last executing test programs: 56.630099106s ago: executing program 3 (id=3811): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008", @ANYRES32], 0x30}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000095000040"]) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002500)=[{{&(0x7f0000000140)={0x2, 0x4e24, @broadcast}, 0x0, &(0x7f0000000200)=[{&(0x7f0000001040)="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"}, {&(0x7f0000000440)="61ad7b1ea9f22fff590ffb5c4f566172d8912ee1fc8828c665fd42b22ad09deb5d2ec3afbbf4a0b7f1bb220d8ab4dea77650da0ddfefe02e5a096b93773153a84d89770d7358c73157c692a7678364f5dc60b990d598745bac4815a4d8c6672d7f848cc9b01c346ade3342775edbb2beddb760d5e797df1e5ad02f13cc267f9e1f33506454fbd61c9723d1b606b8a2461b61f064781bf5832011958efa2e8b50fe735ed73f910c00"}, {&(0x7f00000001c0)="6b3f52612bfbf41c2ec4eba2d82b8d"}]}}, {{&(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="3468e3adcd23503c096d2fbb4fb54d058adc7481ec052e4bdf45a0f04867f728a2721e4b87e87bb8b115fd91554ce45cfee34a5c1ccdb559de3075a7b9c52d41c9c17323c5ab344f7d0126fb0899f5b058d30d8cc5f2c0ae91546d8067bc02d34c09030ba5a459148f0b6a65422ab40b90636d129e7a4ccdcc70ff52f6e5a14162e53040ec804b8c488d211788a55b94ce32434581b78fa3409b2b064548803ee45652d451eadb33b4cc570786609cad432535e50cc42ac813a9a7f6c6e6cd517d415d892ed2d22853494c7c8e4c9816f25e782c3e923b11d8a1de243d41717a087158b5f669bbd204a07715"}, {&(0x7f0000000380)="0eda275340c9993528d4fce157"}, {&(0x7f0000000700)="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"}, {&(0x7f0000000800)="a8c46faf0eea20e7f30658e7c807d7cf5d30dc9751de648b765638ce12d23f1722cf4e674c0e42623131c61ecc87b15970772e1ae9b173b5be0db32829c7ef1899656ab64a9c0513600c80cbbfcbdb4c0f963011db9af1dc124c8b849358ff1e543af71582bfc702d98ea98d45347337f61bfc0a1835aed5fca13869f0038c3e23101a72d177f8b1338ac1b3e5bd49f6ff91e876cea1c223db"}], 0x0, &(0x7f00000008c0)=[@ip_tos_u8, @ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x95, [@multicast1]}, @generic={0x7, 0x0, "be2ff6aee153732cb8a6"}, @timestamp_addr={0x44, 0x0, 0x7e, 0x1, 0x4, [{@loopback, 0xc9}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0x10000}, {@rand_addr=0x64010100, 0x1}]}, @timestamp={0x44, 0x0, 0x8b, 0x0, 0x7, [0x7, 0xffffffff, 0xfffffff7, 0x5, 0x7, 0x0, 0x8, 0x1000]}, @rr={0x7, 0x0, 0xe9, [@loopback]}, @end, @ra]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x7}}, @ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0x1, [@private=0xa010102, @private=0xa010101, @local]}, @end, @generic={0x83, 0x0, "b34ea6"}, @generic={0x86, 0x0, "80"}, @rr={0x7, 0x0, 0xef, [@dev={0xac, 0x14, 0x14, 0x24}, @loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0xe9, 0x0}, @empty]}, @ssrr={0x89, 0x0, 0xc4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x36}]}, @cipso={0x86, 0x0, 0xffffffffffffffff, [{0x7, 0x0, "a065d9d5ebd125dc62cb2610eb"}, {0x6, 0x0, "1d3b8c0ff7751603548b34f329da"}, {0x0, 0x0, "2271e4"}, {0x0, 0x0, "5ea01b7c3c"}, {0x5, 0x0, "8a51ce3deeca5c"}, {0x6, 0x0, "27fe21fdeb6526f072dfdad06ec550"}]}, @lsrr={0x83, 0x0, 0xb3, [@multicast1]}, @generic={0x88, 0x0, "8b18da4b0bfdb93f621e9d3fad7d059d"}]}}}]}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a40)="03d7f07a7cf76b77607c823ecbbf5bf9a4c40118f9882c8a65a717ee3653aecde683d58d2de2b575e5f53a62f762e068da1f0b83035153a70e09026bba995fd4a7667b81fe75f0e84321e2be652767c29c59cbe288252676e1c1cbbd894c853f26b7a1215b299d9e04fa4b356acb48200d88664f3b85a5c806303b5a88dba776adf501f7e3050836688997134a9dbd20ebe0c7665424b6e866fadfcaeaaae34d9e66f4929e75e41007cff68474b0d9178be999a8fda9e5acb002eef1a2c3a0926a6e5cba2317a7e89613aeb73ae630c7260ecc4cf74bd789ca693b3ffd115f189f66605e21ee0a0d36da1d306533f27e5d"}, {&(0x7f0000000b40)="da09c2333069e428ac3bb9b65762ab31f194fa5f57a0e2427aeffc65a23a8abb1901420c9539aa976c9153e59a23390aeb9eca3653887b91d7be238ee8150c993c581fb909e21caeefb55af39f155b408c647443b1e7e246ffce39aa4ecb"}, {&(0x7f0000000bc0)="a3965448b29d3acd5089c993848c35428bd9751d58c90482a6be5356a6305aad091f7a400187f7cb35a055cb850cece317b862bbdbbac3dec29231dee268f25473490bc3ecf7a9f94e7114123ec06047969240be09882137f423c5f21e88b43f3aeda0382c1e50fb1dc6b04a4f636b6708671ee979a353ca77af72b746d128e03402529f9a4d1bd006036c5335064262fba063bdbd9315e757f09616832482cf053d32ffc996c86ac4d30dfa99dabd1ded832ae8bbbbb2659b05150b25e18fe0c26d225e789ecda7a0df6e457d0bf98069566e30de0ba72fce69"}], 0x0, &(0x7f0000000d00)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x3ec3}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @private=0xa010101, @loopback}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x7}}]}}, {{&(0x7f0000000dc0)={0x2, 0x4e23, @loopback}, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="5d3c627e056f7a647e5aab9e7b74d7080f3d37bec66cbd46745d3e963a9759646768445c8d2ca6ab5dd160110e6ede2148866e0d"}, {&(0x7f0000000e40)="c6116ebd334a7c9340e3ddddd9f29a8462881b443dd438b19e9ef10dd06d4e24d42b2f72ed5c67b93eb52de86a6adc36ae98b88e27ef4d1b9c5a6618e3075d9d887dc0caa58ffc0b15c3f8b4164401f64e0a7944db5ff69341d867029a332dd6ac5e76052d6f8468df04a788aa03350c30d8b4d867057c11ca034558f320d76b1d08b88fe708f069d7"}], 0x0, &(0x7f0000000f40)=[@ip_ttl={{0x0, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x6}}]}}, {{&(0x7f0000000f80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002040)="10e55a6a861d4b63770cf95f27df52b0307b635cfa4c0ee451c69f882388a669c799c61ebd"}, {&(0x7f0000002080)="bae3c470b65c1c88e88b285333b59f3d90d0179574b27a6fad4e04464396e9e40541fe3e0afe99a43fcae078ad5a29a492fa1364d45fe32bcbcb8e49b72d1089f1adeeedecfd5719f3217c2dbebc9a0959449e82b5a96f8b4809e8b2"}, {&(0x7f0000002100)="cc3fd0ac922877f32e56d3e0a7e62aa33a2e0d7ce3f1f858a210e5bfbf71e49098ad85c055fde6544e7120464a273ff426ae5affa9e1ce2183acd02976d62577e5b65590bf39a9da4a9d822800dfb745bb3b83542cfee5bbb0de6b810560a926fe8b14eba74b00ce46e70a917aca5ddc5bb2375ec7fb36c605c14aedd2ebf2a04bd9b52bdb09f1781b9daeb3020a658c90e083067ac97d4d828e3b23922b63d6175e76"}, {&(0x7f00000021c0)="0b21514769efa40078588da8ee8c9d5a8b8173cd8d3dfade91278f07e6c073f242217e889de5252b03d36b234b679b8525f56a702f33d9a1f789b7382f80d0d3e99e006112cae57b2cd2e8b5250a2a506b03c79457a0d6d95c380fe16254dbb9736fdc498f7d45f184fc3b25a33714d785041fd40130b207f73911194f560252fe6b5a2bd7f72d7da52e0c2bee699d32d6d8efd3d3a9628e65142dd74df8f0b7b13b70a880fc59e9c482df9ef40abea7a313b6814c1be18e07a692d6d8ddba45e2"}], 0x0, &(0x7f0000002300)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x100}}, @ip_ttl={{0x0, 0x0, 0x2, 0xfffffffc}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @multicast1, @broadcast}}}, @ip_ttl, @ip_tos_u8={{0x0, 0x0, 0x1, 0x7}}, @ip_tos_u8, @ip_tos_u8={{0x0, 0x0, 0x1, 0x2}}]}}, {{&(0x7f0000002400)={0x2, 0x4e20, @broadcast}, 0x0, &(0x7f0000002480)=[{&(0x7f0000002440)="53fc3f38779210ae3ade2b851e45fb2a022e44caaf673264e3076c4376664a781daa8f7ad7d626e5d38c2d26b0dcda"}], 0x0, &(0x7f00000024c0)}}], 0x1a, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x6a) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x8}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="780000000001010411000000000000000200fffd240001801400018008000100e000200108000200e00000010c00028005000100000000002400028014000180080001000000000008000000000000000f0002800500010000000000080007400000000014000f8008000140000000000800024002000000"], 0x78}}, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x101c82, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xd2200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000080)={0xdc}) mknodat(r7, &(0x7f0000000080)='./file0\x00', 0x200, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000000), 0x880, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}, {@redirect_dir_follow}]}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) 56.576482427s ago: executing program 3 (id=3813): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0xfeffff, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [], 0x6b}}) 56.560669457s ago: executing program 3 (id=3814): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000300)={0x0, 0x3, 0x4b, {0x4b, 0x24, "b12256ab0be952c3923149fb8e358af52e60ade9d42c1beb60c3793612988e57e3cf6e4f4fbe58cd2a68057a22d297cd0561f76cd7afaf2cac1d43b68c81e73f25df739218ba12580d"}}, 0x0, &(0x7f0000000180)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x40, 0x7, 0xc, "e949afd9baeb655f87ca10e3"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, 0x0, &(0x7f0000000880)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x93}, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) 56.041508795s ago: executing program 3 (id=3820): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) mmap(&(0x7f000041d000/0x3000)=nil, 0x3000, 0x200000b, 0x22052, r0, 0x4e4f1000) 55.986073876s ago: executing program 3 (id=3821): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001600)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0xfa, 0x5}, {0x28, 0x0, 0x0, 0x7fff}, {0x6, 0xfc}]}, 0x10) (async) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0xd3f57e99a1fc4cc2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r3, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000340)={0xffffdffffffffffb, 0xfffffffffffffffd}, 0x0) (async) pipe(&(0x7f0000000000)) (async) brk(0x689d80000000) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000280)={0x0, 0x2d, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 55.985800446s ago: executing program 3 (id=3822): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x3ff) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x82) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) r5 = dup(r4) io_submit(0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) io_setup(0x80000000, &(0x7f0000000100)=0x0) io_submit(r7, 0x5, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f00000002c0)="90c1b04b8733359bd26a8a61f3010b3242d59f52bbceb39d84fdff0d265a26609de6a8c9f7d5c9b0b0b7f0837f3c49b3cc6b2dee9df194eb1815c405e47e8950fe187a4478f37b3efe923050ce661f1f2da68cf6d784328e6d7c9170b1a3854711f7db6bdd085f9a4f109fabd13ad750bd43ec8d1af775fe7c545a9b0dca1d256a1fb055de373642cb05e017", 0x8c, 0x7, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xe056, r4, &(0x7f0000000480)="317b5817f14c09dfc07990b78965b308a0afa06ce90bb0b26bba107200c4af468d4ce4bf676809db9a731d8e1cd696e8d4fb8cfd861300368b49f09f9cdb2d76e345c4442dc29e528423b026dac3573850cfc751882209038613f7d6247017c8b664e85f5fb93abaa76cbb14fbf944435b24f5550ecd1ff8b0d4f73ba3ff546dc9d5126729aba29f848a9ae50ea25de1a3b826de54a2d05bc096c15ece420b2f9c0d850320978ff57fde4b325d6ec6b1047f69b11c671fa8bbe379b282a9be6a1a99b24f396aa56a", 0xc8, 0xc02c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xffff, r3, &(0x7f0000000600)="677fbf843dd8a9f254cb6a30aaee4811a5e487cbfdc347710f78d483d80fe5f23e023f92926ff78477985068df198efb57bb3ca7aaae33a3dde5379973e2174fc27cb5772afabfabf774393e3e2fc16d004bb5ccb37166acb33055006666d0b37a7901d664ba425ddc85cc99b58aa441ce85b2535d1f1849c690dfbc05262ed3e8b8b2ffd91846da462a73d0e37ea45ce79a212c95104f88d71fb743f8571e6af6a696322e7426e3b16802b49c6eafd38b01043711cb531988d5787cdf54d451c9ac795ad3ccdfe894b839bb69fa80e1d24d3d", 0xd3, 0x3, 0x0, 0x2, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f0000000780)="36e197c563505ea481e9bd2144a2ce9fdfb2e4649fc9d9fef99d277fb8c3496acfdcf59fb34f17d86ed3e9af90c479da8f50d55b859f6e0e4fe533742a0921d96212ca5f8981151b7a6478c22f34d54e857e71c83e436b800198a391cad3b8dcb194eec380b52de0cfcb0036597fab7abb9e95359b75cdd2d579760435f957ea655bfdceb8b5b09b90", 0x89, 0xffff, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xd, r4, &(0x7f0000000840)="60f965c55b70619b1b6b11f7817f6567cb27ed1c90238930c748f471737611663bf5ce4682d30cbf46ac480684b39bf29f04aed42d4f107b254bba33bb889fe6f5f6d4935c2550b8787a298fb92b658a79bb75c395657ea44a6671f53376699c6c76003c6591b663ce51e6401da2580af96a45f2293af78f520388827dd9602f644554596eb3fd0c57d983fbed423df677", 0x91, 0x200, 0x0, 0x2, r2}]) 41.234764404s ago: executing program 1 (id=4037): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310ff8000000000000000000002000900080000000a0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000009fc0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 41.220978254s ago: executing program 1 (id=4038): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) lseek(r0, 0x10001, 0x0) 41.166066365s ago: executing program 1 (id=4039): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) getrandom(&(0x7f0000000040)=""/239, 0xef, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 41.080517846s ago: executing program 1 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r2, r1, 0x0, 0x80000000) 41.065705366s ago: executing program 1 (id=4041): mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = dup(r0) write$FUSE_GETXATTR(r1, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0089061327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='coda\x00', 0x200000, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @none, 0xf5}, 0xa) 40.958454348s ago: executing program 32 (id=3822): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x3ff) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x82) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) r5 = dup(r4) io_submit(0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) io_setup(0x80000000, &(0x7f0000000100)=0x0) io_submit(r7, 0x5, &(0x7f0000000580)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f00000002c0)="90c1b04b8733359bd26a8a61f3010b3242d59f52bbceb39d84fdff0d265a26609de6a8c9f7d5c9b0b0b7f0837f3c49b3cc6b2dee9df194eb1815c405e47e8950fe187a4478f37b3efe923050ce661f1f2da68cf6d784328e6d7c9170b1a3854711f7db6bdd085f9a4f109fabd13ad750bd43ec8d1af775fe7c545a9b0dca1d256a1fb055de373642cb05e017", 0x8c, 0x7, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xe056, r4, &(0x7f0000000480)="317b5817f14c09dfc07990b78965b308a0afa06ce90bb0b26bba107200c4af468d4ce4bf676809db9a731d8e1cd696e8d4fb8cfd861300368b49f09f9cdb2d76e345c4442dc29e528423b026dac3573850cfc751882209038613f7d6247017c8b664e85f5fb93abaa76cbb14fbf944435b24f5550ecd1ff8b0d4f73ba3ff546dc9d5126729aba29f848a9ae50ea25de1a3b826de54a2d05bc096c15ece420b2f9c0d850320978ff57fde4b325d6ec6b1047f69b11c671fa8bbe379b282a9be6a1a99b24f396aa56a", 0xc8, 0xc02c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0xffff, r3, &(0x7f0000000600)="677fbf843dd8a9f254cb6a30aaee4811a5e487cbfdc347710f78d483d80fe5f23e023f92926ff78477985068df198efb57bb3ca7aaae33a3dde5379973e2174fc27cb5772afabfabf774393e3e2fc16d004bb5ccb37166acb33055006666d0b37a7901d664ba425ddc85cc99b58aa441ce85b2535d1f1849c690dfbc05262ed3e8b8b2ffd91846da462a73d0e37ea45ce79a212c95104f88d71fb743f8571e6af6a696322e7426e3b16802b49c6eafd38b01043711cb531988d5787cdf54d451c9ac795ad3ccdfe894b839bb69fa80e1d24d3d", 0xd3, 0x3, 0x0, 0x2, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f0000000780)="36e197c563505ea481e9bd2144a2ce9fdfb2e4649fc9d9fef99d277fb8c3496acfdcf59fb34f17d86ed3e9af90c479da8f50d55b859f6e0e4fe533742a0921d96212ca5f8981151b7a6478c22f34d54e857e71c83e436b800198a391cad3b8dcb194eec380b52de0cfcb0036597fab7abb9e95359b75cdd2d579760435f957ea655bfdceb8b5b09b90", 0x89, 0xffff, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xd, r4, &(0x7f0000000840)="60f965c55b70619b1b6b11f7817f6567cb27ed1c90238930c748f471737611663bf5ce4682d30cbf46ac480684b39bf29f04aed42d4f107b254bba33bb889fe6f5f6d4935c2550b8787a298fb92b658a79bb75c395657ea44a6671f53376699c6c76003c6591b663ce51e6401da2580af96a45f2293af78f520388827dd9602f644554596eb3fd0c57d983fbed423df677", 0x91, 0x200, 0x0, 0x2, r2}]) 40.943475148s ago: executing program 1 (id=4044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) listen(r1, 0x8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = dup(r2) connect$bt_rfcomm(r3, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f00000003c0)) r4 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x43, 0x0, &(0x7f00000029c0)) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0) mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r4, 0x100000000) 40.879042589s ago: executing program 33 (id=4044): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) listen(r1, 0x8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = dup(r2) connect$bt_rfcomm(r3, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, &(0x7f00000003c0)) r4 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x43, 0x0, &(0x7f00000029c0)) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0) mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, r4, 0x100000000) 3.330371908s ago: executing program 5 (id=4993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) lseek(r1, 0x4000, 0x3) r2 = socket$key(0xf, 0x3, 0x2) accept4$inet(r2, 0x0, 0x0, 0x800) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000280)=[{&(0x7f0000001340)="ff", 0x1}], 0x1, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x54, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/144, 0x90, 0x1, 0x29}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/41, 0x29, 0x0, 0x19}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000280)={0x0, 0x28, 0x50}}, 0x400}, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 3.308624219s ago: executing program 5 (id=4994): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 3.297766779s ago: executing program 5 (id=4995): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000080)={@loopback, @multicast2, 0xffffffffffffffff, "ea5e353d185ee35d1f8ddc4cf110b00deb0735a2421bf6aee66fcf94203e19cb", 0xffff, 0x4, 0x4c54, 0x8}, 0x3c) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x6dc, @loopback}, 0x1c) listen(r1, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats']) 3.24212822s ago: executing program 5 (id=4996): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x4, 0x6}, {0x64}, {0x6}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x110, r0, 0x0) 2.442098552s ago: executing program 5 (id=5018): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) (async) madvise(&(0x7f0000338000/0x1000)=nil, 0x1000, 0x15) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) 2.317939964s ago: executing program 5 (id=5019): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f000022e000/0x2000)=nil, 0x2000}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000040)=0x4, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x2}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ncpfs\x00', 0x2208008, 0x0) 1.609687615s ago: executing program 4 (id=5047): syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x15555599}) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff003) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 1.581623185s ago: executing program 4 (id=5048): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') futex(0x0, 0x84, 0x2, 0x0, 0x0, 0x22) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYRES16=r1]) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r3) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000140)=ANY=[], 0x138) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200), 0x3200073, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r8}}]}}) r9 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r9, r0, 0x0, 0x80000000) 1.444029188s ago: executing program 4 (id=5051): ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xd72a, 0x8001, 0x5, 0xa3af, 0x9, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @remote}, &(0x7f0000000080)=0xc) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x9) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x800) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x6, 0x80, 0x7fffffff, 0x8, 0x4, "aa56191c6fc5e7b2f06b9ae11d97af8bfc5dc1"}) (async) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x6, 0x80, 0x7fffffff, 0x8, 0x4, "aa56191c6fc5e7b2f06b9ae11d97af8bfc5dc1"}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) fsync(r3) r4 = socket(0x22, 0x4, 0x20) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x7, 0x6, '9P2000'}, 0x13) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x10, 0x39}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="314118eb2cea"}, @NL80211_ATTR_PMKID={0x14, 0x55, "3e9b19390a07ad1f7991a41d6ca8d2c9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "58edbbadb63848afa36243c5c24f7031"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) fcntl$setlease(r0, 0x400, 0xf5b86f0ce860094f) (async) fcntl$setlease(r0, 0x400, 0xf5b86f0ce860094f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000440)='rdma.current\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x6) (async) ioctl$UI_SET_SWBIT(r9, 0x4004556d, 0x6) syz_open_pts(r3, 0x40000) ioctl$TCFLSH(r3, 0x540b, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/keys\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1e4, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9f0b, 0xa}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x200}, {0x8, 0x0, 0xffffff7a}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x21, 0x0, @random="df102179f4c8c30fa7240a806de31787480bb9f9ba03fecd10ee468d16"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xee, 0x0, "bd7a58b5e3c7ee19d2776d6b24c8769ccb80515f1a8579277a39dde3a0cce65455c3cb68cb1616fb6978659cae3c72308467336776e69a1bbb7577ab3e642e597b50a133db3a28be4e8a22215b0fcaa4fca59bc6b42aa4108269a8e15129267111fb9502de56a1440926c03982d0e2fb651bd0fc5c0fa8ffa85e6845ecc771e2cb2e8d0857d7b36edbbbb6aa5bb45c835b1f77a42ea955bda9e509f7586573ebaafb3a8986957a473332ef56f26a0b31ffa3f3d94e28853d066bb8696dead7d7f086ca7f49ade9a2c6d7baff7bf9833aa16092aade5618a1677e1c2dcd4b3390932a77e1ed1c8eca5b47"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1e4, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9f0b, 0xa}}}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x200}, {0x8, 0x0, 0xffffff7a}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x8001}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x70, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x21, 0x0, @random="df102179f4c8c30fa7240a806de31787480bb9f9ba03fecd10ee468d16"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0xf4, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xee, 0x0, "bd7a58b5e3c7ee19d2776d6b24c8769ccb80515f1a8579277a39dde3a0cce65455c3cb68cb1616fb6978659cae3c72308467336776e69a1bbb7577ab3e642e597b50a133db3a28be4e8a22215b0fcaa4fca59bc6b42aa4108269a8e15129267111fb9502de56a1440926c03982d0e2fb651bd0fc5c0fa8ffa85e6845ecc771e2cb2e8d0857d7b36edbbbb6aa5bb45c835b1f77a42ea955bda9e509f7586573ebaafb3a8986957a473332ef56f26a0b31ffa3f3d94e28853d066bb8696dead7d7f086ca7f49ade9a2c6d7baff7bf9833aa16092aade5618a1677e1c2dcd4b3390932a77e1ed1c8eca5b47"}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r9) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x74, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) 1.374105249s ago: executing program 4 (id=5052): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.334324579s ago: executing program 4 (id=5054): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x2, 0x0, 0x1}, 0x20) socketpair(0x23, 0x4, 0x0, &(0x7f0000000140)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 1.27395336s ago: executing program 4 (id=5055): r0 = memfd_secret(0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8) r2 = dup2(r0, r1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)) write$binfmt_aout(r2, &(0x7f0000000080)={{0x0, 0xa2, 0x4, 0x263, 0x3da, 0x140000, 0x3c1, 0xad5}, "8f7ceeb86d5fa91d240095ffdd6e03f9647f97febd6c9bb73c1c3d98110fa717ca3424a0817f34", ['\x00', '\x00', '\x00']}, 0x347) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3e}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x18}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000a40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x354, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xce, 0x3, "2435ab21b3995c9d7faa9e0fd6d9d5587db680a99f17eda812df714427ab0a46e45eaebcb7a6f50f600ca96e64927d2ec001906d48a0c42a1a82e3a40b0b78093b36f3975e01291a6ffc671de9073526adae57f154dba457ecc938d5f87892871c176472addbf5cd52c21deab7e6e6a864aa49d57389314385c6bbc57755728dc9d141ef30f36da825d289d960f7e3ca1da14e729f9c78628fd7e503fff6ec7b0f7ae2ef8fd284db6e39b8aecc3f031dd05e775ac5478e14e6723a65736c14e5d7a919407729df5b23d7"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "24f43450c6f10753afd8a477b438e941a3e9dadd98bbd192a4e01110f365fd"}}, @TIPC_NLA_NODE_ID={0xf, 0x3, "03e0c06131679cfbf3020a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "ba038efa32913e334a5596140ab42df95a5919ac7c58d64aa2d364fc8753b80ecac4beecb32113f716ce9de4df2c60ddf379899cd1e08b7d666ba94f2f43e4dd72822b79e38597a9dd96d5c9ba85f27c0489fa382749b6fca7297a9410477bc5eb3d0a71bfcb71dd5b1a0903b0ddcb273f8b742e7b0634a8d3a043db8bf152d8ea5ca1fa37eb06a9c74eb4990417a555c05ed1c0a5343a827f65acdd675d20236f"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "dfe5957c7b3c714a6aec697ed370185162526bd22c3016295324c49b"}}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "84b147b86782bf74a413b5f78c03fd8383a6a0f4dd44bef4eff3456ac2a4d8799a89cfcec8321acb88ba51261b5d05cbd2855f0f99733ccc7526e2b4973d24232961784321e2a20585a1942840a0de3f8147a0bd367e3a3e2a5b897b78d9ad7e23fbde3170827a4535c63cdf328073c9aa9838fa81ec704f69eacdc7c93763aac405deeaf21bf266584a19c8170d72d653abee3c015d3bdbecbf4aa9db888c4b"}]}]}, 0x354}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) (async) r7 = fsmount(r0, 0x1, 0xe4) (async) openat$cgroup_ro(r0, &(0x7f0000000a80)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000ac0)) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@empty, @in6=@empty, 0x4e22, 0xfffb, 0x4e23, 0x8001, 0xa, 0x20, 0x80, 0x2e, r9, 0xffffffffffffffff}, {0x658bc387, 0x1, 0x101, 0x8, 0x2, 0xffffffffffffffff, 0x71, 0xffffffff}, {0x7fffffffffffffff, 0x8, 0x100000000, 0x4}, 0x8001, 0x6e6bc0, 0x0, 0x0, 0x2, 0x1}, {{@in=@private=0xa010100, 0x4d4, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x3501, 0x0, 0x0, 0x3, 0x400, 0x10, 0x5c}}, 0xe8) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000d40), 0x141040, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) (async) write$binfmt_register(r0, &(0x7f0000000e00)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, '[/\\-', 0x3a, '*{#', 0x3a, './file0', 0x3a, [0x4f, 0x50, 0x50, 0x50, 0x4f]}, 0x33) readv(r10, &(0x7f00000033c0)=[{&(0x7f0000000e40)=""/101, 0x65}, {&(0x7f0000000ec0)=""/218, 0xda}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/254, 0xfe}, {&(0x7f00000030c0)=""/249, 0xf9}, {&(0x7f00000031c0)=""/67, 0x43}, {&(0x7f0000003240)=""/36, 0x24}, {&(0x7f0000003280)=""/176, 0xb0}, {&(0x7f0000003340)=""/98, 0x62}], 0xa) dup3(r10, r1, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000003480), 0x10401, 0x0) r11 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000034c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x8, 0xcf, 0x1, {0x22, 0xab8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x96, 0x6e}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x9, 0xd2}}]}}}]}}]}}, &(0x7f00000036c0)={0xa, &(0x7f0000003500)={0xa, 0x6, 0x310, 0xf8, 0x0, 0x81, 0x10, 0xb}, 0x1c, &(0x7f0000003540)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x8, 0x1}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xa, 0xe6, 0x7}]}, 0x2, [{0x4, &(0x7f0000003580)=@lang_id={0x4, 0x3, 0x429}}, {0xc7, &(0x7f00000035c0)=@string={0xc7, 0x3, "3f114effa756fa778dc08914e12da3db9ebb8c3319df01898dbad7a36568fa41602b7cab03dbd249a418237650e4a8766ab4d8ff10d1ba0cd40dbe957b0bbf58400afaedb9bf7bef4876ea911e601d2806ad747c467aa3475f08900843100f90e5eabfe7f96a755ae84bb34c83d088d40ec72bbf83e571b8799916d3fe93560bebc006811c59d0ef9227bff9b1b9b0281bad921a889739fc0cd685e888e47e94c719bbc328ae1be4f06a5959304ea0e2249928e9b376c43eca3d1395870f18e31f8d7d7b23"}}]}) syz_usb_control_io$hid(r11, &(0x7f0000003980)={0x24, &(0x7f0000003700)={0x0, 0xa, 0xe4, {0xe4, 0x6, "2c2a98f54ad4c2fb80d8993bff22661d34c04090987072d917f39079059da7a67d437881568f71b70265ff5ddab18093f9414b6ed681fdfe8daf3f145f4bef6c5edd04985b4e2267fd61d4730a62241c350d796f9f814ec64a2c860f7fac3c809201734fed417080371bbec6f59d1b857acdf785edcc892127ea9d3e0f334dae41c8c9347e379ccfec635a5ed46b64a53f6ffa9c07fb8e2663712585f94f7f951e0325abbef163cf0e49e6e8f3df307642a12feaf821001b0f68ac068795c3023d75d3baa10cebbb3aedd09e705756ff4a2b582069ddf924b82f34f10ac2adef30dc"}}, &(0x7f0000003800)={0x0, 0x3, 0xe2, @string={0xe2, 0x3, "cbc71bb0a5b7bc8f1fc9a25b1b8ebbbd7c0fc6932b26fe81c3a7e169ef09c7c157480809c270a27befa8c3969677ee9710b8b51efe3785bc69b8f89e36865e60555bdd98f5b99123ed6b26154e953b2c5a80de78f118706711fb0b091ba4037f97ab30ba96519eae4462a6ada4929d93b7aa196cbbdbb48b9d23e988e0e062e9e75dfdf9dd25c8af449de198531f0a5e18beee8c90a7bd1beab7caadd7f32dded821cf4197b69df4d6c323f66d101df3280306435ce762253c49a5d8f4dd68270bd2664df8ce9e68a20c6ee8cd2228a53bcf1f1aa1f4c8edef0bbdacef43392b"}}, &(0x7f0000003900)={0x0, 0x22, 0xc, {[@local=@item_012={0x2, 0x2, 0x3, "d6f0"}, @main=@item_4={0x3, 0x0, 0xc, "d060e708"}, @local=@item_012={0x1, 0x2, 0x1, "9a"}, @global=@item_012={0x1, 0x1, 0xb, "10"}]}}, &(0x7f0000003940)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x8d, 0x1, {0x22, 0x36d}}}}, &(0x7f0000003bc0)={0x2c, &(0x7f00000039c0)={0x40, 0x13, 0x59, "9f43be7c7800d831a7152a3e0753d4e1633ae227ef15c2e9463e19abf8883f0f545c3383cf3783f3362d32b4c9a9d6a43bf1d0bfca1ec211c56845761922f4b17a2d790528da6ffb9bf7795499139043556bdd42d1bf5d637a"}, &(0x7f0000003a40)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000003a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000003ac0)={0x20, 0x1, 0x97, "efe290c1607dbd4b67412850142b02388359f02b6c8861e4a0e2a60a52b3c7bb52bc3285f18ad7794dbe0c7f5b4ac21477762b2f72375976cda40a1efaa37fbed50e92a9dc578de60f3f104d68bd03429abbcd5b53e5a506385b427f4d775d9055287f77a6c392df3cdf4a769f57022a44633f752b2a313793facb882b65615f6bc9748c46347233f5018fa6984722b22ed427958a2da9"}, &(0x7f0000003b80)={0x20, 0x3, 0x1, 0x9}}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000003c00), 0x400400, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000003c40), r1) (async) socket$inet(0x2, 0x800, 0x0) 565.127421ms ago: executing program 2 (id=5061): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@seclabel}]}) (async) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x15) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x9, 0x7, 0x4a, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x20, 0x1, 0xbce}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000780)={0x0, 0x0, [0x97, 0x10, 0xffffffffffffffff, 0x3, 0x3, 0xdf, 0xfffffffffffffffe, 0x7]}) (async) r6 = syz_usb_connect$cdc_ecm(0x3, 0x62, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x4, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x2, {{0x9, 0x24, 0x6, 0x0, 0x0, "521e7197"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0xb4ba, 0x5}, [@country_functional={0x8, 0x24, 0x7, 0x5, 0xfff9, [0x8000]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfa, 0x4, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x81, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x9, 0x9, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0x2, 0xdb, 0x1, 0x10, 0x4}, 0x84, &(0x7f0000000500)={0x5, 0xf, 0x84, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x81, 0x8, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x7, 0x4, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4, 0x81, 0x1}, @generic={0x2d, 0x10, 0x3, "ff195123226256d9359ff63020a1d3affbd69af2a9b3dfb1cab35b13aaee737adc7758b04184844f8b78"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "7c5c60632659812a53b83d34643908ba"}, @ssp_cap={0x20, 0x10, 0xa, 0xc, 0x5, 0x4, 0xf00, 0xf, [0x0, 0x0, 0xc0, 0x0, 0x3fc0]}]}, 0x1, [{0x61, &(0x7f00000005c0)=@string={0x61, 0x3, "6fb3f30109f70bedc80b447147c646667831e8c4ca2b457c2fd273347af5314258e402adf920646817ab86e709c1bb9611e6860ceea01270369e2827e99c837e34793fab48560589ae3e6a13ece3fcc0efbe42e4aaeaaa9322858d22ed2c85"}}]}) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000e80)='environ\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f00)={0xffffffffffffffff}) (async, rerun: 64) r13 = open(&(0x7f0000000f40)='./file0\x00', 0x40000, 0x12) (async, rerun: 64) r14 = fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r14, 0x7, 0x0, 0x0, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001080)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000f80)={0x94, r8, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe0e}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x206e}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io(r6, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x40, 0x31, 0xa3, {0xa3, 0x10, "cb986587d69f76413f2ba78972ac756f035dd8d0d74bc89329a847cb1e80df6cf5b2de909746452d99134f30c0b25831ef82278d0a5adb769494525c1afd4d4b2827d1f542a2bd0d57e0317b6bf27f5b27f38b65d5459dce4819bc1368cd16b73bfafb390481b4a2c36b4f6f077368cb564cee036eaa3b6a8e4dde079ef9f01ce7dcca3d188ea25695e0fed7a16558d067a7ebbf66269730a24b5e4b71f9aa65cf"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000780)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f00000007c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x1, 0xea, 0x4, "678b613f", "532b25c4"}}, &(0x7f0000000800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x0, 0x6, 0x1, 0x8, 0x2, 0x6}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000880)={0x40, 0x10, 0x85, "0303f0bf8de57f6e18d7127e97bfcac73378bdd185c507e3c03dd75c4cca3a017c1824b729bec26ce6f3101e66439428321a1be51a094873fe9c39603fca62a44d5c707f8b8d8fda478ae902e92f9fc8b64d0d0c8f53c8f10ae651b7812c4ce6ce0e5a81bce530bf9309329de12f226d6916d08c1e1d9b5b5bea41b99b6f11db2364a1f13f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000dc0)={0x0, 0x8, 0x1, 0x8d}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x1, 0x39598f8923132a95}}, &(0x7f00000010c0)={0x20, 0x0, 0x8, {0xa0, 0x2, [0xf00]}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0x2fe}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "44d6"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, "93a2"}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000c40)={0x40, 0x1c, 0x1, 0xc5}, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0xb6}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x7}}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@polexpire={0x1a0, 0x1b, 0x8, 0x70bd29, 0x25dfdbfb, {{{@in=@private=0xa010102, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0x0, 0x2b, r1, r2}, {0x2c, 0xbae2, 0x5, 0x8, 0xffffffffffffffff, 0xa, 0x66a5, 0x1}, {0x5, 0x5, 0x4, 0x6}, 0x400, 0x6e6bb9, 0x1, 0x1, 0x2, 0x1}, 0x4}, [@policy_type={0xa}, @coaddr={0x14, 0xe, @in=@empty}, @policy_type={0xa}, @mark={0xc, 0x15, {0x350759, 0x5}}, @mark={0xc, 0x15, {0x35075b, 0x3}}, @srcaddr={0x14, 0xd, @in=@multicast2}, @sec_ctx={0x7c, 0x8, {0x78, 0x8, 0x0, 0x4, 0x70, "d3d175b0091bee9813554528e036a1574288e6224e1772ada540bad66618a744cda75dce890ba480d2924c0eb0a652e8b3b2f1297c6190cd7b61cda5a99df6948a1e9719a33f96f72501f6e50d0834b9837fdb46cd361625ff0ae7066e37e8e31b8f5bff08f923126f2156561399a3a3"}}, @lastused={0xc}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40004}, 0x41000) 550.484261ms ago: executing program 2 (id=5062): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000000)={0x62, @multicast1, 0x4e24, 0x4, 'wlc\x00', 0x24, 0xb747, 0x45}, 0x2c) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 536.900011ms ago: executing program 2 (id=5063): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 482.178653ms ago: executing program 2 (id=5064): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300031000000000000000001f000002000900080000000a0000000000000005000600000000000a000000000000000000000000000000000000000000000100000000000000000200010000000000000009160000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) 481.992203ms ago: executing program 2 (id=5065): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788fcd609102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0xe000, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 481.570552ms ago: executing program 2 (id=5066): setreuid(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002580)='net/packet\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r1, &(0x7f0000000540)={0x2020}, 0x2020) r2 = creat(0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000055bed40020000000000000003010902380002000000060904c700010e0101000300d009050a000000000000090400000101be2600090500000000000000080b"], 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) stat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000658000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) 110.883198ms ago: executing program 0 (id=5067): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xbb89d5b3858714e5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) 99.873598ms ago: executing program 0 (id=5068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x65) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ip_mr_cache\x00') r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x8010, r4, 0xf39ab000) close(r4) r5 = syz_open_procfs(r2, &(0x7f0000000100)='net/igmp6\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/96, 0x60, 0x0, &(0x7f00000001c0)=""/200, 0xc8}, &(0x7f0000000300)=0x40) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) r7 = syz_open_dev$usbmon(&(0x7f0000000380), 0xfffffffffffffffb, 0x284e00) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimensat(r5, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={{r8, r9/1000+10000}, {0x77359400}}, 0x100) ppoll(&(0x7f0000000480)=[{r5, 0x1087}, {r7, 0x4480}], 0x2, &(0x7f00000004c0)={0x0, 0x989680}, &(0x7f0000000500)={[0x9]}, 0x8) r10 = accept$nfc_llcp(r5, &(0x7f0000000540), &(0x7f00000005c0)=0x60) close_range(r4, r10, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r11) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000640)=""/120) io_setup(0xfffffff9, &(0x7f00000006c0)) io_getevents(0x0, 0x55, 0x6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], &(0x7f00000007c0)) r12 = creat(&(0x7f0000000800)='./file0\x00', 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000980)={{{@in=@rand_addr=0x64010101, @in=@multicast2, 0x4e23, 0x1, 0x4e21, 0x9, 0xa, 0x100, 0x0, 0x32, 0x0, r13}, {0xd5, 0x2, 0x9, 0xdea, 0x80000000, 0x8000000000000001, 0x2, 0x10}, {0x4, 0x7, 0x2c}, 0x8f2, 0x6e6bbe, 0x2, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x81}, 0x0, 0x0, 0x3, 0x6, 0x9, 0x501, 0xa}}, 0xe8) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000a80)=0x2, 0x4) 26.20991ms ago: executing program 0 (id=5069): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 25.862299ms ago: executing program 0 (id=5070): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x21000, 0x6, '9P2000'}, 0x13) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_BMAP(r4, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xa}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x50) read$FUSE(r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$binfmt_elf64(r3, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x40, 0x5f, 0x87, 0x2, 0x2, 0x6, 0x4, 0x9e, 0x40, 0x32e, 0x2, 0x108, 0x38, 0x4, 0x0, 0x90, 0xff}, [{0x60000000, 0x4, 0x0, 0x0, 0x8, 0x7, 0x7cf, 0x6ee1050c}, {0x6474e551, 0x9, 0x0, 0x3, 0x5, 0x1, 0xffffffff, 0x8000000000000000}, {0x70000000, 0x5, 0x1000, 0x7, 0x7f, 0x6, 0x4, 0x4}, {0x4, 0xb, 0xd, 0x10, 0x4, 0x29e3, 0x95, 0xfffffffffffffffd}], "85356ff0523c94cb3d42c434ea12eb539e9b76afa7458d6997940b68632f7e3843996d36d129b99fb6a16a4bfced723b1cfd37d589c55704fde9ed518db1094d458b36810a2fa58a1293df7b2253b1d3d6d4d952cb7c34be06b39e14672b8dfdbf3538b6630b75", ['\x00', '\x00']}, 0x387) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)={0x1f8, 0x0, r6, [{{0x6, 0x2, 0x0, 0x3, 0x2, 0x800000, {0x5, 0x6, 0x8000000000000000, 0x7, 0x8, 0x9, 0xc, 0x4, 0x6, 0x4000, 0x7, r7, r8, 0x4, 0x9}}, {0x6, 0xffffffffffffffff, 0x3, 0xfffffffd, '-.^'}}, {{0x3, 0x0, 0x2, 0x4390abcc, 0x1000, 0x0, {0x6, 0x0, 0x2, 0x6, 0xbb, 0x7, 0x7, 0x2, 0x8001, 0x1000, 0x200, r7, r8, 0x9, 0xfffff9a3}}, {0x3, 0x4, 0x9, 0x4, 'trans=fd,'}}, {{0x1, 0x0, 0x1, 0x6, 0x0, 0x2, {0x4, 0x8, 0x8, 0x4, 0x9, 0x80, 0x8000, 0x1, 0x2b, 0x4000, 0x6, 0xee00, r8, 0x9}}, {0x5, 0x101, 0x3, 0x3eb, '9p\x00'}}]}, 0x1f8) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x8}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x81) ioctl$KVM_CREATE_VCPU(r9, 0x40087707, 0x2) 11.8064ms ago: executing program 0 (id=5071): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=5072): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000040)=ANY=[@ANYBLOB='rlog_pages=', @ANYRESOCT]) kernel console output (not intermixed with test programs): 169.405609][ T375] usb 2-1: SerialNumber: Р [ 169.416423][ T7592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.071996][ T7649] overlayfs: failed to clone upperpath [ 170.129917][ T7651] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.2630'. [ 170.908085][ T7727] 9pnet_fd: Insufficient options for proto=fd [ 171.217753][ T36] audit: type=1400 audit(2000000067.966:21013): avc: denied { watch_reads } for pid=7755 comm="syz.2.2662" path="/479/file0" dev="tmpfs" ino=2651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 171.314198][ T7768] netlink: 'syz.2.2666': attribute type 19 has an invalid length. [ 171.352201][ T7772] batadv_slave_1: entered promiscuous mode [ 171.363510][ T7771] batadv_slave_1: left promiscuous mode [ 171.651503][ T7785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7785 comm=syz.3.2672 [ 171.836707][ T1256] usb 2-1: USB disconnect, device number 23 [ 171.864334][ T7800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7800 comm=syz.1.2679 [ 172.298665][ T7826] netlink: 472 bytes leftover after parsing attributes in process `syz.0.2688'. [ 172.484828][ T36] audit: type=1326 audit(2000000069.226:21014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7854 comm="syz.2.2699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f58a338e929 code=0x0 [ 173.426033][ T36] audit: type=1326 audit(2000000070.166:21015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7918 comm="syz.3.2720" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa80618e929 code=0x0 [ 173.478255][ T7922] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2720'. [ 174.281369][ T7934] /dev/rnullb0: Can't open blockdev [ 174.346645][ T7940] netlink: 'syz.0.2727': attribute type 32 has an invalid length. [ 174.357305][ T7940] 9pnet: Could not find request transport: fU [ 174.582694][ T7967] can: request_module (can-proto-0) failed. [ 174.591282][ T7967] fuse: Invalid gid '00000000000037777777777' [ 174.677396][ T31] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 174.826685][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 174.832318][ T31] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 174.840894][ T31] usb 2-1: config 0 has no interfaces? [ 174.847293][ T31] usb 2-1: config 0 has no interfaces? [ 174.853505][ T31] usb 2-1: config 0 has no interfaces? [ 174.859763][ T31] usb 2-1: config 0 has no interfaces? [ 174.866023][ T31] usb 2-1: config 0 has no interfaces? [ 174.872286][ T31] usb 2-1: config 0 has no interfaces? [ 174.878547][ T31] usb 2-1: config 0 has no interfaces? [ 174.884748][ T31] usb 2-1: config 0 has no interfaces? [ 174.891082][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.900852][ T31] usb 2-1: New USB device strings: Mfr=0, Product=30, SerialNumber=0 [ 174.909092][ T31] usb 2-1: Product: syz [ 174.914349][ T31] usb 2-1: config 0 descriptor?? [ 175.149606][ T31] usb 2-1: USB disconnect, device number 24 [ 175.354648][ T7994] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1042 sclass=netlink_xfrm_socket pid=7994 comm=syz.0.2749 [ 175.405701][ T8002] futex_wake_op: syz.0.2752 tries to shift op by -1; fix this program [ 175.672027][ T8017] netlink: 'syz.1.2757': attribute type 6 has an invalid length. [ 175.681317][ T8017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 175.681342][ T8017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 175.936647][ T736] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 176.097798][ T736] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 176.110304][ T736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.127657][ T736] usb 2-1: config 0 descriptor?? [ 176.266014][ T8040] bpf: Bad value for 'mode' [ 176.395833][ T8060] 9p: Unknown uid 00000000004294967295 [ 176.420160][ T36] audit: type=1400 audit(2000000073.166:21016): avc: denied { execute } for pid=8055 comm="syz.0.2773" path="pipe:[39357]" dev="pipefs" ino=39357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 176.505805][ T8066] overlayfs: failed to clone lowerpath [ 176.511948][ T8066] overlayfs: failed to clone lowerpath [ 176.740470][ T736] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 176.750565][ T736] asix 2-1:0.0: probe with driver asix failed with error -61 [ 177.749620][ T8133] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2798'. [ 177.806342][ T36] audit: type=1326 audit(2000000074.546:21017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8145 comm="syz.3.2802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa80618e929 code=0x0 [ 178.739323][ T64] usb 2-1: USB disconnect, device number 25 [ 178.753902][ T8179] /dev/rnullb0: Can't open blockdev [ 178.803408][ T8183] /dev/rnullb0: Can't open blockdev [ 178.858059][ T8187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 179.074036][ T36] audit: type=1107 audit(2000000075.816:21018): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='l=RJc5t?~YUmEz> kkaC9ʻf5"|9*Wkgf2 y6"p7 [ 179.074036][ T36] fh#OR֣=@9|U:9T~EJP. [ 179.074036][ T36] y=GrCrƨ{ [ 179.074036][ T36] 4&Ǎ;1Bd;Y;8I* zw*/NKZPtʺe rejected, failed to enable media [ 222.806664][ T1361] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 222.956586][ T1361] usb 2-1: Using ep0 maxpacket: 16 [ 222.965107][ T1361] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.973352][ T1361] usb 2-1: config 0 has no interface number 0 [ 222.979501][ T1361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.990497][ T1361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.000408][ T1361] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 223.009699][ T1361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.018448][ T1361] usb 2-1: config 0 descriptor?? [ 223.425338][T11050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.433952][T11050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.645598][ T36] audit: type=1326 audit(223.618:21061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c5898e929 code=0x0 [ 223.941008][T11078] overlayfs: cannot append lower layer [ 224.216610][ T736] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 224.346594][ T736] usb 3-1: device descriptor read/64, error -71 [ 224.546724][ T36] audit: type=1326 audit(224.528:21062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.0.3896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x0 [ 224.596644][ T736] usb 3-1: device descriptor read/64, error -71 [ 224.836819][ T736] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 224.966586][ T736] usb 3-1: device descriptor read/64, error -71 [ 225.206608][ T736] usb 3-1: device descriptor read/64, error -71 [ 225.316708][ T736] usb usb3-port1: attempt power cycle [ 225.582276][ T1361] uclogic 0003:28BD:0071.001B: failed retrieving string descriptor #100: -71 [ 225.593006][ T1361] uclogic 0003:28BD:0071.001B: failed retrieving pen parameters: -71 [ 225.601267][ T1361] uclogic 0003:28BD:0071.001B: pen probing failed: -71 [ 225.608773][ T1361] uclogic 0003:28BD:0071.001B: failed probing parameters: -71 [ 225.616335][ T1361] uclogic 0003:28BD:0071.001B: probe with driver uclogic failed with error -71 [ 225.628253][ T1361] usb 2-1: USB disconnect, device number 43 [ 225.666610][ T736] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 225.677010][T11132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=11132 comm=syz.0.3908 [ 225.690657][ T736] usb 3-1: device descriptor read/8, error -71 [ 225.706558][T11130] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 225.827679][ T736] usb 3-1: device descriptor read/8, error -71 [ 226.076642][ T736] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 226.086598][ T1361] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 226.097807][ T736] usb 3-1: device descriptor read/8, error -71 [ 226.227701][ T736] usb 3-1: device descriptor read/8, error -71 [ 226.236628][ T1361] usb 2-1: Using ep0 maxpacket: 16 [ 226.243264][ T1361] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.251785][ T1361] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping [ 226.260717][ T1361] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.270855][ T1361] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.279747][ T1361] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 226.304316][ T1361] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.314286][ T1361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.323092][ T1361] usb 2-1: Product: syz [ 226.327476][ T1361] usb 2-1: Manufacturer: syz [ 226.332159][ T1361] usb 2-1: SerialNumber: syz [ 226.337086][ T736] usb usb3-port1: unable to enumerate USB device [ 226.546491][T11146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.566724][T11146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.620691][ T1361] usb 2-1: 0:2 : does not exist [ 226.633376][ T1361] usb 2-1: USB disconnect, device number 44 [ 226.643805][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 227.097610][ T36] audit: type=1400 audit(227.078:21063): avc: denied { map } for pid=11161 comm="syz.2.3921" path="socket:[52492]" dev="sockfs" ino=52492 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 227.130293][T11164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3922'. [ 227.194858][ T305] tipc: Subscription rejected, illegal request [ 227.396613][T11190] IPv6: NLM_F_CREATE should be specified when creating new route [ 227.446585][ T781] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 227.606600][ T781] usb 3-1: Using ep0 maxpacket: 32 [ 227.622323][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.643456][ T781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.656604][ T781] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 227.669155][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.681536][ T781] usb 3-1: config 0 descriptor?? [ 228.092514][ T781] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 228.099782][ T781] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 228.113897][ T781] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 228.121443][ T781] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 228.128868][ T781] koneplus 0003:1E7D:2D51.001C: unknown main item tag 0x0 [ 228.147753][ T781] koneplus 0003:1E7D:2D51.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 228.196655][ T36] audit: type=1400 audit(228.168:21064): avc: denied { execute_no_trans } for pid=11217 comm="syz.0.3941" path="/225/file1" dev="tmpfs" ino=1223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 228.243569][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'. [ 229.011689][ T781] usb 3-1: USB disconnect, device number 55 [ 229.028299][ T36] audit: type=1400 audit(229.008:21065): avc: denied { map } for pid=11241 comm="syz.2.3951" path="socket:[52119]" dev="sockfs" ino=52119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 229.057923][ T36] audit: type=1400 audit(229.008:21066): avc: denied { accept } for pid=11241 comm="syz.2.3951" path="socket:[52119]" dev="sockfs" ino=52119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 229.329299][T11263] rust_binder: 11262 RLIMIT_NICE not set [ 229.461815][T11265] netlink: 'syz.1.3959': attribute type 27 has an invalid length. [ 229.483554][T11265] overlayfs: overlapping lowerdir path [ 229.490429][T11265] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 229.758852][T11284] overlayfs: failed to clone upperpath [ 229.972025][T11310] incfs: ino conflict with backing FS 2 [ 230.106012][T11315] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 230.114821][T11315] binder: Unknown parameter 'stats֢o>by' [ 230.284100][T11317] incfs: ino conflict with backing FS 2 [ 230.290406][T11317] netlink: 'syz.2.3978': attribute type 4 has an invalid length. [ 230.298463][T11317] netlink: 'syz.2.3978': attribute type 5 has an invalid length. [ 230.306265][T11317] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3978'. [ 230.343667][T11321] binfmt_misc: register: failed to install interpreter file ./cgroup [ 230.465466][T11334] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 230.476550][ T36] audit: type=1400 audit(263.456:21067): avc: denied { append } for pid=11333 comm="syz.1.3986" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 230.518468][ T36] audit: type=1400 audit(263.496:21068): avc: denied { remount } for pid=11337 comm="syz.1.3987" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 230.610024][T11344] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.812259][T11355] 9p: Unknown access argument : -22 [ 230.946587][ T1361] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 230.954308][ T36] audit: type=1400 audit(263.926:21069): avc: denied { ioctl } for pid=11367 comm="syz.2.3997" path="socket:[53196]" dev="sockfs" ino=53196 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 230.967479][T11370] rust_binder: Error while translating object. [ 230.980001][T11370] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 230.986454][T11370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:423 [ 231.027308][T11372] overlayfs: overlapping lowerdir path [ 231.120396][T11388] rust_binder: 11388: no such ref 0 [ 231.136606][ T1361] usb 2-1: Using ep0 maxpacket: 16 [ 231.140215][T11391] incfs: ino conflict with backing FS 2 [ 231.142967][ T1361] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.157859][ T1361] usb 2-1: config 0 has no interface number 0 [ 231.164004][ T1361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.175009][ T1361] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.185119][ T1361] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 231.194299][ T1361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.203161][ T1361] usb 2-1: config 0 descriptor?? [ 231.456607][ T375] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 231.606586][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 231.612394][T11353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.613889][ T375] usb 3-1: config 1 interface 0 has no altsetting 0 [ 231.622032][T11353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.739757][ T36] audit: type=1400 audit(264.716:21070): avc: denied { bind } for pid=11406 comm="syz.0.4013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.838969][ T1361] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001D/input/input64 [ 231.852088][ T1361] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.001D/input/input65 [ 231.869575][ T1361] uclogic 0003:28BD:0071.001D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 232.041297][ T1361] usb 2-1: USB disconnect, device number 45 [ 232.658825][T11433] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4021'. [ 233.702291][T11461] binder: Unknown parameter '' [ 233.707826][T11461] netlink: 'syz.1.4032': attribute type 4 has an invalid length. [ 233.715641][T11461] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4032'. [ 233.725924][T11462] rust_binder: Write failure EFAULT in pid:786 [ 233.747092][T11464] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4033'. [ 233.777432][T11466] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.089110][ T305] bridge_slave_1: left allmulticast mode [ 234.101355][ T305] bridge_slave_1: left promiscuous mode [ 234.107222][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.114828][ T305] bridge_slave_0: left allmulticast mode [ 234.120798][ T305] bridge_slave_0: left promiscuous mode [ 234.126483][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.249246][ T375] usb 3-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40 [ 234.264297][ T305] veth1_macvtap: left promiscuous mode [ 234.270016][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.280189][ T305] veth0_vlan: left promiscuous mode [ 234.306775][ T375] usb 3-1: can't set config #1, error -71 [ 234.325149][ T375] usb 3-1: USB disconnect, device number 56 [ 234.484653][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.491996][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.499695][T11498] bridge_slave_0: entered allmulticast mode [ 234.506015][T11498] bridge_slave_0: entered promiscuous mode [ 234.513609][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.521005][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.529036][T11498] bridge_slave_1: entered allmulticast mode [ 234.535319][T11498] bridge_slave_1: entered promiscuous mode [ 234.544497][T11514] fuseblk: Unknown parameter 'fmCnyi' [ 234.552511][T11514] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 234.552653][T11514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:454 [ 234.584121][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.600429][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.607684][T11509] bridge_slave_0: entered allmulticast mode [ 234.613977][T11509] bridge_slave_0: entered promiscuous mode [ 234.623917][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.631025][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.638501][T11509] bridge_slave_1: entered allmulticast mode [ 234.645263][T11509] bridge_slave_1: entered promiscuous mode [ 234.737261][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.744550][T11498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.751871][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.758918][T11498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.775006][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.782149][T11509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.789731][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.796784][T11509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.827418][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.834817][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.842635][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.850109][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.860923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.868015][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.880703][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.887806][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.905578][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.912697][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.921088][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.928166][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.967625][T11498] veth0_vlan: entered promiscuous mode [ 234.991270][T11498] veth1_macvtap: entered promiscuous mode [ 235.009742][T11509] veth0_vlan: entered promiscuous mode [ 235.027183][T11509] veth1_macvtap: entered promiscuous mode [ 235.105753][T11534] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 235.606609][ T375] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 235.786600][ T375] usb 3-1: Using ep0 maxpacket: 32 [ 235.792883][ T375] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 235.801691][ T375] usb 3-1: config 0 has no interface number 0 [ 235.808161][ T375] usb 3-1: config 0 interface 184 has no altsetting 0 [ 235.816502][ T375] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 235.825843][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.833872][ T375] usb 3-1: Product: syz [ 235.838130][ T375] usb 3-1: Manufacturer: syz [ 235.842783][ T375] usb 3-1: SerialNumber: syz [ 235.848501][ T375] usb 3-1: config 0 descriptor?? [ 235.854260][ T375] smsc75xx v1.0.0 [ 236.158646][T11632] overlayfs: failed to clone lowerpath [ 236.754116][T11651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4079'. [ 236.824450][T11653] overlayfs: overlapping lowerdir path [ 236.877182][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 236.888212][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 236.898717][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 236.917189][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 236.928637][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 236.938998][ T375] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 236.948560][ T375] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 236.959393][ T375] usb 3-1: USB disconnect, device number 57 [ 237.025293][T11665] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 237.025324][T11665] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:98 [ 237.034961][T11665] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 237.044290][T11665] rust_binder: Read failure Err(EFAULT) in pid:98 [ 237.079546][ T36] audit: type=1326 audit(270.056:21071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.4086" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 237.444246][T11680] overlayfs: overlapping lowerdir path [ 237.704983][T11703] rust_binder: 11702 RLIMIT_NICE not set [ 237.853394][ T36] audit: type=1326 audit(270.826:21072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11718 comm="syz.0.4106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8a0b8e929 code=0x0 [ 237.940454][T11733] /dev/rnullb0: Can't lookup blockdev [ 238.017834][T11741] rust_binder: Failed to allocate buffer. len:152, is_oneway:true [ 238.437792][T11753] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4118'. [ 238.516014][ T36] audit: type=1400 audit(271.486:21073): avc: denied { setattr } for pid=11761 comm="syz.5.4121" name="KEY" dev="sockfs" ino=56554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 238.678328][ T36] audit: type=1400 audit(271.656:21074): avc: denied { map } for pid=11772 comm="syz.5.4125" path="socket:[56566]" dev="sockfs" ino=56566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.746596][ T36] audit: type=1400 audit(271.656:21075): avc: denied { accept } for pid=11772 comm="syz.5.4125" path="socket:[56566]" dev="sockfs" ino=56566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.875970][T11776] 9pnet_fd: Insufficient options for proto=fd [ 238.940530][ T36] audit: type=1326 audit(271.916:21076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.5.4127" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 238.991663][ T36] audit: type=1400 audit(271.966:21077): avc: denied { audit_read } for pid=11778 comm="syz.5.4127" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 239.226630][ T781] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 239.356583][ T781] usb 6-1: device descriptor read/64, error -71 [ 239.606582][ T781] usb 6-1: device descriptor read/64, error -71 [ 239.846569][ T781] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 239.996594][ T781] usb 6-1: device descriptor read/64, error -71 [ 240.243976][T11825] overlayfs: failed to clone upperpath [ 240.249594][ T781] usb 6-1: device descriptor read/64, error -71 [ 240.356971][ T781] usb usb6-port1: attempt power cycle [ 240.609923][T11835] syzkaller0: entered promiscuous mode [ 240.615470][T11835] syzkaller0: entered allmulticast mode [ 240.640592][T11834] syzkaller0: left promiscuous mode [ 240.648219][T11834] syzkaller0: left allmulticast mode [ 240.716602][ T781] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 240.749662][ T781] usb 6-1: device descriptor read/8, error -71 [ 240.877642][ T781] usb 6-1: device descriptor read/8, error -71 [ 240.973447][T11853] mmap: syz.4.4154 (11853): VmData 20819968 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 241.136612][ T781] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 241.157715][ T781] usb 6-1: device descriptor read/8, error -71 [ 241.287607][ T781] usb 6-1: device descriptor read/8, error -71 [ 241.396692][ T781] usb usb6-port1: unable to enumerate USB device [ 241.797852][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4160'. [ 242.027616][ T36] audit: type=1400 audit(275.006:21078): avc: denied { execute } for pid=11898 comm="syz.4.4169" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.089512][T11911] tipc: Failed to remove unknown binding: 66,1,1/0:3972100061/3972100063 [ 242.207651][ T36] audit: type=1400 audit(275.186:21079): avc: denied { bind } for pid=11925 comm="syz.5.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 242.253923][T11930] input: syz0 as /devices/virtual/input/input67 [ 242.408532][T11934] FAT-fs (rnullb0): bogus number of reserved sectors [ 242.415364][T11934] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 242.496603][ T781] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.636617][ T781] usb 6-1: device descriptor read/64, error -71 [ 242.683472][T11958] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.691670][T11958] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 242.700132][T11958] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 242.708166][T11958] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 242.876586][ T781] usb 6-1: device descriptor read/64, error -71 [ 243.116576][ T781] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 243.149685][ T36] audit: type=1400 audit(276.126:21080): avc: denied { listen } for pid=11960 comm="syz.2.4193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.201963][T11965] overlayfs: overlapping lowerdir path [ 243.256583][ T781] usb 6-1: device descriptor read/64, error -71 [ 243.496587][ T781] usb 6-1: device descriptor read/64, error -71 [ 243.606683][ T781] usb usb6-port1: attempt power cycle [ 243.946594][ T781] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 243.977549][ T781] usb 6-1: device descriptor read/8, error -71 [ 244.107620][ T781] usb 6-1: device descriptor read/8, error -71 [ 244.164530][T12022] /dev/rnullb0: Can't lookup blockdev [ 244.340283][T12032] x_tables: duplicate underflow at hook 1 [ 244.346583][ T781] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 244.377550][ T781] usb 6-1: device descriptor read/8, error -71 [ 244.379324][T12036] tipc: Started in network mode [ 244.388774][T12036] tipc: Node identity 7, cluster identity 4711 [ 244.394959][T12036] tipc: Node number set to 7 [ 244.507588][ T781] usb 6-1: device descriptor read/8, error -71 [ 244.626671][ T781] usb usb6-port1: unable to enumerate USB device [ 245.256613][ T781] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 245.284406][T12108] futex_wake_op: syz.5.4237 tries to shift op by -1; fix this program [ 245.378566][ T36] audit: type=1400 audit(278.356:21081): avc: denied { accept } for pid=12122 comm="syz.5.4243" laddr=127.0.0.1 lport=19 faddr=127.0.0.1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.416602][ T781] usb 3-1: Using ep0 maxpacket: 16 [ 245.423778][ T781] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 245.437722][ T781] usb 3-1: config 0 has no interface number 0 [ 245.443865][ T781] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.445452][T12130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 245.453730][T12130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:184 [ 245.455987][ T781] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 245.482071][ T781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.492255][ T781] usb 3-1: config 0 descriptor?? [ 245.498144][ T781] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 245.577604][T12136] IPv6: NLM_F_CREATE should be specified when creating new route [ 245.711305][ T36] audit: type=1400 audit(2000000000.009:21082): avc: denied { write } for pid=12140 comm="syz.4.4250" path="socket:[58502]" dev="sockfs" ino=58502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 245.774773][T12144] incfs: ino conflict with backing FS 2 [ 245.845935][T12139] SELinux: security_context_str_to_sid () failed with errno=-22 [ 245.951766][T12157] overlayfs: missing 'lowerdir' [ 245.961180][T12157] SELinux: failed to load policy [ 245.967215][ T36] audit: type=1400 audit(2000000000.260:21083): avc: denied { load_policy } for pid=12156 comm="syz.4.4255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 245.994161][T12157] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 246.038465][T12162] binder: Unknown parameter 'appraise_type' [ 246.692933][T12236] rust_binder: 12236: no such ref 3 [ 247.199391][T12267] rust_binder: Write failure EFAULT in pid:142 [ 247.524817][T12284] incfs: Options parsing error. -22 [ 247.546679][T12284] incfs: mount failed -22 [ 247.815741][T12298] kvm: MWAIT instruction emulated as NOP! [ 247.837980][ T36] audit: type=1326 audit(2000000002.140:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12294 comm="syz.5.4302" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 248.035098][ T64] usb 3-1: USB disconnect, device number 58 [ 248.096355][T12312] FAULT_INJECTION: forcing a failure. [ 248.096355][T12312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 248.109633][T12312] CPU: 0 UID: 0 PID: 12312 Comm: syz.2.4308 Not tainted 6.12.30-syzkaller-g8ea40f524391 #0 410f6785ff867c4c7f19ffe1872815da26232c9e [ 248.109668][T12312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.109683][T12312] Call Trace: [ 248.109689][T12312] [ 248.109696][T12312] __dump_stack+0x21/0x30 [ 248.109729][T12312] dump_stack_lvl+0x10c/0x190 [ 248.109748][T12312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 248.109768][T12312] dump_stack+0x19/0x20 [ 248.109786][T12312] should_fail_ex+0x3d9/0x530 [ 248.109807][T12312] should_fail+0xf/0x20 [ 248.109824][T12312] should_fail_usercopy+0x1e/0x30 [ 248.109845][T12312] _copy_to_user+0x24/0xa0 [ 248.109868][T12312] simple_read_from_buffer+0xed/0x160 [ 248.109885][T12312] proc_fail_nth_read+0x19e/0x210 [ 248.109902][T12312] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 248.109919][T12312] ? bpf_lsm_file_permission+0xd/0x20 [ 248.109938][T12312] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 248.109955][T12312] vfs_read+0x27b/0xb60 [ 248.109974][T12312] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 248.109999][T12312] ? __cfi_vfs_read+0x10/0x10 [ 248.110018][T12312] ? __kasan_check_write+0x18/0x20 [ 248.110038][T12312] ? mutex_lock+0x92/0x1c0 [ 248.110058][T12312] ? __cfi_mutex_lock+0x10/0x10 [ 248.110078][T12312] ? __fget_files+0x2c5/0x340 [ 248.110104][T12312] ksys_read+0x141/0x250 [ 248.110123][T12312] ? __cfi_ksys_read+0x10/0x10 [ 248.110144][T12312] ? __kasan_check_read+0x15/0x20 [ 248.110163][T12312] __x64_sys_read+0x7f/0x90 [ 248.110182][T12312] x64_sys_call+0x2638/0x2ee0 [ 248.110204][T12312] do_syscall_64+0x58/0xf0 [ 248.110220][T12312] ? clear_bhb_loop+0x50/0xa0 [ 248.110246][T12312] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 248.110266][T12312] RIP: 0033:0x7ff72cd8d33c [ 248.110290][T12312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.110305][T12312] RSP: 002b:00007ff72dc11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.110326][T12312] RAX: ffffffffffffffda RBX: 00007ff72cfb5fa0 RCX: 00007ff72cd8d33c [ 248.110339][T12312] RDX: 000000000000000f RSI: 00007ff72dc110a0 RDI: 0000000000000004 [ 248.110349][T12312] RBP: 00007ff72dc11090 R08: 0000000000000000 R09: 0000000000000000 [ 248.110360][T12312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.110370][T12312] R13: 0000000000000000 R14: 00007ff72cfb5fa0 R15: 00007ffc58ca4678 [ 248.110384][T12312] [ 248.508757][T12333] rust_binder: Write failure EFAULT in pid:161 [ 248.523312][T12336] 9pnet_fd: Insufficient options for proto=fd [ 248.585963][T12344] overlayfs: failed to clone lowerpath [ 248.726606][ T390] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 248.878112][ T390] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.886205][ T390] usb 3-1: not running at top speed; connect to a high speed hub [ 248.894838][ T390] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 248.903067][ T390] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 248.913184][ T390] usb 3-1: config 4 has no interface number 0 [ 248.921485][ T390] usb 3-1: string descriptor 0 read error: -22 [ 248.927753][ T390] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 248.936843][ T390] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.947116][ T390] usb 3-1: Found UVC 0.00 device (04f2:b746) [ 248.954072][ T390] usb 3-1: No valid video chain found. [ 249.152452][ T64] usb 3-1: USB disconnect, device number 59 [ 249.214747][T12366] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4330'. [ 249.692086][T12397] binder: Unknown parameter '' [ 249.727791][T12401] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 249.740993][T12405] rust_binder: Error while translating object. [ 249.741023][T12405] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 249.748976][T12405] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:265 [ 250.026607][ T64] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 250.059335][ T36] audit: type=1326 audit(2000000004.360:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.083066][ T36] audit: type=1326 audit(2000000004.360:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.107540][ T36] audit: type=1326 audit(2000000004.410:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.116685][T12422] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 250.131392][ T36] audit: type=1326 audit(2000000004.410:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.134802][T12422] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 250.141687][ T36] audit: type=1326 audit(2000000004.410:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.163491][T12422] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:654 [ 250.196853][ T36] audit: type=1326 audit(2000000004.500:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.203826][T12425] fuse: Unknown parameter 'fd0x0000000000000008' [ 250.206053][ T36] audit: type=1326 audit(2000000004.500:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.260119][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 250.265377][ T36] audit: type=1326 audit(2000000004.500:21092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.4352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x7ffc0000 [ 250.267009][T12425] overlay: Bad value for 'nfs_export' [ 250.290231][ T64] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 250.302935][ T64] usb 6-1: config 0 has no interface number 0 [ 250.310808][T12425] incfs: Error accessing: ./file0. [ 250.311158][ T64] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 250.316229][T12425] incfs: mount failed -20 [ 250.328570][ T64] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 250.345042][ T64] usb 6-1: config 0 interface 255 has no altsetting 0 [ 250.353486][ T64] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 250.366560][ T64] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.374604][ T64] usb 6-1: Product: syz [ 250.381149][ T64] usb 6-1: Manufacturer: syz [ 250.385787][ T64] usb 6-1: SerialNumber: syz [ 250.392121][ T64] usb 6-1: config 0 descriptor?? [ 250.478589][ T36] audit: type=1326 audit(2000000004.780:21093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12450 comm="syz.0.4364" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x0 [ 250.599037][T12409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.607618][T12409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.619552][ T64] hub 6-1:0.255: bad descriptor, ignoring hub [ 250.626466][ T64] hub 6-1:0.255: probe with driver hub failed with error -5 [ 250.647259][ T64] usb 6-1: USB disconnect, device number 10 [ 251.306647][T12467] overlay: Unknown parameter '/' [ 251.352314][T12475] tc_dump_action: action bad kind [ 251.442006][T12493] overlay: Unknown parameter '/' [ 251.449981][T12497] overlay: Unknown parameter 'default_permissions:/' [ 251.507043][T12499] rust_binder: Error in use_page_slow: ESRCH [ 251.507070][T12499] rust_binder: use_range failure ESRCH [ 251.513110][T12499] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 251.519308][T12499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.528119][T12499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:289 [ 251.759263][T12528] overlay: Unknown parameter '/' [ 252.276586][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 252.384552][T12553] overlayfs: failed to clone lowerpath [ 252.427764][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 252.436135][ T9] usb 6-1: config 0 has no interface number 0 [ 252.447789][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 252.457126][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.473003][ T9] usb 6-1: Product: syz [ 252.477310][ T9] usb 6-1: Manufacturer: syz [ 252.481930][ T9] usb 6-1: SerialNumber: syz [ 252.492073][T12567] overlayfs: failed to clone lowerpath [ 252.499364][ T9] usb 6-1: config 0 descriptor?? [ 252.577224][T12583] overlayfs: failed to clone lowerpath [ 252.596099][T12585] xt_NFQUEUE: number of total queues is 0 [ 252.866619][ T736] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 252.919221][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 252.919239][ T36] audit: type=1326 audit(2000000007.220:21096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12541 comm="syz.5.4395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 253.020046][ T736] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 253.028418][ T736] usb 3-1: config 0 has no interface number 1 [ 253.034585][ T736] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 253.044478][ T736] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.055955][ T736] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 253.065160][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.073211][ T736] usb 3-1: SerialNumber: syz [ 253.078672][ T736] usb 3-1: config 0 descriptor?? [ 253.224710][T12602] overlayfs: failed to clone lowerpath [ 253.288199][ T736] usb 3-1: Found UVC 0.00 device (0002:0000) [ 253.295279][ T736] usb 3-1: No valid video chain found. [ 253.308136][ T736] usb 3-1: USB disconnect, device number 60 [ 254.087055][T12649] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4435'. [ 254.266588][ T64] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 254.417770][ T64] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 254.426194][ T64] usb 3-1: config 0 has no interface number 1 [ 254.432534][ T64] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.442559][ T64] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 254.454224][ T64] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 254.463324][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.471395][ T64] usb 3-1: SerialNumber: syz [ 254.477089][ T64] usb 3-1: config 0 descriptor?? [ 254.688180][ T64] usb 3-1: Found UVC 0.00 device (0002:0000) [ 254.695144][ T64] usb 3-1: No valid video chain found. [ 254.703503][ T64] usb 3-1: USB disconnect, device number 61 [ 254.842800][T12683] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.956378][T12703] /dev/rnullb0: Can't lookup blockdev [ 255.063816][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 255.078953][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 255.090510][ T9] asix 6-1:0.251: probe with driver asix failed with error -5 [ 255.125114][ T9] usb 6-1: USB disconnect, device number 11 [ 255.142374][T12728] 9pnet_fd: Insufficient options for proto=fd [ 255.168678][T12730] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4466'. [ 255.190991][T12730] rust_binder: Write failure EINVAL in pid:200 [ 255.191596][T12730] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4466'. [ 255.317283][T12760] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.436916][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4484'. [ 255.506064][T12780] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 255.506095][T12780] rust_binder: Error while translating object. [ 255.514843][T12780] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 255.521123][T12780] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 255.917922][T12784] kvm: kvm [12783]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x4000000000000001 [ 256.047365][T12802] overlay: Unknown parameter 'silent' [ 256.145083][ T36] audit: type=1400 audit(2000000010.440:21097): avc: denied { create } for pid=12821 comm="syz.0.4503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 256.296573][ T36] audit: type=1326 audit(2000000010.590:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12843 comm="syz.2.4512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff72cd8e929 code=0x0 [ 256.390401][T12849] tmpfs: Unknown parameter 'grpquota_inode_hardlimit' [ 256.422197][ T36] audit: type=1326 audit(2000000010.720:21099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.0.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7fc00000 [ 256.445887][ T36] audit: type=1326 audit(2000000010.720:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.0.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7fc00000 [ 256.473976][ T36] audit: type=1326 audit(2000000010.720:21101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.0.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7fc00000 [ 256.497947][ T36] audit: type=1326 audit(2000000010.720:21102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.0.4511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7fc00000 [ 257.038274][T12870] overlayfs: failed to clone lowerpath [ 257.714905][T12932] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.875768][T12946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12946 comm=syz.5.4545 [ 257.913165][T12951] netlink: 'syz.5.4547': attribute type 19 has an invalid length. [ 257.921372][T12951] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4547'. [ 258.145954][T12973] x_tables: duplicate underflow at hook 1 [ 258.272323][ T36] audit: type=1326 audit(2000000012.570:21103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.5.4565" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 258.347091][T13007] netlink: 'syz.5.4567': attribute type 4 has an invalid length. [ 258.354901][T13007] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4567'. [ 258.861158][ T36] audit: type=1400 audit(2000000013.160:21104): avc: denied { create } for pid=13051 comm="syz.2.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 258.881780][T13056] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.4586'. [ 259.271149][ T36] audit: type=1400 audit(2000000013.570:21105): avc: denied { write } for pid=13081 comm="syz.4.4595" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 259.517226][T13088] veth0_vlan: entered allmulticast mode [ 259.538219][T13088] veth1_vlan: entered allmulticast mode [ 259.687257][ T36] audit: type=1326 audit(2000000013.990:21106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13095 comm="syz.5.4602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 259.820649][T13109] overlayfs: failed to clone lowerpath [ 259.826716][ T36] audit: type=1400 audit(2000000014.130:21107): avc: denied { remount } for pid=13108 comm="syz.5.4605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 259.871867][T13118] incfs: Options parsing error. -22 [ 259.878577][T13118] incfs: mount failed -22 [ 259.971753][ T36] audit: type=1400 audit(2000000014.270:21108): avc: denied { accept } for pid=13140 comm="syz.0.4617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 260.178591][T13169] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4627'. [ 260.481248][ T36] audit: type=1400 audit(2000000014.780:21109): avc: denied { create } for pid=13172 comm="syz.5.4629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 260.706921][T13195] overlayfs: failed to clone lowerpath [ 260.747642][ T36] audit: type=1400 audit(2000000015.050:21110): avc: denied { map } for pid=13196 comm="syz.0.4637" path="socket:[62968]" dev="sockfs" ino=62968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 261.004579][ T36] audit: type=1326 audit(2000000015.300:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13237 comm="syz.2.4652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7ff72cd8e929 code=0x0 [ 261.222963][T13277] sock: sock_timestamping_bind_phc: sock not bind to device [ 261.249942][T13281] incfs: Options parsing error. -22 [ 261.255570][T13281] incfs: mount failed -22 [ 261.290750][ T36] audit: type=1400 audit(2000000015.590:21112): avc: denied { create } for pid=13287 comm="syz.0.4668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 261.356815][T13295] 9pnet_fd: Insufficient options for proto=fd [ 261.451741][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4674'. [ 261.469431][T13302] overlayfs: failed to clone lowerpath [ 261.574969][T13324] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4684'. [ 262.321143][ T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:0) [ 262.341758][T13369] 9pnet: Could not find request transport: xen [ 262.448103][T13380] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 262.448129][T13380] rust_binder: Read failure Err(EFAULT) in pid:238 [ 262.468176][T13383] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4706'. [ 262.745601][T13405] netlink: 'syz.0.4715': attribute type 4 has an invalid length. [ 263.271359][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4719'. [ 263.332543][T13429] incfs: Options parsing error. -22 [ 263.338220][T13429] incfs: mount failed -22 [ 263.398530][ T36] audit: type=1326 audit(2000000017.700:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13445 comm="syz.5.4731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 264.287955][T13478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4743'. [ 264.458301][ T36] audit: type=1400 audit(2000000018.760:21114): avc: denied { remount } for pid=13501 comm="syz.0.4753" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 264.579004][T13530] tipc: Failed to remove unknown binding: 66,1,1/0:1938902847/1938902849 [ 264.587661][T13529] tipc: Failed to remove unknown binding: 66,1,1/0:1938902847/1938902849 [ 264.608822][T13534] overlayfs: failed to clone upperpath [ 265.152168][T13544] 9pnet_fd: Insufficient options for proto=fd [ 265.709476][T13569] rust_binder: 13569: no such ref 1 [ 265.795837][T13574] netlink: 6048 bytes leftover after parsing attributes in process `syz.4.4779'. [ 266.396818][T13614] syz.2.4795 (13614): attempted to duplicate a private mapping with mremap. This is not supported. [ 266.722748][T13693] /dev/rnullb0: Can't lookup blockdev [ 266.801418][T13708] overlayfs: failed to clone upperpath [ 267.255791][T13749] incfs: Can't find or create .incomplete dir in ./bus [ 267.262906][T13749] incfs: mount failed -17 [ 267.415435][T13795] fuseblk: Bad value for 'fd' [ 267.929270][T13833] bpf: Bad value for 'mode' [ 267.983298][ T36] audit: type=1326 audit(2000000022.280:21115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13846 comm="syz.5.4886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 268.034684][T13852] netlink: 'syz.5.4886': attribute type 4 has an invalid length. [ 268.047918][T13852] netlink: 'syz.5.4886': attribute type 4 has an invalid length. [ 268.585495][T13863] fuse: Invalid gid '00000000000037777777777' [ 268.653170][T13875] batadv_slave_1: entered promiscuous mode [ 268.659500][T13875] batadv_slave_1: left promiscuous mode [ 268.681026][T13877] tmpfs: Bad value for 'nr_inodes' [ 268.965948][T13885] incfs: Options parsing error. -22 [ 268.971254][T13885] incfs: mount failed -22 [ 269.036000][T13887] rust_binder: validate_parent_fixup: new_min_offset=16, sg_entry.length=0 [ 269.036029][T13887] rust_binder: Error while translating object. [ 269.044822][T13887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.051044][T13887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:269 [ 269.261789][T13916] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.271449][T13916] rust_binder: Error in use_page_slow: ESRCH [ 269.277967][T13916] rust_binder: use_range failure ESRCH [ 269.284113][T13916] rust_binder: Failed to allocate buffer. len:1104, is_oneway:false [ 269.289613][T13916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 269.297659][T13916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 269.307006][T13916] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 269.316048][T13916] rust_binder: Read failure Err(EFAULT) in pid:284 [ 269.352137][T13922] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 270.307875][ T36] audit: type=1400 audit(2000000024.610:21116): avc: denied { accept } for pid=14012 comm="syz.0.4946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 270.448924][ T36] audit: type=1400 audit(2000000024.750:21117): avc: denied { shutdown } for pid=14024 comm="syz.5.4951" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 270.526128][T14037] 9pnet_fd: Insufficient options for proto=fd [ 270.558723][T14047] overlayfs: failed to clone upperpath [ 270.890677][T14070] overlayfs: failed to clone upperpath [ 270.908344][T14072] /dev/rnullb0: Can't lookup blockdev [ 270.915017][T14072] /dev/rnullb0: Can't lookup blockdev [ 271.746285][T14141] overlayfs: failed to clone upperpath [ 271.752795][ T36] audit: type=1400 audit(2000000026.060:21118): avc: denied { accept } for pid=14140 comm="syz.5.4993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.806037][ T36] audit: type=1326 audit(2000000026.100:21119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14146 comm="syz.5.4996" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a88b8e929 code=0x0 [ 272.040929][T14150] netlink: 'syz.2.4997': attribute type 6 has an invalid length. [ 272.331923][ T36] audit: type=1326 audit(2000000026.630:21120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.355922][ T36] audit: type=1326 audit(2000000026.630:21121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.380828][ T36] audit: type=1326 audit(2000000026.650:21122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.408112][ T36] audit: type=1326 audit(2000000026.650:21123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.431997][ T36] audit: type=1326 audit(2000000026.650:21124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.459990][ T36] audit: type=1326 audit(2000000026.650:21125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14194 comm="syz.0.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd8a0b8e929 code=0x7ffc0000 [ 272.943342][T14251] overlay: Unknown parameter 'appraise' [ 272.950629][T14253] overlay: Unknown parameter 'appraise' [ 272.977049][T14258] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 273.009531][T14260] syzkaller0: entered promiscuous mode [ 273.016542][T14260] syzkaller0: entered allmulticast mode [ 273.226401][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.235510][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.246929][T14279] bridge_slave_0: entered allmulticast mode [ 273.253384][T14279] bridge_slave_0: entered promiscuous mode [ 273.260556][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.268050][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.275213][T14279] bridge_slave_1: entered allmulticast mode [ 273.281762][T14279] bridge_slave_1: entered promiscuous mode [ 273.352179][T14289] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 273.352485][T14289] rust_binder: Error while translating object. [ 273.359129][T14289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 273.365964][T14289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:338 [ 273.368899][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.391386][T14279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.398682][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.405703][T14279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.456626][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.466670][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.479536][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.486617][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.508595][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.515684][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.566424][T14279] veth0_vlan: entered promiscuous mode [ 273.590007][T14279] veth1_macvtap: entered promiscuous mode [ 273.976604][ T390] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 274.137725][ T390] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 274.147077][ T390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.155655][ T390] usb 1-1: config 0 descriptor?? [ 274.986785][ T390] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 274.997054][ T390] asix 1-1:0.0: probe with driver asix failed with error -71 [ 275.008240][ T390] usb 1-1: USB disconnect, device number 37 [ 275.092486][T14371] ------------[ cut here ]------------ [ 275.098015][T14371] WARNING: CPU: 0 PID: 14371 at mm/page_alloc.c:5159 __alloc_pages_noprof+0xe4/0x6c0 [ 275.107562][T14371] Modules linked in: [ 275.111488][T14371] CPU: 0 UID: 0 PID: 14371 Comm: syz.0.5072 Not tainted 6.12.30-syzkaller-g8ea40f524391 #0 410f6785ff867c4c7f19ffe1872815da26232c9e [ 275.125280][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.135406][T14371] RIP: 0010:__alloc_pages_noprof+0xe4/0x6c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 275.141395][T14371] Code: 0f 1f 44 00 00 41 83 fd 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d d4 2d ee 05 00 0f 85 c4 00 00 00 c6 05 c7 2d ee 05 01 <0f> 0b 31 c0 e9 b6 00 00 00 41 83 fd 0a 0f 87 aa 00 00 00 44 89 6c [ 275.161200][T14371] RSP: 0018:ffffc9000682f880 EFLAGS: 00010246 [ 275.167567][T14371] RAX: 0000000000000000 RBX: 1ffff92000d05f14 RCX: 0000000000000000 [ 275.175979][T14371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000682f928 [ 275.184025][T14371] RBP: ffffc9000682f9b0 R08: ffffc9000682f927 R09: 0000000000000000 [ 275.192638][T14371] R10: ffffc9000682f910 R11: fffff52000d05f25 R12: ffffc9000682f8c0 [ 275.200753][T14371] R13: 0000000000000020 R14: dffffc0000000000 R15: 0000000000000000 [ 275.208787][T14371] FS: 00007f6d120496c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 275.217787][T14371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.224500][T14371] CR2: 0000200000001000 CR3: 0000000122862000 CR4: 00000000003526b0 [ 275.232571][T14371] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 275.240968][T14371] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 275.249671][T14371] Call Trace: [ 275.252995][T14371] [ 275.255955][T14371] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 275.262148][T14371] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 275.267945][T14371] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 275.273866][T14371] ___kmalloc_large_node+0x9c/0x1d0 [ 275.279141][T14371] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 275.284822][T14371] __kmalloc_large_node_noprof+0x1e/0xe0 [ 275.290574][T14371] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 275.296252][T14371] __kmalloc_noprof+0x26d/0x450 [ 275.301179][T14371] incfs_realloc_mount_info+0xa7/0x4d0 [ 275.306710][T14371] ? incfs_add_sysfs_node+0x118/0x240 [ 275.312119][T14371] incfs_alloc_mount_info+0x479/0x600 [ 275.317611][T14371] incfs_mount_fs+0x3ca/0x960 [ 275.322328][T14371] ? __cfi_incfs_mount_fs+0x10/0x10 [ 275.327589][T14371] ? vfs_parse_fs_string+0x102/0x170 [ 275.332929][T14371] ? selinux_capable+0x38/0x50 [ 275.337783][T14371] legacy_get_tree+0x103/0x1b0 [ 275.342582][T14371] ? __cfi_incfs_mount_fs+0x10/0x10 [ 275.347875][T14371] vfs_get_tree+0xa1/0x290 [ 275.352330][T14371] do_new_mount+0x251/0xb40 [ 275.356913][T14371] ? security_capable+0xcf/0xf0 [ 275.361798][T14371] path_mount+0x688/0x1050 [ 275.366255][T14371] ? putname+0x113/0x150 [ 275.370580][T14371] __se_sys_mount+0x2bd/0x480 [ 275.375297][T14371] ? __x64_sys_mount+0xf0/0xf0 [ 275.380130][T14371] ? __kasan_check_write+0x18/0x20 [ 275.385284][T14371] ? fpregs_restore_userregs+0x11d/0x260 [ 275.390949][T14371] __x64_sys_mount+0xc3/0xf0 [ 275.395572][T14371] x64_sys_call+0x2021/0x2ee0 [ 275.400509][T14371] do_syscall_64+0x58/0xf0 [ 275.404968][T14371] ? clear_bhb_loop+0x50/0xa0 [ 275.409796][T14371] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 275.415731][T14371] RIP: 0033:0x7f6d1118e929 [ 275.420188][T14371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.439960][T14371] RSP: 002b:00007f6d12049038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.448459][T14371] RAX: ffffffffffffffda RBX: 00007f6d113b5fa0 RCX: 00007f6d1118e929 [ 275.456579][T14371] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 00002000000007c0 [ 275.464855][T14371] RBP: 00007f6d11210b39 R08: 0000200000000040 R09: 0000000000000000 [ 275.473289][T14371] R10: 0000000001004002 R11: 0000000000000246 R12: 0000000000000000 [ 275.481327][T14371] R13: 0000000000000000 R14: 00007f6d113b5fa0 R15: 00007fff371aae58 [ 275.489363][T14371] [ 275.492406][T14371] ---[ end trace 0000000000000000 ]--- [ 275.498085][T14371] incfs: Error allocating mount info. -12 [ 275.504025][T14371] incfs: mount failed -12 [ 275.632309][ T12] bridge_slave_1: left allmulticast mode [ 275.638565][ T12] bridge_slave_1: left promiscuous mode [ 275.644242][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.652491][ T12] bridge_slave_0: left allmulticast mode [ 275.671789][ T12] bridge_slave_0: left promiscuous mode [ 275.685574][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.779576][ T12] veth1_macvtap: left promiscuous mode [ 275.785106][ T12] veth0_vlan: left promiscuous mode [ 275.826999][T11942] Trying to write to read-only block-device rnullb0 [ 276.100080][ T12] bridge_slave_1: left allmulticast mode [ 276.105773][ T12] bridge_slave_1: left promiscuous mode [ 276.111462][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.119512][ T12] bridge_slave_0: left allmulticast mode [ 276.125297][ T12] bridge_slave_0: left promiscuous mode [ 276.131110][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.139125][ T12] bridge_slave_1: left allmulticast mode [ 276.144778][ T12] bridge_slave_1: left promiscuous mode [ 276.150577][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.158147][ T12] bridge_slave_0: left allmulticast mode [ 276.163876][ T12] bridge_slave_0: left promiscuous mode [ 276.169604][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.177455][ T12] bridge_slave_1: left allmulticast mode [ 276.183211][ T12] bridge_slave_1: left promiscuous mode [ 276.188924][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.196438][ T12] bridge_slave_0: left allmulticast mode [ 276.202397][ T12] bridge_slave_0: left promiscuous mode [ 276.208046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.432980][ T12] veth1_macvtap: left promiscuous mode [ 276.438569][ T12] veth0_vlan: left promiscuous mode [ 276.444126][ T12] veth1_macvtap: left promiscuous mode [ 276.449678][ T12] veth0_vlan: left promiscuous mode [ 276.455307][ T12] veth1_macvtap: left promiscuous mode