last executing test programs: 4m3.478889372s ago: executing program 0 (id=1167): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000200), 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r2, r2, r2) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 4m3.421943818s ago: executing program 0 (id=1170): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) r0 = socket$pptp(0x18, 0x1, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, 0x0, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x3) timer_gettime(r2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="5001000000000000ffffffffffffff7f0300000000000000020100000000000007000000000000000800000000000000090000000600000003000000000000000800000000000000319300000000000005000000000000000900000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0800000005000000000000000400000029fb000009000000c902000001000000020000002a0000000000005b0000000000000000030000000000000004"], 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, r1, r7}, 0xc) 4m3.421174768s ago: executing program 0 (id=1172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 4m2.572689452s ago: executing program 0 (id=1197): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) accept4$vsock_stream(r3, 0x0, 0x0, 0x800) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x0, 0x0, 0x10000}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf65280068fdfa"], 0x28}}, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) fremovexattr(r1, &(0x7f0000000400)=@known='system.posix_acl_default\x00') mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0)) syz_clone3(&(0x7f0000000300)={0x480, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x3}, &(0x7f0000000100)=""/156, 0x9c, &(0x7f00000001c0)=""/202, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) 4m2.489855579s ago: executing program 0 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x181d82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006c02"]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x10002, 0x0, &(0x7f000000e000/0x2000)=nil}) 4m2.218280556s ago: executing program 0 (id=1210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x9d}, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x9d}, 0xc) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) (async) 4m2.141058463s ago: executing program 32 (id=1210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x9d}, 0xc) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x7, 0x100, 0xfffb, 0x1, 0x3, 0xfd, 0x9d}, 0xc) (async) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) (async) 3m12.992346263s ago: executing program 4 (id=2333): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x800}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0x80000d, 0x4, 0x12a2, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80001001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x0, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x4, 0xd50, 0x7, 0x5, 0x2, 0x9, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x8001, 0x4c2336d3, 0x4, 0x0, 0x80000, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x0, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x80000001, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x2, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x3, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0x101, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000340)={0x2, 0x7fff, 0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400"], 0x60}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008"], 0x34}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x7ff}, 0x10}, 0x1, 0x0, 0x0, 0x20041}, 0x4010) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) rename(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f00000021c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xe) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x91, 0x1}, 0xe) 3m12.976160785s ago: executing program 4 (id=2334): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000940)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001180)={{r0}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x9, {0x20, 0x800, 0x5a, 0x5278, 0x3}, [0x4, 0x8000000000000006, 0x5, 0x2]}}, @devid=r2}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8fe69000) r7 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000480)={[0x7, 0xf, 0xf7, 0x2, 0x80000001, 0xfffffffffffffffe, 0x8, 0x7fffffff, 0x9, 0x8, 0x9, 0x7f, 0x4, 0x401, 0x3, 0xcfc], 0x8000000, 0x880}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x2c, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0xc000) sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r9, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x24, 0x3, "4e14cd5a2aa6fb3b1ee5a1c82ee07b141f24e1190ebc40d994d439878b42b26e"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2400c891) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil) fadvise64(r3, 0x8000000000081, 0xc, 0x4) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) 3m12.92243059s ago: executing program 4 (id=2335): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}, {0x6, 0x11, 0xd5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}]}, 0x100}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x9, 0xffffffffffffa075, 0x9, 0x0, 0x0, [{{r0}, 0x101}, {{r4}, 0xfffffffffffff23c}, {{r0}, 0x1}, {{r0}, 0x3}, {{r0}, 0x8000000000000001}, {{r0}, 0x2}, {{r0}, 0x1}, {{r5}, 0xffffffffffffffff}, {{r0}, 0xbfaa}]}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000380)="fa0ecc0700daf423caf955601ac07cc7", 0x10) r6 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) cachestat(r4, &(0x7f00000004c0)={0x2, 0x8}, &(0x7f0000000500), 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000540)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000282}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}}, 0x20) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000006c0)={0xffffffffffffffff, 0x1, 0x0, r7, 0x2}, 0xc) r11 = accept4$tipc(r3, 0x0, &(0x7f0000000700), 0x800) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00'}) socket$inet6(0xa, 0x4, 0x1) r12 = openat$cgroup(r3, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f00000007c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x44041) r15 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r15, 0x8941, &(0x7f0000000980)=@generic={0x0, 0x2, 0x91}) r16 = syz_io_uring_complete(0x0) write$tun(r16, &(0x7f00000009c0)={@void, @val={0x0, 0x0, 0x2, 0x8, 0x4, 0xff}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={0xfe, 0x80, '\x00', 0x23}, @remote, @dev={0xfe, 0x80, '\x00', 0x1a}}}, 0x3e) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000a40)) 3m12.92119635s ago: executing program 4 (id=2336): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket(0x2, 0x3, 0x66) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) r2 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6(0xa, 0x5, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) accept$packet(r4, 0x0, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c2600d, 0x13, r0, 0xa5816000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) socket(0x2, 0x3, 0x66) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) socket$inet6(0xa, 0x5, 0x1ff) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000080)={0x8}) (async) accept$packet(r4, 0x0, &(0x7f0000000040)) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c2600d, 0x13, r0, 0xa5816000) (async) 3m12.920740651s ago: executing program 4 (id=2337): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x80081270, 0x3) unshare(0x62040200) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m3.268027575s ago: executing program 4 (id=2340): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x40) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x66}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x889) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) getuid() arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) 3m3.267885335s ago: executing program 33 (id=2340): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}}, 0x40) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x66}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x889) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) getuid() arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) 48.919588753s ago: executing program 1 (id=5425): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300000009210500000122050009e8800320000000070905020310"], 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) 48.010498882s ago: executing program 2 (id=5447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000100)={0x0, 0x5, 0x0, [0x4, 0x4af, 0x1, 0xfff, 0x3], [0x3, 0x4b0, 0xadc, 0x100000000, 0x2ca, 0x80, 0xa53, 0x9, 0x0, 0x0, 0x4, 0x4, 0xbc, 0xbe2, 0xffffffff7fffffff, 0x5, 0x100000000, 0x9, 0x1, 0x8, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x3, 0x0, 0xc, 0xfff, 0x1, 0x6, 0x100000000, 0x6, 0x6, 0x5, 0xc4, 0x6, 0xa, 0x242, 0x1, 0x2, 0x1ac4e609, 0x2, 0x3, 0x26e7, 0xe1a, 0xb, 0x7, 0xfd8, 0x2, 0x1, 0x3d, 0x10001, 0x400, 0x6, 0xe0, 0xc, 0x687, 0x1b28, 0x100, 0x3, 0x6, 0xf2, 0x7, 0x9, 0xf4, 0x2, 0x40, 0x401, 0xfff, 0x5, 0x6, 0x3, 0x7ff, 0x6, 0x7f, 0x7, 0xffff, 0x40, 0xff, 0x6, 0x1, 0x100000000, 0x0, 0x368b, 0x267, 0x1d22334d, 0x6, 0x0, 0x5, 0x9, 0xae2, 0xc421, 0xc9, 0x457c, 0xffffffffffffffff, 0x2, 0xba, 0xb, 0x1, 0xad0, 0x800, 0x5, 0xfffffffffffffff2, 0x8, 0xfffffffffffffff7, 0x1, 0x1, 0x9, 0x32c0000000, 0x400, 0xb, 0xe, 0x2, 0x10001, 0xc7, 0x66, 0x2b9d, 0x8, 0x100000000, 0x2, 0x100000001, 0x8]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000540)={r1, 0x800, 0x2}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 48.008106032s ago: executing program 2 (id=5448): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x3e, 0x8002) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000013c00)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/mem_sleep', 0x8002, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0xffffffffffffff00]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) fstat(r1, &(0x7f0000000240)) 47.928221399s ago: executing program 2 (id=5451): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x343800, 0x81) (async, rerun: 64) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x103a02, 0x1e0) (rerun: 64) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x18, 0x3, 0x3a) (async) close_range(r2, 0xffffffffffffffff, 0x0) 47.892204113s ago: executing program 2 (id=5454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000000)={0x2, 0x80, 0x9f8, 0x753}, 0x10) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000001000)=0x7f, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000040)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000180)='./control\x00', 0xa4000960) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg$unix(r4, 0x0, 0x40010100) setsockopt$inet6_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x7, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x11, r9, 0xf648e000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) 47.672648335s ago: executing program 1 (id=5467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) prctl$PR_GET_SECUREBITS(0x1b) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 47.460808275s ago: executing program 1 (id=5468): socket$inet6(0xa, 0x80002, 0x0) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0xfff, @remote, 0x7}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0xfff, @remote, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x0, 0x2, 0x2, 0x4}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019800)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) setsockopt$inet6_udp_int(r0, 0x88, 0x1, &(0x7f0000000080), 0x4) close(0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0x8008770b, 0x2) 47.460073185s ago: executing program 1 (id=5469): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x21) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) getsockname$packet(r4, 0x0, &(0x7f0000000040)) r5 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b') mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x8004, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4]) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{0x8c, 0x8, 0x5, 0x1ff}, {0x6, 0xc, 0x9, 0x8}, {0x5, 0xc, 0x8f, 0x9}, {0x4, 0x6, 0x0, 0x1}, {0x7, 0xdf, 0xc4, 0x9153}, {0x3, 0xbf, 0x0, 0x8}, {0x7d11, 0x8, 0x2, 0xfffff801}, {0xb5, 0x9, 0xff, 0x726}]}) mknodat(0xffffffffffffffff, 0x0, 0xe10a, 0x1) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x10001, &(0x7f0000000240)="d90100226192262161") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e3, 0x4}) getsockopt$inet6_tcp_buf(r7, 0x6, 0x38, &(0x7f0000000600)=""/139, &(0x7f0000000440)=0x8b) 47.435959418s ago: executing program 1 (id=5470): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async, rerun: 32) r6 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28c}) (async) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000020000040"]) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d61ccb61c0a02014a9a026d3cdfa218528348dc9e4889cda12744a119fb349ce502cded4660c1df951572414d4d788cdf1be3c5e255262e3627eb8fcee1d6c3a32e096b496532f8166b13bb490b60f3fbb7c07642ddf6494d7c8ea5b3d0cf7a6f43566086c070c72d817d4707c68538e09a8f6d8ccab8755fe2f96ec7fc4e14832e6d39faa9c81447b768811a933e48fdd78190df30b6cd304961f1", @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000005,k']) (async) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) write$P9_RRENAMEAT(r2, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) (async, rerun: 32) r8 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) (rerun: 32) sendfile(r8, r7, 0x0, 0xffffffff) 47.280004243s ago: executing program 1 (id=5473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001cc0), 0x4ddf, 0x80000) ppoll(&(0x7f0000001d40)=[{r1, 0x9483}], 0x1, &(0x7f0000001d80), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x1}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x2) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.251771576s ago: executing program 34 (id=5473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001cc0), 0x4ddf, 0x80000) ppoll(&(0x7f0000001d40)=[{r1, 0x9483}], 0x1, &(0x7f0000001d80), 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r7, &(0x7f0000000180)={0x1f, 0x6, @none, 0x0, 0x1}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, &(0x7f0000000000)=0x3, &(0x7f0000000080)=0x2) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 47.026762868s ago: executing program 2 (id=5475): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303006c3fdffffffffffffffa9dd321d3034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x44, &(0x7f00000001c0)=ANY=[]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x1000) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x2, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x2, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0xfffff807, 0x0, 0x5, 0x48, 0x0, 0x2ab, 0x4, 0x7, 0x101, 0x3c5b, 0x7fff, 0xa, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x7, 0x3, 0x2, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x80092aa, 0x4, 0x1, 0x30000000, 0x5, 0xdee9, 0x7, 0x3, 0x8, 0x800004, 0x1, 0x40], [0x4, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x4f6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x40, 0xfffffffc, 0x100003, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x40, 0x3, 0x0, 0xfffffffe, 0x0, 0x4, 0x680, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x7, 0x8cd, 0x5f31, 0x4, 0x900000, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x5, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400005], [0x6, 0x3, 0x80000400, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x400, 0x800001, 0xb, 0x2000005, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x6, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x440, 0x80, 0x3, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0x3f, 0x10002, 0x40e, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x6, 0x1d, 0x7, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x81, 0xbb31, 0x203, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x71, 0x1003, 0x101, 0x10000, 0x6, 0x4, 0xffff, 0xe620, 0x2, 0x1, 0x1, 0x2, 0x14c, 0x9, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc6, 0xee1, 0x0, 0x1, 0x3, 0x40000004, 0x100, 0x20009602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r6, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef69, 0x4}) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1800000042000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="239e952f4125559b17f09801d74d807b31aad5d6a1e98edbd77d62ce5b181487b13d86f0ad6a8dd0e4cfa9f4976dd61d532c734428a019396fb81419a35d16978953d623c290b991ca795ae10f136e6a1049d2e5a671f008215738111144dd40d41ab99fb2fdcbcba159f0adc87f7ddddecc34aa23b30d83de20cf51b344a8752d9eb648c3bf998ef4201b3c5c05e12b3cbb92413a898aab98a1fa6c51a4eb2209682f93d44251f9dc0e3d9880199060072d78a0c625340dfad85deb1536746a13401e45a84b2ed55bdbf5f8f3032af0e59489a75b0ebdcf"], 0x18}, {&(0x7f0000000880)=ANY=[@ANYBLOB="20000000122508004e4537bc4da76912bd370900"/32], 0x20}], 0x2}, 0x800) 46.488535151s ago: executing program 3 (id=5484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = getpid() read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1}) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x6000, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000240)="0979e127b8b3891be8dd397c67fc82251cecd27196a59beb85cb7450266767e735d2f6932155ed86f508fe87dbb49fc69db4458cbb2113dbf9f32c7a53eed2206e041bb9eee97a5798b41527404ddeff"}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x84000, 0x100}, 0x18) renameat(r4, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 46.480374281s ago: executing program 3 (id=5485): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x81, 0x200c0) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r1, 0x402}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x7]}, 0x8) (async) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r1, 0x402}], 0x2, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)={[0x7]}, 0x8) listen(r1, 0xa) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x4, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0xe, 0xc, "7970c9838763622b0305"}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000884}, 0x4008000) sendmsg$AUDIT_USER(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, 0x3ed, 0x400, 0x70bd29, 0x25dfdbfd, "763fc38831369d4a5e31684bfa4362f8c449dffe0d532e0bc5c06b3dac2c8864a053cade0a5985a82e7b6b6f63a8133e90c3d9b2f09838faf6189ad37b72079cb5aec42ec0a0a9ef87040d942f879c13b135f4b059c7c94b680a42a72f441eb1d541a15c1fbc2b9e306a517d4886cef3c5a0e22cc4395226e3ea97ae16688d426a02f2f607f077ece023120062c5dc3e3d5a8d2a3c", ["", "", ""]}, 0xa8}, 0x1, 0x0, 0x0, 0x50}, 0x4014) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x802, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xffffffffffff0bd4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) pread64(r0, &(0x7f0000000580)=""/219, 0xdb, 0x0) (async) pread64(r0, &(0x7f0000000580)=""/219, 0xdb, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0), r1) sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xe2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x8405, 0x1, 0x7]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c80c}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl2\x00', r7, 0x4, 0x7, 0x0, 0xf, 0x22, @mcast2, @mcast2, 0x700, 0x19, 0x4c, 0x8001}}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000900)={'wpan4\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r1) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x1005) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x1005) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(&(0x7f0000000bc0)=@rnullb, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='bfs\x00', 0x8008, &(0x7f0000000c80)='+\\\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0}, &(0x7f0000000d00)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x9, 0x4e21, 0x401, 0xa, 0x0, 0xa0, 0x2, r8, r11}, {0x1, 0x2, 0x8, 0x2, 0x7fffffffffffffff, 0x5, 0x9, 0x9}, {0x0, 0x9, 0x0, 0xa15c}, 0x9, 0x6e6bbe, 0x2, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xff}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xc0, 0x80, 0x400, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x9, 0x4e21, 0x401, 0xa, 0x0, 0xa0, 0x2, r8, r11}, {0x1, 0x2, 0x8, 0x2, 0x7fffffffffffffff, 0x5, 0x9, 0x9}, {0x0, 0x9, 0x0, 0xa15c}, 0x9, 0x6e6bbe, 0x2, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0xff}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xc0, 0x80, 0x400, 0x4}}, 0xe8) cachestat(r5, &(0x7f0000000e40)={0xfff, 0x9}, &(0x7f0000000e80), 0x0) (async) cachestat(r5, &(0x7f0000000e40)={0xfff, 0x9}, &(0x7f0000000e80), 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r1) sendmsg$NL80211_CMD_DEL_PMK(r12, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x820000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r13, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000000) connect$packet(r1, &(0x7f0000001000)={0x11, 0xec, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) (async) connect$packet(r1, &(0x7f0000001000)={0x11, 0xec, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14) 46.379623801s ago: executing program 3 (id=5487): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbff, {{{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x4e20, 0x7, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x87}, {@in=@multicast1, 0x4d2, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, {0x0, 0x5e8, 0xfffffffffffffffa, 0x6, 0x8, 0x100, 0x1, 0x800}, {0x68a031d9, 0x81, 0x8001, 0xf07c}, {0x2, 0xbba, 0x1}, 0x70bd29, 0x0, 0x2, 0x3, 0xf2, 0x1}, 0x9, 0x2}}, 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0xa5bd550bd30393cf, &(0x7f0000000140)={0x0, 0x0, 0x8c, "88481c9520c21285bb3a5bc70c2e79eee71a41e01da642f6e4abac880e3c971bbce16ef832fc930e72c5b076447e6e5693b34d5570d72ae55b1b8834d42385ca079639aae4b3a9cd3f567062a2217f45ee7cd6100cde64a27cbae192809c6eb5ea9af4a3e9210c6dfdc710e2f9f9ca5d92ca4a2ce5a12185ee8feade85903cb6dff73f3ba2ca5b231f5b51d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x1485, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0]) (async) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x180000) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0xfffffff9, 0x4) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000100)=0xf, 0x4) 46.373637652s ago: executing program 5 (id=5488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) capget(&(0x7f0000002040)={0x19980330}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffbd) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r4, &(0x7f0000016440)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 46.352094034s ago: executing program 5 (id=5489): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab2a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x8, 0xa9}, {0x6, 0x24, 0x1a, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x79, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x0, 0x23}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x9, 0x9}}}}}}}]}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup(r3) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x0, 0x0) (async) keyctl$revoke(0x3, 0x0) (async) keyctl$read(0xb, 0x0, 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2482, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x80, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xab2a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xfff, 0x8, 0xa9}, {0x6, 0x24, 0x1a, 0x4, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x79, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x7, 0x0, 0x23}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x9, 0x9}}}}}}}]}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) dup(r3) (async) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@loopback, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc}, {0x1, 0xf, 0x40000000, 0x4, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x7, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 46.334252016s ago: executing program 5 (id=5490): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x71, r4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) 46.268785452s ago: executing program 5 (id=5491): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') keyctl$set_reqkey_keyring(0xe, 0x0) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x85b81000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='!(+.\x00') (async) keyctl$set_reqkey_keyring(0xe, 0x0) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x85b81000) (async) 46.268348922s ago: executing program 5 (id=5492): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000200)={{&(0x7f0000000000/0xf000)=nil, 0xf000}, 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) munlockall() r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = dup(r4) write$P9_RVERSION(r5, 0x0, 0x0) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000002040)="0cbeeaf0", 0x4}], 0x1, 0x3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @empty, @local, @local, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}, 0x46) mmap$usbfs(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7000001, 0x2010, r3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000240)={'ip6tnl0\x00', 0xc4}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000040)}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = gettid() sched_rr_get_interval(r9, &(0x7f0000000000)) 45.839740754s ago: executing program 3 (id=5500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x737f0c77864bf3b9, 0x408) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0xff, @multicast2, 0x4e23, 0x1, 'lc\x00', 0x20, 0xfffffff7, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x2, 0x7, 0x9}}, 0x44) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 45.826965296s ago: executing program 3 (id=5501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x1fd) fsconfig$FSCONFIG_SET_FD(r1, 0x5, 0x0, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x1000000003}) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffff8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x6, 0x4, 0x2}}, 0x61) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0x23, 0x1, 0x8, 0x81, 0x0, 0x7, 0x0}) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) (async) fcntl$lock(r7, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1fd}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000100)={0x0, 0xe, 0x78, "170b0de472e907122049446b806a804de50fd222ec4b7773302b6c5c7bbef42f6a1d366e84d1d2a182a8667c2fc25cc64a86519115afa579e109b55414b5d876dc14ffd53dc4440ba98b3e70d3fe7b699e17f9137c6fda4d83f68152c5bb90cefd43256e4453e582661c8c54438b10a7505df72e50f9a9a2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x81, 0x1, "fb"}, &(0x7f0000000280)={0x20, 0x82, 0x1, "e3"}, &(0x7f00000002c0)={0x20, 0x83, 0x3, "298103"}, &(0x7f00000000c0)={0x20, 0x84, 0x3, "2db849"}, &(0x7f0000000340)={0x20, 0x85, 0x3, '!.C'}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 45.692704679s ago: executing program 6 (id=5502): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4, 0x400, 0xd, 0x6, 0x5, 0x80000001, 0x19, 0x80000000, 0x0, 0xffffffff, 0x3, 0xfffffffffffffffd, 0x4, 0x8, 0x9, 0xffff], 0x0, 0x20000}) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 45.691107469s ago: executing program 6 (id=5503): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="880917b8e4c6034a4a23fbebdd0ad8f36fc06eb193d8edde5abf0bc334643ca43794099bf88c169ee91d1315295139bb68d58261f043212931288f456ac8794b8dcdb7cc38150480372abedcbf4c56f908e399eb0ef9a9b196adf5477095d9742264c71ed6a23af274a85d5c7a87209392c670efb0de7fb1dd774cacf8fddfa9012d0548e667cdb768317e8bd10cff72a0e66fcf3b8aa401892412772144f902203c3aba4b876a56901946e3341d461a352c5268d3d8af90bd9630df47d4c86be55080f648fd1f3f538fd1684d9bfd19b1cd0b023bdbe1fc3fffd2f95ba1b2c89cf316338dfd", 0xe6}, {&(0x7f0000000440)="da7415d45277aaa9d9532946cb44cb3a1ed3d31a66f10539877372ff9eca9bcaeef117a7b3696cf05d5b4bb4c968ee9b8b815279de9af17bd57bb0ed81a8883848d79b95bc7bceb902253c0a09d74c237a92549d1a7615e9eb42efc313de6d66a5c321ffc4f5db0963f536e81138fa89b8192060d0bc07d7fedbe0415ef6b42eaf7a44b324513384ebf39a35ab606c53d14ddf502b2e997325f5ed90f07e2cb477ce6a41e574f2480bdaa13ddafbbaccc8326bbd858727e732f1c776a469e9789ffe", 0xc2}], 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_MASTER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x541b6104d5f326ad}, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000040)=0xfffffc00, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="3400000000000000000000000700000007140d"], 0x38}}], 0x1, 0x46000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000021c0)={0x4c, 0x0, &(0x7f0000001fc0)=[@transaction_sg={0x400c6313, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 45.690219779s ago: executing program 6 (id=5504): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) (async) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff8, 0x3, 0x2, 0x8, 0x2}) 45.67402877s ago: executing program 6 (id=5505): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000040)=[@decrefs={0x400c6314}, @decrefs], 0x0, 0x0, 0x0}) 45.643420213s ago: executing program 6 (id=5506): openat$rnullb(0xffffffffffffff9c, &(0x7f00000003c0), 0xadc2, 0x0) r0 = getpid() creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) socket$packet(0x11, 0x2, 0x300) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x15d7cc7b, 0x5, 0xf, 0x8, 0x1a, "93fc000000010000000000002000"}) write$UHID_INPUT(r2, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) socket(0x2, 0x3, 0xff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xe8, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x95, 0x3, "942b2539016e585abd3f82eaea1968d67a2c8a6a906fc2ec31fa108c43cac3f4efb533a8d52e36ac96d288634e449ada4c21fefad5391d96cbfeb5daf1c4ca740e532038f3561e6057c13b4f26958f144c49ec837a43ddae874e89cbca9599b125913e2f5080b898c48104790a694f08589550ac2ff4a927825e94e4585a00da6d0fec3832b8f74a0ba50d5091aefd3ef5"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2a8}, @TIPC_NLA_NODE_ID={0x17, 0x3, "615c940d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf21}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0xfffffffffffffea8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf257600000c02580021000000000000000c0058005300"/50], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x10) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x800, 0x18a) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40106614, &(0x7f0000000140)) syz_pidfd_open(r0, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x410000) ioctl$USERFAULTFD_IOC_NEW(r9, 0xaa00) ioctl$UFFDIO_API(r9, 0xff03, 0x0) 44.296518905s ago: executing program 3 (id=5507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000080)="0f7ac5db65302696925468d33ff6a9caf57aa0dc5b966cf991c4564e35af055cbef6c9cf92f80611d7bf1dc232d52e1e71249f25a53383efe359142b8fe88c8f755822700b35f88d", 0x48}, {&(0x7f0000000200)="3c86909b9ce310b35ee4849586f512197ff575b2c53e10b9930c18304c35c71812c2a235097859159c9861ed491722aa0d360623941696ad09a2ef6fe6854cb9c98db4f54624d079ba447a067d6b40bf628e6f17e387cf97982e9ff13a020d0579d1e56a435e1dcef8b4675a74c6f48418074f6fde959a61c07a626fc3892a6f089c57bbdf2fda675afb42605482a42b4f95fbd3c699b06299ff1ad11c7a5e646fb84b0c0de8c8cd06739bd938a74d7d53b960673f413b", 0xb7}, {&(0x7f0000000140)="4dae17be2395232850725a17d06e", 0xe}, {&(0x7f0000000180)="1c3690b089eb9e6e613a4990478c55fa88a4ba19900d7d972cb4af41cdd3244470fa8a997fd37b3b78b945", 0x2b}, {&(0x7f00000002c0)="2b5951ae94b077aeb74a2fe551bfb7420109ffb8b09f3c348b9a5a881bbba4e90f13b9b00c736a666586c701ade17e501a216c2fce9c447cef211e07d1a953de28a3df41765100956b071eea57e708d9cc355fbcc25c0dd7352e05757937101b20b5e7327b1364445b5e18dc1df853de8b2b17e771d993bd9ad16157111647a2afb8f2ec46be408a4cb0be", 0x8b}, {&(0x7f0000000380)="3c3ed32fe4f4bad21efad7cccfc6717c69eecd9a04e5aa771529e097a9997283e8ac7e73d92b5c89ebfce9a87b43d98b805fa383873b87ea707f2cc990fe176364ca9e72215856ddf6588c99d50e56a7dab5a745f7cdaa8b28736488df1d3ab122b0b8c7d50d", 0x66}, {&(0x7f0000000580)="9c96c3e4ac5006307f1a89b959d6fef5ce8467172f8c9198bf5c06ba16ad01d7bc4899923e60169a1d7327a0910c19737b2b35645003bb9800807c0d4b7463c19f166ae285f777b11148213243eeeb5f76511e3f902c71cff811ab93c39a8a7d8f7df79694437a58130ec5c2727279999367d1cbe9862c", 0x77}], 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="600000000000000029000000040000000408000000000000000100072800000002081c010005000000000000007e356fd74500000009000000000000006df9ffffffffffff01020000040181c20400000006050000000000"], 0x60}, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32) 40.035599342s ago: executing program 6 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc000000010a0500000000000000000002000000cf947b886a37fc06000600e28e00001c000600adbc24a9a2267d64db4ed2af0d2cfd9cf6ccdd8a8072407c6a00060093cfcdd92b4895fef8749f463b880a9272b9563f70d5a72c03971cafdce0a133ff2d392cc4c47d22a8efe4a33e29c5b47cb6cbb28bf9312fc772164206ab76baca8eae69e23ba64c25279262a26a6d82803aae4834da40dd21b0ebe214140dda6037983f0ada00000900010073797a30000000000900010073"], 0xbc}, 0x1, 0x0, 0x0, 0x400040c4}, 0x80c4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000200)=""/121, 0x79}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9) 39.809038824s ago: executing program 5 (id=5509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x1409830, &(0x7f0000000140)='.\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = eventfd(0x7) lseek(r1, 0x6, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 38.188268353s ago: executing program 2 (id=5510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) r0 = socket$netlink(0x10, 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a8, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) syncfs(r0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$sock(r5, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000800) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 26.511642546s ago: executing program 35 (id=5507): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x3, @loopback, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000080)="0f7ac5db65302696925468d33ff6a9caf57aa0dc5b966cf991c4564e35af055cbef6c9cf92f80611d7bf1dc232d52e1e71249f25a53383efe359142b8fe88c8f755822700b35f88d", 0x48}, {&(0x7f0000000200)="3c86909b9ce310b35ee4849586f512197ff575b2c53e10b9930c18304c35c71812c2a235097859159c9861ed491722aa0d360623941696ad09a2ef6fe6854cb9c98db4f54624d079ba447a067d6b40bf628e6f17e387cf97982e9ff13a020d0579d1e56a435e1dcef8b4675a74c6f48418074f6fde959a61c07a626fc3892a6f089c57bbdf2fda675afb42605482a42b4f95fbd3c699b06299ff1ad11c7a5e646fb84b0c0de8c8cd06739bd938a74d7d53b960673f413b", 0xb7}, {&(0x7f0000000140)="4dae17be2395232850725a17d06e", 0xe}, {&(0x7f0000000180)="1c3690b089eb9e6e613a4990478c55fa88a4ba19900d7d972cb4af41cdd3244470fa8a997fd37b3b78b945", 0x2b}, {&(0x7f00000002c0)="2b5951ae94b077aeb74a2fe551bfb7420109ffb8b09f3c348b9a5a881bbba4e90f13b9b00c736a666586c701ade17e501a216c2fce9c447cef211e07d1a953de28a3df41765100956b071eea57e708d9cc355fbcc25c0dd7352e05757937101b20b5e7327b1364445b5e18dc1df853de8b2b17e771d993bd9ad16157111647a2afb8f2ec46be408a4cb0be", 0x8b}, {&(0x7f0000000380)="3c3ed32fe4f4bad21efad7cccfc6717c69eecd9a04e5aa771529e097a9997283e8ac7e73d92b5c89ebfce9a87b43d98b805fa383873b87ea707f2cc990fe176364ca9e72215856ddf6588c99d50e56a7dab5a745f7cdaa8b28736488df1d3ab122b0b8c7d50d", 0x66}, {&(0x7f0000000580)="9c96c3e4ac5006307f1a89b959d6fef5ce8467172f8c9198bf5c06ba16ad01d7bc4899923e60169a1d7327a0910c19737b2b35645003bb9800807c0d4b7463c19f166ae285f777b11148213243eeeb5f76511e3f902c71cff811ab93c39a8a7d8f7df79694437a58130ec5c2727279999367d1cbe9862c", 0x77}], 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="600000000000000029000000040000000408000000000000000100072800000002081c010005000000000000007e356fd74500000009000000000000006df9ffffffffffff01020000040181c20400000006050000000000"], 0x60}, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 32) 11.402455984s ago: executing program 36 (id=5509): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='proc\x00', 0x1409830, &(0x7f0000000140)='.\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r1 = eventfd(0x7) lseek(r1, 0x6, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 0s ago: executing program 37 (id=5508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc000000010a0500000000000000000002000000cf947b886a37fc06000600e28e00001c000600adbc24a9a2267d64db4ed2af0d2cfd9cf6ccdd8a8072407c6a00060093cfcdd92b4895fef8749f463b880a9272b9563f70d5a72c03971cafdce0a133ff2d392cc4c47d22a8efe4a33e29c5b47cb6cbb28bf9312fc772164206ab76baca8eae69e23ba64c25279262a26a6d82803aae4834da40dd21b0ebe214140dda6037983f0ada00000900010073797a30000000000900010073"], 0xbc}, 0x1, 0x0, 0x0, 0x400040c4}, 0x80c4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000200)=""/121, 0x79}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9) kernel console output (not intermixed with test programs): 230.201101][T12294] overlayfs: failed to clone upperpath [ 230.792427][ T36] audit: type=1326 audit(2000000009.790:21591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.816681][ T36] audit: type=1326 audit(2000000009.790:21592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.841735][ T36] audit: type=1326 audit(2000000009.790:21593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.865792][ T36] audit: type=1326 audit(2000000009.790:21594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.889930][ T36] audit: type=1326 audit(2000000009.790:21595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.913998][ T36] audit: type=1326 audit(2000000009.790:21596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.927234][T12342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4063'. [ 230.954843][ T36] audit: type=1326 audit(2000000009.790:21597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 230.965293][T12342] cgroup: noprefix used incorrectly [ 230.984121][ T36] audit: type=1326 audit(2000000009.790:21598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 231.009198][ T36] audit: type=1326 audit(2000000009.790:21599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 231.033367][ T36] audit: type=1326 audit(2000000009.790:21600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12330 comm="syz.1.4059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 232.246398][T12400] fuse: Bad value for 'fd' [ 232.296691][T12405] 9pnet_fd: Insufficient options for proto=fd [ 232.443365][T12429] overlayfs: failed to clone upperpath [ 232.780048][T12438] fuse: Bad value for 'group_id' [ 232.785085][T12438] fuse: Bad value for 'group_id' [ 232.879329][T12445] overlay: filesystem on ./bus is read-only [ 232.886480][T12446] overlay: filesystem on ./bus is read-only [ 233.258826][T12451] fuse: Bad value for 'user_id' [ 233.263795][T12451] fuse: Bad value for 'user_id' [ 233.270324][T12451] overlay: ./file0 is not a directory [ 233.300303][T12455] overlayfs: failed to clone upperpath [ 233.327091][T12459] overlayfs: failed to clone upperpath [ 233.411537][T12467] No source specified [ 233.856034][T12490] tmpfs: Unknown parameter 'indo64' [ 233.895051][T12492] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 234.103040][T12499] fuse: Bad value for 'fd' [ 234.135680][T12501] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4121'. [ 234.387885][T12529] overlayfs: failed to clone upperpath [ 234.395033][T12529] netlink: 'syz.5.4132': attribute type 11 has an invalid length. [ 235.042768][T12563] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 235.457226][T12620] sit0: entered promiscuous mode [ 235.464180][T12620] netlink: 'syz.1.4166': attribute type 1 has an invalid length. [ 235.472332][T12620] netlink: 'syz.1.4166': attribute type 3 has an invalid length. [ 235.516976][T12631] 9pnet_fd: Insufficient options for proto=fd [ 235.524029][T12633] netlink: 182 bytes leftover after parsing attributes in process `syz.1.4171'. [ 236.394302][T12686] 9pnet_fd: Insufficient options for proto=fd [ 236.515201][T12696] overlayfs: failed to clone lowerpath [ 236.521433][T12696] overlayfs: failed to clone lowerpath [ 236.550623][T12700] overlayfs: failed to clone lowerpath [ 236.599211][T12704] SELinux: Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped). [ 236.611429][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 236.611451][ T36] audit: type=1400 audit(2000000015.600:21621): avc: denied { relabelto } for pid=12703 comm="syz.3.4193" name="memfd:" dev="tmpfs" ino=1246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:wtmp_t:s0" [ 236.644186][ T36] audit: type=1400 audit(2000000015.600:21622): avc: denied { associate } for pid=12703 comm="syz.3.4193" name="memfd:" dev="tmpfs" ino=1246 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:wtmp_t:s0" [ 236.964152][T12733] overlayfs: failed to clone lowerpath [ 237.206271][T12743] /dev/rnullb0: Can't lookup blockdev [ 238.043931][T12781] overlayfs: failed to clone upperpath [ 238.061955][T12783] GUP no longer grows the stack in syz.1.4224 (12783): 200000005000-200000008000 (200000004000) [ 238.072712][T12783] CPU: 0 UID: 0 PID: 12783 Comm: syz.1.4224 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 238.072749][T12783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 238.072765][T12783] Call Trace: [ 238.072775][T12783] [ 238.072784][T12783] __dump_stack+0x21/0x30 [ 238.072845][T12783] dump_stack_lvl+0x10c/0x190 [ 238.072871][T12783] ? __cfi_dump_stack_lvl+0x10/0x10 [ 238.072893][T12783] ? futex_lock_pi_atomic+0xdd/0xc70 [ 238.072914][T12783] dump_stack+0x19/0x20 [ 238.072935][T12783] fixup_user_fault+0x63d/0x6d0 [ 238.072956][T12783] fault_in_user_writeable+0x76/0xe0 [ 238.072972][T12783] futex_lock_pi+0x258/0xa10 [ 238.072990][T12783] ? futex_unqueue+0x136/0x160 [ 238.073006][T12783] ? __cfi_futex_lock_pi+0x10/0x10 [ 238.073026][T12783] ? __cfi_futex_wake_mark+0x10/0x10 [ 238.073050][T12783] ? futex_setup_timer+0xb4/0xd0 [ 238.073065][T12783] ? __cfi_futex_wake_mark+0x10/0x10 [ 238.073087][T12783] ? do_timer_create+0xe92/0x1210 [ 238.073112][T12783] do_futex+0x25c/0x500 [ 238.073128][T12783] ? __cfi_do_futex+0x10/0x10 [ 238.073146][T12783] __se_sys_futex+0x28f/0x300 [ 238.073163][T12783] ? __x64_sys_futex+0x110/0x110 [ 238.073180][T12783] ? __cfi___x64_sys_timer_create+0x10/0x10 [ 238.073202][T12783] ? __kasan_check_write+0x18/0x20 [ 238.073228][T12783] __x64_sys_futex+0xe9/0x110 [ 238.073245][T12783] x64_sys_call+0x227f/0x2ee0 [ 238.073269][T12783] do_syscall_64+0x58/0xf0 [ 238.073299][T12783] ? clear_bhb_loop+0x50/0xa0 [ 238.073317][T12783] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 238.073335][T12783] RIP: 0033:0x7fc6a558efc9 [ 238.073353][T12783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.073367][T12783] RSP: 002b:00007fc6a64ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 238.073388][T12783] RAX: ffffffffffffffda RBX: 00007fc6a57e5fa0 RCX: 00007fc6a558efc9 [ 238.073400][T12783] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 238.073410][T12783] RBP: 00007fc6a5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 238.073420][T12783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.073430][T12783] R13: 00007fc6a57e6038 R14: 00007fc6a57e5fa0 R15: 00007ffcf93ed438 [ 238.073444][T12783] [ 238.431731][ T36] audit: type=1400 audit(2000000017.430:21623): avc: denied { nlmsg_read } for pid=12815 comm="syz.3.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 238.432323][T12816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12816 comm=syz.3.4237 [ 238.558472][T12838] tmpfs: Bad value for 'huge' [ 238.598255][T12845] fuse: Bad value for 'user_id' [ 238.610528][T12845] fuse: Bad value for 'user_id' [ 238.622101][T12850] netlink: 'syz.2.4247': attribute type 4 has an invalid length. [ 238.633481][T12850] netlink: 'syz.2.4247': attribute type 4 has an invalid length. [ 238.703588][T12865] 9pnet: p9_errstr2errno: server reported unknown error @cF S+Jx@PQ[v5o [ 238.831429][T12887] overlayfs: failed to resolve './file1': -2 [ 238.969424][T12899] overlayfs: failed to clone lowerpath [ 238.976720][T12899] overlayfs: failed to clone lowerpath [ 240.222205][T12939] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 240.231189][T12939] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 240.240173][T12939] overlayfs: missing 'lowerdir' [ 240.716609][T12963] 9pnet_fd: Insufficient options for proto=fd [ 241.267587][ T36] audit: type=1400 audit(2000000020.260:21624): avc: denied { relabelto } for pid=12989 comm="syz.5.4296" name="file0" dev="tmpfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.273819][T12990] overlayfs: failed to clone lowerpath [ 241.294408][ T36] audit: type=1400 audit(2000000020.270:21625): avc: denied { mounton } for pid=12989 comm="syz.5.4296" path="/574/file0" dev="tmpfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.329532][T12990] overlayfs: failed to clone lowerpath [ 241.841824][ T36] audit: type=1400 audit(2000000020.840:21626): avc: denied { rmdir } for pid=7278 comm="syz-executor" name="file0" dev="tmpfs" ino=3163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 241.998343][T13042] overlayfs: failed to clone upperpath [ 242.004168][T13041] overlayfs: failed to clone upperpath [ 242.010448][ T36] audit: type=1326 audit(2000000021.000:21627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13040 comm="syz.5.4316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40e38efc9 code=0x0 [ 242.033518][ T36] audit: type=1326 audit(2000000021.010:21628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13040 comm="syz.5.4316" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd40e38efc9 code=0x0 [ 242.397584][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4326'. [ 242.475024][T13083] cgroup2: Unknown parameter 'pcr' [ 242.819022][T13098] tipc: Enabling of bearer rejected, failed to enable media [ 242.864055][T13104] overlayfs: failed to clone upperpath [ 242.923849][T13117] 9pnet_fd: Insufficient options for proto=fd [ 243.425310][T13146] /dev/rnullb0: Can't lookup blockdev [ 243.706374][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4365'. [ 243.756812][T13165] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.763975][T13165] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.771513][T13188] cgroup: Bad value for 'name' [ 243.771717][T13165] bridge_slave_0: entered allmulticast mode [ 243.778701][ T36] audit: type=1400 audit(2000000022.770:21629): avc: denied { watch } for pid=13187 comm="syz.2.4370" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 243.783201][T13165] bridge_slave_0: entered promiscuous mode [ 243.810554][T13165] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.817615][T13165] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.825007][T13165] bridge_slave_1: entered allmulticast mode [ 243.831781][T13165] bridge_slave_1: entered promiscuous mode [ 243.927702][ T36] audit: type=1400 audit(2000000022.920:21630): avc: denied { create } for pid=13205 comm="syz.2.4376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 244.039823][T13165] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.046922][T13165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.054286][T13165] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.061375][T13165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.090806][ T728] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.098308][ T728] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.115900][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.123039][ T727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.134374][ T728] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.141507][ T728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.182568][T13241] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4384'. [ 244.206393][T13165] veth0_vlan: entered promiscuous mode [ 244.218326][T13165] veth1_macvtap: entered promiscuous mode [ 244.260016][T13244] random: crng reseeded on system resumption [ 244.529377][ T4250] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 244.679264][ T4250] usb 6-1: Using ep0 maxpacket: 32 [ 244.697296][ T4250] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.722293][ T4250] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.731896][T13270] netlink: 'syz.2.4394': attribute type 27 has an invalid length. [ 244.739864][ T4250] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.752260][ T4250] usb 6-1: Product: syz [ 244.759402][ T4250] usb 6-1: Manufacturer: syz [ 244.764320][ T4250] usb 6-1: SerialNumber: syz [ 244.772641][ T4250] usb 6-1: config 0 descriptor?? [ 244.778058][T13270] veth0_vlan: left promiscuous mode [ 244.784544][T13270] veth0_vlan: entered promiscuous mode [ 244.790999][ T4250] smsc75xx v1.0.0 [ 244.794702][ T4250] smsc75xx 6-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 244.810226][T13285] netlink: 'syz.3.4396': attribute type 16 has an invalid length. [ 244.818442][ T4250] smsc75xx 6-1:0.0: probe with driver smsc75xx failed with error -22 [ 244.826906][T13285] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4396'. [ 244.979232][ T727] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.986875][ T727] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 244.992169][ T31] usb 6-1: USB disconnect, device number 3 [ 245.019243][ T4250] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 245.112270][ T728] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.120020][ T728] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.139104][ T66] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.169070][ T4250] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 245.204681][ T36] audit: type=1400 audit(2000000024.201:21631): avc: denied { remount } for pid=13323 comm="syz.1.4414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 245.275790][T13334] netlink: 57 bytes leftover after parsing attributes in process `syz.1.4418'. [ 245.458985][ T4250] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 245.708898][ T4250] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 245.768719][ T66] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 245.920388][ T66] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.930841][ T66] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.941453][ T66] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.951424][ T66] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.959868][ T66] usb 6-1: SerialNumber: syz [ 245.989178][T13378] bpf: Bad value for 'uid' [ 246.166807][ T36] audit: type=1400 audit(2000000025.161:21632): avc: denied { map } for pid=13361 comm="syz.5.4427" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 246.166920][T13362] __vm_enough_memory: pid: 13362, comm: syz.5.4427, bytes: 18014402804453376 not enough memory for the allocation [ 246.190531][ T31] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.211074][ T66] usb 6-1: 0:2 : does not exist [ 246.216062][ T66] usb 6-1: unit 5: unexpected type 0x0a [ 246.226150][ T66] usb 6-1: USB disconnect, device number 4 [ 246.236404][T13381] udevd[13381]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 246.412159][T13399] netlink: 'syz.3.4438': attribute type 4 has an invalid length. [ 246.570202][ T36] audit: type=1400 audit(2000000025.572:21633): avc: denied { connect } for pid=13420 comm="syz.2.4446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.604910][T13424] overlayfs: failed to clone upperpath [ 246.657699][T13437] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4451'. [ 246.670781][ T36] audit: type=1326 audit(2000000025.662:21634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 246.694574][ T36] audit: type=1326 audit(2000000025.672:21635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13438 comm="syz.1.4452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 247.008103][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.169027][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.188676][ T31] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 247.197778][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.209028][T13482] overlayfs: failed to clone lowerpath [ 247.214940][ T31] usb 6-1: config 0 descriptor?? [ 247.270554][T13492] netlink: 'syz.3.4473': attribute type 4 has an invalid length. [ 247.288210][T13492] netlink: 'syz.3.4473': attribute type 4 has an invalid length. [ 247.576821][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.587186][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.594578][T13512] bridge_slave_0: entered allmulticast mode [ 247.601036][T13512] bridge_slave_0: entered promiscuous mode [ 247.607878][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.614940][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.622412][T13512] bridge_slave_1: entered allmulticast mode [ 247.631024][T13512] bridge_slave_1: entered promiscuous mode [ 247.631708][ T31] steelseries 0003:1038:12B6.000A: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 247.742086][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.749233][T13512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.756524][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.763611][T13512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.802979][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.810832][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.821934][ T728] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.829015][ T728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.841478][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.848607][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.889056][ T31] steelseries 0003:1038:12B6.000A: hid_hw_raw_request() failed with -71 [ 247.909164][ T31] usb 6-1: USB disconnect, device number 5 [ 247.945935][T13512] veth0_vlan: entered promiscuous mode [ 247.966133][T13512] veth1_macvtap: entered promiscuous mode [ 248.495886][T13574] kernel profiling enabled (shift: 34) [ 248.501525][T13574] profiling shift: 34 too large [ 248.602766][T13591] rust_binder: 15: no such ref 1 [ 248.608226][T13591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15 [ 248.641529][T13599] tipc: Can't bind to reserved service type 0 [ 248.658650][T13599] overlayfs: failed to resolve '/~.': -2 [ 248.930587][T13611] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.938206][T13612] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 248.946362][T13611] rust_binder: Read failure Err(EAGAIN) in pid:21 [ 248.960394][T13614] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 248.966906][T13614] rust_binder: Read failure Err(EFAULT) in pid:24 [ 249.007405][T13625] netlink: 'syz.5.4515': attribute type 4 has an invalid length. [ 249.024411][T13625] rust_binder: Failed to allocate buffer. len:176, is_oneway:false [ 249.040172][T13625] rust_binder: Write failure EINVAL in pid:32 [ 249.099890][ T36] kauditd_printk_skb: 71 callbacks suppressed [ 249.099912][ T36] audit: type=1400 audit(2000000028.103:21707): avc: denied { read write } for pid=13628 comm="syz.5.4517" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.135843][ T36] audit: type=1400 audit(2000000028.103:21708): avc: denied { open } for pid=13628 comm="syz.5.4517" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.159242][ T36] audit: type=1400 audit(2000000028.103:21709): avc: denied { map } for pid=13628 comm="syz.5.4517" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 249.284590][ T36] audit: type=1400 audit(2000000028.283:21710): avc: denied { listen } for pid=13662 comm="syz.5.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.310871][T13664] rust_binder: Write failure EFAULT in pid:50 [ 249.391212][T13674] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4531'. [ 249.420148][T13680] SELinux: failed to load policy [ 249.638214][ T36] audit: type=1326 audit(2000000028.643:21711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13692 comm="syz.1.4537" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6a558efc9 code=0x0 [ 249.666761][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 249.817959][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.829607][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.840548][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.850391][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.865441][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.875282][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.884998][ T31] usb 6-1: config 0 descriptor?? [ 250.025229][ T36] audit: type=1400 audit(2000000029.023:21712): avc: denied { execute } for pid=13710 comm="syz.3.4543" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.297381][ T31] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 250.316071][ T31] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 250.332319][ T31] usb 6-1: USB disconnect, device number 6 [ 250.345434][T13723] fido_id[13723]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 250.496997][T13731] Invalid ELF header type: 2 != 1 [ 250.497072][ T36] audit: type=1400 audit(2000000029.504:21713): avc: denied { module_load } for pid=13730 comm="syz.1.4548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 250.999800][T13739] binder: Bad value for 'stats' [ 251.007084][T13739] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226) [ 251.007104][T13739] rust_binder: Error while translating object. [ 251.017727][T13739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 251.023916][T13739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:34 [ 251.063726][ T36] audit: type=1400 audit(2000000030.064:21714): avc: denied { write } for pid=13742 comm="syz.3.4554" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.094890][ T36] audit: type=1400 audit(2000000030.064:21715): avc: denied { remove_name } for pid=13742 comm="syz.3.4554" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.118859][ T36] audit: type=1400 audit(2000000030.064:21716): avc: denied { unlink } for pid=13742 comm="syz.3.4554" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 251.216452][T13755] rust_binder: Error while translating object. [ 251.216506][T13755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 251.223145][T13755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 251.234659][T13757] rust_binder: 69: no such ref 0 [ 251.255464][T13757] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 251.262800][T13757] rust_binder: 69: no such ref 2 [ 251.268118][T13757] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 251.350854][T13766] binder: Bad value for 'max' [ 251.685462][T13779] rust_binder: 79: no such ref 0 [ 251.690611][T13779] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 251.697887][T13779] rust_binder: 79: no such ref 2 [ 251.703188][T13779] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 251.722461][T13781] tipc: Enabling of bearer rejected, failed to enable media [ 251.781080][T13789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:85 [ 251.781232][T13789] rust_binder: Read failure Err(EFAULT) in pid:85 [ 252.103988][T13794] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4573'. [ 252.335648][T13807] fuse: Bad value for 'fd' [ 252.679962][T13846] overlayfs: failed to clone lowerpath [ 252.717045][T13864] tipc: Started in network mode [ 252.721996][T13864] tipc: Node identity , cluster identity 4711 [ 252.738895][T13864] tipc: Failed to obtain node identity [ 252.744554][T13864] tipc: Enabling of bearer rejected, failed to enable media [ 252.753811][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 252.776518][T13878] tipc: Started in network mode [ 252.786917][T13878] tipc: Node identity , cluster identity 4711 [ 252.794333][T13878] tipc: Failed to obtain node identity [ 252.800268][T13878] tipc: Enabling of bearer rejected, failed to enable media [ 252.808916][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4598'. [ 252.832982][T13888] netlink: 'syz.2.4605': attribute type 4 has an invalid length. [ 252.845682][T13885] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 252.934838][T13896] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4608'. [ 252.993014][T13908] IPv6: Can't replace route, no match found [ 253.104093][T13918] syz.2.4616(13918): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 253.279515][T13928] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 253.327639][T13933] netlink: 'syz.3.4621': attribute type 7 has an invalid length. [ 253.335612][T13933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4621'. [ 253.345609][T13933] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 253.634801][ T467] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 253.795700][ T467] usb 4-1: config 127 has an invalid interface number: 54 but max is 0 [ 253.804087][ T467] usb 4-1: config 127 has no interface number 0 [ 253.810504][ T467] usb 4-1: New USB device found, idVendor=1b3f, idProduct=2002, bcdDevice=fc.57 [ 253.819633][ T467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.851526][T13950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=13950 comm=syz.5.4625 [ 253.864764][T13950] 9pnet_fd: Insufficient options for proto=fd [ 253.924659][T13965] tmpfs: Bad value for 'huge' [ 253.929668][T13966] tmpfs: Bad value for 'huge' [ 254.047278][ T467] usb 4-1: string descriptor 0 read error: -71 [ 254.056324][ T467] usb 4-1: Found UVC 0.00 device (1b3f:2002) [ 254.063538][ T467] usb 4-1: No valid video chain found. [ 254.072762][ T467] usb 4-1: USB disconnect, device number 15 [ 254.560987][T13985] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.570663][T13984] rust_binder: Error in use_page_slow: ESRCH [ 254.570687][T13984] rust_binder: use_range failure ESRCH [ 254.576931][T13984] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 254.582522][T13984] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.590674][T13984] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:81 [ 254.631034][T13987] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 254.666515][T13994] rust_binder: Write failure EFAULT in pid:91 [ 254.705824][T14001] rust_binder: Error while translating object. [ 254.711955][T14001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.718296][T14001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:98 [ 254.748931][ T36] kauditd_printk_skb: 77 callbacks suppressed [ 254.748957][ T36] audit: type=1400 audit(2000000033.746:21794): avc: denied { execute } for pid=14002 comm="syz.3.4644" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.830528][T14014] 9pnet_fd: Insufficient options for proto=fd [ 254.856237][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4651'. [ 254.971807][T14032] x_tables: duplicate underflow at hook 1 [ 255.117174][T14044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4659'. [ 255.126383][T14044] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4659'. [ 255.135718][T14044] netlink: 'syz.2.4659': attribute type 4 has an invalid length. [ 255.409437][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.416585][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.423682][T14071] bridge_slave_0: entered allmulticast mode [ 255.430166][T14071] bridge_slave_0: entered promiscuous mode [ 255.436869][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.443946][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.451033][T14071] bridge_slave_1: entered allmulticast mode [ 255.457488][T14071] bridge_slave_1: entered promiscuous mode [ 255.512019][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.519121][T14071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.526489][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.533541][T14071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.560679][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.568138][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.578900][ T727] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.586001][ T727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.595396][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.602452][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.646325][T14071] veth0_vlan: entered promiscuous mode [ 255.652271][T14087] overlayfs: failed to clone upperpath [ 255.662017][T14071] veth1_macvtap: entered promiscuous mode [ 255.677783][T14091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4672'. [ 255.887007][T14100] rust_binder: 5: no such ref 3 [ 255.892077][T14100] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 255.899686][T14100] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 255.907046][T14100] rust_binder: Write failure EFAULT in pid:5 [ 256.036232][ T36] audit: type=1400 audit(2000000035.036:21795): avc: denied { ioctl } for pid=14125 comm="syz.2.4683" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.080414][T14131] netlink: 'syz.2.4684': attribute type 2 has an invalid length. [ 256.088398][T14131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4684'. [ 256.098576][T14131] rust_binder: Write failure EFAULT in pid:13 [ 256.113776][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4687'. [ 256.134701][T14138] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 256.157904][T14145] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 256.305231][T14159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.305373][T14159] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 256.312277][T14159] rust_binder: Write failure EFAULT in pid:26 [ 256.332011][T14161] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 256.338192][T14161] rust_binder: Read failure Err(EFAULT) in pid:28 [ 256.349803][ T727] bridge_slave_1: left allmulticast mode [ 256.362065][ T727] bridge_slave_1: left promiscuous mode [ 256.367840][ T727] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.375727][ T727] bridge_slave_0: left allmulticast mode [ 256.381395][ T727] bridge_slave_0: left promiscuous mode [ 256.387246][ T727] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.482281][T14171] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 256.482391][T14169] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 256.492153][T14170] rust_binder: Error while translating object. [ 256.499139][T14170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 256.505566][T14170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 256.528672][ T727] veth1_macvtap: left promiscuous mode [ 256.549215][ T727] veth0_vlan: left promiscuous mode [ 256.864751][ T36] audit: type=1400 audit(2000000035.867:21796): avc: denied { read } for pid=14203 comm="syz.2.4710" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 256.871283][T14206] fuse: Bad value for 'fd' [ 256.890025][ T36] audit: type=1400 audit(2000000035.867:21797): avc: denied { open } for pid=14203 comm="syz.2.4710" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 257.046753][T14219] loop2: detected capacity change from 0 to 7 [ 257.053561][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.062767][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.071355][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.080589][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.088587][T14219] loop2: unable to read partition table [ 257.094518][T14219] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 257.108464][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.117666][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.128367][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.137582][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.146908][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.156105][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.183659][T14219] loop2: detected capacity change from 7 to 4 [ 257.190176][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.197756][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'. [ 257.199445][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.216910][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.226102][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.238460][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.247676][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.257107][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.266307][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.281545][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.290803][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 257.331874][T14251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 257.449842][T14276] netlink: 'syz.5.4733': attribute type 27 has an invalid length. [ 257.486875][T14256] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4728'. [ 257.505322][T14256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4728'. [ 257.506563][T14281] rust_binder: 58: no such ref 1 [ 257.532258][T14281] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:58 [ 257.922676][ T420] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 258.008043][ T36] audit: type=1400 audit(2000000037.007:21798): avc: denied { search } for pid=14310 comm="syz.3.4746" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 258.031196][ T36] audit: type=1400 audit(2000000037.007:21799): avc: denied { write } for pid=14310 comm="syz.3.4746" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 258.045885][T14313] tipc: Started in network mode [ 258.058536][T14313] tipc: Node identity _0000000, cluster identity 4711 [ 258.065934][T14313] tipc: Enabling of bearer rejected, failed to enable media [ 258.082516][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 258.088925][ T420] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.107288][ T420] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.124315][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 258.136602][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 258.148914][ T420] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.160898][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.173167][ T420] hub 3-1:1.0: bad descriptor, ignoring hub [ 258.179123][ T420] hub 3-1:1.0: probe with driver hub failed with error -5 [ 258.187171][ T420] cdc_wdm 3-1:1.0: skipping garbage [ 258.192740][ T420] cdc_wdm 3-1:1.0: skipping garbage [ 258.202851][ T420] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 258.208919][ T420] cdc_wdm 3-1:1.0: Unknown control protocol [ 258.431557][T14343] overlayfs: failed to clone lowerpath [ 258.452901][T14346] overlayfs: failed to clone lowerpath [ 258.482435][ T420] usb 3-1: USB disconnect, device number 16 [ 258.736882][T14380] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 258.822152][ T420] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 258.972079][ T420] usb 3-1: Using ep0 maxpacket: 8 [ 258.978288][ T420] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.988805][ T420] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.998210][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 259.009560][ T420] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 259.020787][ T420] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 259.029917][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.040552][ T420] hub 3-1:1.0: bad descriptor, ignoring hub [ 259.046572][ T420] hub 3-1:1.0: probe with driver hub failed with error -5 [ 259.053946][ T420] cdc_wdm 3-1:1.0: skipping garbage [ 259.059186][ T420] cdc_wdm 3-1:1.0: skipping garbage [ 259.065236][ T420] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 259.074635][ T420] cdc_wdm 3-1:1.0: Unknown control protocol [ 259.089867][T14412] fuse: Bad value for 'fd' [ 259.441830][T14292] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4740'. [ 259.561888][ T420] usb 3-1: USB disconnect, device number 17 [ 260.211476][ T4250] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 260.341396][ T4250] usb 3-1: device descriptor read/64, error -71 [ 260.581492][ T4250] usb 3-1: device descriptor read/64, error -71 [ 260.700701][T14506] overlayfs: failed to clone lowerpath [ 260.822416][ T4250] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.833427][T14510] netlink: 'syz.5.4817': attribute type 3 has an invalid length. [ 260.961238][ T4250] usb 3-1: device descriptor read/64, error -71 [ 261.200968][ T4250] usb 3-1: device descriptor read/64, error -71 [ 261.311012][ T4250] usb usb3-port1: attempt power cycle [ 261.378768][ T36] audit: type=1326 audit(2000000040.379:21800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14515 comm="syz.5.4820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35d2f8efc9 code=0x0 [ 261.573836][T14526] netlink: 'syz.3.4823': attribute type 4 has an invalid length. [ 261.581719][T14526] netlink: 992 bytes leftover after parsing attributes in process `syz.3.4823'. [ 261.670737][ T4250] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 261.691758][ T4250] usb 3-1: device descriptor read/8, error -71 [ 261.821745][ T4250] usb 3-1: device descriptor read/8, error -71 [ 262.060538][ T4250] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 262.081655][ T4250] usb 3-1: device descriptor read/8, error -71 [ 262.211565][ T4250] usb 3-1: device descriptor read/8, error -71 [ 262.320900][ T4250] usb usb3-port1: unable to enumerate USB device [ 263.007711][T14550] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=14550 comm=syz.3.4829 [ 263.044660][T14556] overlayfs: failed to clone lowerpath [ 263.399939][ T420] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 263.529836][ T420] usb 3-1: device descriptor read/64, error -71 [ 263.639635][T14572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4839'. [ 263.649444][T14572] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4839'. [ 263.658570][T14572] netlink: 'syz.1.4839': attribute type 6 has an invalid length. [ 263.666390][T14572] netlink: 'syz.1.4839': attribute type 5 has an invalid length. [ 263.674166][T14572] netlink: 35 bytes leftover after parsing attributes in process `syz.1.4839'. [ 263.684275][T14572] overlayfs: failed to clone upperpath [ 263.705804][T14574] 9pnet_fd: Insufficient options for proto=fd [ 263.727986][T14580] overlayfs: failed to clone upperpath [ 263.769683][ T420] usb 3-1: device descriptor read/64, error -71 [ 264.009586][ T420] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 264.031173][T14617] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4858'. [ 264.037618][T14618] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4858'. [ 264.139535][ T420] usb 3-1: device descriptor read/64, error -71 [ 264.379417][ T420] usb 3-1: device descriptor read/64, error -71 [ 264.489414][ T420] usb usb3-port1: attempt power cycle [ 264.665163][T14645] netlink: 'syz.3.4868': attribute type 6 has an invalid length. [ 264.672986][T14645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 264.766296][ T36] audit: type=1326 audit(2000000043.771:21801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.793765][ T36] audit: type=1326 audit(2000000043.771:21802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.817676][ T36] audit: type=1326 audit(2000000043.801:21803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.841573][ T36] audit: type=1326 audit(2000000043.801:21804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.865693][ T36] audit: type=1326 audit(2000000043.801:21805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.889403][ T420] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 264.889548][ T36] audit: type=1326 audit(2000000043.801:21806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.926278][ T36] audit: type=1326 audit(2000000043.801:21807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.930229][ T420] usb 3-1: device descriptor read/8, error -71 [ 264.959174][ T36] audit: type=1326 audit(2000000043.801:21808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 264.985945][ T36] audit: type=1326 audit(2000000043.801:21809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.1.4874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6a558efc9 code=0x7ffc0000 [ 265.032745][T14683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4882'. [ 265.100611][ T420] usb 3-1: device descriptor read/8, error -71 [ 265.139489][T14699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4888'. [ 265.148596][T14699] netlink: 'syz.1.4888': attribute type 6 has an invalid length. [ 265.156486][T14699] netlink: 'syz.1.4888': attribute type 5 has an invalid length. [ 265.164385][T14699] netlink: 'syz.1.4888': attribute type 4 has an invalid length. [ 265.338965][ T420] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 265.360049][ T420] usb 3-1: device descriptor read/8, error -71 [ 265.489923][ T420] usb 3-1: device descriptor read/8, error -71 [ 265.598933][ T420] usb usb3-port1: unable to enumerate USB device [ 265.815297][T14741] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4904'. [ 266.164654][T14751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 266.164686][T14751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72 [ 266.189316][T14754] rust_binder: Fixups oob 178 180 369 186 [ 266.198527][T14754] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 266.204343][T14754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 266.212797][T14754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 266.388640][T14774] 9pnet_fd: Insufficient options for proto=fd [ 266.472012][T14785] netlink: 'syz.1.4922': attribute type 4 has an invalid length. [ 266.480452][T14785] erofs: dax options not supported [ 266.486087][T14785] netlink: 'syz.1.4922': attribute type 4 has an invalid length. [ 266.530414][T14792] 9pnet_fd: Insufficient options for proto=fd [ 266.579055][T14808] overlayfs: failed to clone upperpath [ 266.748201][ T331] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 266.828908][T14828] overlayfs: failed to clone upperpath [ 266.844126][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.851609][T14818] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.858760][T14818] bridge_slave_0: entered allmulticast mode [ 266.865107][T14818] bridge_slave_0: entered promiscuous mode [ 266.871859][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.878970][T14818] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.886052][T14818] bridge_slave_1: entered allmulticast mode [ 266.892529][T14818] bridge_slave_1: entered promiscuous mode [ 266.915008][T14833] overlayfs: failed to clone lowerpath [ 266.921677][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.932778][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.942736][ T331] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 266.952783][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.961905][ T331] usb 3-1: config 0 descriptor?? [ 267.008830][T14818] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.015972][T14818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.023367][T14818] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.030461][T14818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.057867][ T712] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.067557][ T712] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.077700][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.084811][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.099015][ T712] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.106123][ T712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.141241][T14818] veth0_vlan: entered promiscuous mode [ 267.157156][T14818] veth1_macvtap: entered promiscuous mode [ 267.171397][T14851] netlink: 444 bytes leftover after parsing attributes in process `syz.3.4942'. [ 267.204529][T14855] __vm_enough_memory: pid: 14855, comm: syz.1.4933, bytes: 18014402804453376 not enough memory for the allocation [ 267.370260][ T331] hid-led 0003:04D8:F372.000C: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 267.396368][ T331] hid-led 0003:04D8:F372.000C: Greynut Luxafor initialized [ 267.569555][ T331] usb 3-1: USB disconnect, device number 26 [ 267.578588][ T4250] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 267.588766][ T4250] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 267.596525][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 267.596550][ T36] audit: type=1326 audit(2000000046.602:21825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14872 comm="syz.5.4947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35d2f8efc9 code=0x0 [ 267.598586][ T4250] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 267.634329][ T4250] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 267.642751][ T4250] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 267.651761][ T4250] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 267.660063][ T4250] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 267.668569][ T4250] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 267.677199][ T4250] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 267.685667][ T4250] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 267.694284][ T4250] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 267.703576][ T4250] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 267.712726][ T4250] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 267.716506][ T36] audit: type=1326 audit(2000000046.722:21826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz.3.4948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9e358efc9 code=0x0 [ 267.722015][ T4250] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 267.753370][ T4250] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 267.761635][ T4250] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 267.767378][T14877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4948'. [ 267.778225][ T89] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 267.782430][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4948'. [ 267.787155][ T89] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 268.155177][ T36] audit: type=1400 audit(2000000047.162:21827): avc: denied { relabelfrom } for pid=14889 comm="syz.1.4952" name="NETLINK" dev="sockfs" ino=53417 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 268.184192][T14891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 268.478819][T14916] overlay: Unknown parameter './file0' [ 268.482509][T14915] overlay: Unknown parameter './file0' [ 268.632615][ T36] audit: type=1400 audit(2000000047.643:21828): avc: denied { connect } for pid=14932 comm="syz.1.4967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.801876][ T36] audit: type=1326 audit(2000000047.813:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.826476][ T36] audit: type=1326 audit(2000000047.813:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.850246][ T36] audit: type=1326 audit(2000000047.813:21831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.874083][ T36] audit: type=1326 audit(2000000047.813:21832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.898011][ T36] audit: type=1326 audit(2000000047.813:21833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.921708][ T36] audit: type=1326 audit(2000000047.823:21834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.1.4970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103778efc9 code=0x7ffc0000 [ 268.991935][T14947] rust_binder: Error while translating object. [ 268.991979][T14947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 268.998623][T14947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:91 [ 269.072311][T14962] veth1: entered allmulticast mode [ 269.099975][T14966] netlink: 'syz.2.4979': attribute type 1 has an invalid length. [ 269.110857][T14966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.110891][T14966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:100 [ 269.244534][T14950] rust_binder: Error while translating object. [ 269.256970][T14950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 269.259279][T14967] veth1: left allmulticast mode [ 269.263707][T14950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:46 [ 269.377073][ T420] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.470880][T15001] 9pnet_fd: Insufficient options for proto=fd [ 269.489742][T15003] bridge0: port 3(erspan0) entered blocking state [ 269.496313][T15003] bridge0: port 3(erspan0) entered disabled state [ 269.503032][T15003] erspan0: entered allmulticast mode [ 269.508875][T15003] erspan0: entered promiscuous mode [ 269.514208][T15003] bridge0: port 3(erspan0) entered blocking state [ 269.520680][T15003] bridge0: port 3(erspan0) entered forwarding state [ 269.541207][T15005] netlink: 'syz.3.4993': attribute type 5 has an invalid length. [ 269.549239][ T420] usb 3-1: Using ep0 maxpacket: 16 [ 269.555510][ T420] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.565777][ T420] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.576160][ T420] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.585280][ T420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.593361][ T420] usb 3-1: Product: syz [ 269.597562][ T420] usb 3-1: Manufacturer: syz [ 269.602170][ T420] usb 3-1: SerialNumber: syz [ 269.812208][ T420] usb 3-1: 0:2 : does not exist [ 269.831073][ T420] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 269.848069][ T420] usb 3-1: USB disconnect, device number 27 [ 269.854844][T15045] overlayfs: failed to clone upperpath [ 269.862661][T14549] udevd[14549]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.939382][T15060] overlayfs: failed to clone upperpath [ 269.991047][T15069] tc_dump_action: action bad kind [ 270.397389][T15097] overlayfs: unescaped trailing colons in lowerdir mount option. [ 270.443509][T15103] IPv6: syztnl0: Disabled Multicast RS [ 270.462771][T15108] tipc: Failed to remove unknown binding: 66,1,1/0:3409409771/3409409773 [ 270.522489][T15108] tipc: Failed to remove unknown binding: 66,1,1/0:3409409771/3409409773 [ 270.531002][T15108] tipc: Failed to remove unknown binding: 66,1,1/0:3409409771/3409409773 [ 270.556300][ T89] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 270.707360][ T89] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 270.718566][ T89] usb 3-1: config 0 interface 0 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 270.731692][ T89] usb 3-1: config 0 interface 0 has no altsetting 0 [ 270.738359][ T89] usb 3-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 270.747513][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.756353][ T89] usb 3-1: config 0 descriptor?? [ 270.761651][T15095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 270.775812][T15120] binder: Binderfs stats mode cannot be changed during a remount [ 270.850497][T15123] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 270.864890][T15125] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 270.882717][T15125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 270.898242][T15127] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72 [ 271.175978][ T89] usb 3-1: string descriptor 0 read error: -71 [ 271.194488][ T89] usbhid 3-1:0.0: can't add hid device: -71 [ 271.200712][ T89] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 271.210026][ T89] usb 3-1: USB disconnect, device number 28 [ 271.326207][T15147] netlink: 'syz.5.5042': attribute type 4 has an invalid length. [ 271.334430][T15147] netlink: 'syz.5.5042': attribute type 4 has an invalid length. [ 271.388420][T15163] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5048'. [ 271.397679][T15163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5048'. [ 271.965578][ T89] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 272.003054][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5062'. [ 272.016795][T15204] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5062'. [ 272.074195][T15217] fuse: Invalid gid '00000000000037777777777' [ 272.081003][T15217] netlink: 'syz.5.5067': attribute type 1 has an invalid length. [ 272.112803][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.112831][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.119018][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.125162][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.131497][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.132969][ T89] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.139717][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.143762][ T89] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 272.160198][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.168933][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.169407][ T89] usb 3-1: config 1 has no interface number 0 [ 272.175163][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.181163][ T89] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.182928][ T89] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.188826][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.193877][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.207265][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.215872][ T89] usb 3-1: Product: syz [ 272.222453][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.230015][ T89] usb 3-1: Manufacturer: syz [ 272.236304][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.240886][ T89] usb 3-1: SerialNumber: syz [ 272.246962][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.255910][ T89] cdc_ncm 3-1:1.1: NCM or ECM functional descriptors missing [ 272.258794][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.264341][ T89] cdc_ncm 3-1:1.1: bind() failure [ 272.268527][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.287080][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.293200][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.299462][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.305606][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.311793][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.318045][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.324162][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.330290][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.336619][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.342827][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.348981][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.355072][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.361188][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.367326][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.373447][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.379569][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.385840][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.392095][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.398529][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.404717][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.410876][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.417232][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.423328][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.429468][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.435608][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.441786][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.447903][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.454013][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.460154][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.466304][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.466739][ T420] usb 3-1: USB disconnect, device number 29 [ 272.472417][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.472441][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.490671][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.497042][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.503165][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.509303][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.515425][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.521510][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.528224][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.534339][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.540491][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.546665][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.552769][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.558918][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.565020][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.571168][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.577350][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.583465][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.589661][T15223] rust_binder: Write failure EFAULT in pid:90 [ 272.637929][T15237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'. [ 272.654280][T15237] rust_binder: Error while translating object. [ 272.654334][T15237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 272.660823][T15237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 272.706655][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 272.706676][ T36] audit: type=1400 audit(2000000052.721:21877): avc: denied { mount } for pid=15244 comm="syz.1.5077" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 272.837918][T15266] netlink: 5308 bytes leftover after parsing attributes in process `syz.1.5085'. [ 272.880026][T15257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5082'. [ 272.938185][T15282] netlink: 'syz.1.5092': attribute type 4 has an invalid length. [ 272.951491][T15282] netlink: 'syz.1.5092': attribute type 4 has an invalid length. [ 273.042684][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5097'. [ 273.112697][T15308] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 273.112722][T15308] rust_binder: Read failure Err(EFAULT) in pid:115 [ 273.159723][T15314] rust_binder: Got transaction with invalid offset. [ 273.181419][T15314] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 273.189948][T15314] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:117 [ 273.201097][T15321] fuse: Unknown parameter 'roVtmode' [ 273.238637][ T36] audit: type=1400 audit(2000000053.251:21878): avc: denied { setattr } for pid=15323 comm="syz.2.5106" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.299320][T15324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.315113][T15324] rust_binder: Write failure EFAULT in pid:121 [ 273.395642][T15339] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 273.427245][T15344] rust_binder: Write failure EFAULT in pid:126 [ 274.031267][ T36] audit: type=1326 audit(2000000054.042:21879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15386 comm="syz.5.5129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35d2f8efc9 code=0x0 [ 274.124484][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 274.127746][T15393] netlink: 'syz.1.5130': attribute type 27 has an invalid length. [ 274.140018][T15393] lo: entered promiscuous mode [ 274.144854][T15393] lo: entered allmulticast mode [ 274.150444][T15393] tunl0: entered promiscuous mode [ 274.155522][T15393] tunl0: entered allmulticast mode [ 274.161001][T15393] gre0: entered promiscuous mode [ 274.166010][T15393] gre0: entered allmulticast mode [ 274.171434][T15393] gretap0: entered promiscuous mode [ 274.176698][T15393] gretap0: entered allmulticast mode [ 274.182798][T15393] erspan0: entered promiscuous mode [ 274.188077][T15393] erspan0: entered allmulticast mode [ 274.193958][T15393] ip_vti0: entered promiscuous mode [ 274.199229][T15393] ip_vti0: entered allmulticast mode [ 274.204944][T15393] ip6_vti0: entered promiscuous mode [ 274.210253][T15393] ip6_vti0: entered allmulticast mode [ 274.216022][T15393] sit0: entered promiscuous mode [ 274.221010][T15393] sit0: entered allmulticast mode [ 274.226433][T15393] ip6tnl0: entered promiscuous mode [ 274.231645][T15393] ip6tnl0: entered allmulticast mode [ 274.237484][T15393] ip6gre0: entered promiscuous mode [ 274.242701][T15393] ip6gre0: entered allmulticast mode [ 274.248422][T15393] syz_tun: entered promiscuous mode [ 274.253632][T15393] syz_tun: entered allmulticast mode [ 274.259905][T15393] ip6gretap0: entered promiscuous mode [ 274.265600][T15393] ip6gretap0: entered allmulticast mode [ 274.271765][T15393] bridge0: entered promiscuous mode [ 274.274420][ T9] usb 3-1: device descriptor read/64, error -71 [ 274.277011][T15393] bridge0: entered allmulticast mode [ 274.289372][T15393] vcan0: entered promiscuous mode [ 274.294480][T15393] vcan0: entered allmulticast mode [ 274.299764][T15393] dummy0: entered promiscuous mode [ 274.304945][T15393] dummy0: entered allmulticast mode [ 274.310597][T15393] veth0: entered promiscuous mode [ 274.315742][T15393] veth0: entered allmulticast mode [ 274.321615][T15393] veth1: entered promiscuous mode [ 274.326718][T15393] veth1: entered allmulticast mode [ 274.332603][T15393] wg0: entered promiscuous mode [ 274.337544][T15393] wg0: entered allmulticast mode [ 274.342954][T15393] wg1: entered promiscuous mode [ 274.347918][T15393] wg1: entered allmulticast mode [ 274.353318][T15393] wg2: entered promiscuous mode [ 274.358258][T15393] wg2: entered allmulticast mode [ 274.363638][T15393] veth0_to_bridge: entered promiscuous mode [ 274.369608][T15393] veth0_to_bridge: entered allmulticast mode [ 274.376923][T15393] veth1_to_bridge: entered promiscuous mode [ 274.382860][T15393] veth1_to_bridge: entered allmulticast mode [ 274.389964][T15393] veth0_to_bond: entered promiscuous mode [ 274.395744][T15393] veth0_to_bond: entered allmulticast mode [ 274.402250][T15393] bond_slave_0: entered promiscuous mode [ 274.407976][T15393] bond_slave_0: entered allmulticast mode [ 274.414160][T15393] veth1_to_bond: entered promiscuous mode [ 274.419978][T15393] veth1_to_bond: entered allmulticast mode [ 274.426506][T15393] bond_slave_1: entered promiscuous mode [ 274.432163][T15393] bond_slave_1: entered allmulticast mode [ 274.438397][T15393] veth0_to_team: entered promiscuous mode [ 274.444136][T15393] veth0_to_team: entered allmulticast mode [ 274.450706][T15393] team_slave_0: entered promiscuous mode [ 274.456427][T15393] team_slave_0: entered allmulticast mode [ 274.462639][T15393] veth1_to_team: entered promiscuous mode [ 274.468399][T15393] veth1_to_team: entered allmulticast mode [ 274.475152][T15393] team_slave_1: entered promiscuous mode [ 274.480830][T15393] team_slave_1: entered allmulticast mode [ 274.487047][T15393] veth0_to_batadv: entered promiscuous mode [ 274.492972][T15393] veth0_to_batadv: entered allmulticast mode [ 274.499560][T15393] batadv_slave_0: entered promiscuous mode [ 274.505408][T15393] batadv_slave_0: entered allmulticast mode [ 274.511791][T15393] veth1_to_batadv: entered promiscuous mode [ 274.517880][T15393] veth1_to_batadv: entered allmulticast mode [ 274.524440][T15393] batadv_slave_1: entered promiscuous mode [ 274.530264][T15393] batadv_slave_1: entered allmulticast mode [ 274.536877][T15393] xfrm0: entered promiscuous mode [ 274.541918][T15393] xfrm0: entered allmulticast mode [ 274.544315][ T9] usb 3-1: device descriptor read/64, error -71 [ 274.547627][T15393] veth0_to_hsr: entered promiscuous mode [ 274.558991][T15393] veth0_to_hsr: entered allmulticast mode [ 274.565341][T15393] hsr_slave_0: entered promiscuous mode [ 274.570910][T15393] hsr_slave_0: entered allmulticast mode [ 274.577154][T15393] veth1_to_hsr: entered promiscuous mode [ 274.582801][T15393] veth1_to_hsr: entered allmulticast mode [ 274.589135][T15393] hsr_slave_1: entered promiscuous mode [ 274.594731][T15393] hsr_slave_1: entered allmulticast mode [ 274.600858][T15393] veth1_virt_wifi: entered promiscuous mode [ 274.606819][T15393] veth1_virt_wifi: entered allmulticast mode [ 274.613309][T15393] veth0_virt_wifi: entered promiscuous mode [ 274.619286][T15393] veth0_virt_wifi: entered allmulticast mode [ 274.625868][T15393] veth1_vlan: entered promiscuous mode [ 274.631342][T15393] veth1_vlan: entered allmulticast mode [ 274.637487][T15393] veth0_vlan: entered allmulticast mode [ 274.643868][T15393] vlan0: entered promiscuous mode [ 274.649030][T15393] vlan0: entered allmulticast mode [ 274.654889][T15393] vlan1: entered promiscuous mode [ 274.660002][T15393] vlan1: entered allmulticast mode [ 274.665872][T15393] veth1_macvtap: entered allmulticast mode [ 274.672241][T15393] veth0_macvtap: entered promiscuous mode [ 274.678055][T15393] veth0_macvtap: entered allmulticast mode [ 274.684479][T15393] macsec0: entered promiscuous mode [ 274.689741][T15393] macsec0: entered allmulticast mode [ 274.695692][T15393] sit1: entered promiscuous mode [ 274.700646][T15393] sit1: entered allmulticast mode [ 274.743990][T15412] rust_binder: Failed copying remainder into alloc: EFAULT [ 274.744011][T15412] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 274.751634][T15412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 274.760059][T15412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:131 [ 274.784155][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 274.788887][ T36] audit: type=1400 audit(2000000054.802:21880): avc: denied { write } for pid=15413 comm="syz.1.5138" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 274.834599][T15419] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138 [ 274.848909][T15421] fuse: Bad value for 'user_id' [ 274.863070][ T36] audit: type=1400 audit(2000000054.862:21881): avc: denied { mounton } for pid=15420 comm="syz.1.5140" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 274.867975][T15421] fuse: Bad value for 'user_id' [ 274.914104][ T9] usb 3-1: device descriptor read/64, error -71 [ 275.031369][T15451] cgroup: Setting release_agent not allowed [ 275.152055][T15464] loop5: detected capacity change from 0 to 7 [ 275.164050][ T9] usb 3-1: device descriptor read/64, error -71 [ 275.208912][ T36] audit: type=1400 audit(2000000055.212:21882): avc: denied { map } for pid=15463 comm="syz.1.5156" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.284033][ T9] usb usb3-port1: attempt power cycle [ 275.630865][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 275.654869][ T9] usb 3-1: device descriptor read/8, error -71 [ 275.743933][T15481] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 275.743965][T15481] rust_binder: Error while translating object. [ 275.763078][T15481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 275.769424][T15481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 275.795015][ T9] usb 3-1: device descriptor read/8, error -71 [ 276.023555][ T4250] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 276.053542][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 276.074544][ T9] usb 3-1: device descriptor read/8, error -71 [ 276.183458][ T4250] usb 2-1: Using ep0 maxpacket: 32 [ 276.190716][ T4250] usb 2-1: config 1 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.202467][ T4250] usb 2-1: config 1 interface 0 has no altsetting 0 [ 276.210951][ T4250] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 276.220481][ T9] usb 3-1: device descriptor read/8, error -71 [ 276.226739][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.234791][ T4250] usb 2-1: Product: ѕ [ 276.238861][ T4250] usb 2-1: Manufacturer: 밈뼴囨䨄聬ↅ惸椾羑義꽇ꖮㅊ㇇枃붯侺展ヂ䈄鸆 [ 276.250275][ T4250] usb 2-1: SerialNumber: ѕ [ 276.343467][ T9] usb usb3-port1: unable to enumerate USB device [ 276.461984][ T4250] usbhid 2-1:1.0: can't add hid device: -71 [ 276.468191][ T4250] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 276.476928][ T4250] usb 2-1: USB disconnect, device number 13 [ 276.715175][T15506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 276.735461][ T36] audit: type=1400 audit(2000000056.753:21883): avc: denied { relabelto } for pid=15509 comm="syz.3.5174" name="file0" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 276.771908][ T36] audit: type=1400 audit(2000000056.783:21884): avc: denied { unlink } for pid=13512 comm="syz-executor" name="file0" dev="tmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 276.920044][ T36] audit: type=1400 audit(2000000056.933:21885): avc: denied { append } for pid=15538 comm="syz.2.5182" name="pfkey" dev="proc" ino=4026533433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 276.924083][T15539] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 276.943126][T15539] rust_binder: Read failure Err(EFAULT) in pid:161 [ 277.184567][T15547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:163 [ 277.213000][ T420] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 277.372912][ T420] usb 2-1: Using ep0 maxpacket: 8 [ 277.379297][ T420] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.392886][ T420] usb 2-1: config 1 interface 0 has no altsetting 0 [ 277.402403][ T420] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 277.411972][ T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.420082][ T420] usb 2-1: Product: 㾺 [ 277.427746][ T420] usb 2-1: Manufacturer: 䛦䲜푾䷕㜋忴炘탇釐靖ᛦ☐䣔쏢鱹춤ӵ魏☽ꄍ秖Მ鈸猝콙릋暘䐒Ⲩ띇๿謼߿퇰葬㓛㼒⵪毶逎ꕜဉਥ㱶涼韉꠳咤脾▜멫瀜범툟퓐맯罊嚄ྩ괣왉㽨졵襄撁궽쥮끮䒹嘱쑐廻瞰꿾㎜꺋ᛤכֿ딺ẋ峛拊莟漈韨ࢡ⛞繱蘗 [ 277.457391][ T420] usb 2-1: SerialNumber: 鑹䕜눌놞汼괼Ḇﾘ愨‥앜鷉觺⭎繌㋐࿫괯剾ꔓ❿笛郵뜆첦褅苧檕㞎ꘕ좘嬉者묅퐆ꥯ⯬ꛚ왙脰㎞舒㚈芳㶩㰞麾褧ⳓ巐젵⨝帚鈎芞⋕볻ﱀꇆ错ףּӧ窃楠膦΄鹣䬙菌츎磗◽앑괏퀏҅౷棭꿓ㇾ [ 277.754813][ T36] audit: type=1326 audit(2000000057.774:21886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15602 comm="syz.5.5201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f35d2f85e67 code=0x0 [ 277.864208][T15621] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 277.879970][T15621] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 277.898177][ T420] usbhid 2-1:1.0: can't add hid device: -71 [ 277.898601][ T36] audit: type=1400 audit(2000000057.904:21887): avc: denied { mounton } for pid=15542 comm="syz.1.5184" path="/syzcgroup/unified/syz1" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 277.912267][ T420] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 277.956803][ T420] usb 2-1: USB disconnect, device number 14 [ 277.999240][T15630] 9pnet_fd: Insufficient options for proto=fd [ 278.030601][T15632] rust_binder: Write failure EFAULT in pid:175 [ 278.126659][T15641] 9pnet_fd: Insufficient options for proto=fd [ 278.655229][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 278.661568][T15672] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5225'. [ 278.689195][T15674] 9pnet_fd: Insufficient options for proto=fd [ 278.822144][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 278.828568][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.840319][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.850565][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7309, bcdDevice= 0.00 [ 278.859979][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.869153][ T9] usb 2-1: config 0 descriptor?? [ 278.881720][ T9] hub 2-1:0.0: USB hub found [ 278.884719][T15690] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5232'. [ 279.075954][ T9] hub 2-1:0.0: 7 ports detected [ 279.081138][ T9] hub 2-1:0.0: insufficient power available to use all downstream ports [ 279.090344][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.099025][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.100215][T15701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.115425][T15701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.277123][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 279.283620][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 279.312203][ T9] usb 2-1: USB disconnect, device number 15 [ 279.434831][T15705] overlayfs: failed to clone lowerpath [ 279.520473][T15720] netlink: 182 bytes leftover after parsing attributes in process `syz.2.5242'. [ 279.573169][T15739] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 279.573209][T15739] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 279.674077][T15749] SELinux: failed to load policy [ 279.674947][T15755] netlink: 'syz.5.5254': attribute type 46 has an invalid length. [ 279.697312][ T36] audit: type=1400 audit(2000000059.705:21888): avc: denied { accept } for pid=15748 comm="syz.2.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 279.812943][T15781] rust_binder: 169: no such ref 1 [ 279.818046][T15781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 280.047325][T15808] binder: Unknown parameter '' [ 280.094534][T15812] input: syz0 as /devices/virtual/input/input18 [ 280.261448][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 280.368285][ T36] audit: type=1400 audit(2000000060.375:21889): avc: denied { mounton } for pid=15829 comm="syz.5.5276" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 280.401391][ T9] usb 2-1: device descriptor read/64, error -71 [ 280.414692][T15833] overlayfs: failed to clone lowerpath [ 280.421235][T15833] overlayfs: failed to clone lowerpath [ 280.443224][T15835] overlayfs: failed to clone lowerpath [ 280.449438][T15835] 9pnet_fd: Insufficient options for proto=fd [ 280.520055][T15846] overlayfs: failed to clone upperpath [ 280.641228][ T9] usb 2-1: device descriptor read/64, error -71 [ 280.881118][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 281.021050][ T9] usb 2-1: device descriptor read/64, error -71 [ 281.049685][ T693] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.260958][ T9] usb 2-1: device descriptor read/64, error -71 [ 281.370971][ T9] usb usb2-port1: attempt power cycle [ 281.710704][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.731858][ T9] usb 2-1: device descriptor read/8, error -71 [ 281.861680][ T9] usb 2-1: device descriptor read/8, error -71 [ 281.974040][T15882] 9pnet: Could not find request transport: fduno= [ 281.986133][T15881] 2Nw˨獊ئ: renamed from vcan0 (while UP) [ 282.100521][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 282.121619][ T9] usb 2-1: device descriptor read/8, error -71 [ 282.188995][T15900] cgroup: fork rejected by pids controller in /syz5 [ 282.251455][ T9] usb 2-1: device descriptor read/8, error -71 [ 282.366258][ T9] usb usb2-port1: unable to enumerate USB device [ 282.525673][T15952] netlink: 'syz.3.5304': attribute type 46 has an invalid length. [ 282.575914][T15961] cgroup: subsys name conflicts with all [ 282.632922][T15967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=549 sclass=netlink_route_socket pid=15967 comm=syz.3.5306 [ 282.647020][T15967] 9pnet_fd: Insufficient options for proto=fd [ 282.993343][T15983] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5308'. [ 283.051345][ T1347] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 283.057855][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.057886][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.066991][T15990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 283.075346][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.084978][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.091667][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.098240][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.105056][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.111896][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.118472][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.125260][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.132286][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.138868][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.145836][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.152581][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.159135][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.166053][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.172802][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.179365][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.186147][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.192942][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.199584][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.206397][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.213551][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.220274][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.226815][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.233673][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.240393][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.247021][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.253816][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.260513][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.267105][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.273865][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.280769][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.287302][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.294205][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.300899][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.307466][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.314268][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.320836][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.327555][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.334292][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.340910][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.347420][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.354020][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.360550][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.367099][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.373632][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.380130][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.386593][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.393071][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.399540][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.406066][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.412639][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.419374][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.429219][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.435845][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.442536][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.449132][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.455960][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.462626][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.469309][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.476130][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.482812][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.489353][T15989] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 283.527081][T16002] rust_binder: Write failure EFAULT in pid:185 [ 283.620485][T16016] netlink: 'syz.2.5318': attribute type 27 has an invalid length. [ 283.692341][ T36] audit: type=1400 audit(2000000063.707:21890): avc: denied { setattr } for pid=16014 comm="syz.2.5318" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 283.787671][T16040] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 283.787701][T16040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:209 [ 283.812092][T16042] rust_binder: Error while translating object. [ 283.822028][T16042] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 283.828318][T16042] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:211 [ 283.930677][ T36] audit: type=1400 audit(2000000063.947:21891): avc: denied { audit_control } for pid=16052 comm="syz.1.5332" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 283.936776][T16053] rust_binder: 222: no such ref 1 [ 284.054863][T16058] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.054888][T16058] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:227 [ 284.077994][T16060] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 284.087358][T16060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 284.095578][T16060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:229 [ 284.105767][T16060] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 284.131965][T16062] SELinux: security_context_str_to_sid () failed with errno=-22 [ 284.173988][T16068] /dev/md0: Can't lookup blockdev [ 284.233012][T16075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 284.296498][T16084] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 284.333797][ T36] audit: type=1400 audit(2000000064.347:21892): avc: denied { attach_queue } for pid=16088 comm="syz.2.5346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 284.334474][T16089] rust_binder: Error while translating object. [ 284.354105][T16089] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 284.360395][T16089] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:238 [ 284.402346][T16091] binder: Bad value for 'max' [ 284.407241][T16092] overlayfs: failed to clone lowerpath [ 284.438628][T16095] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 284.467355][T16101] __vm_enough_memory: pid: 16101, comm: syz.2.5350, bytes: 18014402804453376 not enough memory for the allocation [ 284.510376][T16103] loop5: detected capacity change from 0 to 7 [ 284.561977][T16105] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 284.602660][T16108] input: syz1 as /devices/virtual/input/input19 [ 284.768704][T16122] kvm: user requested TSC rate below hardware speed [ 285.061129][T16125] rust_binder: 272: no such ref 1 [ 285.120057][ T36] audit: type=1326 audit(2000000065.137:21893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16081 comm="syz.3.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e358efc9 code=0x7fc00000 [ 285.170579][T16132] rust_binder: 277: no such ref 1 [ 285.175774][T16132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:277 [ 285.322210][T16144] overlayfs: failed to resolve './file1': -2 [ 285.368503][ T36] audit: type=1400 audit(2000000065.378:21894): avc: denied { add_name } for pid=16147 comm="syz.1.5367" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.389706][ T36] audit: type=1400 audit(2000000065.378:21895): avc: denied { create } for pid=16147 comm="syz.1.5367" name=".log" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 285.410254][ T36] audit: type=1400 audit(2000000065.378:21896): avc: denied { associate } for pid=16147 comm="syz.1.5367" name=".log" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 285.432018][ T420] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 285.568818][ T420] usb 3-1: device descriptor read/64, error -71 [ 285.808705][ T420] usb 3-1: device descriptor read/64, error -71 [ 286.011481][T16160] netlink: 'syz.1.5370': attribute type 16 has an invalid length. [ 286.019446][T16160] netlink: 'syz.1.5370': attribute type 2 has an invalid length. [ 286.027789][T16160] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.5370'. [ 286.050062][ T420] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 286.057808][T16162] binder: Bad value for 'defcontext' [ 286.160305][T16184] fuse: Unknown parameter '00000000000000000003' [ 286.184752][T16186] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 286.184781][T16186] rust_binder: Error while translating object. [ 286.193650][ T420] usb 3-1: device descriptor read/64, error -71 [ 286.195192][T16186] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 286.206260][T16186] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:294 [ 286.272251][ T36] audit: type=1400 audit(2000000066.288:21897): avc: denied { execute } for pid=16197 comm="syz.1.5382" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 286.339746][ T36] audit: type=1400 audit(2000000066.358:21898): avc: denied { append } for pid=16200 comm="syz.1.5383" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 286.438459][ T420] usb 3-1: device descriptor read/64, error -71 [ 286.548383][ T420] usb usb3-port1: attempt power cycle [ 286.888307][ T420] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 286.909292][ T420] usb 3-1: device descriptor read/8, error -71 [ 287.039314][ T420] usb 3-1: device descriptor read/8, error -71 [ 287.287912][ T420] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 287.309135][ T420] usb 3-1: device descriptor read/8, error -71 [ 287.350261][T16233] overlayfs: failed to clone upperpath [ 287.438959][ T420] usb 3-1: device descriptor read/8, error -71 [ 287.553289][ T420] usb usb3-port1: unable to enumerate USB device [ 287.601527][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5396'. [ 288.193366][T16262] cgroup: name respecified [ 288.211386][ T36] audit: type=1400 audit(2000000068.229:21899): avc: denied { ioctl } for pid=16266 comm="syz.2.5402" path="socket:[57758]" dev="sockfs" ino=57758 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 288.293988][T16275] netlink: 'syz.3.5404': attribute type 4 has an invalid length. [ 288.567545][ T420] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 288.640831][T16294] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5411'. [ 288.649876][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5411'. [ 288.712096][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 288.712115][ T36] audit: type=1400 audit(2000000068.729:21901): avc: denied { create } for pid=16293 comm="syz.5.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 288.739873][ T420] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.746726][ T420] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 288.756100][ T420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.766263][ T420] usb 3-1: config 0 descriptor?? [ 289.174249][ T420] logitech-hidpp-device 0003:046D:C262.000D: unknown main item tag 0x0 [ 289.184236][ T420] logitech-hidpp-device 0003:046D:C262.000D: item fetching failed at offset 4/5 [ 289.193678][ T420] logitech-hidpp-device 0003:046D:C262.000D: hidpp_probe:parse failed [ 289.202197][ T420] logitech-hidpp-device 0003:046D:C262.000D: probe with driver logitech-hidpp-device failed with error -22 [ 289.425886][ T420] usb 3-1: USB disconnect, device number 38 [ 289.956494][T16338] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 289.986609][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 290.166462][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 290.196946][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 290.226445][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 290.245919][T16346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.252918][ T9] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 290.253211][T16346] IPv6: NLM_F_CREATE should be set when creating new route [ 290.269427][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.272601][ T9] usb 2-1: config 0 descriptor?? [ 290.277481][T16346] IPv6: NLM_F_CREATE should be set when creating new route [ 290.289063][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 290.300536][T16346] cgroup: Unknown subsys name 'pq4% 200000000000000000000' [ 292.658906][T16538] SELinux: security_context_str_to_sid (ü+NNLQsin*IYS% ىڧWdEusm.ѲIAʃyhvYv82V$a/1=Mw (-V4C]{t`IZHن2N{z@) failed with errno=-22 [ 292.712465][T16540] SELinux: security_context_str_to_sid () failed with errno=-22 [ 293.007468][T16558] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.015854][T16558] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 293.024512][T16558] rust_binder: Write failure EINVAL in pid:34 [ 293.035325][ T4250] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 293.043978][T16560] bridge0: port 3(veth0_to_bridge) entered blocking state [ 293.056477][T16560] bridge0: port 3(veth0_to_bridge) entered disabled state [ 293.063772][T16560] veth0_to_bridge: entered allmulticast mode [ 293.070487][T16560] veth0_to_bridge: entered promiscuous mode [ 293.076588][T16560] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.089047][T16560] bridge0: port 3(veth0_to_bridge) entered blocking state [ 293.096249][T16560] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 294.829945][ T4250] usb 3-1: Using ep0 maxpacket: 32 [ 298.497424][ T4250] usb 3-1: device descriptor read/all, error -71 [ 301.543495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.555699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.568552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.580653][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.593375][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.605450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.618169][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.630261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.643222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 301.655407][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.683308][ C1] sched: DL replenish lagged too much [ 306.548323][ C1] net_ratelimit: 44766 callbacks suppressed [ 306.548347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.548434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.554490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.567270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.578509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.590541][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.602685][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.619252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.626581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.638500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.555783][ C1] net_ratelimit: 54542 callbacks suppressed [ 311.555808][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.556057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.562084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.573937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.585813][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.598448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.609736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.621755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.633625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 311.646484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.563314][ C1] net_ratelimit: 64945 callbacks suppressed [ 316.563339][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.563429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.569397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.581744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.593335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.605666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.617261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.629191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 316.641295][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 316.653091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.570748][ C1] net_ratelimit: 88826 callbacks suppressed [ 321.570773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.570893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 321.576794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.588913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.600929][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.612771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.624857][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.636729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 321.648685][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 321.660736][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.578235][ C0] net_ratelimit: 104180 callbacks suppressed [ 326.578260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.578297][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.584522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.596370][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.608471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 326.620207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.632289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 326.644178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.656184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 326.668122][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.196509][ T722] macsec0: left allmulticast mode [ 331.201614][ T722] veth1_macvtap: left allmulticast mode [ 331.585816][ C0] net_ratelimit: 107513 callbacks suppressed [ 331.585840][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 331.585854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.585934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.592177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.604063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.616164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 331.628078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.640186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 331.651900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 331.663891][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 333.105422][ T722] macsec0: left promiscuous mode [ 336.376208][ T722] bridge0: port 3(macsec0) entered disabled state [ 336.593216][ C1] net_ratelimit: 109203 callbacks suppressed [ 336.593240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.593274][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 336.599352][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.599436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.611471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.623442][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.635527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 336.647286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 336.659267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 336.671161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 337.494905][ T722] bridge_slave_1: left allmulticast mode [ 337.554356][ T722] bridge_slave_1: left promiscuous mode [ 337.774350][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.173219][ T722] bridge_slave_0: left allmulticast mode [ 338.556282][ T722] bridge_slave_0: left promiscuous mode [ 339.024021][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.600732][ C1] net_ratelimit: 108439 callbacks suppressed [ 341.600758][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.600810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 341.607074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.619132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 341.631054][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.642979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 341.655057][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.667125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 341.679205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 341.691155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.608252][ C1] net_ratelimit: 109617 callbacks suppressed [ 346.608274][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.608321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 346.614606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.626805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 346.638636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.650622][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.662640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.674648][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 346.686494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 346.698446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.615745][ C1] net_ratelimit: 110749 callbacks suppressed [ 351.615771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.615808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 351.622128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.633950][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.646039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.658114][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 351.669820][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.681850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 351.693752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.705664][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.748680][ T36] audit: type=1400 audit(2000000131.300:21907): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[2828]" dev="pipefs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 352.258695][T16573] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 354.476712][T16573] CPU: 0 UID: 0 PID: 16573 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 354.476753][T16573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.476778][T16573] Call Trace: [ 354.476786][T16573] [ 354.476802][T16573] __dump_stack+0x21/0x30 [ 354.476841][T16573] dump_stack_lvl+0x10c/0x190 [ 354.476874][T16573] ? __cfi_dump_stack_lvl+0x10/0x10 [ 354.476907][T16573] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 354.476950][T16573] dump_stack+0x19/0x20 [ 354.476982][T16573] warn_alloc+0x1bc/0x2a0 [ 354.477015][T16573] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 354.477043][T16573] ? __cfi_warn_alloc+0x10/0x10 [ 354.477076][T16573] ? __get_vm_area_node+0x1dc/0x3a0 [ 354.477110][T16573] ? kcov_ioctl+0x5d/0x5c0 [ 354.477143][T16573] __vmalloc_node_range_noprof+0x68e/0x1420 [ 354.477184][T16573] ? locks_remove_posix+0x38b/0x580 [ 354.477210][T16573] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 354.477245][T16573] ? expand_files+0xd7/0x710 [ 354.477275][T16573] vmalloc_user_noprof+0x77/0x90 [ 354.477309][T16573] ? kcov_ioctl+0x5d/0x5c0 [ 354.477340][T16573] kcov_ioctl+0x5d/0x5c0 [ 354.477370][T16573] ? bpf_lsm_file_ioctl+0xd/0x20 [ 354.477404][T16573] ? security_file_ioctl+0x34/0xd0 [ 354.477431][T16573] ? __cfi_kcov_ioctl+0x10/0x10 [ 354.477462][T16573] __se_sys_ioctl+0x135/0x1b0 [ 354.477490][T16573] __x64_sys_ioctl+0x7f/0xa0 [ 354.477516][T16573] x64_sys_call+0x1878/0x2ee0 [ 354.477550][T16573] do_syscall_64+0x58/0xf0 [ 354.477579][T16573] ? clear_bhb_loop+0x50/0xa0 [ 354.477605][T16573] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 354.477629][T16573] RIP: 0033:0x7f7c33f8ebcb [ 354.477649][T16573] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 354.477671][T16573] RSP: 002b:00007ffe11ddfd30 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.477698][T16573] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f7c33f8ebcb [ 354.477715][T16573] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 354.477732][T16573] RBP: 00007f7c341e64e8 R08: 00000000000000da R09: 0000000000000000 [ 354.477748][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.477763][T16573] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 354.477780][T16573] [ 354.477795][T16573] Mem-Info: [ 356.623202][ C1] net_ratelimit: 105365 callbacks suppressed [ 356.623226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.623333][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.629341][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.641496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 356.653657][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.665546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 356.677733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.689872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:f6:23:f2:99:7d:a8, vlan:0) [ 356.701634][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 356.713570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.665520][T16573] active_anon:3558 inactive_anon:364 isolated_anon:0 [ 357.665520][T16573] active_file:9499 inactive_file:10617 isolated_file:0 [ 357.665520][T16573] unevictable:24017 dirty:13 writeback:0 [ 357.665520][T16573] slab_reclaimable:4721 slab_unreclaimable:94855 [ 357.665520][T16573] mapped:6072 shmem:163 pagetables:341 [ 357.665520][T16573] sec_pagetables:0 bounce:0 [ 357.665520][T16573] kernel_misc_reclaimable:0 [ 357.665520][T16573] free:1519933 free_pcp:1693 free_cma:0