 [ 148.429762][ T6583] vfs_rmdir+0x3dd/0x560 [ 148.434053][ T6583] incfs_kill_sb+0x1a0/0x230 [ 148.438661][ T6583] deactivate_locked_super+0xd5/0x2a0 [ 148.444063][ T6583] deactivate_super+0xb8/0xe0 [ 148.448746][ T6583] cleanup_mnt+0x3f1/0x480 [ 148.453209][ T6583] __cleanup_mnt+0x1d/0x40 [ 148.457630][ T6583] task_work_run+0x1e0/0x250 [ 148.462307][ T6583] ? __cfi_task_work_run+0x10/0x10 [ 148.467428][ T6583] ? free_nsproxy+0x223/0x290 [ 148.472156][ T6583] do_exit+0x9bc/0x2630 [ 148.476315][ T6583] ? __sched_text_start+0x10/0x10 [ 148.481383][ T6583] ? __cfi_do_exit+0x10/0x10 [ 148.485984][ T6583] ? __kasan_check_write+0x18/0x20 [ 148.491096][ T6583] ? _raw_spin_lock_irq+0x8d/0x120 [ 148.496256][ T6583] ? __kasan_check_read+0x15/0x20 [ 148.501290][ T6583] ? cgroup_update_frozen+0x160/0x990 [ 148.506712][ T6583] do_group_exit+0x22a/0x300 [ 148.511289][ T6583] ? cgroup_leave_frozen+0x16c/0x2b0 [ 148.516629][ T6583] get_signal+0x139d/0x14f0 [ 148.521143][ T6583] arch_do_signal_or_restart+0x96/0x720 [ 148.526728][ T6583] ? common_nsleep+0x93/0xb0 [ 148.531356][ T6583] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 148.537529][ T6583] ? __se_sys_clock_nanosleep+0x2fd/0x390 [ 148.543320][ T6583] ? __kasan_check_read+0x15/0x20 [ 148.548361][ T6583] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 148.554460][ T6583] syscall_exit_to_user_mode+0x58/0xb0 [ 148.559919][ T6583] do_syscall_64+0x64/0xf0 [ 148.564361][ T6583] ? clear_bhb_loop+0x50/0xa0 [ 148.569049][ T6583] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 148.574983][ T6583] RIP: 0033:0x7ffa543c1f85 [ 148.579396][ T6583] Code: Unable to access opcode bytes at 0x7ffa543c1f5b. [ 148.586448][ T6583] RSP: 002b:00007ffa552c1f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 148.594908][ T6583] RAX: fffffffffffffdfc RBX: 00007ffa545e5fa0 RCX: 00007ffa543c1f85 [ 148.602910][ T6583] RDX: 00007ffa552c1fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.610889][ T6583] RBP: 00007ffa54411f91 R08: 0000000000000000 R09: 0000000000000000 [ 148.618891][ T6583] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 148.626889][ T6583] R13: 00007ffa545e6038 R14: 00007ffa545e5fa0 R15: 00007ffc7d7f7bc8 [ 148.634899][ T6583] [ 148.637928][ T6583] ---[ end trace 0000000000000000 ]--- [ 148.717936][ T2571] bridge_slave_1: left allmulticast mode [ 148.723683][ T2571] bridge_slave_1: left promiscuous mode [ 148.729289][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.853683][ T2571] veth1_macvtap: left promiscuous mode [ 148.859192][ T2571] >: left promiscuous mode [ 149.143331][ T2571] bridge_slave_1: left allmulticast mode [ 149.148990][ T2571] bridge_slave_1: left promiscuous mode [ 149.154662][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.162219][ T2571] bridge_slave_0: left allmulticast mode [ 149.167859][ T2571] bridge_slave_0: left promiscuous mode [ 149.173509][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.180972][ T2571] bridge_slave_1: left allmulticast mode [ 149.186703][ T2571] bridge_slave_1: left promiscuous mode [ 149.192341][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.199842][ T2571] tipc: Resetting bearer [ 149.205434][ T2571] tipc: Resetting bearer [ 149.220499][ T2571] tipc: Disabling bearer [ 149.233974][ T2571] tipc: Disabling bearer [ 149.463527][ T2571] tipc: Left network mode [ 149.469330][ T2571] veth0_vlan: left promiscuous mode [ 149.474946][ T2571] veth1_macvtap: left promiscuous mode [ 149.480422][ T2571] veth0_vlan: left promiscuous mode [ 152.543572][ T2571] bridge_slave_1: left allmulticast mode [ 152.549231][ T2571] bridge_slave_1: left promiscuous mode [ 152.554885][ T2571] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.562423][ T2571] bridge_slave_0: left allmulticast mode [ 152.568086][ T2571] bridge_slave_0: left promiscuous mode [ 152.573761][ T2571] bridge0: port 1(bridge_slave_0) entered disabled state