last executing test programs: 7.871531832s ago: executing program 3 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x4}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x81200, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x82, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 7.871410852s ago: executing program 3 (id=544): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x7}, 0x1}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b40), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8800) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00', {0x7}, 0x1}) (async) 7.869252682s ago: executing program 3 (id=545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0xa, 0x13a) (async) close_range(r0, 0xffffffffffffffff, 0x0) 7.848893683s ago: executing program 3 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x40000001fe0000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') fallocate(r2, 0x1, 0x100000000, 0x80000000) chdir(&(0x7f0000000180)='./file0\x00') r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r6 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) close(r6) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) sendmmsg(r3, &(0x7f0000000740)=[{{&(0x7f0000000300)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="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", 0x198}, {&(0x7f0000000380)="4270d8170f650f236846ad23c68b7c0458dfc7129bc38c2525f7e535bfb68d172b1073dbf3deead628b2a0fe8d4d4c1af3fa263c8b1a7da709de12e0", 0x3c}, {&(0x7f0000000440)="0bdbd5e768e5ce5795938923f6e79115a7551a23a72188d0904dd100824b96f1821a967d225085b5d9d72f60b38c0ebd588d10ee98607e55f4b71040bcf477c938c772640db3558631c862d40b00c4c04489d3424824fc6f1345a1597c961f1e7adc7b9c9b36089c473e3ebd903a929961", 0x71}], 0x4, &(0x7f0000000500)=[{0x48, 0x103, 0x9, "61e0d0bc086075350284cb767cac1a834ea62051ad6f521339829975695917b6df80eb343f2e7d171476aab036485152c6ea83ed26b5019a"}, {0xb8, 0x115, 0x58f7, "6ccf1401c92990926930a8c756e6ea8c43428c273ab745d9eaea487011702395f236b559895625de4e29ecf7f7eeab1d6108eb0dab5b9fcbba88a016046a25b7a20f80c26310146eed05abd96dcc3033dca0eae209384734cce6322eaf3c6f48ecb4f453717961ca9962e1bda00d30a320a34c36df19b950c5245e1086381d61b3b9e9a3cae569b97be867d9061d3ceabc8afb00ff418fafdf64515efbc00a7a86"}, {0x100, 0x118, 0x3, "078c565f485942b36f08da2aa04b220525bc44980ea3c3d9cd7f6a3347af172f27153ce433b2f6bdecac39c084f839c3d8e5c37672dab4d60137ffe58302b24e2abcc4fae090ab45cad7d509171865f60f32d0dbdb0e47bd13d5b054ae36884c88bd3b59c498b4b53216d5ed185ae2dfff188d535537746568cea98ca34fe843cbf8ba3a38f5059df162c3f0eb36dce11e8af40aa7661ca351cb351fb6a64829a26c0264f04413205fa98e87b103a3dce71cdda4474341b00d4a4fe66afa586337878f0481e4af411a78695e97894feff9e9b1810b97fe8d225f92b9b8dd13707804805f59ecce3691ad"}, {0x18, 0x104, 0x3, "a4d08be2"}], 0x218}}], 0x1, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ARPT_SO_SET_REPLACE(r8, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet6(0xa, 0x2, 0x0) 7.76400464s ago: executing program 3 (id=548): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x6) pread64(r1, &(0x7f0000000100)=""/125, 0x7d, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@afid={'afid', 0x3d, 0x6}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 7.532414009s ago: executing program 3 (id=557): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000000)={0xf000, 0x1000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fsetxattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='%-\x00', 0x3, 0x3) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)) syz_clone3(&(0x7f00000002c0)={0x20002100, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x5}, &(0x7f00000001c0)=""/90, 0x5a, &(0x7f0000000240)=""/6, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) sched_getparam(r1, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000380)={0x9, 0x1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000440)=r4) r5 = signalfd(r3, &(0x7f0000000480)={[0x1]}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000004c0)=""/34, &(0x7f0000000500)=0x22) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) fcntl$setown(r0, 0x8, r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000a00)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000c00)=0x1, 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000c40)) preadv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/8, 0x8}], 0x1, 0x30, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000d00)) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d40), 0x130200, 0x0) ioctl$USBDEVFS_RESETEP(r10, 0x80045503, &(0x7f0000000d80)={0x1}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000dc0)=0x9) close_range(r3, 0xffffffffffffffff, 0x0) 7.500648882s ago: executing program 32 (id=557): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r0, 0x8010aebc, &(0x7f0000000000)={0xf000, 0x1000}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) fsetxattr(r0, &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='%-\x00', 0x3, 0x3) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f00000000c0)) syz_clone3(&(0x7f00000002c0)={0x20002100, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x5}, &(0x7f00000001c0)=""/90, 0x5a, &(0x7f0000000240)=""/6, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) sched_getparam(r1, &(0x7f0000000340)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000380)={0x9, 0x1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000440)=r4) r5 = signalfd(r3, &(0x7f0000000480)={[0x1]}, 0x8) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000004c0)=""/34, &(0x7f0000000500)=0x22) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) fcntl$setown(r0, 0x8, r6) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_CAP_VM_TYPES(r2, 0x4068aea3, &(0x7f0000000a00)) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b00)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000c00)=0x1, 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000c40)) preadv(r7, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/8, 0x8}], 0x1, 0x30, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000d00)) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d40), 0x130200, 0x0) ioctl$USBDEVFS_RESETEP(r10, 0x80045503, &(0x7f0000000d80)={0x1}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000dc0)=0x9) close_range(r3, 0xffffffffffffffff, 0x0) 1.772008397s ago: executing program 1 (id=738): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x78202, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f5"}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.771406596s ago: executing program 1 (id=740): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_io_uring_setup(0x0, &(0x7f0000003400)={0x0, 0x6460, 0x800, 0x0, 0x1d4}, &(0x7f0000003480), &(0x7f00000034c0)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040805}, 0x24040841) recvmmsg(r4, 0x0, 0x0, 0x10043, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x1fd, 0x2, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x3602, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3400}, 0x1c, 0x0}}], 0x1, 0x40800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dc9000) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40002042, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xb5f7e000) (async) write$cgroup_int(r7, &(0x7f0000000180)=0x3, 0x12) (async) futex(&(0x7f0000000040), 0xa, 0x100000, 0x0, 0x0, 0x1) (async) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) (async, rerun: 64) r8 = dup3(r1, r0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 1.695243043s ago: executing program 1 (id=745): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) r2 = getpid() syz_open_procfs$namespace(r2, 0x0) io_setup(0x8f0, 0x0) setns(r1, 0x24020000) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a4a80, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a4a80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x30, r5, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c040}, 0x8885) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c040}, 0x8885) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x1, 0x7, 0x0, 0x4}, {0x401, 0xa8, 0x4, 0xe77}, {0x4, 0x8, 0xd, 0x7f}, {0x200, 0x2, 0x2, 0x6}, {0x101, 0xfd, 0x18, 0x8}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x1, 0x7, 0x0, 0x4}, {0x401, 0xa8, 0x4, 0xe77}, {0x4, 0x8, 0xd, 0x7f}, {0x200, 0x2, 0x2, 0x6}, {0x101, 0xfd, 0x18, 0x8}]}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='nfsd\x00', 0x390c014, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.623177298s ago: executing program 1 (id=746): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fcntl$setlease(r2, 0x400, 0x1) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x18}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @flat=@binder={0x73622a85, 0x1001, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1.539874655s ago: executing program 1 (id=748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001727000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x4, '\"098'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x44, &(0x7f00000005c0)={0x0, 0x6, 0x4, "a1922ca5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1b) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74]}}]}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 1.451925182s ago: executing program 0 (id=753): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = getpgrp(0xffffffffffffffff) waitid(0x1, r4, 0x0, 0x40000000, &(0x7f0000000580)) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="20bd7000fddbdf25020300ff960020002ac4272725000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={@remote, 0x1, 0x0, 0x40, 0x0, [{@private}, {}, {@initdev}, {@initdev}]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000300)={0x8001, r2, 'id0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1000, 0x1}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x3, @any, 0x3ff}, 0xe) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) r8 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000300)={0x10000001}) r9 = fsopen(&(0x7f0000000080)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x84944000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) waitid(0x0, r10, 0x0, 0x8, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.227753071s ago: executing program 0 (id=755): ioprio_set$uid(0x3, 0x0, 0x2004) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe6683000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x412b81, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.11100766s ago: executing program 0 (id=759): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}}, 0x40) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x298, 0x0, 0x400}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x2000000002ffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x4) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x120020, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRES64=r0]) 1.031231266s ago: executing program 1 (id=765): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000480)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)=ANY=[@ANYRES8=r4], 0x20}], 0x1}, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000020001000000000000000141"], 0x34}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xae47, 0x70b5664865acab50) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000d50feb7c93be298dd900", @ANYRES16=r6, @ANYBLOB="00082cbd7000ffdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x2000c004) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[], 0xffdd) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x80021, 0x800000000004, @tid=r9}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0xf3a, 0x0) 691.086624ms ago: executing program 2 (id=780): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000000010063"], 0x38}, 0x2}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x138, 0x1a, 0x10, 0x70bd2a, 0x3, {{@in=@private=0xa010101, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@rand_addr=0x64010102, 0x84d4, 0x6c}, @in6=@private1, {0x100000000, 0x0, 0x0, 0xfffffffffffffffd, 0x803, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x0, 0x80000000, 0xa6}, {0x936d, 0x3d49, 0x4000}, 0x0, 0x3503, 0xa, 0x1, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ptrace$setregs(0xd, r3, 0x0, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (async) ptrace$getregset(0x4205, r3, 0x1, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) capget(&(0x7f0000000100)={0x20071026, r3}, &(0x7f00000001c0)={0xacf, 0x8, 0x401, 0xe84e, 0x40, 0x3ff}) (async) sendfile(r2, r2, 0x0, 0x7ffff000) 676.379995ms ago: executing program 2 (id=781): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000840)=ANY=[@ANYBLOB="1e01000080"], 0xffdd) close_range(r2, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x30, &(0x7f00000003c0)) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), r8) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)={0x14, r9, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8040) r10 = eventfd2(0x6, 0x80800) r11 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000002c0)={0x400002, r10}) close_range(r0, 0xffffffffffffffff, 0x0) r12 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x16800, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r12, 0x770a, 0x0) 331.215023ms ago: executing program 4 (id=786): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x9, &(0x7f0000000100)=[{0x5, 0xe0, 0x36, 0x100}, {0x1, 0x80, 0x75, 0x6}, {0x6, 0x4, 0x7, 0x1}, {0x5, 0x1, 0xb0, 0x3}, {0x9, 0xa, 0x9, 0x4}, {0xd, 0x1, 0x80, 0xe}, {0x4, 0x8, 0x3, 0x9}, {0xcd0, 0x9, 0x2, 0x9}, {0x2, 0x1, 0x23, 0xdaf6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f00000004c0)=r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x995, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000380)={[{0x0, 'rdma'}]}, 0x6) pread64(r5, &(0x7f0000000100)=""/125, 0x7d, 0x1) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpu.stat\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000540)=0x2, 0x8) r7 = dup3(r3, r2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x3100, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000240)={0x2}) 320.732124ms ago: executing program 4 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc9) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 170.565906ms ago: executing program 4 (id=788): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async, rerun: 32) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x4000) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001600)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}, @fda={0x66646185, 0x8, 0x2, 0x2f}, @flat=@handle={0x73682a85, 0x101, 0x7}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 169.190566ms ago: executing program 4 (id=789): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1880, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x45c2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x122, 0x0, 0x32feb97c}]}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) r5 = syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) fremovexattr(r5, &(0x7f0000000080)=@known='security.apparmor\x00') (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f0000000000)=0x4, 0x4) (async) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000000)) (async) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r9, &(0x7f0000002800)=""/209, 0xd1, 0x8) (async) r10 = socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0x10, 0x3, 0x0) splice(r10, 0x0, r11, 0x0, 0x4, 0x5) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) (async) sendfile(r1, r1, 0x0, 0x7ffff000) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17) (async) read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) 167.033276ms ago: executing program 4 (id=790): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x808081, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 162.661367ms ago: executing program 4 (id=791): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010329bd7000fcab49c626"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000200)={[{@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x35, 0x65, 0x2, 0x67, 0x1d, 0x0, 0x34, 0x31]}}, {@mode={'mode', 0x3d, 0x8}}], [{@fsname={'fsname', 0x3d, '-!\x00'}}, {@euid_gt={'euid>', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_gt={'euid>', 0xee00}}, {@dont_appraise}]}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001280)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000000440)={0xdf4, r9, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x23}}}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xbfd, 0x3, 0x6, 0x1, 0x1ff, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x5}, {0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x2}, {0x0, 0x5}, {0x1, 0xa}, {0x7, 0x2}, {}, {0x5, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x2, 0x9}, {0x7}, {}, {0x1, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x7}, {0x0, 0x6}, {0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x5}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x2}, {0x7, 0x6}, {0x2, 0x1}, {0x6, 0x3}, {0x5, 0x6}, {0x4, 0x7}, {0x5, 0x9}, {0x3, 0x3}, {0x5, 0x8}, {0x3, 0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x2}, {0x6, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x2}, {0x6, 0xa}, {0x4, 0x8}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x6}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x4, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x3, 0x8}, {0x3}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x3}, {0x4, 0x5}, {0x4, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0xa}, {0x6, 0x6}, {0x1, 0x5}, {0x1}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0xa}, {0x1}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {}, {0x6}, {0x0, 0x7}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x8}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x2, 0x7}, {0x3, 0x1}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x50f, 0xffff, 0x6cc, 0x1, 0x2, 0x2, 0x436c, 0x9c8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x9, 0x4, 0x7f, 0x374, 0x0, 0x1250]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6, 0x6, 0x8, 0x8, 0x1, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x4, 0x0, 0x5, 0xd, 0x3, 0x4, 0x9]}}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x2, 0x6c59, 0x5, 0x34b5, 0xf2, 0xfff5, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1, 0x5, 0x0, 0xc, 0x2, 0x48, 0x0, 0x6, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3}, {0x7, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x1, 0xa}, {0x4}, {0x2, 0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x6, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0x4, 0xde3, 0x4, 0x9, 0x8, 0x8, 0x3]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x6}, {0x3, 0x1}, {0x3, 0x4}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x7}, {0x0, 0x5}, {0x3, 0xa}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x6}, {0x6, 0x4}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0xa}, {0x1, 0x3}, {0x6, 0x4}, {0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x6}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x5}, {0x7, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x95, 0x5, 0x112, 0x8, 0x34a9, 0xff, 0x3, 0xe737]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfffa, 0x8, 0x5, 0x6, 0x4, 0xc, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xdd, 0x1000, 0x4574, 0xaec7, 0x1, 0x300]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x6, 0x5, 0x6, 0x36, 0x24, 0x24, 0x3, 0xc, 0x18, 0xb, 0x12, 0x48, 0x48, 0x12, 0x36, 0x5d, 0x0, 0x5, 0x6, 0x30, 0x0, 0x6c, 0x12, 0x5, 0x1b, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x704b, 0x0, 0x3, 0x2, 0x4, 0x3, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xc, 0x1000, 0x4, 0x8300, 0xfff, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x7, 0x8, 0x6, 0x9, 0xf, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x1b, 0x5, 0xb, 0x1b, 0x18, 0x48, 0x24, 0x16, 0x1b, 0x5, 0x12, 0x1, 0x18, 0x3, 0x4, 0x12, 0x4, 0x30, 0x4, 0x24, 0xb, 0xa, 0x1, 0x30, 0x3, 0x1, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x7, 0x5}, {0x0, 0x4}, {0x5, 0x1}, {0x7, 0x1}, {0x2, 0x2}, {0x5, 0x2}, {0x5, 0x2}, {0x6, 0x7}, {0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x4, 0x7}, {0x7, 0x8}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x7}, {0x1, 0x4}, {}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x8}, {0x3, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {}, {0x6}, {0x5, 0x8}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x2, 0x9, 0x6, 0xb, 0xceb9, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x7ff, 0xbea, 0x6, 0x8, 0x3ff, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x8, 0xfffc, 0x0, 0x7f, 0x3ff, 0x4]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x8}, {0x2, 0x5}, {0x7}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0x5}, {0x7, 0x5}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x2, 0x7}, {0x3}, {0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x4, 0x2}, {0x7, 0x2}, {0x4, 0x5}, {0x7, 0x8}, {0x6, 0x1}, {0x1, 0x7}, {0x2}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x6, 0x5}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x3}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x4}, {0x5, 0x1}, {0x4, 0x7}, {0x0, 0x4}, {0x5, 0x3}, {0x0, 0x7}, {0x6, 0x5}, {0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x7}, {0x0, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x5, 0x2}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x200, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9, 0x2, 0x1000, 0x0, 0x40, 0x4, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x9}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x7}, {}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x3}, {0x0, 0x8}, {0x5, 0x1}, {0x1}, {0x6}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x1}, {0x2, 0xa}, {0x5}, {0x2, 0x7}, {0x5, 0x5}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x2}, {0x3, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x701, 0x6, 0x9, 0x8001, 0xf7a6, 0xd8, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x4, 0xb1c, 0x6, 0x4, 0x8, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7e, 0x5, 0x6, 0x700, 0x7fff, 0x2, 0x9, 0x7ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x180, 0xa, 0x0, 0x2, 0x200, 0x9, 0x1]}}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x8001, 0x4, 0x2d19, 0x14, 0x0, 0x828a]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x5}, {0x4, 0x4}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x6, 0x8}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x5, 0xa}, {0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x6}, {0x3, 0x1}, {0x2, 0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x2, 0x9}, {0x0, 0x8}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x4}, {0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x7, 0x1}, {0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xbf3, 0x3, 0x7, 0xd65, 0x7, 0x15, 0x5]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x9}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0xa}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x7}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x5, 0x8}, {0x1, 0x1}, {0x4}, {0x3, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {}, {0x1, 0xa}, {0x4, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x7, 0x8}, {0x5, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x5, 0x9}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x4}, {0x0, 0x4}, {}, {0x1, 0x2}, {0x6}, {0x1, 0x6}, {0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x5}, {0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x9}, {0x5, 0x4}, {0x7, 0x7}, {0x7, 0x9}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xaa, 0x100, 0x3, 0xa, 0x7, 0x8, 0x2, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe1, 0xa605, 0x8001, 0x8, 0x3, 0x2, 0x3, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x3e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5, 0x6, 0x9, 0xfffe, 0x8000, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7, 0xf, 0x4, 0x400, 0x9, 0x81, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x8, 0x9, 0x30, 0x1, 0x6c, 0xb, 0x5, 0x5, 0x9, 0x9, 0x18, 0x5, 0x2287f3bb55702312, 0x12, 0x30, 0x4, 0x1b, 0x1b, 0x18, 0x35, 0x18, 0x5, 0x3, 0x4, 0x24, 0xb]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1}, {0x3, 0xa}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x8}, {0x5, 0x8}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x9}, {0x2, 0x6}, {0x2, 0x12}]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x34, 0x60, 0xc, 0x6c, 0x12, 0xb, 0x16, 0xc, 0x23, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x9, 0x8, 0x81, 0x8, 0x9, 0xd, 0x6]}}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7, 0xfc00, 0x100, 0x1ff, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x10, 0x6, 0xb, 0x0, 0x7, 0x1e5, 0x2]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0x9}, {0x3, 0x5}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0xa}, {0x2}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x5, 0x2}, {0x1, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x7, 0x1}, {0x5, 0x9}, {0x0, 0x3}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0x6, 0xfff8, 0x0, 0x0, 0x1, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x1, 0x0, 0x30, 0x1, 0x16, 0x5, 0x6, 0x4, 0xf, 0x30, 0x65b2abd652f259ba, 0x36, 0x9, 0x18, 0x69, 0x13, 0x12, 0xb, 0x36, 0x24, 0x30, 0xb, 0x1, 0x5, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x9, 0x2, 0x2, 0x8, 0x4, 0x2f2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x7, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x2, 0x7}, {0x7, 0xa}, {0x4, 0x7}, {0x7, 0x1}, {0x5, 0x9}, {}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x10}, {}, {0x3, 0x9}, {}, {0x7, 0x2}, {0x2, 0x7}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x2, 0xa}, {0x7, 0x3}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x1, 0x5}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x9, 0x2, 0x30, 0x6, 0x3, 0x18, 0x18, 0x7b, 0x1b, 0x4, 0x16, 0x64de3e210b16f3c7, 0x48, 0x9, 0x4, 0x18, 0x0, 0x3, 0x60, 0x16, 0xb, 0x12, 0x60]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x401, 0x9, 0xf838, 0x7, 0x80, 0x33, 0xf988]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x31, 0x5, 0x3, 0x401, 0x9, 0x383, 0x4, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x1, 0x0, 0x2, 0x1, 0x8, 0x3]}}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x0, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x0, 0x4}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x8}, {0x5, 0xa}, {0x3, 0x9}, {0x3, 0x6}, {0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x4}, {0x0, 0xa}, {0x4, 0x2}, {0x2, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0x7}, {0x7, 0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x6, 0x2}, {0x3, 0x4}, {0x3, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x3, 0x1}, {0x4, 0xa}, {0x0, 0x5}, {}, {0x4, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x2}, {0x1, 0x9}, {0x6, 0x3}, {0x4, 0x8}, {}, {0x7, 0x1}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x4, 0x9}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x7}, {0x5, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x3, 0xa}, {0x7, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x6, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff8, 0x7f, 0x5, 0x2, 0x9, 0x4, 0xc66]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x3, 0x2}, {0x1, 0x5}, {0x1, 0x1}, {0x6, 0x5}, {0x3}, {0x3, 0x6}, {0x7, 0x5}, {0x3, 0x7}, {}, {0x0, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x3}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x3}, {0x1, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5, 0x9}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0xa}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x3, 0x3}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x2, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x3, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x9}, {0x7, 0x5}, {0x6, 0x2}, {0x5, 0x6}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x982, 0x5, 0xa, 0x9, 0x380, 0x4, 0x3]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x7, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x3}, {0x7, 0x6}, {0x2}, {0x4, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0x6}, {0x5, 0xa}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x6}, {0x5, 0x9}, {0x2, 0x6}, {0x7, 0x9}, {0x4, 0x5}, {0x5, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x3}, {0x4}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x2}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x6}, {0x5, 0x2}, {0x1, 0x5}, {0x5, 0x3}, {0x6}, {0x3}, {0x1, 0x9}, {0x4, 0xa}, {0x5, 0x8}, {}, {0x0, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf87d, 0x2, 0x7, 0x0, 0x7f, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x6, 0x8001, 0xffc0, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0xa}, {0x3, 0xa}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x7, 0x9}, {0x5}, {0x3, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x5}, {0x1, 0x1}, {0x6, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x3, 0x4, 0xc, 0x9, 0x16, 0x24, 0x24, 0x24]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x9000, 0x4e8e, 0x80, 0x4, 0x8000, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x6, 0x24, 0x6, 0x9, 0x0, 0xb, 0x48, 0x60, 0x1b, 0x6, 0x30, 0x5, 0x4, 0x36, 0x4, 0x6, 0x5, 0x48, 0xb, 0x24, 0x4, 0x3, 0x16, 0x9]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x7}, {0x5, 0x8}, {0x5, 0x3}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x1}, {0x4, 0x7}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x2}, {}, {0x6, 0x7}, {0x7, 0x3}, {0x1, 0x6}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x9}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x6, 0x7}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x7}, {0x3, 0x9}, {0x0, 0x9}, {0x6}, {0x0, 0xa}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x6, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x2, 0x3}, {0x4}, {0x5, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x8}, {0x2}, {0x2, 0x8}, {0x2, 0x9}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x6}, {0x5, 0x3}, {0x4, 0xa}, {0x6, 0x3}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x8}, {0x4, 0x6}, {0x5, 0x4}, {0x7, 0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0x4}, {0x4, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x8}, {0x4, 0xa}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x4}, {0x2, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x7}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x2}, {}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x7, 0x3}, {0x1, 0x2}, {0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x2}, {0x3, 0x2}, {0x4, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0xa}, {0x3}, {0x6, 0x8}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x8, 0x2, 0x6, 0x1ff, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1b, 0x5, 0x18, 0x6, 0x36, 0x2, 0x3, 0x4c, 0x24, 0x4, 0x26, 0x9, 0x9, 0x36, 0x2, 0x48, 0xb, 0x60, 0x2, 0xc, 0x3, 0x30, 0x60, 0x48, 0xc, 0x2, 0x30, 0x1b, 0xb, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xd4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xa, 0x401, 0x2, 0x7, 0x4, 0xffff, 0x2]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0x3}, {0x4, 0x8}, {0x7, 0x6}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x4, 0x9}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {}, {0x1, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x6, 0x1}, {0x7, 0x5}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x6}, {0x3, 0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8f99, 0xea, 0x7396, 0x9, 0x2, 0x5, 0x79]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x6}, {0x4, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x8}, {}, {0x5, 0x8}, {0x6, 0x4}, {0x6, 0x9}, {0x3, 0x5}, {0x4, 0x2}, {0x5, 0x7}, {0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x6, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x7}, {0x1}, {0x7}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0xa}, {0x1, 0x7}, {0x4, 0x3}, {0x3, 0x2}, {0x5, 0x2}, {0x4, 0xa}, {0x6, 0x3}, {0x2, 0xa}, {0x7, 0x1}, {0x6, 0x3}, {}, {0x6, 0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x8}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x9}, {0x2, 0x7}, {0x6, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x5, 0x5}, {0x4, 0xa}, {0x4, 0x7}, {0x5, 0x1}, {0x1, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x1, 0x3}, {0x2}, {}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x3}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x8, 0x600, 0x6, 0x2, 0xf92a, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xc8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x36, 0x6, 0x18, 0x60, 0x67, 0x2, 0x6, 0x30, 0x36, 0x1b, 0x18, 0x1b, 0x6, 0x9, 0x1b, 0x9, 0x24, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0xfffa, 0x5, 0x3, 0x6, 0xe68, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x4, 0x401, 0x7, 0x2, 0x3, 0x68f0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x5}, {0x7, 0x8}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x8}, {0x7, 0x2}, {0x2, 0x8}, {0x3, 0x6}, {0x7, 0xa}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x4}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0xee, 0x9, 0x7f, 0x400, 0x2f8, 0x5, 0x8]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x30, 0x6, 0x3, 0x6, 0x24, 0x4, 0x18, 0x1b, 0xc, 0x1, 0xc5c6963e8398c39f, 0x1, 0x4, 0xf840b8affac763b8, 0x6, 0x6, 0x6, 0x3f, 0x4, 0x4, 0x1, 0xc, 0x24, 0x49]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x690, 0x8, 0x5e20, 0x3, 0x7d, 0x2, 0xb]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x18, 0xb, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x81, 0x0, 0x1, 0x1a7a, 0xfdf3]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x5, 0x6c, 0xc, 0x6c, 0x24, 0xc, 0xc, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x4, 0x1b, 0x2, 0x1, 0x2, 0x12, 0x0]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x9, 0x6, 0xb, 0x12, 0x24, 0x30, 0x24, 0x60, 0x2d]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x6}, {0x2, 0x8}, {0x1, 0x2}, {0x3, 0x6}, {0x7, 0x9}, {0x6, 0x5}, {0x0, 0x8}, {0x2, 0x9}, {0x6, 0x7}, {0x1, 0x2}, {0x7}, {0x4}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x6}, {}, {0x7, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x5}, {0x1}, {0x4, 0x9}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x7}, {0x5, 0x6}, {0x2, 0x8}, {0x1, 0x3}, {0x6, 0x9}, {0x6, 0x3}, {0x4, 0x4}, {0x5}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0xa}, {0x3}, {0x4, 0x6}, {0x7, 0x4}, {0x6, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x7, 0x8}, {0x3, 0x8}, {0x7, 0x2}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa6c0, 0x6745, 0x2800, 0x101, 0x2c59, 0x1, 0x101, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x0, 0x6, 0x6, 0x4, 0x6, 0xff]}}]}]}]}, 0xdf4}}, 0x4000000) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x802f0bd496f172b3) 162.343747ms ago: executing program 0 (id=792): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffefd}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0), 0xff00}, {&(0x7f0000000180)="f5b6291e65", 0x5}], 0x2}}], 0x1, 0x4000000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000002c0)) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) accept4$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="dd3dcb8ed3596fb60a52f56e1a2d06c921decd52342f658f94085fea462fbe4380e50f0d78e28babedd9607a2d2769cd2b76b86d7a93bd5d36a28631a10f3ca9e13d62b95ef3d9eafed8e5b5bd73f5f4"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x381, 0x3}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) write$binfmt_elf64(r6, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0x4, 0x9, 0x88, 0x3, 0x6, 0x8, 0x325, 0x40, 0x182, 0x10000, 0x2, 0x38, 0x2, 0x9, 0x3, 0xfc}, [{0x7, 0x446, 0x7, 0x8a, 0xcf6, 0x3, 0x43, 0xfffffffffffff801}, {0x3, 0x9, 0x9, 0x6, 0x3, 0x7, 0xfffffffffffffff8}], "4273104e16a7e0010e131969ba6014c2ff3bb62c0af72376ebca7ee143786c41e7042a07bed1a0512f53c9cca009c282c9a31967b4c960298fb2badd6b6ef8c2541b71908b782ac23fa144c96c4953bae1d19ece0f08b7c85cc89bd302c1f654dd0e2090298a1dc176f432cd4fd196abd1cb0cdbe48df1593c8a7e989061acaa3c0dedc630121d60eb67d288177326a68edbdfdb6007cc330f83d2fdf8d25980c80249f77ec948dbe58b211cfd71018324de675a2b8e87420b6e44dfc9e542726c", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb71) r7 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r8, 0x80049370, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x3065a7505c571d71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) 161.986397ms ago: executing program 0 (id=793): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 161.764027ms ago: executing program 0 (id=794): symlinkat(0x0, 0xffffffffffffff9c, 0x0) (async) syz_usb_connect(0x2, 0x4e, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x8c, 0xbd, 0x7f, 0x20, 0x499, 0xcdf4, 0x78ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x10, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xff, 0x6, 0xd2, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x839a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x91, 0x81}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x9, 0x9, 0x5}}]}}]}}]}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r1, 0x0, 0x3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fda={0x66646185, 0x4, 0x2, 0x15}, @fda={0x66646185, 0x6, 0x1, 0xc97}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)}}], 0xffffffffffffffd7, 0x0, &(0x7f0000000580)="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"}) 161.420557ms ago: executing program 2 (id=795): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)='O', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0xfffffead}], 0x1}}], 0x2, 0x400c0) r2 = socket$inet6(0xa, 0x800, 0x9) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002a00)={0xfffffffffffffffc, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "c5b38731594b95"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000a00)={0xa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7f, "9ef5a6f259ad00"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001a00)={{r4, 0xb, 0x80000000, 0x7, 0x3, 0x3, 0x9, 0x8, 0x9, 0x12, 0x7, 0x3, 0x80, 0x6}}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) rt_sigqueueinfo(0x0, 0x8, &(0x7f0000001340)={0x41, 0x1, 0xc02}) pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000719000/0x1000)=nil, 0x1000) 93.773253ms ago: executing program 2 (id=796): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xcc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc7, 0x5, "dc2006ff9cfea314c38b6c50aec6f3135e505644f24cfe8df7bed5f3f7874582a4179926e01a75759d8b8c82bf807c77f57418d4a753ec4e71bb9c04f84c63b7871a248cc36aa435dad07b8e2f9537d705b595669eff721c0854057b41c41ebb310fb2c67c141e9a3313370643d8072d72642df92f9c6a706d147285b8eaeaccc2a6ca036a720234061a85150d541a59f02fba40ad8b83c0c5cc8a87a9d366a371ff9b4cd73a871af7dbfe49d846fc3e4b5ffeed6047cdc45c1579e4cf41d2a6a133ec"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8090}, 0x8045) r4 = accept$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) bind$packet(r4, &(0x7f00000003c0)={0x11, 0x5, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x22) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', r5, 0x20, 0x7, 0x1a464b73, 0x8, {{0x57, 0x4, 0x3, 0x1, 0x15c, 0x65, 0x0, 0x3, 0x29, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x44, 0x69, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3193}, {@private=0xa010102, 0x1000}, {@empty, 0x2}, {@empty, 0x40}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x9e7}, {@dev={0xac, 0x14, 0x14, 0x14}}]}, @timestamp_prespec={0x44, 0x3c, 0x7c, 0x3, 0x7, [{@broadcast, 0x8}, {@empty, 0x2552}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x8001}, {@local}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x3}]}, @ssrr={0x89, 0xf, 0x63, [@local, @broadcast, @multicast1]}, @timestamp={0x44, 0x1c, 0x37, 0x0, 0x2, [0xbe28, 0x3, 0x2, 0x80000001, 0x5, 0xfffff001]}, @timestamp={0x44, 0x14, 0xbc, 0x0, 0x3, [0x7ff, 0x4, 0x9, 0x4]}, @end, @timestamp_addr={0x44, 0x34, 0xa4, 0x1, 0xe, [{@loopback, 0x6}, {@rand_addr=0x64010102, 0x6}, {@broadcast, 0x4}, {@broadcast, 0x3c}, {@private=0xa010101, 0x2}, {@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x2, 0xe, "ccf4089bb5ecc235656b1568"}, {0x0, 0x7, "36bfd9c68f"}, {0x5, 0x12, "9d132f7deede495821d73a8cd10a8941"}, {0x0, 0x4, "f5f3"}, {0x1, 0xe, "0a7d6112e996fa9100d9d116"}, {0x5, 0xf, "ff3a8fe779a4f53fca3f0ee3f9"}]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000680)={0x5fc, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r1}, {0x10c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x666}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x8, 0x4, 0x9, 0x5}, {0x1, 0x3, 0xfc, 0xd}, {0x9, 0x5, 0x7, 0x4}, {0x1, 0x5, 0xfb, 0x7b8}]}}}]}}, {{0x8, 0x1, r1}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r1}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6e45c2d7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6ee}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x24beb112}}, {0x8, 0x6, r2}}}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000d00)=0x100000001) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r11, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40008c0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000e80)={r9, 0x1, 0x6, @multicast}, 0x10) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000ec0)={0x0, 0xfffffffa}, 0x8) sendmsg$AUDIT_GET(r0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3e8, 0x800, 0x70bd28, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r12, 0x80049370, &(0x7f0000001000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x9, 0xfc, 0x9, 0xc3ad}, {0x9, 0xd, 0x1}]}, 0x10) accept4$unix(0xffffffffffffffff, &(0x7f00000010c0), &(0x7f0000001140)=0x6e, 0x80800) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r7) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x13c, r13, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x16}}}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_IE={0xef, 0x2a, [@mesh_chsw={0x76, 0x6, {0x6, 0x6, 0x22, 0x4}}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x3, 0x0, {0x4, 0x5, 0x0, 0x3f7, 0x0, 0x1, 0x1, 0x1}, 0x800, 0x2b8000, 0x2}}, @link_id={0x65, 0x12, {@random="0b8b9b6a7f84", @broadcast}}, @random_vendor={0xdd, 0xa6, "4f49c5a20e9063a930c0d14add7d007af3b267f3bd73c8b97a35648d127fea14c0567c846cf70532e0827cf4c6040dea0ede8e29d1eb69a44c4732e00ec83be671a44b249c1dbe3ec0daae141ac4ac492c615b3a717322e5a7246b3890d3086bf4056b208da0f6c99511fdd57e0173e2e897c6fa3f5c2795dce372f1e412093cab2797081dcc42472ae3797927a2d76224d79900cf147cfa1821912e1881c26865a0456180af"}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0xd, 0x8, 0x1, 0xc}}]}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x20, 0x0, 0x6, 0x0, {0x10000, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x1, 0xfffffffc, 0x4}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000013c0)) shutdown(r4, 0x1) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f00000015c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f0000001440)={0x11c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe0, 0xa8, @random="abbb1de5cfc90156aef5c7790c653322051b8a13174ac68bb1fefb827219f4acf05f420cb404723e5eab64097599580f4a22cb91054c079eb28c3f1bc0fde11d5775e42ddf2de0e25b5429e55f67d26d735c5569f8d867a0313b7b5c92ca561af3df9dc8de256feecfb960ce89f2043514b7a89c98a3062507eec3a95752443bf533cc8384270d37d6892bd808af927699796672f604e8ee106169e48eb951dd9ad12fc0f64724638fdff5936a1f7b2017cc0f8260864e2a46d6ca370d54f9477c72f1654396076fbd0315d816a01b220ffc9be5fa9b68eccf2736e1"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) cachestat(r0, &(0x7f0000001600)={0x8, 0x7fffffffffffffff}, &(0x7f0000001640), 0x0) openat$cgroup_ro(r6, &(0x7f0000001680)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 4.58661ms ago: executing program 2 (id=797): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109004, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141a03, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x11, 0xa, 0xffffffd) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x891c, 0x0) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000085) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x6, 0x0, 0x0, 0xffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) (async, rerun: 64) write$cgroup_int(r6, &(0x7f0000000240)=0xc7bf, 0x12) (rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfd000/0x400000)=nil) (async) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) (async) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 0s ago: executing program 2 (id=798): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') (async) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030343030300306ccb29628302c7573", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303030343030300306ccb29628302c7573", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_DUMPABLE(0x4, 0x0) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000680)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) eventfd2(0x6, 0x80800) syz_usb_control_io(r6, 0x0, 0x0) (async) syz_usb_control_io(r6, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7801000000000000f96bf6814206e2dfccffffffffffffff05000000000000000200000000000000060000000000000002000000000000000500000008000000030000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ff7f00005700000003000000", @ANYRES32=r4, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b0000000900"], 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x77fffffd, 0x10008, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6000, 0x7f, 0x0, r4, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x440600, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x440600, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 24.616837][ T36] audit: type=1400 audit(1755741590.480:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.617878][ T281] cgroup: Unknown subsys name 'net' [ 24.639510][ T36] audit: type=1400 audit(1755741590.480:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.666848][ T36] audit: type=1400 audit(1755741590.510:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.667039][ T281] cgroup: Unknown subsys name 'devices' [ 24.807808][ T281] cgroup: Unknown subsys name 'hugetlb' [ 24.813426][ T281] cgroup: Unknown subsys name 'rlimit' [ 25.045074][ T36] audit: type=1400 audit(1755741590.900:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.068285][ T36] audit: type=1400 audit(1755741590.900:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.093076][ T36] audit: type=1400 audit(1755741590.910:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.101964][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.124968][ T36] audit: type=1400 audit(1755741590.980:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.150523][ T36] audit: type=1400 audit(1755741590.980:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.176448][ T36] audit: type=1400 audit(1755741591.040:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.202009][ T36] audit: type=1400 audit(1755741591.040:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.202053][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.076242][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.083397][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.090827][ T289] bridge_slave_0: entered allmulticast mode [ 26.097201][ T289] bridge_slave_0: entered promiscuous mode [ 26.103269][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.110346][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.117482][ T288] bridge_slave_0: entered allmulticast mode [ 26.123673][ T288] bridge_slave_0: entered promiscuous mode [ 26.132437][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.140002][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.147098][ T289] bridge_slave_1: entered allmulticast mode [ 26.153231][ T289] bridge_slave_1: entered promiscuous mode [ 26.161517][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.168696][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.175806][ T288] bridge_slave_1: entered allmulticast mode [ 26.182165][ T288] bridge_slave_1: entered promiscuous mode [ 26.206794][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.213831][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.220966][ T290] bridge_slave_0: entered allmulticast mode [ 26.227177][ T290] bridge_slave_0: entered promiscuous mode [ 26.245818][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.252870][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.260049][ T290] bridge_slave_1: entered allmulticast mode [ 26.266383][ T290] bridge_slave_1: entered promiscuous mode [ 26.339644][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.346771][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.353844][ T291] bridge_slave_0: entered allmulticast mode [ 26.360255][ T291] bridge_slave_0: entered promiscuous mode [ 26.366784][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.373827][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.380920][ T291] bridge_slave_1: entered allmulticast mode [ 26.387239][ T291] bridge_slave_1: entered promiscuous mode [ 26.499496][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.506582][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.513861][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.520905][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.531138][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.538203][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.545506][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.552542][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.572760][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.579833][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.587126][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.594153][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.611936][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.619015][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.626307][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.633333][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.666910][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.674233][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.681605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.689137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.696402][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.703596][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.711263][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.718904][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.735549][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.742598][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.752793][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.759848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.773153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.780218][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.795866][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.802923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.821086][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.828167][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.837437][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.844482][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.859333][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.866407][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.874572][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.881631][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.926665][ T290] veth0_vlan: entered promiscuous mode [ 26.939839][ T288] veth0_vlan: entered promiscuous mode [ 26.960623][ T290] veth1_macvtap: entered promiscuous mode [ 26.969192][ T288] veth1_macvtap: entered promiscuous mode [ 26.978067][ T289] veth0_vlan: entered promiscuous mode [ 26.989082][ T291] veth0_vlan: entered promiscuous mode [ 27.015897][ T289] veth1_macvtap: entered promiscuous mode [ 27.029349][ T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.061203][ T291] veth1_macvtap: entered promiscuous mode [ 27.150662][ T342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.182357][ T351] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 27.186773][ T349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:5 [ 27.218523][ T355] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.602416][ T387] tipc: Started in network mode [ 27.619366][ T387] tipc: Node identity 86e74687359d, cluster identity 4711 [ 27.623264][ T389] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 27.627975][ T389] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:21 [ 27.629942][ T387] tipc: Enabled bearer , priority 0 [ 27.656981][ T391] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.665619][ T391] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 27.667199][ T392] +: renamed from syzkaller0 [ 27.675555][ T391] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 27.686699][ T391] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 27.687637][ T392] tipc: Disabling bearer [ 27.995416][ T329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.146481][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.156280][ T329] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.166010][ T329] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.180240][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 28.189347][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.197427][ T329] usb 4-1: Product: syz [ 28.201645][ T329] usb 4-1: Manufacturer: syz [ 28.206293][ T329] usb 4-1: SerialNumber: syz [ 28.213176][ T329] hub 4-1:1.0: bad descriptor, ignoring hub [ 28.219233][ T329] hub 4-1:1.0: probe with driver hub failed with error -5 [ 28.417940][ T329] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 28.442354][ T411] ======================================================= [ 28.442354][ T411] WARNING: The mand mount option has been deprecated and [ 28.442354][ T411] and is ignored by this kernel. Remove the mand [ 28.442354][ T411] option from the mount to silence this warning. [ 28.442354][ T411] ======================================================= [ 28.445704][ T329] usb 4-1: USB disconnect, device number 2 [ 28.484541][ T329] usblp0: removed [ 28.537165][ T416] SELinux: policydb string length -269467384 does not match expected length 8 [ 28.558260][ T416] SELinux: failed to load policy [ 28.707796][ T427] Zero length message leads to an empty skb [ 28.806957][ T439] rust_binder: 35: no such ref 0 [ 28.884020][ T446] deleting an unspecified loop device is not supported. [ 28.915478][ T329] rust_binder: 443: removing orphan mapping 0:8 [ 29.034749][ T63] rust_binder: get_current_thread was called from the wrong process. [ 29.040874][ T461] rust_binder: Error in use_page_slow: ESRCH [ 29.049322][ T461] rust_binder: use_range failure ESRCH [ 29.055413][ T461] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 29.060982][ T461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.068859][ T461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:13 [ 29.079519][ T461] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 29.162691][ T467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.41'. [ 29.265110][ T476] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.265134][ T476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:24 [ 29.265457][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.354680][ T478] binder: Bad value for 'max' [ 29.396942][ T481] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 29.404171][ T481] rust_binder: Write failure EINVAL in pid:29 [ 29.404631][ T481] rust_binder: Write failure EINVAL in pid:29 [ 29.439210][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 29.462337][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.476556][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.487332][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 29.496656][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.509790][ T10] usb 4-1: Product: syz [ 29.516707][ T10] usb 4-1: Manufacturer: syz [ 29.523866][ T492] capability: warning: `syz.0.51' uses 32-bit capabilities (legacy support in use) [ 29.524711][ T10] usb 4-1: SerialNumber: syz [ 29.709132][ T506] rust_binder: Error in use_page_slow: ESRCH [ 29.709179][ T506] rust_binder: use_range failure ESRCH [ 29.715233][ T506] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 29.721300][ T506] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.729598][ T506] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:49 [ 29.747387][ T464] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 29.775351][ T464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.811268][ T464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.835568][ T36] kauditd_printk_skb: 136 callbacks suppressed [ 29.835586][ T36] audit: type=1400 audit(1755741595.700:210): avc: denied { read write } for pid=514 comm="syz.1.60" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.865933][ T10] usb 4-1: 0:2 : does not exist [ 29.875971][ T517] rust_binder: Error while translating object. [ 29.876078][ T518] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 29.881293][ T36] audit: type=1400 audit(1755741595.700:211): avc: denied { open } for pid=514 comm="syz.1.60" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 29.914765][ T518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 29.914797][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:52 [ 29.925740][ T517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 29.925814][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 29.952476][ T517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 29.957150][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 29.961376][ T515] 9pnet_fd: Insufficient options for proto=fd [ 29.973201][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 29.989374][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 29.999232][ T10] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 30.008997][ T10] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 30.018774][ T10] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 30.029788][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 30.041733][ T10] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 30.051627][ T10] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 30.061971][ T10] usb 4-1: USB disconnect, device number 3 [ 30.071748][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.112141][ T36] audit: type=1400 audit(1755741595.970:212): avc: denied { ioctl } for pid=523 comm="syz.1.62" path="socket:[3912]" dev="sockfs" ino=3912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.145994][ T36] audit: type=1400 audit(1755741595.970:213): avc: denied { write } for pid=523 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.165401][ T36] audit: type=1400 audit(1755741595.970:214): avc: denied { ioctl } for pid=523 comm="syz.1.62" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.236479][ T36] audit: type=1400 audit(1755741596.100:215): avc: denied { execute } for pid=532 comm="syz.1.65" path="/20/net_prio.prioidx" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.259757][ T329] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.287701][ T36] audit: type=1400 audit(1755741596.150:216): avc: denied { create } for pid=536 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.307430][ T36] audit: type=1400 audit(1755741596.170:217): avc: denied { bind } for pid=536 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.326809][ T36] audit: type=1400 audit(1755741596.170:218): avc: denied { listen } for pid=536 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.346102][ T36] audit: type=1400 audit(1755741596.170:219): avc: denied { connect } for pid=536 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.367132][ T538] process 'syz.1.67' launched './file1' with NULL argv: empty string added [ 30.384815][ T540] rust_binder: Error while translating object. [ 30.384851][ T540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.391144][ T540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:44 [ 30.417896][ T542] SELinux: failed to load policy [ 30.435442][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 30.442153][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.452926][ T329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.464372][ T329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.473975][ T329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.482303][ T329] usb 3-1: Product: syz [ 30.486707][ T329] usb 3-1: Manufacturer: syz [ 30.491449][ T329] usb 3-1: SerialNumber: syz [ 30.686483][ T560] overlayfs: failed to resolve './file0': -2 [ 30.699333][ T521] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40 [ 30.701220][ T329] usb 3-1: 0:2 : does not exist [ 30.719454][ T329] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 30.724508][ T563] can0: slcan on ptm0. [ 30.734143][ T565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.747434][ T329] usb 3-1: USB disconnect, device number 2 [ 30.759404][ T565] rust_binder: Write failure EFAULT in pid:59 [ 30.769244][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.790140][ T569] rust_binder: Error while translating object. [ 30.791115][ T569] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 30.799155][ T569] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:61 [ 30.830764][ T576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 30.868797][ T582] exFAT-fs (rnullb0): invalid boot record signature [ 30.875499][ T562] can0 (unregistered): slcan off ptm0. [ 30.897472][ T582] exFAT-fs (rnullb0): failed to read boot sector [ 30.904146][ T582] exFAT-fs (rnullb0): failed to recognize exfat type [ 30.975212][ T595] rust_binder: Write failure EFAULT in pid:71 [ 30.975977][ T595] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 30.990896][ T595] rust_binder: 71: no such ref 0 [ 31.026532][ T607] /dev/nullb0: Can't lookup blockdev [ 31.063329][ T612] binder: Unknown parameter 'maW' [ 31.159671][ T621] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 31.335414][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.455352][ T329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.475653][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.495418][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 31.501774][ T9] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 31.512195][ T9] usb 4-1: New USB device found, idVendor=0698, idProduct=6b82, bcdDevice=d3.eb [ 31.521336][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.529358][ T9] usb 4-1: Product: syz [ 31.533544][ T9] usb 4-1: Manufacturer: syz [ 31.538168][ T9] usb 4-1: SerialNumber: syz [ 31.606370][ T329] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 31.617949][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 31.629389][ T329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.640965][ T329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.653889][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 31.659073][ T329] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.668202][ T329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.677161][ T31] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 31.686483][ T329] usb 1-1: config 0 descriptor?? [ 31.691495][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.699638][ T631] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 31.707359][ T31] usb 2-1: config 0 descriptor?? [ 31.800604][ T9] usb 4-1: USB disconnect, device number 4 [ 32.118635][ T329] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 32.127723][ T31] uclogic 0003:5543:0003.0002: unknown main item tag 0x5 [ 32.141729][ T329] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 32.149732][ T31] uclogic 0003:5543:0003.0002: item fetching failed at offset 4/5 [ 32.158081][ T31] uclogic 0003:5543:0003.0002: parse failed [ 32.164620][ T31] uclogic 0003:5543:0003.0002: probe with driver uclogic failed with error -22 [ 32.174617][ T329] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 32.318648][ T329] usb 1-1: USB disconnect, device number 2 [ 32.331273][ T31] usb 2-1: USB disconnect, device number 2 [ 32.344517][ T641] netlink: 'syz.3.95': attribute type 29 has an invalid length. [ 32.352349][ T641] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.95'. [ 32.466858][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 32.533970][ T651] rust_binder: Error while translating object. [ 32.534006][ T651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 32.540283][ T651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:88 [ 32.893394][ T668] binder: Bad value for 'stats' [ 32.907510][ T668] binder: Bad value for 'stats' [ 32.912496][ T668] binder: Bad value for 'stats' [ 32.917699][ T668] binder: Bad value for 'stats' [ 32.923258][ T668] binder: Bad value for 'stats' [ 32.926622][ T671] overlayfs: failed to resolve './file0': -2 [ 32.930016][ T668] binder: Bad value for 'stats' [ 32.939276][ T668] binder: Bad value for 'stats' [ 32.943444][ T671] can0: slcan on ttyS3. [ 32.948365][ T668] binder: Bad value for 'stats' [ 32.953310][ T668] binder: Bad value for 'stats' [ 32.959884][ T668] binder: Bad value for 'stats' [ 32.964933][ T668] binder: Bad value for 'stats' [ 32.970003][ T668] binder: Bad value for 'stats' [ 32.974981][ T668] binder: Bad value for 'stats' [ 32.980052][ T668] binder: Bad value for 'stats' [ 32.986201][ T668] binder: Bad value for 'stats' [ 32.992173][ T668] binder: Bad value for 'stats' [ 32.997269][ T668] binder: Bad value for 'stats' [ 33.002294][ T668] binder: Bad value for 'stats' [ 33.007527][ T677] netlink: 80 bytes leftover after parsing attributes in process `syz.0.104'. [ 33.017275][ T671] can0 (unregistered): slcan off ttyS3. [ 33.017408][ T668] binder: Bad value for 'stats' [ 33.039146][ T668] binder: Bad value for 'stats' [ 33.044168][ T668] binder: Bad value for 'stats' [ 33.063801][ T668] binder: Bad value for 'stats' [ 33.088696][ T668] binder: Bad value for 'stats' [ 33.093698][ T668] binder: Bad value for 'stats' [ 33.105433][ T668] binder: Bad value for 'stats' [ 33.110461][ T668] binder: Bad value for 'stats' [ 33.117086][ T668] binder: Bad value for 'stats' [ 33.122141][ T668] binder: Bad value for 'stats' [ 33.127215][ T668] binder: Bad value for 'stats' [ 33.132644][ T668] binder: Bad value for 'stats' [ 33.137724][ T668] binder: Bad value for 'stats' [ 33.142708][ T668] binder: Bad value for 'stats' [ 33.145349][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.151329][ T668] binder: Bad value for 'stats' [ 33.225114][ T703] syz.0.108 uses obsolete (PF_INET,SOCK_PACKET) [ 33.233171][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 33.242491][ T703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 33.306529][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 33.326618][ T712] rust_binder: 91: no such ref 1 [ 33.329326][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.335928][ T713] netlink: 68 bytes leftover after parsing attributes in process `syz.2.112'. [ 33.346095][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.353027][ T712] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 33.361571][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 33.368624][ T716] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.377773][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.385440][ T712] rust_binder: Error while translating object. [ 33.393372][ T712] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 33.397277][ T31] usb 2-1: config 0 descriptor?? [ 33.399688][ T716] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 33.409623][ T712] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:91 [ 33.414783][ T716] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 33.439514][ T716] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 33.501962][ T724] fuse: Bad value for 'fd' [ 33.515380][ T725] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 33.567248][ T719] rust_binder: 93: no such ref 2 [ 33.577275][ T633] rust_binder: 717: removing orphan mapping 0:112 [ 33.588322][ T633] rust_binder: 0: removing orphan mapping 112:8 [ 33.625937][ T742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.119'. [ 33.644630][ T31] savu 0003:1E7D:2D5A.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 33.659327][ T31] usb 2-1: USB disconnect, device number 3 [ 33.676651][ T747] rust_binder: Write failure EFAULT in pid:83 [ 33.681378][ T746] fido_id[746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 33.701619][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.802698][ T751] syzkaller0: entered promiscuous mode [ 33.808291][ T751] syzkaller0: entered allmulticast mode [ 33.841519][ T755] pim6reg1: entered promiscuous mode [ 33.846910][ T755] pim6reg1: entered allmulticast mode [ 33.857550][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 33.864179][ T9] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 33.873343][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.883440][ T9] usb 3-1: config 0 descriptor?? [ 34.070300][ T766] overlay: filesystem on ./bus not supported as upperdir [ 34.137739][ T768] netlink: 'syz.3.130': attribute type 4 has an invalid length. [ 34.255945][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 34.265056][ T774] netlink: 'syz.3.133': attribute type 4 has an invalid length. [ 34.293524][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 34.299680][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 34.308323][ T9] usb 3-1: USB disconnect, device number 3 [ 34.406425][ T31] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 34.418113][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 34.425061][ T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 34.435337][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.449754][ T31] usb 2-1: config 0 descriptor?? [ 34.455599][ T764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 34.467322][ T786] rust_binder: Error while translating object. [ 34.467347][ T786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 34.474816][ T784] rust_binder: Failed copying remainder into alloc: EFAULT [ 34.477397][ T786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:108 [ 34.484359][ T784] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 34.501305][ T784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 34.509649][ T784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:129 [ 34.517813][ T788] rust_binder: Write failure EINVAL in pid:110 [ 34.765348][ T633] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 34.785545][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 34.843257][ T800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.143'. [ 34.868255][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.876891][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.887087][ T31] konepure 0003:1E7D:2DBE.0004: item fetching failed at offset 0/2 [ 34.895114][ T31] konepure 0003:1E7D:2DBE.0004: parse failed [ 34.901365][ T31] konepure 0003:1E7D:2DBE.0004: probe with driver konepure failed with error -22 [ 34.926493][ T633] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 34.934853][ T633] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 34.943525][ T633] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 34.948334][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 34.952604][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.963816][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.974572][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 34.987704][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.00 [ 34.998805][ T633] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 35.008550][ T804] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 35.020752][ T633] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 35.031266][ T36] kauditd_printk_skb: 56 callbacks suppressed [ 35.031282][ T36] audit: type=1400 audit(1755741600.870:276): avc: denied { read write } for pid=801 comm="syz.2.144" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.040112][ T633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.046312][ T36] audit: type=1400 audit(1755741600.870:277): avc: denied { open } for pid=801 comm="syz.2.144" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 35.074010][ T633] usb 4-1: config 0 descriptor?? [ 35.078429][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.103217][ T790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 35.112759][ T63] usb 2-1: USB disconnect, device number 4 [ 35.125812][ T36] audit: type=1400 audit(1755741600.970:278): avc: denied { map } for pid=763 comm="syz.1.128" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 35.153013][ T9] usb 1-1: config 0 descriptor?? [ 35.160325][ T36] audit: type=1400 audit(1755741601.020:279): avc: denied { mount } for pid=801 comm="syz.2.144" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.161051][ T792] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 35.523839][ T633] lg-g15 0003:046D:C225.0005: item fetching failed at offset 2/5 [ 35.531908][ T633] lg-g15 0003:046D:C225.0005: probe with driver lg-g15 failed with error -22 [ 35.597886][ T9] wacom 0003:056A:0020.0006: unknown main item tag 0x0 [ 35.604902][ T9] wacom 0003:056A:0020.0006: item fetching failed at offset 3/5 [ 35.612780][ T9] wacom 0003:056A:0020.0006: parse failed [ 35.618592][ T9] wacom 0003:056A:0020.0006: probe with driver wacom failed with error -22 [ 35.668271][ T36] audit: type=1400 audit(1755741601.530:280): avc: denied { write } for pid=806 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.723044][ T36] audit: type=1400 audit(1755741601.580:281): avc: denied { read } for pid=808 comm="syz.2.146" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.822259][ T36] audit: type=1400 audit(1755741601.680:282): avc: denied { ioctl } for pid=791 comm="syz.0.140" path="/dev/input/event0" dev="devtmpfs" ino=192 ioctlcmd=0x4581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.888416][ T9] usb 1-1: USB disconnect, device number 3 [ 35.929840][ T822] mmap: syz.1.150 (822) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.949070][ T36] audit: type=1400 audit(1755741601.810:283): avc: denied { block_suspend } for pid=823 comm="syz.2.151" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.011782][ T36] audit: type=1400 audit(1755741601.870:284): avc: denied { append } for pid=821 comm="syz.1.150" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.245348][ T633] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.375364][ T633] usb 2-1: device descriptor read/64, error -71 [ 36.409326][ T831] syzkaller0: entered promiscuous mode [ 36.414917][ T831] syzkaller0: entered allmulticast mode [ 36.421121][ T46] syzkaller0: tun_net_xmit 48 [ 36.422551][ T831] syzkaller0: create flow: hash 989993273 index 1 [ 36.506251][ T831] syzkaller0 (unregistered): delete flow: hash 989993273 index 0 [ 36.527799][ T36] audit: type=1400 audit(1755741602.390:285): avc: denied { mount } for pid=832 comm="syz.0.154" name="/" dev="ramfs" ino=6738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 36.625347][ T633] usb 2-1: device descriptor read/64, error -71 [ 36.767199][ T836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 36.787840][ T838] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 36.796807][ T838] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 36.808452][ T838] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 36.863619][ T845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 36.863653][ T845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:125 [ 36.865354][ T633] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.015342][ T633] usb 2-1: device descriptor read/64, error -71 [ 37.095363][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.246640][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.255366][ T633] usb 2-1: device descriptor read/64, error -71 [ 37.257665][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.273639][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.286580][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.295646][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.304654][ T9] usb 3-1: config 0 descriptor?? [ 37.310386][ T9] hub 3-1:0.0: USB hub found [ 37.365523][ T633] usb usb2-port1: attempt power cycle [ 37.510521][ T9] hub 3-1:0.0: 14 ports detected [ 37.515761][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 37.561498][ T63] usb 4-1: USB disconnect, device number 5 [ 37.645375][ T329] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 37.705349][ T633] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.713257][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 37.719861][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 37.726419][ T633] usb 2-1: device descriptor read/8, error -71 [ 37.748121][ T9] usb 3-1: USB disconnect, device number 4 [ 37.795348][ T329] usb 1-1: Using ep0 maxpacket: 16 [ 37.801750][ T329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.813734][ T329] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.824406][ T329] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 37.833603][ T329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.841782][ T329] usb 1-1: Product: syz [ 37.846041][ T329] usb 1-1: Manufacturer: syz [ 37.850647][ T329] usb 1-1: SerialNumber: syz [ 37.856558][ T633] usb 2-1: device descriptor read/8, error -71 [ 38.064842][ T849] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 38.067120][ T849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.083736][ T849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.093216][ T329] usb 1-1: 0:2 : does not exist [ 38.098378][ T633] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.108061][ T329] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 38.119381][ T329] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 38.127763][ T633] usb 2-1: device descriptor read/8, error -71 [ 38.137003][ T329] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 38.146769][ T329] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 38.156620][ T329] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 38.166479][ T329] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 38.177824][ T329] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 38.187858][ T329] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5) [ 38.197558][ T329] usb 1-1: USB disconnect, device number 4 [ 38.206559][ T409] udevd[409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.235367][ T406] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 38.256552][ T633] usb 2-1: device descriptor read/8, error -71 [ 38.365665][ T633] usb usb2-port1: unable to enumerate USB device [ 38.385396][ T406] usb 4-1: Using ep0 maxpacket: 8 [ 38.391693][ T406] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.401603][ T406] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 38.410692][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.419386][ T406] usb 4-1: config 0 descriptor?? [ 38.826721][ T406] apple 0003:05AC:0274.0007: item fetching failed at offset 0/2 [ 38.834602][ T406] apple 0003:05AC:0274.0007: parse failed [ 38.840662][ T406] apple 0003:05AC:0274.0007: probe with driver apple failed with error -22 [ 38.850791][ T406] usb 4-1: USB disconnect, device number 6 [ 38.878556][ T879] netlink: 32 bytes leftover after parsing attributes in process `syz.2.170'. [ 38.888153][ T879] rust_binder: Write failure EFAULT in pid:94 [ 38.918130][ T886] tmpfs: Unsupported parameter 'mpol' [ 39.000548][ T890] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 39.000572][ T890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 39.008721][ T890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:104 [ 39.275348][ T406] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.355387][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.415410][ T406] usb 4-1: device descriptor read/64, error -71 [ 39.485341][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.617365][ T904] rust_binder: Write failure EFAULT in pid:112 [ 39.665369][ T406] usb 4-1: device descriptor read/64, error -71 [ 39.701855][ T916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=916 comm=syz.1.185 [ 39.725379][ T9] usb 3-1: device descriptor read/64, error -71 [ 39.885428][ T633] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.915392][ T406] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 39.965367][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 40.035778][ T633] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 40.045566][ T406] usb 4-1: device descriptor read/64, error -71 [ 40.056364][ T633] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 40.065468][ T633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.073460][ T633] usb 1-1: Product: syz [ 40.077642][ T633] usb 1-1: Manufacturer: syz [ 40.082249][ T633] usb 1-1: SerialNumber: syz [ 40.087826][ T633] usb 1-1: config 0 descriptor?? [ 40.093691][ T633] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 40.100608][ T633] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 40.105329][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.108744][ T633] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 40.285399][ T406] usb 4-1: device descriptor read/64, error -71 [ 40.296828][ T633] usb 1-1: USB disconnect, device number 5 [ 40.345388][ T9] usb 3-1: device descriptor read/64, error -71 [ 40.395464][ T406] usb usb4-port1: attempt power cycle [ 40.455512][ T9] usb usb3-port1: attempt power cycle [ 40.664235][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 40.664255][ T36] audit: type=1400 audit(1755741606.520:298): avc: denied { bind } for pid=931 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.689590][ T36] audit: type=1400 audit(1755741606.520:299): avc: denied { setopt } for pid=931 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.709114][ T36] audit: type=1400 audit(1755741606.520:300): avc: denied { nlmsg_write } for pid=931 comm="syz.1.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 40.729916][ T36] audit: type=1400 audit(1755741606.560:301): avc: denied { read } for pid=935 comm="syz.1.192" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.752755][ T36] audit: type=1400 audit(1755741606.560:302): avc: denied { open } for pid=935 comm="syz.1.192" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.776251][ T406] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.785586][ T36] audit: type=1400 audit(1755741606.650:303): avc: denied { connect } for pid=940 comm="syz.1.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.806331][ T406] usb 4-1: device descriptor read/8, error -71 [ 40.815341][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.823200][ T943] rust_binder: Write failure EINVAL in pid:143 [ 40.836598][ T9] usb 3-1: device descriptor read/8, error -71 [ 40.936451][ T406] usb 4-1: device descriptor read/8, error -71 [ 40.976399][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.175344][ T406] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 41.196396][ T406] usb 4-1: device descriptor read/8, error -71 [ 41.215365][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.236980][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.326442][ T406] usb 4-1: device descriptor read/8, error -71 [ 41.366307][ T9] usb 3-1: device descriptor read/8, error -71 [ 41.397516][ T957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 41.397716][ T958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 41.415534][ T957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 41.424896][ T957] syz.1.199: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 41.435492][ T406] usb usb4-port1: unable to enumerate USB device [ 41.439658][ T957] CPU: 0 UID: 0 PID: 957 Comm: syz.1.199 Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8 [ 41.439685][ T957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.439696][ T957] Call Trace: [ 41.439703][ T957] [ 41.439710][ T957] __dump_stack+0x21/0x30 [ 41.439738][ T957] dump_stack_lvl+0x10c/0x190 [ 41.439761][ T957] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.439784][ T957] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 41.439808][ T957] dump_stack+0x19/0x20 [ 41.439829][ T957] warn_alloc+0x1bc/0x2a0 [ 41.439850][ T957] ? stack_depot_save_flags+0x399/0x800 [ 41.439878][ T957] ? __cfi_warn_alloc+0x10/0x10 [ 41.439898][ T957] ? kasan_save_track+0x4f/0x80 [ 41.439915][ T957] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 41.439940][ T957] ? xskq_create+0x68/0x2a0 [ 41.439962][ T957] ? xsk_init_queue+0xb6/0x120 [ 41.439984][ T957] ? xsk_setsockopt+0x43f/0x6f0 [ 41.440005][ T957] ? do_sock_setsockopt+0x26d/0x400 [ 41.440028][ T957] ? __x64_sys_setsockopt+0x1b8/0x250 [ 41.440050][ T957] ? x64_sys_call+0x2adc/0x2ee0 [ 41.440074][ T957] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.440100][ T957] __vmalloc_node_range_noprof+0x135/0x1420 [ 41.440126][ T957] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 41.440149][ T957] ? avc_has_perm+0x144/0x220 [ 41.440172][ T957] ? kasan_save_alloc_info+0x40/0x50 [ 41.440194][ T957] ? __kasan_kmalloc+0x96/0xb0 [ 41.440212][ T957] vmalloc_user_noprof+0x77/0x90 [ 41.440233][ T957] ? xskq_create+0xdb/0x2a0 [ 41.440256][ T957] xskq_create+0xdb/0x2a0 [ 41.440279][ T957] xsk_init_queue+0xb6/0x120 [ 41.440302][ T957] xsk_setsockopt+0x43f/0x6f0 [ 41.440324][ T957] ? __cfi_xsk_setsockopt+0x10/0x10 [ 41.440346][ T957] ? do_futex+0x309/0x500 [ 41.440364][ T957] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 41.440385][ T957] ? security_socket_setsockopt+0x33/0xd0 [ 41.440402][ T957] ? __cfi_xsk_setsockopt+0x10/0x10 [ 41.440424][ T957] do_sock_setsockopt+0x26d/0x400 [ 41.440448][ T957] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 41.440472][ T957] __x64_sys_setsockopt+0x1b8/0x250 [ 41.440495][ T957] x64_sys_call+0x2adc/0x2ee0 [ 41.440520][ T957] do_syscall_64+0x58/0xf0 [ 41.440540][ T957] ? clear_bhb_loop+0x50/0xa0 [ 41.440557][ T957] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 41.440603][ T957] RIP: 0033:0x7f7af218ebe9 [ 41.440618][ T957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.440633][ T957] RSP: 002b:00007f7af3081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.440654][ T957] RAX: ffffffffffffffda RBX: 00007f7af23b5fa0 RCX: 00007f7af218ebe9 [ 41.440668][ T957] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 41.440680][ T957] RBP: 00007f7af2211e19 R08: 0000000000000004 R09: 0000000000000000 [ 41.440691][ T957] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.440703][ T957] R13: 00007f7af23b6038 R14: 00007f7af23b5fa0 R15: 00007ffcd3a1fac8 [ 41.440718][ T957] [ 41.440725][ T957] Mem-Info: [ 41.748953][ T957] active_anon:5986 inactive_anon:1 isolated_anon:0 [ 41.748953][ T957] active_file:8536 inactive_file:6787 isolated_file:0 [ 41.748953][ T957] unevictable:0 dirty:25 writeback:0 [ 41.748953][ T957] slab_reclaimable:4970 slab_unreclaimable:71307 [ 41.748953][ T957] mapped:24299 shmem:168 pagetables:855 [ 41.748953][ T957] sec_pagetables:0 bounce:0 [ 41.748953][ T957] kernel_misc_reclaimable:0 [ 41.748953][ T957] free:1529713 free_pcp:6657 free_cma:0 [ 41.749042][ T9] usb usb3-port1: unable to enumerate USB device [ 41.798814][ T957] Node 0 active_anon:23944kB inactive_anon:4kB active_file:34144kB inactive_file:27148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97196kB dirty:100kB writeback:0kB shmem:672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5180kB pagetables:3420kB sec_pagetables:0kB all_unreclaimable? no [ 41.832002][ T957] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965968kB mlocked:0kB bounce:0kB free_pcp:5756kB local_pcp:0kB free_cma:0kB [ 41.861884][ T957] lowmem_reserve[]: 0 3921 3921 [ 41.867228][ T957] Normal free:3165420kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23944kB inactive_anon:4kB active_file:34144kB inactive_file:27148kB unevictable:1500kB writepending:100kB present:5242880kB managed:4016120kB mlocked:1500kB bounce:0kB free_pcp:12896kB local_pcp:10832kB free_cma:0kB [ 41.899521][ T957] lowmem_reserve[]: 0 0 0 [ 41.903879][ T957] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 41.923995][ T957] Normal: 4*4kB (E) 2*8kB (E) 11*16kB (ME) 13*32kB (UE) 7*64kB (UE) 8*128kB (UME) 19*256kB (ME) 8*512kB (UME) 5*1024kB (UME) 4*2048kB (ME) 765*4096kB (M) = 3157808kB [ 41.942215][ T969] block device autoloading is deprecated and will be removed. [ 41.953455][ T957] 15488 total pagecache pages [ 41.958512][ T957] 1 pages in swap cache [ 41.962680][ T957] Free swap = 124984kB [ 41.966915][ T957] Total swap = 124996kB [ 41.971174][ T957] 2097051 pages RAM [ 41.974997][ T957] 0 pages HighMem/MovableOnly [ 41.979741][ T957] 351529 pages reserved [ 41.983898][ T957] 0 pages cma reserved [ 41.989172][ T957] Memory allocations: [ 41.993169][ T957] 0 B 0 init/main.c:1370 func:do_initcalls [ 42.000427][ T957] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 42.008675][ T957] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 42.016381][ T957] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 42.024290][ T957] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 42.032220][ T957] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 42.040833][ T957] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 42.048768][ T957] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 42.056741][ T957] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 42.064691][ T957] 0 B 0 init/initramfs.c:101 func:find_link [ 42.066605][ T36] audit: type=1400 audit(1755741607.920:304): avc: denied { ioctl } for pid=970 comm="syz.3.203" path="socket:[8398]" dev="sockfs" ino=8398 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.097593][ T36] audit: type=1400 audit(1755741607.940:305): avc: denied { bind } for pid=970 comm="syz.3.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.159608][ T986] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 42.166863][ T986] rust_binder: Write failure EINVAL in pid:168 [ 42.421345][ T997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:176 [ 42.428000][ T36] audit: type=1400 audit(1755741608.290:306): avc: denied { create } for pid=995 comm="syz.3.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 42.554543][ T999] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 42.627692][ T1002] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 42.636411][ T1002] rust_binder: Write failure EINVAL in pid:160 [ 42.665393][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 42.751582][ T1014] fuse: Bad value for 'fd' [ 42.759945][ T36] audit: type=1400 audit(1755741608.620:307): avc: denied { map } for pid=1013 comm="syz.1.220" path="socket:[8447]" dev="sockfs" ino=8447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 42.802710][ T1020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 42.837244][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 42.847406][ T9] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 42.857397][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 42.865727][ T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 42.874846][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.882902][ T9] usb 4-1: Product: syz [ 42.887099][ T9] usb 4-1: Manufacturer: syz [ 42.891694][ T9] usb 4-1: SerialNumber: syz [ 42.897229][ T997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 42.904491][ T997] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 43.035349][ T633] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 43.185377][ T633] usb 3-1: Using ep0 maxpacket: 8 [ 43.192144][ T633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.202004][ T633] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 43.211206][ T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.220198][ T633] usb 3-1: config 0 descriptor?? [ 43.408429][ T1033] 9pnet_fd: Insufficient options for proto=fd [ 43.628594][ T633] hid-multitouch 0003:0EEF:72C4.0008: unknown main item tag 0x0 [ 43.638797][ T633] hid-multitouch 0003:0EEF:72C4.0008: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 43.705387][ T31] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 43.856422][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.867480][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.877625][ T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 43.886718][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.895505][ T31] usb 1-1: config 0 descriptor?? [ 44.231080][ T1054] rust_binder: 1053 RLIMIT_NICE not set [ 44.231315][ T1053] rust_binder: Failed to allocate buffer. len:1128, is_oneway:true [ 44.236958][ T1053] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 44.245058][ T1053] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 44.302552][ T31] cp2112 0003:10C4:EA90.0009: item fetching failed at offset 5/7 [ 44.320544][ T31] cp2112 0003:10C4:EA90.0009: parse failed [ 44.326452][ T31] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -22 [ 44.542416][ T10] usb 1-1: USB disconnect, device number 6 [ 45.385974][ T1068] rust_binder: Write failure EFAULT in pid:179 [ 45.397419][ T9] rtl8150 4-1:1.0: couldn't reset the device [ 45.409753][ T9] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 45.420744][ T9] usb 4-1: USB disconnect, device number 11 [ 45.439519][ T1072] fuse: Unknown parameter '0x0000000000000004' [ 45.515465][ T1078] syzkaller0: entered promiscuous mode [ 45.520985][ T1078] syzkaller0: entered allmulticast mode [ 45.564008][ T1081] capability: warning: `syz.1.245' uses deprecated v2 capabilities in a way that may be insecure [ 45.599193][ T1088] __vm_enough_memory: pid: 1088, comm: syz.3.247, bytes: 18014402804453376 not enough memory for the allocation [ 45.695080][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 45.695100][ T36] audit: type=1400 audit(1755741611.550:313): avc: denied { wake_alarm } for pid=1094 comm="syz.1.248" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.735712][ T36] audit: type=1400 audit(1755741611.600:314): avc: denied { bind } for pid=1096 comm="syz.3.249" laddr=172.20.20.10 lport=255 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.760640][ T36] audit: type=1400 audit(1755741611.600:315): avc: denied { name_bind } for pid=1096 comm="syz.3.249" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 45.783020][ T36] audit: type=1400 audit(1755741611.600:316): avc: denied { node_bind } for pid=1096 comm="syz.3.249" saddr=172.30.1.4 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 45.806795][ T31] usb 3-1: USB disconnect, device number 9 [ 45.807968][ T63] rust_binder: 1017: removing orphan mapping 0:24 [ 45.944475][ T36] audit: type=1400 audit(1755741611.800:317): avc: denied { execute } for pid=1103 comm="syz.3.252" name="file0" dev="ramfs" ino=8113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 45.966769][ T36] audit: type=1400 audit(1755741611.800:318): avc: denied { execute_no_trans } for pid=1103 comm="syz.3.252" path="/file0" dev="ramfs" ino=8113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 45.991158][ T36] audit: type=1400 audit(1755741611.860:319): avc: denied { mounton } for pid=1106 comm="syz.3.254" path="/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 46.175396][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 46.326540][ T31] usb 3-1: config index 0 descriptor too short (expected 162, got 34) [ 46.334889][ T31] usb 3-1: config 127 has an invalid interface number: 54 but max is 0 [ 46.343578][ T31] usb 3-1: config 127 has no interface number 0 [ 46.350087][ T31] usb 3-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 46.359376][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.474407][ T1129] syzkaller0: entered promiscuous mode [ 46.480018][ T1129] syzkaller0: entered allmulticast mode [ 46.486393][ T13] syzkaller0: tun_net_xmit 48 [ 46.487571][ T1129] syzkaller0: create flow: hash 989993273 index 1 [ 46.525680][ T1131] 9pnet_fd: Insufficient options for proto=fd [ 46.570525][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.581114][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.590783][ T1101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.600095][ T1101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.646899][ T31] usb 3-1: string descriptor 0 read error: -71 [ 46.660214][ T31] usb 3-1: USB disconnect, device number 10 [ 46.745589][ T633] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 46.907507][ T633] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 46.925308][ T633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 46.937207][ T633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 46.947244][ T633] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.960327][ T633] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.969548][ T633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.981241][ T633] usb 1-1: config 0 descriptor?? [ 47.017211][ T36] audit: type=1400 audit(1755741612.880:320): avc: denied { setopt } for pid=1161 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.234163][ T36] audit: type=1400 audit(1755741620.094:321): avc: denied { setattr } for pid=1171 comm="syz.2.277" name="file0" dev="incremental-fs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.397089][ T633] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 47.416033][ T633] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 47.424166][ T36] audit: type=1400 audit(1755741620.284:322): avc: denied { lock } for pid=1169 comm="syz.1.276" path="socket:[9306]" dev="sockfs" ino=9306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 47.465814][ T633] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 47.728548][ T633] usb 1-1: USB disconnect, device number 7 [ 47.779767][ T1207] syzkaller0 (unregistered): delete flow: hash 989993273 index 0 [ 48.195972][ T1218] 9pnet_fd: Insufficient options for proto=fd [ 48.222594][ T1223] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 48.229634][ T1223] overlayfs: failed to set xattr on upper [ 48.235579][ T1223] overlayfs: ...falling back to redirect_dir=nofollow. [ 48.242646][ T1223] overlayfs: ...falling back to index=off. [ 48.248518][ T1223] overlayfs: ...falling back to uuid=null. [ 48.254329][ T1223] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 48.269316][ T1225] tipc: Started in network mode [ 48.274412][ T1225] tipc: Node identity , cluster identity 4711 [ 48.280926][ T1225] tipc: Failed to obtain node identity [ 48.286464][ T1225] tipc: Enabling of bearer rejected, failed to enable media [ 48.482118][ T1268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 48.865453][ T1286] futex_wake_op: syz.0.318 tries to shift op by 144; fix this program [ 48.887380][ T1288] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 48.896272][ T1288] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 48.912646][ T1288] IPv6: NLM_F_CREATE should be specified when creating new route [ 48.953190][ T1297] rust_binder: Got transaction with invalid offset. [ 48.953291][ T1297] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 48.960026][ T1297] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:196 [ 48.994116][ T1302] rust_binder: Write failure EINVAL in pid:199 [ 49.072498][ T1314] netlink: 'syz.1.327': attribute type 4 has an invalid length. [ 49.236918][ T1324] tmpfs: Unknown parameter 'usrquota' [ 49.474163][ T1352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1352 comm=syz.0.341 [ 49.571841][ T1360] rust_binder: 224: no such ref 1 [ 49.576941][ T1360] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 49.584126][ T1360] rust_binder: Error while translating object. [ 49.584146][ T1360] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 49.590338][ T1360] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:224 [ 49.600314][ T1361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 49.619891][ T1364] rust_binder: pid 1364 performed invalid decrement on ref [ 49.644438][ T1367] __vm_enough_memory: pid: 1367, comm: syz.0.345, bytes: 18014402804453376 not enough memory for the allocation [ 50.005346][ T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.155329][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 50.161926][ T31] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 50.170341][ T31] usb 1-1: config 0 has no interface number 0 [ 50.177113][ T31] usb 1-1: config 0 interface 200 has no altsetting 0 [ 50.185383][ T31] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 50.194485][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.202619][ T31] usb 1-1: Product: syz [ 50.207026][ T31] usb 1-1: Manufacturer: syz [ 50.211637][ T31] usb 1-1: SerialNumber: syz [ 50.216925][ T31] usb 1-1: config 0 descriptor?? [ 50.425184][ T31] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input5 [ 50.438153][ T31] usb 1-1: USB disconnect, device number 8 [ 50.975629][ T1452] netlink: 'syz.1.375': attribute type 5 has an invalid length. [ 50.983534][ T1452] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.375'. [ 51.021763][ T1458] netlink: 228 bytes leftover after parsing attributes in process `syz.1.378'. [ 51.213298][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 51.213318][ T36] audit: type=1400 audit(1755741631.075:337): avc: denied { ioctl } for pid=1478 comm="syz.3.385" path="socket:[9845]" dev="sockfs" ino=9845 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.318585][ T1502] 9pnet_fd: Insufficient options for proto=fd [ 51.353341][ T36] audit: type=1400 audit(1755741631.215:338): avc: denied { map } for pid=1507 comm="syz.3.397" path="socket:[9884]" dev="sockfs" ino=9884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 51.376264][ T36] audit: type=1400 audit(1755741631.215:339): avc: denied { accept } for pid=1507 comm="syz.3.397" path="socket:[9884]" dev="sockfs" ino=9884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 51.781173][ T1535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 51.920054][ T1541] rust_binder: Failed to allocate buffer. len:1128, is_oneway:true [ 51.929372][ T1541] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 51.937421][ T1541] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 51.957109][ T1546] fuse: Bad value for 'fd' [ 51.978984][ T31] rust_binder: 1540: removing orphan mapping 0:24 [ 52.462630][ T1562] netlink: 188 bytes leftover after parsing attributes in process `syz.1.416'. [ 52.466164][ T36] audit: type=1400 audit(1755741632.325:340): avc: denied { mount } for pid=1563 comm="syz.3.417" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.856723][ T36] audit: type=1400 audit(1755741632.725:341): avc: denied { write } for pid=1591 comm="syz.0.425" name="/" dev="incremental-fs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.879267][ T36] audit: type=1400 audit(1755741632.725:342): avc: denied { add_name } for pid=1591 comm="syz.0.425" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.899844][ T36] audit: type=1400 audit(1755741632.725:343): avc: denied { create } for pid=1591 comm="syz.0.425" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.919894][ T36] audit: type=1400 audit(1755741632.725:344): avc: denied { associate } for pid=1591 comm="syz.0.425" name=".log" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 53.004841][ T1595] 9pnet_fd: Insufficient options for proto=fd [ 53.186143][ T1605] fuse: Unknown parameter '2' [ 53.191681][ T36] audit: type=1400 audit(1755741633.055:345): avc: denied { mounton } for pid=1604 comm="syz.0.429" path="/94/file1" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 53.406459][ T1638] overlay: filesystem on ./bus not supported as upperdir [ 53.414059][ T1638] SELinux: Context ϧ is not valid (left unmapped). [ 53.426199][ T1638] overlay: filesystem on ./bus not supported as upperdir [ 53.434127][ T36] audit: type=1400 audit(1755741633.295:346): avc: denied { create } for pid=1637 comm="syz.2.439" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE [ 53.434604][ T1638] incfs: ino conflict with backing FS 2 [ 53.489969][ T1652] fuse: Bad value for 'fd' [ 53.588954][ T1672] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 53.590274][ T1674] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 53.652533][ T45] rust_binder: 1673: removing orphan mapping 0:8 [ 53.905361][ T45] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 54.055384][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 54.061687][ T45] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.069503][ T1699] netlink: 5308 bytes leftover after parsing attributes in process `syz.3.461'. [ 54.070165][ T45] usb 1-1: config 0 has no interface number 0 [ 54.085198][ T45] usb 1-1: config 0 interface 184 has no altsetting 0 [ 54.095074][ T45] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.104591][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.113370][ T45] usb 1-1: Product: syz [ 54.117834][ T45] usb 1-1: Manufacturer: syz [ 54.122599][ T45] usb 1-1: SerialNumber: syz [ 54.129793][ T45] usb 1-1: config 0 descriptor?? [ 54.137565][ T45] smsc75xx v1.0.0 [ 54.146005][ T1710] tc_dump_action: action bad kind [ 54.680034][ T1736] veth1_vlan: mtu greater than device maximum [ 54.731660][ T1744] overlayfs: failed to clone upperpath [ 55.465428][ T1790] fuse: Bad value for 'fd' [ 55.917810][ T1802] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 55.925520][ T1802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.498'. [ 56.028448][ T1816] cgroup2: Unknown parameter 'memry_recursiveprot' [ 56.512777][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 56.512794][ T36] audit: type=1400 audit(1755741636.375:354): avc: denied { relabelfrom } for pid=1831 comm="syz.3.513" name="" dev="pipefs" ino=11436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 56.607674][ T36] audit: type=1400 audit(1755741636.475:355): avc: denied { read } for pid=1843 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.635799][ T1848] 9pnet_fd: Insufficient options for proto=fd [ 56.676705][ T1863] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 56.691288][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 56.702477][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 56.712679][ T45] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 56.723420][ T45] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 56.736381][ T1870] netlink: 2 bytes leftover after parsing attributes in process `syz.0.524'. [ 56.739078][ T45] usb 1-1: USB disconnect, device number 9 [ 56.874754][ T36] audit: type=1400 audit(1755741636.735:356): avc: denied { write } for pid=1891 comm="syz.0.529" name="vlan0" dev="proc" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.927714][ T36] audit: type=1400 audit(1755741636.795:357): avc: denied { map } for pid=1891 comm="syz.0.529" path="/proc/314/net/vlan/vlan0" dev="proc" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.951831][ T36] audit: type=1400 audit(1755741636.795:358): avc: denied { execute } for pid=1891 comm="syz.0.529" path="/proc/314/net/vlan/vlan0" dev="proc" ino=4026532779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 56.984315][ T1895] netlink: 'syz.1.530': attribute type 4 has an invalid length. [ 57.057906][ T36] audit: type=1400 audit(1755741636.925:359): avc: denied { unmount } for pid=1896 comm="syz.0.531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 57.108310][ T36] audit: type=1400 audit(1755741636.975:360): avc: denied { create } for pid=1905 comm="syz.0.533" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 57.108764][ T1906] bridge_slave_0: left allmulticast mode [ 57.143357][ T1906] bridge_slave_0: left promiscuous mode [ 57.148997][ T1906] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.170161][ T1906] netlink: 'syz.0.533': attribute type 25 has an invalid length. [ 57.332374][ T1913] 9pnet_fd: Insufficient options for proto=fd [ 57.348871][ T36] audit: type=1326 audit(1755741637.215:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1914 comm="syz.0.537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5f0f8ebe9 code=0x0 [ 57.733516][ T36] audit: type=1400 audit(1755741637.595:362): avc: denied { map } for pid=1952 comm="syz.2.549" path="pipe:[11603]" dev="pipefs" ino=11603 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 57.779009][ T330] bridge_slave_1: left allmulticast mode [ 57.789988][ T330] bridge_slave_1: left promiscuous mode [ 57.802476][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.822877][ T330] bridge_slave_0: left allmulticast mode [ 57.827886][ T1962] netlink: 680 bytes leftover after parsing attributes in process `syz.2.553'. [ 57.836343][ T330] bridge_slave_0: left promiscuous mode [ 57.843124][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.858080][ T36] audit: type=1400 audit(1755741637.725:363): avc: denied { mount } for pid=1967 comm="syz.1.554" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.003010][ T330] tipc: Left network mode [ 58.016268][ T330] veth1_macvtap: left promiscuous mode [ 58.034567][ T330] veth0_vlan: left promiscuous mode [ 58.188906][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.194000][ T1995] fuse: Bad value for 'rootmode' [ 58.196226][ T1983] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.208346][ T1983] bridge_slave_0: entered allmulticast mode [ 58.214889][ T1983] bridge_slave_0: entered promiscuous mode [ 58.215337][ T1997] overlayfs: failed to clone upperpath [ 58.221580][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.233368][ T1983] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.240751][ T1983] bridge_slave_1: entered allmulticast mode [ 58.247138][ T1983] bridge_slave_1: entered promiscuous mode [ 58.320542][ T1983] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.327644][ T1983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.334947][ T1983] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.342034][ T1983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.373771][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.381497][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.402670][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.409767][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.419155][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.426212][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.469963][ T1983] veth0_vlan: entered promiscuous mode [ 58.493090][ T2036] 9pnet_fd: Insufficient options for proto=fd [ 58.496299][ T1983] veth1_macvtap: entered promiscuous mode [ 58.539188][ T2042] /dev/loop0: Can't lookup blockdev [ 58.546866][ T2042] /dev/loop0: Can't lookup blockdev [ 58.578525][ T2053] /dev/loop0: Can't lookup blockdev [ 59.150697][ T2126] cgroup: Name too long [ 59.169031][ T2131] incfs: ino conflict with backing FS 1 [ 59.174946][ T2132] incfs: Error accessing: overlay. [ 59.180569][ T2133] overlayfs: conflicting options: nfs_export=on,index=off [ 59.182140][ T2132] incfs: mount failed -2 [ 59.232938][ T2140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 59.638346][ T2157] tipc: Started in network mode [ 59.643261][ T2157] tipc: Node identity 7f000001, cluster identity 4711 [ 59.650688][ T2157] tipc: Enabled bearer , priority 10 [ 59.658266][ T2157] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 59.666523][ T2157] tipc: Enabled bearer , priority 10 [ 59.711394][ T2164] fuseblk: Bad value for 'fd' [ 60.263999][ T2200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=252 sclass=netlink_route_socket pid=2200 comm=syz.4.632 [ 60.387296][ T2219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 60.399897][ T2219] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.412840][ T2219] bridge_slave_1 (unregistering): left allmulticast mode [ 60.420032][ T2219] bridge_slave_1 (unregistering): left promiscuous mode [ 60.429595][ T2219] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.658625][ T2252] IPv6: NLM_F_CREATE should be specified when creating new route [ 60.668292][ T2252] overlayfs: failed to clone upperpath [ 60.701754][ T2259] overlayfs: failed to resolve '/E#J]@!Y= [ 60.701754][ T2259] #Wd)': -2 [ 60.729471][ T2265] overlayfs: failed to clone upperpath [ 60.765331][ T10] tipc: Node number set to 2130706433 [ 61.033440][ T2294] TCP: out of memory -- consider tuning tcp_mem [ 61.394222][ T2322] overlay: ./file1 is not a directory [ 61.528989][ T2338] 9pnet_fd: Insufficient options for proto=fd [ 61.967911][ T2376] overlayfs: failed to clone upperpath [ 62.289792][ T2386] incfs: ino conflict with backing FS 1 [ 62.295848][ T2386] incfs: ino conflict with backing FS 1 [ 62.301947][ T2386] overlayfs: conflicting options: nfs_export=on,index=off [ 62.509019][ T2410] netlink: 'syz.0.709': attribute type 4 has an invalid length. [ 62.516924][ T2410] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.709'. [ 62.526183][ T2410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=2410 comm=syz.0.709 [ 62.526405][ T2411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=2411 comm=syz.0.709 [ 62.649225][ T2410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 62.650824][ T2411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 62.726431][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 62.726450][ T36] audit: type=1400 audit(1755741642.595:375): avc: denied { getopt } for pid=2418 comm="syz.0.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.758135][ T2423] overlayfs: failed to clone upperpath [ 62.764267][ T2423] fuse: Bad value for 'fd' [ 62.851185][ T36] audit: type=1400 audit(1755741642.715:376): avc: denied { getopt } for pid=2442 comm="syz.1.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.890661][ T36] audit: type=1400 audit(1755741642.745:377): avc: denied { create } for pid=2448 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 63.016938][ T36] audit: type=1400 audit(1755741642.885:378): avc: denied { read } for pid=2447 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 63.018481][ T2459] 9pnet_fd: Insufficient options for proto=fd [ 63.094460][ T36] audit: type=1326 audit(1755741642.955:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.4.724" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f440dd8ebe9 code=0x0 [ 63.138694][ T36] audit: type=1400 audit(1755741642.955:380): avc: denied { execute } for pid=2462 comm="syz.1.725" path="/dev/rnullb0" dev="tmpfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.372789][ T36] audit: type=1400 audit(1755741643.235:381): avc: denied { create } for pid=2473 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.422780][ T36] audit: type=1400 audit(1755741643.235:382): avc: denied { write } for pid=2473 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 200) OK [ 63.489766][ T36] audit: type=1400 audit(1755741643.235:383): avc: denied { nlmsg_write } for pid=2473 comm="syz.1.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 Stopping crond: stopped /usr/sbin/crond (pid 193) OK [ 63.592128][ T36] audit: type=1400 audit(1755741643.455:384): avc: denied { mounton } for pid=2497 comm="syz.2.736" path="/146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 147) [ 63.678185][ T2504] 9pnet_fd: Insufficient options for proto=fd [ 63.681866][ T2506] netlink: 84 bytes leftover after parsing attributes in process `syz.2.739'. [ 63.742270][ T2519] 9pnet_fd: Insufficient options for proto=fd [ 63.747511][ T2520] overlayfs: failed to clone upperpath Stopping network: [ 63.786660][ T2529] netlink: 'syz.0.744': attribute type 58 has an invalid length. [ 63.795709][ T2530] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 63.814311][ T2529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2052 sclass=netlink_route_socket pid=2529 comm=syz.0.744 [ 63.880612][ T2538] 9pnet_fd: Insufficient options for proto=fd OK Stopping iptables: [ 63.963678][ T2562] overlayfs: missing 'lowerdir' OK Stopping system message bus: done Stopping klogd: [ 64.254584][ T2586] netlink: 'syz.0.755': attribute type 1 has an invalid length. OK Stopping acpid: [ 64.365469][ T2599] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 64.499616][ T2627] fuseblk: Bad value for 'rootmode' [ 64.578878][ T2640] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=63 sclass=netlink_tcpdiag_socket pid=2640 comm=syz.2.773 [ 64.620755][ T2647] bpf: Bad value for 'gid' [ 65.195605][ T2696] overlayfs: failed to clone upperpath [ 65.255871][ T2699] tmpfs: Bad value for 'nr_inodes' OK Stopping syslogd: stopped /sbin/syslogd (pid 91) OK [ 65.383560][ T2719] fuse: Bad value for 'rootmode' [ 65.387830][ T2718] fuse: Bad value for 'rootmode' umount: can't remount debugfs read-only Connection to 10.128.1.182 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 65.659263][ T1856] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 65.671905][ T1856] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 65.680612][ T1856] CPU: 0 UID: 0 PID: 1856 Comm: syz.2.520 Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8 [ 65.692541][ T1856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.702695][ T1856] RIP: 0010:current_umask+0x4e/0x80 [ 65.707909][ T1856] Code: 81 c3 78 08 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 60 ca e5 ff 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 0c 8b 03 5b 41 5e 5d e9 8e cc 97 03 cc 89 [ 65.727518][ T1856] RSP: 0018:ffffc9000de2f5e0 EFLAGS: 00010203 [ 65.733591][ T1856] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff88810b385f00 [ 65.741559][ T1856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.749534][ T1856] RBP: ffffc9000de2f5f0 R08: 000000003e0539ff R09: 00000001effbffac [ 65.757503][ T1856] R10: effbffac00000000 R11: 0000000000000001 R12: ffff888123cdd040 [ 65.765472][ T1856] R13: ffff888123cdd068 R14: dffffc0000000000 R15: ffff88811308b880 [ 65.773614][ T1856] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 65.782546][ T1856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.789155][ T1856] CR2: 00007f83ecc02bd0 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 65.797154][ T1856] Call Trace: [ 65.800435][ T1856] [ 65.803367][ T1856] vfs_mknod+0x486/0x6d0 [ 65.807619][ T1856] ovl_cleanup_and_whiteout+0x230/0x6a0 [ 65.813203][ T1856] ? __cfi_ovl_cleanup_and_whiteout+0x10/0x10 [ 65.819288][ T1856] ? lookup_one+0x180/0x2e0 [ 65.823799][ T1856] ? __cfi_lookup_one+0x10/0x10 [ 65.828648][ T1856] ? lock_two_directories+0x10e/0x230 [ 65.834023][ T1856] ? lock_rename+0x5c/0xb0 [ 65.838444][ T1856] ovl_do_remove+0x886/0xcf0 [ 65.843044][ T1856] ? ovl_set_redirect+0x780/0x780 [ 65.848084][ T1856] ? down_write+0xe9/0x2a0 [ 65.853129][ T1856] ? __cfi_down_write+0x10/0x10 [ 65.858006][ T1856] ovl_rmdir+0x1e/0x30 [ 65.862123][ T1856] vfs_rmdir+0x3dd/0x560 [ 65.866390][ T1856] incfs_kill_sb+0x109/0x230 [ 65.871365][ T1856] deactivate_locked_super+0xd5/0x2a0 [ 65.876763][ T1856] deactivate_super+0xb8/0xe0 [ 65.881459][ T1856] cleanup_mnt+0x3f1/0x480 [ 65.885884][ T1856] __cleanup_mnt+0x1d/0x40 [ 65.890316][ T1856] task_work_run+0x1e3/0x250 [ 65.895030][ T1856] ? __cfi_task_work_run+0x10/0x10 [ 65.900170][ T1856] ? free_nsproxy+0x223/0x290 [ 65.904860][ T1856] do_exit+0x9bc/0x2630 [ 65.909020][ T1856] ? __sched_text_start+0x10/0x10 [ 65.914059][ T1856] ? __cfi_do_exit+0x10/0x10 [ 65.918761][ T1856] ? __kasan_check_write+0x18/0x20 [ 65.923908][ T1856] ? _raw_spin_lock_irq+0x8d/0x120 [ 65.929040][ T1856] ? __kasan_check_read+0x15/0x20 [ 65.934171][ T1856] ? cgroup_update_frozen+0x160/0x990 [ 65.939656][ T1856] do_group_exit+0x22a/0x300 [ 65.944282][ T1856] ? cgroup_leave_frozen+0x16c/0x2b0 [ 65.949595][ T1856] get_signal+0x139d/0x14f0 [ 65.954143][ T1856] arch_do_signal_or_restart+0x96/0x720 [ 65.959804][ T1856] ? common_nsleep+0x93/0xb0 [ 65.964431][ T1856] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 65.970645][ T1856] ? __se_sys_clock_nanosleep+0x300/0x390 [ 65.976382][ T1856] ? __kasan_check_read+0x15/0x20 [ 65.981427][ T1856] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 65.987500][ T1856] syscall_exit_to_user_mode+0x58/0xb0 [ 65.992963][ T1856] do_syscall_64+0x64/0xf0 [ 65.997380][ T1856] ? clear_bhb_loop+0x50/0xa0 [ 66.002054][ T1856] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 66.007956][ T1856] RIP: 0053:0x68daea46cc5edccd [ 66.012715][ T1856] Code: Unable to access opcode bytes at 0x68daea46cc5edca3. [ 66.020075][ T1856] RSP: 002b:0000000000000000 EFLAGS: 00000202 ORIG_RAX: 3b493b81f3229b3a [ 66.028752][ T1856] RAX: 000000004d98db3a RBX: 00000000323b3a02 RCX: 00000000060d53a8 [ 66.037080][ T1856] RDX: 00000000134f4448 RSI: 000000006b179c8d RDI: 000000001df9f004 [ 66.045148][ T1856] RBP: 0000000051feb9e6 R08: 9e00aa80badf9ca3 R09: 262a8f46fc1abed3 [ 66.053121][ T1856] R10: d108cbe03db740d8 R11: f0a971f7bb0d4045 R12: 6c14749917ebe22e [ 66.061116][ T1856] R13: f371a5dada18777f R14: d6f16f60921a6484 R15: 83b20c40cccad612 [ 66.069093][ T1856] [ 66.072113][ T1856] Modules linked in: [ 66.076357][ T1856] ---[ end trace 0000000000000000 ]--- [ 66.105427][ T1856] RIP: 0010:current_umask+0x4e/0x80 [ 66.110696][ T1856] Code: 81 c3 78 08 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 60 ca e5 ff 48 8b 1b 48 83 c3 0c 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 0c 8b 03 5b 41 5e 5d e9 8e cc 97 03 cc 89 [ 66.130401][ T1856] RSP: 0018:ffffc9000de2f5e0 EFLAGS: 00010203 [ 66.136676][ T1856] RAX: 0000000000000001 RBX: 000000000000000c RCX: ffff88810b385f00 [ 66.144819][ T1856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.155841][ T1856] RBP: ffffc9000de2f5f0 R08: 000000003e0539ff R09: 00000001effbffac [ 66.163856][ T1856] R10: effbffac00000000 R11: 0000000000000001 R12: ffff888123cdd040 [ 66.171951][ T1856] R13: ffff888123cdd068 R14: dffffc0000000000 R15: ffff88811308b880 [ 66.195421][ T1856] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 66.204416][ T1856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.211070][ T1856] CR2: 00007ffd91045ff8 CR3: 00000000072a8000 CR4: 00000000003526b0 [ 66.219123][ T1856] Kernel panic - not syncing: Fatal exception [ 66.225343][ T1856] Kernel Offset: disabled [ 66.229673][ T1856] Rebooting in 86400 seconds..