last executing test programs: 3m21.036258113s ago: executing program 1 (id=1143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 3m21.035151814s ago: executing program 1 (id=1144): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') write$FUSE_IOCTL(r1, 0x0, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x0) accept4$inet6(r0, 0x0, 0x0, 0x800) unshare(0x62040200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x4000800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000b00)=[@wr_drn={0x6e, 0x20, {0x3, 0x7}}, @wr_drn={0x6e, 0x20, {0x4, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x800}, @uexit={0x0, 0x18, 0xd}, @rdmsr={0x32, 0x18, {0x853}}, @in_dx={0x82, 0x20, {0xf9d4, 0x2}}, @out_dx={0xaa, 0x28, {0x3602, 0x6c3538cbc6ecfd64, 0x2dff}}, @out_dx={0xaa, 0x28, {0x50e5, 0x0, 0x2}}, @wrmsr={0x1e, 0x20, {0x2b0, 0x2}}, @wr_crn={0x46, 0x20, {0x8, 0x73c}}, @rdmsr={0x32, 0x18, {0x9d6}}, @code={0xa, 0x44, {"36400fdd01410f0766ba610066ed66450ff2d3dbe1f2ac360f302666460f3a16f120c4c189608fa6d50000650f1c8b0f000000"}}, @in_dx={0x82, 0x20, {0xf02f}}, @uexit={0x0, 0x18, 0x8001}, @uexit={0x0, 0x18, 0x4}, @out_dx={0xaa, 0x28, {0x2521, 0x4, 0x6}}, @code={0xa, 0x4f, {"400f180a67363e0f01cb6690460f01bc2f0000000066ba2100edc482f933cfc482a50bd466bad104b0f2ee66baf80cb89581c886ef66bafc0cec410f01ca"}}, @wr_drn={0x6e, 0x20, {0x5, 0x3}}, @in_dx={0x82, 0x20, {0x6139, 0x2}}, @wrmsr={0x1e, 0x20, {0x34a, 0x2}}, @wr_drn={0x6e, 0x20, {0x3, 0x401}}, @code={0xa, 0x73, {"b805000000b9fc0000000f01c167450f208048b82c000000000000000f23c80f21f8350800c0000f23f8642667400fc72a26666764f3a636654d0fc7acf92e000000430f009306c6dedec4a33d49fb0046c00600b9800000c00f3235000800000f30"}}, @out_dx={0xaa, 0x28, {0x947, 0x1, 0x7ff}}, @wr_crn={0x46, 0x20, {0x0, 0x6}}, @in_dx={0x82, 0x20, {0xd8bd, 0x1}}, @rdmsr={0x32, 0x18, {0x941}}, @out_dx={0xaa, 0x28, {0xf9ed, 0x1, 0x3}}, @out_dx={0xaa, 0x28, {0xaf4a, 0x4, 0x9}}], 0x41e}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000240)={0x200000000000000, 0x80a0000, 0x6, 0x0, 0x1}) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, @in=@rand_addr=0x64010101, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis128-aesni\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x804) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x16) close_range(r0, 0xffffffffffffffff, 0x2) 3m21.034954394s ago: executing program 1 (id=1145): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000480)={0x3, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/222, &(0x7f0000000180)=0xde) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}], 0xe, 0x0, 0x0}) 3m21.029172994s ago: executing program 1 (id=1146): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1002, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x100, 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5a43fd80}]}]}, 0x20}}, 0x4000004) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x18c, r4, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x178, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1d073ef6, @dev={0xfe, 0x80, '\x00', 0x28}, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x69c1, @remote, 0xaf5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x53, @local, 0x81}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40004}, 0x2000094) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 3m21.016715135s ago: executing program 1 (id=1147): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, r3}, 0xc) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) socket$netlink(0x10, 0x3, 0x14) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'}) (async) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @loopback, r3}, 0xc) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) (async) socket$netlink(0x10, 0x3, 0x14) (async) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async) 3m20.956144788s ago: executing program 1 (id=1148): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (async) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x6c, 0x5, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x801) accept$packet(r3, 0x0, &(0x7f00000004c0)) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r5, 0x1, 0x1) (async) getdents(r5, 0x0, 0x0) (async) sendto$packet(r0, &(0x7f0000000180)="18215abf83583a1cfdb96a93bf24d62805fa51f52abad1360d5e9f0cfcf37ba15c15c9626de557c00c5e9554c5a5d389c50b16854776853d41b3dc31a5f1a9ac16b454ebb441e81a4ebbe519728d6100cf7fe5d4cc0750ca3c672716d1e78743ab166dc06481027cca1db25d4f3e454bb53388283d4e1c061de2a32c66dbb1c5a1acf456f3338ce5b6f45709cca1b51e4d2ebe488298747077ba39ee880f09711f941efb217faf29d69f386b22208847fa705c223686636cc6d34611a0fe0e54c6be99", 0xc3, 0x4000000, &(0x7f00000002c0)={0x11, 0xf5, r4, 0x1, 0x3}, 0x14) 3m5.955336236s ago: executing program 32 (id=1148): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) (async) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) (async) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x6c, 0x5, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x801) accept$packet(r3, 0x0, &(0x7f00000004c0)) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) (async) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r5, 0x1, 0x1) (async) getdents(r5, 0x0, 0x0) (async) sendto$packet(r0, &(0x7f0000000180)="18215abf83583a1cfdb96a93bf24d62805fa51f52abad1360d5e9f0cfcf37ba15c15c9626de557c00c5e9554c5a5d389c50b16854776853d41b3dc31a5f1a9ac16b454ebb441e81a4ebbe519728d6100cf7fe5d4cc0750ca3c672716d1e78743ab166dc06481027cca1db25d4f3e454bb53388283d4e1c061de2a32c66dbb1c5a1acf456f3338ce5b6f45709cca1b51e4d2ebe488298747077ba39ee880f09711f941efb217faf29d69f386b22208847fa705c223686636cc6d34611a0fe0e54c6be99", 0xc3, 0x4000000, &(0x7f00000002c0)={0x11, 0xf5, r4, 0x1, 0x3}, 0x14) 3m2.490541534s ago: executing program 4 (id=1445): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000004000000000220000000a0001007770616e31040000d58dee591e5ce127590b0401d8ea8a98a86b02c75114d8180f5d12d7cc74fc92db11cde8d60d3a2afbcaa1354df1224673"], 0x20}}, 0x2008c0d4) r2 = gettid() r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) finit_module(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000040)={{0x1}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x190, r12, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d10af23c1b716f5c190d2470feda294e0e41f1a846ffeb58"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "06f3d1f08c4c055644b0d75c6bc44bd4348f7b913739557f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "383fefd6bd9e2fbd0bb577cb2d8e06780325671394db73cc"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ed15603f2d41639802ba80c900eaf7f020bce880722b6e7f"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c66612a8906a55b66217e9efe4272e3e18a94b0d43af5b4f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x190}}, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB="2f000e0080000000080211000001080211000000000211000000000000000000000000006400010003010d06028c8c000400460008000c000200000008000d05000000000a0034000202020202020000080035000000000004000501"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf253100000008000100330000000c009900008000004400000008000300", @ANYRES32=r9, @ANYBLOB='\b\x008\x00', @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20001000}, 0x80) r15 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r15, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r15, 0x0) ioctl$ASHMEM_SET_SIZE(r15, 0x40087703, 0x36) pselect6(0x40, &(0x7f0000000080)={0x3, 0x1ce5e097, 0x5, 0x9, 0x3, 0x4, 0x6, 0x3}, &(0x7f0000000100)={0x7fffffff, 0x7fff, 0x7, 0xfffffffffffffff6, 0x4, 0x4, 0xffff, 0x80}, &(0x7f00000001c0)={0x6, 0x2b, 0x2, 0x8, 0x9, 0x8, 0xfffffffffffffff7, 0x7}, &(0x7f00000002c0)={r6, r7+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x3]}, 0x8}) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000540)=0x4, 0x4) syz_usb_connect$cdc_ecm(0x2, 0x63, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4, 0x24, 0x13, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm_detail={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) 3m1.786411591s ago: executing program 4 (id=1463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) fallocate(r1, 0x4, 0x77, 0x9) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) write$UHID_DESTROY(r2, &(0x7f0000000140), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r3, 0x0, 0x42, 0x0, &(0x7f0000000180)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x15, 0x0, 0x3, "5dcb5ced691565e150a275879fc52bcc"}, 0x15, 0x0) setuid(r5) ioctl$KVM_CREATE_VCPU(r0, 0x770a, 0x2) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x3d29) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\x01\xa8\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00J\xb2\xce0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x804, 0x0, 0x0, {0x8, 0x0, 0x8}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0xc000) read(r3, &(0x7f0000000340)=""/72, 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x20, 0x1, 0x202, r5, 0x0, 0x0, 0x8800000}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x2f, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x1, &(0x7f0000001480)=""/4096, 0x0, 0x1, 0x2}, @fda={0x66646185, 0xa, 0x1000000002, 0x9}, @fd}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 3m1.599928213s ago: executing program 4 (id=1472): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f00000001c0)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) lseek(r0, 0x4, 0x1) 3m1.553116656s ago: executing program 4 (id=1473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0xb60, 0x80282) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000640)=""/4096) (async, rerun: 64) preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9) (rerun: 64) 2m50.766239756s ago: executing program 4 (id=1656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1000000012abec) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 'id1\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x1}, @request_death], 0xcb, 0x0, &(0x7f0000000580)="79a177a258f29725801544f9188fe0c6d354b9053a503c9d3a4000b4ada51f7293de897202030b01691b3210082d9141a9895f98d2520a50e5cfe977f941e76f4b93f736e04acbfa6939fc9870762c8b9197130ae58a61846dd4ef647169c17e8a2383d9c9030ac1be870abeba88b0140cacb2b8be90f6cff0a899bce7b36c9835eb8b5d5f2e0e8cfef9b8621f1c43f2cd85c9d98c6285da34ffc3a1c59b6bf821938f39d9de238764236c7b5ca2578355b0ae42eb91379c089ba127c50f32d7bc38a8c876410370b8636a"}) 2m50.731447299s ago: executing program 33 (id=1656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x7, 0x9001) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x1000000012abec) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x7, 0xffffffffffffffff, 'id1\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x1}, @request_death], 0xcb, 0x0, &(0x7f0000000580)="79a177a258f29725801544f9188fe0c6d354b9053a503c9d3a4000b4ada51f7293de897202030b01691b3210082d9141a9895f98d2520a50e5cfe977f941e76f4b93f736e04acbfa6939fc9870762c8b9197130ae58a61846dd4ef647169c17e8a2383d9c9030ac1be870abeba88b0140cacb2b8be90f6cff0a899bce7b36c9835eb8b5d5f2e0e8cfef9b8621f1c43f2cd85c9d98c6285da34ffc3a1c59b6bf821938f39d9de238764236c7b5ca2578355b0ae42eb91379c089ba127c50f32d7bc38a8c876410370b8636a"}) 3.172570821s ago: executing program 5 (id=4275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000000000)=0xffffffffffffff71) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001a0007000800000000000000e638eda0f0691ff70000000000000001e0000002000000000000000000000000ffff00000000ffdf0000000033000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000004d42b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000007000000000000000000000000002000c061771a000000007f000000000000000000000002000000700000000000000014000e"], 0x104}}, 0x4000040) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000780)={0x2020}, 0x2020) recvfrom(r6, &(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3.098713826s ago: executing program 5 (id=4278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc00000, 0x171) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) write(r0, &(0x7f0000000400)="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", 0x1f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc00000, 0x171) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) 2.692204783s ago: executing program 5 (id=4286): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0xe18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00', 0x2000}) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xe2) (async) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000100)=""/190, &(0x7f0000000040)=0xbe) (async) fadvise64(r0, 0x1fe, 0x7ffd, 0x0) 2.691619993s ago: executing program 5 (id=4288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}, {0x6, 0x9, 0x81, 0x5}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xfffffffffffffd94, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x3e}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc8001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r6}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="747bdb006f816335f431b245dc81dc2b"]}]}, 0x38}], 0x1}, 0xcc000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000004ac0)=""/31, &(0x7f0000004b00)=0x1f) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000000140)={0x5e, @rand_addr=0x64010102, 0x4e23, 0x1, 'lblcr\x00', 0x10, 0x1, 0x6f}, 0x2c) close_range(r0, 0xffffffffffffffff, 0x0) 1.779920003s ago: executing program 5 (id=4295): r0 = socket(0x15, 0x5, 0xf9b) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x0, {{0xa, 0x4e22, 0x6d7, @remote, 0x10}}, {{0xa, 0x4e23, 0x161b, @loopback, 0x1ff}}}, 0x108) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$cont(0x19, r3, 0xd, 0x4) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) socket(0x15, 0x5, 0xf9b) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x0, {{0xa, 0x4e22, 0x6d7, @remote, 0x10}}, {{0xa, 0x4e23, 0x161b, @loopback, 0x1ff}}}, 0x108) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r3) (async) ptrace$cont(0x19, r3, 0xd, 0x4) (async) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26009, 0x13, r1, 0x98b2f000) (async) 1.778240383s ago: executing program 5 (id=4298): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x4048841) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) openat$ashmem(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2002) r4 = socket(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xe8) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r4], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000040), 0xd33, 0xa382) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x100, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x16, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}, {@noxattr}, {@version_9p2000}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) 632.247848ms ago: executing program 3 (id=4318): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) ioctl$RTC_AIE_OFF(r0, 0x7002) splice(r0, &(0x7f0000000040)=0x5, 0xffffffffffffffff, &(0x7f00000000c0)=0xbd, 0x3, 0x2) 631.503648ms ago: executing program 3 (id=4319): futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000280), 0x0, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) 631.344399ms ago: executing program 3 (id=4320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x30, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 622.031159ms ago: executing program 3 (id=4321): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_io_uring_setup(0x1e9c, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x4000, 0x1, 0xc2}, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000c56000/0x4000)=nil, 0x4000}}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000000)=[@reply={0x40406301, {0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa, 0xfffffffd}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"}) 616.393669ms ago: executing program 0 (id=4322): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x5) write$char_usb(r4, &(0x7f0000002600)="b565", 0x2) sendfile(r2, r3, 0x0, 0x6) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) 564.058453ms ago: executing program 3 (id=4323): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x10, &(0x7f0000000100)=0x1, 0x63) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) write$tun(r0, &(0x7f0000000000)={@void, @val={0xbd4a385015afd952, 0x4, 0xe, 0xd7f5, 0x55, 0x1000}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, @dev={0xfe, 0x80, '\x00', 0x19}}}, 0x3e) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0xffffd000) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x301, 0x0) (async, rerun: 64) socket(0x25, 0x1, 0x0) (rerun: 64) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) (async) write(r6, &(0x7f0000000400)="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", 0x1f000) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x84, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x180, 0x1, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x2, 0x75, {0x9, 0x21, 0xbacd, 0x8, 0x1, {0x22, 0x6eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x8, 0x6}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x8f, 0xb4, 0x20, 0x7}, 0xf, &(0x7f0000000240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x10, 0xf, 0x800}]}, 0x1, [{0xa7, &(0x7f0000000280)=@string={0xa7, 0x3, "e0377b0cfe60a4a2cac761b89b4d278e6629cd43488b98530d9f880852360c7f8ef147585a7dc40c4360f4eb921cd751b016d85cbdafa0441fa0453830ec8a32c9f2d99dee0f358a6c28ec04fdc2a283b96674cb0b26fc95cc0447ef36916442a2e8c98b9d0801733483b65506eaed853a54e7159424a5866e07189f347d8a56dc5473eebaf8348247d02838f318a212ef9f404908451d09480c6d72c3b5a74876f839b512"}}]}) 563.701043ms ago: executing program 0 (id=4324): mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2200023, &(0x7f0000000040)={[{@stats}]}) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x1000000, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x1000000, 0x0) 546.772494ms ago: executing program 0 (id=4325): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x101}) 544.055954ms ago: executing program 0 (id=4326): prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x59) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = userfaultfd(0x801) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x6}) (async) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000415000/0x2000)=nil, 0x2000}, 0x6}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r6, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000500000066f8a0b210"], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x16, &(0x7f0000007d00)}, 0x8000) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f387465c6c6303d733a03ffdfa48e1e440c060000000000000000fdffffff000000000000000000", @ANYRES16=r2, @ANYRESDEC=0x0, @ANYRES32=r3, @ANYRES32=r2]) 543.696254ms ago: executing program 2 (id=4327): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9a\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4\'\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x6) ftruncate(r2, 0xffff) close(0x3) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000001c0)={r2, 0x1, 0x0, 0x8000}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000008, 0x11, r0, 0xd2bd4000) 542.773294ms ago: executing program 2 (id=4328): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0xca639000) ppoll(&(0x7f0000000000)=[{r0, 0xb400}, {r0}, {r0, 0x2150}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={[0x9]}, 0x8) 530.994865ms ago: executing program 2 (id=4329): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000001040)={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x2}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000051c0)="10a7de7040d9b5b55fc1bb2ae59654a6efd49f80587421937748ea3faaaf0115b1bb6471fe38b07fc971a0f1bda770caeaf55408eb6a2a7b95f0f92069eb6379c7baa8689f00ff785f49ccb4203456e2967c5479577ed7c105edc6d2067e60eb7d3850ff863392156d23a766215a8f735eea70012f5bebd99456586c1ef8dbb697ac563b96b5bc8c247da42afc96a274ac01193c276d3565aed9c5b033ecea942455a1cf253722ac5375843720340e2b55248509f9f439d263b3f024345ecb633974662faea3fca8f99ec90e25477147bcc8cb40ce620927e651cd00f8a59e3b43a4388bfa95c5279c20f8431acfd3ccd3d28d6417ff457fca8164dcadbb911094e41fbe8c013251256f306821ef4649d8d41598684be2b8aea3c2b410a86669821c56fa74cd222aaec35b95d0ee8b3557a47e81bfe713b6fc44b3a278f568a6d1c91fb9fadb1d02c1d517efd3bf97db915315dc4b45418e6b653a68dff355d7b57278b82d3ad4248c185ae775e108281f5911b7cf07fff2fbfce4bcbe6e7833582af2ab95684e663fd7a2c88b1aa91cb39491e250710f01320ea7f4b0b04e4e36d0ff4aa6a6f07554e78c892d6f9e66061dbd639fb9219319fb64b25b664796ef2933c0007d012f59ce047bf49ac7d0a89a1c7456e33241dfbf8b558243bf891ac73d806bf3b64e0139fe833b7810597e2d4ef854f026366a93946254229d52c1aac481c4ac99d5b21b5f8e2c7bf11bbd19d07920ef535984bba1e3b8bad57fce0c2f5b4a2e952fc970169a8b337ead413626f4d6d971d5b7d70b9afecf71ba2d83253683e849267480100dad0671ee9558d1b80cb5517761cc3952b1122ba8826fc456b601faa15026901fff339945ab55f2d12c4fce4c6c7757059677f6bae483cb0ff08086c9639ceda1642f386228ac32dd16c0e4e45638f70bb3ef9371d75cfc30e250e96f4bffc3c7290793e5cb8b4957c97d67f6631bb993078e5b1b9f571d439631cf8eb7c162860debdaa5815f2b621bec579685b23a2374d0505f7dffd6b229136f57be83ea88eb24b86c8b340465eda1596528c7ea326f250c35af1ffc732f779d79abeecbb496624ef27746b3be75fd7ffd89a33f94ecf7df2a8f24487e1c1d974cf84ec9c72a2a029147994dfebd53567b8197710e3f2a6fc2517ac220899c000df6b01b256ad19c448cbbe83d35c96713a8d95dbec93f1605d2b4165eba3e0776e792345a41f75b037c98072ca199baa94512dba1c7659d1c620250679f4e797c10c80c28f422ac4d5e63058af60437830d163e6696ccd50a2b47662cb833c3a6ba6e28cbca4aca24c4ed39487624de54d58567a2ba7fde4857444477929ea2f40ebd022f740fb77b75b00fed4a9623ca8b9b7e21f4851e32d0730bc0cb6a52966d277ac63d1ded04f30ee127243915a16566789a383a73ef3c8a7fab0bdd16ae4cb55118a20d8c13536c829b2c510ab77510a1261adef93d1caa06b43b772cd9cc8e1e342fb4c788c5ac989f614f5e760c83a34c0ae9b31d598519b9f273a258b57f1aac865084edef9f721610afd26aa18a12704707245def513cace9cf9f192e07688939ba5ad41fa32e374d0d988b328875ed1417772910acf3525b37c9841a5bac67d44612de5388f62640102431541b630af765dcd9d184998973402bab041e24ec6c08ba6a62fd0072e20aab2472f3c0daddf5f24d948944f04a71c62e7b65a567d654c4899e4a1570c660ea0e6b66c399a76bc99cfe41bfff6dd15f8767793de2502de746de02502181b04fa9cf65332db6d08fc461f03fc3770ea860a1292ea1a1cb1f3f7a86e2492973d479c9064858a6fd292b6a70af18cdfcdfc278d796af11f4837a9c470d22a0930db28b06b193047f1444879b5ec2b2d0a61dfaf60c8f71c3563f525eeb065a4cd9ca1f9fb289d29385330ceb12a28ead297e596c3fa9d396fa9ba4a20fb1a969cc28bd6e9c548018e4eaf867214b54e55a90dafc4fa01717a9bec35dabb0a6b1b24a1c8c69ec924408635815a980c3411d1b", 0x5a8}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="3800000000000000290000000400000008030000000000000502000b040180c20400000002c910000000000000000000000000000000010014000000000000002900000034"], 0x50}}], 0x1, 0x4000840) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000001680)=0x2) r3 = dup3(r2, r0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x5e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003b40)={0x58, 0x0, &(0x7f0000002a80)=[@enter_looper, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001740)={0x30, 0x30, 0x30}}, 0x40}], 0xd04, 0x0, &(0x7f0000002b40)="5e3b50cd8e3fbbed3fc3eff292e3bdf5cb98e89ca12e34bdde64b5b497a9545e2b71837c35289cbcdf6f99fbfa5b5e71d55fd3d301ecc0d4c30f7d2a86091410d8bbf07e895eee740910299488d83ee075a83b1d69722b0e5e3eb42f166731053cad04878dccc207a51c3261768d278c6fd6ca46e8fdbc82b5ea66ccb37aaa3d3e763d2e3afc8875bcf7ab2475e74c4572f27514745be3e195f5e91c356d51bbfa8b33025cb6c5d2876c16cf7f2143f413a85c5c820b3d294aaf7cf49a2989f074249944127e065efcacfa2309febe678fdcf7c5205862f91c75dd8f7b5305411b327ba0bad71570277ab2fba2cf61eb0900f17e2b37e0a31f26d635db9a3965fa6145b4e03a8be65caaaf921e0b52c0cf1ce8a20722224c132a8eb1c97d5ba3961a12a8278ef4daadc311f3ffeb71bba7c4d1726e3b769556b6474caab66c0bc853f7be03dfe13ce3b7fe7abed0a010e66e241461f4bded9b1fa0f1870e681db94a2c294319e8a62a6e22a51dd79c765d17c9cf6faab3e45c77f7ba7f333ee48c2cb6e733f448d3bd0066981a1a3ff1abb7b9144ae1d1ca7eac2b7f82f2ba5190f68d7486bbf0cdbfef7a3b18ee1d433a048175828cddafe45962b0431241e235a256b497f620d5f84aec3115c10fc67dcffcdfe88fac64318a1cce9d99a91bb22a422f44ef1282136d5ec791a35a310999e5488f299cb05df275b08fd6df62056036919b59047c91ef11233465cbc996ae13661c1ae04214d3527388a0d09ce26527236e76b191839cb0a20b8df0c986eb4b2f9a8ffca298a419e5354364f0fe98fb738b1eed5368b92c73575eb8d85e67b23f9b109066d1ae3de48d75befe4b373cb2531de2fcb08b1233d4440434b6a2e6cd5878d7c70bdf23b94f7135c7e8e094fef70b669254f673f116dda414435f00b7d3f4c80be33a2beca12f2a18ad9c3643723856dbdba840b358c0d32ff9cc13f7e7b2ca4f0b731f91a349f45af03e8b0f42449483cc16bbd93d6a9fb1b900e83fb25479d5bf5f16a0abbffe4e3dbbfe37dc7005695bdcae92b6eade1b0e283fb78b27d0a878fd899435e25f55bd3c9b42ff55fc241d74c1f5d2d2caf30b62bcb89cd9824f2c0ee3ab4cbe5640ed30f226e42379ddef0ff65b7147076078da2b477bd16fce06602c2cf510cf0cfb018c0607af00231c4aa0bbb5962e6df1f01627ab6bc10c7a3fee070e91c3b23aa41b937927f6ed1081405cefdf368e1b34da43d57669f5273f3cdbb02fe89b4fc84b0e5c4d52848a1cd322a4c02cdc8cb95302396da0bd499c431da882e96d683a1e0397b530acc3e1b5eabc42401187d1b097382f26f1fa7c99c8c2c0dd8d7a25f55710cf58f4be2d193c683fc05272ba0dfabaf529f1fbc3d13a0c7c4f2cdd6fe81b33fa2736d626f731baebb1aa05f6cf4818ad3b8316875c3085703b6f119c9cc5737cf49097f239a282532699593fb21ecfdc04e07d7f24050814b5ff95621754afbcaf7b991940f96d5c84d410ea0fdab59187ab670cde94f41a62ba8aba096f378d53833c6428bdcf4f42d8a5e14a1c30a3605d1692fb2f9195f934ce2781b280b0e853fc8b62226dd95a5a614d0b37ae5a6a0bc062f4c8fcc07b18f3425749ba8607ec92d7e14768a1f96f869bf8e69d58efeb29a302086609b12b75872dde2127c00976760f9b7c615b48d41b7aba13281b025a00c6425f7b418b48c48404b41a2cd77d0db06d0dc7f4943061f34ed0e89663d4e1e768ae9d07a93306b8050620887de86eb5e718b191928cde27bb0ffb060b7002129961e4045f463c3a41816e88172c573bb5f159a0343b249384773dcb0004b784dcec77ad17d8e44ef5636360d0f73958616fa8c56e007da1c9a828926fdab0b9ebb86baac18f0e21ec4bbbfbe288169e947fd33671e2c97295970835cc81c6f85ea02fa4ff15412349712cc87dd1d788ce025b8805968be01e8c02ff1461df37afe1c41a488a5373ef5a2837591ab7be65100421f4f21f8ad21a29550d4dbf04d75737adf47112a1ff969d7c0b35c95fb79f9577a31b8baed84ae2343b49657d1d2d3f1395edefaef4e10a162c839a5cb62295095cc02207597a1e105317b9e8609df562435c7b6f4f9b226c2180a7038c29da7a93628609f272a7ded1192b8c5d6a021ef9cdaae1bf7140a7c9ed26eccfdba1f68b31f7d37271a7608393c51ffd76cfe71a5a317ca453cf32892d1ef3ed1badc920d1e5df08ea8c555b93c97365debed4a3dee899d4c4d05e6895d2e274d76a16b0b85e563a99873f116ae5472304bb43470d7f8fe5118c98cdbfba687bb1c7c9fd3fc860f226750d46fdf5dc90e2b85b1e67addf8fdb3b7e992da1d8a40b65982a329a2e2981e1d39f65f84cb38073beabaefc8ec1606ead9172767cd427991053d5bc2fd2a3f6fb929e31f8f04c98c945cb9d3e2f89323530c6ab88ebf7879a74e2f8275d4e4b15d78f786359769dadfd9e186cc2df810ba22bf90151029665e9df55620ca88a0e96c482b06995db06ef1b8f642b1a33b1544729c708bec54bf3154865f4e78c4201cab3684b4a1c2d3f4fb5fb888d9e7fdd9143332cc56a63177b4d7f4c8cea33066a1586a28a2256fc278aeae629720a3dc948b18c177051618206a4a8d0cadbcf6ba86b4359dbc95cecf39fd8a9229e6b68a59a397ca5ef7f6ca0030722dd8c9d84439654f25edea1e28dbdc3558646057f56574c39a8265c9b087788b76dab584ae68d910fb627273854867ae47dc45cb6038dcc87b6e4a175209226c9963a2e576bd41d03cb992595f805a0ff6b74cc6a26fffa4cd59d60d1abbcca3188469710fd5a69af12d024c856e8818585a5308f4dde735d9891a01c28ea86ec358f58622fd05989af8bd6fb8054f8aa2596445f23394ffe0c7e217bca68ae0d4e6efabac547f448d25a38e3c33c46fffeb9c69b26698ae15479ee61570e76a69df1969779a4d02227aec093eb9c1a6ff90bb3ae6da1b07c05b6b882307d5d8d0744246856a61b8e366a1f0b63c515e97794c8f5577747e54f67fa54c065118009a6323188a3100863c049b0e84557d75466babb7830b101bc7eb086c296a850aae2d9cef3bb350b0e4c054435dd3b5816d6412a2c5b65fb2666df858f8f2001248e2e41fd269287cafef1200406a4b26263f9e8c0e785e4ccc9d8edf5ea2c150cb171c147b7e2b2a7f3050eb03a9706b0227339e9a266cf483c03bff77f696358250a29db005ee71b43409dabe94bf499c602cfdf03f7f3990360922a52f7eea5b83475581486e8c85249bfbaf9f1e0437f35a542b13e7ce2473d310a208b9214d5483efe80e0288f521706ce19eef8b2401d8f98cba66787108d15f5f745a57d8fcf355ed7378b82f5d247e75c97903f5c8c4e2f5e65e0da297f687158ada22b795e7b5ea3c264128eb7af4f49f3afffe7377564b4687b6c7b3c972f35d1410a5bd1cf421bbbd458b8a53a71a8c01a5ae8ab22807fd3a65d6fce0be8ddad0534e641e99670b441c58253d2256738429f8ff7d3dc36a33777496a92230c28813fffe83c7e15dae4c36eac66abb940b35b1230c81993f08bd9038e0d8539f205b2086c5ac67ab21cf66f7557467164e728b5db0db6a78714cbbcb9612fd1b3e12ec81e6da3fc07c38cbf985998cb51636371235b7553605b852923f47b852b7927db8f3300ab61504c071093198ca610374564951c72dd78ba2f6f3ff0540623870aa24d5ff15456f25d0c0e69eea26a3bc1eff36faed64309a4719caf9669e6ff3916529524a6373b120c43a4b857ab5bf21584e4e98516dd00f00ebec6f090a1957eb11a35d6902a2c0e27334aa4cb4cbd093f71f297c08b103bd6b8ce36c75f7f5002c99b0e09107c7a32d1fec72499fcdc9961dd5503a8bfd7143837e842e9d2c07f77ed3f06f7c1f953d77ae37de7f9ba616d3017966373f46efc5309eb9535e123844f9efed8df48c3eac19109dbf33399b62c76d883d5f505e76673887557f7d834482f5212bdddbe67d384164527b0df5429e1d48c65ad8d44c4e05e14d5336a135806084e8a37d42f128cdb9c9b1478d5667aa98d4fc7071383effe36426f40967b59f9bbfbcd1b293c489fea8ada815157e4ee5953f0376161dc472370374707f5969e9653632b96a177ad6535df5903d3a0897e784317642f4a6c81a4301405c5111468f506be28acbea2d0bf25167cc19c5ea0b842041f79ef215a1cf36816a87e1ab65d5822324f5f7524eccd80602e7ce8328fe4ec8a7ea0f29df8783b3c234268915f6f265d2be6e72920472534df68ac8234582988a9bcedd8b8c9fc7c29056f4e09ae6516bc6e64d3415861a257f5fb6ea6eb31a197c7c5f01ddcc9096a6d3b5bd7a81a6d1fa913186d2bd30fd880a69b7d4f00ca9054c3162e642ff42f0da44238cb584684783c70459d4dfd03e4e00cdd98bd0e22183ee409f6dbf38783711802a70d78776a18b4115025e81e8f25b5755dfcecdd1d776709f77d7e581a71adf2ac8802b2c440b946cbad9b68511cc7ba47deb0c11b9e89f468df056424ec908f0b5da30a4082b2e53a4d86e23dcb44d834f7122ecf46ad730c8508d1188ebcadc7acf2c1e42ae249106216edec87bf27fa08b89c355eaf3b3e62a40766b7fa3fd289a4e229fce4b37d5d24c13a2069826e2ded4dbc887da8d1625a0b6f93d9905b8c732d74"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002900)={0x44, 0x0, &(0x7f0000001800)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x45, 0x0, &(0x7f0000001900)="00078560a4658fbae4ff58be4d1826f5c864de233ec06adf05f80087b397357efeac0ffb6bf4ca5ab4cd6447af857f5411098b980e89d2e98eedb84edec9634078f11be24c"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) (async) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{&(0x7f0000001040)={0xa, 0x4e23, 0xfffffffe, @mcast1, 0x2}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000051c0)="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", 0x5a8}], 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="3800000000000000290000000400000008030000000000000502000b040180c20400000002c910000000000000000000000000000000010014000000000000002900000034"], 0x50}}], 0x1, 0x4000840) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000001680)=0x2) (async) dup3(r2, r0, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x5e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000003b40)={0x58, 0x0, &(0x7f0000002a80)=[@enter_looper, @acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001740)={0x30, 0x30, 0x30}}, 0x40}], 0xd04, 0x0, &(0x7f0000002b40)="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"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002900)={0x44, 0x0, &(0x7f0000001800)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x45, 0x0, &(0x7f0000001900)="00078560a4658fbae4ff58be4d1826f5c864de233ec06adf05f80087b397357efeac0ffb6bf4ca5ab4cd6447af857f5411098b980e89d2e98eedb84edec9634078f11be24c"}) (async) 475.942609ms ago: executing program 2 (id=4330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x24000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x134, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000d2}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r3, 0xbd7fa7c372db556e, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x58b1f76d79cf46c8}, 0x200000c4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'caif0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x0, 0x1, 0x6, 0x6, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x5, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0xc, 0x3d, 0x0, 0x2, [0x4, 0x2f771d82]}, @generic={0x94, 0xe, "6afe410efa101adcaebf0715"}, @rr={0x7, 0xf, 0x1f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @lsrr={0x83, 0x1b, 0x8a, [@loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x42}, @private=0xa010101, @empty, @empty]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa0, r4, 0x8, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) fcntl$getownex(r0, 0x10, &(0x7f0000000940)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_netfilter(r1, &(0x7f0000002b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002b40)={&(0x7f00000029c0)={0x164, 0xe, 0x7, 0x201, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x8}, [@typed={0x14, 0xbd, 0x0, 0x0, @ipv6=@private1}, @typed={0x16, 0x2f, 0x0, 0x0, @binary="9862feb6b40e04ecf984829cbc42cadef04e"}, @nested={0x28, 0x7d, 0x0, 0x1, [@typed={0x4, 0xe3}, @typed={0x8, 0x98, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x150, 0x0, 0x0, @fd=r1}, @typed={0x4, 0x1c}, @nested={0x4, 0x126}, @typed={0x8, 0x109, 0x0, 0x0, @pid=r8}]}, @generic="b03c72d95f1d4fcda099147ca48603d10f6e7d40a0915fa7a6bd6b4be68664e5fe16bfe4a92b0542dbb916cf66884ff4e1", @typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xa1, 0x3c, 0x0, 0x1, [@typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @generic="d5b2e7efee2849bfb4a0d5a24c69fa9a7b86e0eb812ef64387295cc02ab84366b432973f2ad64e53b5e9853e633d44e1bd7622ef641949a2dbea8f54749723c31325c00d08f5b019209efb31411292bcdf8d7a8587503d322d1ca2110c2c4b72cdfd8bb3132d8efc35ccf4a5da504e5ad091dfbf2ed77e9d59d0f6ab37e37051c3", @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x4a9f}, @nested={0x4, 0x74}]}, @nested={0x1c, 0x12b, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x1f}, @nested={0x4, 0x127}, @typed={0x8, 0x1f, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x82}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x4) io_setup(0x9, &(0x7f0000002bc0)=0x0) io_submit(r10, 0x1, &(0x7f0000002c80)=[&(0x7f0000002c40)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000002c00)="5d0610de92fd7984019a33402b89ee9ca787a39303ac1108ad", 0x19, 0x2, 0x0, 0x1}]) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r2) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x60, r11, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8008}, 0x4c801) r12 = syz_open_dev$usbfs(&(0x7f0000002e40), 0x1, 0x40) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x20, r11, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x2f}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x48801}, 0x20000000) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000002fc0), r2) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x5c, r13, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x263}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x80) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000003140)={0x7, &(0x7f0000003100)=[{0x400, 0x7, 0x4}, {0x7fff, 0x7, 0x7, 0x3ff}, {0x2, 0x40, 0x0, 0x1}, {0x7, 0x6, 0xa, 0x2}, {0x1c, 0x4, 0x5d, 0x3ff}, {0xa, 0x2, 0x53, 0x2}, {0x6, 0x3, 0xbb, 0x963}]}) r14 = openat$null(0xffffffffffffff9c, &(0x7f0000003180), 0x0, 0x0) sendto$inet6(r14, &(0x7f00000031c0)="ada945905c610b32488c8465b0ce9f5489c05f729bc14e8bdb406c6d38e49643a7ddcdde7f6964cf42e56f642fee11d8e50e3df58ae675557e518abfa1dc45c4f6161d4f7e75b751af94ddbcdfce78a3f12941745bc1bf10c27154d5b7d22043b867e1fbc743ae32ce6b05ed840ddfae78d591bd978c200a85d91bc0d022fc77b33c728c4d8cc430b78e887b5ddb1b966bdb4457b070d0dcaa7777f7046dcf01444377023a80c94e5b4b5cb719a62737af67c83d7eb798e0e67473f160ac41d3b656e45dbf9dabcc18210c88d831b57aa27944e920157e0d976fc48364", 0xdd, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r14, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x3c, r11, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(r0, &(0x7f00000062c0)=[{{&(0x7f00000033c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005600)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/52, 0x34}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/76, 0x4c}, {&(0x7f0000005500)=""/253, 0xfd}], 0x5, &(0x7f0000005680)=""/39, 0x27}, 0xff}, {{&(0x7f00000056c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005740)=""/36, 0x24}], 0x1, &(0x7f00000057c0)=""/237, 0xed}, 0xffffffff}, {{&(0x7f00000058c0)=@qipcrtr, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005940)=""/175, 0xaf}, {&(0x7f0000005a00)=""/215, 0xd7}], 0x2, &(0x7f0000005b40)}, 0x9}, {{&(0x7f0000005b80)=@in, 0x80, &(0x7f0000006140)=[{&(0x7f0000005c00)=""/86, 0x56}, {&(0x7f0000005c80)=""/252, 0xfc}, {&(0x7f0000005d80)=""/122, 0x7a}, {&(0x7f0000005e00)=""/159, 0x9f}, {&(0x7f0000005ec0)=""/129, 0x81}, {&(0x7f0000005f80)}, {&(0x7f0000005fc0)=""/22, 0x16}, {&(0x7f0000006000)=""/17, 0x11}, {&(0x7f0000006040)=""/250, 0xfa}], 0x9, &(0x7f0000006200)=""/158, 0x9e}, 0x1}], 0x4, 0x10020, &(0x7f00000063c0)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000006400)={{r2}, 0x81, 0x4, 0x5}) 461.14117ms ago: executing program 2 (id=4331): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r2, r1, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$can_bcm(r3, 0x0, 0x2004808c) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x100000000000001a) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) 448.251251ms ago: executing program 2 (id=4332): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_devices(r2, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000002c0)={0x200000, 0x200000, 0x800000, 0x9, 0xffffffff}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = open$dir(&(0x7f0000000100)='./cgroup\x00', 0x1, 0x80) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000020000000000000000120020001000050b10904000201030000000921010100012203000905810344000302fb89d35d40fc"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x6, {0x6, 0x11, "2c54a5ef"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = open$dir(&(0x7f00000001c0)='./cgroup\x00', 0x200, 0x100) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, &(0x7f0000000700)=0x4, 0x4) renameat(r5, &(0x7f0000000180)='./cgroup\x00', r7, &(0x7f0000000200)='./cgroup\x00') sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x10000, &(0x7f0000000140)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="0895960000000000"], 0x24}}, 0x0) 0s ago: executing program 3 (id=4333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=18432,\x00'/33]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x1, 0x17, {0x1d, 0x3, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x4004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x40) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) recvfrom$inet_nvme(r6, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x7005, 0x0) readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1a, 0x7fff, @l2={'eth', 0x3a, 'nicvf0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8840}, 0x40) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r7, 0x402c542d, &(0x7f0000000100)={0x4, 0xe7, 0x6, 0xfffffffe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x82c1) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000980)="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", 0x1000, 0x0, &(0x7f00000003c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'macsec0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x9, 0xfff}, {0xd8, 0xc}]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r8, 0xc02054a5, &(0x7f00000001c0)={0x10, r0, 'id1\x00'}) kernel console output (not intermixed with test programs): rce: ENOENT } my_pid:207 [ 461.141182][ T6752] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 461.150488][ T983] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 461.273099][ T6758] /dev/rnullb0: Can't lookup blockdev [ 461.320866][ T983] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 461.329116][ T983] usb 4-1: config 0 has no interface number 0 [ 461.336743][ T983] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 461.345853][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.353884][ T983] usb 4-1: Product: syz [ 461.358122][ T983] usb 4-1: Manufacturer: syz [ 461.362773][ T983] usb 4-1: SerialNumber: syz [ 461.368317][ T983] usb 4-1: config 0 descriptor?? [ 461.446570][ T36] audit: type=1326 audit(2000000065.328:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6763 comm="syz.5.2102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x0 [ 461.767410][ T405] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 461.959213][ T405] usb 6-1: Invalid ep0 maxpacket: 64 [ 462.073244][ T983] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 462.083648][ T983] asix 4-1:0.251: probe with driver asix failed with error -524 [ 462.097744][ T405] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 462.257581][ T405] usb 6-1: Invalid ep0 maxpacket: 64 [ 462.263013][ T405] usb usb6-port1: attempt power cycle [ 462.630653][ T405] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 462.652272][ T405] usb 6-1: Invalid ep0 maxpacket: 64 [ 462.790477][ T405] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 462.812128][ T405] usb 6-1: Invalid ep0 maxpacket: 64 [ 462.817558][ T405] usb usb6-port1: unable to enumerate USB device [ 463.137104][ T6789] 9pnet_fd: Insufficient options for proto=fd [ 463.834210][ T36] audit: type=1400 audit(2000000067.571:656): avc: denied { bind } for pid=6825 comm="syz.0.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.087664][ T331] usb 4-1: USB disconnect, device number 9 [ 464.104430][ T6831] binder: Unknown parameter '.I+}~stats' [ 464.463673][ T331] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 464.623523][ T331] usb 4-1: Using ep0 maxpacket: 8 [ 464.630601][ T331] usb 4-1: config 64 has an invalid interface number: 174 but max is 2 [ 464.639270][ T331] usb 4-1: config 64 has an invalid interface number: 252 but max is 2 [ 464.647940][ T331] usb 4-1: config 64 has an invalid interface descriptor of length 2, skipping [ 464.660366][ T331] usb 4-1: config 64 has an invalid interface number: 140 but max is 2 [ 464.677550][ T331] usb 4-1: config 64 has no interface number 0 [ 464.683885][ T331] usb 4-1: config 64 has no interface number 1 [ 464.690520][ T331] usb 4-1: config 64 has no interface number 2 [ 464.697281][ T331] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 464.709138][ T331] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 464.720672][ T331] usb 4-1: config 64 interface 252 altsetting 252 bulk endpoint 0x6 has invalid maxpacket 8 [ 464.737217][ T331] usb 4-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 464.749230][ T331] usb 4-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 464.760524][ T331] usb 4-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 464.774115][ T331] usb 4-1: config 64 interface 174 has no altsetting 0 [ 464.782906][ T331] usb 4-1: config 64 interface 252 has no altsetting 0 [ 464.790443][ T331] usb 4-1: config 64 interface 140 has no altsetting 0 [ 464.802577][ T331] usb 4-1: string descriptor 0 read error: -22 [ 464.809049][ T331] usb 4-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 464.824064][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.848379][ T331] usb-storage 4-1:64.174: USB Mass Storage device detected [ 464.914797][ T331] usb-storage 4-1:64.252: USB Mass Storage device detected [ 464.999929][ T331] usb-storage 4-1:64.140: USB Mass Storage device detected [ 465.017187][ T6868] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6868 comm=syz.0.2133 [ 465.031129][ T36] audit: type=1400 audit(2000000068.697:657): avc: denied { create } for pid=6867 comm="syz.0.2133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 465.063128][ T331] usb 4-1: USB disconnect, device number 10 [ 465.070258][ T6870] overlayfs: failed to clone upperpath [ 465.113785][ T405] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 465.276766][ T405] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 465.285681][ T405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 465.290258][ T6873] 9pnet_fd: Insufficient options for proto=fd [ 465.293270][ T405] usb 6-1: can't read configurations, error -61 [ 465.444155][ T405] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 465.604372][ T405] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 465.613203][ T405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 465.625417][ T405] usb 6-1: can't read configurations, error -61 [ 465.635015][ T405] usb usb6-port1: attempt power cycle [ 465.977042][ T331] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 466.008996][ T405] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 466.030998][ T405] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 466.039709][ T405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 466.047347][ T405] usb 6-1: can't read configurations, error -61 [ 466.136849][ T331] usb 4-1: Using ep0 maxpacket: 32 [ 466.143103][ T331] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.151479][ T331] usb 4-1: config 0 has no interface number 0 [ 466.157583][ T331] usb 4-1: config 0 interface 184 has no altsetting 0 [ 466.165813][ T331] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.174940][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.182955][ T331] usb 4-1: Product: syz [ 466.187138][ T331] usb 4-1: Manufacturer: syz [ 466.191895][ T405] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 466.199506][ T331] usb 4-1: SerialNumber: syz [ 466.204984][ T331] usb 4-1: config 0 descriptor?? [ 466.210993][ T331] smsc75xx v1.0.0 [ 466.222927][ T405] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 466.231762][ T405] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 466.239437][ T405] usb 6-1: can't read configurations, error -61 [ 466.246740][ T405] usb usb6-port1: unable to enumerate USB device [ 466.371303][ T36] audit: type=1326 audit(2000000069.945:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.394746][ T36] audit: type=1326 audit(2000000069.945:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.418464][ T36] audit: type=1326 audit(2000000069.945:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.442752][ T36] audit: type=1326 audit(2000000069.945:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.466526][ T36] audit: type=1326 audit(2000000069.945:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.490248][ T36] audit: type=1326 audit(2000000069.945:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.513763][ T36] audit: type=1326 audit(2000000069.954:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.537816][ T36] audit: type=1326 audit(2000000069.954:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6900 comm="syz.2.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc552d8eec9 code=0x7fc00000 [ 466.721748][ T6924] rust_binder: Error while translating object. [ 466.721817][ T6924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 466.728145][ T6924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:68 [ 466.769756][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.786035][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.793141][ T6923] bridge_slave_0: entered allmulticast mode [ 466.799682][ T6923] bridge_slave_0: entered promiscuous mode [ 466.806178][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.813252][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.820412][ T6923] bridge_slave_1: entered allmulticast mode [ 466.827162][ T6923] bridge_slave_1: entered promiscuous mode [ 466.886328][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.893409][ T6923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.900737][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.907805][ T6923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.931643][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.939050][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.948579][ T2163] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.955649][ T2163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.965418][ T2162] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.972510][ T2162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.001168][ T6923] veth0_vlan: entered promiscuous mode [ 467.014063][ T6923] veth1_macvtap: entered promiscuous mode [ 468.093828][ T6955] overlayfs: failed to clone upperpath [ 468.254294][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.261658][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.269006][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.276239][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.284441][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.291872][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.299628][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.307352][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.314625][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.321914][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.329104][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.336342][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.344005][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.351210][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.358577][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.365872][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.373135][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.380397][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.387655][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.394874][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.402113][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.409422][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.416630][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.423873][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.431143][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.438373][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.445609][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.452837][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.460050][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.467329][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.474583][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.481869][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.489070][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.496317][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.503589][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.510792][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.518025][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.525230][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.532454][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.539744][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.547094][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.554524][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.561876][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.569253][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.576500][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.583730][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.590990][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.598216][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.605495][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.612753][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.620978][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.628189][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.635465][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.642776][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.649989][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.657394][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.664657][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.671895][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.679557][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.686773][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.694011][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.701256][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.708644][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.715859][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.723164][ T6961] 9pnet_virtio: no channels available for device /dev/sr0 [ 468.753951][ T6966] 9pnet_virtio: no channels available for device ./file0 [ 468.939975][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 468.951035][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 468.960714][ T331] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 468.971341][ T331] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 468.981230][ T331] usb 4-1: USB disconnect, device number 11 [ 469.042899][ T6990] futex_wake_op: syz.3.2172 tries to shift op by 32; fix this program [ 469.072684][ T6995] __nla_validate_parse: 3 callbacks suppressed [ 469.072699][ T6995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2173'. [ 469.225941][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.225969][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.232595][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.239127][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.239255][ T7021] rust_binder: Failed copying remainder into alloc: EFAULT [ 469.245618][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.252345][ T7021] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 469.259458][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.266010][ T7021] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 469.274120][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.280746][ T7021] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:83 [ 469.289979][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.305463][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.311948][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.318619][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.325157][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.331670][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.338202][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.344771][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.351212][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.357704][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.364159][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.370690][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.377173][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.383827][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.390342][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.396936][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.403429][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.409959][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.416409][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.422921][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.429373][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.435929][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.442440][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.448919][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.455404][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.461854][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.468349][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.474895][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.481417][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.487940][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.494446][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.501002][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.507482][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.513923][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.520411][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.527040][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.533484][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.540161][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.546880][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.553576][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.560150][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.566753][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.573303][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.579846][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.586382][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.593123][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.599796][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.606345][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.612848][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.619380][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.625898][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.632389][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.638883][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.645377][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.651844][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.658316][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.664805][ T7020] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 469.685013][ T7036] rust_binder: inc_ref_done called when no active inc_refs [ 469.984259][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 470.155951][ T9] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 470.164017][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.174305][ T9] usb 4-1: config 0 has no interface number 0 [ 470.180555][ T9] usb 4-1: config 0 interface 4 has no altsetting 0 [ 470.187218][ T9] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 470.196278][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.207743][ T9] usb 4-1: config 0 descriptor?? [ 470.214188][ T9] usb 4-1: selecting invalid altsetting 0 [ 470.427231][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.435888][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.448256][ T331] usb 4-1: USB disconnect, device number 12 [ 470.486226][ T7063] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 470.504634][ T36] kauditd_printk_skb: 62 callbacks suppressed [ 470.504655][ T36] audit: type=1400 audit(2000000073.829:728): avc: denied { read write } for pid=7068 comm="syz.3.2201" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.543748][ T36] audit: type=1400 audit(2000000073.829:729): avc: denied { open } for pid=7068 comm="syz.3.2201" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.567342][ T36] audit: type=1400 audit(2000000073.829:730): avc: denied { ioctl } for pid=7068 comm="syz.3.2201" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 470.661919][ T7082] netlink: 'syz.5.2205': attribute type 11 has an invalid length. [ 470.676930][ T340] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 470.838761][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 470.847429][ T331] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 470.850049][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 470.870470][ T340] usb 3-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00 [ 470.879678][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.893309][ T340] usb 3-1: config 0 descriptor?? [ 470.898649][ T7055] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 470.906757][ T340] usbhid 3-1:0.0: can't add hid device: -22 [ 470.912809][ T340] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 471.031079][ T331] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 471.040216][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.048297][ T331] usb 4-1: Product: syz [ 471.052495][ T331] usb 4-1: Manufacturer: syz [ 471.057113][ T331] usb 4-1: SerialNumber: syz [ 471.064338][ T331] r8152-cfgselector 4-1: Unknown version 0x0000 [ 471.070723][ T331] r8152-cfgselector 4-1: config 0 descriptor?? [ 471.119816][ T36] audit: type=1400 audit(2000000074.411:731): avc: denied { read } for pid=7054 comm="syz.2.2197" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 471.120975][ T340] usb 3-1: USB disconnect, device number 5 [ 471.143134][ T36] audit: type=1400 audit(2000000074.411:732): avc: denied { open } for pid=7054 comm="syz.2.2197" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 471.173356][ T36] audit: type=1400 audit(2000000074.411:733): avc: denied { ioctl } for pid=7054 comm="syz.2.2197" path="/dev/usbmon6" dev="devtmpfs" ino=109 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 471.277015][ T7091] netlink: 'syz.5.2208': attribute type 1 has an invalid length. [ 471.284914][ T7091] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2208'. [ 471.398828][ T36] audit: type=1107 audit(2000000074.664:734): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 471.401438][ T7098] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 471.412330][ T7098] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 471.439391][ T7100] fuse: Bad value for 'fd' [ 471.454670][ T36] audit: type=1400 audit(2000000074.721:735): avc: denied { watch } for pid=7099 comm="syz.2.2211" path="/5/file0" dev="tmpfs" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 471.496168][ T7106] SELinux: security_context_str_to_sid () failed with errno=-22 [ 471.554873][ T331] r8152-cfgselector 4-1: Unknown version 0x0000 [ 471.562305][ T331] r8152-cfgselector 4-1: bad CDC descriptors [ 471.570788][ T331] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 471.891828][ T340] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 472.051737][ T340] usb 3-1: Using ep0 maxpacket: 16 [ 472.057885][ T340] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 472.066595][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.077866][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.093677][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.104974][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.125847][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.138560][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.139369][ T7122] 9pnet_fd: Insufficient options for proto=fd [ 472.152456][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.169071][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.181838][ T7125] /dev/nbd3: Can't lookup blockdev [ 472.182883][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.198215][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.198316][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'. [ 472.211891][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.231389][ T36] audit: type=1400 audit(2000000075.434:736): avc: denied { map } for pid=7124 comm="syz.3.2221" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 472.252327][ T7123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2220'. [ 472.254306][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.276843][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.289440][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.303180][ T340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 472.319738][ T340] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.332623][ T340] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 472.342362][ T340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.351451][ T340] usb 3-1: config 0 descriptor?? [ 472.364673][ T7147] /dev/rnullb0: Can't lookup blockdev [ 472.393507][ T36] audit: type=1400 audit(2000000075.603:737): avc: denied { write } for pid=7151 comm="syz.3.2229" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 472.419200][ T7150] raw_sendmsg: syz.5.2228 forgot to set AF_INET. Fix it! [ 472.440825][ T7156] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 472.798581][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.808262][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.818649][ T7109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.827735][ T7109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.843972][ T340] usbhid 3-1:0.0: can't add hid device: -71 [ 472.851012][ T340] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 472.863044][ T340] usb 3-1: USB disconnect, device number 6 [ 473.153220][ T7214] rust_binder: Error while translating object. [ 473.153253][ T7214] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 473.159533][ T7214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:136 [ 473.273061][ T7234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.286900][ T7233] rust_binder: Error while translating object. [ 473.293516][ T7233] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 473.299963][ T7233] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:155 [ 473.300522][ T7235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=7235 comm=syz.5.2242 [ 473.671591][ T983] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 473.842150][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 473.848704][ T983] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.857130][ T983] usb 3-1: config 128 has an invalid interface number: 84 but max is 0 [ 473.865446][ T983] usb 3-1: config 128 has no interface number 0 [ 473.871890][ T983] usb 3-1: config 128 interface 84 has no altsetting 0 [ 473.880290][ T983] usb 3-1: New USB device found, idVendor=eb49, idProduct=2929, bcdDevice=ac.d9 [ 473.889412][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.897439][ T983] usb 3-1: Product: syz [ 473.901619][ T983] usb 3-1: Manufacturer: syz [ 473.906318][ T983] usb 3-1: SerialNumber: syz [ 474.082879][ T7280] /dev/nbd3: Can't lookup blockdev [ 474.128271][ T7255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:24 [ 474.130485][ T983] usb 3-1: bad CDC descriptors [ 474.147877][ T983] usb 3-1: USB disconnect, device number 7 [ 474.357026][ T7291] rust_binder: Write failure EFAULT in pid:204 [ 474.717835][ T7301] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 474.736647][ T7301] rust_binder: Write failure EFAULT in pid:26 [ 474.801267][ T983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 474.902520][ T7308] tipc: Started in network mode [ 474.907468][ T7308] tipc: Node identity 4, cluster identity 4711 [ 474.913699][ T7308] tipc: Node number set to 4 [ 474.934008][ T7324] netlink: 'syz.2.2280': attribute type 2 has an invalid length. [ 474.949347][ T7326] sit0: entered promiscuous mode [ 474.960450][ T7326] netlink: 'syz.0.2281': attribute type 1 has an invalid length. [ 474.971789][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 474.981791][ T7326] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2281'. [ 474.990987][ T983] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 475.010182][ T983] usb 4-1: config 179 has no interface number 0 [ 475.019992][ T983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 475.035777][ T7329] 9pnet_fd: Insufficient options for proto=fd [ 475.043129][ T983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 475.058926][ T983] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 475.072248][ T983] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 475.086248][ T983] usb 4-1: config 179 interface 65 has no altsetting 0 [ 475.093256][ T983] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 475.102410][ T983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.119390][ T7334] netlink: 'syz.0.2284': attribute type 13 has an invalid length. [ 475.156254][ T7341] 9pnet_fd: Insufficient options for proto=fd [ 475.194667][ T7349] rust_binder: Write failure EINVAL in pid:43 [ 475.194793][ T7349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 475.196066][ T7350] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2290'. [ 475.339205][ T45] usb 4-1: USB disconnect, device number 14 [ 475.355769][ T7358] 9pnet_fd: Insufficient options for proto=fd [ 475.472723][ T378] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 475.518474][ T7362] rust_binder: Write failure EFAULT in pid:220 [ 475.621960][ T378] usb 3-1: device descriptor read/64, error -71 [ 475.633145][ T7366] rust_binder: Write failure EFAULT in pid:224 [ 475.731310][ T7370] bpf: Bad value for 'uid' [ 475.742229][ T7370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 475.753785][ T7372] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 4099) [ 475.762987][ T7372] rust_binder: Error while translating object. [ 475.773963][ T7372] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 475.780174][ T7372] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:230 [ 475.815180][ T7378] tmpfs: Unknown parameter '0x0000000000000000' [ 475.898978][ T378] usb 3-1: device descriptor read/64, error -71 [ 475.991429][ T36] kauditd_printk_skb: 24 callbacks suppressed [ 475.991460][ T36] audit: type=1400 audit(2000000078.981:762): avc: denied { setopt } for pid=7393 comm="syz.3.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 476.154746][ T378] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 476.242806][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2307'. [ 476.250692][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 476.293407][ T378] usb 3-1: device descriptor read/64, error -71 [ 476.389217][ T9] usb 4-1: device descriptor read/64, error -71 [ 476.549284][ T378] usb 3-1: device descriptor read/64, error -71 [ 476.644983][ T9] usb 4-1: device descriptor read/64, error -71 [ 476.666377][ T378] usb usb3-port1: attempt power cycle [ 476.704102][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2312'. [ 476.713143][ T7410] erspan0: entered promiscuous mode [ 476.731559][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 476.769632][ T7421] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2316'. [ 476.900755][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 477.039341][ T9] usb 4-1: device descriptor read/64, error -71 [ 477.039351][ T378] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 477.062212][ T378] usb 3-1: device descriptor read/8, error -71 [ 477.200392][ T378] usb 3-1: device descriptor read/8, error -71 [ 477.305767][ T9] usb 4-1: device descriptor read/64, error -71 [ 477.423071][ T9] usb usb4-port1: attempt power cycle [ 477.455028][ T378] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 477.477785][ T378] usb 3-1: device descriptor read/8, error -71 [ 477.571542][ T7466] overlayfs: failed to clone upperpath [ 477.615818][ T378] usb 3-1: device descriptor read/8, error -71 [ 477.689852][ T7482] netlink: 'syz.0.2338': attribute type 28 has an invalid length. [ 477.734596][ T378] usb usb3-port1: unable to enumerate USB device [ 477.777956][ T36] audit: type=1326 audit(2000000080.660:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7492 comm="syz.0.2341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91b58eec9 code=0x0 [ 477.801129][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 477.829088][ T9] usb 4-1: device descriptor read/8, error -71 [ 477.967583][ T9] usb 4-1: device descriptor read/8, error -71 [ 478.222300][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 478.244732][ T9] usb 4-1: device descriptor read/8, error -71 [ 478.383265][ T9] usb 4-1: device descriptor read/8, error -71 [ 478.500533][ T9] usb usb4-port1: unable to enumerate USB device [ 478.623997][ T36] audit: type=1400 audit(2000000081.449:764): avc: denied { create } for pid=7526 comm="syz.2.2347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=nfc_socket permissive=1 [ 478.666354][ T36] audit: type=1400 audit(2000000081.467:765): avc: denied { create } for pid=7526 comm="syz.2.2347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_audit_socket permissive=1 [ 478.785473][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.785505][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.792519][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.798553][ T7554] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 478.896504][ T7565] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 478.985324][ T7570] rust_binder: Write failure EINVAL in pid:67 [ 479.206471][ T7573] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 479.220435][ T7573] netlink: 'syz.3.2361': attribute type 2 has an invalid length. [ 479.273223][ T7577] rust_binder: Write failure EFAULT in pid:252 [ 479.293856][ T36] audit: type=1400 audit(2000000082.077:766): avc: denied { mounton } for pid=7581 comm="syz.3.2365" path="/proc/255/cgroup" dev="nsfs" ino=4026532708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 479.293919][ T7582] overlay: Unknown parameter 'fsname' [ 479.334232][ T7582] rust_binder: validate_parent_fixup: new_min_offset=18446744072635809807, sg_entry.length=0 [ 479.334261][ T7582] rust_binder: Error while translating object. [ 479.344515][ T7582] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 479.350706][ T7582] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 479.360746][ T7582] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 479.640837][ T36] audit: type=1326 audit(2000000082.406:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b58eec9 code=0x7ffc0000 [ 479.671045][ T36] audit: type=1326 audit(2000000082.406:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b58eec9 code=0x7ffc0000 [ 479.694900][ T36] audit: type=1326 audit(2000000082.424:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91b58eec9 code=0x7ffc0000 [ 479.718818][ T36] audit: type=1326 audit(2000000082.424:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b58eec9 code=0x7ffc0000 [ 479.742506][ T36] audit: type=1326 audit(2000000082.424:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7591 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b58eec9 code=0x7ffc0000 [ 480.034725][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.041899][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.049292][ T7605] bridge_slave_0: entered allmulticast mode [ 480.055881][ T7605] bridge_slave_0: entered promiscuous mode [ 480.062717][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.070030][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.077262][ T7605] bridge_slave_1: entered allmulticast mode [ 480.083672][ T7605] bridge_slave_1: entered promiscuous mode [ 480.201019][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.208237][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.215639][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.222731][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.261229][ T2161] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.275043][ T2161] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.292157][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.299525][ T2161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.307949][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.315041][ T2161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.351698][ T7605] veth0_vlan: entered promiscuous mode [ 480.381288][ T7605] veth1_macvtap: entered promiscuous mode [ 480.517798][ T7664] rust_binder: Error while translating object. [ 480.517849][ T7664] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 480.524090][ T7664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 480.653062][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 480.695146][ T7676] Invalid ELF header magic: != ELF [ 480.769411][ T558] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 480.772929][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2396'. [ 480.873429][ T7689] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 480.939911][ T558] usb 3-1: Using ep0 maxpacket: 32 [ 480.946738][ T558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 480.958324][ T558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 480.968797][ T558] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 480.980583][ T558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 480.991956][ T558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 481.003488][ T558] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 481.012813][ T558] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.024504][ T558] usb 3-1: Product: syz [ 481.028851][ T558] usb 3-1: Manufacturer: syz [ 481.033473][ T558] usb 3-1: SerialNumber: syz [ 481.042256][ T558] usb 3-1: config 0 descriptor?? [ 481.043193][ T7708] netlink: 'syz.3.2407': attribute type 14 has an invalid length. [ 481.056193][ T7708] netlink: 'syz.3.2407': attribute type 14 has an invalid length. [ 481.064920][ T558] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 481.272260][ T9] usb 3-1: USB disconnect, device number 12 [ 481.384219][ T7716] overlayfs: conflicting lowerdir path [ 481.463716][ T7726] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 481.463742][ T7726] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:16 [ 481.778926][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 481.778947][ T36] audit: type=1326 audit(2000000084.404:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7760 comm="syz.3.2423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b418eec9 code=0x0 [ 481.842602][ T7765] __vm_enough_memory: pid: 7765, comm: syz.2.2425, bytes: 18014402804453376 not enough memory for the allocation [ 482.265846][ T7799] 9pnet_fd: Insufficient options for proto=fd [ 482.283643][ T7801] netlink: 1363 bytes leftover after parsing attributes in process `syz.5.2437'. [ 482.341821][ T7807] tipc: Started in network mode [ 482.346865][ T7807] tipc: Node identity 4, cluster identity 4711 [ 482.353107][ T7807] tipc: Node number set to 4 [ 482.402826][ T7813] overlayfs: failed to clone upperpath [ 483.198197][ T36] audit: type=1400 audit(2000000085.737:848): avc: denied { execute } for pid=7821 comm="syz.0.2445" path="/dev/rnullb0" dev="devtmpfs" ino=529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 483.688395][ T7845] 9pnet_fd: p9_fd_create_unix (7845): problem connecting socket: ./file0: -2 [ 483.932571][ T7851] Invalid logical block size (14) [ 483.938255][ T36] audit: type=1400 audit(2000000086.440:849): avc: denied { mounton } for pid=7850 comm="syz.0.2454" path="/10/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 483.944891][ T7851] __vm_enough_memory: pid: 7851, comm: syz.0.2454, bytes: 18014402804453376 not enough memory for the allocation [ 483.960438][ T36] audit: type=1400 audit(2000000086.440:850): avc: denied { remount } for pid=7850 comm="syz.0.2454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 483.992827][ T36] audit: type=1400 audit(2000000086.487:851): avc: denied { unmount } for pid=7605 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 484.021362][ T36] audit: type=1400 audit(2000000086.515:852): avc: denied { execute } for pid=7852 comm="syz.0.2455" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 484.252266][ T7868] netlink: 'syz.2.2459': attribute type 25 has an invalid length. [ 484.381454][ T36] audit: type=1400 audit(2000000086.844:853): avc: denied { setopt } for pid=7885 comm="syz.0.2467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 484.383085][ T7886] netlink: 'syz.0.2467': attribute type 2 has an invalid length. [ 484.431830][ T36] audit: type=1400 audit(2000000086.900:854): avc: denied { lock } for pid=7890 comm="syz.0.2468" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 485.262776][ T7913] 9pnet_fd: Insufficient options for proto=fd [ 485.895611][ T7935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2485'. [ 485.998601][ T36] audit: type=1400 audit(2000000088.364:855): avc: denied { map } for pid=7957 comm="syz.3.2492" path="socket:[29934]" dev="sockfs" ino=29934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 486.115630][ T7968] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2496'. [ 486.536551][ T2162] bridge_slave_1: left allmulticast mode [ 486.542470][ T2162] bridge_slave_1: left promiscuous mode [ 486.548880][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.556934][ T2162] bridge_slave_0: left allmulticast mode [ 486.562665][ T2162] bridge_slave_0: left promiscuous mode [ 486.568532][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.628752][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2501'. [ 486.691859][ T2162] veth1_macvtap: left promiscuous mode [ 486.697727][ T2162] veth0_vlan: left promiscuous mode [ 486.721908][ T7992] overlayfs: failed to clone upperpath [ 486.763142][ T8000] 9pnet_fd: Insufficient options for proto=fd [ 486.774113][ T7999] sit0: entered promiscuous mode [ 486.780835][ T7999] netlink: 'syz.2.2509': attribute type 1 has an invalid length. [ 486.788631][ T7999] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2509'. [ 486.802135][ T8002] netlink: 'syz.3.2511': attribute type 15 has an invalid length. [ 486.812061][ T36] audit: type=1400 audit(2000000089.124:856): avc: denied { setattr } for pid=8001 comm="syz.3.2511" name="/" dev="configfs" ino=2531 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 486.862386][ T8007] incfs: Options parsing error. -22 [ 486.867743][ T8007] incfs: mount failed -22 [ 486.877832][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.885040][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.892426][ T7986] bridge_slave_0: entered allmulticast mode [ 486.898782][ T7986] bridge_slave_0: entered promiscuous mode [ 486.905488][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.912691][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.919881][ T7986] bridge_slave_1: entered allmulticast mode [ 486.926169][ T7986] bridge_slave_1: entered promiscuous mode [ 486.980511][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.987696][ T7986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.995806][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.002892][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.025584][ T2155] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.032910][ T2155] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.053868][ T2161] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.060968][ T2161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.070400][ T2161] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.077501][ T2161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.105571][ T7986] veth0_vlan: entered promiscuous mode [ 487.117414][ T7986] veth1_macvtap: entered promiscuous mode [ 487.579430][ T558] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 487.740340][ T558] usb 1-1: No LPM exit latency info found, disabling LPM. [ 487.750443][ T558] usb 1-1: config 64 has an invalid interface number: 174 but max is 2 [ 487.758733][ T558] usb 1-1: config 64 has an invalid interface number: 252 but max is 2 [ 487.770436][ T558] usb 1-1: config 64 has an invalid interface descriptor of length 2, skipping [ 487.779639][ T558] usb 1-1: config 64 has an invalid interface number: 140 but max is 2 [ 487.788579][ T8057] new mount options do not match the existing superblock, will be ignored [ 487.797393][ T558] usb 1-1: config 64 has no interface number 0 [ 487.803836][ T558] usb 1-1: config 64 has no interface number 1 [ 487.810021][ T558] usb 1-1: config 64 has no interface number 2 [ 487.816873][ T558] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x9 has invalid maxpacket 1023, setting to 8 [ 487.828218][ T558] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x4 has invalid maxpacket 512, setting to 8 [ 487.839431][ T558] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x6 is Bulk; changing to Interrupt [ 487.856260][ T558] usb 1-1: config 64 interface 252 altsetting 252 endpoint 0x1 has invalid maxpacket 1024, setting to 8 [ 487.872501][ T558] usb 1-1: config 64 interface 140 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 487.892004][ T558] usb 1-1: config 64 interface 140 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 8 [ 487.909450][ T558] usb 1-1: config 64 interface 174 has no altsetting 0 [ 487.916520][ T558] usb 1-1: config 64 interface 252 has no altsetting 0 [ 487.924800][ T558] usb 1-1: config 64 interface 140 has no altsetting 0 [ 487.943493][ T558] usb 1-1: string descriptor 0 read error: -22 [ 487.949729][ T558] usb 1-1: New USB device found, idVendor=12d1, idProduct=1402, bcdDevice= 0.00 [ 487.958995][ T558] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.969882][ T558] usb-storage 1-1:64.174: USB Mass Storage device detected [ 488.028587][ T558] usb-storage 1-1:64.252: USB Mass Storage device detected [ 488.085998][ T558] usb-storage 1-1:64.140: USB Mass Storage device detected [ 488.126184][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2533'. [ 488.135880][ T8083] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2533'. [ 488.154766][ T8087] 9pnet_fd: Insufficient options for proto=fd [ 488.161410][ T8087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2535'. [ 488.171606][ T8087] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8087 comm=syz.3.2535 [ 488.202426][ T558] usb 1-1: USB disconnect, device number 12 [ 488.234902][ T8108] binder: Bad value for 'stats' [ 488.317132][ T8115] rust_binder: 17: no such ref 0 [ 488.322157][ T8115] rust_binder: 17: no such ref 1 [ 488.381964][ T8121] __vm_enough_memory: pid: 8121, comm: syz.0.2546, bytes: 18014402804453376 not enough memory for the allocation [ 488.546234][ T8135] KVM: debugfs: duplicate directory 8135-12 [ 488.732775][ T8140] rust_binder: Write failure EFAULT in pid:28 [ 488.937032][ T8158] 9pnet_fd: Insufficient options for proto=fd [ 489.071466][ T983] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 489.074292][ T8166] mmap: syz.2.2562 (8166): VmData 20692992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 489.200507][ T8176] : renamed from bond_slave_0 [ 489.242067][ T983] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 489.250554][ T983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.271515][ T983] usb 1-1: config 1 has no interface number 0 [ 489.285407][ T8187] virtiofs: Unknown parameter 'always' [ 489.287395][ T983] usb 1-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 489.316541][ T983] usb 1-1: config 1 interface 105 has no altsetting 0 [ 489.336240][ T983] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 489.345612][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.353709][ T983] usb 1-1: Product: syz [ 489.357981][ T983] usb 1-1: Manufacturer: syz [ 489.365764][ T983] usb 1-1: SerialNumber: syz [ 489.413677][ T8205] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2574'. [ 489.453897][ T8208] netlink: 'syz.5.2575': attribute type 32 has an invalid length. [ 489.536324][ T8213] overlayfs: failed to clone upperpath [ 489.542741][ T8213] overlayfs: failed to clone upperpath [ 489.596134][ T983] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 489.812463][ T8147] x_tables: unsorted underflow at hook 3 [ 489.812520][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 489.812534][ T36] audit: type=1400 audit(2000000091.948:858): avc: denied { name_bind } for pid=8145 comm="syz.0.2555" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 489.856184][ T983] usb 1-1: USB disconnect, device number 13 [ 490.001881][ T8245] rust_binder: Write failure EINVAL in pid:44 [ 490.268976][ T36] audit: type=1400 audit(2000000092.380:859): avc: denied { connect } for pid=8259 comm="syz.2.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.464747][ T8325] 9pnet_fd: Insufficient options for proto=fd [ 491.819639][ T8342] netlink: 'syz.0.2623': attribute type 4 has an invalid length. [ 491.827565][ T8342] netlink: 992 bytes leftover after parsing attributes in process `syz.0.2623'. [ 491.976472][ T8351] rust_binder: 75: no such ref 3 [ 491.981543][ T8351] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 491.988781][ T8351] rust_binder: 75: no such ref 0 [ 491.993780][ T8351] rust_binder: Error while translating object. [ 491.993799][ T8351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 492.000011][ T8351] rust_binder: Failure BR_FAILED_REPLY { source: ENOENT } during reply - delivering BR_FAILED_REPLY to sender. [ 492.009458][ T8351] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:75 [ 492.028433][ T340] rust_binder: 8350: removing orphan mapping 0:1048 [ 492.042264][ T8357] rust_binder: 78: no such ref 1 [ 492.050271][ T8358] fuse: Bad value for 'user_id' [ 492.052152][ T8357] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 492.055191][ T8358] fuse: Bad value for 'user_id' [ 492.085737][ T36] audit: type=1400 audit(2000000094.078:860): avc: denied { append } for pid=8359 comm="syz.0.2630" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 492.287448][ T8379] netlink: 'syz.3.2637': attribute type 4 has an invalid length. [ 492.298777][ T8379] netlink: 'syz.3.2637': attribute type 4 has an invalid length. [ 492.311038][ T8383] overlayfs: failed to clone upperpath [ 492.421950][ T36] audit: type=1326 audit(2000000094.397:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8394 comm="syz.3.2644" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b418eec9 code=0x0 [ 493.259753][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 493.430935][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 493.446542][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 493.455368][ T9] usb 1-1: config 179 has no interface number 0 [ 493.458315][ T8434] 9pnet_fd: Insufficient options for proto=fd [ 493.461654][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 493.479187][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 493.492564][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 493.502730][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 493.517498][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 493.524651][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 493.533871][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.701579][ T8450] tipc: Enabled bearer , priority 24 [ 493.760632][ T9] usb 1-1: USB disconnect, device number 14 [ 493.882948][ T8462] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2669'. [ 494.015043][ T8484] netlink: 'syz.2.2678': attribute type 1 has an invalid length. [ 494.332774][ T8504] bpf: Bad value for 'uid' [ 494.349831][ T8507] __vm_enough_memory: pid: 8507, comm: syz.0.2687, bytes: 18014402804453376 not enough memory for the allocation [ 494.391047][ T36] audit: type=1400 audit(2000000096.246:862): avc: denied { write } for pid=8511 comm="syz.0.2689" name="mcfilter" dev="proc" ino=4026533233 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 494.481876][ T8518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:101 [ 495.012546][ T8559] tipc: Can't bind to reserved service type 2 [ 495.041384][ T36] audit: type=1400 audit(2000000096.856:863): avc: denied { mount } for pid=8560 comm="syz.2.2704" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 495.596439][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2712'. [ 495.849628][ T8607] 9pnet_fd: Insufficient options for proto=fd [ 496.625796][ T8662] 9pnet_fd: Insufficient options for proto=fd [ 496.635675][ T36] audit: type=1400 audit(2000000098.348:864): avc: denied { mount } for pid=8663 comm="syz.5.2740" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 496.690230][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 496.787400][ T36] audit: type=1400 audit(2000000098.488:865): avc: denied { watch watch_reads } for pid=8696 comm="syz.5.2751" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 496.809426][ T36] audit: type=1400 audit(2000000098.488:866): avc: denied { watch watch_reads } for pid=8696 comm="syz.5.2751" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 496.889460][ T36] audit: type=1326 audit(2000000098.582:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.5.2753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x0 [ 497.452934][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2775'. [ 497.554680][ T8791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2780'. [ 497.559872][ T8760] 9pnet_fd: Insufficient options for proto=fd [ 497.888834][ T36] audit: type=1326 audit(2016777544.531:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8819 comm="syz.3.2790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07b418eec9 code=0x0 [ 498.152249][ T8836] tmpfs: Unknown parameter '' [ 498.556912][ T8868] binder: Unknown parameter 'uid<00000000000000000000' [ 499.296981][ T8924] 9pnet_fd: Insufficient options for proto=fd [ 499.711972][ T8942] veth0: entered promiscuous mode [ 499.717261][ T8942] veth0: left promiscuous mode [ 499.743673][ T8948] netlink: 'syz.0.2836': attribute type 58 has an invalid length. [ 499.775574][ T36] audit: type=1400 audit(2016777546.295:869): avc: denied { execmod } for pid=8956 comm="syz.0.2838" path="/dev/rnullb0" dev="tmpfs" ino=238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 499.808762][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 499.829224][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 499.841995][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 499.867336][ T8965] 9pnet_fd: Insufficient options for proto=fd [ 499.932232][ T8961] netlink: 182 bytes leftover after parsing attributes in process `syz.5.2840'. [ 499.942455][ T36] audit: type=1326 audit(2016777546.454:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8960 comm="syz.5.2840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f027818eec9 code=0x0 [ 500.906402][ T9025] tmpfs: Bad value for 'nr_blocks' [ 500.932959][ T9023] netlink: 'syz.5.2862': attribute type 11 has an invalid length. [ 500.965200][ T9028] tmpfs: Bad value for 'nr_blocks' [ 500.992132][ T9028] sit0: entered promiscuous mode [ 501.009000][ T9028] netlink: '/selinux/policy': attribute type 1 has an invalid length. [ 501.032597][ T9028] netlink: 9 bytes leftover after parsing attributes in process `/selinux/policy'. [ 501.105395][ T9049] netlink: 'syz.0.2870': attribute type 4 has an invalid length. [ 501.128143][ T36] audit: type=1400 audit(2016777547.571:871): avc: denied { setattr } for pid=9048 comm="syz.0.2870" path="pipe:[33702]" dev="pipefs" ino=33702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 501.163470][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 501.176412][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2871'. [ 502.039357][ T9136] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2899'. [ 502.048728][ T9136] netlink: 'syz.5.2899': attribute type 12 has an invalid length. [ 502.862231][ T9187] netlink: 'syz.2.2920': attribute type 1 has an invalid length. [ 502.870098][ T9187] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2920'. [ 502.881062][ T9187] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2920'. [ 503.044339][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2921'. [ 503.289357][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2924'. [ 503.298585][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'. [ 503.895445][ T9225] tmpfs: Unknown parameter '0xffffffffffffffff' [ 503.901962][ T9226] tmpfs: Unknown parameter '0xffffffffffffffff' [ 503.998398][ T9231] bpf: Bad value for 'uid' [ 504.003458][ T9231] binder: Unknown parameter 'measure' [ 504.009464][ T9231] overlayfs: failed to clone upperpath [ 504.243837][ T9242] 9pnet_fd: Insufficient options for proto=fd [ 504.328813][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2946'. [ 504.692438][ T9312] 9pnet_fd: Insufficient options for proto=fd [ 504.940048][ T36] audit: type=1400 audit(2000000003.963:872): avc: denied { audit_write } for pid=9357 comm="syz.2.2978" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 504.961184][ T36] audit: type=1107 audit(2000000003.963:873): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='w@bVl' [ 504.976811][ T36] audit: type=1107 audit(2000000003.963:874): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='w@bVl' [ 518.226044][ T9412] netlink: 'syz.5.3000': attribute type 4 has an invalid length. [ 518.240124][ T9412] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3000'. [ 518.596647][ T9467] overlayfs: failed to clone upperpath [ 518.605914][ T9468] x_tables: duplicate underflow at hook 1 [ 519.101310][ T9487] netlink: 'syz.2.3022': attribute type 2 has an invalid length. [ 519.324715][ T9511] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3030'. [ 519.379435][ T9511] 9pnet_fd: Insufficient options for proto=fd [ 519.566890][ T36] audit: type=1326 audit(2000000017.689:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9520 comm="syz.2.3033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 519.570961][ T9454] syz.3.3010 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 519.610470][ T9454] CPU: 1 UID: 0 PID: 9454 Comm: syz.3.3010 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 519.610505][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.610521][ T9454] Call Trace: [ 519.610528][ T9454] [ 519.610538][ T9454] __dump_stack+0x21/0x30 [ 519.610579][ T9454] dump_stack_lvl+0x10c/0x190 [ 519.610607][ T9454] ? __cfi_dump_stack_lvl+0x10/0x10 [ 519.610633][ T9454] ? ___ratelimit+0x3f7/0x5a0 [ 519.610721][ T9454] dump_stack+0x19/0x20 [ 519.610746][ T9454] dump_header+0xd7/0x490 [ 519.610765][ T9454] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 519.610820][ T9454] oom_kill_process+0x35d/0x640 [ 519.610884][ T9454] ? sched_clock_cpu+0x75/0x400 [ 519.610947][ T9454] out_of_memory+0x659/0xa80 [ 519.610976][ T9454] ? __cfi_out_of_memory+0x10/0x10 [ 519.610999][ T9454] ? mutex_lock_killable+0x92/0x1c0 [ 519.611055][ T9454] ? __cfi_mutex_lock_killable+0x10/0x10 [ 519.611086][ T9454] mem_cgroup_out_of_memory+0x279/0x350 [ 519.611129][ T9454] ? drain_obj_stock+0xed0/0xed0 [ 519.611148][ T9454] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 519.611167][ T9454] try_charge_memcg+0x8f7/0xde0 [ 519.611197][ T9454] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 519.611219][ T9454] ? __cfi_try_charge_memcg+0x10/0x10 [ 519.611249][ T9454] ? __alloc_pages_noprof+0x31f/0x7b0 [ 519.611282][ T9454] __mem_cgroup_charge+0xf6/0x410 [ 519.611306][ T9454] ? filemap_get_entry+0x3fb/0x460 [ 519.611345][ T9454] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 519.611369][ T9454] filemap_add_folio+0x57/0x2d0 [ 519.611389][ T9454] __filemap_get_folio+0x5cb/0xaa0 [ 519.611422][ T9454] ? __cfi___filemap_get_folio+0x10/0x10 [ 519.611442][ T9454] ? mm_trace_rss_stat+0x20/0x130 [ 519.611491][ T9454] ? filemap_fault_recheck_pte_none+0x78/0x250 [ 519.611511][ T9454] filemap_fault+0xb41/0x16b0 [ 519.611532][ T9454] ? __cfi_filemap_fault+0x10/0x10 [ 519.611551][ T9454] ? __cfi_filemap_map_pages+0x10/0x10 [ 519.611570][ T9454] ? __cfi_lru_add+0x10/0x10 [ 519.611588][ T9454] ? __cfi_workingset_update_node+0x10/0x10 [ 519.611606][ T9454] do_pte_missing+0x298f/0x4240 [ 519.611624][ T9454] ? folio_unlock+0x12f/0x1a0 [ 519.611642][ T9454] ? __cfi_folio_unlock+0x10/0x10 [ 519.611659][ T9454] ? pte_marker_clear+0x1b0/0x1b0 [ 519.611676][ T9454] ? __kasan_check_write+0x18/0x20 [ 519.611698][ T9454] ? noop_dirty_folio+0x81/0xa0 [ 519.611711][ T9454] ? __kasan_check_write+0x18/0x20 [ 519.611732][ T9454] ? simple_write_end+0x27e/0x2d0 [ 519.611779][ T9454] ? __pte_offset_map+0x1b0/0x230 [ 519.611812][ T9454] ? pte_offset_map_rw_nolock+0xba/0x110 [ 519.611833][ T9454] handle_mm_fault+0x1166/0x1b90 [ 519.611849][ T9454] ? __kasan_check_write+0x18/0x20 [ 519.611873][ T9454] ? __cfi_handle_mm_fault+0x10/0x10 [ 519.611888][ T9454] ? follow_page_pte+0x2bd/0xb90 [ 519.611908][ T9454] ? gup_must_unshare+0x1e0/0x1e0 [ 519.611926][ T9454] ? vma_is_secretmem+0x11/0x50 [ 519.611959][ T9454] __get_user_pages+0x1169/0x22d0 [ 519.611978][ T9454] ? __kasan_check_write+0x18/0x20 [ 519.612002][ T9454] ? populate_vma_page_range+0x230/0x230 [ 519.612020][ T9454] ? __kernel_write_iter+0x6fd/0x8e0 [ 519.612056][ T9454] get_dump_page+0x107/0x220 [ 519.612073][ T9454] ? __cfi_get_dump_page+0x10/0x10 [ 519.612097][ T9454] ? __asan_memset+0x39/0x50 [ 519.612118][ T9454] dump_user_range+0x181/0xdf0 [ 519.612156][ T9454] ? __cfi_dump_emit+0x10/0x10 [ 519.612196][ T9454] ? __cfi_dump_user_range+0x10/0x10 [ 519.612210][ T9454] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 519.612245][ T9454] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 519.612268][ T9454] ? elf_core_dump+0x2368/0x3800 [ 519.612286][ T9454] elf_core_dump+0x2ccc/0x3800 [ 519.612307][ T9454] ? __cfi_elf_core_dump+0x10/0x10 [ 519.612330][ T9454] ? dump_interrupted+0xf0/0xf0 [ 519.612352][ T9454] ? filp_open+0x182/0x1d0 [ 519.612371][ T9454] ? 0xffffffffff600000 [ 519.612384][ T9454] do_coredump+0x1bfa/0x2bd0 [ 519.612409][ T9454] ? __cfi_do_coredump+0x10/0x10 [ 519.612431][ T9454] ? asm_exc_page_fault+0x2b/0x30 [ 519.612453][ T9454] ? __kasan_slab_free+0x6a/0x80 [ 519.612470][ T9454] ? kmem_cache_free+0x1c1/0x510 [ 519.612485][ T9454] ? get_signal+0xa75/0x14f0 [ 519.612509][ T9454] get_signal+0x11fd/0x14f0 [ 519.612535][ T9454] arch_do_signal_or_restart+0x96/0x720 [ 519.612563][ T9454] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 519.612589][ T9454] irqentry_exit_to_user_mode+0x4e/0xb0 [ 519.612604][ T9454] irqentry_exit+0x16/0x60 [ 519.612619][ T9454] exc_page_fault+0x66/0xc0 [ 519.612632][ T9454] asm_exc_page_fault+0x2b/0x30 [ 519.612646][ T9454] RIP: 0033:0x7f07b404f987 [ 519.612659][ T9454] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 519.612673][ T9454] RSP: 002b:00007f07b507f120 EFLAGS: 00010202 [ 519.612688][ T9454] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f07b418eec9 [ 519.612698][ T9454] RDX: 00007f07b507f140 RSI: 00007f07b507f270 RDI: 000000000000000b [ 519.612709][ T9454] RBP: 00007f07b4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 519.612719][ T9454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 519.612728][ T9454] R13: 00007f07b43e6038 R14: 00007f07b43e5fa0 R15: 00007ffd1616fe48 [ 519.612742][ T9454] [ 519.612763][ T9454] memory: usage 307200kB, limit 307200kB, failcnt 2051 [ 520.130293][ T9454] memory+swap: usage 309192kB, limit 9007199254740988kB, failcnt 0 [ 520.139781][ T9454] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 520.146905][ T9454] Memory cgroup stats for /syz3: [ 520.147080][ T9454] cache 314572800 [ 520.155817][ T9454] rss 0 [ 520.158577][ T9454] rss_huge 0 [ 520.161832][ T9454] shmem 0 [ 520.164783][ T9454] mapped_file 0 [ 520.168350][ T9454] dirty 0 [ 520.171301][ T9454] writeback 0 [ 520.174637][ T9454] workingset_refault_anon 6 [ 520.179170][ T9454] workingset_refault_file 419 [ 520.185805][ T9454] swap 2039808 [ 520.189210][ T9454] swapcached 0 [ 520.192601][ T9454] pgpgin 361242 [ 520.196117][ T9454] pgpgout 284953 [ 520.199685][ T9454] pgfault 200708 [ 520.203348][ T9454] pgmajfault 20 [ 520.206875][ T9454] inactive_anon 0 [ 520.210528][ T9454] active_anon 0 [ 520.213979][ T9454] inactive_file 0 [ 520.217787][ T9454] active_file 4096 [ 520.221569][ T9454] unevictable 314568704 [ 520.225763][ T9454] hierarchical_memory_limit 314572800 [ 520.231141][ T9454] hierarchical_memsw_limit 9223372036854771712 [ 520.237344][ T9454] total_cache 314572800 [ 520.241509][ T9454] total_rss 0 [ 520.244784][ T9454] total_rss_huge 0 [ 520.248534][ T9454] total_shmem 0 [ 520.252004][ T9454] total_mapped_file 0 [ 520.255989][ T9454] total_dirty 0 [ 520.259529][ T9454] total_writeback 0 [ 520.263452][ T9454] total_workingset_refault_anon 6 [ 520.268586][ T9454] total_workingset_refault_file 419 [ 520.273817][ T9454] total_swap 2039808 [ 520.277748][ T9454] total_swapcached 0 [ 520.281716][ T9454] total_pgpgin 361242 [ 520.285733][ T9454] total_pgpgout 284953 [ 520.289859][ T9454] total_pgfault 200708 [ 520.293971][ T9454] total_pgmajfault 20 [ 520.297956][ T9454] total_inactive_anon 0 [ 520.302155][ T9454] total_active_anon 0 [ 520.306257][ T9454] total_inactive_file 0 [ 520.310425][ T9454] total_active_file 4096 [ 520.314717][ T9454] total_unevictable 314568704 [ 520.319424][ T9454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3010,pid=9453,uid=0 [ 520.334370][ T9454] Memory cgroup out of memory: Killed process 9453 (syz.3.3010) total-vm:90032kB, anon-rss:1268kB, file-rss:53708kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 520.438452][ T9450] syz.3.3010 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 520.462857][ T9450] CPU: 0 UID: 0 PID: 9450 Comm: syz.3.3010 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 520.462896][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.462910][ T9450] Call Trace: [ 520.462918][ T9450] [ 520.462927][ T9450] __dump_stack+0x21/0x30 [ 520.462964][ T9450] dump_stack_lvl+0x10c/0x190 [ 520.462996][ T9450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 520.463026][ T9450] ? ___ratelimit+0x3f7/0x5a0 [ 520.463059][ T9450] dump_stack+0x19/0x20 [ 520.463088][ T9450] dump_header+0xd7/0x490 [ 520.463111][ T9450] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 520.463143][ T9450] oom_kill_process+0x35d/0x640 [ 520.463170][ T9450] ? sched_clock_cpu+0x75/0x400 [ 520.463203][ T9450] out_of_memory+0x659/0xa80 [ 520.463230][ T9450] ? __cfi_out_of_memory+0x10/0x10 [ 520.463257][ T9450] ? mutex_lock_killable+0x92/0x1c0 [ 520.463299][ T9450] ? __cfi_mutex_lock_killable+0x10/0x10 [ 520.463336][ T9450] mem_cgroup_out_of_memory+0x279/0x350 [ 520.463359][ T9450] ? drain_obj_stock+0xed0/0xed0 [ 520.463382][ T9450] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 520.463405][ T9450] try_charge_memcg+0x8f7/0xde0 [ 520.463435][ T9450] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 520.463463][ T9450] ? __cfi_try_charge_memcg+0x10/0x10 [ 520.463495][ T9450] ? __alloc_pages_noprof+0x31f/0x7b0 [ 520.463528][ T9450] __mem_cgroup_charge+0xf6/0x410 [ 520.463561][ T9450] ? filemap_get_entry+0x3fb/0x460 [ 520.463591][ T9450] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 520.463626][ T9450] filemap_add_folio+0x57/0x2d0 [ 520.463653][ T9450] __filemap_get_folio+0x5cb/0xaa0 [ 520.463683][ T9450] ? __vfs_getxattr+0xaf/0x450 [ 520.463784][ T9450] ? __cfi___filemap_get_folio+0x10/0x10 [ 520.463814][ T9450] ? __kasan_check_write+0x18/0x20 [ 520.463848][ T9450] ? noop_dirty_folio+0x81/0xa0 [ 520.463868][ T9450] ? inode_to_bdi+0x6d/0x100 [ 520.463954][ T9450] simple_write_begin+0x60/0x390 [ 520.463982][ T9450] generic_perform_write+0x32d/0x960 [ 520.464018][ T9450] ? __cfi_generic_perform_write+0x10/0x10 [ 520.464052][ T9450] ? generic_write_checks_count+0x429/0x540 [ 520.464081][ T9450] ? file_update_time+0xa3/0x220 [ 520.464135][ T9450] __generic_file_write_iter+0xcf/0x180 [ 520.464169][ T9450] generic_file_write_iter+0x110/0x430 [ 520.464203][ T9450] ? __cfi_generic_file_write_iter+0x10/0x10 [ 520.464236][ T9450] ? gup_must_unshare+0x1e0/0x1e0 [ 520.464266][ T9450] ? vma_is_secretmem+0x11/0x50 [ 520.464305][ T9450] ? __get_user_pages+0x2034/0x22d0 [ 520.464335][ T9450] ? __kasan_check_write+0x18/0x20 [ 520.464372][ T9450] ? __cfi_generic_file_write_iter+0x10/0x10 [ 520.464406][ T9450] __kernel_write_iter+0x41a/0x8e0 [ 520.464427][ T9450] ? __cfi_generic_file_write_iter+0x10/0x10 [ 520.464462][ T9450] ? __cfi___kernel_write_iter+0x10/0x10 [ 520.464482][ T9450] ? get_dump_page+0x160/0x220 [ 520.464510][ T9450] ? __asan_memset+0x39/0x50 [ 520.464543][ T9450] ? iov_iter_bvec+0xc0/0x180 [ 520.464646][ T9450] dump_user_range+0xb06/0xdf0 [ 520.464670][ T9450] ? __cfi_dump_emit+0x10/0x10 [ 520.464703][ T9450] ? __cfi_dump_user_range+0x10/0x10 [ 520.464725][ T9450] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 520.464760][ T9450] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 520.464794][ T9450] ? elf_core_dump+0x2368/0x3800 [ 520.464842][ T9450] elf_core_dump+0x2ccc/0x3800 [ 520.464872][ T9450] ? __cfi_elf_core_dump+0x10/0x10 [ 520.464906][ T9450] ? dump_interrupted+0xf0/0xf0 [ 520.464939][ T9450] ? filp_open+0x182/0x1d0 [ 520.464968][ T9450] ? 0xffffffffff600000 [ 520.464987][ T9450] do_coredump+0x1bfa/0x2bd0 [ 520.465024][ T9450] ? __cfi_do_coredump+0x10/0x10 [ 520.465056][ T9450] ? asm_exc_page_fault+0x2b/0x30 [ 520.465086][ T9450] ? __kasan_slab_free+0x6a/0x80 [ 520.465111][ T9450] ? kmem_cache_free+0x1c1/0x510 [ 520.465133][ T9450] ? get_signal+0xa75/0x14f0 [ 520.465163][ T9450] get_signal+0x11fd/0x14f0 [ 520.465195][ T9450] arch_do_signal_or_restart+0x96/0x720 [ 520.465231][ T9450] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 520.465268][ T9450] irqentry_exit_to_user_mode+0x4e/0xb0 [ 520.465300][ T9450] irqentry_exit+0x16/0x60 [ 520.465321][ T9450] exc_page_fault+0x66/0xc0 [ 520.465343][ T9450] asm_exc_page_fault+0x2b/0x30 [ 520.465363][ T9450] RIP: 0033:0x7f07b404f987 [ 520.465382][ T9450] Code: 88 15 72 5d ec 00 88 05 6f 5d ec 00 c3 50 48 8d 35 19 26 1c 00 48 8d 3d 1f 26 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 520.465402][ T9450] RSP: 002b:00007f07b507f120 EFLAGS: 00010202 [ 520.465423][ T9450] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f07b418eec9 [ 520.465439][ T9450] RDX: 00007f07b507f140 RSI: 00007f07b507f270 RDI: 000000000000000b [ 520.465456][ T9450] RBP: 00007f07b4211f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.465471][ T9450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 520.465485][ T9450] R13: 00007f07b43e6038 R14: 00007f07b43e5fa0 R15: 00007ffd1616fe48 [ 520.465505][ T9450] [ 520.465556][ T9450] memory: usage 302924kB, limit 307200kB, failcnt 3145 [ 520.836764][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 520.840362][ T9450] memory+swap: usage 308808kB, limit 9007199254740988kB, failcnt 0 [ 520.969101][ T9450] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 520.976033][ T9450] Memory cgroup stats for /syz3: [ 520.976295][ T9450] cache 312922112 [ 520.997562][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 521.003835][ T9450] rss 0 [ 521.009236][ T9450] rss_huge 0 [ 521.012440][ T9450] shmem 0 [ 521.018849][ T9450] mapped_file 57344 [ 521.028439][ T9450] dirty 0 [ 521.034835][ T9450] writeback 0 [ 521.041636][ T9550] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 521.042789][ T9450] workingset_refault_anon 71 [ 521.063062][ T9450] workingset_refault_file 560 [ 521.067807][ T9450] swap 1777664 [ 521.071283][ T9450] swapcached 0 [ 521.075043][ T9450] pgpgin 371198 [ 521.078622][ T9450] pgpgout 295312 [ 521.082244][ T9450] pgfault 200826 [ 521.085940][ T9450] pgmajfault 51 [ 521.089618][ T9450] inactive_anon 0 [ 521.093342][ T9450] active_anon 0 [ 521.096887][ T9450] inactive_file 0 [ 521.100586][ T9450] active_file 61440 [ 521.104479][ T9450] unevictable 312860672 [ 521.109503][ T9450] hierarchical_memory_limit 314572800 [ 521.134103][ T9450] hierarchical_memsw_limit 9223372036854771712 [ 521.140341][ T9450] total_cache 312922112 [ 521.146619][ T9450] total_rss 0 [ 521.152672][ T9450] total_rss_huge 0 [ 521.156791][ T9450] total_shmem 0 [ 521.160300][ T9450] total_mapped_file 57344 [ 521.164998][ T9450] total_dirty 0 [ 521.168644][ T9450] total_writeback 0 [ 521.172600][ T9450] total_workingset_refault_anon 71 [ 521.178307][ T9450] total_workingset_refault_file 560 [ 521.183660][ T9450] total_swap 1777664 [ 521.188794][ T9450] total_swapcached 0 [ 521.192801][ T9450] total_pgpgin 371198 [ 521.200043][ T9450] total_pgpgout 295312 [ 521.204136][ T9450] total_pgfault 200826 [ 521.208267][ T9450] total_pgmajfault 51 [ 521.212274][ T9450] total_inactive_anon 0 [ 521.216432][ T9450] total_active_anon 0 [ 521.220480][ T9450] total_inactive_file 0 [ 521.224650][ T9450] total_active_file 61440 [ 521.230212][ T9450] total_unevictable 312860672 [ 521.234963][ T9450] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3010,pid=9452,uid=0 [ 521.249914][ T9450] Memory cgroup out of memory: OOM victim 9452 (syz.3.3010) is already exiting. Skip killing the task [ 521.539705][ T9509] syz.3.3030 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 521.576562][ T9509] CPU: 1 UID: 0 PID: 9509 Comm: syz.3.3030 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 521.576601][ T9509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 521.576616][ T9509] Call Trace: [ 521.576624][ T9509] [ 521.576633][ T9509] __dump_stack+0x21/0x30 [ 521.576669][ T9509] dump_stack_lvl+0x10c/0x190 [ 521.576700][ T9509] ? __cfi_dump_stack_lvl+0x10/0x10 [ 521.576730][ T9509] ? ___ratelimit+0x3f7/0x5a0 [ 521.576763][ T9509] dump_stack+0x19/0x20 [ 521.576793][ T9509] dump_header+0xd7/0x490 [ 521.576815][ T9509] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 521.576845][ T9509] oom_kill_process+0x35d/0x640 [ 521.576873][ T9509] ? sched_clock_cpu+0x75/0x400 [ 521.576905][ T9509] out_of_memory+0x659/0xa80 [ 521.576932][ T9509] ? __cfi_out_of_memory+0x10/0x10 [ 521.576959][ T9509] ? mutex_lock_killable+0x92/0x1c0 [ 521.576993][ T9509] ? __cfi_mutex_lock_killable+0x10/0x10 [ 521.577030][ T9509] mem_cgroup_out_of_memory+0x279/0x350 [ 521.577054][ T9509] ? drain_obj_stock+0xed0/0xed0 [ 521.577077][ T9509] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 521.577106][ T9509] try_charge_memcg+0x8f7/0xde0 [ 521.577138][ T9509] ? __cfi_try_charge_memcg+0x10/0x10 [ 521.577167][ T9509] ? xas_load+0x3a2/0x3d0 [ 521.577199][ T9509] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 521.577234][ T9509] __read_swap_cache_async+0x34a/0x690 [ 521.577350][ T9509] swap_cluster_readahead+0x43a/0x530 [ 521.577374][ T9509] ? xas_load+0x3a2/0x3d0 [ 521.577401][ T9509] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 521.577428][ T9509] ? __cfi_free_swap_slot+0x10/0x10 [ 521.577459][ T9509] swapin_readahead+0xf2/0x820 [ 521.577482][ T9509] ? __filemap_get_folio+0xa58/0xaa0 [ 521.577510][ T9509] ? __mod_memcg_lruvec_state+0x188/0x460 [ 521.577534][ T9509] ? __cfi_swapin_readahead+0x10/0x10 [ 521.577556][ T9509] ? __kasan_check_write+0x18/0x20 [ 521.577587][ T9509] ? folio_unlock+0x12f/0x1a0 [ 521.577619][ T9509] ? get_swap_device+0x10f/0x290 [ 521.577643][ T9509] do_swap_page+0x43c/0x42f0 [ 521.577670][ T9509] ? __cfi_do_swap_page+0x10/0x10 [ 521.577693][ T9509] ? pte_marker_clear+0x1b0/0x1b0 [ 521.577720][ T9509] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 521.577782][ T9509] ? __cfi_default_wake_function+0x10/0x10 [ 521.577831][ T9509] ? hrtimer_try_to_cancel+0x3fe/0x6b0 [ 521.577877][ T9509] ? __pte_offset_map+0x1b0/0x230 [ 521.577909][ T9509] ? pte_offset_map_rw_nolock+0xba/0x110 [ 521.577942][ T9509] handle_mm_fault+0x1205/0x1b90 [ 521.577971][ T9509] ? __cfi_handle_mm_fault+0x10/0x10 [ 521.577994][ T9509] ? lock_vma_under_rcu+0x49d/0x540 [ 521.578023][ T9509] ? xfd_validate_state+0x68/0x150 [ 521.578052][ T9509] do_user_addr_fault+0x96c/0x1200 [ 521.578084][ T9509] ? fpregs_restore_userregs+0x11d/0x260 [ 521.578118][ T9509] ? arch_exit_to_user_mode_prepare+0x4d/0x70 [ 521.578183][ T9509] exc_page_fault+0x59/0xc0 [ 521.578204][ T9509] asm_exc_page_fault+0x2b/0x30 [ 521.578224][ T9509] RIP: 0033:0x7f07b41b6cf0 [ 521.578243][ T9509] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 521.578262][ T9509] RSP: 002b:00007ffd1616ff38 EFLAGS: 00010246 [ 521.578283][ T9509] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f07b41c1785 [ 521.578299][ T9509] RDX: 00007ffd1616ff80 RSI: 0000000000000000 RDI: 0000000000000000 [ 521.578314][ T9509] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000f1617029f [ 521.578328][ T9509] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f07b43e5fac [ 521.578344][ T9509] R13: 00007f07b43e5fa0 R14: ffffffffffffffff R15: 00007ffd161700c0 [ 521.578365][ T9509] [ 521.754219][ T9509] memory: usage 276360kB, limit 307200kB, failcnt 4505 [ 521.980888][ T9509] memory+swap: usage 289852kB, limit 9007199254740988kB, failcnt 0 [ 521.989154][ T9509] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 521.996957][ T9509] Memory cgroup stats for /syz3: [ 521.997118][ T9509] cache 287498240 [ 522.007884][ T9509] rss 102400 [ 522.011744][ T9509] rss_huge 0 [ 522.015509][ T9509] shmem 0 [ 522.019290][ T9509] mapped_file 4096 [ 522.037719][ T9509] dirty 0 [ 522.048480][ T9509] writeback 0 [ 522.051976][ T9509] workingset_refault_anon 288 [ 522.056834][ T9509] workingset_refault_file 1892 [ 522.078518][ T9509] swap 999424 [ 522.091030][ T9509] swapcached 212992 [ 522.112364][ T9509] pgpgin 401722 [ 522.121928][ T9509] pgpgout 331990 [ 522.132882][ T9509] pgfault 201433 [ 522.144294][ T9509] pgmajfault 144 [ 522.147920][ T9509] inactive_anon 36864 [ 522.162689][ T9509] active_anon 176128 [ 522.171254][ T9509] inactive_file 0 [ 522.186928][ T9509] active_file 4096 [ 522.190707][ T9509] unevictable 287485952 [ 522.194872][ T9509] hierarchical_memory_limit 314572800 [ 522.231051][ T9509] hierarchical_memsw_limit 9223372036854771712 [ 522.237250][ T9509] total_cache 287498240 [ 522.251223][ T9509] total_rss 102400 [ 522.261643][ T9509] total_rss_huge 0 [ 522.265383][ T9509] total_shmem 0 [ 522.279363][ T9509] total_mapped_file 4096 [ 522.283924][ T9509] total_dirty 0 [ 522.287437][ T9509] total_writeback 0 [ 522.292503][ T9509] total_workingset_refault_anon 288 [ 522.302063][ T9509] total_workingset_refault_file 1892 [ 522.314745][ T9509] total_swap 999424 [ 522.318766][ T9509] total_swapcached 212992 [ 522.323195][ T9509] total_pgpgin 401722 [ 522.327454][ T9509] total_pgpgout 331990 [ 522.331540][ T9509] total_pgfault 201433 [ 522.335662][ T9509] total_pgmajfault 144 [ 522.341209][ T9509] total_inactive_anon 36864 [ 522.345733][ T9509] total_active_anon 176128 [ 522.350203][ T9509] total_inactive_file 0 [ 522.354420][ T9509] total_active_file 4096 [ 522.358703][ T9509] total_unevictable 287485952 [ 522.363431][ T9509] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3010,pid=9450,uid=0 [ 522.378288][ T9509] Memory cgroup out of memory: OOM victim 9450 (syz.3.3010) is already exiting. Skip killing the task [ 522.891879][ T9660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pid=9660 comm=syz.2.3081 [ 522.904667][ T9660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=9660 comm=syz.2.3081 [ 522.922385][ T9660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65 sclass=netlink_tcpdiag_socket pid=9660 comm=syz.2.3081 [ 522.935140][ T9660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=9660 comm=syz.2.3081 [ 522.951804][ T9660] fuse: blksize only supported for fuseblk [ 522.972086][ T9667] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 523.129831][ T9695] netlink: 'syz.5.3091': attribute type 27 has an invalid length. [ 523.148791][ T9695] gretap0: left promiscuous mode [ 523.155485][ T9695] sit0: left promiscuous mode [ 524.054976][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3116'. [ 524.097682][ T9766] netlink: 'syz.0.3118': attribute type 4 has an invalid length. [ 524.105443][ T9766] netlink: 'syz.0.3118': attribute type 6 has an invalid length. [ 524.113222][ T9766] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3118'. [ 524.125010][ T9766] 9pnet_fd: Insufficient options for proto=fd [ 524.164867][ T9775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9775 comm=syz.3.3122 [ 524.216498][ T9782] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3125'. [ 524.263577][ T9790] x_tables: duplicate underflow at hook 1 [ 524.329886][ T9803] fuse: Bad value for 'fd' [ 524.926348][ T9827] overlayfs: failed to clone upperpath [ 524.953030][ T9834] devpts: called with bogus options [ 524.963486][ T9837] 9pnet_fd: Insufficient options for proto=fd [ 525.044957][ T9846] netlink: 'syz.0.3147': attribute type 10 has an invalid length. [ 525.052830][ T9846] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3147'. [ 525.413968][ T9857] tmpfs: Unknown parameter 'ec@: rejected, failed to enable media [ 532.278137][T10280] netlink: 580 bytes leftover after parsing attributes in process `syz.5.3299'. [ 532.287561][T10279] netlink: 580 bytes leftover after parsing attributes in process `syz.5.3299'. [ 532.303946][T10283] overlay: Unknown parameter '/dev/input/event#' [ 541.193483][T10329] 9pnet_fd: Insufficient options for proto=fd [ 541.205232][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 541.205249][ T36] audit: type=1400 audit(2000000037.928:898): avc: denied { execheap } for pid=10332 comm="syz.3.3317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 541.260726][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 541.324771][T10359] fuse: Bad value for 'fd' [ 541.339236][T10363] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3328'. [ 551.221186][T10399] overlay: ./file0 is not a directory [ 551.226981][T10399] overlay: ./file0 is not a directory [ 551.255851][T10405] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3342'. [ 551.282235][T10411] netlink: 'syz.3.3345': attribute type 4 has an invalid length. [ 551.290145][T10411] netlink: 'syz.3.3345': attribute type 5 has an invalid length. [ 551.298164][T10411] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3345'. [ 551.841652][T10449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10449 comm=syz.2.3362 [ 551.855388][T10450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10450 comm=syz.2.3362 [ 551.966540][T10468] overlayfs: failed to clone upperpath [ 552.038624][T10479] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 552.046457][T10479] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 552.054365][T10479] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 552.209776][ T36] audit: type=1400 audit(2000000304.177:899): avc: denied { execute } for pid=10519 comm="syz.5.3383" name="file0" dev="ramfs" ino=37748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 552.231832][ T36] audit: type=1400 audit(2000000304.177:900): avc: denied { execute_no_trans } for pid=10519 comm="syz.5.3383" path="/file0" dev="ramfs" ino=37748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 552.422032][T10533] fuse: Bad value for 'fd' [ 552.538349][T10544] netlink: 'syz.3.3390': attribute type 19 has an invalid length. [ 552.546383][T10544] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3390'. [ 553.976172][T10606] netlink: 'syz.3.3412': attribute type 1 has an invalid length. [ 554.029339][T10616] overlayfs: missing 'lowerdir' [ 554.083729][T10627] netlink: 'syz.3.3419': attribute type 4 has an invalid length. [ 554.091559][T10627] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3419'. [ 554.103559][T10627] netlink: 'syz.3.3419': attribute type 4 has an invalid length. [ 554.111439][T10627] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3419'. [ 554.915630][T10695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3441'. [ 554.950872][T10704] tipc: Started in network mode [ 554.955806][T10704] tipc: Node identity ac14140f, cluster identity 4711 [ 554.962720][T10704] tipc: New replicast peer: 139.255.255.255 [ 554.968727][T10704] tipc: Enabled bearer , priority 10 [ 556.155129][ T558] tipc: Node number set to 2886997007 [ 556.527050][T10767] sock: sock_timestamping_bind_phc: sock not bind to device [ 556.647552][T10777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10777 comm=syz.5.3469 [ 556.660400][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 556.702677][T10786] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3473'. [ 556.748924][T10792] 9pnet_fd: Insufficient options for proto=fd [ 556.772584][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3478'. [ 557.414918][ T36] audit: type=1326 audit(2000000309.074:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10656 comm="syz.3.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07b418eec9 code=0x7fc00000 [ 557.675876][T10827] netlink: 'syz.5.3489': attribute type 1 has an invalid length. [ 557.706618][T10833] overlayfs: missing 'lowerdir' [ 557.712179][T10833] overlayfs: missing 'lowerdir' [ 558.004272][T10860] cgroup: name respecified [ 558.026684][T10864] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3501'. [ 558.067326][ T36] audit: type=1400 audit(2000000309.684:902): avc: denied { map } for pid=10873 comm="syz.3.3505" path="socket:[40292]" dev="sockfs" ino=40292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 558.128407][ T36] audit: type=1400 audit(2000000309.684:903): avc: denied { read } for pid=10873 comm="syz.3.3505" path="socket:[40292]" dev="sockfs" ino=40292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 559.194788][T10959] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3535'. [ 559.204645][T10959] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3535'. [ 559.676448][ T36] audit: type=1400 audit(2000000311.194:904): avc: denied { setattr } for pid=10985 comm="syz.2.3542" name="secretmem" dev="secretmem" ino=40379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 559.754847][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3544'. [ 559.763793][T10993] erspan0: default FDB implementation only supports local addresses [ 559.829946][T11004] netlink: 'syz.3.3547': attribute type 4 has an invalid length. [ 559.840385][T11004] netlink: 'syz.3.3547': attribute type 4 has an invalid length. [ 559.869218][T11018] tmpfs: Unknown parameter '00000000000000000000uNzavpjiCILl [ 559.869218][T11018] }@9 Gj kzۀjumQ^r]}R' [ 559.877155][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3554'. [ 559.942151][T11036] overlayfs: failed to clone upperpath [ 559.969063][T11043] netlink: 'syz.5.3561': attribute type 2 has an invalid length. [ 560.794761][ T36] audit: type=1326 audit(2000000312.227:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11112 comm="syz.5.3586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x0 [ 560.836247][T11119] netlink: 'syz.3.3589': attribute type 13 has an invalid length. [ 560.865815][T11128] fuse: Bad value for 'fd' [ 560.997205][ T36] audit: type=1326 audit(2000000312.433:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11150 comm="syz.2.3601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 561.046947][T11160] /dev/loop3: Can't lookup blockdev [ 561.767657][T11197] netlink: 'syz.3.3615': attribute type 46 has an invalid length. [ 561.776379][T11197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3615'. [ 561.785459][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 561.970281][T11216] netlink: 'syz.2.3622': attribute type 7 has an invalid length. [ 562.147686][T11226] 9pnet_fd: Insufficient options for proto=fd [ 562.783027][T11280] overlayfs: failed to resolve './file1': -2 [ 562.815371][T11286] veth1: entered allmulticast mode [ 562.828317][T11285] veth1: left allmulticast mode [ 562.844542][T11289] netlink: 'syz.3.3641': attribute type 16 has an invalid length. [ 562.852396][T11289] netlink: 'syz.3.3641': attribute type 3 has an invalid length. [ 562.860203][T11289] netlink: 64054 bytes leftover after parsing attributes in process `syz.3.3641'. [ 563.376610][ T36] audit: type=1326 audit(2000000314.656:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11376 comm="syz.2.3657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 563.431916][T11408] batadv_slave_1: entered promiscuous mode [ 564.002891][T11436] futex_wake_op: syz.0.3669 tries to shift op by 144; fix this program [ 564.098226][T11447] overlayfs: failed to clone lowerpath [ 564.114816][T11451] 9pnet_fd: Insufficient options for proto=fd [ 564.265076][T11376] batadv_slave_1: left promiscuous mode [ 564.486342][T11498] 9pnet_fd: Insufficient options for proto=fd [ 564.503794][T11503] netlink: 'syz.5.3689': attribute type 20 has an invalid length. [ 564.672164][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3694'. [ 564.858303][T11533] tipc: Enabling not permitted [ 564.863961][T11533] tipc: Enabling of bearer rejected, failed to enable media [ 565.068676][ T36] audit: type=1326 audit(2000000316.251:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.3705" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07b418eec9 code=0x0 [ 565.342212][T11580] netlink: 'syz.3.3712': attribute type 1 has an invalid length. [ 565.617846][T11598] 9pnet_fd: Insufficient options for proto=fd [ 565.943868][T11609] veth1: entered allmulticast mode [ 566.136905][T11610] veth1: left allmulticast mode [ 566.236803][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 566.246331][T11618] netlink: 'syz.2.3723': attribute type 32 has an invalid length. [ 566.524936][T11622] No source specified [ 566.694347][T11635] netlink: 'syz.5.3731': attribute type 21 has an invalid length. [ 566.702230][T11635] netlink: 388 bytes leftover after parsing attributes in process `syz.5.3731'. [ 567.421846][T11656] No source specified [ 567.439792][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3740'. [ 568.752203][T11745] 9pnet_fd: Insufficient options for proto=fd [ 568.795096][T11749] can: request_module (can-proto-0) failed. [ 569.433236][T11774] 9pnet_fd: Insufficient options for proto=fd [ 569.488493][T11782] incfs_lookup_dentry err:-13 [ 569.493342][T11782] incfs: Can't find or create .index dir in ./file0 [ 569.500054][T11782] incfs: mount failed -13 [ 570.272338][ T45] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65380 sclass=netlink_audit_socket pid=45 comm=kworker/1:1 [ 570.277552][ T36] audit: type=1400 audit(2000000322.131:909): avc: denied { watch_reads } for pid=11814 comm="syz.5.3801" path="/496/file0" dev="tmpfs" ino=2708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 570.291829][ T45] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=45 comm=kworker/1:1 [ 570.367821][T11832] 9pnet_fd: Insufficient options for proto=fd [ 571.439953][ T36] audit: type=1400 audit(2000000323.219:910): avc: denied { nlmsg_write } for pid=11914 comm="syz.3.3834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 571.476608][ T36] audit: type=1107 audit(2000000323.219:911): pid=11914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 571.600907][T11933] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 571.608705][T11933] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3842'. [ 571.631574][ T36] audit: type=1326 audit(2000000323.397:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11864 comm="syz.0.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc458eec9 code=0x7fc00000 [ 571.858510][ T36] audit: type=1326 audit(2000000323.623:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11950 comm="syz.2.3851" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 572.250349][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 572.266673][T11993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3855'. [ 572.714429][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3869'. [ 572.748477][T12037] fuse: Unknown parameter '' [ 572.945996][T12075] 9pnet_fd: Insufficient options for proto=fd [ 572.945996][T12076] 9pnet_fd: Insufficient options for proto=fd [ 573.080937][ T36] audit: type=1326 audit(2000000324.758:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.2.3891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 574.533725][T12163] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 574.542323][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3916'. [ 574.841505][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3924'. [ 575.232912][ T36] audit: type=1326 audit(2000000326.784:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.0.3940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbc458eec9 code=0x0 [ 575.289260][ T36] audit: type=1326 audit(2000000326.841:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.0.3940" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcbc458eec9 code=0x0 [ 576.261580][T12262] netlink: 'syz.3.3949': attribute type 4 has an invalid length. [ 576.269608][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3949'. [ 576.306365][T12270] netlink: 'syz.3.3953': attribute type 4 has an invalid length. [ 576.322511][T12270] netlink: 'syz.3.3953': attribute type 4 has an invalid length. [ 576.388430][T12281] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 576.410616][T12286] overlayfs: failed to clone upperpath [ 576.736876][T12290] !@: renamed from xfrm0 (while UP) [ 577.475638][ T36] audit: type=1400 audit(2000000328.895:917): avc: denied { ioctl } for pid=12330 comm="syz.0.3975" path="socket:[43434]" dev="sockfs" ino=43434 ioctlcmd=0x89fc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 577.566952][T12356] bridge0: port 3(erspan0) entered blocking state [ 577.573503][T12356] bridge0: port 3(erspan0) entered disabled state [ 577.580024][T12356] erspan0: entered allmulticast mode [ 577.585641][T12356] erspan0: entered promiscuous mode [ 577.591069][T12356] bridge0: port 3(erspan0) entered blocking state [ 577.597506][T12356] bridge0: port 3(erspan0) entered forwarding state [ 578.332246][T12414] futex_wake_op: syz.0.4001 tries to shift op by -1; fix this program [ 578.341470][T12414] fuse: Unknown parameter 'vdu0x0000000000000004' [ 580.176040][T12543] 9pnet_fd: Insufficient options for proto=fd [ 580.213108][T12549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4024'. [ 580.329285][T12557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4026'. [ 580.365218][T12559] netlink: 'syz.2.4027': attribute type 4 has an invalid length. [ 580.375096][T12560] netlink: 'syz.2.4027': attribute type 4 has an invalid length. [ 580.387286][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4027'. [ 580.770896][T12579] 9pnet_fd: Insufficient options for proto=fd [ 580.885242][T12589] netlink: 'syz.5.4037': attribute type 27 has an invalid length. [ 580.895294][ T36] audit: type=1326 audit(2000000332.104:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12525 comm="syz.0.4017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbc458eec9 code=0x7fc00000 [ 580.932689][T12591] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4038'. [ 580.934626][T12589] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4037'. [ 580.968573][T12595] netlink: 'syz.5.4039': attribute type 4 has an invalid length. [ 580.976452][T12595] netlink: 'syz.5.4039': attribute type 5 has an invalid length. [ 580.984244][T12595] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4039'. [ 581.833979][T11968] tipc: Subscription rejected, illegal request [ 581.838691][ T36] audit: type=1400 audit(2000000332.976:919): avc: denied { map } for pid=12652 comm="syz.0.4058" path="socket:[44013]" dev="sockfs" ino=44013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 581.891250][T12659] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4061'. [ 582.002220][ T36] audit: type=1400 audit(2000000333.127:920): avc: denied { connect } for pid=12663 comm="syz.5.4062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 582.517951][T12688] netlink: 'syz.3.4070': attribute type 12 has an invalid length. [ 583.494259][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4098'. [ 583.503956][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.512450][T12766] bridge_slave_0 (unregistering): left allmulticast mode [ 583.519543][T12766] bridge_slave_0 (unregistering): left promiscuous mode [ 583.526784][T12766] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.975212][T12868] futex_wake_op: syz.2.4135 tries to shift op by -1; fix this program [ 585.007935][T12878] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4137'. [ 586.036384][T12939] bridge0: port 1(veth0_vlan) entered blocking state [ 586.043193][T12939] bridge0: port 1(veth0_vlan) entered disabled state [ 586.049995][T12939] veth0_vlan: entered allmulticast mode [ 586.056407][T12939] bridge0: port 1(veth0_vlan) entered blocking state [ 586.063129][T12939] bridge0: port 1(veth0_vlan) entered forwarding state [ 586.105717][T12949] futex_wake_op: syz.0.4166 tries to shift op by 32; fix this program [ 586.140961][T12956] 8021q: VLANs not supported on ip6_vti0 [ 586.183168][T12967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=276 sclass=netlink_route_socket pid=12967 comm=syz.5.4172 [ 586.186233][T12969] netlink: 'syz.3.4174': attribute type 27 has an invalid length. [ 586.204693][T12969] lo: entered promiscuous mode [ 586.209501][T12969] lo: entered allmulticast mode [ 586.214843][T12969] tunl0: entered promiscuous mode [ 586.219876][T12969] tunl0: entered allmulticast mode [ 586.225413][T12969] gre0: entered promiscuous mode [ 586.230453][T12969] gre0: entered allmulticast mode [ 586.235791][T12969] gretap0: entered promiscuous mode [ 586.241211][T12969] gretap0: entered allmulticast mode [ 586.247117][T12969] erspan0: entered promiscuous mode [ 586.252432][T12969] erspan0: entered allmulticast mode [ 586.258833][T12969] ip_vti0: entered promiscuous mode [ 586.264273][T12969] ip_vti0: entered allmulticast mode [ 586.270163][T12969] ip6_vti0: entered promiscuous mode [ 586.275554][T12969] ip6_vti0: entered allmulticast mode [ 586.281441][T12969] sit0: entered promiscuous mode [ 586.286641][T12969] sit0: entered allmulticast mode [ 586.292199][T12969] ip6tnl0: entered promiscuous mode [ 586.297566][T12969] ip6tnl0: entered allmulticast mode [ 586.303208][T12969] ip6gre0: entered promiscuous mode [ 586.308495][T12969] ip6gre0: entered allmulticast mode [ 586.314102][T12969] syz_tun: entered promiscuous mode [ 586.319397][T12969] syz_tun: entered allmulticast mode [ 586.325007][T12969] ip6gretap0: entered promiscuous mode [ 586.330539][T12969] ip6gretap0: entered allmulticast mode [ 586.336411][T12969] bridge0: entered promiscuous mode [ 586.341702][T12969] bridge0: entered allmulticast mode [ 586.347384][T12969] dummy0: entered promiscuous mode [ 586.352701][T12969] dummy0: entered allmulticast mode [ 586.358125][T12969] veth0: entered promiscuous mode [ 586.363342][T12969] veth0: entered allmulticast mode [ 586.368905][T12969] veth1: entered promiscuous mode [ 586.374232][T12969] veth1: entered allmulticast mode [ 586.379685][T12969] wg0: entered promiscuous mode [ 586.384566][T12969] wg0: entered allmulticast mode [ 586.389742][T12969] wg1: entered promiscuous mode [ 586.394871][T12969] wg1: entered allmulticast mode [ 586.400026][T12969] wg2: entered promiscuous mode [ 586.405065][T12969] wg2: entered allmulticast mode [ 586.410254][T12969] veth0_to_bridge: entered promiscuous mode [ 586.416343][T12969] veth0_to_bridge: entered allmulticast mode [ 586.423094][T12969] veth1_to_bridge: entered promiscuous mode [ 586.429108][ T36] audit: type=1107 audit(2000000337.283:921): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 586.429517][T12969] veth1_to_bridge: entered allmulticast mode [ 586.532526][T12969] veth0_to_bond: entered promiscuous mode [ 586.538603][T12969] veth0_to_bond: entered allmulticast mode [ 586.545233][T12969] : entered promiscuous mode [ 586.550149][T12969] : entered allmulticast mode [ 586.555941][T12969] veth1_to_bond: entered promiscuous mode [ 586.561807][T12969] veth1_to_bond: entered allmulticast mode [ 586.568457][T12969] bond_slave_1: entered promiscuous mode [ 586.574346][T12969] bond_slave_1: entered allmulticast mode [ 586.580506][T12969] veth0_to_team: entered promiscuous mode [ 586.586460][T12969] veth0_to_team: entered allmulticast mode [ 586.592712][T12969] team_slave_0: entered promiscuous mode [ 586.598441][T12969] team_slave_0: entered allmulticast mode [ 586.604473][T12969] veth1_to_team: entered promiscuous mode [ 586.610276][T12969] veth1_to_team: entered allmulticast mode [ 586.616520][T12969] team_slave_1: entered promiscuous mode [ 586.622241][T12969] team_slave_1: entered allmulticast mode [ 586.628404][T12969] veth0_to_batadv: entered promiscuous mode [ 586.634365][T12969] veth0_to_batadv: entered allmulticast mode [ 586.640893][T12969] batadv_slave_0: entered promiscuous mode [ 586.646733][T12969] batadv_slave_0: entered allmulticast mode [ 586.653011][T12969] veth1_to_batadv: entered promiscuous mode [ 586.658932][T12969] veth1_to_batadv: entered allmulticast mode [ 586.665260][T12969] batadv_slave_1: entered promiscuous mode [ 586.671298][T12969] batadv_slave_1: entered allmulticast mode [ 586.677574][T12969] xfrm0: entered promiscuous mode [ 586.682770][T12969] xfrm0: entered allmulticast mode [ 586.688182][T12969] veth0_to_hsr: entered promiscuous mode [ 586.693973][T12969] veth0_to_hsr: entered allmulticast mode [ 586.700035][T12969] hsr_slave_0: entered promiscuous mode [ 586.705790][T12969] hsr_slave_0: entered allmulticast mode [ 586.711741][T12969] veth1_to_hsr: entered promiscuous mode [ 586.717434][T12969] veth1_to_hsr: entered allmulticast mode [ 586.723416][T12969] hsr_slave_1: entered promiscuous mode [ 586.729111][T12969] hsr_slave_1: entered allmulticast mode [ 586.735230][T12969] veth1_virt_wifi: entered promiscuous mode [ 586.741129][T12969] veth1_virt_wifi: entered allmulticast mode [ 586.747744][T12969] veth0_virt_wifi: entered promiscuous mode [ 586.753645][T12969] veth0_virt_wifi: entered allmulticast mode [ 586.760006][T12969] veth1_vlan: entered promiscuous mode [ 586.765470][T12969] veth1_vlan: entered allmulticast mode [ 586.772272][T12969] veth0_vlan: entered allmulticast mode [ 586.778677][T12969] vlan0: entered promiscuous mode [ 586.783779][T12969] vlan0: entered allmulticast mode [ 586.789379][T12969] vlan1: entered promiscuous mode [ 586.794456][T12969] vlan1: entered allmulticast mode [ 586.800024][T12969] veth1_macvtap: entered allmulticast mode [ 586.806136][T12969] veth0_macvtap: entered promiscuous mode [ 586.812060][T12969] veth0_macvtap: entered allmulticast mode [ 586.818140][T12969] macsec0: entered promiscuous mode [ 586.823547][T12969] macsec0: entered allmulticast mode [ 586.829143][T12969] erspan0.768: entered promiscuous mode [ 586.835045][T12969] erspan0.768: entered allmulticast mode [ 586.841188][T12969] syztnl0: entered promiscuous mode [ 586.846542][T12969] syztnl0: entered allmulticast mode [ 586.855644][T12996] tipc: Enabling of bearer rejected, failed to enable media [ 586.976840][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4190'. [ 586.987244][T13032] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4190'. [ 587.017658][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4192'. [ 587.227441][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4193'. [ 587.447684][T13059] tmpfs: Bad value for 'size' [ 587.866694][T13072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=13072 comm=syz.0.4206 [ 587.929489][ T36] audit: type=1326 audit(2000000338.699:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 587.961651][ T36] audit: type=1326 audit(2000000338.699:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 587.985644][ T36] audit: type=1326 audit(2000000338.699:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.009133][ T36] audit: type=1326 audit(2000000338.699:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.032581][ T36] audit: type=1326 audit(2000000338.699:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.060653][ T36] audit: type=1326 audit(2000000338.699:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.088625][ T36] audit: type=1326 audit(2000000338.699:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.120389][ T36] audit: type=1326 audit(2000000338.699:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.144714][ T36] audit: type=1326 audit(2000000338.699:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.4210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027818eec9 code=0x7ffc0000 [ 588.210631][T13134] overlayfs: failed to clone upperpath [ 588.223101][T13136] SELinux: Context system_u:object_r:device_t:s0 is not valid (left unmapped). [ 588.477891][T13168] netlink: 'syz.2.4235': attribute type 11 has an invalid length. [ 589.122844][T13218] overlayfs: failed to clone lowerpath [ 589.179352][T13236] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4257'. [ 589.379529][T13253] tipc: Started in network mode [ 589.384966][T13253] tipc: Node identity 7f000001, cluster identity 4711 [ 589.392039][T13253] tipc: Enabled bearer , priority 10 [ 589.399363][T13252] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 589.407587][T13252] tipc: Enabled bearer , priority 10 [ 589.900754][T13280] 9pnet_fd: p9_fd_create_unix (13280): problem connecting socket: ./file0: -111 [ 590.028841][T13298] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4280'. [ 590.135333][T13303] fuse: Bad value for 'group_id' [ 590.140436][T13303] fuse: Bad value for 'group_id' [ 590.260078][T13312] netlink: 'syz.3.4283': attribute type 4 has an invalid length. [ 590.268026][T13312] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4283'. [ 590.277831][T13312] netlink: 'syz.3.4283': attribute type 5 has an invalid length. [ 590.285892][T13312] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4283'. [ 590.319136][T13319] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.326374][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.582450][ T9] tipc: Node number set to 2130706433 [ 590.665433][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4289'. [ 591.321899][T13375] sock: sock_timestamping_bind_phc: sock not bind to device [ 591.788822][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 591.788841][ T36] audit: type=1400 audit(2000000602.318:988): avc: denied { name_bind } for pid=13381 comm="syz.3.4303" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 592.034743][ T36] audit: type=1400 audit(2000000602.553:989): avc: denied { mount } for pid=13388 comm="syz.0.4304" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 592.035556][T13389] overlayfs: failed to clone lowerpath [ 592.224262][T13398] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 592.604314][ T36] audit: type=1326 audit(2000000603.078:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13458 comm="syz.2.4332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6484b8eec9 code=0x0 [ 593.009085][T13462] ------------[ cut here ]------------ [ 593.014636][T13462] WARNING: CPU: 1 PID: 13462 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 [ 593.024161][T13462] Modules linked in: [ 593.028065][T13462] CPU: 1 UID: 0 PID: 13462 Comm: syz.3.4333 Not tainted syzkaller #0 d27bf65064ef37e242848a5d573511e9710340a8 [ 593.039731][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 593.049819][T13462] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 [ 593.055760][T13462] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1f ee 05 00 0f 85 be 00 00 00 c6 05 d5 1f ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24 [ 593.075416][T13462] RSP: 0018:ffffc9000b967860 EFLAGS: 00010246 [ 593.081543][T13462] RAX: 0000000000000000 RBX: 000000000000000f RCX: 0000000000000000 [ 593.089556][T13462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b967918 [ 593.097560][T13462] RBP: ffffc9000b967988 R08: ffffc9000b967917 R09: 0000000000000000 [ 593.105555][T13462] R10: ffffc9000b967900 R11: fffff5200172cf23 R12: ffffc9000b9678a0 [ 593.113662][T13462] R13: dffffc0000000000 R14: 1ffff9200172cf10 R15: 0000000000000000 [ 593.121687][T13462] FS: 00007f07b509e6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 593.130686][T13462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.137311][T13462] CR2: 0000200000001000 CR3: 0000000115678000 CR4: 00000000003526b0 [ 593.145337][T13462] Call Trace: [ 593.148631][T13462] [ 593.151601][T13462] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 593.157714][T13462] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 593.163498][T13462] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 593.169229][T13462] ___kmalloc_large_node+0x81/0x220 [ 593.174491][T13462] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 593.180150][T13462] __kmalloc_large_node_noprof+0x1e/0xe0 [ 593.185834][T13462] ? incfs_realloc_mount_info+0xa7/0x4d0 [ 593.191526][T13462] __kmalloc_noprof+0x336/0x530 [ 593.196448][T13462] ? __cfi_lockref_get+0x10/0x10 [ 593.201527][T13462] incfs_realloc_mount_info+0xa7/0x4d0 [ 593.207036][T13462] ? incfs_add_sysfs_node+0x118/0x240 [ 593.212488][T13462] incfs_alloc_mount_info+0x479/0x600 [ 593.217919][T13462] incfs_mount_fs+0x3ca/0x960 [ 593.222734][T13462] ? __cfi_incfs_mount_fs+0x10/0x10 [ 593.227998][T13462] ? vfs_parse_fs_string+0x102/0x170 [ 593.233362][T13462] ? selinux_capable+0x38/0x50 [ 593.238237][T13462] legacy_get_tree+0x106/0x1b0 [ 593.243026][T13462] ? __cfi_incfs_mount_fs+0x10/0x10 [ 593.248344][T13462] vfs_get_tree+0x9e/0x290 [ 593.252831][T13462] do_new_mount+0x251/0xb40 [ 593.257369][T13462] ? security_capable+0xcf/0xf0 [ 593.262278][T13462] path_mount+0x688/0x1050 [ 593.266747][T13462] ? putname+0x113/0x150 [ 593.271085][T13462] __se_sys_mount+0x2bd/0x480 [ 593.275792][T13462] ? __x64_sys_mount+0xf0/0xf0 [ 593.280622][T13462] ? __kasan_check_write+0x18/0x20 [ 593.285860][T13462] ? fpregs_restore_userregs+0x11d/0x260 [ 593.291572][T13462] __x64_sys_mount+0xc3/0xf0 [ 593.296186][T13462] x64_sys_call+0x2021/0x2ee0 [ 593.300934][T13462] do_syscall_64+0x58/0xf0 [ 593.305386][T13462] ? clear_bhb_loop+0x50/0xa0 [ 593.310100][T13462] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 593.316056][T13462] RIP: 0033:0x7f07b418eec9 [ 593.320490][T13462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.340179][T13462] RSP: 002b:00007f07b509e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 593.348634][T13462] RAX: ffffffffffffffda RBX: 00007f07b43e5fa0 RCX: 00007f07b418eec9 [ 593.356656][T13462] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0 [ 593.364663][T13462] RBP: 00007f07b4211f91 R08: 0000200000000280 R09: 0000000000000000 [ 593.372670][T13462] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000 [ 593.380698][T13462] R13: 00007f07b43e6038 R14: 00007f07b43e5fa0 R15: 00007ffd1616fe48 [ 593.388833][T13462] [ 593.391873][T13462] ---[ end trace 0000000000000000 ]--- [ 593.397464][T13462] incfs: Error allocating mount info. -12 [ 593.403230][T13462] incfs: mount failed -12