last executing test programs: 1m40.771514892s ago: executing program 0 (id=305): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) clock_settime(0xcd1f6467c1540c16, &(0x7f00000000c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r1, 0x3, 0x0, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 1m39.878498468s ago: executing program 0 (id=307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}], 0xffffffffffffffcc, 0x0, 0x0}) close(r2) 1m39.843614268s ago: executing program 0 (id=308): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x1000, 0x1}) socket$inet6(0xa, 0x5, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = memfd_create(&(0x7f0000000300)=' &:{-\xaa]{\x00\xf0\x9e\xe6/z\f\\\xeb^\xe0\x83G\xa4\xdfN!\xe4\xac\x9a\xc0^\xc3\xa9\x04#\xa7\x19[\x86\xce\xd2\xd3P\xcf\xcb\xcaf\xe1\xdb\xc5\xd0\x18\xce\xbe\xc6\xde\xe3`\xf5\x1b\xe8zNRN\xea^\frx~\xf3\x147\xd0T\x1f\xee\xb9r\xed\x97\xff\x81\x13A\xb3J\xdb\x1c\n\x00>e\x8d\xe5\xc4\xb2o\x96\xf4&\xd3\x94\x9e\x1d\xdb\x05\x05\xdbd\xf9\b\xeaz\xb9\xc2\xc1\x03\xfa\b\xfd2X\x86?\xf5w4\xc7\x00\r\x90\xa0\x1a\xd2?w\xd5+t\x8b\x0f\x19\xbd\xb5\xd6\xe9\x8c\xe2\x9a\xc7\xb3\xca\xad\xa7JW\xe6\xb7j8\xb2/\xeeY\x1ee\xee\x13\x82\xdd\xb8SGo2\xf0\x88\xb4\xcb\x154\xa5jG\x93\xacu\x1c\x19\x1e\x92\xad\xdf\xe0\x05S\xf6\"0:<^\xf7\x9c\xa3\x8c\x98\xf9\x96\x10p\x82\xd1\x8a\xe6\xcb;@/\x9b\x7f\x9f\x9a\xc9I(s7\x8d\x95\x1blGq\xf1\xb8\x88\f\xd3\x88V9\x1e8>\xda\xcd', 0x2) pwrite64(r3, &(0x7f00000002c0)="e6", 0x1, 0x4002) fcntl$addseals(r3, 0x409, 0x6) r4 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="62a53a121fa0840ac513e4c04a798272f4e41f1c972d44b288fd09632b9354b15b56cd9f02f8d8296899e156d96e7ed59ecd358e9a62ecff108ec02620fb2cf3eaff3f6a594dd682eb89607b68d4d1908219d5e205ed047bcf455117882846384e276a7d2db0", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00']) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40046201, &(0x7f0000000000)='/dev/ashmem\x00') capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0xd3f2, 0x0, 0xfffffffd}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r5, 0x5420, 0x0) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) unshare(0x4e050300) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c0000001600010a10000040000000000207"], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0xb266f000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 1m39.75836581s ago: executing program 0 (id=310): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000240), 0x581000, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000280)={0x0, 0x4}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x0, 0xfd, 0x3}]}, 0x10) sendmmsg(r5, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="491bad1f", 0x4}], 0x1}}], 0x1, 0x44888) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = dup3(r0, r4, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r8, &(0x7f0000000200)={0x38, 0x0, 0x25, 0x2, 0xfffff801, 0x8, 0x101, 0xd0, 0x3ff}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) ioprio_set$uid(0x3, 0x0, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendfile(r9, r9, 0x0, 0x7ffff000) 1m39.75633152s ago: executing program 0 (id=312): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00000003c0)=""/31, &(0x7f0000000400)=0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x100, 0x4, 0x2cf}, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xf, r4, 0x1005, 0xfffffffffffffffe) syz_open_procfs(r4, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r3, 0x45809000) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000081000/0x400000)=nil) 1m39.75543651s ago: executing program 0 (id=313): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = inotify_init1(0x40000) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x8, 0x0, 0xea}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c766522e2579b688747878dc27273696f6e3d3970323030302e752c00"]) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a3004e8978f7a6abb77576c5309c9df534038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5", 0x8f}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead000000001517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64", 0x13}, {&(0x7f0000000140)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd", 0x4d}, {&(0x7f0000001a40)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c6c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225d52116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372cdcebb9e3ada079fb014445dd3926473befecaea1fa995b8e65422c93715a52aba5634713227b9ab695b7f77e2ff044fb7e94b917cd37ad642a555bb8d2b884252c48147e3545d2a4b448e8be5aa61f7a14257e9f0f777c9a012b15a1c9139d8a4af53cd48c5a70c0729734947c3ac75eacf941fd1aeb771d9c789f04a95155b5154909441ca153df09dfcbde5472c37ebc5a8788e6cc606014e478fe7e2257309929c09351de59cd3de9f2f3ef3a4e7801019cf34833d5c9f55ed06e388948afbaac5224f0bd51ae32d13de5aec183b5906615ede66537a70d07aa75df2d3ca8cd2ff049728d60b8c7d52d8dee72b062e16b00e064a5de0a44ae0f3e0e50cda01e5f44d966727bde3fdcdb40f53669379e790a841e63549b1bcc6fe8b523f8ca110666611543dba205ac9282839b83f62af961b3743bcf5eb16a4182b10f647aec2b4ca6dce273803ad36b70afa6f04be62d3605b11c053a4bd6963adfca9a145edc0259d93295eed70b44abc59878101801563190a3121a049ef8b77ef44950ea7c6af543387aa37e40800eb03d5f45aaa73f0e23b2eacff9744afb4fb2a4f5a04644fd23302c80fe1389d61d6a589e27ccc7067a5ce6fa2f79b6ed5279a59ecb11074bf31beb27dee216255b003cfed235abba923f70f82f059de8254ce74cfbe709cb0fc8898a3a45acdc2d98a83b1abc22b69c9843c2787f6109c9c7f655c12bd5e7e2b8d60535c50ad4eebcaf4650d9c8d297658abcc802008b13c7edef23e65d645fde267dae6d9db8db53c5b4481370ea24f6657ae740ea0074b787cc47ff24617ed30012816998967f942c963f0abde5d76c9d7e036b4130a1e6c3dd27a010e3b62b17167e91b3df5126f679f0fd7dfce334b10b20f3aeb60628342d735f2488bd2b69b7c20c0d18b7b3efb7e59384383ce09c9508da0952c744627b8dcf15644406579f18d23295a15f3cc92b2ee54474afda3dac13c552f9bae4938354a15360eb2d5991541e332819d852881d0e22376a3977a06df6bf86a0c54237eb89b85be61e8ac7fad3f26ae8cba397736fe0977028ae6eb3342b0e74d93164eb5f7494f66571ac6b734034083007575e1f1e2bc882cb641623336e275c59e2a30ec98ff913cd9df5e7af4c977d8e5549c443d99785337548d36cd617fc82e4386ce36795bf3d4004ded873252a692758ef89175cdd54b08097a6f73d443ae583e42458534acd5aeebc46771b1e624632242f570ab622d2ee8a68f359e11780676e8340ced6c6b7b38632518a1e6f16e502a8c47c8a1b12038ebe181c3edbe3223a611aa060c768744aa8f9c78048a8c3c4d6805930a375af1d02503b639b952d78be871a8ea148f0cf8afb71cafca4d99631f672f531e88a1b8d27716ab2cef302416aa21da7c8206cb6fcd5e66fe966f9ad7b46b617ff02f613b51fee7bf9ec709310b3f126c1f88951855713010e2be1c9d17bf094fb6358c5c9e9970b186eaa123a06f051ad7a4b7e339b163e9f9e5d9108f0e142c33bee0cfc33e469755f14c40c6311bf79221501057e43074f06ff098bab5827acb10e9890697aeb94fd30d241ed521319bb65865396739514be568b99e30002cf5b69c01e550a4258a396840d8d786490609755bcb90e293b01418389a649be1791b3fae9d946666e3b46817bc49f1b84ba99fe5244a26de6a11811cda82e7432b9b4fc8fcd94b7f8b9b78af1a76fbf45297e7e2956b56489132a6be34825af94e7b6c5a33f9f4e5bd962436d603ab73df5a2c33117295046532b3f3207371681c17333fb5f51742f0edb4da3c2d5cefa31a8a772e1d9099adf30e532eaf1ad3a874b830c79fa9665af7f42b50ed581f9099670ef923c2f182690d17c638e90bfa439d21ef8ed5e1a1946b977278bb93da72e58f5c7e78bece53fac3435017072bd4d2385debfb7f29e8b83fff12d0493200142a0c070c239b41b6caac4a8c6294cfec3adbfe056481387e674bda09e08a70ab6678be35f8c1ce7701b82b0edad73dd7d6da94be26197f4b92948e389c2e67a272004427dbf4db45dde59195f9c1c51913b968f97e1cad5707508757952eef02c07ae3feaea1cd90e85b7da429dcf9271c81a6e45cbe7966b3aca0edd532b1a084fc19ea6235e7226cff78b4ccabcb3caef6fe31c7280b435efa2deaf9acc6a7cfb8ba7fa47f3d56b96e4765b6e074408e2d67d6e37139db80fb19c3a9e0a0236f4d776af7ffbe175c5aa30ce0c0496cdf25a54fb122a77fb738a1b56b12c5b26b80568d6c513c6c1f02d3f8acc33cae368d433d1685d785060355bc3690c0ec28a98dfbde3d4686d0fe0861867ebf5cb2c37db8930e3c645739b16564074cb326ec3ee8ff4a5b480e755f063c9e6b3f6ea4bf558ae90e0f3d32d422a0fc284d2fbb0b08af9609180647160803ad18f0a90aaffe76af020063b306c330b0192b527bf3b945648467f53751b44d4ccbf1e8111e0888e80a0e68bfe2c6ab325254f2ad633a9471d7b20117488167f172603e19627fcd179effdeb5f030ff764bb160f91ddc9cd8aa281ee0e2701594fb8fa3a803390b3ff7ed7130693bb74ec856d5fa83b0671518f71002561312244cfb5668415c278d24f5ee5f0617eb3aed7c7d52baa9b5e3d69b9f2baa09d1834505686198987d5a0517a94d5fc39bc64db3dd531eddea09942bb4b51d2964ab48f0b4c753f356d53271d6bd5727f220e6cd56d6866e3bfc1b542b9022bc5fa8a46ea2b4c1208994b5f2ba8631f2e1af84fa9bec1c7d23dee4d2528e49db4e75ce60ab1ab78a31974e49171818603b03c242fdb016d399b865ccacad3f6957009c54065181583a7de2ebb2cf41323ebdf73169a64617ca56600bc693cebc9de80a292f866c8a5314bc69468f50e4b0ce94e46083403e74a95d7be4704ae9f2c58f5f6bc8f29cf94930b179a538779f0596bc0987a6b1dbd8cfdf49eed49317b175e4d87cdedf6fe17ccca3b0ef2c45c3c5d1f76f52a4920eb091f46614d2c2b7779b737c8381d2c0273496cd15a3b6982a15bd22e03c17bbb1bf85f0b215a40f07dbe0452a024f23e51427cd79c60905ceb73e2b314af315ed8ecb7ac937e83b8cc6f2fc253790e27bd38dcd458dce255a10eef8412e71c500d4f58e7eddb61d5dba88df2a3303fb64ead5a84a806b0e62f60a391595c8781d1e481f7a9edffa6075067a69aae1d51dbd055d12a470a3b3c240453980a295c5f16111d67ed0aafc66d629fcd101d8659d3e9ab66fb9c53639e53a8f1b205d2cc2b15d985491c8be3dee1081b7ed76a9c12fea337b9a0cf0e1da5f8137007db125e9ca5a85c46bf67ecd288f2f9ae5e6389f2bb47fc6690568923cb6735147947ee4eb32561db82303ea5aef20bc300d8e47e49614490e68d79490591f5a7ce94615783e2b38b127cebec15beb7c0fa922efef2c6a646c66ddd564f59218681bf5177de08beb56002520808758d8180adbeed291b572d5b80a18ada5da1b667d1bff37d71611142ac2718791bf8876dda922545119a403d13a0da7bd153c9826189ff3d2af2bb4ff16be5e2d6c6bfae9f4dba0476cbec6c8b74b8ce8a4a6fd29494d2819724c151155770265c314588880779204b82e54a59853f3a71fb0e5abb82c887604e48826e2539cc5c1b36fa743dbc9bdd458540abbee05e31a6f5343566f6f538a7c3660f7335bb7bcb4e36963f52bfd9843bc9d602514405985faf1adcb6ee85268d09234effec60a870db1da0e34d0e224b19c84862b9863ca19acf1fe92ce89d9d86ed4a0862d52698b2e62ec4df0dd30ce6e3155647336c44ceef310c482431bda513e59b44465749434bfa606a9264eb028f8957225196788aafe4103a5546cea702b869b2f789b439b13e814db8eaf3b29e8e552c4a87b3936629ad46af529abdfb27f38a90c3922ac4de619b9dcb4fa6c3d41f0a820815889b56fa5d72fa84b8cbab370c4798722d0b61692b5e898a725004eb930d789142d7e0ef570bad58b0f2d777d26aa1a14cf80617608e112467f311b69328e39d18df06356689cceb8c9103658b0c5ef8d1048b38213c42e2ff9a13c6cdc5a527ad5ca75cca9cd433f22738921e54131eb982f4782dda1189f09776f7e1ae767b4d06237a78862aae3ef8b9407e285da74dbdbdc320e6895caba483322be2ecf1ab0172d46d2b449264d3b5ae4940d1cab848e1ec54448ad2142e37a102795ad081318abd95dc7de72b412528493e14a7517f1e3d817ee63d5c104bcdfbb89f48489b08b263f1340d709e7a9403e40b8245b2551c63fcf618f88b51675cbc1745418c4cbc6a4a533b41f8cbdc94981398b347888005a4a046055a468594be0e0043ed0eeeea9c7fcc26a9687df78b84d66be4fd25f0f14bea7c61dd534936343412d6f7334253396125d3e8f48d59d8822c66990aac22763966f149d1ffd56c219d65e71ccf460da3f8571a3a12ff0b2dbfa4c5d7984d722e8d8766631419527dda4c4b7bd86c22a3f815c14353fce560ff7ac2cf57be1b6b59fde91782252d91dca4a4b30bd8a9ff6c1eda4eadf7212397ea6422adf1670e687724f9a3d1a080d584ffc0717ad19405532e2411bafa35ee3214d7bbb82797bf63a3eebe85efbf6661684b261f0c7d1aa628be931251523e775fd7c04", 0xf5d}], 0x3}}], 0x2, 0x4000040) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r5, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) sync_file_range(r0, 0xfffffffffffff800, 0x10004, 0x5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'rw\x00'}, 0x9) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x640) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)=0xfffffffb) (async) r9 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$netlink(0x10, 0x3, 0x14) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0x148, 0x101400) (async) write$evdev(r8, &(0x7f0000000040), 0x0) close_range(r6, r1, 0x0) 1m39.722254s ago: executing program 32 (id=313): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = inotify_init1(0x40000) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x8, 0x0, 0xea}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c766522e2579b688747878dc27273696f6e3d3970323030302e752c00"]) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) (async) sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a3004e8978f7a6abb77576c5309c9df534038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5", 0x8f}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead000000001517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64", 0x13}, {&(0x7f0000000140)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd", 0x4d}, {&(0x7f0000001a40)="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", 0xf5d}], 0x3}}], 0x2, 0x4000040) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_async', 0x1, 0x0) write$cgroup_pid(r5, &(0x7f00000004c0)=0xffffffffffffffff, 0x12) sync_file_range(r0, 0xfffffffffffff800, 0x10004, 0x5) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) write$cgroup_devices(r7, &(0x7f0000000080)={'c', ' *:* ', 'rw\x00'}, 0x9) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x640) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000080)=0xfffffffb) (async) r9 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) socket$netlink(0x10, 0x3, 0x14) (async) syz_open_dev$hiddev(&(0x7f0000000040), 0x148, 0x101400) (async) write$evdev(r8, &(0x7f0000000040), 0x0) close_range(r6, r1, 0x0) 1m9.882859685s ago: executing program 3 (id=890): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) ptrace(0x10, 0x0) (async) ptrace(0x18, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) shutdown(r2, 0x1) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)={0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r5 = syz_usb_connect$cdc_ecm(0x5, 0x65, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x70, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "d766b76668"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x4, 0xfff6, 0xb6}, [@country_functional={0xa, 0x24, 0x7, 0x0, 0x61, [0x3, 0x400]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xff, 0xaa, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xef, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x82, 0x80}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x2, 0xf7, 0xa1, 0x0, 0xfa}, 0x27, &(0x7f0000000240)={0x5, 0xf, 0x27, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x7, 0x1, 0xc8d2, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xff, 0x1, 0x75}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x4, 0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x81d}}, {0xdb, &(0x7f0000000380)=@string={0xdb, 0x3, "d93744e9b99fb40721a5dca9be078007cfc23d618d3c2dd816469d2f6939365cf427ea13cc4ba8b41fcb0963e9c95a72067b3943e153e152aa74620e7f482f01289938d07e4b0883e7bc2eb88f1f673bc10d61c2825e1b7a5e734115741f20c42607d4963795d542b5e119f4134fad25c3944f254629dd54fda25675998e847be7ca4a0d95d9ff58f46443015cf856d2d715371c1e1f49742aba51d6a825061e618e5fc4689cfdea02087b2a787d8d2e493bbf9484e03b70fc6f4a01b04058e6d6c8733ce04bc2212d32685f907829b4a358bc6da9db02441f"}}]}) syz_usb_control_io(r5, &(0x7f0000000780)={0x2c, &(0x7f00000004c0)={0x40, 0x6, 0xf6, {0xf6, 0x23, "c864d8f8a96d96f463a1dfb07ed5b7269d55489b2125c8b9dc0c205636f46ddfe1df807b007c905c91a0616ad42dcd353ba24b1ed03fb2c6f1036b7dc12e43c9b7de154ee46c008bf3f2b12c9134a9b2cca8cdb5f064cb5ea4a907606e87985af4c183f2935361b0cfd760b73adf6233b64902dfc40d99741929ebdd3bb59f03b8dec753574dd9610c81579096cf3ecb096a3e40fdc7dddb82846c6c8a2d0d85e33f20427e6cc1bec49584a95511a2b5ea899e068aaa0e6482d2bb5fe1f729473105baf57510c1fb88990a7c7ecdfd4604ca2407e6da517d034ee2ab361f58de6d05c3076f18d648d9271def976acc15f7734d8d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}, &(0x7f0000000600)={0x0, 0xf, 0xe1, {0x5, 0xf, 0xe1, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x7f, 0xff, 0xff}, @generic={0xb0, 0x10, 0x2, "971a3ea35d1d0c22e5b70ec213b2760030782ad433c3c2c0d486e69e13c4666b586fffb457842737906d685d81058e25f2867d4eff097dee2dc5feeef21fe3358f35f17e3d88537a34f543c38f64e5b5639a702682ccca974b696f8b67d8e0bc0bf1beca09af874bfb015556c3f38253cf6df11524477f37ec2e58290bb061d8a1b5d2c4b046790021bdd666bf17ff8f1c052c6f226a17a4913d0f9e079011405b450af0d9c8980cd0e7e1ed36"}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0x41182ce50c6e79bf, 0x2, [0xffc007, 0xff003f]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x2, 0x8, 0x2, 0x2}]}}, &(0x7f0000000700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x81, 0xb, "5fc603d1", "de60c0f1"}}, &(0x7f0000000740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x2, 0x81, 0x1, 0x6, 0x4}}}, &(0x7f0000000bc0)={0x84, &(0x7f00000007c0)={0x20, 0x0, 0x15, "a063500d5641169afa83d1c497421aec26ff5d2729"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000800000000002000000f0000"], &(0x7f0000000900)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0xb, 0x2, "a447"}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "8aae"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x61}}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_on}]}) r6 = open(&(0x7f0000000080)='./file1\x00', 0x32b902, 0xb0) sendfile(r6, r0, 0x0, 0x80000000) 1m8.601035137s ago: executing program 3 (id=909): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0x6, 0x4000, 0x9, 0xdedb, 0x5, "00000000f79cefe0"}) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) (async, rerun: 64) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x81, 0x4}, {0xfff, 0x5}, {0x7c34, 0x8424}, {0x7c6d, 0x5}, {0x9, 0x4}, {0xe1, 0xc00}, {0x9, 0xe6}, {0x0, 0x5}, {0x8000, 0x3}, {0x2, 0x5}]}) (rerun: 64) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000680)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 1m7.752317972s ago: executing program 3 (id=914): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffd}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3c8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4800}, 0x40050) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd1b}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x37}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x134}, 0x1, 0x0, 0x0, 0x40890}, 0x4000801) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r3 = open$dir(&(0x7f0000000480)='./file0\x00', 0x4e0c2, 0x0) r4 = openat(r3, &(0x7f00000004c0)='./file0\x00', 0x200, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc4, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40000000}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4cf}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r5 = openat$cgroup_ro(r4, &(0x7f00000006c0)='rdma.current\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000700)={0x0, [0x4, 0xa7], 0x2}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000740)={'syz_tun\x00', 0x9}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000780)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r4) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000840)={0x234, r7, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9673}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x880}, 0x41080) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c40)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000001600)=[{{&(0x7f0000000b00)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b40)="935f903b5afbc0389396e89600f7b16286f6b9ad8c2c4b1b669953afd2f49a1aa886c0c44e99bf48dd6ea64a2104beb9b566c1cee56cf484101f54eb9c4e02a140cc217362", 0x45}, {&(0x7f0000000bc0)="628529331cbccce7106486cd1e981e7107e889d10353b8cca825956c0e38d3507743fb3ee34e58598aa4", 0x2a}], 0x2, &(0x7f0000000cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x70}}, {{&(0x7f0000000d40)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000d80)="d3e0e33f1856508e3a918a2b5464", 0xe}, {&(0x7f0000000dc0)="b7e01126994a2991de80ef2c22635160d2da0d74861756dc4b", 0x19}, {&(0x7f0000000e00)="887e640cfd44b6b76c2e882dde27c2a110", 0x11}, {&(0x7f0000000e40)="c303f13526ad4f2a2c8505fab181d5e8672a3a01e8826517ad10b6091d1dfec47a73f0220ca5450f4b0eb941e1f0211ccd81f1fbfc8d293bda21bda79a8766fbf42ae1ede401260c2475b1cd43c8ea4d34df9b401cd4e19d88e31f832f967512af169072b3fa4f0d34cb422b0408f08868d99554069e4314d711a0c077bf69eb6b8d3b34fa35c74a950a463e94ad5c1c913f", 0x92}, {&(0x7f0000000f00)="30ba51233e7d863cf6e12b133d93f5a415aed7", 0x13}, {&(0x7f0000000f40)="8dc30559d1cd7ade59a6143ff12f9b0518", 0x11}], 0x6, &(0x7f0000001000)=[@ip_retopts={{0x94, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x40, [@dev={0xac, 0x14, 0x14, 0x39}]}, @ssrr={0x89, 0x1b, 0xec, [@multicast2, @broadcast, @loopback, @private=0xa010101, @private=0xa010101, @loopback]}, @timestamp={0x44, 0x2c, 0x83, 0x0, 0x2, [0xff, 0xc, 0x7ff, 0x1000, 0x2, 0x800, 0x8001, 0xfffffffe, 0x5, 0x81]}, @generic={0x94, 0x6, "159d6b39"}, @cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "7584cd982704d5d837c4fc757779"}]}, @generic={0x1, 0x12, "c3ac6e5f6ee15a457111f385f892c5d7"}, @ra={0x94, 0x4}]}}}, @ip_tos_int={{0x14}}], 0xb0}}, {{0x0, 0x0, &(0x7f00000010c0)}}, {{&(0x7f0000001100)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001140)}, {&(0x7f0000001180)="b5b0b175459c02bea4dc0a25abd163f063e68d0a389f54912616999b31d42afa8a21925291767f5b556e6ab08d567ff41b47d5d30535159aac221e98c64e9c09ab9ad6525bfb83517868febc8de6d72d817890c6acb0b4622967914b937b1110c5e8b468048f95dcce7c3685a3f812f24cb2814eda83eb308d71", 0x7a}, {&(0x7f0000001200)="acff5bb1156924a1f3d21fc18928780b7ec95dbd5c671f505d71d2941c91c92673c9ee42e6f69187c77dfd7218f8206b1f700ce3fa5781cbf4665c4759557712b1be85c5e7eb8822d4f7c5ac0ad08ab99ae5dda2b481e384408730c4492c1ce407b3d5379c916c132669917fcb3467e8b3e2a457e6575a339e95640020824d68f49327f6f0769ca0e0318d59b92f351f8e69af5a51f0ce49273a8aa2c45f39bb21e41306f458410588ac895d69429ea4225c92d3207698f1d48a576df62fe170f741eb82577cd008cc80aaa5f261b345236a2e4918f8e983164da68ff5ee3bb36e11eb6a156d34db5b8873a33af55450", 0xf0}, {&(0x7f0000001300)="8ba3425a7d4381c478d3940c01548588c9ed1ef2e6d05095ed688548c487b2842d80c72d0647cab343793396dd87b18862f8203f96989814739fa4d17cf7eb889589b38bf0c51e80d7dcf4f7dd33a3e2ab69038a4e427c89d16982f3a28d7f94d793394f20b00a5698c1fadd3a5f77301e28bab5c37854b4956b0b4d84006e8c57420c020dc453bd7818b7efcaf85226446d84c394b2be2c18677089782ab589dd5866fa6a3807356331f1f4329505e32f5553ca3eccdbccada08c682916e590826562399b4af9be7ce261d4647bf852ee31c6ebf27bb4ee3220d7bc7aa3c3", 0xdf}, {&(0x7f0000001400)="f535f472b0880d984904cec09e20defa8d3d8685d4f2839a1a9a0d175f75d1f820a6d430edae8a3dd627287ae7d7011df5d3d0fc9fd733e28422", 0x3a}], 0x5, &(0x7f00000014c0)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x55, [@empty]}, @timestamp_prespec={0x44, 0x2c, 0x6e, 0x3, 0x0, [{@broadcast, 0x6}, {@remote, 0x4}, {@empty, 0x8}, {@private=0xa010102, 0x5}, {@private=0xa010100, 0x1}]}, @cipso={0x86, 0x60, 0x0, [{0x0, 0x8, "f3cfcce0c039"}, {0x6, 0x2}, {0x7, 0xf, "263432c14eeeb0724ed393c98a"}, {0x5, 0x4, "3b04"}, {0x1, 0xe, "0f05866dde823a37b07a71c9"}, {0x0, 0x10, "34bbaa8e1772a797b038d70ac5fd"}, {0x2, 0x8, "eb1c2d13d175"}, {0x7, 0x5, "4a8846"}, {0x0, 0x12, "88e0b50eb56e3fb00dcab942ead79515"}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x108}}], 0x4, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001740)={@local, @multicast2, 0x0}, &(0x7f0000001780)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000002cc0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c80)={&(0x7f00000017c0)={0x14a0, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "6d9353b3a36ffb9c4a1ac0911b63eb7578efddb31e9eae5ece6172801be3fa522616b1726ebe220ca612451356178d0c8c1e2daec5dfa3ab49be8876f7b129acd7833a26d9c459e80a99a1ca681656b11db09f25263d933484e06f08618110bacb870daa180139d9b896743a11f50a054891d05265fc505f7a920a21274170df69435e3916df39b3c2549140a01542da6d64bdbd0a1fac48b5"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\',\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'sip\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe7c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+H++*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '.@%@\xc7*&/!\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8636}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba5}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xb9\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[\\^%{/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\\^\\$(\\\x9f#$%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$\'%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hsr0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-],)\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',$#}2-[!:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.[),X\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1050, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbd8}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "7dcfcc65b85e6f677f81920fb814f753ff91249f90411c4370f42faef1aeaff6e260"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x40}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x14a0}, 0x1, 0x0, 0x0, 0x885}, 0x48d1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffff873, 0x4a}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x78b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x40810) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000003000)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e40)={0x154, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76649947}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc13}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x21fe}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004001}, 0xc5) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000003040)=0x4) pipe2$9p(&(0x7f0000003080), 0x80) r12 = fcntl$getown(r3, 0x9) syz_fuse_handle_req(r5, &(0x7f00000030c0)="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", 0x2000, &(0x7f000000a240)={&(0x7f00000050c0)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x4ed9, 0x2, 0x10, 0x2, 0x9, 0xa155, 0x0, 0x0, 0x10, 0x3}}, &(0x7f0000005140)={0x18, 0x0, 0x6, {0xff}}, &(0x7f0000005180)={0x18, 0x0, 0xffffffff, {0x4}}, &(0x7f00000051c0)={0x18, 0x0, 0x0, {0x7fffffff}}, &(0x7f0000005200)={0x18, 0xfffffffffffffffe, 0x3ff, {0x3ff}}, &(0x7f0000005240)={0x28, 0x0, 0x8, {{0x3, 0x7fffffff, 0x0, r12}}}, &(0x7f0000005280)={0x60, 0x0, 0x2, {{0xfffffffffffffffc, 0x1, 0x7, 0xdb52, 0x6, 0x1, 0x7}}}, &(0x7f0000005300)={0x18, 0x0, 0x7, {0x141}}, &(0x7f0000005340)={0x15, 0x0, 0x5419, {'syz0\x00'}}, &(0x7f0000005380)={0x20, 0x0, 0x7, {0x0, 0x3}}, &(0x7f00000054c0)={0x78, 0xfffffffffffffffe, 0x401, {0xd69, 0xd6, 0x0, {0x5, 0x101, 0x400, 0x2, 0x7, 0x3, 0x7fff, 0x0, 0x786, 0x8000, 0x2, 0x0, 0x0, 0x5, 0x7}}}, &(0x7f0000005640)={0x90, 0xfffffffffffffffe, 0x8000000000000000, {0x1, 0x1, 0x9c8, 0x3, 0x3, 0xfffffffa, {0x0, 0x100000000, 0x0, 0x9d6, 0x5, 0x9, 0xfffffffe, 0x3, 0x9, 0x6000, 0x0, 0x0, 0x0, 0x9, 0x132}}}, &(0x7f0000005700)={0x90, 0xffffffffffffffda, 0xb05, [{0x2, 0x0, 0xf, 0x80000000, 'broadcast-link\x00'}, {0x6, 0x8, 0x7, 0x402c, '[\\^%{/\x00'}, {0x5, 0x1, 0x0, 0x7}, {0x3, 0x8, 0x8, 0x5, 'batadv0\x00'}]}, &(0x7f0000005c40)={0x290, 0xffffffffffffffda, 0x3, [{{0x6, 0x1, 0x2, 0x3, 0x9, 0x5, {0x6, 0x8, 0x3, 0x3ff, 0xf9d, 0x6, 0xbab3, 0x6, 0x1b883592, 0x4000, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x3, 0x2, 0x1, 0x1, '#'}}, {{0x5, 0x2, 0x7, 0x1, 0x10000, 0xf, {0x1, 0xfffffffffffffff9, 0x7fff, 0x5, 0x3, 0x9, 0x9, 0x39fc, 0x2400000, 0x1000, 0x1000, 0x0, 0x0, 0x9, 0x4}}, {0x4, 0x8, 0x4, 0x1, ',\'!^'}}, {{0x5, 0x3, 0x3, 0x4, 0x5, 0x7, {0x6, 0x6, 0x2, 0x2, 0x9, 0x9, 0x7ff, 0x6, 0x449, 0x8000, 0x3, 0x0, 0x0, 0xffff, 0x2375}}, {0x1, 0x8, 0x1, 0x76, ']'}}, {{0x0, 0x3, 0x9, 0x2, 0x2, 0x8001, {0x2, 0x2, 0xffffffff00000000, 0x6, 0x9, 0x8, 0x4c181eef, 0x7a, 0x6, 0x2000, 0x0, 0x0, 0xee00, 0x5dee, 0xb}}, {0x2, 0x17b7, 0x4, 0x8000, '*]#)'}}]}, &(0x7f0000007fc0)={0xa0, 0xffffffffffffffda, 0x6, {{0x2, 0x0, 0x2, 0x8, 0x2, 0xff, {0x1, 0x9dc, 0x6, 0x7, 0x8, 0x3, 0x7, 0x7, 0xf, 0x8000, 0xffffffff, 0x0, 0x0, 0x6, 0x23fc35aa}}, {0x0, 0x4}}}, &(0x7f0000008080)={0x20, 0x0, 0x7, {0x6945, 0x0, 0x36e, 0x3}}, &(0x7f000000a100)={0x130, 0x4a, 0x9, {0x3b, 0x7, 0x0, '\x00', {0x4, 0x7, 0x4, 0xd, 0x0, 0x0, 0x6000, '\x00', 0xfff, 0x2, 0xb, 0x3, {0x0, 0x4}, {0x1ff, 0xeb4}, {0x7}, {0x7ff, 0x3}, 0x100, 0x4, 0xfffffffb, 0xa2d4}}}}) 1m7.736168292s ago: executing program 3 (id=915): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) shutdown(r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000d00)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000495000/0x4000)=nil, 0x4000, 0x13) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x260400, 0x0) sendfile(r4, r0, 0x0, 0x80000000) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 1m7.638308984s ago: executing program 3 (id=916): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f00000020c0)="ede00792fd911126a1cad87bbf89904426d83c7d41d8c596c23225a53cf796d91575b2e337935b49f3cb6a8552a69befacf159348b832d3bbc635d4b7164a94f7cf3fedc747c89c1272e963d88fb6424d3ad9ed3eefde1c6bb7d2633f46f75aee1f64a33b43bd755f483172b9eb0abdc56eae6801e844eae9e4dfc73532abc68b40e7c32303de51a20281ad4280d8f", 0x8f}, {&(0x7f0000002180)="3b1824737a0229ea9021e0b2c08fb126caf6561ac8aaafe7f8b3864a5ebc7adbd639c98bcaf75a3e8a8c17b064fc4e6b9886d54b56f50708ea60fd7639f37d2a0a2cffb184ab66dcb21b12e5713e24e34e63b926104d1aa2658bfb0b9139c5045dc968f8e61eceb1f1bfbebf676669b01d8e028e036f4bf1fd4b47f4652fafec23", 0x81}, {&(0x7f0000000000)="7d970b503f1dbc115be815c6990590ab78b6f84cf2bb9cd2688a09a8b318826ea2e4139d8b31a37fa9f35c8d1b12baccab175f69abe4cc0cda63", 0x3a}, {&(0x7f0000002240)="ef30d575a872e6af2a2d4a21d796505317ba85daa3d93c401730e708c87756fabc930c614cf90aaec8cc89db83e9afb388d5f3835b7a87aca41174fb7dd221eab36a9e", 0x43}, {&(0x7f00000022c0)="ef286d9a176f48abc554c23b69ad225a", 0x10}, {&(0x7f0000002300)="92ebed1677ab01767cc199151da7f08771f0b97979068543c6b748635909411b40601db188dfc6a37486ef5298777f807c8119d0d66ab357ea0a23ce92b399dbe31320b6c11a4ec0f50b2b74c54d3c1415db8888f44a7c2754e7f748cb9251da953d9fe9a387997b4bc3dcea68d8e99053d1954b9e325507fb8ab63c95b050be0a5c970d534962fcfd69405f95c42bf20954d4017b262f63051230ec2659bf0f8a07761cf94c2ebd340abf0e69f5fbe8e7e99cc7433742408141fb17724a616eb4bd8e47b0d2cd95f07f1b9dd5fee27c0e", 0xd1}, {&(0x7f0000002400)="3e2a39314fee5655186390006e6778877542e33e0b022e3fbed8d21e08", 0x1d}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000002440)="ffe48f27b8a193443652927c7a19da1d268277bed7b881c6470d86c50db523a167edf6b8180ac6ceb530cc33169cd3cb23ea44b6eaad3872ce921789aeb6f6d4c3e2e2d330a6e84b379acc339df3974672c660ee8ab808c34fd61439b9295f01402d46b9dd3102858f9c2a4b2c2e8cbbb76fe39d7e3a57cb95dae1980a0b34e016e1449fd2385cd438d2", 0x8a}], 0x9, &(0x7f00000025c0)="9f80095f4d03778c97c06cac62f4488a96b4397a3cc4eefc9ec68bad86a235f41a856bd48e6e286c26d4a6c80f74ed8d6d798b198c2262d7f0b6cad5a4568935386fa9f080843a7071f011af608dc288e1c53966be45c93a82ea5088269ef076b4bca24671d5e81f039e1877eba4cd2fe1195330e52319ac85280d7e8420eea58f54e984b5ab04a6b2759b6312cb5826499bf16ddd58ce72328bf5fb33615a3f682d0908803588bf8bee49da855e0f96c3803aea454842c787b774981b1af5b9415919ba8cdf64483b4c4d6a7a62a2940fcfa545302184", 0xd7, 0x4000000}, 0x44) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x1, 0x6, 0x8008487) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x4000840) read(r2, &(0x7f0000003180)=""/73, 0x49) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m7.560027045s ago: executing program 3 (id=917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r4, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000f5, 0x0, 0x1}]}) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000040)={&(0x7f0000000240)="ecac0b857ac9009ed09eed2ea23896d4b885352328f41858c4736f6ca4dd1c6f0e6ba3304bec062b2f02a1824995aa0447b6634f280fe18aadc148a7f1ffdbf0b128d4b510066d4289bbfdb76815342cb497830230dcc82d1889878ec4e1c9dbd19863f1ac430ef9e4baa512034f7d0ca93756e649cadd3c7793bce20d2c8e469604fe4286fad672431803d37272d58c85cad7880db90e90859ea3c1e3ce88429eddd4bfcc427b85159daaff07e5cf07304e49b037309fe34ea84b1eac1ef4dded9c50df9b1b3f9ef3b2bddc1bfcb39d58a70cc0c45492c37939fb46d4fa014966393a", 0xe3}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80640, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@increfs, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1m7.523923795s ago: executing program 33 (id=917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) (async, rerun: 32) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) setsockopt$inet_opts(r4, 0x0, 0x8, &(0x7f0000000100)="83", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x400000f5, 0x0, 0x1}]}) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000040)={&(0x7f0000000240)="ecac0b857ac9009ed09eed2ea23896d4b885352328f41858c4736f6ca4dd1c6f0e6ba3304bec062b2f02a1824995aa0447b6634f280fe18aadc148a7f1ffdbf0b128d4b510066d4289bbfdb76815342cb497830230dcc82d1889878ec4e1c9dbd19863f1ac430ef9e4baa512034f7d0ca93756e649cadd3c7793bce20d2c8e469604fe4286fad672431803d37272d58c85cad7880db90e90859ea3c1e3ce88429eddd4bfcc427b85159daaff07e5cf07304e49b037309fe34ea84b1eac1ef4dded9c50df9b1b3f9ef3b2bddc1bfcb39d58a70cc0c45492c37939fb46d4fa014966393a", 0xe3}, 0x1, 0x0, 0x0, 0x801}, 0x1) (async, rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (rerun: 64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80640, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000400)=[@increfs, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 1.76173422s ago: executing program 1 (id=2531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f00000000c0), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.522067884s ago: executing program 1 (id=2532): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x0, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200898, 0x0) pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4e6) 1.401097506s ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 1.275737368s ago: executing program 5 (id=2533): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x5, 0x3, 0x2, 0x4, 0x1, 0xe779}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 1.273618198s ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.15330935s ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 1.027248712s ago: executing program 5 (id=2534): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 32) r1 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) renameat2(r2, &(0x7f00000003c0)='./bus\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x4) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f00000003c0)=0x8) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hX1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00') (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async, rerun: 64) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r5) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r6, 0x203, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004011}, 0x2000000) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1.026770772s ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 895.278805ms ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 778.599377ms ago: executing program 1 (id=2535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0x34217000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) eventfd2(0x1, 0x1) 775.727337ms ago: executing program 5 (id=2536): r0 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) r1 = userfaultfd(0x801) r2 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r2, 0xffffffffffff0000, 0x0) read$FUSE(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) madvise(&(0x7f00004e7000/0x3000)=nil, 0x3000, 0x12) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r3, 0x201, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r0}, @release={0x40046306, 0x1}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) (async) userfaultfd(0x801) (async) syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') (async) lseek(r2, 0xffffffffffff0000, 0x0) (async) read$FUSE(r2, 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) madvise(&(0x7f00004e7000/0x3000)=nil, 0x3000, 0x12) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ptrace$getregset(0x4205, r3, 0x201, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000847000/0x1000)=nil, 0x1000}, 0x1}) (async) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="dca65ae67d358391da936a3aaf75e930af885e86d0990679f620fd39973fba3b18a9dff9cdc454a865d5632a7a1d8980356f00fdcceb64e79e131aace82a7c1f26666916cd503ddab20d313e0c80cd3c943f119141f79f0fc7c1b631885c2b0dfc20b025f6781155f31a0bceb94e1042988e47e25684a3fb5f678b7c6b80c275321e1cf66254e817e83f1f1fa3802b80c6c256007fcc7ad1216b0e633f3cf7b65e1c1415992780292a40d01e541501f9bb48cd315b7a7da99856f00d97a39a0c13e0b7a38b03797f1185f6ca85b9b5912ea6977ac701800bae687292a9f3e818ec34306e7f1830e9fb76b91a007dade4941419ce09bd98b9f3dee9763d166bbd645f97868ed9da861cba65e6104806c9aa97308aaebbef2645b3014a157cb013e0884cd6a0bb84ac74c660f06403a756e53f80028dc87f2666cde6b068022ceaef522576b22a3b020d313f2036a9bb3e34e8d5ad29649680df5b87f8597f9a4b6cb70d230178e79a434b7b4ec2f708d9100b57766a68482e6e1deeac8475faac69c62a9f805b5059e540f433c859e1cca11afbff9c9666205a0a8a2acae36c7ef4ea28b2242a0f9ee3fa6610764d05f54bebad7e9d0178b6d839927bc466bd44521fca214d2f8f81c05524edef23eb0c7a61bcddeeeed8f9e7e6427b038dda8e3f122c7c7b867f2a3b0d6c8482bc374eea80a689a241221b2844cd006ca5a1890cea188055c4cafbc4af3f643f391a22ce10eb2d9be9f76b2ea817fded6f04669408e7b886ecb858091e6223e1a12232d7bcfe93ac45371061e5a4b4f05a5318e1294206a490c11c8ec82e30a53245aea19e", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x30, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r0}, @release={0x40046306, 0x1}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) (async) 775.360377ms ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 645.158299ms ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 530.976041ms ago: executing program 1 (id=2537): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r3, 0x12) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 481.594602ms ago: executing program 5 (id=2538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) (rerun: 64) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x2, 0x7, 0x40000001}) (async) syz_clone3(&(0x7f0000001200)={0x5000, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000540)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r3, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000800) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet(0x2, 0x801, 0x0) read$FUSE(r8, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x40, @remote}, 0x2, 0x1, 0x4}}, 0x2e) (async) getsockopt(r10, 0x111, 0x5, 0x0, &(0x7f0000000080)) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet(0x2, 0x800, 0xfc0000) 481.266802ms ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 382.978633ms ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 254.155986ms ago: executing program 5 (id=2539): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x58002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg2\x00', 0x1}) 253.616736ms ago: executing program 1 (id=2540): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f0000001040), 0x282d) 250.417816ms ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 120.666408ms ago: executing program 4 (id=2525): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/165, 0xa5, 0x1, 0x1e}, @flat=@weak_handle={0x77682a85, 0x200a, 0x2}, @flat=@handle={0x73682a85, 0x110f, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 3.40093ms ago: executing program 1 (id=2541): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280), 0x101400, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$cdc_ncm(0x3, 0x94, &(0x7f0000000f00)=ANY=[@ANYBLOB="12010102020000202505a1a44000010203010902820002010f20010904000001020d00000b24060001cc6354c5062d05240001040d240f0102000000020004009d06241a040002052401020404a402080c241b4000f7ff0908400006042402010724140809ff0109058103000205ff0a0904010000020d00000904010102020d00000905820210000905080905030200040201b28280c3bad1e296a0e173ca9db7d06f63834a712929ff58ac"], &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x4, 0x7, 0x3, 0x40, 0x7}, 0xca, &(0x7f00000002c0)={0x5, 0xf, 0xca, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x0, 0x8, 0xe2}, @generic={0xb8, 0x10, 0x4, "4aeac01cac67f7cbdfd69309bbf63a65ac7307fb201d1d1b910694a5345fe0fe45c7e12050fb07cbf648db6366c4ef1f3bdcefd6da763214c9029a27db719755f9a37777b79cff8d9e99f730833c397d2a53cef2245412a0822297c83cbdc63a58fb59237168baf4861f5fb012a1e29144cc24a8e13a4f00fbf0fd7b816d56672a2c1b8f0f40c05f5290eda8ccaa1afd16ef8c4e01044e742ba15e111d9c3ef20d3aa7ca158a952f5587cc3f7b8f2c8b9d73d67b16"}, @ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x827}}, {0xdd, &(0x7f00000003c0)=@string={0xdd, 0x3, "d26fed2904798815bcdf7af4e8d6fd7f052d08a4025137ccc449e712ad5c3dd0375b3f656abc58363cba762f201828cda31120a6019c53c332a3d8e0b6f0da8a15e417f9e4195d2e36b40ea5d2c4fa880556327ef5458a22d0705c5e55aea503f69a26f6bb616b08601ac06887bc882c4cb3e58c3c90afaf6664c0dcd81d81c603fe56e2a5a25458c5b8edbd196ed267576eccf1f35ffd5e3b319bc629b8965ebde8f02fb2ce3a79e492a99e0626e638168762ecfb58d5a26d259021de5467a5e0a85359bed657d01cff318d7a75350e3d57742f632a767ab8b0ec"}}, {0x3d, &(0x7f0000000200)=@string={0x3d, 0x3, "044a85b1cdf2e95894b9d5c32a69567b59dc50620349b269a6ac62bf318f43ff8b214794f6a166fc27627ba4fd6ceb37c82545bf95e6675285e759"}}, {0xf7, &(0x7f00000004c0)=@string={0xf7, 0x3, "7b2341f6aa077d24f014c6165f2f31f24548ea9a3ef0fc8454d158bd77b9d06f06630a1c14b5471d1a6c4c70c5a9848e382f53e7217962cac9fe9354fc46a40cea8ad566ec8156a9a8c3872e9a8ca004a31ac638f8cc1420cc26fb5d167cdd62f523add672f186527cb59572268fb4200e65e8e24b586133021ba1af02d87d351b3a5f234ea284fd1bf398a1de0fcd24d8b47bd87af7c45802995ae3d8717f2676e13fe27daac85fbe99928c616c11b52eddd7f47156f4e6b2c86772f9d404f12dd10ecaf60d2793adb2b435da4077df6a1a17eb08d365ba26165af32dbf848dc8e314d1d78262fac40b883ea68b5638243ada2142"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2c01}}, {0x59, &(0x7f00000005c0)=@string={0x59, 0x3, "19fcfb7889849750828f33fda0e56f1b4d79f58072b6214c668f418c52b82499d6fc08d0de1af0c6bd3bffe3fde45aeb8f4b8671725e90344f60f52170823dd3b54e620b9e411125f3ebdf85dd0d49e41ca28cefb7dd0b"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_usb_control_io(r1, &(0x7f0000000900)={0x2c, &(0x7f0000000780)={0x20, 0x30, 0x6d, {0x6d, 0x3, "8ed916af586e53dc808eaa244900db3072be6139d0b055d49c77be209091a143e70f1feb64f40034bd7328cf4fa2ce3558306062b31a4b5f2e0853c294256eba3b770f25fd5268398a937c32db2ed717f9483e7781552f1243d7598440dabbea6d24f1e9e44ffb04f80e3d"}}, &(0x7f0000000800)={0x0, 0x3, 0x39, @string={0x39, 0x3, "a2a0330ba8049234e56ac6de6a76bdd2da379c3231186085e0bddd05e22e7b015b4bed0469af5820464f0a39d0fdb4fb7bf809ebad8c8e"}}, &(0x7f0000000840)={0x0, 0xf, 0x25, {0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x0, 0xf0f, 0x5, [0xffff00, 0x0, 0xffc17f, 0xc0, 0xc000]}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x80, 0x5e, 0x2, "f8ed8fd2", "81a03860"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x9e, 0x7, 0x7, 0x2, 0x7fff}}}, &(0x7f0000000e00)={0x84, &(0x7f0000000940)={0x70, 0x17, 0xce, "fedf13a4398dee8076115a5b4b05c0e821853299d12fbe9285713a0f9ab5fa54846fe80e14557663845c1273201904c60bdb8f28abbd2188cd053ccb2e952a0ef7eace5cd47eee8fd5671cb8356ab5f7c380333d326aeaec496c2253cab0c9fb8b4a4d83b5042243e699a6ba65a10be8ae5986c04311ac4d241beece17388407ad4b185450f4f5a805756e43ff04d96579b3d6e7c13c942143baa82d0cdb99457dd32486cab6e55cf1cd26cec45b3f1d906d29dbc09a02d6b1129b6d76b971916be68663fcde175a486b7e0d3b02"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x71}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000040)=ANY=[@ANYBLOB="00a29fa3d00a8000d9b79211faaa"], &(0x7f0000000b40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000bc0)={0x40, 0xb, 0x2, "7ea2"}, &(0x7f0000000c00)={0x40, 0xf, 0x2}, &(0x7f0000000c40)={0x40, 0x13, 0x6, @random="3c51a1125cce"}, &(0x7f0000000c80)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000cc0)={0x40, 0x19, 0x2, "1aae"}, &(0x7f0000000d00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000d40)={0x40, 0x1c, 0x1, 0x37}, &(0x7f0000000d80)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000dc0)={0x40, 0x21, 0x1, 0xe}}) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x402}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) (async) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x1fd, 0x80, 0x20000, 0x0, 0x9}, 0x1c) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) fcntl$setown(r7, 0x8, 0x0) (async) fcntl$setown(r7, 0x8, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) (async) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) (async) r8 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) (async) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r7) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r6, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) prctl$PR_SET_SECUREBITS(0x1c, 0x26) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2401, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x800) prctl$PR_SET_SECUREBITS(0x1c, 0x1) syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.77138ms ago: executing program 5 (id=2542): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="00000300000000000000"]) 0s ago: executing program 2 (id=2443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1cc, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x1ac, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x100}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x1cc}}, 0x40885) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) kernel console output (not intermixed with test programs): MGR already set [ 26.174081][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.180900][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.187363][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.194093][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.200745][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.207237][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.213920][ T350] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 26.229589][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.389562][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 26.395907][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.407021][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.417110][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 26.426623][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.435920][ T10] usb 4-1: config 0 descriptor?? [ 26.442053][ T10] hub 4-1:0.0: USB hub found [ 26.556597][ T45] rust_binder: 321: removing orphan mapping 0:1048 [ 26.595668][ T363] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 26.612655][ T363] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 26.629617][ T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.642643][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.651569][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.659763][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.668420][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.676776][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.685392][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.695155][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.703683][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.711997][ T351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.720926][ T351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.744749][ T369] overlay: Bad value for 'redirect_dir' [ 26.745491][ T10] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 26.772763][ T372] SELinux: security_context_str_to_sid () failed with errno=-22 [ 26.782039][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 26.788112][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 26.802402][ T318] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 26.812864][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.816061][ T10] usb 4-1: USB disconnect, device number 2 [ 26.821272][ T318] usb 2-1: Product: syz [ 26.839185][ T318] usb 2-1: Manufacturer: syz [ 26.843912][ T318] usb 2-1: SerialNumber: syz [ 26.964062][ T380] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.054363][ T383] rust_binder: 382 RLIMIT_NICE not set [ 27.064912][ T382] rust_binder: Error while translating object. [ 27.070579][ T382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 27.076950][ T382] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 27.087134][ T382] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:22 [ 27.204424][ T10] rust_binder: 381: removing orphan mapping 0:4240 [ 27.245678][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.255337][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.364773][ T318] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 27.371565][ T318] usb 2-1: No valid video chain found. [ 27.377707][ T387] fido_id[387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 27.379342][ T318] usb 2-1: USB disconnect, device number 2 [ 27.466649][ T391] overlay: filesystem on ./bus is read-only [ 27.626480][ T419] ======================================================= [ 27.626480][ T419] WARNING: The mand mount option has been deprecated and [ 27.626480][ T419] and is ignored by this kernel. Remove the mand [ 27.626480][ T419] option from the mount to silence this warning. [ 27.626480][ T419] ======================================================= [ 27.661671][ T419] binder: Unknown parameter '{l7_: [ 27.661671][ T419] Zm [ 27.661671][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.677322][ T419] binder: Unknown parameter '{l7_: [ 27.677322][ T419] Zm [ 27.677322][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.698729][ T419] binder: Unknown parameter '{l7_: [ 27.698729][ T419] Zm [ 27.698729][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.714065][ T419] binder: Unknown parameter '{l7_: [ 27.714065][ T419] Zm [ 27.714065][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.729357][ T419] binder: Unknown parameter '{l7_: [ 27.729357][ T419] Zm [ 27.729357][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.746689][ T419] binder: Unknown parameter '{l7_: [ 27.746689][ T419] Zm [ 27.746689][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.762047][ T419] binder: Unknown parameter '{l7_: [ 27.762047][ T419] Zm [ 27.762047][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.778560][ T419] binder: Unknown parameter '{l7_: [ 27.778560][ T419] Zm [ 27.778560][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.781781][ T427] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 165) [ 27.793513][ T427] rust_binder: Error while translating object. [ 27.794259][ T419] binder: Unknown parameter '{l7_: [ 27.794259][ T419] Zm [ 27.794259][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.804163][ T427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.810959][ T419] binder: Unknown parameter '{l7_: [ 27.810959][ T419] Zm [ 27.810959][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.825195][ T427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 27.835298][ T419] binder: Unknown parameter '{l7_: [ 27.835298][ T419] Zm [ 27.835298][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.873454][ T419] binder: Unknown parameter '{l7_: [ 27.873454][ T419] Zm [ 27.873454][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.888744][ T419] binder: Unknown parameter '{l7_: [ 27.888744][ T419] Zm [ 27.888744][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.904142][ T419] binder: Unknown parameter '{l7_: [ 27.904142][ T419] Zm [ 27.904142][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.919114][ T419] binder: Unknown parameter '{l7_: [ 27.919114][ T419] Zm [ 27.919114][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.935378][ T419] binder: Unknown parameter '{l7_: [ 27.935378][ T419] Zm [ 27.935378][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.951159][ T419] binder: Unknown parameter '{l7_: [ 27.951159][ T419] Zm [ 27.951159][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.966128][ T419] binder: Unknown parameter '{l7_: [ 27.966128][ T419] Zm [ 27.966128][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.981104][ T419] binder: Unknown parameter '{l7_: [ 27.981104][ T419] Zm [ 27.981104][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 27.996176][ T419] binder: Unknown parameter '{l7_: [ 27.996176][ T419] Zm [ 27.996176][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.011388][ T419] binder: Unknown parameter '{l7_: [ 28.011388][ T419] Zm [ 28.011388][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.027841][ T419] binder: Unknown parameter '{l7_: [ 28.027841][ T419] Zm [ 28.027841][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.042885][ T419] binder: Unknown parameter '{l7_: [ 28.042885][ T419] Zm [ 28.042885][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.057943][ T419] binder: Unknown parameter '{l7_: [ 28.057943][ T419] Zm [ 28.057943][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.076183][ T419] binder: Unknown parameter '{l7_: [ 28.076183][ T419] Zm [ 28.076183][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.091513][ T419] binder: Unknown parameter '{l7_: [ 28.091513][ T419] Zm [ 28.091513][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.106699][ T419] binder: Unknown parameter '{l7_: [ 28.106699][ T419] Zm [ 28.106699][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.121936][ T419] binder: Unknown parameter '{l7_: [ 28.121936][ T419] Zm [ 28.121936][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.137079][ T419] binder: Unknown parameter '{l7_: [ 28.137079][ T419] Zm [ 28.137079][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.152100][ T419] binder: Unknown parameter '{l7_: [ 28.152100][ T419] Zm [ 28.152100][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.167230][ T419] binder: Unknown parameter '{l7_: [ 28.167230][ T419] Zm [ 28.167230][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.182378][ T419] binder: Unknown parameter '{l7_: [ 28.182378][ T419] Zm [ 28.182378][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.197381][ T419] binder: Unknown parameter '{l7_: [ 28.197381][ T419] Zm [ 28.197381][ T419] ACL6I¸oG?tSrLO\#;i)qR2oֲߋ' [ 28.279585][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.309618][ T352] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.332116][ T36] kauditd_printk_skb: 116 callbacks suppressed [ 28.332131][ T36] audit: type=1400 audit(1753470757.530:190): avc: denied { create } for pid=440 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.357733][ T36] audit: type=1400 audit(1753470757.530:191): avc: denied { connect } for pid=440 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.387088][ T36] audit: type=1400 audit(1753470757.580:192): avc: denied { bind } for pid=440 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.406558][ T36] audit: type=1400 audit(1753470757.580:193): avc: denied { ioctl } for pid=440 comm="syz.2.41" path="socket:[4845]" dev="sockfs" ino=4845 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.430952][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.433344][ T36] audit: type=1400 audit(1753470757.580:194): avc: denied { accept } for pid=440 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.473802][ T352] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 28.474107][ T36] audit: type=1400 audit(1753470757.670:195): avc: denied { create } for pid=447 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.483010][ T352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.505155][ T36] audit: type=1400 audit(1753470757.700:196): avc: denied { ioctl } for pid=447 comm="syz.3.43" path="socket:[4856]" dev="sockfs" ino=4856 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 28.519598][ T352] usb 1-1: Product: syz [ 28.535531][ T36] audit: type=1400 audit(1753470757.700:197): avc: denied { relabelfrom } for pid=447 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.540924][ T352] usb 1-1: Manufacturer: syz [ 28.569849][ T352] usb 1-1: SerialNumber: syz [ 28.571477][ T36] audit: type=1400 audit(1753470757.700:198): avc: denied { relabelto } for pid=447 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 28.593946][ T36] audit: type=1400 audit(1753470757.770:199): avc: denied { bind } for pid=450 comm="syz.2.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.664987][ T453] SELinux: security_context_str_to_sid () failed with errno=-22 [ 28.709194][ T460] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.717169][ T460] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 28.725832][ T460] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 28.734146][ T460] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 28.739590][ T31] usb 2-1: device descriptor read/64, error -71 [ 28.843330][ T470] capability: warning: `syz.3.49' uses 32-bit capabilities (legacy support in use) [ 28.979579][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.119616][ T31] usb 2-1: device descriptor read/64, error -71 [ 29.232194][ T476] netlink: 64 bytes leftover after parsing attributes in process `syz.3.50'. [ 29.241498][ T476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.50'. [ 29.359576][ T31] usb 2-1: device descriptor read/64, error -71 [ 29.479710][ T31] usb usb2-port1: attempt power cycle [ 29.489419][ T480] capability: warning: `syz.2.51' uses deprecated v2 capabilities in a way that may be insecure [ 29.713270][ T507] rust_binder: Error while translating object. [ 29.713295][ T507] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 29.719637][ T507] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92 [ 29.810581][ T516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.62'. [ 29.828542][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 29.851802][ T31] usb 2-1: device descriptor read/8, error -71 [ 29.980773][ T31] usb 2-1: device descriptor read/8, error -71 [ 30.131456][ T520] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 30.219616][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 30.240639][ T31] usb 2-1: device descriptor read/8, error -71 [ 30.284352][ T524] cgroup: release_agent respecified [ 30.380666][ T31] usb 2-1: device descriptor read/8, error -71 [ 30.399570][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 30.489668][ T31] usb usb2-port1: unable to enumerate USB device [ 30.551036][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.559185][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 30.567665][ T10] usb 4-1: config 0 has an invalid interface number: 220 but max is 1 [ 30.576200][ T10] usb 4-1: config 0 has an invalid interface number: 10 but max is 1 [ 30.584337][ T10] usb 4-1: config 0 has no interface number 0 [ 30.590481][ T10] usb 4-1: config 0 has no interface number 1 [ 30.596636][ T10] usb 4-1: config 0 interface 220 has no altsetting 0 [ 30.603490][ T10] usb 4-1: config 0 interface 10 has no altsetting 0 [ 30.611738][ T10] usb 4-1: New USB device found, idVendor=2f24, idProduct=7577, bcdDevice=af.4e [ 30.620857][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.628865][ T10] usb 4-1: Product: syz [ 30.633058][ T10] usb 4-1: Manufacturer: syz [ 30.637675][ T10] usb 4-1: SerialNumber: syz [ 30.643006][ T10] usb 4-1: config 0 descriptor?? [ 30.853359][ T10] usb 4-1: USB disconnect, device number 3 [ 31.089712][ T31] usb 1-1: USB disconnect, device number 2 [ 31.207981][ T551] rust_binder: Error while translating object. [ 31.208017][ T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 31.219568][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 31.279714][ T45] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 31.420923][ T559] exFAT-fs (rnullb0): invalid boot record signature [ 31.427596][ T559] exFAT-fs (rnullb0): failed to read boot sector [ 31.434361][ T559] exFAT-fs (rnullb0): failed to recognize exfat type [ 31.451255][ T45] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 31.469575][ T45] usb 3-1: config 179 has no interface number 0 [ 31.474604][ T564] binder: Bad value for 'stats' [ 31.476029][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 31.500575][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 31.525453][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 31.545206][ T45] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 31.567357][ T45] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 31.590392][ T45] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 31.599768][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.609226][ T539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 31.618386][ T45] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 31.633758][ T45] xpad 3-1:179.65: probe with driver xpad failed with error -5 [ 31.818308][ T31] usb 3-1: USB disconnect, device number 2 [ 32.139403][ T605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.92'. [ 32.224578][ T611] Zero length message leads to an empty skb [ 32.265785][ T620] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 32.367630][ T665] SELinux: ebitmap: truncated map [ 32.384360][ T665] SELinux: failed to load policy [ 32.455105][ T679] overlayfs: failed to clone upperpath [ 32.489571][ T45] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 32.660923][ T45] usb 4-1: not running at top speed; connect to a high speed hub [ 32.670697][ T45] usb 4-1: config 1 has an invalid interface number: 185 but max is 0 [ 32.678994][ T45] usb 4-1: config 1 has no interface number 0 [ 32.685485][ T45] usb 4-1: config 1 interface 185 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 32.696794][ T45] usb 4-1: config 1 interface 185 has no altsetting 0 [ 32.705091][ T45] usb 4-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=9f.80 [ 32.714282][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.722490][ T45] usb 4-1: Product: syz [ 32.726832][ T45] usb 4-1: Manufacturer: syz [ 32.731760][ T45] usb 4-1: SerialNumber: syz [ 32.766232][ T699] rust_binder: 87: no such ref 3 [ 32.941005][ T615] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.941031][ T615] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 32.954254][ T45] usb 4-1: unknown interface protocol 0x6c, assuming v1 [ 32.971284][ T45] usb 4-1: cannot find UAC_HEADER [ 32.977988][ T45] snd-usb-audio 4-1:1.185: probe with driver snd-usb-audio failed with error -22 [ 32.988249][ T45] usb 4-1: USB disconnect, device number 4 [ 32.995089][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.185/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.347443][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 33.347464][ T36] audit: type=1400 audit(1753470762.540:246): avc: denied { read } for pid=710 comm="syz.0.114" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.364686][ T713] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 33.392070][ T36] audit: type=1400 audit(1753470762.540:247): avc: denied { open } for pid=710 comm="syz.0.114" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 33.425436][ T729] rust_binder: Write failure EFAULT in pid:59 [ 33.430184][ T36] audit: type=1400 audit(1753470762.560:248): avc: denied { nlmsg_read } for pid=709 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.564821][ T746] fuse: Bad value for 'user_id' [ 33.573598][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 33.582472][ T746] fuse: Bad value for 'user_id' [ 33.622520][ T754] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 33.655873][ T764] bpf: Bad value for 'mode' [ 33.709353][ T36] audit: type=1400 audit(1753470762.900:249): avc: denied { shutdown } for pid=771 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.729793][ T776] veth0_vlan: entered allmulticast mode [ 33.730072][ T36] audit: type=1400 audit(1753470762.900:250): avc: denied { setopt } for pid=771 comm="syz.1.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.815162][ T36] audit: type=1400 audit(1753470763.010:251): avc: denied { getopt } for pid=779 comm="syz.0.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.900987][ T36] audit: type=1400 audit(1753470763.100:252): avc: denied { write } for pid=782 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.928040][ T352] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 33.951390][ T36] audit: type=1400 audit(1753470763.150:253): avc: denied { write } for pid=785 comm="syz.0.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.043058][ T789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 34.043324][ T790] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 34.100686][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.132285][ T352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.146441][ T352] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 34.156684][ T352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.168693][ T352] usb 4-1: config 0 descriptor?? [ 34.323314][ T36] audit: type=1326 audit(1753470763.520:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=802 comm="syz.1.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 34.379555][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.424113][ T36] audit: type=1400 audit(1753470763.620:255): avc: denied { listen } for pid=802 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.519570][ T10] usb 1-1: device descriptor read/64, error -71 [ 34.759575][ T10] usb 1-1: device descriptor read/64, error -71 [ 34.778338][ T768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.786926][ T768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.801065][ T352] usbhid 4-1:0.0: can't add hid device: -71 [ 34.814358][ T352] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 34.823433][ T352] usb 4-1: USB disconnect, device number 5 [ 34.999575][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.129617][ T10] usb 1-1: device descriptor read/64, error -71 [ 35.299556][ T465] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.330562][ T839] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.331378][ T839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.337864][ T839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:110 [ 35.369571][ T10] usb 1-1: device descriptor read/64, error -71 [ 35.420758][ T845] netlink: 'syz.1.154': attribute type 4 has an invalid length. [ 35.428454][ T845] netlink: 17 bytes leftover after parsing attributes in process `syz.1.154'. [ 35.469560][ T465] usb 4-1: Using ep0 maxpacket: 16 [ 35.488564][ T465] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 35.499979][ T10] usb usb1-port1: attempt power cycle [ 35.500067][ T465] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 35.517305][ T465] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65328, setting to 1024 [ 35.531147][ T465] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 35.541502][ T465] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 35.562254][ T465] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.579587][ T465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 35.587629][ T465] usb 4-1: SerialNumber: syz [ 35.600655][ T816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 35.610199][ T860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.611348][ T816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 35.651482][ T860] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=860 comm=syz.2.160 [ 35.669757][ T860] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.717809][ T862] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 35.787612][ T872] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.793710][ T874] netlink: 'syz.1.164': attribute type 12 has an invalid length. [ 35.839265][ T816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 35.852157][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.860357][ T465] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 35.869712][ T465] usb 4-1: USB disconnect, device number 6 [ 35.900825][ T10] usb 1-1: device descriptor read/8, error -71 [ 36.030529][ T10] usb 1-1: device descriptor read/8, error -71 [ 36.666134][ T917] netlink: 'syz.1.178': attribute type 32 has an invalid length. [ 36.719552][ T465] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.882336][ T465] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 36.891604][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.900519][ T465] usb 4-1: Product: syz [ 36.905001][ T465] usb 4-1: Manufacturer: syz [ 36.910286][ T465] usb 4-1: SerialNumber: syz [ 37.119599][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 37.144883][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.158014][ T933] binder: Bad value for 'max' [ 37.280039][ T10] usb 1-1: device descriptor read/8, error -71 [ 37.349565][ T65] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 37.392327][ T10] usb usb1-port1: unable to enumerate USB device [ 37.510875][ T65] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 37.531555][ T65] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 37.555654][ T65] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 37.567145][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.529269][ T984] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.634799][ T991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.641551][ T991] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 38.664882][ T997] syz.0.208 uses obsolete (PF_INET,SOCK_PACKET) [ 38.956883][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 38.956902][ T36] audit: type=1400 audit(1753470768.150:271): avc: denied { map } for pid=1025 comm="syz.1.218" path="socket:[7571]" dev="sockfs" ino=7571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.986370][ T36] audit: type=1400 audit(1753470768.150:272): avc: denied { read } for pid=1025 comm="syz.1.218" path="socket:[7571]" dev="sockfs" ino=7571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.036049][ T1029] KVM: debugfs: duplicate directory 1029-4 [ 39.228005][ T1032] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 39.250015][ T36] audit: type=1400 audit(1753470768.450:273): avc: denied { listen } for pid=1033 comm="syz.0.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.490918][ T465] usb 4-1: USB disconnect, device number 7 [ 39.520501][ T1047] fuse: Bad value for 'user_id' [ 39.525469][ T1047] fuse: Bad value for 'user_id' [ 39.553511][ T1049] usb usb9: usbfs: process 1049 (syz.3.225) did not claim interface 6 before use [ 39.564161][ T36] audit: type=1400 audit(1753470768.760:274): avc: denied { ioctl } for pid=1048 comm="syz.3.225" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 39.598764][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.779640][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 39.785983][ T31] usb 1-1: config 2 has too many interfaces: 54, using maximum allowed: 32 [ 39.794891][ T31] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 39.810917][ T31] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 54 [ 39.820292][ T31] usb 1-1: config 2 interface 0 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0 [ 39.830350][ T31] usb 1-1: config 2 interface 0 has no altsetting 0 [ 39.838755][ T31] usb 1-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 39.848224][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.856467][ T31] usb 1-1: Product: syz [ 39.860955][ T31] usb 1-1: Manufacturer: syz [ 39.865580][ T31] usb 1-1: SerialNumber: syz [ 39.898174][ T36] audit: type=1400 audit(1753470769.090:275): avc: denied { connect } for pid=1061 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.949564][ T465] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.072015][ T1044] __vm_enough_memory: pid: 1044, comm: syz.0.223, bytes: 18014402804453376 not enough memory for the allocation [ 40.092566][ T31] usb 1-1: USB disconnect, device number 7 [ 40.102043][ T465] usb 4-1: Using ep0 maxpacket: 8 [ 40.112661][ T465] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 40.133675][ T465] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 40.142471][ T465] usb 4-1: Product: syz [ 40.146663][ T465] usb 4-1: Manufacturer: syz [ 40.151497][ T465] usb 4-1: SerialNumber: syz [ 40.156921][ T465] usb 4-1: config 0 descriptor?? [ 40.164611][ T65] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 40.173063][ T65] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input4 [ 40.188078][ T1075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.194865][ T36] audit: type=1400 audit(1753470769.390:276): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.224315][ T65] usb 3-1: USB disconnect, device number 3 [ 40.231061][ T36] audit: type=1400 audit(1753470769.390:277): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=466 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.257829][ T1077] rust_binder: Error while translating object. [ 40.257859][ T1077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 40.264129][ T1077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:160 [ 40.834186][ T36] audit: type=1400 audit(1753470770.030:278): avc: denied { create } for pid=1088 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.877414][ T36] audit: type=1400 audit(1753470770.070:279): avc: denied { getopt } for pid=1095 comm="syz.0.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.918300][ T36] audit: type=1400 audit(1753470770.090:280): avc: denied { setattr } for pid=1095 comm="syz.0.240" name="PING" dev="sockfs" ino=8242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.151066][ T465] usb 4-1: USB disconnect, device number 8 [ 41.211213][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.230436][ T1125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.238892][ T1125] rust_binder: Got transaction with invalid offset. [ 41.269134][ T1125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.284928][ T1125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 41.320074][ T1125] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 41.358816][ T1129] rust_binder: Got transaction with invalid offset. [ 41.358862][ T1129] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 41.371031][ T1129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 41.771823][ T1145] netlink: 72 bytes leftover after parsing attributes in process `syz.2.253'. [ 41.835286][ T1145] netlink: 224 bytes leftover after parsing attributes in process `syz.2.253'. [ 41.986911][ T1152] process 'syz.2.255' launched './file0' with NULL argv: empty string added [ 42.450652][ T1178] bpf: Bad value for 'mode' [ 42.492185][ T1178] syz.3.264 (1178): /proc/1177/oom_adj is deprecated, please use /proc/1177/oom_score_adj instead. [ 42.570315][ T1188] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 42.606451][ T1191] cgroup: Name too long [ 42.640060][ T1188] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 42.690203][ T1188] binder: Bad value for 'stats' [ 42.861319][ T1212] sit0: entered promiscuous mode [ 42.872697][ T1212] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 42.889696][ T1212] netlink: 'syz.1.274': attribute type 3 has an invalid length. [ 43.357778][ T1233] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 43.374117][ T1233] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.374168][ T1233] rust_binder: Read failure Err(EFAULT) in pid:224 [ 43.433974][ T1235] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.440736][ T1235] rust_binder: Read failure Err(EFAULT) in pid:226 [ 43.919927][ T65] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 43.944672][ T65] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 43.970131][ T36] kauditd_printk_skb: 23 callbacks suppressed [ 43.970149][ T36] audit: type=1326 audit(1753471029.174:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1275 comm="syz.1.297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 44.039207][ T36] audit: type=1400 audit(1753471029.234:305): avc: denied { write } for pid=1272 comm="syz.0.296" name="udp" dev="proc" ino=4026532368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.168258][ T1296] rust_binder: Write failure EFAULT in pid:241 [ 44.220648][ T36] audit: type=1400 audit(1753471029.424:306): avc: denied { ioctl } for pid=1300 comm="syz.0.304" path="socket:[8805]" dev="sockfs" ino=8805 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.198129][ T36] audit: type=1400 audit(1753471030.394:307): avc: denied { map } for pid=1313 comm="syz.0.308" path="socket:[8887]" dev="sockfs" ino=8887 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 45.260099][ T1320] rust_binder: 253: no such ref 1 [ 45.265259][ T1320] rust_binder: 253: no such ref 2 [ 45.310903][ T1321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 45.370629][ T36] audit: type=1400 audit(1753471030.574:308): avc: denied { mounton } for pid=1324 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 45.450261][ T625] bridge_slave_1: left allmulticast mode [ 45.456075][ T625] bridge_slave_1: left promiscuous mode [ 45.462018][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.470097][ T625] bridge_slave_0: left allmulticast mode [ 45.475774][ T625] bridge_slave_0: left promiscuous mode [ 45.481640][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.552766][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.559890][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.567036][ T1324] bridge_slave_0: entered allmulticast mode [ 45.573384][ T1324] bridge_slave_0: entered promiscuous mode [ 45.579933][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.586980][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.594104][ T1324] bridge_slave_1: entered allmulticast mode [ 45.600397][ T1324] bridge_slave_1: entered promiscuous mode [ 45.615089][ T625] veth1_macvtap: left promiscuous mode [ 45.620628][ T625] veth0_vlan: left promiscuous mode [ 45.707382][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.714494][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.721826][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.728964][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.752113][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.759946][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.770733][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.777806][ T629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.788323][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.795419][ T638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.821583][ T1330] overlay: Bad value for 'uuid' [ 45.838251][ T1324] veth0_vlan: entered promiscuous mode [ 45.853720][ T1324] veth1_macvtap: entered promiscuous mode [ 45.886970][ T36] audit: type=1400 audit(1753471031.084:309): avc: denied { ioctl } for pid=1332 comm="syz.3.316" path="net:[4026532488]" dev="nsfs" ino=4026532488 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.913253][ T36] audit: type=1400 audit(1753471031.084:310): avc: denied { mounton } for pid=1324 comm="syz-executor" path="/root/syzkaller.CEbw65/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.938446][ T1340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=1340 comm=syz.3.317 [ 45.994973][ T1340] netlink: 'syz.3.317': attribute type 7 has an invalid length. [ 46.002755][ T1340] netlink: 'syz.3.317': attribute type 5 has an invalid length. [ 46.011158][ T1340] netlink: 17 bytes leftover after parsing attributes in process `syz.3.317'. [ 46.027938][ T1340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=1340 comm=syz.3.317 [ 46.040797][ T1340] rust_binder: Write failure EINVAL in pid:207 [ 46.063754][ T36] audit: type=1326 audit(1753471031.264:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1343 comm="syz.4.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8d4d8e9a9 code=0x0 [ 46.313586][ T1361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.322830][ T1361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.369716][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 46.519550][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 46.525898][ T31] usb 3-1: config 2 has an invalid interface number: 14 but max is 0 [ 46.534212][ T31] usb 3-1: config 2 has no interface number 0 [ 46.540347][ T31] usb 3-1: config 2 interface 14 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 1024 [ 46.550385][ T31] usb 3-1: config 2 interface 14 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 46.561269][ T31] usb 3-1: config 2 interface 14 has no altsetting 0 [ 46.569360][ T31] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=77.73 [ 46.579822][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.587848][ T31] usb 3-1: Product: syz [ 46.592050][ T31] usb 3-1: Manufacturer: syz [ 46.596703][ T31] usb 3-1: SerialNumber: syz [ 46.602246][ T1349] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.819065][ T31] usb 3-1: USB disconnect, device number 4 [ 46.827200][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.14/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.871364][ T1367] rust_binder: 8: no such ref 3 [ 46.895489][ T36] audit: type=1326 audit(1753471032.094:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1371 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 46.922366][ T36] audit: type=1326 audit(1753471032.094:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1371 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 46.957243][ T1379] mmap: syz.3.329 (1379) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.993700][ T1386] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.313314][ T1401] rust_binder: 29: no such ref 3 [ 47.414742][ T1413] netlink: 'syz.3.340': attribute type 35 has an invalid length. [ 47.516742][ T1421] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 47.535662][ T1426] devpts: called with bogus options [ 47.571905][ T1428] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 47.574316][ T1429] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 48.088415][ T1440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1440 comm=syz.1.348 [ 48.101645][ T1440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.348'. [ 48.364484][ T1457] /dev/rnullb0: Can't open blockdev [ 48.371159][ T1457] fuse: blksize only supported for fuseblk [ 48.498932][ T1462] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.498956][ T1462] rust_binder: Read failure Err(EFAULT) in pid:251 [ 48.499658][ T1472] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 48.519626][ T1472] rust_binder: Read failure Err(EFAULT) in pid:251 [ 48.658949][ T1488] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 48.795377][ T1498] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 48.820424][ T1498] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 48.836896][ T1498] rust_binder: 52: no such ref 2 [ 48.842137][ T1498] rust_binder: Read failure Err(EAGAIN) in pid:52 [ 49.099160][ T36] kauditd_printk_skb: 94 callbacks suppressed [ 49.099182][ T36] audit: type=1400 audit(1753471034.294:408): avc: denied { map } for pid=1515 comm="syz.1.372" path="socket:[10149]" dev="sockfs" ino=10149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 49.138535][ T1518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.461726][ T36] audit: type=1400 audit(1753471034.664:409): avc: denied { view } for pid=1522 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 49.852149][ T1564] netlink: 2 bytes leftover after parsing attributes in process `syz.1.387'. [ 49.862227][ T36] audit: type=1400 audit(1753471035.064:410): avc: denied { read } for pid=1563 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.895279][ T36] audit: type=1400 audit(1753471035.094:411): avc: denied { watch } for pid=1565 comm="syz.1.388" path="/124/control" dev="tmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.968272][ T36] audit: type=1326 audit(1753471035.164:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1571 comm="syz.1.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 50.015717][ T1574] 9pnet_fd: Insufficient options for proto=fd [ 50.109577][ T36] audit: type=1400 audit(1753471035.304:413): avc: denied { create } for pid=1579 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.255879][ T662] tipc: Subscription rejected, illegal request [ 50.844554][ T36] audit: type=1326 audit(1753471036.044:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1598 comm="syz.1.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 51.114771][ T1612] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.116653][ T1612] rust_binder: Error in use_page_slow: ESRCH [ 51.123292][ T1612] rust_binder: use_range failure ESRCH [ 51.129306][ T1612] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 51.135084][ T1612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.143390][ T1612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:308 [ 51.363491][ T1633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.388938][ T1637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.408745][ T1638] rust_binder: Error in use_page_slow: ESRCH [ 51.415352][ T1638] rust_binder: use_range failure ESRCH [ 51.421536][ T1638] rust_binder: Failed to allocate buffer. len:1136, is_oneway:true [ 51.427022][ T1638] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.435052][ T1638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:333 [ 51.572054][ T36] audit: type=1400 audit(1753471036.774:415): avc: denied { mounton } for pid=1642 comm="syz.2.413" path="/103/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 51.603070][ T36] audit: type=1400 audit(1753471036.794:416): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 51.629149][ T36] audit: type=1400 audit(1753471036.824:417): avc: denied { getattr } for pid=1646 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.752689][ T1660] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 51.752849][ T1660] rust_binder: Error in use_page_slow: ESRCH [ 51.759315][ T1660] rust_binder: use_range failure ESRCH [ 51.789559][ T1660] rust_binder: Failed to allocate buffer. len:1080, is_oneway:true [ 51.795136][ T1660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 51.810647][ T1660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:353 [ 51.845656][ T1665] IPv6: NLM_F_CREATE should be specified when creating new route [ 52.828803][ T1700] /dev/rnullb0: Can't open blockdev [ 52.860709][ T1702] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.862149][ T1702] rust_binder: Got transaction with invalid offset. [ 52.868695][ T1702] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.875522][ T1702] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 52.898995][ T1704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:365 [ 52.988282][ T625] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.076157][ T1734] 9pnet_fd: Insufficient options for proto=fd [ 53.092613][ T1737] netlink: 'syz.4.442': attribute type 19 has an invalid length. [ 53.306815][ T1739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=1739 comm=syz.3.443 [ 53.400165][ T1751] binder: Unknown parameter 'defcontextt' [ 53.418460][ T1753] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.418586][ T1753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 53.425742][ T1753] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 189) [ 53.435004][ T1753] rust_binder: Error while translating object. [ 53.445629][ T1753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 53.451854][ T1753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:281 [ 53.630308][ T1783] overlayfs: failed to clone upperpath [ 53.706920][ T1801] devpts: called with bogus options [ 54.622971][ T1814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.466'. [ 54.678782][ T1826] 9pnet_fd: Insufficient options for proto=fd [ 54.753993][ T465] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 54.910620][ T465] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.921491][ T465] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.931349][ T465] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.940468][ T465] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.948454][ T465] usb 4-1: SerialNumber: syz [ 55.049600][ T1716] Bluetooth: hci0: command 0x1003 tx timeout [ 55.049640][ T401] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.069886][ T1840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=1840 comm=syz.2.474 [ 55.155144][ T1812] netlink: 124 bytes leftover after parsing attributes in process `syz.3.465'. [ 55.167619][ T465] usb 4-1: USB disconnect, device number 10 [ 55.316501][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 55.316520][ T36] audit: type=1400 audit(1753471040.514:429): avc: denied { setopt } for pid=1854 comm="syz.1.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 55.349575][ T65] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 55.499987][ T65] usb 3-1: no configurations [ 55.504648][ T65] usb 3-1: can't read configurations, error -22 [ 55.639708][ T65] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 55.682349][ T1857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 55.691636][ T1857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 55.749172][ T1861] rust_binder: Write failure EFAULT in pid:297 [ 55.768439][ T36] audit: type=1400 audit(1753471040.964:430): avc: denied { append } for pid=1863 comm="syz.3.482" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.798219][ T36] audit: type=1400 audit(1753471040.984:431): avc: denied { write } for pid=1863 comm="syz.3.482" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.820014][ T65] usb 3-1: no configurations [ 55.820264][ T36] audit: type=1400 audit(1753471040.984:432): avc: denied { remove_name } for pid=1863 comm="syz.3.482" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.824778][ T65] usb 3-1: can't read configurations, error -22 [ 55.847879][ T36] audit: type=1400 audit(1753471040.984:433): avc: denied { unlink } for pid=1863 comm="syz.3.482" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 55.864111][ T65] usb usb3-port1: attempt power cycle [ 55.886855][ T36] audit: type=1400 audit(1753471041.084:434): avc: denied { create } for pid=1867 comm="syz.1.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 55.927941][ T1872] netlink: 124 bytes leftover after parsing attributes in process `syz.3.485'. [ 55.950837][ T36] audit: type=1326 audit(1753471041.154:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1875 comm="syz.1.487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 55.991422][ T1877] __vm_enough_memory: pid: 1877, comm: syz.3.485, bytes: 18014402804453376 not enough memory for the allocation [ 56.219586][ T65] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 56.240239][ T65] usb 3-1: no configurations [ 56.244894][ T65] usb 3-1: can't read configurations, error -22 [ 56.389573][ T65] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 56.420311][ T65] usb 3-1: no configurations [ 56.425034][ T65] usb 3-1: can't read configurations, error -22 [ 56.432718][ T65] usb usb3-port1: unable to enumerate USB device [ 56.647690][ T36] audit: type=1400 audit(1753471041.844:436): avc: denied { mount } for pid=1894 comm="syz.4.493" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.791628][ T36] audit: type=1400 audit(1753471041.990:437): avc: denied { ioctl } for pid=1922 comm="syz.4.504" path="socket:[12734]" dev="sockfs" ino=12734 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.824600][ T1925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.505'. [ 56.824666][ T36] audit: type=1400 audit(1753471041.990:438): avc: denied { unlink } for pid=1920 comm="syz.3.503" name="#5" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.045745][ T1983] netlink: 80 bytes leftover after parsing attributes in process `syz.4.524'. [ 57.933119][ T2005] batadv_slave_1: entered promiscuous mode [ 57.984816][ T2004] batadv_slave_1: left promiscuous mode [ 58.039621][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 58.060855][ T2007] netlink: 68 bytes leftover after parsing attributes in process `syz.1.534'. [ 58.115286][ T2018] netlink: 80 bytes leftover after parsing attributes in process `syz.1.537'. [ 58.173312][ T2027] /dev/rnullb0: Can't open blockdev [ 58.189542][ T65] usb 4-1: Using ep0 maxpacket: 32 [ 58.199038][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.215262][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.235058][ T65] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.250553][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.260016][ T65] usb 4-1: config 0 descriptor?? [ 58.265963][ T65] hub 4-1:0.0: USB hub found [ 58.367548][ T2034] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 58.419553][ T2038] rust_binder: Error in use_page_slow: ESRCH [ 58.426156][ T2038] rust_binder: use_range failure ESRCH [ 58.432380][ T2038] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 58.437985][ T2038] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 58.446110][ T2038] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:390 [ 58.466147][ T65] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 58.595562][ T2040] tunl0: entered allmulticast mode [ 58.905686][ T2050] netlink: 108 bytes leftover after parsing attributes in process `syz.1.547'. [ 59.257556][ T65] usbhid 4-1:0.0: can't add hid device: -71 [ 59.264068][ T65] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 59.279782][ T2067] binder: Unknown parameter 'permit_directio' [ 59.290066][ T65] usb 4-1: USB disconnect, device number 11 [ 59.537402][ T2091] tmpfs: Unknown parameter 'noinode32' [ 59.705097][ T2115] __nla_validate_parse: 1 callbacks suppressed [ 59.705115][ T2115] netlink: 328 bytes leftover after parsing attributes in process `syz.2.568'. [ 59.851504][ T2119] netlink: 104 bytes leftover after parsing attributes in process `syz.4.570'. [ 60.629542][ T45] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 60.736426][ T2162] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 60.743354][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 60.743374][ T36] audit: type=1400 audit(1753471301.944:447): avc: denied { search } for pid=2163 comm="syz.2.586" name="/" dev="configfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.773314][ T2162] netlink: 'syz.4.585': attribute type 4 has an invalid length. [ 60.779575][ T45] usb 4-1: device descriptor read/64, error -71 [ 60.849741][ T2166] devpts: called with bogus options [ 60.908036][ T36] audit: type=1400 audit(1753471302.104:448): avc: denied { map } for pid=2163 comm="syz.2.586" path="socket:[13318]" dev="sockfs" ino=13318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 60.909003][ T2176] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 60.931354][ T36] audit: type=1400 audit(1753471302.104:449): avc: denied { read } for pid=2163 comm="syz.2.586" name="/" dev="configfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.938706][ T2176] netlink: 944 bytes leftover after parsing attributes in process `syz.2.586'. [ 60.969640][ T36] audit: type=1400 audit(1753471302.104:450): avc: denied { open } for pid=2163 comm="syz.2.586" path="/" dev="configfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 61.029598][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.269568][ T45] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 61.282062][ T2185] tipc: Started in network mode [ 61.286961][ T2185] tipc: Node identity 0000002d00000000000000625f953d01, cluster identity 4711 [ 61.295931][ T2185] tipc: Enabling of bearer rejected, failed to enable media [ 61.439611][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.679543][ T45] usb 4-1: device descriptor read/64, error -71 [ 61.799666][ T45] usb usb4-port1: attempt power cycle [ 62.149592][ T45] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 62.171639][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.300642][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.539574][ T45] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 62.560577][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.690596][ T45] usb 4-1: device descriptor read/8, error -71 [ 62.799650][ T45] usb usb4-port1: unable to enumerate USB device [ 62.839839][ T2258] fuse: Unknown parameter 'use00000000000000000000' [ 62.870880][ T36] audit: type=1326 audit(1753471304.074:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2261 comm="syz.2.617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2a098e9a9 code=0x0 [ 63.900668][ T36] audit: type=1400 audit(1753471305.104:452): avc: denied { create } for pid=2300 comm="syz.4.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 63.920794][ T45] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 64.026682][ T2319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 64.052497][ T2322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 64.070818][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 64.082007][ T45] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 64.092541][ T45] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 64.101811][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.129677][ T36] audit: type=1326 audit(1753471305.334:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 64.153019][ T36] audit: type=1326 audit(1753471305.334:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 64.176548][ T36] audit: type=1326 audit(1753471305.334:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8d4d8d310 code=0x7ffc0000 [ 64.199901][ T36] audit: type=1326 audit(1753471305.334:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2332 comm="syz.4.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8d4d8d310 code=0x7ffc0000 [ 64.210355][ T2335] 9pnet_fd: Insufficient options for proto=fd [ 64.468895][ T2383] fuse: Bad value for 'group_id' [ 64.473957][ T2383] fuse: Bad value for 'group_id' [ 64.549683][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.663'. [ 65.029632][ T45] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 65.040639][ T45] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 65.052373][ T45] usb 4-1: USB disconnect, device number 16 [ 65.359898][ T2408] overlayfs: failed to clone lowerpath [ 65.392322][ T2413] fuse: Bad value for 'fd' [ 65.454343][ T2429] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 65.572177][ T2447] : renamed from bridge0 (while UP) [ 66.001944][ T2509] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:369 [ 66.009329][ T36] kauditd_printk_skb: 60 callbacks suppressed [ 66.009352][ T36] audit: type=1400 audit(1753471307.204:517): avc: denied { mounton } for pid=2508 comm="syz.3.706" path="/121/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 66.083585][ T2517] netlink: 'syz.3.707': attribute type 11 has an invalid length. [ 66.126824][ T2517] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 66.157034][ T2517] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.707'. [ 66.260478][ T36] audit: type=1400 audit(1753471307.464:518): avc: denied { load_policy } for pid=2529 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 66.265071][ T2530] SELinux: ebitmap: truncated map [ 66.319055][ T2530] SELinux: failed to load policy [ 66.380686][ T2539] input: syz1 as /devices/virtual/input/input8 [ 66.389766][ T36] audit: type=1400 audit(1753471307.594:519): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=485 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.422809][ T2539] SELinux: security_context_str_to_sid () failed with errno=-22 [ 66.496916][ T2549] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 66.730105][ T2563] devpts: called with bogus options [ 66.922185][ T2587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.734'. [ 66.924053][ T2589] tipc: Enabling of bearer rejected, failed to enable media [ 67.716797][ T2631] fuse: Bad value for 'fd' [ 67.744614][ T2633] /dev/rnullb0: Can't open blockdev [ 67.749464][ T2635] netlink: 'syz.2.751': attribute type 29 has an invalid length. [ 67.758445][ T2635] netlink: 'syz.2.751': attribute type 4 has an invalid length. [ 67.766429][ T2635] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.751'. [ 67.847402][ T36] audit: type=1326 audit(1753471309.044:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 67.870863][ T36] audit: type=1326 audit(1753471309.044:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 67.907907][ T36] audit: type=1326 audit(1753471309.044:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 67.932611][ T36] audit: type=1326 audit(1753471309.044:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 67.956161][ T36] audit: type=1326 audit(1753471309.044:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 67.980132][ T36] audit: type=1326 audit(1753471309.044:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2639 comm="syz.3.753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7feb90d8e9a9 code=0x7ffc0000 [ 68.015111][ T36] audit: type=1400 audit(1753471309.044:526): avc: denied { watch_reads } for pid=2639 comm="syz.3.753" path="/137" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.072822][ T2656] fuse: Bad value for 'fd' [ 68.308347][ T2684] netlink: 'syz.3.768': attribute type 4 has an invalid length. [ 68.316156][ T2684] netlink: 'syz.3.768': attribute type 5 has an invalid length. [ 68.323883][ T2684] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 68.384382][ T2685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.768'. [ 68.682129][ T2687] fuse: Bad value for 'fd' [ 68.915419][ T2692] devpts: called with bogus options [ 69.179794][ T2701] cgroup2: Unknown parameter 'nsdTBy' [ 69.979549][ T65] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 70.130078][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 70.144622][ T65] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.162055][ T65] usb 4-1: config 1 interface 0 has no altsetting 0 [ 70.174618][ T65] usb 4-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.40 [ 70.184164][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.193394][ T65] usb 4-1: Product: В [ 70.199676][ T65] usb 4-1: Manufacturer: 쬾ब讨&홭⣕솙⸠琦鵗₋恭驸때绛젰啱ꭅ㴘䊢㲟뜭ꮑ諣⃸Ⴞ⧜䬀礄響땈薘㓓嗿⣺쏓䗡ꎚ哊鐓羼㈩뿑侻䒧紒癁ᶼ裞팔죆诎쁅韎퉵蜗緋襗ﶄה簄흩⟈偞倡軂달⸶蜆蘆ꕲ닆砏龼觍写裊⁜閴ณ徿⋤ߑ܇캗퍷쑠㻪崧捖鼒潹꟢ร﬛촞ꮇۅ슩獰⿢轵⅕软᠃䲈뭰 [ 70.239672][ T65] usb 4-1: SerialNumber: syz [ 70.285523][ T2742] netlink: 80 bytes leftover after parsing attributes in process `syz.1.786'. [ 70.388506][ T2753] Invalid ELF header type: 2 != 1 [ 70.454793][ T65] usbhid 4-1:1.0: can't add hid device: -71 [ 70.461914][ T65] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 70.470904][ T65] usb 4-1: USB disconnect, device number 17 [ 70.765955][ T2776] overlayfs: failed to clone upperpath [ 70.826984][ T2791] 9pnet_fd: Insufficient options for proto=fd [ 70.858893][ T2795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.804'. [ 70.879090][ T2797] overlayfs: failed to clone lowerpath [ 70.982485][ T2811] binder: Bad value for 'defcontext' [ 71.001883][ T2813] SELinux: security_context_str_to_sid () failed with errno=-22 [ 72.289620][ T465] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 72.419669][ T465] usb 4-1: device descriptor read/64, error -71 [ 72.669558][ T465] usb 4-1: device descriptor read/64, error -71 [ 72.909587][ T465] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 73.031030][ T36] kauditd_printk_skb: 18 callbacks suppressed [ 73.031050][ T36] audit: type=1400 audit(7013885274.044:545): avc: denied { remount } for pid=2856 comm="syz.1.825" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.057021][ T465] usb 4-1: device descriptor read/64, error -71 [ 73.233313][ T36] audit: type=1400 audit(7013885274.244:546): avc: denied { mounton } for pid=2885 comm="syz.1.836" path="/234/file0" dev="tmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 73.258495][ T2888] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 73.266328][ T2888] netlink: 1 bytes leftover after parsing attributes in process `syz.2.833'. [ 73.286504][ T2892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.838'. [ 73.309553][ T465] usb 4-1: device descriptor read/64, error -71 [ 73.317511][ T2894] tmpfs: Bad value for 'nr_blocks' [ 73.399532][ T36] audit: type=1400 audit(7013885274.404:547): avc: denied { create } for pid=2910 comm="syz.2.845" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 73.429654][ T465] usb usb4-port1: attempt power cycle [ 73.600490][ T36] audit: type=1326 audit(7013885274.614:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2936 comm="syz.2.854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x0 [ 73.661544][ T36] audit: type=1400 audit(7013885274.674:549): avc: denied { associate } for pid=2938 comm="syz.1.853" name="file1" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 73.789552][ T465] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 73.816785][ T465] usb 4-1: device descriptor read/8, error -71 [ 73.960396][ T465] usb 4-1: device descriptor read/8, error -71 [ 74.199557][ T465] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 74.230617][ T465] usb 4-1: device descriptor read/8, error -71 [ 74.360601][ T465] usb 4-1: device descriptor read/8, error -71 [ 74.471283][ T465] usb usb4-port1: unable to enumerate USB device [ 74.479846][ T3020] overlayfs: failed to clone upperpath [ 74.755293][ T3030] overlayfs: failed to resolve './file1': -2 [ 74.761836][ T3030] netlink: 148 bytes leftover after parsing attributes in process `syz.4.877'. [ 74.803924][ T3040] batadv_slave_1: entered promiscuous mode [ 74.811438][ T3039] batadv_slave_1: left promiscuous mode [ 75.389601][ T65] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 75.434813][ T3088] netlink: 228 bytes leftover after parsing attributes in process `syz.1.892'. [ 75.541303][ T65] usb 4-1: config 1 interface 0 altsetting 112 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.552923][ T65] usb 4-1: config 1 interface 0 altsetting 112 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.566227][ T65] usb 4-1: config 1 interface 0 has no altsetting 0 [ 75.574675][ T65] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.584006][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.592245][ T65] usb 4-1: Product: syz [ 75.596478][ T65] usb 4-1: Manufacturer: 㟙龹޴ꔡ꧜޾ހ싏愽㲍䘖⾝㥩尶⟴Ꮺ䯌뒨쬟按짩牚笆䌹叡勡璪๢䡿į館퀸䭾茈볧렮ᾏ㭧ශ쉡庂稛獞ᕁὴ쐠ܦ雔锷䋕伓▭铃╏⥆哝ꋽ畖躙箄쫧ൊ壿擴Ń퉖ᗗ᰷἞瑉먪홑▨Ḇ蹡쑟鱨ࠂ⩻絸⺍㭉钿瀻濼Ŋ䂰죖㱳䯠⇂㈭彨碐됩墣涼䐂 [ 75.627841][ T65] usb 4-1: SerialNumber: syz [ 75.633665][ T3080] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.718901][ T3107] fuse: Bad value for 'user_id' [ 75.723940][ T3107] fuse: Bad value for 'user_id' [ 75.816523][ T3124] overlayfs: failed to clone lowerpath [ 75.850149][ T3079] overlayfs: missing 'lowerdir' [ 75.865656][ T65] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 75.885909][ T65] usb 4-1: USB disconnect, device number 22 [ 75.962480][ T3138] overlayfs: failed to clone upperpath [ 76.448166][ T3143] usb usb8: usbfs: process 3143 (syz.3.909) did not claim interface 0 before use [ 77.090873][ T3149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 77.571666][ T3169] fuse: Bad value for 'fd' [ 77.665806][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.679944][ T3171] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.692628][ T3171] bridge_slave_0: entered allmulticast mode [ 77.708407][ T3171] bridge_slave_0: entered promiscuous mode [ 77.721346][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.734825][ T3171] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.747276][ T3171] bridge_slave_1: entered allmulticast mode [ 77.759295][ T3171] bridge_slave_1: entered promiscuous mode [ 77.882678][ T3171] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.889798][ T3171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.897142][ T3171] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.904242][ T3171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.953789][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.961775][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.981594][ T629] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.988703][ T629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.055833][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.063298][ T625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.094508][ T3171] veth0_vlan: entered promiscuous mode [ 78.127499][ T3171] veth1_macvtap: entered promiscuous mode [ 78.446702][ T3207] netlink: 'syz.4.928': attribute type 16 has an invalid length. [ 78.454588][ T3207] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.928'. [ 78.472817][ T3210] netlink: 'syz.4.928': attribute type 16 has an invalid length. [ 78.480669][ T3210] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.928'. [ 78.659571][ T465] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 78.822077][ T465] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 78.841478][ T465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.851865][ T465] usb 6-1: config 0 has no interface number 0 [ 78.858415][ T465] usb 6-1: New USB device found, idVendor=152e, idProduct=30ca, bcdDevice=ae.11 [ 78.867939][ T465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.889837][ T465] usb 6-1: config 0 descriptor?? [ 78.897322][ T465] usb 6-1: MIDIStreaming interface descriptor not found [ 79.116427][ T3245] 9pnet_fd: Insufficient options for proto=fd [ 79.149958][ T3205] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 79.157061][ T3205] rust_binder: 7: no such ref 2 [ 79.162225][ T3205] rust_binder: Read failure Err(EAGAIN) in pid:7 [ 79.216107][ T65] usb 6-1: USB disconnect, device number 2 [ 79.253149][ T3252] : renamed from bridge0 (while UP) [ 79.302906][ T36] audit: type=1400 audit(7013885280.314:550): avc: denied { name_bind } for pid=3240 comm="syz.2.940" src=144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 79.303642][ T3256] incfs: Error accessing: ./file0. [ 79.339930][ T3256] incfs: mount failed -20 [ 79.480774][ T3264] overlay: ./file1 is not a directory [ 79.691476][ T36] audit: type=1400 audit(7013885280.704:551): avc: denied { getattr } for pid=3270 comm="syz.1.950" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 79.826521][ T3287] netlink: 'syz.5.955': attribute type 2 has an invalid length. [ 80.008716][ T3293] fuse: Bad value for 'fd' [ 80.277597][ T3319] fuse: Bad value for 'fd' [ 80.560609][ T3357] kvm: Disabled LAPIC found during irq injection [ 80.828094][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 80.837042][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 81.089611][ T3388] fuse: Bad value for 'fd' [ 81.202046][ T3410] fuse: Bad value for 'user_id' [ 81.206989][ T3410] fuse: Bad value for 'user_id' [ 81.433725][ T36] audit: type=1400 audit(2000000000.310:552): avc: denied { connect } for pid=3457 comm="syz.5.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.562052][ T36] audit: type=1400 audit(2000000000.440:553): avc: denied { read } for pid=3480 comm="syz.5.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.583221][ T3485] rust_binder: 3481 RLIMIT_NICE not set [ 81.633942][ T3494] fuse: Unknown parameter 'X!Pl-%z6' [ 81.819541][ T31] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 81.971056][ T31] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.983724][ T31] usb 6-1: config 11 has an invalid interface number: 43 but max is 1 [ 81.995276][ T31] usb 6-1: config 11 has an invalid interface number: 27 but max is 1 [ 82.006839][ T31] usb 6-1: config 11 has no interface number 0 [ 82.022515][ T31] usb 6-1: config 11 has no interface number 1 [ 82.044491][ T31] usb 6-1: config 11 interface 43 has no altsetting 0 [ 82.055431][ T31] usb 6-1: config 11 interface 27 has no altsetting 0 [ 82.065631][ T31] usb 6-1: New USB device found, idVendor=0ed1, idProduct=7636, bcdDevice= 1.03 [ 82.074952][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.092282][ T31] usb 6-1: Product: syz [ 82.100341][ T31] usb 6-1: Manufacturer: syz [ 82.108278][ T31] usb 6-1: SerialNumber: syz [ 82.289564][ T3578] fuse: Bad value for 'fd' [ 82.317189][ T36] audit: type=1326 audit(2000000001.190:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3583 comm="syz.1.1032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2dc518e9a9 code=0x0 [ 82.344526][ T31] usb-storage 6-1:11.43: USB Mass Storage device detected [ 82.354529][ T31] usb-storage 6-1:11.43: Quirks match for vid 0ed1 pid 7636: 420 [ 82.402671][ T31] usb-storage 6-1:11.27: USB Mass Storage device detected [ 82.420859][ T31] usb-storage 6-1:11.27: Quirks match for vid 0ed1 pid 7636: 420 [ 82.482214][ T31] usb 6-1: USB disconnect, device number 3 [ 82.537829][ T3627] overlayfs: missing 'lowerdir' [ 82.718657][ T3655] batadv_slave_0: entered promiscuous mode [ 82.729244][ T3656] batadv_slave_0: left promiscuous mode [ 82.742524][ T3661] overlayfs: failed to clone upperpath [ 82.788340][ T3671] overlayfs: missing 'lowerdir' [ 82.813881][ T3679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 82.865622][ T3689] netlink: 'syz.2.1062': attribute type 13 has an invalid length. [ 82.872109][ T3692] rust_binder: 51: no such ref 3 [ 82.878695][ T3689] erspan0: refused to change device tx_queue_len [ 83.009667][ T3708] rust_binder: Write failure EINVAL in pid:58 [ 83.012319][ T3715] netlink: 37 bytes leftover after parsing attributes in process `syz.1.1070'. [ 83.977912][ T3778] /dev/rnullb0: Can't open blockdev [ 83.994892][ T3780] SELinux: security_context_str_to_sid () failed with errno=-22 [ 84.022045][ T3782] input: syz0 as /devices/virtual/input/input10 [ 84.042533][ T3782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3782 comm=syz.5.1097 [ 84.056270][ T3786] fuse: Unknown parameter 'gup_id' [ 84.077097][ T3788] tmpfs: Bad value for 'nr_blocks' [ 84.105919][ T3797] netlink: 'syz.2.1103': attribute type 19 has an invalid length. [ 84.244827][ T3822] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1112'. [ 84.478361][ T36] audit: type=1400 audit(2000000003.350:555): avc: denied { relabelfrom } for pid=3859 comm="syz.4.1124" name="" dev="pipefs" ino=18969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 84.900935][ T3885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3885 comm=syz.2.1131 [ 85.030933][ T3889] 9pnet_fd: Insufficient options for proto=fd [ 85.469644][ T465] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 85.620682][ T465] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 85.634548][ T465] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.643647][ T465] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.651689][ T465] usb 6-1: SerialNumber: ю [ 85.697514][ T3914] veth0_vlan: entered allmulticast mode [ 85.969516][ T36] audit: type=1400 audit(2000000004.840:556): avc: denied { setopt } for pid=3937 comm="syz.1.1150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.970622][ T3938] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1150'. [ 86.013605][ T3940] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1151'. [ 86.262449][ T465] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 86.386409][ T3955] cgroup: fork rejected by pids controller in /syz2 [ 86.489831][ T4093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4093 comm=syz.4.1161 [ 86.490201][ T4092] netlink: 'syz.2.1162': attribute type 4 has an invalid length. [ 86.722355][ T4123] fuse: Bad value for 'rootmode' [ 87.592583][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 87.744412][ T36] audit: type=1400 audit(2000000006.620:557): avc: denied { accept } for pid=4184 comm="syz.4.1193" path="socket:[19184]" dev="sockfs" ino=19184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.007094][ T36] audit: type=1400 audit(2000000006.880:558): avc: denied { create } for pid=4201 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 88.264709][ T9] usb 6-1: USB disconnect, device number 4 [ 88.599526][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 88.749536][ T9] usb 6-1: device descriptor read/64, error -71 [ 88.999542][ T9] usb 6-1: device descriptor read/64, error -71 [ 89.152000][ T36] audit: type=1400 audit(2000000008.030:559): avc: denied { accept } for pid=4280 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.185059][ T4283] tipc: Enabling of bearer rejected, failed to enable media [ 89.222360][ T4290] fuse: Bad value for 'fd' [ 89.239543][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 89.379575][ T9] usb 6-1: device descriptor read/64, error -71 [ 89.427463][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1241'. [ 89.555869][ T36] audit: type=1400 audit(2000000008.430:560): avc: denied { map } for pid=4325 comm="syz.4.1240" path="pipe:[19499]" dev="pipefs" ino=19499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.645426][ T4343] overlayfs: failed to clone upperpath [ 89.649587][ T9] usb 6-1: device descriptor read/64, error -71 [ 89.695004][ T4348] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1247'. [ 89.759679][ T9] usb usb6-port1: attempt power cycle [ 90.011754][ T4362] netlink: 'syz.2.1251': attribute type 27 has an invalid length. [ 90.041058][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.048597][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.099566][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 90.130553][ T9] usb 6-1: device descriptor read/8, error -71 [ 90.260730][ T9] usb 6-1: device descriptor read/8, error -71 [ 90.301034][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 90.310066][ T4388] bridge_slave_1: left allmulticast mode [ 90.315752][ T4388] bridge_slave_1: left promiscuous mode [ 90.321526][ T4388] : port 2(bridge_slave_1) entered disabled state [ 90.329060][ T4388] bridge_slave_0: left allmulticast mode [ 90.334868][ T4388] bridge_slave_0: left promiscuous mode [ 90.340626][ T4388] : port 1(bridge_slave_0) entered disabled state [ 90.499533][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 90.520648][ T9] usb 6-1: device descriptor read/8, error -71 [ 90.634536][ T4407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1262'. [ 90.668772][ T4409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 90.678949][ T9] usb 6-1: device descriptor read/8, error -71 [ 90.745727][ T4422] overlayfs: failed to clone upperpath [ 90.787161][ T4428] fuse: Unknown parameter 'fdC! Ml"8@' [ 90.801805][ T9] usb usb6-port1: unable to enumerate USB device [ 90.897548][ T4458] veth0_vlan: left promiscuous mode [ 90.902922][ T4458] veth0_vlan: entered allmulticast mode [ 90.908850][ T4458] veth0_vlan: entered promiscuous mode [ 90.938665][ T36] audit: type=1326 audit(2000000009.810:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 90.962098][ T36] audit: type=1326 audit(2000000009.810:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 90.985667][ T36] audit: type=1326 audit(2000000009.810:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.008927][ T36] audit: type=1326 audit(2000000009.810:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.032252][ T36] audit: type=1326 audit(2000000009.810:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.055800][ T36] audit: type=1326 audit(2000000009.810:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.079161][ T36] audit: type=1326 audit(2000000009.810:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.102413][ T36] audit: type=1326 audit(2000000009.820:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.125729][ T36] audit: type=1326 audit(2000000009.820:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.2.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 91.162209][ T4466] incfs_lookup_dentry err:-13 [ 91.166919][ T4466] incfs: Can't find or create .index dir in ./bus [ 91.173437][ T4466] incfs: mount failed -13 [ 91.635369][ T4507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1297'. [ 91.662498][ T4514] overlayfs: failed to clone upperpath [ 91.862348][ T4544] overlay: ./bus is not a directory [ 91.869836][ T4543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119 [ 92.206171][ T4550] fuse: Unknown parameter 'g_P%emEF)_id' [ 92.246607][ T4558] fuse: Bad value for 'fd' [ 92.252502][ T4558] 9pnet_fd: p9_fd_create_tcp (4558): problem connecting socket to 127.0.0.1 [ 92.670391][ T4587] netlink: 'syz.1.1324': attribute type 64 has an invalid length. [ 92.768074][ T4610] tipc: Cannot configure node identity twice [ 92.880742][ T4377] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 92.984384][ T4635] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 92.993336][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 93.029557][ T4377] usb 6-1: Using ep0 maxpacket: 16 [ 93.036657][ T4377] usb 6-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.049867][ T4377] usb 6-1: config 1 interface 0 has no altsetting 0 [ 93.058117][ T4377] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 93.067288][ T4377] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.075570][ T4377] usb 6-1: Product: syz [ 93.080403][ T4377] usb 6-1: Manufacturer: syz [ 93.085030][ T4377] usb 6-1: SerialNumber: syz [ 93.100744][ T4651] devpts: called with bogus options [ 93.125171][ T4654] fuse: Bad value for 'fd' [ 93.147859][ T4656] netlink: 'syz.2.1349': attribute type 27 has an invalid length. [ 93.291909][ T4583] bpf: Bad value for 'mode' [ 93.296836][ T4659] bpf: Bad value for 'mode' [ 93.302226][ T4583] x_tables: unsorted underflow at hook 4 [ 93.630487][ T4377] usbhid 6-1:1.0: can't add hid device: -71 [ 93.636561][ T4377] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 93.648258][ T4377] usb 6-1: USB disconnect, device number 9 [ 93.838990][ T4680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 93.839416][ T4680] rust_binder: Error while translating object. [ 93.848705][ T4680] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 93.855012][ T4680] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:141 [ 93.865149][ T4680] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.865650][ T4682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 93.903173][ T4685] /dev/rnullb0: Can't open blockdev [ 93.908962][ T4685] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 93.909317][ T4686] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 94.856033][ T4753] netlink: 'syz.5.1379': attribute type 5 has an invalid length. [ 94.864265][ T4753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=4753 comm=syz.5.1379 [ 95.100273][ T4775] fuse: Bad value for 'fd' [ 95.749402][ T4811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:166 [ 96.010037][ T4815] devpts: called with bogus options [ 97.961851][ T4964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1427'. [ 98.129057][ T4982] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 153) [ 98.129112][ T4982] rust_binder: Error while translating object. [ 98.154620][ T4982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.164681][ T4982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188 [ 98.271188][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 98.273214][ T36] audit: type=1400 audit(2000000006.860:635): avc: denied { sqpoll } for pid=4993 comm="syz.1.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.349289][ T65] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.364064][ T65] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.504315][ T36] audit: type=1400 audit(2000000007.090:636): avc: denied { create } for pid=5012 comm="syz.1.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 98.550249][ T36] audit: type=1400 audit(2000000007.140:637): avc: denied { mount } for pid=5018 comm="syz.1.1444" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.632945][ T5033] /dev/rnullb0: Can't open blockdev [ 98.644829][ T5029] overlayfs: failed to clone upperpath [ 98.726159][ T36] audit: type=1400 audit(2000000007.310:638): avc: denied { connect } for pid=5041 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.775791][ T36] audit: type=1400 audit(2000000007.310:639): avc: denied { map } for pid=5041 comm="syz.4.1453" path="socket:[21609]" dev="sockfs" ino=21609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.805679][ T36] audit: type=1400 audit(2000000007.310:640): avc: denied { accept } for pid=5041 comm="syz.4.1453" path="socket:[21609]" dev="sockfs" ino=21609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.831498][ T36] audit: type=1400 audit(2000000007.420:641): avc: denied { getopt } for pid=5041 comm="syz.4.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.884083][ T36] audit: type=1400 audit(2000000007.470:642): avc: denied { create } for pid=5048 comm="syz.2.1455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 99.562798][ T36] audit: type=1400 audit(2000000008.150:643): avc: denied { write } for pid=5090 comm="syz.5.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.717793][ T5134] netlink: 'syz.5.1482': attribute type 12 has an invalid length. [ 99.744230][ T36] audit: type=1326 audit(2000000008.325:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5136 comm="syz.5.1483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8e7d8e9a9 code=0x0 [ 99.825704][ T5153] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1488'. [ 100.044803][ T5169] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1492'. [ 100.565287][ T5188] tipc: Enabling of bearer rejected, failed to enable media [ 100.668009][ T5196] fuse: Bad value for 'fd' [ 101.324680][ T5230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 101.333959][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1514'. [ 101.522371][ T5256] No source specified [ 101.608612][ T5278] fuse: Bad value for 'user_id' [ 101.613842][ T5278] fuse: Bad value for 'user_id' [ 101.622121][ T5278] 9p: Unknown Cache mode or invalid value 딊 [ 101.650904][ T5278] overlayfs: failed to clone upperpath [ 101.666113][ T5285] tipc: Enabling of bearer rejected, failed to enable media [ 101.786810][ T5305] overlayfs: failed to clone upperpath [ 101.996727][ T5319] 9pnet_fd: Insufficient options for proto=fd [ 102.161685][ T5348] netlink: 'syz.1.1553': attribute type 3 has an invalid length. [ 102.481906][ T5377] 9p: Unknown Cache mode or invalid value 딊 [ 102.500909][ T5381] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=512 sclass=netlink_xfrm_socket pid=5381 comm=syz.2.1564 [ 102.866975][ T5406] netlink: 'syz.4.1573': attribute type 19 has an invalid length. [ 102.938568][ T5415] fuse: Bad value for 'fd' [ 102.960513][ T5420] cgroup: subsys name conflicts with all [ 102.980826][ T5423] syz.5.1579 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.135894][ T5452] devpts: called with bogus options [ 103.156846][ T5454] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 103.527539][ T5482] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 103.608752][ T5500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1605'. [ 103.609693][ T5496] netlink: 'syz.1.1607': attribute type 30 has an invalid length. [ 103.620631][ T5500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1605'. [ 103.630470][ T5501] overlayfs: failed to clone upperpath [ 103.686322][ T5512] x_tables: unsorted underflow at hook 4 [ 103.789715][ T5537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1620'. [ 103.799656][ T5539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1621'. [ 103.809413][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1621'. [ 103.823787][ T5539] tipc: MTU too low for tipc bearer [ 103.907311][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 103.907335][ T36] audit: type=1400 audit(2000000012.485:648): avc: denied { getopt } for pid=5548 comm="syz.1.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.712690][ T5630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=5630 comm=syz.4.1654 [ 104.725665][ T5630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=5630 comm=syz.4.1654 [ 104.738538][ T5630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=5630 comm=syz.4.1654 [ 104.751436][ T5630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=5630 comm=syz.4.1654 [ 105.032716][ T5672] 9pnet_fd: Insufficient options for proto=fd [ 105.074514][ T36] audit: type=1400 audit(2000000013.655:649): avc: denied { name_bind } for pid=5679 comm="syz.4.1676" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 105.075423][ T5680] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1676'. [ 105.126008][ T5687] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 105.600967][ T36] audit: type=1400 audit(2000000014.185:650): avc: denied { write } for pid=5716 comm="syz.5.1689" name="/" dev="configfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.623170][ T36] audit: type=1400 audit(2000000014.185:651): avc: denied { add_name } for pid=5716 comm="syz.5.1689" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.644075][ T36] audit: type=1400 audit(2000000014.185:652): avc: denied { create } for pid=5716 comm="syz.5.1689" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 105.701472][ T5727] 9p: Unknown uid 00000000004294967295 [ 105.723321][ T5727] netlink: 'syz.5.1693': attribute type 25 has an invalid length. [ 105.973136][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1702'. [ 106.032343][ T5762] overlayfs: failed to clone lowerpath [ 106.145113][ T5789] 9pnet_fd: Insufficient options for proto=fd [ 106.148394][ T5790] 9pnet_fd: Insufficient options for proto=fd [ 106.176024][ T5795] netlink: 'syz.1.1718': attribute type 1 has an invalid length. [ 106.211975][ T5799] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1717'. [ 106.224341][ T36] audit: type=1400 audit(2000000014.805:653): avc: denied { create } for pid=5798 comm="syz.1.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 107.239320][ T36] audit: type=1400 audit(2000000015.815:654): avc: denied { create } for pid=5869 comm="syz.5.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.368609][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1752'. [ 107.427169][ T36] audit: type=1400 audit(2000000016.005:655): avc: denied { mounton } for pid=5894 comm="syz.4.1754" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.352402][ T5932] fuse: Unknown parameter '1844674407370955161500000000000000000004' [ 108.986348][ T5998] overlayfs: failed to clone upperpath [ 109.020431][ T5994] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 109.030788][ T36] audit: type=1400 audit(2000000017.615:656): avc: denied { relabelto } for pid=5986 comm="syz.2.1789" name="cgroup" dev="tmpfs" ino=2511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 109.058147][ T36] audit: type=1400 audit(2000000017.615:657): avc: denied { associate } for pid=5986 comm="syz.2.1789" name="cgroup" dev="tmpfs" ino=2511 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0" [ 109.270508][ T6017] fuse: Unknown parameter 'ʩ0xffffffffffffffff' [ 109.754141][ T36] audit: type=1400 audit(2000000018.335:658): avc: denied { unlink } for pid=290 comm="syz-executor" name="cgroup" dev="tmpfs" ino=2511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0" [ 109.768553][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1805'. [ 109.819515][ T36] audit: type=1400 audit(2000000018.375:659): avc: denied { execute } for pid=6085 comm="syz.2.1805" path="/dev/rnullb0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.916973][ T6115] 9pnet_fd: Insufficient options for proto=fd [ 110.092403][ T36] audit: type=1400 audit(2000000018.675:660): avc: denied { connect } for pid=6148 comm="syz.4.1821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.251007][ T6165] fuse: Unknown parameter 'Ǯ6`dVrat* ]n;6cEX;W1)(wևp*' [ 110.292856][ T6175] tipc: Enabling of bearer rejected, failed to enable media [ 110.301024][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 110.363719][ T6178] veth0_to_hsr: entered allmulticast mode [ 110.369850][ T6177] veth0_to_hsr: left allmulticast mode [ 110.423030][ T36] audit: type=1400 audit(2000000019.005:661): avc: denied { create } for pid=6185 comm="syz.5.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 110.807831][ T6234] overlayfs: failed to clone upperpath [ 110.814462][ T6234] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.882022][ T6239] tipc: Enabling of bearer rejected, media not registered [ 111.060475][ T6249] 9pnet_fd: Insufficient options for proto=fd [ 111.424306][ T36] audit: type=1400 audit(2000000020.005:662): avc: denied { create } for pid=6263 comm="syz.4.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.796077][ T6314] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1875'. [ 111.812646][ T6316] netlink: 'syz.5.1877': attribute type 4 has an invalid length. [ 111.822761][ T6318] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 111.831095][ T6318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1878'. [ 111.842188][ T6320] >: renamed from veth0_vlan (while UP) [ 112.615133][ T6369] 9p: Unknown access argument xPA8*+ mQh\F?9r ׵hjj|4?آ@mĂIzLU%: -22 [ 112.696406][ T6381] sock: sock_set_timeout: `syz.4.1896' (pid 6381) tries to set negative timeout [ 113.682489][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 113.703763][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 113.748837][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1922'. [ 114.250456][ T6481] af_packet: tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 114.484833][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1940'. [ 114.649506][ T6540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=6540 comm=syz.4.1947 [ 114.899746][ T6599] fuse: Bad value for 'user_id' [ 114.904743][ T6599] fuse: Bad value for 'user_id' [ 115.115964][ T6643] fuse: Unknown parameter '' [ 115.303382][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1989'. [ 115.520963][ T6688] overlayfs: failed to clone upperpath [ 115.658187][ T6701] fuse: Bad value for 'user_id' [ 115.663947][ T6702] batadv_slave_1: entered promiscuous mode [ 115.694073][ T6701] fuse: Bad value for 'user_id' [ 115.709831][ T6698] batadv_slave_1: left promiscuous mode [ 115.762819][ T6707] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2006'. [ 115.850826][ T36] audit: type=1400 audit(2000000024.435:663): avc: denied { execute_no_trans } for pid=6712 comm="syz.4.2009" path="/482/file0" dev="tmpfs" ino=2677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.023330][ T36] audit: type=1400 audit(2000000024.605:664): avc: denied { bind } for pid=6720 comm="syz.2.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 116.051244][ T6723] 9pnet_fd: Insufficient options for proto=fd [ 116.144063][ T36] audit: type=1400 audit(2000000024.725:665): avc: denied { map } for pid=6733 comm="syz.5.2014" path="socket:[26307]" dev="sockfs" ino=26307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.909095][ T36] audit: type=1326 audit(2000000025.485:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 116.949394][ T36] audit: type=1326 audit(2000000025.485:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 116.989686][ T36] audit: type=1326 audit(2000000025.485:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 117.013210][ T36] audit: type=1326 audit(2000000025.485:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa2a09c1265 code=0x7ffc0000 [ 117.036858][ T36] audit: type=1326 audit(2000000025.485:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 117.062275][ T36] audit: type=1326 audit(2000000025.485:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 117.086037][ T36] audit: type=1326 audit(2000000025.525:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6767 comm="syz.2.2026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2a098e9a9 code=0x7ffc0000 [ 117.167210][ T6783] netlink: 'syz.2.2030': attribute type 4 has an invalid length. [ 117.175902][ T6783] netlink: 'syz.2.2030': attribute type 4 has an invalid length. [ 117.518318][ T6821] netlink: 'syz.1.2042': attribute type 4 has an invalid length. [ 117.857749][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2045'. [ 118.021446][ T6849] overlayfs: missing 'lowerdir' [ 118.076599][ T6860] 9pnet_fd: Insufficient options for proto=fd [ 118.195188][ T6877] tipc: Enabled bearer , priority 10 [ 118.619540][ T6898] overlay: Bad value for 'xino' [ 118.670255][ T6911] 9pnet_fd: Insufficient options for proto=fd [ 119.167027][ T6956] 9pnet_fd: Insufficient options for proto=fd [ 119.185029][ T6958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6958 comm=syz.5.2090 [ 119.199615][ T6958] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2090'. [ 119.259572][ T6973] TCP: TCP_TX_DELAY enabled [ 119.309558][ T65] tipc: Node number set to 1603616078 [ 119.867053][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.874168][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.881521][ T6993] bridge_slave_0: entered allmulticast mode [ 119.887805][ T6993] bridge_slave_0: entered promiscuous mode [ 119.895759][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.902901][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.910310][ T6993] bridge_slave_1: entered allmulticast mode [ 119.916830][ T6993] bridge_slave_1: entered promiscuous mode [ 119.969885][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.977526][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.984858][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.991927][ T6993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.013498][ T641] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.020987][ T641] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.031350][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.038392][ T638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.047888][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.054977][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.083122][ T6993] veth0_vlan: entered promiscuous mode [ 120.095304][ T6993] veth1_macvtap: entered promiscuous mode [ 120.133331][ T6998] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 120.140606][ T6998] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 120.147720][ T6998] rust_binder: 2: no such ref 2 [ 120.153354][ T6998] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 120.293929][ T7025] fuse: blksize only supported for fuseblk [ 120.307742][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2109'. [ 120.352408][ T7031] overlayfs: failed to resolve './file0': -2 [ 120.425487][ T7039] x_tables: duplicate underflow at hook 2 [ 121.114177][ T7066] rust_binder: Error in use_page_slow: ESRCH [ 121.114200][ T7066] rust_binder: use_range failure ESRCH [ 121.126450][ T7066] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 121.138044][ T7066] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 121.153639][ T7066] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:13 [ 121.565092][ T7086] netlink: 'syz.1.2129': attribute type 4 has an invalid length. [ 121.599534][ T7086] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.2129'. [ 121.859592][ T4372] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 121.894322][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2132'. [ 122.004494][ T7105] fuse: Bad value for 'blksize' [ 122.006810][ T36] kauditd_printk_skb: 111 callbacks suppressed [ 122.006832][ T36] audit: type=1400 audit(2000000030.585:784): avc: denied { nlmsg_read } for pid=7106 comm="syz.5.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 122.019715][ T4372] usb 2-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config [ 122.040115][ T36] audit: type=1400 audit(2000000030.625:785): avc: denied { map } for pid=7106 comm="syz.5.2136" path="socket:[27907]" dev="sockfs" ino=27907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.058242][ T4372] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.092431][ T4372] usb 2-1: config 1 interface 0 has no altsetting 0 [ 122.098639][ T36] audit: type=1400 audit(2000000030.625:786): avc: denied { read } for pid=7106 comm="syz.5.2136" path="socket:[27907]" dev="sockfs" ino=27907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 122.140328][ T4372] usb 2-1: string descriptor 0 read error: -22 [ 122.146847][ T4372] usb 2-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40 [ 122.156327][ T4372] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 122.166983][ T4372] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 122.320243][ T7139] 8021q: VLANs not supported on gre0 [ 122.324800][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2146'. [ 122.372390][ T36] audit: type=1400 audit(2000000030.955:787): avc: denied { watch } for pid=7148 comm="syz.5.2149" path="/285/file0" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.372793][ T4372] usb 2-1: USB disconnect, device number 7 [ 123.259566][ T4372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 123.291974][ T7208] 9pnet_fd: Insufficient options for proto=fd [ 123.313247][ T36] audit: type=1326 audit(2000000031.895:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 123.336884][ T36] audit: type=1326 audit(2000000031.895:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 123.360509][ T36] audit: type=1326 audit(2000000031.905:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8d4d8d310 code=0x7ffc0000 [ 123.384371][ T36] audit: type=1326 audit(2000000031.905:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8d4d8d310 code=0x7ffc0000 [ 123.408868][ T36] audit: type=1326 audit(2000000031.905:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 123.419615][ T4372] usb 2-1: Using ep0 maxpacket: 8 [ 123.433455][ T36] audit: type=1326 audit(2000000031.905:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7211 comm="syz.4.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d4d8e9a9 code=0x7ffc0000 [ 123.439702][ T4372] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 123.471207][ T4372] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 123.480446][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.491465][ T4372] hub 2-1:32.0: bad descriptor, ignoring hub [ 123.497505][ T4372] hub 2-1:32.0: probe with driver hub failed with error -5 [ 123.760767][ T7226] netlink: 'syz.2.2177': attribute type 27 has an invalid length. [ 123.782154][ T7228] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.809655][ T4372] usb 2-1: USB disconnect, device number 8 [ 124.359974][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'. [ 125.659522][ T4377] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 125.829625][ T4377] usb 2-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 125.849735][ T4377] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.870408][ T4377] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.879623][ T4377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.887843][ T4377] usb 2-1: Product: syz [ 125.898832][ T7329] overlayfs: failed to clone upperpath [ 125.904486][ T4377] usb 2-1: Manufacturer: syz [ 125.919502][ T4377] usb 2-1: SerialNumber: syz [ 126.128343][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.137121][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.145846][ T7314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.154542][ T7314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.166525][ T4377] usb 2-1: 0:2 : does not exist [ 126.176205][ T4377] usb 2-1: USB disconnect, device number 9 [ 126.184271][ T7087] udevd[7087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 126.430701][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 126.680398][ T7371] raw_sendmsg: syz.1.2223 forgot to set AF_INET. Fix it! [ 127.787228][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2248'. [ 128.092719][ T7483] 9pnet_fd: Insufficient options for proto=fd [ 128.170740][ T7485] incfs: Error accessing: ./file0. [ 128.175943][ T7485] incfs: mount failed -20 [ 128.181204][ T7485] 9pnet_fd: Insufficient options for proto=fd [ 128.342663][ T7502] 9pnet_fd: Insufficient options for proto=fd [ 128.681849][ T7522] overlayfs: failed to clone upperpath [ 128.876059][ T7549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2281'. [ 128.886217][ T7549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 129.086761][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2291'. [ 129.098413][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 129.754974][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 129.754997][ T36] audit: type=1400 audit(2000000038.335:821): avc: denied { shutdown } for pid=7600 comm="syz.4.2300" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.226282][ T7700] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=7700 comm=syz.1.2332 [ 131.261548][ T7706] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2334'. [ 131.271098][ T7707] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2334'. [ 131.611329][ T7777] 9pnet_fd: Insufficient options for proto=fd [ 131.677959][ T7798] bpf: Bad value for 'uid' [ 132.534636][ T7825] sock: sock_timestamping_bind_phc: sock not bind to device [ 132.685958][ T7844] 9pnet_fd: Insufficient options for proto=fd [ 132.701946][ T36] audit: type=1400 audit(2000000041.285:822): avc: denied { map } for pid=7847 comm="syz.2.2376" path="socket:[30206]" dev="sockfs" ino=30206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.725050][ T36] audit: type=1400 audit(2000000041.285:823): avc: denied { read } for pid=7847 comm="syz.2.2376" path="socket:[30206]" dev="sockfs" ino=30206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 132.779004][ T7851] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 132.854493][ T7858] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2379'. [ 132.889996][ T7862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7862 comm=syz.2.2381 [ 133.850410][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2408'. [ 134.532998][ T7979] overlayfs: failed to clone upperpath [ 134.558912][ T7985] 9pnet_fd: Insufficient options for proto=fd [ 134.583829][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 134.592902][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 134.596177][ T7991] overlayfs: failed to clone upperpath [ 134.617746][ T7993] fuse: Bad value for 'user_id' [ 134.622720][ T7993] fuse: Bad value for 'user_id' [ 134.660707][ T8003] cannot load conntrack support for proto=3 [ 135.313773][ T8044] 9pnet_fd: Insufficient options for proto=fd [ 135.496565][ T36] audit: type=1400 audit(2000000044.075:824): avc: denied { bind } for pid=8055 comm="syz.4.2451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.548490][ T8068] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8068 comm=syz.1.2455 [ 136.806353][ T8101] overlayfs: failed to clone upperpath [ 136.812174][ T8100] netlink: 'syz.5.2465': attribute type 3 has an invalid length. [ 136.820543][ T8102] overlayfs: failed to clone upperpath [ 136.969671][ T36] audit: type=1400 audit(2000000045.555:825): avc: denied { execheap } for pid=8135 comm="syz.4.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 137.651329][ T8146] overlayfs: failed to clone upperpath [ 137.812281][ T8165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2484'. [ 137.851554][ T8165] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2484'. [ 137.866178][ T8165] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 138.590024][ T8173] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2486'. [ 138.606463][ T8173] 0M: renamed from gretap0 (while UP) [ 138.617936][ T8173] 0M: entered allmulticast mode [ 138.627855][ T8173] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 138.711188][ T8184] 9pnet_fd: Insufficient options for proto=fd [ 139.655171][ T8197] bpf: Bad value for 'gid' [ 139.785104][ T8229] SELinux: Context system_u:object_r:ksm_device_t:s0 is not valid (left unmapped). [ 139.797434][ T36] audit: type=1400 audit(2000000048.375:826): avc: denied { relabelto } for pid=8228 comm="syz.5.2503" name="memfd:vcan0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ksm_device_t:s0" [ 139.828264][ T36] audit: type=1400 audit(2000000048.375:827): avc: denied { associate } for pid=8228 comm="syz.5.2503" name="memfd:vcan0" dev="tmpfs" ino=173 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ksm_device_t:s0" [ 142.051473][ T8272] cgroup: Bad value for 'name' [ 142.402764][ T8294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2527'. [ 142.421198][ T641] bridge_slave_1: left allmulticast mode [ 142.437056][ T641] bridge_slave_1: left promiscuous mode [ 142.443076][ T641] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.462981][ T641] bridge_slave_0: left allmulticast mode [ 142.478896][ T641] bridge_slave_0: left promiscuous mode [ 142.489284][ T641] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.499926][ T8295] devpts: called with bogus options [ 142.653289][ T641] veth1_macvtap: left promiscuous mode [ 142.661443][ T641] veth0_vlan: left promiscuous mode SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=2443 state=3 status=67 (errno 32: Broken pipe) [ 145.019508][ T36] audit: type=1400 audit(2000000053.595:828): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[2718]" dev="pipefs" ino=2718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 145.127514][ T8377] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 145.155809][ T8377] CPU: 0 UID: 0 PID: 8377 Comm: syz-executor Not tainted 6.12.30-syzkaller-g437e1d666d1d #0 a7e852bab5516ec71c4837645977b8b84c4f3040 [ 145.155850][ T8377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.155870][ T8377] Call Trace: [ 145.155878][ T8377] [ 145.155887][ T8377] __dump_stack+0x21/0x30 [ 145.155922][ T8377] dump_stack_lvl+0x10c/0x190 [ 145.155950][ T8377] ? __cfi_dump_stack_lvl+0x10/0x10 [ 145.155979][ T8377] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 145.156008][ T8377] dump_stack+0x19/0x20 [ 145.156033][ T8377] warn_alloc+0x1bc/0x2a0 [ 145.156058][ T8377] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.156089][ T8377] ? __cfi_warn_alloc+0x10/0x10 [ 145.156113][ T8377] ? __get_vm_area_node+0x1dc/0x3a0 [ 145.156139][ T8377] ? kcov_ioctl+0x5d/0x5c0 [ 145.156164][ T8377] __vmalloc_node_range_noprof+0x68e/0x1420 [ 145.156195][ T8377] ? locks_remove_posix+0x38b/0x580 [ 145.156228][ T8377] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 145.156254][ T8377] ? expand_files+0xd6/0x700 [ 145.156291][ T8377] vmalloc_user_noprof+0x77/0x90 [ 145.156316][ T8377] ? kcov_ioctl+0x5d/0x5c0 [ 145.156340][ T8377] kcov_ioctl+0x5d/0x5c0 [ 145.156364][ T8377] ? bpf_lsm_file_ioctl+0xd/0x20 [ 145.156390][ T8377] ? security_file_ioctl+0x34/0xd0 [ 145.156431][ T8377] ? __cfi_kcov_ioctl+0x10/0x10 [ 145.156455][ T8377] __se_sys_ioctl+0x132/0x1b0 [ 145.156489][ T8377] __x64_sys_ioctl+0x7f/0xa0 [ 145.156522][ T8377] x64_sys_call+0x1878/0x2ee0 [ 145.156551][ T8377] do_syscall_64+0x58/0xf0 [ 145.156575][ T8377] ? clear_bhb_loop+0x50/0xa0 [ 145.156606][ T8377] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 145.156635][ T8377] RIP: 0033:0x7f567838e5ab [ 145.156664][ T8377] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 145.156684][ T8377] RSP: 002b:00007ffeba265650 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.156710][ T8377] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f567838e5ab [ 145.156727][ T8377] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 145.156743][ T8377] RBP: 00007f56785b5f40 R08: 00000000000000da R09: 0000000000000000 [ 145.156758][ T8377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.156774][ T8377] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 145.156791][ T8377] [ 145.156803][ T8377] Mem-Info: [ 145.396156][ T8377] active_anon:2668 inactive_anon:615 isolated_anon:0 [ 145.396156][ T8377] active_file:9787 inactive_file:12530 isolated_file:0 [ 145.396156][ T8377] unevictable:51 dirty:59 writeback:0 [ 145.396156][ T8377] slab_reclaimable:6535 slab_unreclaimable:71928 [ 145.396156][ T8377] mapped:5032 shmem:165 pagetables:360 [ 145.396156][ T8377] sec_pagetables:0 bounce:0 [ 145.396156][ T8377] kernel_misc_reclaimable:0 [ 145.396156][ T8377] free:1553767 free_pcp:3133 free_cma:0 [ 145.441551][ T8377] Node 0 active_anon:10608kB inactive_anon:2460kB active_file:39148kB inactive_file:50120kB unevictable:204kB isolated(anon):0kB isolated(file):0kB mapped:20128kB dirty:236kB writeback:0kB shmem:660kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5604kB pagetables:1348kB sec_pagetables:0kB all_unreclaimable? no [ 145.473851][ T8377] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965996kB mlocked:0kB bounce:0kB free_pcp:5784kB local_pcp:1100kB free_cma:0kB [ 145.504057][ T8377] lowmem_reserve[]: 0 3921 3921 [ 145.508970][ T8377] Normal free:3270956kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10608kB inactive_anon:2460kB active_file:39148kB inactive_file:50120kB unevictable:204kB writepending:236kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15760kB local_pcp:588kB free_cma:0kB [ 145.541629][ T8377] lowmem_reserve[]: 0 0 0 [ 145.546094][ T8377] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 145.567430][ T8377] Normal: 2399*4kB (UME) 1708*8kB (UME) 2396*16kB (UME) 1718*32kB (UME) 1170*64kB (UME) 267*128kB (UME) 144*256kB (UME) 105*512kB (UME) 58*1024kB (UME) 28*2048kB (UME) 701*4096kB (UM) = 3304284kB [ 145.588150][ T8377] 23178 total pagecache pages [ 145.592953][ T8377] 648 pages in swap cache [ 145.597450][ T8377] Free swap = 122216kB [ 145.601643][ T8377] Total swap = 124996kB [ 145.605850][ T8377] 2097051 pages RAM [ 145.609702][ T8377] 0 pages HighMem/MovableOnly [ 145.614387][ T8377] 351522 pages reserved [ 145.618545][ T8377] 0 pages cma reserved [ 145.624722][ T8377] Memory allocations: [ 145.628727][ T8377] 0 B 0 init/main.c:1370 func:do_initcalls [ 145.636017][ T8377] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 145.644226][ T8377] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 145.651915][ T8377] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 145.659879][ T8377] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 145.667851][ T8377] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 145.676490][ T8377] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 145.685085][ T8377] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 145.693296][ T8377] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 145.701418][ T8377] 0 B 0 init/initramfs.c:101 func:find_link [ 146.191254][ T641] bridge_slave_1: left allmulticast mode [ 146.196936][ T641] bridge_slave_1: left promiscuous mode [ 146.202703][ T641] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.210247][ T641] bridge_slave_0: left allmulticast mode [ 146.215886][ T641] bridge_slave_0: left promiscuous mode [ 146.221598][ T641] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.352351][ T641] veth1_macvtap: left promiscuous mode [ 146.357883][ T641] veth0_vlan: left promiscuous mode