last executing test programs: 5m10.933239321s ago: executing program 1 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000340)={{}, {0x2}, 0x113, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 5m10.868486362s ago: executing program 1 (id=735): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xd2, 0x4f, 0x3d, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x1}, {0xb, 0xa7f2, 0x8, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x4, 0x1}, {0x21ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0xc}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8a, 0x7fffffffffffe, 0xfffffffffffffffd, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x6, 0x8, 0x10, 0x2, 0x3, 0x0, 0x3], 0xf000, 0x1011c4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m10.819619552s ago: executing program 1 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m10.685709715s ago: executing program 1 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) 5m10.685493645s ago: executing program 1 (id=738): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @timestamp], 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x9, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0x1, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m10.660993715s ago: executing program 1 (id=739): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) 5m10.636746585s ago: executing program 32 (id=739): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x17) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) 2m25.593773372s ago: executing program 4 (id=4783): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="effdffff1200192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 2m25.585773132s ago: executing program 4 (id=4784): mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\x00\x00\x00', @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) mkdir(0x0, 0x19a) r1 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x8000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETFILTER(r6, 0x801054db, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x0) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300030c000000ff0e0000000000000200090010000000702600000000000003000600000000000200000000000000000000000000000002000100000004d300000506000000e0030005003c00000002000000ac1414000000000000000000"], 0x60}, 0x1, 0x7}, 0x0) vmsplice(r7, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r7, 0x407, 0x2000000) 2m25.08971902s ago: executing program 4 (id=4785): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0xfffe, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x17c}}, 0x0) 2m25.08826108s ago: executing program 4 (id=4786): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x8cff, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=']) 2m25.08765931s ago: executing program 4 (id=4787): r0 = socket$inet6(0x10, 0x2, 0x4) recvmmsg(r0, &(0x7f0000009300)=[{{0x0, 0xffa6, 0x0}, 0x6}], 0x1, 0x10002, 0x0) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) 2m25.034823851s ago: executing program 4 (id=4789): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x6f3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975b"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 2m9.885037485s ago: executing program 33 (id=4789): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) lsm_list_modules(0x0, &(0x7f0000000040)=0x18, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x24}], 0x1}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x6f3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1b, 0x0, &(0x7f0000000540)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975b"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 1m53.593006386s ago: executing program 5 (id=5631): fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000193000/0x2000)=nil, 0x2000, 0x0, 0x6011, r0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x8013, r1, 0x0) r2 = syz_clone(0x80843711, 0x0, 0xfffffcf7, 0x0, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r3}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/rpc\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x99) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) accept4(r4, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x80, 0x80800) setpriority(0x2, r2, 0xd2f4) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) syz_pidfd_open(r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000001fc0)=""/4104, 0x564}, {&(0x7f0000000400)=""/106, 0xfffffe7e}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0)=0x6, 0x4) 1m52.66951346s ago: executing program 5 (id=5651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5801000010001307030000000000000000000000017f003673700001000020000000000000000000000000004effaddd8aab8c64266f234682d916521ceb15f867d012d4af790a60079746c7bf062c1c38e24c4b9b46bc7656abcee6727ace65073cd6cd15bfd4e8b9ae822b6dc34bbdb0f96e2c5cc7a6fcc82a08fdd9d8ea156ebd08dec7650203d1ca"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x200000000000000, 0xfffffff8}, {0x0, 0x109003ff}, 0xc, 0x6}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046004}, 0x400c0) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x4c, &(0x7f0000000000)=0xfffffffd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) recvmmsg(r4, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001500)=""/257, 0x101}, {&(0x7f0000001640)=""/219, 0xdb}], 0x3}, 0x390}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x10022, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) fcntl$setlease(r6, 0x400, 0x1) mkdir(0x0, 0x108) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000000001010400000000141a000002000000240001801400018008000100e000000108000200640101000c0002800500010000000000fbff0640000000011400108008000140000000000800024000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) socket(0x1, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000400)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 1m51.589377457s ago: executing program 5 (id=5655): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x22, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x4010, r0, 0xccef8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00'}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x12) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendto(r2, 0xfffffffffffffffd, 0x0, 0x4000000, &(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-generic\x00'}, 0x80) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000001c0)=0xa0000000) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x3, 'macvlan1\x00', {0x9}, 0x1b}) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000302, 0xee01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) cachestat(r3, &(0x7f0000000280)={0x5, 0x3}, &(0x7f00000002c0), 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4011}, 0x20040090) write$UHID_INPUT(r3, &(0x7f0000000480)={0x8, {"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", 0x1000}}, 0x1006) r7 = getpgid(0x0) fcntl$lock(r3, 0x5, &(0x7f00000014c0)={0x0, 0x3, 0x8000000000000001, 0x3, r7}) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001500)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000001540)={0x1d, r8}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000015c0)={0x3, &(0x7f0000001580)=[{0x3, 0x0, 0x40, 0x80}, {0xfff, 0xe, 0xca, 0x8}, {0x6, 0x40, 0x4, 0x9}]}) splice(r0, &(0x7f0000001600), r2, &(0x7f0000001640)=0x7fffffffffffffff, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r9, 0x40049421, 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x22) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r5) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x38, r11, 0x9, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x904}]}]}, 0x38}}, 0x4000) 1m51.38899266s ago: executing program 5 (id=5657): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000001a40)=""/260, 0x104}, {&(0x7f0000000880)=""/4091, 0xffb}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000000380)=""/215, 0xd7}], 0x7}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40012100, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = timerfd_create(0x1, 0x800) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000180)=""/153, 0x99) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00009bb000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x9) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0x2}, &(0x7f00000003c0)=0x28) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xf6, 0x101301) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x50090}, 0x20000080) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x80, 0x5, 0x3, 0x6, 0x20, 0x9, &(0x7f0000000140)="d02d09629cf56a45ff7478a501b390314b22df1023768d8a0510a304ebfa2993"}) socket(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x3, 0x7ff, 0x0, @mcast2, @empty, 0x8000, 0x7800, 0x92, 0xfffff5f0}}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010026bd706e6e24139e07"], 0x40}}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x99b33000) ioctl$UFFDIO_COPY(r7, 0xc028aa05, 0x0) 1m51.299185812s ago: executing program 5 (id=5661): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x39000, 0x2) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000140), 0x1e) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000000480)=[@acquire={0x40046305, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$unix(r8, &(0x7f0000000600)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000100)="c8037df801a5775f32b2cf8b23e0c9dbb7e0b9d9ea7c9c58621b06cacc3c5adbfd3fc74ee3334df8a04cebb2ae5cc98aa0ff151bb85b21c424921ab51e2f99bbb2d3673bef6b13fb3eb60efaed5c09430275", 0x52}, {&(0x7f0000000180)="6cb05c7f30f2e75911b2c2c1bc828d8cef5ab50de6156dac0f43882d814af4c342271755bf95c941cf108af6f30922552cb741ec9a31ad7426f0cd1ff834ed69e868baa0c82b884671ad57c999b6694ddfba3ada2d38a213afd0e1cd023fdefde1f63961a2b119783c68", 0x6a}, {&(0x7f0000000200)="82cbc76d1cba6a2b6657d134b5babed9281dae5ed05d466581c5bf411c869541a8d2fa33354fc8a50a2cac7c2c4ca17280f4ae4cd4ef94070d46ab158e23d97e93988b45608bcb1faeda820abcc786451e156e4a3e853ae4b18b4e310bc98e81b32f6a5de57807753cdeea80dde63214610f02a839d42c2321ddc658d07455a7201b639d783e7f6660", 0x89}, {&(0x7f00000002c0)="8153e3fef1568eeebfac6d0583dbe16c84dcfb3230516643112dd4dd342609e60074d5c1d2706df0de688ceb18c8440a7398f623b879e3c6ec8203ce9e577bbb2769a122134fa156f3a407ace37099bf7e93d95bdcaf2d405d69f55ddf80c1", 0x5f}, {&(0x7f0000000340)="8d334cc1cbf1a9f34b35af249f27839b632f6752bda9ac214bbaefaa25c75debf9ec6ab9562cc4eb1c98b04e61d826202ae1495229b05b7b5700a9e3fb4a2b2384", 0x41}, {&(0x7f00000003c0)="87f7ef2f52bf18e1c74bc8a0eb78386d4d284c264d36f499b5b0d124d44ce6a756c580e2d093316e9faab9a8c56a0d87bff6144775e6a38ca64b8074c26f165fce85479e91722a06562eb6d36b7585e43626efa06ee9cc89710b51ef97a2d786302197800b6db75d7e43b14a5661f6f2fc054ef25f3d91a6bcab473bbdb50b1acd039c7348dba8006363c2fdb49c10b5a4bbe97fb5789dc7250d9413970c3e71d4058b11141e84bd861477d93c085d02bbb451325b16a6d1cda2028008ef10461cde9ddc9ae8443992741377fd10c0d8b025a7b7da60a25b33e3b0b1", 0xdc}, {&(0x7f00000004c0)="2b95e4c101e0e0843179355153df030ebfe50d6eb1864d46247451a546185ecfb33a92", 0x23}, {&(0x7f0000000500)="8289f055a8a2f5bc3a3a05bc4132c95c8b622c91972d96a32b56364e4461aec8ff506cd61e4f5aad5617ae15727feb0d36eb02a254647781ee88bbe590545aacf7ac62ce", 0x44}], 0x8, 0x0, 0x0, 0x40010}, 0x41) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000080)={0x4, {{0x2, 0x4e24, @multicast2=0xe000006a}}, {{0x2, 0x4e23, @remote}}}, 0x108) r10 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r12, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe000006a}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @local}}}], 0x20}, 0x20000080) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1m51.049448685s ago: executing program 5 (id=5664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r5 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer, @register_looper], 0x0, 0x0, 0x0}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'netdevsim0\x00', 0x9}) fcntl$lock(r2, 0x25, &(0x7f0000000440)={0x1, 0x6, 0x6, 0xfffffffffffffffa}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x84, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r1}, @enter_looper, @exit_looper, @increfs, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @register_looper, @dead_binder_done, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 1m35.82810363s ago: executing program 34 (id=5664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r5 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r5, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @acquire_done={0x40106309, 0x2}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer, @register_looper], 0x0, 0x0, 0x0}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x76) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'netdevsim0\x00', 0x9}) fcntl$lock(r2, 0x25, &(0x7f0000000440)={0x1, 0x6, 0x6, 0xfffffffffffffffa}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x84, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r1}, @enter_looper, @exit_looper, @increfs, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/39, 0x27, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @register_looper, @dead_binder_done, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) 1.710690303s ago: executing program 0 (id=8341): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, 0x0, 0x0) 1.498684706s ago: executing program 0 (id=8343): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x9f2}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x20}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40000000, 0x0) 1.27765892s ago: executing program 0 (id=8345): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0xfffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x11, 0xb}, {0x1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x1804}, 0x20000000) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='\x00\x05\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x05gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbcQ=v-<\r\xd1?$\x8b\x17Bn\x17h\xee\x96\x99I\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x18\x8f\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\xde\xff\xff\x06\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8C\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7z\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz\x03\x00\x00\x00\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7V\xfe\x0e\x94\xb1\x15w\xc4\x9c\xb6s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd\b\x02\xd5\xe9YE]\x8a\xb6n\x8f\x8dQ9\x13#\xed\x00\x00\x00\x00\x00\xff#\x86Dz\xcdK\xa0\xe9\x05\xb7\xd8\xea\xe1\xc9\x8f$4\xee\xf6\xe0\xedb\xc3NO\xc4\x10\xed\xe9J]l\x93\xa1\x88N\b\x1e\x9d\xf0\xcb\x85\x99e\x1e\xbf\x94I\xca\xc8\xcc\x86\x9a\xe13\xd0\xddM\xf4\x95\xb4\x11\xd5\x95\x90\xdd`\b\xdb!\xd0\a\x1f\v\f(D\x04\xa0\xac\x1e\x82O]F\xcf\xb9\xe0\xc5\xf3R\xe8E\xb3\xda\x86e@\xa7\x10\xd0S\x97\xd2r\x1c~\xb7\x83\xbd2\n{-\x8b\x9a\x1b\xcb\x1aR\a@p\xc0\x0f') 996.863264ms ago: executing program 0 (id=8350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x5c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "335b5840a27cdf0a2f5fd91889393b0aa27f251846dbd1ba2927b00b"}}]}]}, 0x5c}, 0x1, 0xfffffffffffffff5, 0x0, 0x4}, 0x4000004) 989.580054ms ago: executing program 0 (id=8354): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x9f2}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40000000, 0x0) 952.319035ms ago: executing program 0 (id=8357): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r0, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x0, 0x4, 0x9, 0x4, 0xffffffffffffffff, 0x5, 0xc, 0x9, 0x9, 0xffffffff, 0x3, 0x3, 0x8000, 0x58cc, 0x4, 0x1, 0x4, 0x0, 0xa, 0x2, 0x8, 0x268, 0x1, 0x4, 0x280, 0x2}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) copy_file_range(r2, &(0x7f0000000000)=0x9c, r1, &(0x7f0000000040)=0x2, 0x9, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x10001) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f00000000c0)) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') socket(0xa, 0x3, 0x3a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f000001b000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26000, 0x13, r1, 0x22e6c000) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000600)='(\x00') 868.251126ms ago: executing program 3 (id=8361): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020a00000030bd700000000000030006000000000002004a232000000000000020000000000200100000000000000000000002000003000500ff20000002"], 0x50}}, 0x0) 740.077158ms ago: executing program 3 (id=8364): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x9c3fa077fa966179, 0xfffffffd, 0xfffe, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x916d, 0x11}}}}}, 0x28}}, 0x4000054) 611.00501ms ago: executing program 2 (id=8366): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000006c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c2864800008d5e63efbe737f96705e670929f4af6002b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b2941b94b661304fd5d60789b89d3ef3d99f30910a5bba2e177312e082bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b21067693da9a9c2dbb8b8f5566791cf190201ded815b2ccd243f395ed94e0ad91", 0xfc) 461.604682ms ago: executing program 3 (id=8368): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x0, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffa2, 0x18, &(0x7f0000000000)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x100a, 0x3}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000280), 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@polexpire={0x190, 0x1b, 0x8, 0x70bd29, 0x25dfdbfb, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e24, 0x0, 0x4e21, 0x1, 0xa, 0x30, 0x80, 0x11, 0x0, 0xffffffffffffffff}, {0x80, 0x8, 0x6, 0x4979, 0x5, 0x5, 0x7, 0x5}, {0x9, 0x9, 0x5, 0x5}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x0, 0x3}, 0x2}, [@algo_crypt={0xce, 0x2, {{'pcbc(fcrypt)\x00'}, 0x430, "04c85981fcf505caf8529015d23e5eef7f39c7f24d3378b25b323c739ec341b3203dfd11290414d3e47e0960a193faf1027e322fc33bcce513d262e5a3b222f95dc25940d2964dcc42a73398925459cbc33ab34f2f913dfaeec61846f915de0dea11434181e1d5f1f510fe26119d239068044980fe05026df2d1eefdec78b923ff284ffb6a8b"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 332.342814ms ago: executing program 6 (id=8369): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x9f2}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xe3}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40000000, 0x0) 311.236825ms ago: executing program 2 (id=8370): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x584c}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000002dc0)=""/227, 0xe3}, {&(0x7f0000002ec0)=""/185, 0xb9}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000004000)=""/13, 0xd}, {&(0x7f0000004040)=""/136, 0x88}, {&(0x7f0000004100)=""/246, 0xf6}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000540)=""/200, 0xc8}], 0x8}, 0x2}, {{0x0, 0x4000, 0x0}, 0x737ec869}, {{0x0, 0x0, 0x0}, 0x800}], 0x6, 0x40000020, 0x0) 240.291986ms ago: executing program 6 (id=8371): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00') lseek(r0, 0xffffffffffff0000, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000480)=""/14, 0xe}], 0x1) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x900040, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) 240.090266ms ago: executing program 2 (id=8372): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f870006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000008003000200000000", 0x58}], 0x1) 228.311986ms ago: executing program 6 (id=8373): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x1c, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x80000000, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804) 210.538116ms ago: executing program 3 (id=8374): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180), 0x0) 117.725747ms ago: executing program 2 (id=8375): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001200192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe8090000f0fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 117.574967ms ago: executing program 6 (id=8376): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020a00000030bd700000000000030006000000000002004a230000000000000000000000000200100000000000000020000002000003000500ff20000002"], 0x50}}, 0x0) 84.922318ms ago: executing program 3 (id=8377): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00030000000005000000000800040001000000", 0x24) 76.215079ms ago: executing program 2 (id=8378): write(0xffffffffffffffff, &(0x7f00000006c0)="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", 0xfc) 12.452099ms ago: executing program 6 (id=8379): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4b301, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x10, r0, 0x22e7c000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000600)='(\x00') 6.147629ms ago: executing program 6 (id=8380): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000a000)=[{{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000000940)=""/4104, 0x9f2}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000140)=""/149, 0x95}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x300}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40000000, 0x0) 3.592049ms ago: executing program 2 (id=8381): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="020100020a00000030bd700000000000030006000000000002004a232000000000000000000000040200100000000000000000000002000003000500ff20000002"], 0x50}}, 0x0) 0s ago: executing program 3 (id=8382): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x44, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x15, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f79"]}]}, 0x44}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) (async) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, &(0x7f0000000140)) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x6, 0x4, 0x1, 0xffffadac, 0x3, 0x8001, 0x9}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000280)={0x0, 'macvlan0\x00', {0x3}, 0x1}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) (async) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x200, 0x8, 0x1, 0x40}) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x200, 0x8, 0x1, 0x40}) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pause() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x0, 0x12}, @flat=@binder={0x73622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ngth. [ 237.180929][T12896] 9p: Unknown access argument ad=0x0000000000000008: -22 [ 237.274817][T12913] 9pnet_fd: Insufficient options for proto=fd [ 237.731989][ T36] audit: type=1400 audit(244.711:873): avc: denied { mounton } for pid=12936 comm="syz.2.5167" path="/file0" dev="rootfs" ino=41513 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 238.032639][T12947] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 238.041381][T12947] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 238.912565][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5206'. [ 239.034920][T13042] cgroup: fork rejected by pids controller in /syz2 [ 239.101882][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5210'. [ 239.218909][T13079] netlink: 'syz.3.5217': attribute type 4 has an invalid length. [ 240.441348][T13168] bpf: Bad value for 'mode' [ 240.539552][T13166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=13166 comm=syz.2.5240 [ 240.982286][T13180] overlayfs: failed to clone upperpath [ 241.193620][T13192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34578 sclass=netlink_tcpdiag_socket pid=13192 comm=syz.3.5253 [ 241.399359][T13220] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=42514 sclass=netlink_tcpdiag_socket pid=13220 comm=syz.3.5265 [ 241.474295][T13211] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.504380][T13211] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.524899][T13211] bridge_slave_0: entered allmulticast mode [ 241.550934][T13211] bridge_slave_0: entered promiscuous mode [ 241.570311][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.597645][T13211] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.614996][T13211] bridge_slave_1: entered allmulticast mode [ 241.626172][T13211] bridge_slave_1: entered promiscuous mode [ 241.718597][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.725700][T13211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.733022][T13211] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.740054][T13211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.780020][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.797911][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.808517][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.815604][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.833591][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.840671][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.868224][T13211] veth0_vlan: entered promiscuous mode [ 241.881930][T13211] veth1_macvtap: entered promiscuous mode [ 241.923138][T13249] FAT-fs (rnullb0): bogus number of reserved sectors [ 241.930837][T13249] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 242.097130][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59922 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.2.5274 [ 242.223273][T13044] syz.2.5208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 242.313994][T13044] CPU: 1 UID: 0 PID: 13044 Comm: syz.2.5208 Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 242.314029][T13044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 242.314041][T13044] Call Trace: [ 242.314047][T13044] [ 242.314055][T13044] __dump_stack+0x21/0x30 [ 242.314089][T13044] dump_stack_lvl+0x10c/0x190 [ 242.314110][T13044] ? __cfi_dump_stack_lvl+0x10/0x10 [ 242.314131][T13044] ? ___ratelimit+0x3f7/0x5a0 [ 242.314156][T13044] dump_stack+0x19/0x20 [ 242.314176][T13044] dump_header+0xd7/0x490 [ 242.314202][T13044] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 242.314222][T13044] oom_kill_process+0x4c0/0x7e0 [ 242.314238][T13044] ? sched_clock_cpu+0x75/0x400 [ 242.314259][T13044] out_of_memory+0x7ee/0xbd0 [ 242.314276][T13044] ? __cfi_out_of_memory+0x10/0x10 [ 242.314291][T13044] ? mutex_lock_killable+0x92/0x1c0 [ 242.314314][T13044] ? __cfi_mutex_lock_killable+0x10/0x10 [ 242.314337][T13044] mem_cgroup_out_of_memory+0x279/0x350 [ 242.314359][T13044] ? drain_obj_stock+0xed0/0xed0 [ 242.314381][T13044] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 242.314405][T13044] try_charge_memcg+0x8f7/0xde0 [ 242.314426][T13044] ? __cfi_try_charge_memcg+0x10/0x10 [ 242.314446][T13044] ? __alloc_pages_noprof+0x30d/0x6c0 [ 242.314465][T13044] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 242.314484][T13044] ? __folio_batch_add_and_move+0x2ab/0x370 [ 242.314503][T13044] __mem_cgroup_charge+0xf6/0x410 [ 242.314524][T13044] ? __kasan_check_write+0x18/0x20 [ 242.314546][T13044] ? _raw_spin_lock+0x8c/0x120 [ 242.314565][T13044] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 242.314589][T13044] shmem_alloc_and_add_folio+0x86d/0x1050 [ 242.314618][T13044] ? put_swap_device+0x130/0x130 [ 242.314654][T13044] ? shmem_huge_global_enabled+0x2da/0x360 [ 242.314680][T13044] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 242.314705][T13044] ? __kasan_check_write+0x18/0x20 [ 242.314726][T13044] ? _raw_spin_lock+0x8c/0x120 [ 242.314744][T13044] shmem_get_folio_gfp+0x5f0/0x1380 [ 242.314769][T13044] ? shmem_get_folio+0xc0/0xc0 [ 242.314796][T13044] ? follow_page_pte+0xa5c/0xb90 [ 242.314815][T13044] ? inode_to_bdi+0x6d/0x100 [ 242.314835][T13044] shmem_write_begin+0xf4/0x270 [ 242.314862][T13044] generic_perform_write+0x32d/0x960 [ 242.314884][T13044] ? __cfi_generic_perform_write+0x10/0x10 [ 242.314905][T13044] ? down_write+0xe9/0x2a0 [ 242.314929][T13044] ? file_update_time+0xa3/0x220 [ 242.314946][T13044] shmem_file_write_iter+0x105/0x130 [ 242.314964][T13044] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 242.314982][T13044] __kernel_write_iter+0x395/0x830 [ 242.315004][T13044] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 242.315025][T13044] ? __cfi___kernel_write_iter+0x10/0x10 [ 242.315047][T13044] ? get_dump_page+0x160/0x220 [ 242.315063][T13044] ? __asan_memset+0x39/0x50 [ 242.315083][T13044] ? iov_iter_bvec+0xc0/0x180 [ 242.315109][T13044] dump_user_range+0xb06/0xdf0 [ 242.315130][T13044] ? __cfi_dump_emit+0x10/0x10 [ 242.315150][T13044] ? __cfi_dump_user_range+0x10/0x10 [ 242.315173][T13044] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 242.315195][T13044] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 242.315217][T13044] elf_core_dump+0x2cd9/0x3810 [ 242.315236][T13044] ? __cfi_elf_core_dump+0x10/0x10 [ 242.315259][T13044] ? dump_interrupted+0xf0/0xf0 [ 242.315279][T13044] ? filp_open+0x182/0x1d0 [ 242.315297][T13044] ? 0xffffffffff600000 [ 242.315312][T13044] do_coredump+0x1bfa/0x2bd0 [ 242.315336][T13044] ? __cfi_do_coredump+0x10/0x10 [ 242.315357][T13044] ? asm_exc_page_fault+0x2b/0x30 [ 242.315387][T13044] ? __kasan_slab_free+0x6a/0x80 [ 242.315413][T13044] ? kmem_cache_free+0x1c1/0x510 [ 242.315437][T13044] ? get_signal+0xa75/0x14f0 [ 242.315457][T13044] get_signal+0x11fd/0x14f0 [ 242.315480][T13044] arch_do_signal_or_restart+0x96/0x720 [ 242.315505][T13044] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 242.315533][T13044] irqentry_exit_to_user_mode+0x4e/0xb0 [ 242.315560][T13044] irqentry_exit+0x16/0x60 [ 242.315584][T13044] exc_page_fault+0x66/0xc0 [ 242.315658][T13044] asm_exc_page_fault+0x2b/0x30 [ 242.315681][T13044] RIP: 0033:0x3a5cec [ 242.315698][T13044] Code: Unable to access opcode bytes at 0x3a5cc2. [ 242.315708][T13044] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 242.315726][T13044] RAX: 0000000000000000 RBX: 00007f6194db6160 RCX: 00007f6194b8e9a9 [ 242.315741][T13044] RDX: 0000200000000400 RSI: 00002000000000c0 RDI: 0000000020088000 [ 242.315755][T13044] RBP: 00007f6194c10d69 R08: 0000200000000480 R09: 0000200000000480 [ 242.315769][T13044] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 242.315782][T13044] R13: 0000000000000001 R14: 00007f6194db6160 R15: 00007ffef22bf228 [ 242.315797][T13044] [ 242.316486][T13044] memory: usage 307200kB, limit 307200kB, failcnt 23668 [ 242.511965][T13276] Invalid ELF header len 16 [ 242.515675][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 242.520798][T13044] memory+swap: usage 432160kB, limit 9007199254740988kB, failcnt 0 [ 242.681617][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.682652][T13044] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 242.689924][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.695691][T13044] Memory cgroup stats for [ 242.698749][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 242.703032][T13044] /syz2 [ 242.708239][ T31] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.711842][T13044] : [ 242.719502][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.724569][T13044] cache 314204160 [ 242.735110][ T31] usb 6-1: config 0 descriptor?? [ 242.749192][T13044] rss 364544 [ 242.873229][T13044] rss_huge 0 [ 242.876480][T13044] shmem 314204160 [ 242.880193][T13044] mapped_file 0 [ 242.884227][T13044] dirty 0 [ 242.887198][T13044] writeback 0 [ 242.890855][T13044] workingset_refault_anon 3109 [ 242.895761][T13044] workingset_refault_file 131 [ 242.900689][T13044] swap 127959040 [ 242.904249][T13044] swapcached 36864 [ 242.908056][T13044] pgpgin 789511 [ 242.911624][T13044] pgpgout 719865 [ 242.915167][T13044] pgfault 584100 [ 242.918708][T13044] pgmajfault 458 [ 242.922566][T13044] inactive_anon 231677952 [ 242.927068][T13044] active_anon 82894848 [ 242.931546][T13044] inactive_file 0 [ 242.935488][T13044] active_file 0 [ 242.939087][T13044] unevictable 0 [ 242.942882][T13044] hierarchical_memory_limit 314572800 [ 242.948252][T13044] hierarchical_memsw_limit 9223372036854771712 [ 242.954901][T13044] total_cache 314204160 [ 242.959135][T13044] total_rss 364544 [ 242.963102][T13044] total_rss_huge 0 [ 242.966829][T13044] total_shmem 314204160 [ 242.971000][T13044] total_mapped_file 0 [ 242.974974][T13044] total_dirty 0 [ 242.978422][T13044] total_writeback 0 [ 242.982512][T13044] total_workingset_refault_anon 3109 [ 242.987797][T13044] total_workingset_refault_file 131 [ 242.993042][T13044] total_swap 127959040 [ 242.997105][T13044] total_swapcached 36864 [ 243.001600][T13044] total_pgpgin 789511 [ 243.005611][T13044] total_pgpgout 719865 [ 243.009669][T13044] total_pgfault 584100 [ 243.013788][T13044] total_pgmajfault 458 [ 243.017849][T13044] total_inactive_anon 231677952 [ 243.022720][T13044] total_active_anon 82894848 [ 243.027309][T13044] total_inactive_file 0 [ 243.031525][T13044] total_active_file 0 [ 243.035540][T13044] total_unevictable 0 [ 243.039514][T13044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.47,pid=433,uid=0 [ 243.054260][T13044] Memory cgroup out of memory: Killed process 433 (syz.2.47) total-vm:93808kB, anon-rss:980kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 243.125222][T13048] syz.2.5208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 243.136884][T13048] CPU: 1 UID: 0 PID: 13048 Comm: syz.2.5208 Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 243.136918][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.136931][T13048] Call Trace: [ 243.136937][T13048] [ 243.136945][T13048] __dump_stack+0x21/0x30 [ 243.136972][T13048] dump_stack_lvl+0x10c/0x190 [ 243.136997][T13048] ? __cfi_dump_stack_lvl+0x10/0x10 [ 243.137019][T13048] ? ___ratelimit+0x3f7/0x5a0 [ 243.137048][T13048] dump_stack+0x19/0x20 [ 243.137069][T13048] dump_header+0xd7/0x490 [ 243.137095][T13048] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 243.137117][T13048] oom_kill_process+0x4c0/0x7e0 [ 243.137135][T13048] ? sched_clock_cpu+0x75/0x400 [ 243.137157][T13048] out_of_memory+0x7ee/0xbd0 [ 243.137175][T13048] ? __cfi_out_of_memory+0x10/0x10 [ 243.137192][T13048] ? mutex_lock_killable+0x92/0x1c0 [ 243.137217][T13048] ? __cfi_mutex_lock_killable+0x10/0x10 [ 243.137243][T13048] mem_cgroup_out_of_memory+0x279/0x350 [ 243.137268][T13048] ? drain_obj_stock+0xed0/0xed0 [ 243.137293][T13048] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 243.137318][T13048] try_charge_memcg+0x8f7/0xde0 [ 243.137340][T13048] ? __cfi_try_charge_memcg+0x10/0x10 [ 243.137361][T13048] ? __alloc_pages_noprof+0x30d/0x6c0 [ 243.137382][T13048] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 243.137402][T13048] ? update_curr+0xdc/0xaa0 [ 243.137426][T13048] __mem_cgroup_charge+0xf6/0x410 [ 243.137449][T13048] ? save_fpregs_to_fpstate+0x196/0x230 [ 243.137477][T13048] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 243.137499][T13048] ? __kasan_check_write+0x18/0x20 [ 243.137521][T13048] ? __switch_to+0xc7b/0x1310 [ 243.137545][T13048] shmem_alloc_and_add_folio+0x86d/0x1050 [ 243.137574][T13048] ? put_swap_device+0x130/0x130 [ 243.137601][T13048] ? shmem_huge_global_enabled+0x2da/0x360 [ 243.137627][T13048] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 243.137655][T13048] shmem_get_folio_gfp+0x5f0/0x1380 [ 243.137683][T13048] ? shmem_get_folio+0xc0/0xc0 [ 243.137706][T13048] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 243.137728][T13048] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 243.137750][T13048] ? inode_to_bdi+0x6d/0x100 [ 243.137770][T13048] shmem_write_begin+0xf4/0x270 [ 243.137798][T13048] generic_perform_write+0x32d/0x960 [ 243.137827][T13048] ? __cfi_generic_perform_write+0x10/0x10 [ 243.137849][T13048] ? down_write+0xe9/0x2a0 [ 243.137873][T13048] ? mnt_get_write_access_file+0x1af/0x3b0 [ 243.137893][T13048] ? mnt_put_write_access_file+0xc2/0x100 [ 243.137913][T13048] ? file_update_time+0x1ef/0x220 [ 243.137932][T13048] shmem_file_write_iter+0x105/0x130 [ 243.137951][T13048] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 243.137971][T13048] __kernel_write_iter+0x395/0x830 [ 243.137995][T13048] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 243.138015][T13048] ? __cfi___kernel_write_iter+0x10/0x10 [ 243.138038][T13048] ? get_dump_page+0x160/0x220 [ 243.138057][T13048] ? __asan_memset+0x39/0x50 [ 243.138078][T13048] ? iov_iter_bvec+0xc0/0x180 [ 243.138104][T13048] dump_user_range+0xb06/0xdf0 [ 243.138131][T13048] ? __cfi_dump_emit+0x10/0x10 [ 243.138154][T13048] ? __cfi_dump_user_range+0x10/0x10 [ 243.138177][T13048] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 243.138201][T13048] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 243.138227][T13048] elf_core_dump+0x2cd9/0x3810 [ 243.138248][T13048] ? __cfi_elf_core_dump+0x10/0x10 [ 243.138271][T13048] ? dump_interrupted+0xf0/0xf0 [ 243.138293][T13048] ? filp_open+0x182/0x1d0 [ 243.138312][T13048] ? 0xffffffffff600000 [ 243.138328][T13048] do_coredump+0x1bfa/0x2bd0 [ 243.138353][T13048] ? __cfi_do_coredump+0x10/0x10 [ 243.138375][T13048] ? asm_exc_page_fault+0x2b/0x30 [ 243.138405][T13048] ? __kasan_slab_free+0x6a/0x80 [ 243.138437][T13048] ? kmem_cache_free+0x1c1/0x510 [ 243.138460][T13048] ? get_signal+0xa75/0x14f0 [ 243.138481][T13048] get_signal+0x11fd/0x14f0 [ 243.138504][T13048] arch_do_signal_or_restart+0x96/0x720 [ 243.138529][T13048] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 243.138556][T13048] irqentry_exit_to_user_mode+0x4e/0xb0 [ 243.138582][T13048] irqentry_exit+0x16/0x60 [ 243.138607][T13048] exc_page_fault+0x66/0xc0 [ 243.138632][T13048] asm_exc_page_fault+0x2b/0x30 [ 243.138654][T13048] RIP: 0033:0x3a5cec [ 243.138673][T13048] Code: Unable to access opcode bytes at 0x3a5cc2. [ 243.138682][T13048] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 243.138700][T13048] RAX: 0000000000000000 RBX: 00007f6194db6160 RCX: 00007f6194b8e9a9 [ 243.138715][T13048] RDX: 0000200000000400 RSI: 00002000000000c0 RDI: 0000000020088000 [ 243.138729][T13048] RBP: 00007f6194c10d69 R08: 0000200000000480 R09: 0000200000000480 [ 243.138743][T13048] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 243.138756][T13048] R13: 0000000000000001 R14: 00007f6194db6160 R15: 00007ffef22bf228 [ 243.138772][T13048] [ 243.138816][T13048] memory: usage 307200kB, limit 307200kB, failcnt 24540 [ 243.432726][ T36] audit: type=1400 audit(250.411:874): avc: denied { read write } for pid=13254 comm="syz.5.5276" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.437300][ T31] plantronics 0003:047F:FFFF.0020: item fetching failed at offset 13/15 [ 243.446865][T13048] memory+swap: usage 431980kB, limit 9007199254740988kB, failcnt 0 [ 243.447695][ T31] plantronics 0003:047F:FFFF.0020: parse failed [ 243.464200][ T36] audit: type=1400 audit(250.411:875): avc: denied { open } for pid=13254 comm="syz.5.5276" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 243.464237][T13048] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 243.464250][T13048] Memory cgroup stats for /syz2 [ 243.475435][ T31] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22 [ 243.488598][T13048] : [ 243.700075][T13048] cache 314204160 [ 243.706319][T13048] rss 364544 [ 243.709713][T13048] rss_huge 0 [ 243.720642][ T4792] usb 6-1: USB disconnect, device number 2 [ 243.727652][T13048] shmem 314204160 [ 243.731510][ T36] audit: type=1400 audit(250.681:876): avc: denied { bpf } for pid=13323 comm="syz.0.5301" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.739933][T13048] mapped_file 0 [ 243.751851][T13325] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13325 comm=syz.0.5301 [ 243.754915][T13048] dirty 0 [ 243.768376][T13325] x_tables: duplicate underflow at hook 1 [ 243.770957][T13048] writeback 0 [ 243.779685][T13048] workingset_refault_anon 3109 [ 243.785187][T13048] workingset_refault_file 131 [ 243.789881][T13048] swap 127959040 [ 243.794039][T13048] swapcached 36864 [ 243.797600][T13328] veth0_vlan: left promiscuous mode [ 243.797918][T13048] pgpgin 789511 [ 243.803359][T13328] veth0_vlan: entered allmulticast mode [ 243.806486][T13048] pgpgout 719865 [ 243.806497][T13048] pgfault 584100 [ 243.806503][T13048] pgmajfault 458 [ 243.806510][T13048] inactive_anon 231677952 [ 243.806516][T13048] active_anon 82894848 [ 243.806523][T13048] inactive_file 0 [ 243.812753][T13328] veth0_vlan: entered promiscuous mode [ 243.815793][T13048] active_file 0 [ 243.845221][T13048] unevictable 0 [ 243.848690][T13048] hierarchical_memory_limit 314572800 [ 243.854183][T13048] hierarchical_memsw_limit 9223372036854771712 [ 243.860347][T13048] total_cache 314204160 [ 243.864560][T13048] total_rss 364544 [ 243.868491][T13048] total_rss_huge 0 [ 243.872705][T13048] total_shmem 314204160 [ 243.876860][T13048] total_mapped_file 0 [ 243.880489][T13334] fuse: Bad value for 'fd' [ 243.880870][T13048] total_dirty 0 [ 243.888670][T13048] total_writeback 0 [ 243.893054][T13048] total_workingset_refault_anon 3109 [ 243.898860][T13048] total_workingset_refault_file 131 [ 243.904137][T13048] total_swap 127959040 [ 243.908958][T13048] total_swapcached 36864 [ 243.913238][T13048] total_pgpgin 789511 [ 243.917209][T13048] total_pgpgout 719865 [ 243.921296][T13048] total_pgfault 584100 [ 243.925515][T13048] total_pgmajfault 458 [ 243.927046][T13338] /dev/rnullb0: Can't lookup blockdev [ 243.929770][T13048] total_inactive_anon 231677952 [ 243.937633][T13338] overlayfs: failed to clone upperpath [ 243.939851][T13048] total_active_anon 82894848 [ 243.939861][T13048] total_inactive_file 0 [ 243.939868][T13048] total_active_file 0 [ 243.939875][T13048] total_unevictable 0 [ 243.962228][T13048] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5208,pid=13053,uid=0 [ 243.977451][T13048] Memory cgroup out of memory: Killed process 13053 (syz.2.5208) total-vm:90100kB, anon-rss:976kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 244.142199][T13045] syz.2.5208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 244.214426][T13045] CPU: 0 UID: 0 PID: 13045 Comm: syz.2.5208 Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 244.214460][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.214473][T13045] Call Trace: [ 244.214479][T13045] [ 244.214487][T13045] __dump_stack+0x21/0x30 [ 244.214530][T13045] dump_stack_lvl+0x10c/0x190 [ 244.214551][T13045] ? __cfi_dump_stack_lvl+0x10/0x10 [ 244.214572][T13045] ? ___ratelimit+0x3f7/0x5a0 [ 244.214595][T13045] dump_stack+0x19/0x20 [ 244.214616][T13045] dump_header+0xd7/0x490 [ 244.214641][T13045] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 244.214662][T13045] oom_kill_process+0x4c0/0x7e0 [ 244.214679][T13045] ? sched_clock_cpu+0x75/0x400 [ 244.214701][T13045] out_of_memory+0x7ee/0xbd0 [ 244.214718][T13045] ? __cfi_out_of_memory+0x10/0x10 [ 244.214742][T13045] ? mutex_lock_killable+0x104/0x1c0 [ 244.214767][T13045] ? __cfi_mutex_lock_killable+0x10/0x10 [ 244.214792][T13045] mem_cgroup_out_of_memory+0x279/0x350 [ 244.214817][T13045] ? drain_obj_stock+0xed0/0xed0 [ 244.214842][T13045] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 244.214865][T13045] try_charge_memcg+0x8f7/0xde0 [ 244.214886][T13045] ? __cfi_try_charge_memcg+0x10/0x10 [ 244.214907][T13045] ? __alloc_pages_noprof+0x30d/0x6c0 [ 244.214927][T13045] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 244.214946][T13045] ? __folio_batch_add_and_move+0x2ab/0x370 [ 244.214966][T13045] __mem_cgroup_charge+0xf6/0x410 [ 244.214988][T13045] ? __kasan_check_write+0x18/0x20 [ 244.215009][T13045] ? _raw_spin_lock+0x8c/0x120 [ 244.215028][T13045] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 244.215051][T13045] shmem_alloc_and_add_folio+0x86d/0x1050 [ 244.215080][T13045] ? put_swap_device+0x130/0x130 [ 244.215107][T13045] ? shmem_huge_global_enabled+0x2da/0x360 [ 244.215133][T13045] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 244.215158][T13045] ? __kasan_check_write+0x18/0x20 [ 244.215178][T13045] ? _raw_spin_lock+0x8c/0x120 [ 244.215195][T13045] shmem_get_folio_gfp+0x5f0/0x1380 [ 244.215220][T13045] ? shmem_get_folio+0xc0/0xc0 [ 244.215244][T13045] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 244.215265][T13045] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 244.215286][T13045] ? inode_to_bdi+0x6d/0x100 [ 244.215306][T13045] shmem_write_begin+0xf4/0x270 [ 244.215333][T13045] generic_perform_write+0x32d/0x960 [ 244.215357][T13045] ? __cfi_generic_perform_write+0x10/0x10 [ 244.215378][T13045] ? down_write+0xe9/0x2a0 [ 244.215402][T13045] ? mnt_get_write_access_file+0x1af/0x3b0 [ 244.215422][T13045] ? mnt_put_write_access_file+0xc2/0x100 [ 244.215442][T13045] ? file_update_time+0x1ef/0x220 [ 244.215462][T13045] shmem_file_write_iter+0x105/0x130 [ 244.215481][T13045] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 244.215500][T13045] __kernel_write_iter+0x395/0x830 [ 244.215523][T13045] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 244.215544][T13045] ? __cfi___kernel_write_iter+0x10/0x10 [ 244.215567][T13045] ? get_dump_page+0x160/0x220 [ 244.215585][T13045] ? __asan_memset+0x39/0x50 [ 244.215607][T13045] ? iov_iter_bvec+0xc0/0x180 [ 244.215632][T13045] dump_user_range+0xb06/0xdf0 [ 244.215657][T13045] ? __cfi_dump_emit+0x10/0x10 [ 244.215679][T13045] ? __cfi_dump_user_range+0x10/0x10 [ 244.215701][T13045] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 244.215725][T13045] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 244.215756][T13045] elf_core_dump+0x2cd9/0x3810 [ 244.215777][T13045] ? __cfi_elf_core_dump+0x10/0x10 [ 244.215799][T13045] ? dump_interrupted+0xf0/0xf0 [ 244.215821][T13045] ? filp_open+0x182/0x1d0 [ 244.215839][T13045] ? 0xffffffffff600000 [ 244.215859][T13045] do_coredump+0x1bfa/0x2bd0 [ 244.215884][T13045] ? __cfi_do_coredump+0x10/0x10 [ 244.215905][T13045] ? asm_exc_page_fault+0x2b/0x30 [ 244.215935][T13045] ? __kasan_slab_free+0x6a/0x80 [ 244.215960][T13045] ? kmem_cache_free+0x1c1/0x510 [ 244.215984][T13045] ? get_signal+0xa75/0x14f0 [ 244.216004][T13045] get_signal+0x11fd/0x14f0 [ 244.216025][T13045] arch_do_signal_or_restart+0x96/0x720 [ 244.216050][T13045] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 244.216077][T13045] irqentry_exit_to_user_mode+0x4e/0xb0 [ 244.216103][T13045] irqentry_exit+0x16/0x60 [ 244.216127][T13045] exc_page_fault+0x66/0xc0 [ 244.216152][T13045] asm_exc_page_fault+0x2b/0x30 [ 244.216173][T13045] RIP: 0033:0x3a5cec [ 244.216192][T13045] Code: Unable to access opcode bytes at 0x3a5cc2. [ 244.216201][T13045] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 244.216219][T13045] RAX: 0000000000000000 RBX: 00007f6194db6160 RCX: 00007f6194b8e9a9 [ 244.216233][T13045] RDX: 0000200000000400 RSI: 00002000000000c0 RDI: 0000000020088000 [ 244.216247][T13045] RBP: 00007f6194c10d69 R08: 0000200000000480 R09: 0000200000000480 [ 244.216260][T13045] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 244.216271][T13045] R13: 0000000000000001 R14: 00007f6194db6160 R15: 00007ffef22bf228 [ 244.216286][T13045] [ 244.216293][T13045] memory: usage 307152kB, limit 307200kB, failcnt 25616 [ 244.696498][T13045] memory+swap: usage 432188kB, limit 9007199254740988kB, failcnt 0 [ 244.714822][ T36] audit: type=1400 audit(251.691:877): avc: denied { map } for pid=13346 comm="syz.5.5310" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.750018][T13045] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 244.757156][T13045] Memory cgroup stats for /syz2: [ 244.757511][T13045] cache 314200064 [ 244.766664][T13045] rss 368640 [ 244.770036][T13045] rss_huge 0 [ 244.773667][T13045] shmem 314195968 [ 244.777370][T13045] mapped_file 0 [ 244.781047][T13045] dirty 0 [ 244.784146][T13045] writeback 0 [ 244.787478][T13045] workingset_refault_anon 3112 [ 244.792934][T13045] workingset_refault_file 133 [ 244.798318][T13045] swap 127987712 [ 244.804411][T13045] swapcached 8192 [ 244.812664][T13045] pgpgin 798828 [ 244.818211][T13045] pgpgout 729182 [ 244.823988][T13045] pgfault 584210 [ 244.828643][T13045] pgmajfault 463 [ 244.832402][T13045] inactive_anon 114769920 [ 244.836785][T13045] active_anon 199798784 [ 244.841190][T13045] inactive_file 4096 [ 244.845107][T13045] active_file 0 [ 244.848588][T13045] unevictable 0 [ 244.852358][T13045] hierarchical_memory_limit 314572800 [ 244.857780][T13045] hierarchical_memsw_limit 9223372036854771712 [ 244.864277][T13045] total_cache 314200064 [ 244.868456][T13045] total_rss 368640 [ 244.872408][T13045] total_rss_huge 0 [ 244.876192][T13045] total_shmem 314195968 [ 244.880408][T13045] total_mapped_file 0 [ 244.884701][T13045] total_dirty 0 [ 244.888232][T13045] total_writeback 0 [ 244.892252][T13045] total_workingset_refault_anon 3112 [ 244.897567][T13045] total_workingset_refault_file 133 [ 244.903020][T13045] total_swap 127987712 [ 244.907147][T13045] total_swapcached 8192 [ 244.911519][T13045] total_pgpgin 798828 [ 244.915603][T13045] total_pgpgout 729182 [ 244.919705][T13045] total_pgfault 584210 [ 244.924043][T13045] total_pgmajfault 463 [ 244.928169][T13045] total_inactive_anon 114769920 [ 244.933212][T13045] total_active_anon 199798784 [ 244.937915][T13045] total_inactive_file 4096 [ 244.942568][T13045] total_active_file 0 [ 244.946583][T13045] total_unevictable 0 [ 244.950783][T13045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5208,pid=13052,uid=0 [ 244.965940][T13045] Memory cgroup out of memory: Killed process 13052 (syz.2.5208) total-vm:90100kB, anon-rss:976kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 245.069308][ T290] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 245.164286][ T290] CPU: 0 UID: 0 PID: 290 Comm: syz-executor Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 245.164322][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.164334][ T290] Call Trace: [ 245.164340][ T290] [ 245.164347][ T290] __dump_stack+0x21/0x30 [ 245.164375][ T290] dump_stack_lvl+0x10c/0x190 [ 245.164396][ T290] ? __cfi_dump_stack_lvl+0x10/0x10 [ 245.164418][ T290] ? ___ratelimit+0x3f7/0x5a0 [ 245.164439][ T290] dump_stack+0x19/0x20 [ 245.164459][ T290] dump_header+0xd7/0x490 [ 245.164482][ T290] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 245.164510][ T290] oom_kill_process+0x4c0/0x7e0 [ 245.164529][ T290] ? sched_clock_cpu+0x75/0x400 [ 245.164550][ T290] out_of_memory+0x7ee/0xbd0 [ 245.164567][ T290] ? __cfi_out_of_memory+0x10/0x10 [ 245.164584][ T290] ? mutex_lock_killable+0x92/0x1c0 [ 245.164609][ T290] ? __cfi_mutex_lock_killable+0x10/0x10 [ 245.164633][ T290] mem_cgroup_out_of_memory+0x279/0x350 [ 245.164658][ T290] ? drain_obj_stock+0xed0/0xed0 [ 245.164682][ T290] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 245.164706][ T290] try_charge_memcg+0x8f7/0xde0 [ 245.164726][ T290] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 245.164748][ T290] ? __cfi_try_charge_memcg+0x10/0x10 [ 245.164769][ T290] ? __alloc_pages_noprof+0x30d/0x6c0 [ 245.164794][ T290] __mem_cgroup_charge+0xf6/0x410 [ 245.164816][ T290] ? filemap_get_entry+0x3fb/0x460 [ 245.164836][ T290] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 245.164861][ T290] filemap_add_folio+0x57/0x2d0 [ 245.164879][ T290] __filemap_get_folio+0x4c2/0x7c0 [ 245.164899][ T290] filemap_fault+0xb41/0x16b0 [ 245.164919][ T290] ? __cfi___switch_to+0x10/0x10 [ 245.164943][ T290] ? __cfi_filemap_fault+0x10/0x10 [ 245.164962][ T290] ? finish_task_switch+0x13a/0x780 [ 245.164982][ T290] ? __switch_to_asm+0x3d/0x70 [ 245.165005][ T290] ? __cfi_filemap_map_pages+0x10/0x10 [ 245.165027][ T290] ? wait_consider_task+0x11a2/0x2840 [ 245.165050][ T290] do_pte_missing+0x376e/0x3e50 [ 245.165070][ T290] ? __kasan_check_write+0x18/0x20 [ 245.165092][ T290] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 245.165113][ T290] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 245.165133][ T290] ? pte_marker_clear+0x1b0/0x1b0 [ 245.165151][ T290] ? __pte_offset_map+0x1b0/0x230 [ 245.165173][ T290] ? pte_offset_map_rw_nolock+0xba/0x110 [ 245.165195][ T290] handle_mm_fault+0x1166/0x1b90 [ 245.165223][ T290] ? __cfi_handle_mm_fault+0x10/0x10 [ 245.165248][ T290] ? lock_vma_under_rcu+0x49d/0x530 [ 245.165276][ T290] ? __cfi___x64_sys_wait4+0x10/0x10 [ 245.165298][ T290] do_user_addr_fault+0x96c/0x1200 [ 245.165325][ T290] exc_page_fault+0x59/0xc0 [ 245.165351][ T290] asm_exc_page_fault+0x2b/0x30 [ 245.165373][ T290] RIP: 0033:0x7f6194a659e4 [ 245.165391][ T290] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 b8 fd e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d c9 fc e7 00 48 01 d1 [ 245.165408][ T290] RSP: 002b:00007ffef22bf5b0 EFLAGS: 00010202 [ 245.165425][ T290] RAX: 0000001b2da20000 RBX: 0000000000001081 RCX: 000000000003bd08 [ 245.165439][ T290] RDX: 0000000000abb709 RSI: 00007ffef22bf640 RDI: 0000000000000001 [ 245.165452][ T290] RBP: 00007ffef22bf5ec R08: 00000000028f0a6b R09: 7fffffffffffffff [ 245.165465][ T290] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 245.165478][ T290] R13: 00000000000927c0 R14: 000000000003bd28 R15: 00007ffef22bf640 [ 245.165504][ T290] [ 245.165512][ T290] memory: usage 306964kB, limit 307200kB, failcnt 28083 [ 245.557111][ T290] memory+swap: usage 431224kB, limit 9007199254740988kB, failcnt 0 [ 245.584997][T13425] __nla_validate_parse: 1 callbacks suppressed [ 245.585019][T13425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5328'. [ 245.600612][T13425] netlink: 'syz.3.5328': attribute type 6 has an invalid length. [ 245.616756][T13425] netlink: 'syz.3.5328': attribute type 5 has an invalid length. [ 245.627223][T13425] netlink: 'syz.3.5328': attribute type 4 has an invalid length. [ 245.646012][ T290] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 245.672170][T13432] /dev/loop0: Can't lookup blockdev [ 245.700648][ T290] Memory cgroup stats for /syz2: [ 245.700787][ T290] cache 308727808 [ 245.731694][T13438] overlayfs: failed to clone upperpath [ 245.761024][ T290] rss 204800 [ 245.761736][T13438] overlayfs: failed to clone upperpath [ 245.764245][ T290] rss_huge 0 [ 245.764255][ T290] shmem 308727808 [ 245.811008][ T290] mapped_file 0 [ 245.823193][ T290] dirty 0 [ 245.834856][ T290] writeback 483328 [ 245.854895][ T290] workingset_refault_anon 3112 [ 245.889219][ T290] workingset_refault_file 135 [ 245.898327][ T290] swap 127356928 [ 245.907657][ T290] swapcached 638976 [ 245.918508][ T290] pgpgin 805402 [ 245.930505][ T290] pgpgout 736977 [ 245.944576][ T290] pgfault 584268 [ 245.959992][ T290] pgmajfault 464 [ 245.972961][ T290] inactive_anon 113053696 [ 245.981768][ T290] active_anon 195993600 [ 245.990283][ T290] inactive_file 0 [ 245.997786][ T290] active_file 0 [ 246.005297][ T290] unevictable 0 [ 246.009265][ T290] hierarchical_memory_limit 314572800 [ 246.014721][ T290] hierarchical_memsw_limit 9223372036854771712 [ 246.034011][ T290] total_cache 308727808 [ 246.042582][ T290] total_rss 204800 [ 246.050497][ T290] total_rss_huge 0 [ 246.070511][ T290] total_shmem 308727808 [ 246.074781][ T290] total_mapped_file 0 [ 246.078756][ T290] total_dirty 0 [ 246.090704][ T290] total_writeback 483328 [ 246.094962][ T290] total_workingset_refault_anon 3112 [ 246.100237][ T290] total_workingset_refault_file 135 [ 246.130490][ T290] total_swap 127356928 [ 246.134669][ T290] total_swapcached 638976 [ 246.138995][ T290] total_pgpgin 805402 [ 246.160481][ T290] total_pgpgout 736977 [ 246.164571][ T290] total_pgfault 584268 [ 246.168639][ T290] total_pgmajfault 464 [ 246.176969][ T290] total_inactive_anon 113053696 [ 246.182069][ T290] total_active_anon 195993600 [ 246.186825][ T290] total_inactive_file 0 [ 246.191261][ T290] total_active_file 0 [ 246.195324][ T290] total_unevictable 0 [ 246.199386][ T290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5208,pid=13049,uid=0 [ 246.214739][ T290] Memory cgroup out of memory: Killed process 13049 (syz.2.5208) total-vm:90100kB, anon-rss:976kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 246.320549][T13050] syz.2.5208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 246.370223][T13050] CPU: 1 UID: 0 PID: 13050 Comm: syz.2.5208 Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 246.370256][T13050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.370267][T13050] Call Trace: [ 246.370274][T13050] [ 246.370281][T13050] __dump_stack+0x21/0x30 [ 246.370307][T13050] dump_stack_lvl+0x10c/0x190 [ 246.370328][T13050] ? __cfi_dump_stack_lvl+0x10/0x10 [ 246.370356][T13050] ? ___ratelimit+0x3f7/0x5a0 [ 246.370378][T13050] dump_stack+0x19/0x20 [ 246.370399][T13050] dump_header+0xd7/0x490 [ 246.370426][T13050] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 246.370450][T13050] oom_kill_process+0x4c0/0x7e0 [ 246.370466][T13050] ? sched_clock_cpu+0x75/0x400 [ 246.370487][T13050] out_of_memory+0x7ee/0xbd0 [ 246.370505][T13050] ? __cfi_out_of_memory+0x10/0x10 [ 246.370522][T13050] ? mutex_lock_killable+0x104/0x1c0 [ 246.370549][T13050] ? __cfi_mutex_lock_killable+0x10/0x10 [ 246.370577][T13050] mem_cgroup_out_of_memory+0x279/0x350 [ 246.370602][T13050] ? drain_obj_stock+0xed0/0xed0 [ 246.370627][T13050] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 246.370652][T13050] try_charge_memcg+0x8f7/0xde0 [ 246.370674][T13050] ? __cfi_try_charge_memcg+0x10/0x10 [ 246.370696][T13050] ? __alloc_pages_noprof+0x30d/0x6c0 [ 246.370717][T13050] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 246.370737][T13050] ? __folio_batch_add_and_move+0x2ab/0x370 [ 246.370758][T13050] __mem_cgroup_charge+0xf6/0x410 [ 246.370781][T13050] ? __kasan_check_write+0x18/0x20 [ 246.370804][T13050] ? _raw_spin_lock+0x8c/0x120 [ 246.370824][T13050] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 246.370848][T13050] shmem_alloc_and_add_folio+0x86d/0x1050 [ 246.370876][T13050] ? put_swap_device+0x130/0x130 [ 246.370902][T13050] ? shmem_huge_global_enabled+0x2da/0x360 [ 246.370929][T13050] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 246.370955][T13050] ? __kasan_check_write+0x18/0x20 [ 246.370978][T13050] ? _raw_spin_lock+0x8c/0x120 [ 246.370997][T13050] shmem_get_folio_gfp+0x5f0/0x1380 [ 246.371023][T13050] ? shmem_get_folio+0xc0/0xc0 [ 246.371045][T13050] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 246.371067][T13050] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 246.371089][T13050] ? inode_to_bdi+0x6d/0x100 [ 246.371111][T13050] shmem_write_begin+0xf4/0x270 [ 246.371138][T13050] generic_perform_write+0x32d/0x960 [ 246.371161][T13050] ? __cfi_generic_perform_write+0x10/0x10 [ 246.371183][T13050] ? down_write+0xe9/0x2a0 [ 246.371209][T13050] ? mnt_get_write_access_file+0x1af/0x3b0 [ 246.371230][T13050] ? mnt_put_write_access_file+0xc2/0x100 [ 246.371251][T13050] ? file_update_time+0x1ef/0x220 [ 246.371272][T13050] shmem_file_write_iter+0x105/0x130 [ 246.371293][T13050] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 246.371314][T13050] __kernel_write_iter+0x395/0x830 [ 246.371340][T13050] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 246.371374][T13050] ? __cfi___kernel_write_iter+0x10/0x10 [ 246.371399][T13050] ? get_dump_page+0x160/0x220 [ 246.371418][T13050] ? __asan_memset+0x39/0x50 [ 246.371440][T13050] ? iov_iter_bvec+0xc0/0x180 [ 246.371468][T13050] dump_user_range+0xb06/0xdf0 [ 246.371494][T13050] ? __cfi_dump_emit+0x10/0x10 [ 246.371517][T13050] ? __cfi_dump_user_range+0x10/0x10 [ 246.371541][T13050] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 246.371566][T13050] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 246.371593][T13050] elf_core_dump+0x2cd9/0x3810 [ 246.371613][T13050] ? __cfi_elf_core_dump+0x10/0x10 [ 246.371637][T13050] ? dump_interrupted+0xf0/0xf0 [ 246.371660][T13050] ? filp_open+0x182/0x1d0 [ 246.371680][T13050] ? 0xffffffffff600000 [ 246.371696][T13050] do_coredump+0x1bfa/0x2bd0 [ 246.371722][T13050] ? __cfi_do_coredump+0x10/0x10 [ 246.371744][T13050] ? asm_exc_page_fault+0x2b/0x30 [ 246.371775][T13050] ? __kasan_slab_free+0x6a/0x80 [ 246.371801][T13050] ? kmem_cache_free+0x1c1/0x510 [ 246.371825][T13050] ? get_signal+0xa75/0x14f0 [ 246.371846][T13050] get_signal+0x11fd/0x14f0 [ 246.371869][T13050] arch_do_signal_or_restart+0x96/0x720 [ 246.371895][T13050] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 246.371922][T13050] irqentry_exit_to_user_mode+0x4e/0xb0 [ 246.371947][T13050] irqentry_exit+0x16/0x60 [ 246.371970][T13050] exc_page_fault+0x66/0xc0 [ 246.371994][T13050] asm_exc_page_fault+0x2b/0x30 [ 246.372016][T13050] RIP: 0033:0x3a5cec [ 246.372035][T13050] Code: Unable to access opcode bytes at 0x3a5cc2. [ 246.372045][T13050] RSP: 002b:00002000000000c8 EFLAGS: 00010217 [ 246.372064][T13050] RAX: 0000000000000000 RBX: 00007f6194db6160 RCX: 00007f6194b8e9a9 [ 246.372080][T13050] RDX: 0000200000000400 RSI: 00002000000000c0 RDI: 0000000020088000 [ 246.372095][T13050] RBP: 00007f6194c10d69 R08: 0000200000000480 R09: 0000200000000480 [ 246.372109][T13050] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 246.372123][T13050] R13: 0000000000000001 R14: 00007f6194db6160 R15: 00007ffef22bf228 [ 246.372140][T13050] [ 246.640108][T13470] 9pnet_fd: Insufficient options for proto=fd [ 246.678984][T13472] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 246.741317][T13050] memory: usage 306684kB, limit 307200kB, failcnt 29820 [ 246.973635][T13050] memory+swap: usage 424580kB, limit 9007199254740988kB, failcnt 0 [ 246.983485][T13050] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 246.993108][T13482] binder: Unknown parameter 'defcontext01777777777777777777777' [ 246.995580][T13050] Memory cgroup stats for /syz2: [ 247.002234][T13050] cache 307552256 [ 247.016510][T13050] rss 208896 [ 247.019783][T13050] rss_huge 0 [ 247.023109][T13050] shmem 306196480 [ 247.026741][T13050] mapped_file 1245184 [ 247.030831][T13050] dirty 0 [ 247.033767][T13050] writeback 0 [ 247.037045][T13050] workingset_refault_anon 3117 [ 247.042029][T13050] workingset_refault_file 1282 [ 247.046981][T13050] swap 126468096 [ 247.050939][T13050] swapcached 1273856 [ 247.055034][T13050] pgpgin 823527 [ 247.058659][T13050] pgpgout 755237 [ 247.062573][T13050] pgfault 587327 [ 247.066316][T13050] pgmajfault 474 [ 247.075665][T13493] 9pnet_fd: Insufficient options for proto=fd [ 247.091729][T13496] binder: Bad value for 'defcontext' [ 247.093852][T13050] inactive_anon 82739200 [ 247.109004][T13050] active_anon 224923648 [ 247.118459][T13050] inactive_file 0 [ 247.122920][T13050] active_file 1355776 [ 247.144746][T13050] unevictable 0 [ 247.153085][T13050] hierarchical_memory_limit 314572800 [ 247.169904][T13050] hierarchical_memsw_limit 9223372036854771712 [ 247.182117][T13050] total_cache 307552256 [ 247.192999][T13050] total_rss 208896 [ 247.202035][T13050] total_rss_huge 0 [ 247.207210][T13050] total_shmem 306196480 [ 247.211670][T13050] total_mapped_file 1245184 [ 247.216391][T13050] total_dirty 0 [ 247.220018][T13050] total_writeback 0 [ 247.224637][T13050] total_workingset_refault_anon 3117 [ 247.229987][T13050] total_workingset_refault_file 1282 [ 247.236726][T13050] total_swap 126468096 [ 247.241005][T13050] total_swapcached 1273856 [ 247.245458][T13050] total_pgpgin 823527 [ 247.249482][T13050] total_pgpgout 755237 [ 247.254933][T13050] total_pgfault 587327 [ 247.259008][T13050] total_pgmajfault 474 [ 247.263184][T13050] total_inactive_anon 82739200 [ 247.268135][T13050] total_active_anon 224923648 [ 247.272846][T13050] total_inactive_file 0 [ 247.277103][T13050] total_active_file 1355776 [ 247.281842][T13050] total_unevictable 0 [ 247.286047][T13050] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5208,pid=13048,uid=0 [ 247.301088][T13050] Memory cgroup out of memory: Killed process 13048 (syz.2.5208) total-vm:90100kB, anon-rss:976kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0 [ 247.600496][ T4793] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 247.740531][ T4793] usb 6-1: device descriptor read/64, error -71 [ 247.763710][T13555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5377'. [ 247.990540][ T4793] usb 6-1: device descriptor read/64, error -71 [ 248.260125][ T4793] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 248.400505][ T4793] usb 6-1: device descriptor read/64, error -71 [ 248.480856][T13585] fuse: Bad value for 'fd' [ 248.563951][T13593] fuse: Bad value for 'group_id' [ 248.569003][T13593] fuse: Bad value for 'group_id' [ 248.640511][ T4793] usb 6-1: device descriptor read/64, error -71 [ 248.647382][ T36] audit: type=1326 audit(255.621:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13594 comm="syz.3.5393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f173e18e9a9 code=0x0 [ 248.750609][ T4793] usb usb6-port1: attempt power cycle [ 249.090511][ T4793] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 249.111561][ T4793] usb 6-1: device descriptor read/8, error -71 [ 249.241663][ T4793] usb 6-1: device descriptor read/8, error -71 [ 249.319808][T13626] netlink: 'syz.0.5405': attribute type 27 has an invalid length. [ 249.327956][T13626] veth0_vlan: left allmulticast mode [ 249.480508][ T4793] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 249.501631][ T4793] usb 6-1: device descriptor read/8, error -71 [ 249.631623][ T4793] usb 6-1: device descriptor read/8, error -71 [ 249.740653][ T4793] usb usb6-port1: unable to enumerate USB device [ 249.884777][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5413'. [ 249.959387][T13658] cgroup: release_agent respecified [ 250.830495][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.967431][T13744] /dev/rnullb0: Can't lookup blockdev [ 251.001635][ T31] usb 6-1: config 0 has an invalid interface number: 102 but max is 0 [ 251.010199][ T31] usb 6-1: config 0 has no interface number 0 [ 251.016407][ T31] usb 6-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 251.025521][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.034500][ T31] usb 6-1: config 0 descriptor?? [ 251.576403][T13802] overlay: ./file0 is not a directory [ 252.042390][ T31] asix 6-1:0.102 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 252.052600][ T31] asix 6-1:0.102: probe with driver asix failed with error -71 [ 252.060924][ T31] usb 6-1: USB disconnect, device number 7 [ 252.107989][ T36] audit: type=1400 audit(259.081:879): avc: denied { getopt } for pid=13840 comm="syz.3.5488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 252.108860][T13841] overlayfs: failed to clone upperpath [ 252.268540][T13879] netlink: 'syz.0.5503': attribute type 27 has an invalid length. [ 252.277181][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5503'. [ 252.487926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.499940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.512005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.523959][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.536017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.548023][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.560103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.572090][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.584158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.596135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 252.817366][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5518'. [ 252.878265][ T36] audit: type=1400 audit(259.851:880): avc: denied { ioctl } for pid=13924 comm="syz.0.5520" path="socket:[58879]" dev="sockfs" ino=58879 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 253.019112][T13942] kvm: pic: non byte write [ 253.039089][T13945] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5527'. [ 253.098621][T13950] overlayfs: failed to clone lowerpath [ 253.431481][T13967] overlayfs: failed to clone upperpath [ 253.524360][T13970] exFAT-fs (rnullb0): invalid boot record signature [ 253.531162][T13970] exFAT-fs (rnullb0): failed to read boot sector [ 253.541966][T13970] exFAT-fs (rnullb0): failed to recognize exfat type [ 253.653482][T13976] fuseblk: Bad value for 'fd' [ 253.670562][T13979] veth0_vlan: entered allmulticast mode [ 253.702299][T13979] veth0_vlan: left promiscuous mode [ 253.711854][T13979] veth0_vlan: entered promiscuous mode [ 254.243907][T13996] netlink: 4588 bytes leftover after parsing attributes in process `syz.3.5546'. [ 255.502199][T14035] fuse: Unknown parameter 'rootmode"00000000000000000100000' [ 255.551679][ T36] audit: type=1326 audit(262.531:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14039 comm="syz.0.5563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5d918e9a9 code=0x0 [ 255.719314][T14049] exFAT-fs (rnullb0): invalid boot record signature [ 255.734819][T14049] exFAT-fs (rnullb0): failed to read boot sector [ 255.750611][T14049] exFAT-fs (rnullb0): failed to recognize exfat type [ 255.917587][T14077] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 255.917611][T14077] rust_binder: Read failure Err(EFAULT) in pid:88 [ 256.380772][T14128] fuse: Bad value for 'rootmode' [ 256.393236][T14129] fuse: Unknown parameter '0000000000000000000000400000000000000000000004' [ 256.522452][T14141] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.541637][T14141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5593'. [ 256.594096][T14141] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 256.594127][T14141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:103 [ 256.626561][T14155] fuse: Bad value for 'rootmode' [ 256.640821][T14141] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 256.640843][T14141] rust_binder: Read failure Err(EFAULT) in pid:103 [ 256.778189][T14174] x_tables: duplicate underflow at hook 1 [ 256.907116][ T36] audit: type=1400 audit(263.881:882): avc: denied { execute } for pid=14184 comm="syz.5.5616" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 257.038311][T14190] fuse: Bad value for 'rootmode' [ 257.335518][T14220] rust_binder: 14220: no such ref 0 [ 257.346310][T14220] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 257.346333][T14220] rust_binder: Read failure Err(EFAULT) in pid:142 [ 257.370205][T14224] fuse: Bad value for 'rootmode' [ 257.427952][ T36] audit: type=1326 audit(264.401:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14231 comm="syz.5.5631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5adbf8e9a9 code=0x0 [ 257.490472][ C0] net_ratelimit: 193441 callbacks suppressed [ 257.490494][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.508590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.520553][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.532625][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.544591][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.556682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.568680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.580757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.592730][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.604817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.753088][T14248] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5635'. [ 257.813948][T14252] 9pnet_fd: Insufficient options for proto=fd [ 257.846439][ T36] audit: type=1400 audit(264.821:884): avc: denied { append } for pid=14255 comm="syz.2.5639" name="kvm" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:var_lock_t:s0" [ 258.013136][T14271] netlink: 'syz.0.5645': attribute type 6 has an invalid length. [ 258.111487][T14277] 9pnet_fd: Insufficient options for proto=fd [ 259.079410][T14294] overlayfs: failed to clone upperpath [ 259.671693][T14314] netlink: 'syz.2.5658': attribute type 63 has an invalid length. [ 259.713059][T14314] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5658'. [ 259.741193][T14314] gretap0: entered allmulticast mode [ 259.860687][T14324] rust_binder: 14320 RLIMIT_NICE not set [ 259.860882][T14320] rust_binder: 14320: no such ref 1 [ 259.940789][T14320] rust_binder: Write failure EINVAL in pid:159 [ 260.043615][T14328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14328 comm=syz.2.5665 [ 260.235331][T14334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14334 comm=syz.2.5665 [ 260.791292][T14338] 9pnet_fd: Insufficient options for proto=fd [ 262.061275][T14375] Invalid ELF header len 16 [ 262.500467][ C0] net_ratelimit: 177581 callbacks suppressed [ 262.500487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.518614][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.530572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.542652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.554621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.566707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.578679][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.590768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.602754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.614835][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.271199][T14408] 9pnet_fd: Insufficient options for proto=fd [ 263.904571][T14428] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5702'. [ 264.320904][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5709'. [ 264.360254][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5709'. [ 264.381055][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5709'. [ 264.839270][T14467] fuse: Unknown parameter '-ser_id' [ 265.174811][T14486] 9pnet_fd: Insufficient options for proto=fd [ 265.435666][T14501] fuse: Unknown parameter '.ser_id' [ 265.452905][T14503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5728'. [ 265.461946][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5728'. [ 265.472217][T14503] 9pnet_fd: Insufficient options for proto=fd [ 266.340372][T14555] fuse: Unknown parameter 'Lser_id' [ 266.788496][T14580] overlayfs: missing 'lowerdir' [ 267.074614][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5765'. [ 267.121932][T14597] fuse: Unknown parameter 'tser_id' [ 267.480647][T14608] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5771'. [ 267.510470][ C0] net_ratelimit: 186239 callbacks suppressed [ 267.510489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.528473][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.540603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.552583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.564663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.576619][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.588697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.600658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.612740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.624700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.759974][T14619] fuse: Unknown parameter 'zser_id' [ 268.513205][T14673] fuse: Unknown parameter 'u*er_id' [ 271.834009][ T36] audit: type=1326 audit(278.801:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.3.5825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x7fc00000 [ 271.948331][T14770] fuse: Unknown parameter 'uher_id' [ 272.373074][T14790] fuse: Unknown parameter 'C' [ 272.427410][T14794] overlayfs: missing 'lowerdir' [ 272.471353][T14796] fuse: Unknown parameter 'uier_id' [ 272.520476][ C0] net_ratelimit: 195605 callbacks suppressed [ 272.520497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.538550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.550532][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.562602][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.574583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.586678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.598688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.610786][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.622796][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.634944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.673446][T14806] overlayfs: failed to clone lowerpath [ 272.747623][ T36] audit: type=1326 audit(279.721:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.0.5852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5d918e9a9 code=0x0 [ 272.808609][T14816] fuse: Unknown parameter 'dont_hash' [ 273.816393][T14827] fuse: Unknown parameter 'uoer_id' [ 275.294801][T14860] fuse: Unknown parameter 'uper_id' [ 275.487151][ T13] bridge_slave_1: left allmulticast mode [ 275.515695][ T13] bridge_slave_1: left promiscuous mode [ 275.535938][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.558567][ T13] bridge_slave_0: left allmulticast mode [ 275.566788][ T13] bridge_slave_0: left promiscuous mode [ 275.576078][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.612912][T14883] fuse: Unknown parameter 'uter_id' [ 275.725030][ T13] veth1_macvtap: left promiscuous mode [ 275.740710][ T13] veth0_vlan: left promiscuous mode [ 275.873266][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.881402][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.888521][T14873] bridge_slave_0: entered allmulticast mode [ 275.899674][T14873] bridge_slave_0: entered promiscuous mode [ 275.906407][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.913694][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.921153][T14873] bridge_slave_1: entered allmulticast mode [ 275.928529][T14873] bridge_slave_1: entered promiscuous mode [ 275.997593][T14908] netlink: 393 bytes leftover after parsing attributes in process `syz.0.5890'. [ 276.008887][T14910] fuse: Unknown parameter 'uuer_id' [ 276.072347][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.079427][T14873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.086739][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.093790][T14873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.191495][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.200413][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.208782][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5890'. [ 276.227356][ T2227] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.234428][ T2227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.256839][ T2227] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.263924][ T2227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.295131][T14873] veth0_vlan: entered promiscuous mode [ 276.309714][T14873] veth1_macvtap: entered promiscuous mode [ 276.436123][T14933] overlayfs: failed to clone upperpath [ 276.457114][ T36] audit: type=1400 audit(283.431:887): avc: denied { remount } for pid=14934 comm="syz.6.5870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.525303][ T36] audit: type=1400 audit(283.501:888): avc: denied { unmount } for pid=14873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 276.568931][T14943] fuse: Unknown parameter 'uxer_id' [ 276.880488][ T45] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 277.040578][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 277.063761][ T45] usb 7-1: config 1 interface 0 altsetting 242 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 277.095332][ T45] usb 7-1: config 1 interface 0 has no altsetting 0 [ 277.131596][ T45] usb 7-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.40 [ 277.155393][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.170503][ T45] usb 7-1: Product: syz [ 277.181048][ T45] usb 7-1: Manufacturer: syz [ 277.190604][ T45] usb 7-1: SerialNumber: syz [ 277.423999][ T45] usbhid 7-1:1.0: can't add hid device: -71 [ 277.457327][ T45] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 277.502380][ T45] usb 7-1: USB disconnect, device number 2 [ 277.530452][ C0] net_ratelimit: 184761 callbacks suppressed [ 277.530475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.548441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.560509][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.572489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.584557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.596706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.608767][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.620734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.632823][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.644807][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.761828][T14974] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 277.769577][ T36] audit: type=1400 audit(284.741:889): avc: denied { sys_nice } for pid=14971 comm="syz.3.5914" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 277.831292][T14979] overlay: ./file0 is not a directory [ 277.972374][T14990] fuse: Unknown parameter 'use"_id' [ 279.867963][ T36] audit: type=1326 audit(286.841:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15047 comm="syz.2.5948" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6194b8e9a9 code=0x0 [ 280.486142][T15071] fuse: Unknown parameter 'user_' [ 281.977309][T15160] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 281.977335][T15160] rust_binder: Read failure Err(EFAULT) in pid:43 [ 282.521318][T15230] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6022'. [ 282.540461][ C0] net_ratelimit: 189910 callbacks suppressed [ 282.540482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.558446][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.570536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.582520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.594609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.606595][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.618697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.630694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.642754][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.654743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.200558][T15281] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6043'. [ 283.232017][T15281] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6043'. [ 283.995038][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6064'. [ 284.005901][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6064'. [ 284.030499][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6064'. [ 284.460786][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 284.500201][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6079'. [ 284.524604][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6079'. [ 284.862293][T15387] syz.6.6086(15387): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 284.914478][ T36] audit: type=1400 audit(291.891:891): avc: denied { map } for pid=15393 comm="syz.3.6091" path="socket:[63200]" dev="sockfs" ino=63200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 285.233554][T15418] netlink: 'syz.0.6098': attribute type 4 has an invalid length. [ 285.250519][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 285.266545][T15418] netlink: 'syz.0.6098': attribute type 4 has an invalid length. [ 285.420474][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 285.429113][ T45] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.437951][ T45] usb 7-1: config 0 has no interface number 0 [ 285.449485][ T45] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.461598][ T45] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.471766][ T45] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 285.481355][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.494312][ T45] usb 7-1: config 0 descriptor?? [ 285.502930][T15429] overlay: ./file0 is not a directory [ 285.990515][T15447] netlink: 'syz.2.6110': attribute type 4 has an invalid length. [ 286.013268][T15447] netlink: 'syz.2.6110': attribute type 4 has an invalid length. [ 286.105655][ T45] uclogic 0003:28BD:0071.0021: pen parameters not found [ 286.117294][ T45] uclogic 0003:28BD:0071.0021: interface is invalid, ignoring [ 286.205517][T15457] veth0_to_hsr: entered allmulticast mode [ 286.304771][T15403] rust_binder: Error while translating object. [ 286.304800][T15403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 286.326666][T15403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:95 [ 286.354254][T15474] netlink: 'syz.3.6120': attribute type 4 has an invalid length. [ 286.387203][ T45] usb 7-1: USB disconnect, device number 3 [ 286.429011][T15474] netlink: 'syz.3.6120': attribute type 4 has an invalid length. [ 286.450086][T15456] veth0_to_hsr: left allmulticast mode [ 286.570500][T15483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15483 comm=syz.0.6124 [ 286.700787][T15501] 9pnet_fd: Insufficient options for proto=fd [ 287.482274][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6154'. [ 287.550452][ C0] net_ratelimit: 191809 callbacks suppressed [ 287.550473][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.568419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.580493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.592481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.604515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.616451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.628487][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.640441][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.652491][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.664428][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.702836][T15622] netlink: 'syz.3.6185': attribute type 16 has an invalid length. [ 288.710866][T15622] netlink: 'syz.3.6185': attribute type 3 has an invalid length. [ 288.718808][T15622] netlink: 'syz.3.6185': attribute type 1 has an invalid length. [ 288.727355][T15622] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.6185'. [ 288.736936][ T370] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 288.891511][ T370] usb 7-1: config 0 has an invalid descriptor of length 145, skipping remainder of the config [ 288.908650][ T370] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 288.934730][ T370] usb 7-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 288.948437][T15637] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6192'. [ 288.957595][ T370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.970688][ T370] usb 7-1: config 0 descriptor?? [ 288.984701][ T370] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 289.741283][ T36] audit: type=1400 audit(296.721:892): avc: denied { setattr } for pid=15703 comm="syz.3.6220" name="TIPC" dev="sockfs" ino=63941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 289.799052][T15702] fuse: Unknown parameter '' [ 291.480881][ T45] usb 7-1: USB disconnect, device number 4 [ 291.750614][T15785] tipc: Started in network mode [ 291.764490][T15785] tipc: Node identity ac1414aa, cluster identity 4711 [ 291.778672][T15785] tipc: Enabling of bearer rejected, failed to enable media [ 291.801370][T15785] veth0_vlan: entered allmulticast mode [ 292.158858][T15815] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6261'. [ 292.273780][T15834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15834 comm=syz.6.6271 [ 292.346235][T15836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6272'. [ 292.386120][T15836] rust_binder: Error while translating object. [ 292.386148][T15836] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 292.402500][T15836] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:144 [ 292.431401][T15836] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 292.444107][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 292.560452][ C0] net_ratelimit: 210972 callbacks suppressed [ 292.560474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.578470][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.590535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.602534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.614608][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.626589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.638676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.650658][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.662722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.674712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.933652][ T36] audit: type=1400 audit(299.911:893): avc: denied { accept } for pid=15879 comm="syz.0.6290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 293.133446][ T36] audit: type=1400 audit(300.111:894): avc: denied { ioctl } for pid=15895 comm="syz.6.6297" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 293.376989][T15925] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 293.509130][ T36] audit: type=1400 audit(300.481:895): avc: denied { append } for pid=15940 comm="syz.6.6315" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.550144][T15941] __vm_enough_memory: pid: 15941, comm: syz.6.6315, bytes: 1152922604118523904 not enough memory for the allocation [ 294.535047][T15978] netlink: 'syz.0.6331': attribute type 32 has an invalid length. [ 294.578731][T15982] /dev/rnullb0: Can't lookup blockdev [ 295.692512][T16018] netlink: 'syz.6.6348': attribute type 35 has an invalid length. [ 295.824827][T16021] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 296.080466][ T31] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 296.250459][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 296.268100][ T31] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 296.289665][ T31] usb 7-1: config 0 has no interface number 0 [ 296.313367][ T31] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 296.330942][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.354471][ T31] usb 7-1: Product: syz [ 296.366670][ T31] usb 7-1: Manufacturer: syz [ 296.386439][ T31] usb 7-1: SerialNumber: syz [ 296.403746][ T31] usb 7-1: config 0 descriptor?? [ 296.573179][T16042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6359'. [ 296.616651][ T31] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 296.630517][ T31] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 296.652366][ T31] usb 7-1: USB disconnect, device number 5 [ 296.888345][T16064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6368'. [ 296.908507][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6368'. [ 297.178859][T16088] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 297.251848][T16089] >: renamed from lo (while UP) [ 297.398687][T16106] overlayfs: failed to clone upperpath [ 297.570455][ C0] net_ratelimit: 187720 callbacks suppressed [ 297.570477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.590026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.602129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.614138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.626220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.638206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.650479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.662556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.674640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.686629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.790489][T16130] exFAT-fs (rnullb0): invalid boot record signature [ 297.811960][T16130] exFAT-fs (rnullb0): failed to read boot sector [ 297.829263][T16130] exFAT-fs (rnullb0): failed to recognize exfat type [ 298.020005][T16142] binder: Bad value for 'max' [ 299.402920][ T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 299.581504][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.609403][ T31] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 299.639989][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.669630][ T31] usb 7-1: config 0 descriptor?? [ 300.098608][ T31] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 300.141460][ T31] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0022/input/input22 [ 300.193324][T16211] netlink: 'syz.0.6431': attribute type 4 has an invalid length. [ 300.262117][ T31] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 300.513719][ T31] usb 7-1: USB disconnect, device number 6 [ 300.576448][T16222] overlayfs: failed to clone upperpath [ 300.816451][T16231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6440'. [ 301.366704][T16291] fuse: Unknown parameter '""?éjté{|]G©¸°_Î8£' [ 301.817397][T16313] cgroup: fork rejected by pids controller in /syz3 [ 302.209939][T16377] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6481'. [ 302.308628][ T36] audit: type=1326 audit(309.281:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16357 comm="syz.3.6473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x0 [ 302.580444][ C0] net_ratelimit: 192965 callbacks suppressed [ 302.580467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.598565][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.610539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.622623][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.634593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.646671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.658635][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.670712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.682773][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.694851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 302.768203][T16433] /dev/rnullb0: Can't lookup blockdev [ 303.000486][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 303.152488][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.163657][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.174736][ T31] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 303.184129][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.195760][ T31] usb 7-1: config 0 descriptor?? [ 303.631726][ T31] usbhid 7-1:0.0: can't add hid device: -32 [ 303.637805][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 303.784321][ T31] usb 7-1: USB disconnect, device number 7 [ 303.816872][T16450] rust_binder: Write failure EINVAL in pid:240 [ 303.819219][T16450] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:240 [ 305.718923][T16512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:252 [ 305.764977][T16515] overlayfs: failed to clone upperpath [ 305.895294][ T36] audit: type=1400 audit(312.871:897): avc: denied { map } for pid=16522 comm="syz.6.6539" path="/dev/usbmon0" dev="devtmpfs" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 306.083586][T16531] binder: Bad value for 'stats' [ 307.590468][ C0] net_ratelimit: 184285 callbacks suppressed [ 307.590490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.608444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.620502][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.632478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.644548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.656533][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.668604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.680576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.692639][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 307.704791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.010470][T16593] can0: slcan on ttyS3. [ 308.098827][T16603] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 308.124815][T16606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=64532 sclass=netlink_tcpdiag_socket pid=16606 comm=syz.0.6570 [ 308.194550][T16614] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6572'. [ 308.330473][ T370] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 308.480673][ T370] usb 7-1: Using ep0 maxpacket: 32 [ 308.495895][ T370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.521909][ T370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.543672][ T370] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 308.564328][ T370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.595123][ T370] usb 7-1: config 0 descriptor?? [ 308.615082][ T370] hub 7-1:0.0: USB hub found [ 308.758688][ T36] audit: type=1400 audit(315.731:898): avc: denied { append } for pid=16636 comm="syz.2.6577" name="file0" dev="tmpfs" ino=11464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 308.812132][ T370] hub 7-1:0.0: 7 ports detected [ 308.821195][ T370] hub 7-1:0.0: insufficient power available to use all downstream ports [ 309.878643][ T370] hub 7-1:0.0: hub_hub_status failed (err = -32) [ 309.885160][ T370] hub 7-1:0.0: config failed, can't get hub status (err -32) [ 309.895224][ T370] usbhid 7-1:0.0: can't add hid device: -32 [ 309.902144][ T370] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 311.101421][ T370] usb 7-1: USB disconnect, device number 8 [ 311.118500][T16603] can0 (unregistered): slcan off ttyS3. [ 311.881203][ T36] audit: type=1400 audit(318.861:899): avc: denied { ioctl } for pid=16774 comm="syz.6.6620" path="socket:[67599]" dev="sockfs" ino=67599 ioctlcmd=0xf518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 312.160467][ T370] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 312.210155][T16810] fuse: Bad value for 'fd' [ 312.264881][ T36] audit: type=1400 audit(319.231:900): avc: denied { mount } for pid=16815 comm="syz.2.6639" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 312.298615][T16820] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 312.330990][ T370] usb 7-1: Using ep0 maxpacket: 16 [ 312.341813][ T370] usb 7-1: unable to get BOS descriptor or descriptor too short [ 312.351847][ T370] usb 7-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 312.368548][ T370] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.388465][ T370] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 312.399847][ T370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.409324][ T370] usb 7-1: Product: syz [ 312.413677][ T370] usb 7-1: Manufacturer: syz [ 312.418354][ T370] usb 7-1: SerialNumber: syz [ 312.426775][T16828] fuse: Bad value for 'user_id' [ 312.431912][T16828] fuse: Bad value for 'user_id' [ 312.600440][ C0] net_ratelimit: 224207 callbacks suppressed [ 312.600461][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.618545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.627675][T16775] incfs: Options parsing error. -22 [ 312.630526][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.640874][T16775] incfs: mount failed -22 [ 312.647763][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.664059][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.670231][ T370] usb 7-1: invalid UAC_HEADER (v1) [ 312.676143][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.686185][ T370] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 312.693169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.706854][ T370] usb 7-1: USB disconnect, device number 9 [ 312.714571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.727871][T14931] udevd[14931]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 312.732313][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.760108][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.540565][T16930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6680'. [ 313.582744][T16935] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:317 [ 313.963147][ T36] audit: type=1400 audit(320.941:901): avc: denied { mount } for pid=16942 comm="syz.6.6687" name="/" dev="pstore" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 314.857047][T16990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6706'. [ 315.022565][T17004] binder: Unknown parameter 'e' [ 315.934336][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6732'. [ 315.946349][T17050] can: request_module (can-proto-6) failed. [ 316.217748][T17064] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6739'. [ 316.226886][T17064] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6739'. [ 316.870477][ T370] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 317.034219][ T370] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 317.045604][ T370] usb 7-1: config 0 has no interface number 0 [ 317.059776][ T370] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.083166][ T370] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.104153][ T370] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.144203][ T370] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 317.184808][ T370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.227094][ T370] usb 7-1: config 0 descriptor?? [ 317.370458][ T36] audit: type=1400 audit(324.341:902): avc: denied { setattr } for pid=17116 comm="syz.3.6761" name="NETLINK" dev="sockfs" ino=68468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.610437][ C0] net_ratelimit: 248319 callbacks suppressed [ 317.610460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.628543][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.632986][T17136] netlink: 324 bytes leftover after parsing attributes in process `syz.3.6770'. [ 317.640774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.661620][ T370] usbhid 7-1:0.1: can't add hid device: -71 [ 317.661806][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.670137][ T370] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 317.679715][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.699399][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.711488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.723574][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.723781][ T370] usb 7-1: USB disconnect, device number 10 [ 317.735548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 317.753437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.255086][ T36] audit: type=1326 audit(325.231:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.287582][ T36] audit: type=1326 audit(325.251:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.322251][ T36] audit: type=1326 audit(325.251:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.374350][ T36] audit: type=1326 audit(325.251:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.398819][ T36] audit: type=1326 audit(325.251:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.422245][ T36] audit: type=1326 audit(325.251:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.446239][ T36] audit: type=1326 audit(325.251:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.469177][ T370] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 318.585061][ T36] audit: type=1326 audit(325.251:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17190 comm="syz.0.6794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5d918e9a9 code=0x7ffc0000 [ 318.650451][ T370] usb 7-1: Using ep0 maxpacket: 16 [ 318.659988][ T370] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.671523][ T370] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.688991][ T370] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.706502][ T370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.729715][ T370] usb 7-1: Product: syz [ 318.738296][ T370] usb 7-1: Manufacturer: syz [ 318.748444][ T370] usb 7-1: SerialNumber: syz [ 318.965840][ T370] usb 7-1: 0:2 : does not exist [ 318.977567][ T370] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 319.002963][ T370] usb 7-1: USB disconnect, device number 11 [ 319.026100][T14931] udevd[14931]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.333086][T17223] overlayfs: missing 'lowerdir' [ 319.653638][T17264] overlayfs: failed to clone upperpath [ 319.691136][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 319.691154][ T36] audit: type=1400 audit(326.671:956): avc: denied { map } for pid=17254 comm="syz.3.6826" path="/1522" dev="tmpfs" ino=8268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.770124][ T36] audit: type=1400 audit(326.671:957): avc: denied { execute } for pid=17254 comm="syz.3.6826" path="/1522" dev="tmpfs" ino=8268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 319.827646][ T36] audit: type=1326 audit(326.771:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.3.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x7fc00000 [ 320.169508][T17293] overlayfs: missing 'lowerdir' [ 322.620431][ C0] net_ratelimit: 200649 callbacks suppressed [ 322.620455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.638414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.650475][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.662450][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.674525][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.686490][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.698552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.710511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.722561][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.734514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 322.966332][T17392] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6885'. [ 323.224811][ T36] audit: type=1326 audit(330.209:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17254 comm="syz.3.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f173e12ab89 code=0x7fc00000 [ 323.455545][T17443] binder: Unknown parameter 'binder' [ 324.036487][ T36] audit: type=1326 audit(331.019:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17500 comm="syz.3.6936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x0 [ 324.399497][ T36] audit: type=1326 audit(331.379:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.0.6953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5d918e9a9 code=0x0 [ 324.427487][T17542] rust_binder: 17528 RLIMIT_NICE not set [ 324.451700][ T36] audit: type=1326 audit(331.439:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.0.6953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5d918e9a9 code=0x0 [ 324.770649][T17568] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 324.960113][T17591] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.977302][T17591] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 325.013321][T17591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 325.194427][T17611] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6982'. [ 325.222469][T17622] /dev/rnullb0: Can't lookup blockdev [ 325.473935][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7000'. [ 325.556284][T17660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17660 comm=syz.2.7000 [ 325.584322][T17662] fuseblk: Bad value for 'fd' [ 325.974627][ T64] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 326.130449][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 326.140619][ T64] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.161110][ T64] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.201314][ T64] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.225725][ T64] usb 7-1: config 0 interface 0 has no altsetting 0 [ 326.240450][ T64] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 326.259711][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.280688][ T64] usb 7-1: config 0 descriptor?? [ 326.427132][T17728] 9pnet_fd: Insufficient options for proto=fd [ 326.486045][T17724] cgroup: fork rejected by pids controller in /syz0 [ 326.656092][T17846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7042'. [ 326.695795][ T64] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 326.710992][ T64] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 326.719000][ T64] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 326.728910][ T64] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 326.737262][ T64] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0 [ 326.748879][ T64] hid-thrustmaster 0003:044F:B65D.0023: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 326.764862][ T64] hid-thrustmaster 0003:044F:B65D.0023: Wrong number of endpoints? [ 326.907123][ C1] hid-thrustmaster 0003:044F:B65D.0023: Unknown packet type 0x0, unable to proceed further with wheel init [ 327.123943][ T64] usb 7-1: USB disconnect, device number 12 [ 327.630431][ C0] net_ratelimit: 196614 callbacks suppressed [ 327.630461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.648430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.660520][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.672606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.684696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.696775][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.708855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.720822][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.732901][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 327.744883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 328.098530][T17941] netlink: 'syz.2.7082': attribute type 1 has an invalid length. [ 328.191684][T17948] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7086'. [ 328.197225][T17950] 9pnet_virtio: no channels available for device ./file0 [ 328.680445][ T64] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 328.870482][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 328.884650][ T64] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 328.903251][ T64] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 328.921745][ T64] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 328.943175][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 328.960656][ T64] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 328.994726][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 329.010792][ T64] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 329.019953][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.039862][ T64] usb 7-1: config 0 descriptor?? [ 329.262396][ T64] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 329.298433][ T64] usb 7-1: USB disconnect, device number 13 [ 329.315506][ T64] usblp0: removed [ 329.790504][ T64] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 329.970715][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 329.989269][ T64] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 330.011003][ T64] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 330.041958][ T64] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 330.073567][ T64] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 330.110434][ T64] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 330.142410][ T64] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 330.185674][ T64] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 330.220442][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.249340][ T64] usb 7-1: config 0 descriptor?? [ 330.535298][ T64] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 330.736083][ T64] usb 7-1: USB disconnect, device number 14 [ 330.747799][ T64] usblp0: removed [ 330.894711][T18091] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7142'. [ 331.045495][T18107] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18107 comm=syz.2.7153 [ 331.185132][T18132] overlayfs: failed to clone upperpath [ 331.242907][ T36] audit: type=1400 audit(338.229:963): avc: denied { unmount } for pid=14873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 331.572384][T18165] overlay: ./file0 is not a directory [ 331.789783][T18192] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7189'. [ 332.283653][ T4791] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 332.368190][T18267] 9pnet_fd: Insufficient options for proto=fd [ 332.494873][ T4791] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 332.505302][ T4791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.532142][ T4791] usb 7-1: config 0 has no interface number 0 [ 332.555504][ T4791] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 332.580854][ T4791] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.588838][ T4791] usb 7-1: Product: syz [ 332.601106][ T4791] usb 7-1: Manufacturer: syz [ 332.605693][ T4791] usb 7-1: SerialNumber: syz [ 332.634386][ T4791] usb 7-1: config 0 descriptor?? [ 332.933355][ T45] usb 7-1: USB disconnect, device number 15 [ 333.425167][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7234'. [ 334.494503][ T36] audit: type=1400 audit(341.479:964): avc: denied { getopt } for pid=18379 comm="syz.3.7266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 334.515972][T18380] tmpfs: Invalid uid '0x00000000ffffffff' [ 334.913300][T18419] netlink: 'syz.0.7283': attribute type 1 has an invalid length. [ 335.651470][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7300'. [ 335.725561][T18459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18459 comm=syz.0.7300 [ 335.782406][ T36] audit: type=1400 audit(342.759:965): avc: denied { unmount } for pid=14873 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 335.879990][T18477] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.008290][T18584] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 336.008312][T18584] rust_binder: Read failure Err(EFAULT) in pid:557 [ 336.078363][ T36] audit: type=1400 audit(343.059:966): avc: denied { mounton } for pid=18589 comm="syz.6.7313" path="/syzcgroup/unified/syz6" dev="pstore" ino=1643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 336.358102][T18608] cgroup: noprefix used incorrectly [ 336.883285][T18731] netlink: 'syz.3.7330': attribute type 28 has an invalid length. [ 336.893550][T18731] overlayfs: failed to resolve './file1': -2 [ 336.900856][ T36] audit: type=1400 audit(343.889:967): avc: denied { link } for pid=18730 comm="syz.3.7330" name="file1" dev="tmpfs" ino=8888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.000460][ T45] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 337.162470][ T45] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 337.178598][ T45] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 337.189054][ T45] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 337.197765][ T45] usb 7-1: Product: syz [ 337.203322][ T45] usb 7-1: Manufacturer: syz [ 337.208020][ T45] usb 7-1: SerialNumber: syz [ 337.214634][ T45] usb 7-1: config 0 descriptor?? [ 337.440592][T18729] incfs: Options parsing error. -22 [ 337.446083][T18729] incfs: mount failed -22 [ 337.453645][ T45] usb 7-1: bad CDC descriptors [ 337.465214][ T45] usb 7-1: USB disconnect, device number 16 [ 338.286456][ T36] audit: type=1400 audit(345.269:968): avc: denied { create } for pid=18790 comm="syz.6.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 338.381913][T18799] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 338.444600][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7362'. [ 338.677624][ T36] audit: type=1326 audit(345.659:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18754 comm="syz.3.7340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x7fc00000 [ 339.543427][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.558487][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.573739][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.590489][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.610094][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.629608][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.650475][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.671810][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.699616][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.709674][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.724830][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.737708][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.751846][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.766950][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.779842][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.800181][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.817620][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.833972][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.850176][ T370] hid-generic 0000:0004:0000.0024: unknown main item tag 0x0 [ 339.879479][ T370] hid-generic 0000:0004:0000.0024: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 339.947872][T19203] fido_id[19203]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 339.986446][T19211] fuse: Bad value for 'fd' [ 340.582976][T19342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7421'. [ 340.612368][T19342] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7421'. [ 340.645706][T19342] net_ratelimit: 102934 callbacks suppressed [ 340.645733][T19342] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 340.696461][ T36] audit: type=1400 audit(347.679:970): avc: denied { setattr } for pid=19349 comm="syz.0.7424" name="RAW" dev="sockfs" ino=73241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 341.299933][ T36] audit: type=1400 audit(348.279:971): avc: denied { bind } for pid=19406 comm="syz.6.7447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 342.345024][ T36] audit: type=1107 audit(349.329:972): pid=19452 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 342.603083][T19476] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.808865][T19471] netlink: 165 bytes leftover after parsing attributes in process `syz.2.7470'. [ 342.975666][T19600] fuse: Bad value for 'fd' [ 343.067585][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7493'. [ 343.087204][T19618] netlink: 'syz.3.7493': attribute type 25 has an invalid length. [ 343.140787][T19625] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7494'. [ 344.995117][T19900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7573'. [ 345.406239][T19919] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7580'. [ 345.567061][T19939] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7591'. [ 345.592263][T19943] netlink: 'syz.6.7592': attribute type 4 has an invalid length. [ 345.624150][T19943] netlink: 'syz.6.7592': attribute type 4 has an invalid length. [ 345.685082][T19952] fuseblk: Unknown parameter 'fdɹ§q32]' [ 345.881928][T19965] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7601'. [ 346.085861][T19974] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7606'. [ 347.413210][T20179] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7649'. [ 347.615219][T20208] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7663'. [ 347.624659][T20208] /dev/rnullb0: Can't lookup blockdev [ 347.772122][T20328] overlayfs: failed to clone lowerpath [ 347.941671][T20338] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=20338 comm=syz.3.7675 [ 348.113553][T20362] tipc: Enabling of bearer rejected, media not registered [ 349.076152][ T36] audit: type=1400 audit(355.945:973): avc: denied { relabelfrom } for pid=20603 comm="syz.0.7704" name="NETLINK" dev="sockfs" ino=74926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.111930][ T36] audit: type=1400 audit(355.964:974): avc: denied { relabelto } for pid=20603 comm="syz.0.7704" name="NETLINK" dev="sockfs" ino=74926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 349.390108][ T36] audit: type=1326 audit(356.235:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20716 comm="syz.6.7710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8c398e9a9 code=0x0 [ 349.935180][T20733] fuse: Unknown parameter 'pcr' [ 349.940491][T20733] fuse: Unknown parameter 'pcr' [ 349.945805][T20733] fuse: Unknown parameter 'pcr' [ 349.952141][T20733] fuse: Unknown parameter 'pcr' [ 349.957686][T20733] fuse: Unknown parameter 'pcr' [ 349.962970][T20733] fuse: Unknown parameter 'pcr' [ 349.968570][T20733] fuse: Unknown parameter 'pcr' [ 349.974183][T20733] fuse: Unknown parameter 'pcr' [ 349.979687][T20733] fuse: Unknown parameter 'pcr' [ 349.984875][T20733] fuse: Unknown parameter 'pcr' [ 349.991047][T20733] fuse: Unknown parameter 'pcr' [ 349.996239][T20733] fuse: Unknown parameter 'pcr' [ 350.001758][T20733] fuse: Unknown parameter 'pcr' [ 350.006945][T20733] fuse: Unknown parameter 'pcr' [ 350.013343][T20733] fuse: Unknown parameter 'pcr' [ 350.018548][T20733] fuse: Unknown parameter 'pcr' [ 350.024097][T20733] fuse: Unknown parameter 'pcr' [ 350.037283][T20733] fuse: Unknown parameter 'pcr' [ 350.045710][T20733] fuse: Unknown parameter 'pcr' [ 350.051809][T20733] fuse: Unknown parameter 'pcr' [ 350.057410][T20733] fuse: Unknown parameter 'pcr' [ 350.062999][T20733] fuse: Unknown parameter 'pcr' [ 350.068516][T20733] fuse: Unknown parameter 'pcr' [ 350.074643][T20733] fuse: Unknown parameter 'pcr' [ 350.087060][T20733] fuse: Unknown parameter 'pcr' [ 350.092294][T20733] fuse: Unknown parameter 'pcr' [ 350.098685][T20733] fuse: Unknown parameter 'pcr' [ 350.103869][T20733] fuse: Unknown parameter 'pcr' [ 350.109359][T20733] fuse: Unknown parameter 'pcr' [ 350.114554][T20733] fuse: Unknown parameter 'pcr' [ 350.120909][T20733] fuse: Unknown parameter 'pcr' [ 350.126122][T20733] fuse: Unknown parameter 'pcr' [ 350.131614][T20733] fuse: Unknown parameter 'pcr' [ 350.156988][T20839] /dev/rnullb0: Can't lookup blockdev [ 350.688217][T21123] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7754'. [ 351.076285][T21268] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7773'. [ 351.190952][ T36] audit: type=1326 audit(357.928:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21379 comm="syz.2.7779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6194b8e9a9 code=0x0 [ 351.478870][T21505] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7790'. [ 351.533843][T21511] fuse: Bad value for 'fd' [ 351.555119][ T36] audit: type=1326 audit(358.265:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21507 comm="syz.6.7791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8c398e9a9 code=0x0 [ 352.260331][T21987] /dev/rnullb0: Can't lookup blockdev [ 353.053956][T22155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=22155 comm=syz.2.7858 [ 354.424647][T22310] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7882'. [ 354.447983][T22314] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 354.703482][T22450] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7899'. [ 354.717141][T22446] 9p: Unknown access argument aŽ8:íëܽ´y: -22 [ 355.039744][ T36] audit: type=1400 audit(361.520:978): avc: denied { create } for pid=22475 comm="syz.2.7907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 355.111666][T22571] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7910'. [ 355.175428][T22585] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7912'. [ 355.320508][T22594] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7908'. [ 355.596089][T22611] overlayfs: failed to clone upperpath [ 355.618966][T22611] overlayfs: failed to resolve '/ Ê': -2 [ 356.359780][T22748] netlink: 'syz.2.7932': attribute type 30 has an invalid length. [ 356.816239][T22870] netlink: 220 bytes leftover after parsing attributes in process `syz.3.7947'. [ 357.143483][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7955'. [ 357.345657][T23003] fuse: Unknown parameter 'ÿÿ0x0000000000000008' [ 357.508887][T23012] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7953'. [ 358.289475][T23028] netlink: 220 bytes leftover after parsing attributes in process `syz.6.7970'. [ 358.797582][T23259] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7986'. [ 359.210493][T23374] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8002'. [ 359.489293][T23396] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8004'. [ 359.630897][ T36] audit: type=1326 audit(365.814:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23417 comm="syz.3.8014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f173e18e9a9 code=0x0 [ 359.724903][T23427] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8018'. [ 359.913639][T23644] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8026'. [ 359.984301][ T36] audit: type=1400 audit(366.141:980): avc: denied { map } for pid=23649 comm="syz.0.8030" path="pipe:[76767]" dev="pipefs" ino=76767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 360.149909][T23768] netlink: 220 bytes leftover after parsing attributes in process `syz.6.8036'. [ 360.169506][T23770] 9pnet_fd: Insufficient options for proto=fd [ 360.911015][T23930] devpts: called with bogus options [ 361.654860][T24508] overlayfs: missing 'lowerdir' [ 362.527717][T24768] __nla_validate_parse: 7 callbacks suppressed [ 362.527738][T24768] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8128'. [ 362.736183][T24986] /dev/rnullb0: Can't lookup blockdev [ 362.884461][T25097] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8141'. [ 362.915609][T25101] 9pnet_fd: Insufficient options for proto=fd [ 362.990556][T25112] netlink: 'syz.3.8149': attribute type 6 has an invalid length. [ 363.861053][T25389] overlayfs: failed to clone upperpath [ 363.868404][T25389] 9pnet_fd: Insufficient options for proto=fd [ 363.992116][T25505] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8192'. [ 364.342933][T25627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=25627 comm=syz.3.8202 [ 364.530797][T25754] futex_wake_op: syz.2.8207 tries to shift op by 144; fix this program [ 364.587704][T25760] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8215'. [ 364.719068][T25873] batadv_slave_1: entered promiscuous mode [ 364.726042][T25872] batadv_slave_1: left promiscuous mode [ 365.036677][T26099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=26099 comm=syz.0.8234 [ 365.694995][T26226] tipc: Enabling of bearer rejected, failed to enable media [ 366.055419][T26461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34586 sclass=netlink_route_socket pid=26461 comm=syz.3.8247 [ 366.295255][T26481] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8270'. [ 366.546248][T26499] netlink: 'syz.3.8279': attribute type 30 has an invalid length. [ 366.647331][T26506] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8281'. [ 366.692711][T26506] batadv_slave_1: entered promiscuous mode [ 366.699773][T26505] batadv_slave_1: left promiscuous mode [ 367.599741][T26524] overlayfs: missing 'lowerdir' [ 368.776016][T27122] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8333'. [ 369.537109][T27238] veth1_macvtap: left promiscuous mode [ 369.542611][T27238] macsec0: entered promiscuous mode [ 369.564084][T27238] macsec0: entered allmulticast mode [ 369.583358][T27238] veth1_macvtap: entered promiscuous mode [ 369.617590][T27238] veth1_macvtap: entered allmulticast mode [ 369.634835][T27238] macsec0: left promiscuous mode [ 369.649979][T27238] macsec0: left allmulticast mode [ 369.673359][T27238] veth1_macvtap: left allmulticast mode [ 370.038059][T27460] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8352'. [ 370.485230][T27490] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8366'. [ 370.864743][T27507] netlink: 324 bytes leftover after parsing attributes in process `syz.6.8373'. [ 370.988273][ T37] INFO: task syz.4.4789:11945 blocked for more than 122 seconds. [ 371.017694][ T37] Not tainted 6.12.30-syzkaller-g73009db42b37 #0 [ 371.051597][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.060297][ T37] task:syz.4.4789 state:D stack:0 pid:11945 tgid:11945 ppid:2201 flags:0x00004006 [ 371.085527][ T37] Call Trace: [ 371.088844][ T37] [ 371.091777][ T37] __schedule+0x132b/0x1e00 [ 371.096331][ T37] ? __sched_text_start+0x10/0x10 [ 371.101363][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 371.106900][ T37] ? _raw_spin_unlock+0x45/0x60 [ 371.111752][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 371.117593][ T37] schedule+0xc6/0x240 [ 371.121661][ T37] __fuse_simple_request+0xdb1/0x1980 [ 371.127078][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 371.132986][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 371.139104][ T37] ? __kasan_check_write+0x18/0x20 [ 371.144250][ T37] ? _raw_spin_lock+0x8c/0x120 [ 371.149045][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 371.154280][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 371.160380][ T37] ? fuse_lock_owner_id+0x154/0x190 [ 371.165586][ T37] fuse_flush+0x909/0x1d50 [ 371.170038][ T37] ? arch_stack_walk+0x10b/0x170 [ 371.174987][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 371.179872][ T37] ? stack_trace_save+0x9d/0xe0 [ 371.184733][ T37] ? stack_depot_save_flags+0x38/0x800 [ 371.190242][ T37] ? x64_sys_call+0x1686/0x2ee0 [ 371.195099][ T37] ? do_syscall_64+0x58/0xf0 [ 371.199726][ T37] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 371.205803][ T37] ? __kasan_check_write+0x18/0x20 [ 371.210948][ T37] ? task_work_add+0x258/0x3f0 [ 371.215720][ T37] ? __cfi_task_work_add+0x10/0x10 [ 371.220842][ T37] ? __kasan_check_write+0x18/0x20 [ 371.225993][ T37] ? _raw_spin_lock+0x8c/0x120 [ 371.230758][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 371.235980][ T37] ? __cfi_fuse_flush+0x10/0x10 [ 371.240824][ T37] filp_close+0xc0/0x160 [ 371.245065][ T37] __close_range+0x50e/0x6c0 [ 371.249651][ T37] ? __cfi___close_range+0x10/0x10 [ 371.254763][ T37] ? __kasan_check_write+0x18/0x20 [ 371.259864][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 371.265552][ T37] __x64_sys_close_range+0x7e/0x90 [ 371.270654][ T37] x64_sys_call+0x1686/0x2ee0 [ 371.275332][ T37] do_syscall_64+0x58/0xf0 [ 371.279734][ T37] ? clear_bhb_loop+0x50/0xa0 [ 371.284399][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 371.290290][ T37] RIP: 0033:0x7fc0c3f8e9a9 [ 371.294688][ T37] RSP: 002b:00007ffe0f5ecea8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 371.303096][ T37] RAX: ffffffffffffffda RBX: 00007fc0c41b7ba0 RCX: 00007fc0c3f8e9a9 [ 371.311063][ T37] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 371.319029][ T37] RBP: 00007fc0c41b7ba0 R08: 0000000000000184 R09: 000000160f5ed19f [ 371.326986][ T37] R10: 00007fc0c41b7ac0 R11: 0000000000000246 R12: 0000000000037613 [ 371.334965][ T37] R13: 00007fc0c41b6080 R14: ffffffffffffffff R15: 00007ffe0f5ecfc0 [ 371.342941][ T37] [ 371.360071][ T37] INFO: task syz.4.4789:11947 blocked for more than 123 seconds. [ 371.367815][ T37] Not tainted 6.12.30-syzkaller-g73009db42b37 #0 [ 371.393022][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.401715][ T37] task:syz.4.4789 state:D stack:0 pid:11947 tgid:11945 ppid:2201 flags:0x00004004 [ 371.463544][ T37] Call Trace: [ 371.475877][ T37] [ 371.484434][ T37] __schedule+0x132b/0x1e00 [ 371.499100][ T37] ? __sched_text_start+0x10/0x10 [ 371.513063][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 371.534730][ T37] ? _raw_spin_lock+0x8c/0x120 [ 371.547343][ T37] ? __kasan_check_write+0x18/0x20 [ 371.563205][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 371.584232][ T37] schedule+0xc6/0x240 [ 371.597332][ T37] __fuse_simple_request+0xdb1/0x1980 [ 371.619776][ T37] ? __cfi___fuse_simple_request+0x10/0x10 [ 371.634523][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 371.653904][ T37] ? __call_rcu_common+0xcc/0x6f0 [ 371.671140][ T37] ? call_rcu+0x14/0x20 [ 371.686400][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 371.710198][ T37] ? _raw_spin_trylock+0xaf/0x130 [ 371.730556][ T37] ? __cfi__raw_spin_trylock+0x10/0x10 [ 371.750364][ T37] ? __folio_alloc_noprof+0x14/0x80 [ 371.764424][ T37] ? __cfi_autoremove_wake_function+0x10/0x10 [ 371.785637][ T37] fuse_do_getattr+0x350/0x630 [ 371.802668][ T37] ? backing_data_changed+0x440/0x440 [ 371.822544][ T37] ? kernel_text_address+0xa9/0xe0 [ 371.839918][ T37] ? __kasan_check_write+0x18/0x20 [ 371.861770][ T37] fuse_update_get_attr+0x8cd/0x2600 [ 371.882348][ T37] ? fuse_update_attributes+0x60/0x60 [ 371.903296][ T37] ? is_bpf_text_address+0x17b/0x1a0 [ 371.908806][ T37] ? kernel_text_address+0xa9/0xe0 [ 371.913969][ T37] ? __kernel_text_address+0x11/0x40 [ 371.919277][ T37] ? unwind_get_return_address+0x51/0x90 [ 371.924913][ T37] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 371.931118][ T37] ? arch_stack_walk+0x10b/0x170 [ 371.936070][ T37] ? stack_depot_save_flags+0x38/0x800 [ 371.941669][ T37] ? __kernel_text_address+0x11/0x40 [ 371.946960][ T37] ? detach_entity_load_avg+0x7b0/0x7b0 [ 371.952529][ T37] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 371.958609][ T37] ? update_curr+0xdc/0xaa0 [ 371.963141][ T37] ? xfd_validate_state+0x68/0x150 [ 371.968257][ T37] ? save_fpregs_to_fpstate+0x196/0x230 [ 371.973826][ T37] ? __kasan_check_write+0x18/0x20 [ 371.978944][ T37] fuse_update_attributes+0x3b/0x60 [ 371.984156][ T37] fuse_file_write_iter+0xa32/0x25e0 [ 371.989444][ T37] ? __cfi___switch_to+0x10/0x10 [ 371.994407][ T37] ? _raw_spin_lock+0x8c/0x120 [ 371.999177][ T37] ? __cfi_fuse_file_write_iter+0x10/0x10 [ 372.004925][ T37] ? finish_task_switch+0x13a/0x780 [ 372.010122][ T37] ? __switch_to_asm+0x3d/0x70 [ 372.015074][ T37] ? __schedule+0x1333/0x1e00 [ 372.019777][ T37] ? check_preempt_wakeup_fair+0x694/0xae0 [ 372.025604][ T37] ? preempt_schedule_common+0x2d/0x60 [ 372.031070][ T37] ? preempt_schedule+0xb0/0xd0 [ 372.035940][ T37] ? __cfi_preempt_schedule+0x10/0x10 [ 372.041318][ T37] ? activate_task+0x38b/0x3d0 [ 372.046105][ T37] ? preempt_schedule_thunk+0x1a/0x40 [ 372.051486][ T37] ? try_to_wake_up+0xe40/0x1b00 [ 372.056448][ T37] ? avc_policy_seqno+0xd/0x30 [ 372.061214][ T37] ? selinux_file_permission+0x309/0xb30 [ 372.066884][ T37] do_iter_readv_writev+0x4f5/0x6a0 [ 372.072090][ T37] ? vfs_iter_read+0x5f0/0x5f0 [ 372.076889][ T37] ? bpf_lsm_file_permission+0xd/0x20 [ 372.082263][ T37] vfs_writev+0x485/0xcf0 [ 372.086599][ T37] ? do_writev+0x2d0/0x2d0 [ 372.091039][ T37] do_writev+0x14d/0x2d0 [ 372.095281][ T37] ? vfs_readv+0xa50/0xa50 [ 372.099730][ T37] ? __kasan_check_write+0x18/0x20 [ 372.104847][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 372.110499][ T37] __x64_sys_writev+0x81/0x90 [ 372.115185][ T37] x64_sys_call+0x1fbb/0x2ee0 [ 372.119882][ T37] do_syscall_64+0x58/0xf0 [ 372.124301][ T37] ? clear_bhb_loop+0x50/0xa0 [ 372.128987][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 372.134913][ T37] RIP: 0033:0x7fc0c3f8e9a9 [ 372.139328][ T37] RSP: 002b:00007fc0c4e84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 372.147767][ T37] RAX: ffffffffffffffda RBX: 00007fc0c41b5fa0 RCX: 00007fc0c3f8e9a9 [ 372.155759][ T37] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 372.163748][ T37] RBP: 00007fc0c4010d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.171722][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.179715][ T37] R13: 0000000000000000 R14: 00007fc0c41b5fa0 R15: 00007ffe0f5ecd48 [ 372.187708][ T37] [ 372.191126][ T37] NMI backtrace for cpu 1 [ 372.191145][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 372.191172][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.191185][ T37] Call Trace: [ 372.191192][ T37] [ 372.191200][ T37] __dump_stack+0x21/0x30 [ 372.191227][ T37] dump_stack_lvl+0x10c/0x190 [ 372.191249][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 372.191273][ T37] dump_stack+0x19/0x20 [ 372.191295][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 372.191315][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 372.191335][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 372.191362][ T37] ? sched_show_task+0x379/0x560 [ 372.191383][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 372.191402][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.191423][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 372.191444][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 372.191466][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 372.191486][ T37] watchdog+0xd8f/0xed0 [ 372.191509][ T37] ? __cfi_watchdog+0x10/0x10 [ 372.191530][ T37] ? __kasan_check_read+0x15/0x20 [ 372.191553][ T37] ? __kthread_parkme+0x138/0x180 [ 372.191579][ T37] ? schedule+0xc6/0x240 [ 372.191601][ T37] kthread+0x2c7/0x370 [ 372.191617][ T37] ? __cfi_watchdog+0x10/0x10 [ 372.191638][ T37] ? __cfi_kthread+0x10/0x10 [ 372.191654][ T37] ret_from_fork+0x64/0xa0 [ 372.191676][ T37] ? __cfi_kthread+0x10/0x10 [ 372.191693][ T37] ret_from_fork_asm+0x1a/0x30 [ 372.191719][ T37] [ 372.191727][ T37] Sending NMI from CPU 1 to CPUs 0: [ 372.351938][ C0] NMI backtrace for cpu 0 [ 372.351952][ C0] CPU: 0 UID: 0 PID: 27525 Comm: syz.3.8382 Not tainted 6.12.30-syzkaller-g73009db42b37 #0 e78244f41b0e2dd383d6ada64249d7f830c3c2f3 [ 372.351990][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.352000][ C0] RIP: 0010:unwind_next_frame+0xe/0x750 [ 372.352023][ C0] Code: 48 89 df e8 44 b8 97 00 eb 8c 66 90 b8 95 de 25 bd 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 <41> 54 53 48 83 ec 48 48 89 fb 48 ba 00 00 00 00 00 fc ff df 49 89 [ 372.352036][ C0] RSP: 0018:ffffc90000006c80 EFLAGS: 00000202 [ 372.352051][ C0] RAX: 0000000000000001 RBX: ffffc90000006d60 RCX: 0000000000006c00 [ 372.352063][ C0] RDX: dffffc0000000000 RSI: ffffffff8461e949 RDI: ffffc90000006ca8 [ 372.352074][ C0] RBP: ffffc90000006c98 R08: ffffc90000006d70 R09: ffffc90000006d68 [ 372.352086][ C0] R10: 0000000000000004 R11: ffffffff81740950 R12: ffff88813a7d0000 [ 372.352103][ C0] R13: 0000000000000100 R14: ffffffff81740950 R15: ffffc90000006ca8 [ 372.352114][ C0] FS: 00007f173f0716c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 372.352128][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.352140][ C0] CR2: 00007f6194b56640 CR3: 00000001207ac000 CR4: 00000000003526b0 [ 372.352154][ C0] Call Trace: [ 372.352160][ C0] [ 372.352167][ C0] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 372.352188][ C0] arch_stack_walk+0x139/0x170 [ 372.352208][ C0] ? skb_clone+0x229/0x460 [ 372.352226][ C0] stack_trace_save+0x9d/0xe0 [ 372.352244][ C0] ? __cfi_stack_trace_save+0x10/0x10 [ 372.352261][ C0] ? kmem_cache_free+0x1c1/0x510 [ 372.352280][ C0] ? dev_queue_xmit_nit+0xa40/0xae0 [ 372.352301][ C0] ? dev_hard_start_xmit+0x187/0x770 [ 372.352315][ C0] ? __dev_queue_xmit+0x19cc/0x3790 [ 372.352329][ C0] ? br_dev_queue_push_xmit+0x553/0x6d0 [ 372.352346][ C0] ? __br_forward+0x25c/0x390 [ 372.352361][ C0] ? br_flood+0x50e/0x730 [ 372.352376][ C0] ? br_handle_frame_finish+0x12bb/0x1720 [ 372.352395][ C0] ? br_handle_frame+0x5a6/0xba0 [ 372.352412][ C0] kasan_save_track+0x3e/0x80 [ 372.352431][ C0] ? kasan_save_track+0x3e/0x80 [ 372.352450][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 372.352466][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 372.352486][ C0] ? kmem_cache_alloc_noprof+0x131/0x3a0 [ 372.352503][ C0] ? skb_clone+0x229/0x460 [ 372.352526][ C0] kasan_save_alloc_info+0x40/0x50 [ 372.352542][ C0] __kasan_slab_alloc+0x73/0x90 [ 372.352562][ C0] kmem_cache_alloc_noprof+0x131/0x3a0 [ 372.352579][ C0] ? skb_clone+0x229/0x460 [ 372.352597][ C0] skb_clone+0x229/0x460 [ 372.352613][ C0] dev_queue_xmit_nit+0x1ad/0xae0 [ 372.352633][ C0] ? netif_skb_features+0x82f/0xbf0 [ 372.352649][ C0] dev_hard_start_xmit+0x187/0x770 [ 372.352665][ C0] __dev_queue_xmit+0x19cc/0x3790 [ 372.352679][ C0] ? __dev_queue_xmit+0x24c/0x3790 [ 372.352695][ C0] ? kasan_save_track+0x4f/0x80 [ 372.352714][ C0] ? kasan_save_track+0x3e/0x80 [ 372.352733][ C0] ? kasan_save_alloc_info+0x40/0x50 [ 372.352749][ C0] ? __kasan_slab_alloc+0x73/0x90 [ 372.352769][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 372.352783][ C0] ? br_handle_frame+0x5a6/0xba0 [ 372.352801][ C0] ? __netif_receive_skb_core+0xf4b/0x3940 [ 372.352816][ C0] ? process_backlog+0x3e5/0xae0 [ 372.352832][ C0] ? __napi_poll+0xd0/0x610 [ 372.352846][ C0] ? net_rx_action+0x584/0xce0 [ 372.352862][ C0] ? handle_softirqs+0x1ae/0x630 [ 372.352881][ C0] ? __do_softirq+0xf/0x16 [ 372.352898][ C0] ? do_softirq+0xa6/0x100 [ 372.352916][ C0] ? __local_bh_enable_ip+0x74/0x80 [ 372.352934][ C0] ? fpu__clear_user_states+0x16a/0x210 [ 372.352949][ C0] ? arch_do_signal_or_restart+0x3ec/0x720 [ 372.352968][ C0] ? syscall_exit_to_user_mode+0x58/0xb0 [ 372.352990][ C0] ? do_syscall_64+0x64/0xf0 [ 372.353005][ C0] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 372.353027][ C0] ? __copy_skb_header+0x453/0x5e0 [ 372.353044][ C0] br_dev_queue_push_xmit+0x553/0x6d0 [ 372.353060][ C0] ? __copy_skb_header+0x453/0x5e0 [ 372.353077][ C0] ? br_multicast_count+0xe9/0xd40 [ 372.353125][ C0] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 372.353143][ C0] ? __cfi_br_multicast_count+0x10/0x10 [ 372.353164][ C0] __br_forward+0x25c/0x390 [ 372.353181][ C0] br_flood+0x6a4/0x730 [ 372.353198][ C0] br_handle_frame_finish+0x12bb/0x1720 [ 372.353217][ C0] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 372.353236][ C0] ? kasan_save_track+0x4f/0x80 [ 372.353255][ C0] ? kasan_save_track+0x3e/0x80 [ 372.353274][ C0] ? kasan_save_free_info+0x4a/0x60 [ 372.353290][ C0] ? __kasan_slab_free+0x5f/0x80 [ 372.353310][ C0] ? kmem_cache_free+0x1c1/0x510 [ 372.353328][ C0] ? __kfree_skb+0x18f/0x210 [ 372.353344][ C0] br_handle_frame+0x5a6/0xba0 [ 372.353362][ C0] ? __cfi_br_handle_frame+0x10/0x10 [ 372.353380][ C0] __netif_receive_skb_core+0xf4b/0x3940 [ 372.353398][ C0] ? qdisc_run_end+0x120/0x120 [ 372.353412][ C0] ? __kasan_slab_free+0x6a/0x80 [ 372.353433][ C0] ? kmem_cache_free+0x1c1/0x510 [ 372.353451][ C0] ? __kfree_skb+0x18f/0x210 [ 372.353467][ C0] ? __kfree_skb+0x18f/0x210 [ 372.353482][ C0] ? llc_rcv+0x718/0xc20 [ 372.353497][ C0] ? __kasan_check_write+0x18/0x20 [ 372.353514][ C0] ? _raw_spin_lock_irq+0x8d/0x120 [ 372.353529][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 372.353546][ C0] process_backlog+0x3e5/0xae0 [ 372.353564][ C0] __napi_poll+0xd0/0x610 [ 372.353583][ C0] net_rx_action+0x584/0xce0 [ 372.353601][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 372.353616][ C0] ? sched_balance_domains+0x87a/0xa10 [ 372.353640][ C0] ? sched_balance_softirq+0xbd/0x170 [ 372.353660][ C0] handle_softirqs+0x1ae/0x630 [ 372.353680][ C0] __do_softirq+0xf/0x16 [ 372.353696][ C0] do_softirq+0xa6/0x100 [ 372.353714][ C0] [ 372.353720][ C0] [ 372.353725][ C0] ? __cfi_do_softirq+0x10/0x10 [ 372.353744][ C0] ? __kasan_check_write+0x18/0x20 [ 372.353762][ C0] ? fpu__clear_user_states+0x3d/0x210 [ 372.353776][ C0] __local_bh_enable_ip+0x74/0x80 [ 372.353794][ C0] fpu__clear_user_states+0x16a/0x210 [ 372.353809][ C0] arch_do_signal_or_restart+0x3ec/0x720 [ 372.353830][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 372.353850][ C0] ? __kasan_check_read+0x15/0x20 [ 372.353868][ C0] syscall_exit_to_user_mode+0x58/0xb0 [ 372.353889][ C0] do_syscall_64+0x64/0xf0 [ 372.353904][ C0] ? clear_bhb_loop+0x50/0xa0 [ 372.353924][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 372.353942][ C0] RIP: 0033:0x7f173e1b70e0 [ 372.353956][ C0] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d aa 2e 08 00 e8 05 90 f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 372.353968][ C0] RSP: 002b:00007f173f070a78 EFLAGS: 00000246 [ 372.353981][ C0] RAX: 0000000000000000 RBX: 00007f173e3b6080 RCX: 00007f173e18e9a9 [ 372.353992][ C0] RDX: 00007f173f070a80 RSI: 00007f173f070bb0 RDI: 0000000000000021 [ 372.354003][ C0] RBP: 00007f173e210d69 R08: 0000000000000000 R09: 0000000000000000 [ 372.354013][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.354023][ C0] R13: 0000000000000000 R14: 00007f173e3b6080 R15: 00007fff9c2c9128 [ 372.354036][ C0]