last executing test programs: 34.104381932s ago: executing program 0 (id=1145): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000200)='./control\x00', 0xc) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r0, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000000000/0x400000)=nil) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000080)="684a3af7de25a5e6c6995b9f871cc53567db71b8f8f9c3cd91d240ff7dfddd6baa9823ebf274957d41071e618bc74b14a92cc23ee02934baabb383a3dad89c7f201b5b880d984331308c344b5ebde8234f89ef7117441e") 33.956104435s ago: executing program 0 (id=1153): r0 = userfaultfd(0x80001) (async) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a000, 0x0) mkdirat(r1, &(0x7f0000000940)='./file0\x00', 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 32) r3 = gettid() (rerun: 32) r4 = getpgid(r3) rt_tgsigqueueinfo(r4, r3, 0x40, &(0x7f0000000480)={0x31, 0x0, 0x80000000}) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d1", 0x60, 0x40040, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) accept4(r6, &(0x7f0000000180)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x80, 0x80000) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x486c0659a79ae3f7, 0x111, r2, 0x396cd000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000006240)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001b00010028bd7000fbdbdf253f770d7fd6509b82056833c83f96ed4fc5474d839a10be86dc1288cdd03f740d47fed3a40a2f85d21f35eb2b1f09133dcdcbc45db8b8f36a0715b00a0f314b12a08800000024dbec380762f0120713369250a2999c90b6c8aa9fa91f541977958e783c88f70401b3f4bd67fc31f8cd339e54c78358c5f8aec9"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) r9 = socket(0xa, 0x2400000001, 0x0) bind$vsock_stream(r9, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000000)) 33.895954676s ago: executing program 0 (id=1154): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x50000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) lseek(r0, 0xfffffffffffffffe, 0x3) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f00000000c0)=""/252, &(0x7f00000001c0)=0xfc) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) recvmmsg$unix(r4, 0x0, 0x0, 0x1, &(0x7f0000003c80)={0x0, 0x989680}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) ioctl$ASHMEM_SET_NAME(r0, 0x8008770b, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') 33.895539316s ago: executing program 0 (id=1155): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_clone(0x82048411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000000, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x27, 0x3, @thr={&(0x7f0000000280)="deeebd4f96392c594dce7c5e6a75d2a4fe351880ba7d43e4a661372130077830962bd6d7fadd89fa4a84ba4cac59a4cfff15569a22238a1058863443ae830643ffb7e165826452e2a1854a43133222b046aba3682773a7ccc4a50d752125665baed69fcf9e", &(0x7f0000000380)="9b5920d8a71d0a18d151f9d9c6199e06bb72479c1f59a213a763af543dc08fa58a5abfa4f8a403d244051f585f6df88703215fc71839b95ed62739cc24ef67df73b1cd2dcbb13039b8b242d6fa38b18b"}}, &(0x7f0000000200)) (async) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x27, 0x3, @thr={&(0x7f0000000280)="deeebd4f96392c594dce7c5e6a75d2a4fe351880ba7d43e4a661372130077830962bd6d7fadd89fa4a84ba4cac59a4cfff15569a22238a1058863443ae830643ffb7e165826452e2a1854a43133222b046aba3682773a7ccc4a50d752125665baed69fcf9e", &(0x7f0000000380)="9b5920d8a71d0a18d151f9d9c6199e06bb72479c1f59a213a763af543dc08fa58a5abfa4f8a403d244051f585f6df88703215fc71839b95ed62739cc24ef67df73b1cd2dcbb13039b8b242d6fa38b18b"}}, &(0x7f0000000200)) getpid() (async) r1 = getpid() r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@private1, 0x18, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000000)) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000080), 0x3, 0x0) r5 = fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000240)='fuse\x00'/15, &(0x7f0000000340)='./file0\x00', r6) (async) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000240)='fuse\x00'/15, &(0x7f0000000340)='./file0\x00', r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) syz_pidfd_open(r1, 0x0) (async) syz_pidfd_open(r1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGICOUNT(r7, 0x5409, 0x0) (async) ioctl$TIOCGICOUNT(r7, 0x5409, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x80) (async) creat(&(0x7f0000000180)='./bus\x00', 0x80) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) 33.747538619s ago: executing program 0 (id=1159): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000002e40)=[{{0x2}, {0x3, 0x1}}, {{0x4, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000280), 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)=[@request_death, @request_death={0x400c630e, 0x3}, @enter_looper], 0x0, 0x200000000000000, 0x0}) 33.64919547s ago: executing program 0 (id=1160): mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@xino_off, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x1ff) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x240, 0x240, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010101, @empty, 0x0, 0xffffffff, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xffff, 'pimreg\x00', 'pim6reg0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff000000000002"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x4, 0x0, {}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f2000040"]) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4e6) 33.613088851s ago: executing program 32 (id=1160): mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@xino_off, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x1ff) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffff9c, &(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000300)={0x8000, 0x0, 0x8}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x410, 0x130, 0x240, 0x240, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010101, @empty, 0x0, 0xffffffff, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xffff, 'pimreg\x00', 'pim6reg0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff000000000002"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x4, 0x0, {}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x21}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast2, 0xf, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000f2000040"]) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4e6) 2.345120959s ago: executing program 4 (id=1780): futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) clock_nanosleep(0x6, 0x1, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000100001c0"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r4, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x3, &(0x7f0000000200)=0x0) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$set_timeout(0xf, r7, 0x1) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0xda98, r5, 0x0, 0x0, 0x1, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 2.29522362s ago: executing program 4 (id=1781): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000003000e7ef8b000000a100c7b1ee57", 0x12, 0x2404c810, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) recvfrom(r1, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000540)='\xd0') 1.994835615s ago: executing program 1 (id=1783): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000817000/0x3000)=nil, 0xfffffffffffffd51, &(0x7f0000000400)='{\x00') (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "04bfd57e54b83b87", "9d75243432b099f403e918305fb9461f", "b779126c", "78b4c24ab3fba483"}, 0x28) (async) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x1}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)={0x2b, 0x1, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x3}]}, 0x18) ioctl$int_in(r4, 0x5421, 0x0) (async) sendfile(r4, r5, &(0x7f0000000100)=0x2, 0x100000000010001) (async, rerun: 64) ioctl$KVM_SET_SREGS(r3, 0xaece, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) 1.994501685s ago: executing program 1 (id=1784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = dup3(r2, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001d40)={'ip6_vti0\x00', &(0x7f0000001cc0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xf, 0x6, 0x20, @local, @empty, 0x7800, 0x20, 0xa, 0x9}}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r6, &(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0xfffffffffffffffa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = timerfd_create(0x0, 0x800) read(r7, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r9, 0x3, &(0x7f00000001c0)=0x7) r10 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r11 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') read(r11, &(0x7f00000000c0)=""/72, 0x48) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r12, &(0x7f0000000400)={0x2020}, 0x2020) creat(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.992511785s ago: executing program 1 (id=1785): syz_open_dev$evdev(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000001c0)=0x8001, 0x4) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff}, 0x80009}], 0x1, 0x10002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) (async) sendmmsg(r6, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000200)={0x20, 0x31, 0x59, {0x59, 0x6, "62250c8c5dc40fa58a33554fcbd74089c349cedbe48932fbdb711a338b70a6bccc8685e7f6f0cd15ca2e4b8888a4be7b08ccc97b04ed610b3d0499c27320edce965d26bdfed76a64ec90faeea0ebb34f2113df4c626dfa"}}, &(0x7f0000000280)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "859ef5d049e4abc83148f2def8c870740681a17e7b29fe3835dac32c3bc5ca82dbfa4e174643d9c6d1522144d2d4db787b05b8a294c7ea8d4a7708470e0d7b3444eb25e4da4df6484cf4d09953edf52fcb88665364eb9139c08f6df97d5e1a066a2b5815681258ea23ce4cad3a0d133b7e95f7fdc5c00148b8a9816a9940b6988920a9828a452b2ddde0a6e7c6b23803a2a1d97004ab5ad71fa2ca496e49a49aa79de37d572158756f6a0f528016c23d834f42306789aaa94b437dacdf27e0a9d7fe304b4ffa50ab20c15f69d4f95612be"}}, &(0x7f0000000080)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x9, "e9167062"}, @main=@item_012={0x2, 0x0, 0x9, "9a1e"}, @main=@item_4={0x3, 0x0, 0xc, "1da2a370"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x7, "58396a17"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xf75}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0x7, 0x86, "3f33af225e31e304a674c934cdbf50108c71e855db372a3ed276d294110cdb9657519b2fea22e0d066f4d5213892f898540903f909b2ea0a608c3a7eefa9c1f7b1fd1f695559541f8374b2ea5eb310df4602be4df75a3c8b046e995a402632b9a46c32262e37e2d9bfd5f8d0f28c9fa3bc158b7e88ac2c1d5d0d99551d3bc271bb8cbaf50c86"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x1, 0x5c, "86e01bd2f9355aab380d0d80e7254dd9abf46df109f20887dc607c3ba1b60d320c49b24540738c7b99ad4c18dffa5b376a455e7cf69dc80e296c88b58aa0443bf46e94292e0134fee63fc94b724a68192f0547eaf97f3e9ae533aa85"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x6}}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000200)={0x20, 0x31, 0x59, {0x59, 0x6, "62250c8c5dc40fa58a33554fcbd74089c349cedbe48932fbdb711a338b70a6bccc8685e7f6f0cd15ca2e4b8888a4be7b08ccc97b04ed610b3d0499c27320edce965d26bdfed76a64ec90faeea0ebb34f2113df4c626dfa"}}, &(0x7f0000000280)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "859ef5d049e4abc83148f2def8c870740681a17e7b29fe3835dac32c3bc5ca82dbfa4e174643d9c6d1522144d2d4db787b05b8a294c7ea8d4a7708470e0d7b3444eb25e4da4df6484cf4d09953edf52fcb88665364eb9139c08f6df97d5e1a066a2b5815681258ea23ce4cad3a0d133b7e95f7fdc5c00148b8a9816a9940b6988920a9828a452b2ddde0a6e7c6b23803a2a1d97004ab5ad71fa2ca496e49a49aa79de37d572158756f6a0f528016c23d834f42306789aaa94b437dacdf27e0a9d7fe304b4ffa50ab20c15f69d4f95612be"}}, &(0x7f0000000080)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x9, "e9167062"}, @main=@item_012={0x2, 0x0, 0x9, "9a1e"}, @main=@item_4={0x3, 0x0, 0xc, "1da2a370"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x7, "58396a17"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xf75}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x40, 0x7, 0x86, "3f33af225e31e304a674c934cdbf50108c71e855db372a3ed276d294110cdb9657519b2fea22e0d066f4d5213892f898540903f909b2ea0a608c3a7eefa9c1f7b1fd1f695559541f8374b2ea5eb310df4602be4df75a3c8b046e995a402632b9a46c32262e37e2d9bfd5f8d0f28c9fa3bc158b7e88ac2c1d5d0d99551d3bc271bb8cbaf50c86"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7c}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000600)={0x20, 0x1, 0x5c, "86e01bd2f9355aab380d0d80e7254dd9abf46df109f20887dc607c3ba1b60d320c49b24540738c7b99ad4c18dffa5b376a455e7cf69dc80e296c88b58aa0443bf46e94292e0134fee63fc94b724a68192f0547eaf97f3e9ae533aa85"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x6}}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) (async) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x52, 0x4, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x40010) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000005c0)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000005c0)={0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 1.478339164s ago: executing program 1 (id=1790): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) epoll_create(0x3) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.448337955s ago: executing program 4 (id=1791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') setns(r3, 0x4000000) 1.387778675s ago: executing program 4 (id=1792): futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, &(0x7f0000001340), 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x265, 0x0, &(0x7f0000000600)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x2}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x5c, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x100, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000300)={0x0, 0x18, 0xfe14}}}, @acquire_done={0x40106309, 0x2}, @release], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="180000005600010005000000000080000700000004"], 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x400, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x13b442, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-\'\'%\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f00000001c0)='}\x00') 1.227298988s ago: executing program 3 (id=1795): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) unshare(0x62040200) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4d) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x4, "0200000000002000000000000000fcffffff00", 0x0, 0x9bb9}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) add_key$fscrypt_provisioning(&(0x7f00000019c0), &(0x7f0000001a00)={'syz', 0x0}, &(0x7f0000001a40)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno5', @ANYRESHEX=r0, @ANYBLOB=',\x00']) unshare(0x40200) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000584000/0x2000)=nil, 0x2000, 0x13) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8000000000, {0xffffffffffffff83, 0xfffffffc, 0x0, {0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x3fc, 0x800, 0x1ff, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000dc0)="43e8485b35a311adf709e459a809a80e32aff44530f2598f2dd94c56ee4bfc76122e162dc4d0a28b2c8c7a7bb07ed9cbb2f5ee42c53cca6fa8219b3635ba36bed7c85e8f7bc3048dd19455e52d6ffd1551cf9c2aaa8af88305da7b480f0510a99f86de44abe817c6f46721d66481bb0a4bae8270368aeb1c1b290e752367b67d6b2be156df655f74e690ee6fc17d7047f1a1dfb043e7535280cf5c5ad73aecd0ba1ecd6175fc22c5d96b41664a841e04b0465f75a9a5b7ff67c6fc88a20fc635ea229b9bcbea8d8bc350fc9b2e836c908d8d25ee9747f3ace8f5fa1be8a435d0de6d0e6e00b43ac5d7121b90578e2fd71ae0c7eeb5ad21a27db5af124957f61445b070439404e1ad1a984c8f43c35f57d58bee2512fc2312a67209111d5406fc73dcde22585128f4c301926e847502bd244b188c057a027c4a96f2b032f84daba7cc4550334e52e17815f97bb3246ac3933f9760386ffd023ca069b5babd5bb90b0472199775a12c63b797387a8f0c84ee3adb01aed56db8e88381703195e128151db2f644d94b6a64aa6ffdc7026e714392aa7ed0c336d766b9a3177469886c9ea1935d7e60f6384aedcd99f93492c7ab2127115f28ebd9837d0901d48a83289d7fe05ac751c7cf48bf6a29aaaf8d0cca6fc89ca81e083a920032ea52c59bfab050584b5c26371f5baf40a07cd4e93251d7fedc63e908c37a6dabfd774731798f59f7b28a3f57554a08c4751bc7d583fe8a4725e0fd1393ce26be4acd4ded904e4ace6b2c36f040555e23b8b22c720637e1159539abe5ae54b854819a5a66016782f21fef183560d9068df1dddd7f7202ef09ca5de39fc653e51d501daa79aeacdb9bcc04491cf40c20f912be62cc8e69004aa30bf104cf05af0d868477061fb304689fd15060994462fe31ee0b60941e046078330e48f38b00e1a4b8fdc14539a1212641d550086cbb9ed087727fd93b3acc3ee877e4fc13c535dc9e09de324d8965d3f977eee041a4546e829094ced720f017e5b26ee3f857348d91612df837abc5a8010893efca8070f468c20d8c9c8f009c32b079b7eeb70918da69a5a4501f3873d986afe22fbbd3f682954be1bfefcea157413fbf1b46916685e2fdbfa59a26130f6e89d6e4cbc1eccd3ade7b1d733866b21fe2d83550790b5ce8fc5074464f164a7471bcc17049ab0fca3280e12f70a8cd10bbb2168919d749d3f1c42273339dce3e91b95f9f7461147d024f3a9a01aec9275bc36715321766c45f3f6a4722a3f434e5c8d1971e92fb87342b6acb916d1ad4cdab303613302a3cb60760645493c685f0c009847c95c923c15585d1025a953ed78da8d570598ee32b8bdeae5364b489a347b3aafeb06cab8dcd6d288a14a8662fd763c215850363b8aaec8a1734f0301cd38e6855fb90ffd2718be22a966b38e0f9a86d97e55ef02fab2e30ed7ffd29e8c3a4bc51034d6c3050c57830989cc45f325f39bca78005bee961a04a96f21f10877e85703c1612eec72e6e37ce3217a81bd717b613b269348ecb76be948de93e3d8876f1f6e0461a4d287222b3ff5338eb296d6ec1f34143c2d9d9e1fbe7256506bbdafe349e1f56f04f6a98139be1d25fe01dea42af010d519908052de4b968b1218acee443d9ca97207fdc5c4edae33a802519b9ec62889cad5deb80864f34a7b2be28f00ea9aeb9f7692eb276664c43a526d59a4042d26d30209e07a3b233e4aea2e82fbc5a71948b28515f55b958a8f7c130832772ca40d2d5c85c650900733a62f4039164f8d7ae4c024a433824a8d3700d0ef952440c13ad086b6bbc404cb5473e1f57ddca6ae6fb6ed5f6e125fb89d999ef0c2b9f7ed92b4c290f8aa4a0d7b4a83e3815d4960a51b72f49610309dfb213019e440b2672f41639d6c506739b470b1ed6bff6d11dcc13f14406a12df5928ecb5f85ea6b6c61e6fb39ae3567a7fd64f0573e2203b1a87a383c26e4814d4d4183179cdefc8b757ea78124b8b72ba109b77c8d7d2bc5d16fb84cc6929d029b962bcc3f293fdd709527d0bf96a5aacad128841fe36acb1e05b89141014b30cb9571c4ff6ed02c2a07fcf1071fabe31a88e91742920c0731ce672fff769bfae0b94ef31b9adbdcadcb46943b812a4016532c0a5c9e340c6343e23032b430aa4d931e40486c583b03dfc9cf33f92d2d5005d631baa7cadd16079eaa434ae92226a0cc028369a8193a5f225f9929d8a6878a059b9af90ca7643ff4903f610863ec39aca2f1c0c0202185a75f6534917134aea40170b596089c8a8271b6bfafe0332d6a0e056a25010a4b101a2dca45e94695db3890d5b0e49cf982c099e195a164a5e4f5152884a3fb3e6d584dae6307bd89589605630d6bc243b0bf2a408fcee1b5bb21b11b49a28366fca28b041a13f3927671e78d52b10023957a09abc012188bc46ac7e1bc43ac19edddf648bd252fff34911bf0bd3bc43ea2dec367ffc8cd5c37eb24942b140d5fb32197b19826c8c4fc27beb2ba5ab90a1a207775014f59cf408e93f84b91f7e3ca3165da66efd23ea1c8ee0163c269b5562f1b769f5403ea46190328d7ea7b1daa51de27f88c0a555c277318f4d16b99b5dbb842219ad60ab27865dbcbe26fc0a4fd90b39c6a58f0cb109ac86f0c236bc8e0830e07017e42a7f6467dc9431108f63fb20275f61f528447d870502070e042f24028541f8336a207d70fafdc30c6090d653ab84949a3ddfac9ac32d55b2b87ce5b568d151bbf279ca12cd60181fb1a76c69ddbd7d9ff8c7a18823915b575ab0343b8faada1bff1fb5c52f9b397fb5d44af7152bd7608e3038dcb9365bee45514c278950a67b316d06f177b33b96cc0c7967a93a1d185d8c5694f59fd84c6ac79b435b333bcf3913c51fd8f2bf0e0dadab71c20cc2082535f71fdc36997af750c33b00a31844402a036bf2e8ec966a65e4fc659b9dced0188ab0f2f09b9e34daac77a21d845584977c14ef5a29db12df05ce28337ed03150e169ae72e2552f0d7b2c15de9fd7631137cf30372eced3bfbdab13c58075574629d105adf4aafb33a899b259b96ec5408b181898b80933fdc1c19cfdbaa89d13c00e3b6131c2556486e6d9da583f545cebb89cd545a038aed02ecc7c2c4bfc098523735738c046dd136757e0f04440e91e53d844461c690d8cd89a240427df782d10d3696ad1abcf7254512b6625bfef92b116e8ea42b3da2c3257f5294bf491c347d833d776a2cea08264874578da789e1b2f1dd648069377ecf48a7c5336578c9a3af8f4f855ae385782f3958e4ec1b402e406f82858d6c54f1d63a31b9d51d90f4faf2cd6c446ac64f8f271514d9261dd7243d686c05e45b5fa0ea9d4280072a7ca9aeacb8d2a5665e31dd072d91a806622cde12f08456b219b02f279e3f1f15e0b56d28421d5772790540424d6e778a75fad6fdf500926281272ff1f213c821a552f424366ff71e3db3a6e65c023718ccc526d3c122e6fb0ad8f6964e05e0972a96f0bf23e40efc0aee46056bb506151b7a467b83431fd4ab6b9d61898ce602365ef424a3b9d00122a92677e484ce9181ea675db7272131dd8e5b594056c7a55ee6cab92cf998f9503b9a11bc5cea480a7f043991e1f288e3fd2274e308bf0c1ac8a7520f84adf0787cea66b72fc1cac357478bacc90a54d735a6423be77ae6d494ff54d89950e4e9fb3dee488a45350c27b45f8d34dae559f161adeed9427676d4a90315e6b91a0f935ddd2e7fd105b9a79a8e87928ac2872b515f5b8d03a5cacbc38e87fcb807bc4b35742a3f75df436f7fd3cfa06d1ecb33e22d44d61987ba7eb3ba4b9fc80c845a6d873a6ad5171648f0a65226ccd9a275a0a9fc6a19d1fffaeb78c499d5a859f4d66cc76282d49b9d82defa1ebebf3962f59b79ce531670fbc4f62fbdccbbf9470189b6923d688bc1de87647fd5e9d0fd53af482184b24894068cb3ff968fcf8312519f0e125172b241cd441afc85c113ff5ad254ae217e7d0b08a663176706f202668275edfd905e2a6de2e7523693b9be675e3a01cf015a056147a4ef4f678e98024034138b5563382a917b5c75643c90fd3765bec2b8499e1f8b783c012dcd49ee5478baf5685339296c4c648862b7599142a64975b449f71fe96b1702f2c083364c77ce31e6394e481cf351a9ddf77def4a47d06ada363cec183966bdadf349f6066bf3f0acf7e720bf30fb27ad6ef8b008429452c0c4f4a878f88d2b0b7f7dce3aa4717bfdde0ddbfd1b4bef58891c74ace777628a08c5c5fc529038c579a54309f158c81047f9baf7c11f4ee32838f49c7fb3e2ba80e615f75b9e139c76e4afb1803950786e68c7af9afba167c51a615780a53ce8637164b15317067407186b0fd86aca9cc4f98f4cc637c3d3a3548bf36977245b8483ce26b3e874dfb930a3ec2dcc82b968b7bc8869d6cddec3e7d85908d971711f1d65242a74adb1fe4e4c5922aec941bd8330007e0120ff50422cf71484d5bd0fa648ae193cdd054d1e11c004710dcdfbd5a4e9f3c0ef379802be1ec65da2c5e58e26e26cd83aa51be5c6798f7ddc918f95ca21f21ec0ae0ea037d049e16ac555fbfc06784a0abb0b4c2630da484efa5b537c3a02ba14565ddfd85b3e4a3b46c16c95d8b522083a8efd46b421c6bad10adc946569705c6ba7a7ea1923791347c4014459bfcea3a950b0725e7296ca2aaa26393bc33541893d20e11aca51394b64e72d61844254953d32e1c3d95441da6a426c83701350696aa3913962eedbc561bb294d1981310ad52c0b1d30d103e63a0ce74dfc9cb972336879c570e01416bff56bbc1ef8a550f01487e76b594b24b2ed617f20b035c0b15820a108442c474dc6299318e6071301b7c4a2e5111434e87d89300050cf96c4b57c4bc1d37368d35d1c48d843277ed09b43f23151b305fe1020a13fe23c7735191d2b385235262fae21435ef44c8ef7fdf5af8b3f49befe7f68496a01acc1149c8fcd7950fc97f17b3ce75204add5d9932b4f296f3175940a8889295effffb77d478e858ca1f10ef6f4cecc271d50b59eae550d14250a2ee4c07454e77b12a101b9b5f3c4578e1f529e31c9ee40c0060b5a858b454f175940e448ac739bddb2b2dec93a3cde499f303ebe13a8d8c90eadac82922bff22be1bb2ea6c68655a42c9c98ad1128c83cc4f0343ec0f392f57e21af9fec158827f87a405b7c0606b6a516c078da842af96179fb49626253cd91c68f80cd2e0f140dc12f0cbdbb9ab688daa2e19096c99b7b6a43c19743089c667a1aa17438ddc1f8fe5851ea522ea66a9f44bcca3c3d32263344b15ec943bc582723fd90194f3a960aea0447ef39dd024f5093461fc5964472e82864706fadf255c933f861df86d956430a7423c46d898b1f2adcc351603bbedf56164041be57df7d70b621d3087d818e7ec8dd52cf1ec6ff73677d97b062beb39be5fa3865ec73193fd41beb2e19b8da1ecde449d9fdf6799d0c68c1184ee18996ab4ae2adbf867008ff50ee9263496a82f70138070f8c7d0fca572c423027572b81011b60bb5283c219b3d37a9058bc7782d99765038fce44a380dbc69ace829480c559e9e4c15455cce82adf1039a0fc8e7908fdf6a56cbe7e79842ac69292c72fce58ed773abdbff1defa6a69e04a0d8d2e663f13f2c128a2c5a4cd18b4c047ec4f613ffed915fa518c776c083e354fb4aad4594e5237b840648e1b9d3f4c6864b92f45595c7da1a4895e4d6ed772ed355ddcaaf5c711e67b2eef0558add3d73cfc00de11b8be34460d13326235c2cd89ddb3a3402a9302941884ddea81b76db381bcd2ae69cfa368035d8fb6e74553a6b21b722ed95aae3fad9af2d1e82dfa59ab31e31cb2f9108013b211c0d7742f86ab466a82387ed8c30e71cdf1a0262cf4cc1c81f1e4ed5e422b0a0a8e477ca5a3423b2b7c46a1b00782a5d89483754b5b9ee9f82aabe882a9a4f67fc4ef5959de4ea08517c1550823a1821dd2fc2aeb7a1b09e3d8cede9f6e70a565d5f549694d7572758a1fe7cee8ca0bcf6aae2f0b012023d460b382bd4e2afdad4769103c4de2f61656bf51f07e7c75d8d60387a7b21878661fcde2f4d65f789becbc3bfa13ff6fb81ffc3e0e487e14c9b7a2a90a203dea43250068861f58e0e803b10fbe395b927b7d56657860733f3975a6e72186cd8a0bca7428332bd3432ad8d4860f5ced5ecf21ff0d05c33d99a2029f1fa9d416501dd7f81d43100f24644924e2a22e2e08cb6e2bddc5d3d173edc0902d9a6fc8599e49ffa934faa606ef5f801eef0a479b2b58e16844cbe9eb6cc931d3529fdbb817ae957675dbf2a0cf917e92433fa578e7ee9448e4eb6abd35515e760494c0ec501b87da54690233e5673d7f11fcb212197045de98f68ab2e59d2d20da7a58d62dc81dd1f182bc349c281715b1e4988527543f08363e19f1886bd9fd9101a7ccdae7ab151ee8994b960276f01610bb067f1b8c8c617e5a7a4f3e8f836bc87cece6f2ddbc3fed32d87eb9f1b03638967d0e35e6290b4bc415f99cc408ebfdaa9b91548350c6f4e7ef4777aaf6abdc6b16d86df22c6897a9fed06a154cfab88c32b81b9f90a19f118b0889758c4507b0b145d4e9de98720f148d022d0c2f9e3f0c1a741c6013d2f713e623935da768136ba9c8dd024d4d8f73f17116edd270b72a39952894d048296992541e958a04bb5de6f0f943a61366f582a7cf78fbee7188959ae7b4c8f8ad7c7e0cd57dfcafeb2b6e888a60ad62dad035958d6a63de0934140e5da410c3f095412d09d2c41cb574426479dde9842894d91fad627150de90afd34cb1a1db3489b677b523dbdfa22cd4ac3ca338c06ab72e822d626a212aaeef4dfa1bead213c0503477f8c0d13af27706da9c94f9e902431cd8fcb1565c6addc1c8a3673639616d52bd0046cef3b0e240a673df337ac0b54b0f42a8b444c1369650f702b80045db9ca61f60fa283452b459add91fb3db32bb228fac82f203e6464d6ffde152f7184e01eb458b30aa7970e994d0970230899d0ab4e464f22f261de1002e2080aa5cc607164abfdf765c28923e580de1db6c3173c8799054c925df1e4c53b547cb4eb79a619719e73cf6b178ad98aa7c9b4d0e3a6fddc50979656e31bf5b5379ba2fc5a47c64bb69249d0576a27ffaaf6d5e83006c62afd4dd22d7daffa9ec24e82647a1e0a216c9b68f441c21ad1c9869eb04edc9c89cbc02386c86911c4b04501e5c014f5f1c43441f351c93026585096d8d65426319a768ca94d8dc1f512e852a6a329ae159db83cf1cc9fee18127c1dd37504e01fe9bdea88d55b56c788f00d33c3b156353cab3dcb312c2756d325f746b1001e7dde70f272060998b1bf83295246b68c842f00039cc7f48bbb2075c93ec46ede8e016c1fefcc1a099b87659a83493b6814f7bca9d283a5997d81f61147202f1cec6e28791ebc933cd7998fa54e1cdb8c03a51aaae0fadb6be62c9d4dd6bb3b9ffd61601a113219c708fce62bed06bd1d7f130b33242607efcdad76b2b36b386ed2be5a2b9b5aa46fa996441c16d288a612dfdbbce2c1b711300e1b79fe5b0addf13af5f516708e52a4a991676b082ea69a3b82a9ac2cd3403e71b49e5abc6751d585057427cd93d57030ac6267750296f289df9cd3462c25047e5f794c7cca3ebcfea8b570bce7bda160aee39926b2c2db42b707ad5309e85c72fbd9300aea5468e02aa01c6df0d94992d8283ec53d0d312c05e0601bcf593741e3b5f7e212cbf24bdddc2027fd67ef52364bf40ec8dbcdca0f902a57090e414793b94b7873c7ac600a260ee2f4d01a81dfb0dba9163ebf6fb353bfb99a2537154dba587717a3bc23e37e0eb7f9b981159e212df56f93520709f729aa7f23382b0480fc9954046ca1066c123428e9f8d852431225cfe36cca231cb4be3f254dc64d0733525921ac5e7138aec687f365adc206f2a5757b7c640a610da04918f96e5d624b12060af732d2d88cc7228877da13b0f9a182b30868cfd6cb91f4927f660594936d3c2c943f5b0d198240cbe85201c4f46b86ecab58669df733d7b88628ff5e3275c23b8e9c663ed01764cd98a274e09a44ffdc189c211df1e59d16329929b0fe93ec6fa8a7b8af2eedddc46b1f948a5820912769aa87cea9c015167a6c6f0ac0f8efe8c58bb4986685aed0973154c77dfdcea903589ed6583a094aa43f782561dbc7931c2f622659c8514ce4ba3e9f010e049bd3bd2780460342b5daf6dedde59cd3fe94bf27f9c343b41aaa9ec688c9370169fc294bd8f0b7cea56befe99a634242bc52944342d948fb17bedc6c9b230fdf5dc7c609513389326d2003fa99c22d4472dddc7f1b9326685115e09a4b68082f851d0266f6ff93b7ef35ee8dc71b3110547163946b3070009d29c3831c661b144e0b6ffc3dcfd19370d903cbff20fe487826a04d7c0d85857c62178f6b67601c5d771045126ba357a33e4d41cf9c0196d5621e1149ea84bb0e46defc9025012adef887448bf55b12e142cb98e006235f4d261260f88b907db6772850093073bacb2a7c9362eb6f6e0b43920b84d1685137892ef8bb43481453dd7c68b7eb9fe9f9c02210c2412821888dc870368213daf6e6b09948a7446b32071042d2ebae78a1c8a34f5151cd51f5623e5811003cffaeca074f5abbe488e8274b9fc5437a80012c06e803fb736d322c0c97c4133ab39c81aa4517082d43b383bf24288e31c0977ae7d3a8c6134aa17c196096e4bd0d9c27236f782b277db0c888329feceb157c1e957f492970954e6476cbb76fc03dc0ac7da8aa0456c5f91d9c0abda5957ac5dc31025b1d569e7feac079db7d6d6b138f49e8d1da8d2bcf7d52fd3a701fb49f3d31f4dcdbde173a754c738ffe622ebe1d54945e0e3527fb3443908d4b8d0f0aa58caf582b624904df7687827ef2af496890bb6379503d06adb773a5c8d0446ad3ab4beaa1e15e46ec062d674ad70e91a178d13faf1fec8da82152c857133b43a16e7f4308bd5ae59f771b03cbdb963d2c7c3bb6d7ff9de927b705d50fcfe6020769dda795c52f2c289f7001a00b0e9d308e2c42cb4dbf52ed6aac98d317d68659a92a8b1b4be21daa619c0ac5612f5556a1e097ec7b2df43f42a229cee62709c572fc5f2ff9cde89fb22295e22ea7681162d859912587542bd112efc64f1e0487b5cedb3436c4e5fd1835ccebe90858a15c4d968286a8b35f840be2e3acf28816f53fe865927d60be0a1a196c81742602d19c244cdb7c40fdf869daab12b03a2d1992632fa2a600ffff43b08c940636aaf309bdddb1deac1c6fe1eee39a4f2659ada32607d1f37b53ee8610a75fa5a788e4f4366f5cefa525e897536874b50719e504c79ac2002f59400259ebb661615502660bd48574d10eef804b7686a7c1babfdf2726450ae07b323bd73d60067030002420efa9180ca990575ca18a04cec041516e6aedd64d1a5da12eacad0ebc37f3f1d2d0867eea2eec3488b93d02f8f9a6f231643e7090339754a366cd95f11015cdb844b8e2f4333f7766106330d46ffa65d3ccff58b360c395262a7aec9fafcccdd70977ea47a42240c3feac81833f750514a9cc2724cdbf1bf0a0f1491aac856d6a10e24245e9f0aa060582fd93bc821ac694e22ae1b7c9afd89be8d35cb7d5c496baf59cc49c09bde8460659e267ad4e27147c30c96c964a5f5b4eaedf6f427f7db332a170cd5129f72f5cfee3d87cc1cf14869764f2987795b59732d35bad4312fcc1bd3573e9ce4de7fac007ee055a926d1e8a53479572ff3e25cf0f5275225977634cb798eed804a882cbda1b7ceac6024ef00413d7f8a133b01ba5469180008d577b7e6f6d26f842e7f0af2ab736f98f2a6c1d6249efff63507b2f74355dc93001279847396d63724cd09c5aeebd627d73e50a94a44018721e0061629c3c31218c51461e0c5b693d00014548d958e823eb9494a9412c05252d01d8241f0cf18fd7c1676770e8ead6c7fb0f8da8e49d64ddcbe2f80b868c35aceb0ff594dbaceb1b3656b2c9b87528b9ed5a1286b1f8cd7fda99dcd2d6a9d24f5ffa3fb443d0adbc308f4d77782e0c4ed7c4d4af2ae5103093607be76b9678a38300b575a00eab91c7945c5b7322a765d160eced1173b5a2c2bc35b7995ae2ed306bfaf7c338444ccaa6c22984569a8e4b28bcf59b292a6bdea0a61ffe7f644e2953be10b25923f1f415edab2a6016e8b7348a4a581bc38e87d4bf71c612aea44846b191c20a7f03fc7a0de39565860b1135ee545c830f3ae2a2ca8310abc479bc009d7f0fad0b96808e9bec00e2a276ecc1a2b30ba61ff7d96ca3bf3b08164cbd38393aac296fa2d6c380ddc9e5432826fa7f1750712fff67f4ffbb134eb86cb80b255a61295646d2fe216f7296ef65815a095b68a7ab44cf961948efe2ef14599c27e05eba70b7c67fbb1c95d45554d29e7044c8ed9dd5e1fe4f6968181f5568834a421a3ac852767c5025ee701876373f82cf3c35f0d6727e5d0c330f0b7bc28836b184cc6851665fc6f3a0e0613bd09818491fd7b47415363d0c88dfa5486ebb6b3c734f5cccdbacf2cf172edb623102cf80e0c7e0ba56e6ae6540e0f749bc13e2ce5d55dd80c3fabe8dbfad0c6eab364c0b2430290a57440f80e2d48b551a64ab11add4e75bf27b90a388b92d8f53d87c884511fcfc9b9365938d3492bd1c325323b498fe9a7648d9cab77def07fbe7f070343b53dbbf390c6fdd2d36be579a2fdce181735698ae2e6c1f869b880813fae2bcde9c3b5167a36288e4b5f0c6e4f7458d8933fd8aeda375b12de2f05aa27680c882a6054c70c0e722ba02572cf6be7d3557c45e3d496e38543fe01a64f62c2fe07e1893356e88d7b2241d03862cd35d7c2850262c254716815bc8f9d5d50fe7aa524b42ea43319c9c732fc0360f4c5c19cd94e50463aeb63a942e7c0d426a9521837ff02c56945d6590d25f62e678708e8c58a74fb3422188e846c9aaa800f44112f89f3df8b258e8a19b3ddaa52e0f44687df3b1196d93d67d63d77ed75a473bd83fc5fc989a8f23ec0757e212e82fe26903f111883e90f4a41c49f2a67dac3e7727856f36baa0dc6622384dad79b37bb33f5055cd1ca2d5643847f445ef8c60f0bb55f962323e17e4ff5789a6920990c8751dc9ed53a4442a5ba1b1699802ecac810d692eacde7dc8799f2993dd22a937247cc8cc4e89cd65e32852ac0d0eee65572c523c0581870cab982689508d5836c5eb9257ddfb6ea18a9e5e90883b05286c1fbd466d37f8716f2296fdb56da21a0a12c2a55fc771f2c7015ea653154ab6a276e353cd16ce5aea9700578585d0e9d6f66d7d7c83cd7e07099ee5b6b5a57e63cb26adbf753193630852e05a85c0aa635fff04eb523849dc6bd6f2ee4ee7f9dd9329ee26f6737cc5d192ea13cd9698a41b72ee67b1bdff4e395ab292c9f6c2235ad8bfed7f71eceed95cd475db011bf8eb802dc4794ee9d5cd6e9ab99ee4a4be9694654dff7660ba52aca0569c60474cadd18a06baf74573522f062ed81b8dc410b02f80e1d8d7e877d4048c4c9bea47f85543f8645c6ccf", 0x2000, &(0x7f0000003340)={&(0x7f00000000c0)={0x50, 0x0, 0xfffffffffffffff2, {0x7, 0x2b, 0x8000, 0x4, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x1ff}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xb}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x40, {0x1}}, 0x0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, {{0x8, 0x6}}}, &(0x7f0000000440)={0x60, 0x0, 0x40, {{0xfffffffffffffffa, 0x7, 0x59061c5a, 0x8001, 0x25ff, 0x7, 0xfff, 0x2}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="150000000000000009000000000000007280646e6f2019eaf5f6258c246241a61a0f3c93496308d6872df55b7011666c4045dde988f1c68cee13d1604f"], &(0x7f0000000540)={0x20, 0xffffffffffffffda, 0xa, {0x0, 0x9}}, &(0x7f00000007c0)={0x78, 0x2f, 0xf, {0x8001, 0x10001, 0x0, {0x4, 0x7, 0x8, 0x6, 0x8, 0x6, 0xffffffff, 0xe7, 0x6, 0x8000, 0x8f3, 0x0, 0x0, 0x15, 0x9}}}, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0xac, {0x2, 0x2, 0xffffffffffffffff, 0x3, 0xfffffffc, 0x10, {0x0, 0x5230, 0xfffffffffffffffe, 0x2, 0xe, 0x4, 0x3, 0x31a7, 0x3, 0x4000, 0x6, 0x0, 0x0, 0x6, 0xe}}}, 0x0, &(0x7f0000002e40)={0x10, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f00000031c0)={0x20, 0x0, 0x20000000000, {0xe, 0x0, 0x3, 0x3}}, &(0x7f0000003200)={0x130, 0x0, 0x2, {0x11f, 0x3, 0x0, '\x00', {0x2, 0x8001, 0x3, 0xf, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x101, 0x78bcd207, 0x2, {0x8000000000000001, 0x7}, {0xea, 0x4}, {0x7fffffff, 0x3eb}, {0x2, 0x7}, 0x6, 0xf, 0x80, 0x76a9}}}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0) (async) unshare(0x62040200) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x4d) (async) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x4, "0200000000002000000000000000fcffffff00", 0x0, 0x9bb9}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x2) (async) add_key$fscrypt_provisioning(&(0x7f00000019c0), &(0x7f0000001a00)={'syz', 0x0}, &(0x7f0000001a40)={0x1, 0x0, @d}, 0x18, 0xfffffffffffffffc) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno5', @ANYRESHEX=r0, @ANYBLOB=',\x00']) (async) unshare(0x40200) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000584000/0x2000)=nil, 0x2000, 0x13) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8000000000, {0xffffffffffffff83, 0xfffffffc, 0x0, {0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x3fc, 0x800, 0x1ff, 0x200000, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r1, &(0x7f0000000dc0)="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", 0x2000, &(0x7f0000003340)={&(0x7f00000000c0)={0x50, 0x0, 0xfffffffffffffff2, {0x7, 0x2b, 0x8000, 0x4, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000000180)={0x18, 0xfffffffffffffff5, 0x1ff}, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xb}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x40, {0x1}}, 0x0, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, {{0x8, 0x6}}}, &(0x7f0000000440)={0x60, 0x0, 0x40, {{0xfffffffffffffffa, 0x7, 0x59061c5a, 0x8001, 0x25ff, 0x7, 0xfff, 0x2}}}, &(0x7f00000004c0)={0x18, 0x0, 0x7, {0x6}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="150000000000000009000000000000007280646e6f2019eaf5f6258c246241a61a0f3c93496308d6872df55b7011666c4045dde988f1c68cee13d1604f"], &(0x7f0000000540)={0x20, 0xffffffffffffffda, 0xa, {0x0, 0x9}}, &(0x7f00000007c0)={0x78, 0x2f, 0xf, {0x8001, 0x10001, 0x0, {0x4, 0x7, 0x8, 0x6, 0x8, 0x6, 0xffffffff, 0xe7, 0x6, 0x8000, 0x8f3, 0x0, 0x0, 0x15, 0x9}}}, &(0x7f0000000600)={0x90, 0xffffffffffffffda, 0xac, {0x2, 0x2, 0xffffffffffffffff, 0x3, 0xfffffffc, 0x10, {0x0, 0x5230, 0xfffffffffffffffe, 0x2, 0xe, 0x4, 0x3, 0x31a7, 0x3, 0x4000, 0x6, 0x0, 0x0, 0x6, 0xe}}}, 0x0, &(0x7f0000002e40)={0x10, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f00000031c0)={0x20, 0x0, 0x20000000000, {0xe, 0x0, 0x3, 0x3}}, &(0x7f0000003200)={0x130, 0x0, 0x2, {0x11f, 0x3, 0x0, '\x00', {0x2, 0x8001, 0x3, 0xf, 0x0, 0x0, 0x2000, '\x00', 0x0, 0x101, 0x78bcd207, 0x2, {0x8000000000000001, 0x7}, {0xea, 0x4}, {0x7fffffff, 0x3eb}, {0x2, 0x7}, 0x6, 0xf, 0x80, 0x76a9}}}}) (async) 1.13342847s ago: executing program 3 (id=1800): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) pipe(&(0x7f0000000000)) 1.075810751s ago: executing program 3 (id=1802): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r1, 0x1) (async) listen(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xd1ae, 0x0, 0xfffffff0, 0x789, 0x9, "3a4d905658ad8b3282429a59fffdbc8185f123", 0x6, 0x800}) (async) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xd1ae, 0x0, 0xfffffff0, 0x789, 0x9, "3a4d905658ad8b3282429a59fffdbc8185f123", 0x6, 0x800}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x6, 0x82) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c0940, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "7026405ea9be49fa"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) r6 = dup3(r4, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r4, 0x40046210, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 1.074787141s ago: executing program 3 (id=1804): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140000001e000101000000000000000007"], 0x14}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x4000000a, 0x0) r5 = syz_pidfd_open(r4, 0x0) ppoll(&(0x7f0000000140)=[{r5, 0x4080}, {r5, 0x4002}], 0x2, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) r6 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdo-\x00', @ANYRESHEX=r2, @ANYBLOB=',version=9p2000.u,\x00']) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100), 0x901808, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000003c0)={0x0, 0xfb, 0x1015, 0x0, 0x4a, "cbfe0c207dc220f052ecd237fbf19287", "fe08842d0e3eff878f31b77ab2fa4e23f360ea4dbdef6375f93ffc049c130d305871fd37143db874c75dd1df84a233318e591782aec96da2ae1514b6a76b3a1bb1a88e36c2d9177d0f7de1349c3c8b57bfc2c565c6ab997c95575c99b3665dbeeeefd0c4029d72a0dc5a0c83a032ed124cd4175bcc5970dd22c927490dcd7f7fb8ec3426a61c36bbcfd4b467136c8a237ceaa9a539ebf311d8e858949a32ea618c641511390f1b4922b83b9d14a8e46ee7966f98a4803bbca5b9380e80e35c48298009bb4a146c9ecc0bd3a511dea3e807e3a4cf0362821fe80b7ec569bcc67bd29797756199d48da5585e4adf7bff6bf68a63489f8015ab4e3fcbef2224b1b4b7542a0b2ea2afd2422abfa2e1e8f4cc5b16cc910e65df6c628ae5caf8a407639b7d6e052a68d2e2e90b8e9e2802fe610988dc2def23a37d1d1eca3dcd36471c8e87c398f6d26c4259d207c79842b8cd49d89a08a6222c0df3675892908ab9e087d236039975b3d6870115898d5e58eb2b056d481c694ea5f8c2927f89e0fe65f3738e1ee285ca561aa23ad8d61d0e26dcfb46ac4734e166ccfca6bc91aab95c76944e072188c8b09add029460df48060b1ce4ee11e3c5e4788e59f48f3f66d09e33e0ad94e8a072cc7585fc52636f4fcaaf5801629a2b02520138755f02fa352ddab5f14bacf9a2cdb4a4b33735f6f0d4817425e89c691a1e9c29041ceab1b56b77f98c461423ed461b56fb982348412eeb1bce3ca0816e897bb86aaf7dc8d7c459e0e083c0fe80b22d78353e653d5d3dfffdd2b81ade9afba8409fb4fcd06e16643e04fb77558d5be0497c5f9934543d0c4ae38949be3f7954c49a4f8df4b7d5ce06a947a5a9bb3eabe20b8cdfaead417220f3f2fdeaad168305b19c9a8fb15c293d8186d4de1603caa21621bc128dbf0af63ce74f28786c2e58e2431039bfcf6a3108855fb1f0e4ae3143f81c01791e3bfa14b2bb055e07f677b6fabe9e37f6dbe1e78b8484a23f8411fa267d52b2a4b68eac0604c5c23bf3bf93c9d2e3283cfed6fe1e9956fad607684ce1e9257720d67feedd3fbdd18b25483ee622968354e992ad3504e58bd25a3a3dac0158994cdb0f9e0c82d1c9a77e29d6dff56c71c137a766e2a93f4e795d20ca495265d0bb6928e44305dfe78c31f2e1f204e00ff5d5745f6c8da883f359f2201ab367c6f97aaddd841022a3cc26d06ca1114deca867177986391b016939f7a683435950cea15f140e26120c462475dbaf9342492aaf774a5bc5dfd4b9a4212eb39afc983a39562ca52952fb35cd076f4d69d9a01582a3ec0f5491814b74f6f024fcde82986973d82ab26da5583c40c1cdb2fd894c553f938a65918c5f1c7f041453a9ca3c6424fd50da297d64d1039bdb25e2452632d47032d15bdf6575cb96b1d8f9bf2382aa1e32ff0023f77dc3faf69b469c0c6edea177a5ef58af8db9a91d2e29a29f38d8a391fbe85d1a2b4ec97d13d1f7cc2d88a387acf49d3e2d7b7c3a4f443621193809010dab924fb2d380cd438893aa705a73913da8ac9b30e52a17e9f4b59169fb5dfbd6a7c6201c5e0e0acc69d33df306f4f1a8fe68bf23226890e9527bd8c436531907a7a57c22a4a7234b1b1ea9af82e2d40ca7c53abe5ab341ecf18048288230653a5fdb7cfa43d52a830912fd783d51a3fab6addc7e4a670981bd17ac5f662c35ce930bd6100e457d19b3b4519e12ba7ed46dab503b47cda17b5f3efb6c4931907513a81065ce1c9ea40405f379e5aad22ef12d4806e82557edb3a1501c6fbcbf5a4ac80ebd580fa7ea97c82a558a307de4f0e4d128c1bc17f81465d80683905c7c03f64f2643b467bc651f7e80206328169d28e12c257546cfc675ae5bd98fa74d6f3091fec0454f1d778034f81857a357088299b8feb569f3bba86a2a5e37b24f0e33d2e36ecb4cae6c489e23173061e06179215a5a0b0f6365b5ae4d921376c271a5e7e9f9025efc5b14b37f2b18fd595620039decedf9891bd688d293c6e8b4f433f62da04db722fce656bd87eebd0dbe53356f1a5e89924a028cab56c262c69e83d4aceaeb79576e667fc4d8ec6551d0fc45cdb69189d7698256b1b321e190e1b4d0c516f760e4c58aed72b6a4f77049cc4c329381b79a3d3e3e4aa68bd4252a26fb4f76358e318ec824f3097e1051dc963c05ae7c0b856d30319d2eb5e3ea89492112ea8e6e148160ba17990df6ee096213cf2a58071086a283a27e713e529302f9e5c7009b2915eca783cb0b60032dd4a65c95721d48dd9b02df164a56a37bffff5db3f450b08fc71748cbd6dca1a7bdc18b8d8cf976500c8176c7a82c4a3d7ca56f23d71ee15b32e237f019bf6b60b0d363653451a2327d2eec882c26a8eca5d3d61dba31821dc647e245250390618f63dc57b736acd78d50511a82c464d4de6f947d242bf26588f6939f486a602f5da6f7157ad4ccd3462ab518f2f40cf74c1ee974dadca4f61332d993882e88561b722a7957e351640eb26fa31cdf574cc5c69008be05c1ac3bb77c9b49868bd306a545b780b74c483b288a203f4da45db2a64a4a2c96bf39bece4358ac8a5196da8468df8b0ace537ccd03482a8209961ac8e1ebc8fd0c16791b694d519f2f7fdb09e20a1eee4ecb6609163f8b66abcb3c92fe6c3c5cb51007f08d10942f47884c27c019caed651567cd9ad82853df98f6e40440f4485f95cf8da1daf0bfc9721fa8cae56aa7e556098dbcc798662f9cf1ae93a8b552c923677546432c842e2a865ed18b87adec2a87f1a519f87412c33373d2a7a466a3f476b167827c6326def539c99f8d8891a814d588a6160bdb061646a0fa737730e086c555ce154c4a2dfaea0bd76e64f87b7ee5c69f7b3c22bc4d481378317ae038bbcb395e602a9eaa8134e0ef915150c439e60e3efe10240ea8b28f3030d725b2c700007785911da0a2805cdcd303ff42906f8165393d6b0566a09a5f406fcf5840ef83a8409bcbd5e34c5c63a3633a4b55c3c1f52176ca567a2b801799507d17ef5a139550dc42410841407b77c2c9e542a51e43f37eb890a95f124f87df6ec5d07e67a7cf165d42acc50e5d4705ce0119720c12184253cb6c056fcb8094bdd1fd8c59c8289b9304424e4305c5fe2f6426478b919ad0ff2d2ae311c6dc373db342cfbc7cf69a1bd084bf005ea11ab7af76ed7910aec6a1a283655ca1be6ee3c38b4cc5a166826b8bd979acd44b16a9ad0e734e82f4be38f000d107c508f081bfc2612aeba30c9eb11f29a0cbaedd516d890ce5bc22c5fe7c1915b2051a84b6d8bacc8557a85f3f81b59fc80a05fcaa6cdd7d18f36b92886abf8cf537b977fa127469030993c29387789119f24392d4dd0ab092a08897e7919b73551a69650f7503d15f0b7bad49d0fbbfe200cfe598b83f7a7a52e3f43af5e7528b6c1137fc88b386fdcbcd44159314123e9d5a5532eb92d4c79229d8ac770a8eb1d75b531c481c83bf5db248c12ed54e0f8ebacf5f23db14cce42fd367cf9741ba80627a0f3754b4581fc0e2584b55ebfcdcb3414ca581dca8e5cfd63312b489fff5a700b0863d18c769d07839c04a4e4bc749a3c5ed5148135d08951e5d3a6d2261271539102355b67b0622e8bf4ed25d8e73f51b08b0687b235fb5cfd225f2d0453152d2c71ff18f611f49a4f4b5e3b5408dab2ccaae42729b62836656c756993b8135dc3132324b2e3fb6c08254cb64639bb2f379f83a087f46b57ee1d08b094b6c23cb90a9440ef3ca264169c67c63e66cb929495b11105d1b9fbbf1838bef12d7f49760b840f100e30095dd76442f5e7011798cf835eb3708394a7b33af717f0d2aad73da167c082df5ad90c466f1553a959e720bde78e1d37d9e3c5a5566a9de37e74f7deeaa1cc172146f11d7bc32422c5f51dc73f74b9e797201ab683a84bb22071d24e88377fb2c18dfd8c2e747fb7501caf8492be0ab2343a5c6ba1acb5b0775c379aa103bf99c9a60ab7e73e75f56796058aee6514b055013a2609939c6b0a95dd86de471bd7b85549125517160e80248b498023e28c0eb2759128573af716fb81673e4d81dce0f3fd0732ae5512be3eba481b43fec78a6c1545c906d541c71b5da2325ab8be4679e0a7156b828be91549d8f0131b9c9a35a7f79817d6a2292e315e168b8bd5b2171914b96f50f826174ddd1335d926c6b54696b7be8d66a24edf5fc3e7efa9cc1c20d4da2b511e207b8246cb7059f1587490319815bba4a0ba2446beaf48e1d4d9afb3c55358e77f027c9f8418d11fb67fcc29c43cd693eb513d7da3ec590b30c8713ea0695d9ee0d9af1ec7aad4fa8a3236d899a429b17be1e4db8a6de296d5219f4d648d49bbb2a51d8458e3f0f606c31a265fed6616e8dce14b0cea733a451a6fe9f3d4d7b13562a398152b347f08e39de911bf871106f3f617c01d2b661813676a4dace17745ec1002ad1ed6e3b2b49adf2d552fa8b3c06405bfcbb62d537f594b1eb04626f25221d554685615bb68c90dbb6870bfa86b0452cf0217a5dbd593e34ba0e2997ec4026887ccb3c23b1e9c72b86182aebb493a728ff731353eebf1fcece169acae41c27fe7b8434787d924d17980fd8dc72b1fd3260812be07e4dc56700ed15e39366b354c905934a0fd125eb4f2d2a26d7a867bbf8258ea6d8dd40f1fbb4dee2cbad48c31247ffdb2f4037856913bf8761e7b16df4a8a3fd38688a5fdfd4d83a8acafcc5997a5bc8a9ac6e5a7f260c830aa83f826250b124d07d095e974102c1c06a410cfc6d20a6a5fc0e3923f86f82307a12bdf84edf60d066fcc6d9166e73da67888c5dadf5fa0647f0907036d58c38d86c1165cb89099cd6c720d935a873eb94b526ac47c0b3e8da562debb1b50bcdfd8f01c70400e6b048b1e24d16700d433b48476a19e16685176cc3a76980995003b40a609a9a4c63815cf210d8430ed758145c68ececba14431cb03b22330c7fbe3f4da907699b178703a3d0c1ce6a310f40fe64194acf3bfdc746e46a10a7c7a9471c0d8660b5bba01cbbe05eb08b9bb57a9b198b91f9fb4249bcd9d21e03cfc0a987420ce3c09d3d8dda3a7bf6c7408554687393bd2a463c810bba991fe3dcce35e6ba2897a962a4e9c38f0d9dfcaad3a08110744b192092194d2c0080b7d5984580d18d212d2db9e614cefde67c1d21668d6b48f783833ef09708742e2c91281f2f6a861a4713fa1d38650cf100dd101efb50742bf53b3e3cc6f73ba43642004484cddfec115ae679937a66c40b36067ee2b40ff58e208fdaccdabf27df4ca4b84a19207a639dfbbc4691bfdede5b502d85f7ced6c695107332440b647f1417b31117cbc123afa8f407b59d92582e9c1485d20a621f27a862ba2bdbbb541a763c3120df760828793181550e02fde8ed31c4e84aa9129e82cba3d30b4a641f42de7a0f2cde80b91b1017d2749c021ff7be250c76846053ea5426e9135869783eb8b5ea9f733c780ba381f9cf7db2498f22feec4e72a67a879038f1b93375a5128f99a79e1a24f7618315010be24b651d5b57c7d068506e653f50288d854864ce8f5a350e4630eb0d9dcf6be1aeb8f68deeb9a9c64fc3f381559c5f718ffba81d92804b0298fc72449dd407f9fd64a1840c41f2ee85920e68209d8ce9e9f48549c47731946fc5f51d55b3e348320247d43015f80e1a81ab8d8c2d7c674b16b6c761935081d7739d5d314d67ed7f4f14ca3e5f59d87ea9fd05d5dfb86aa95f56be9edb8ad2f11368d98ab0d09ce8fe8f63bea74a0146fc20953cd9ead5a752009cf8"}, 0x1015, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 906.498084ms ago: executing program 4 (id=1805): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/108], 0x16c}}, 0x0) 904.214574ms ago: executing program 3 (id=1806): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xfd189000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0xfffffd64) syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffe}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0x8e, 0x1, 0x5, 0xf}, @dmm={0x7, 0x24, 0x14, 0x2, 0x9}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x4079}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x4, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0xc5) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000100090c10000000000000000000", 0x58}], 0x1) r4 = socket$inet(0x2, 0x3, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000300)={{0x100000, 0xeeef0000, 0x3, 0xa9, 0x3, 0x3, 0x81, 0x7, 0x1, 0x2b, 0x9, 0x7}, {0x10c000, 0x2, 0x3, 0x0, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x0, 0x3, 0x6}, {0x3000, 0x100000, 0x8, 0x5, 0x1, 0x1, 0x0, 0x9, 0x0, 0xa7, 0xb, 0x81}, {0xeeee8000, 0x100000, 0xa, 0xe7, 0x3, 0x2, 0x1, 0xf8, 0x8, 0x7, 0xe, 0xf1}, {0xdddd0000, 0x2000, 0x8, 0x43, 0x5, 0x6, 0xa, 0x7f, 0x1, 0x0, 0xf7, 0x3}, {0x1000, 0x80a0000, 0x3, 0x80, 0xb1, 0x8, 0x1, 0x80, 0x80, 0xf, 0x1, 0x8}, {0xeeee8000, 0xeeee8000, 0xc, 0x5, 0x0, 0x5, 0x1, 0x3, 0x5, 0x81, 0x7, 0x4}, {0x100000, 0x1, 0x0, 0x5, 0x5, 0x40, 0x1, 0x37, 0x2, 0x8, 0xf0, 0xa}, {0xeeef0000, 0x70}, {0xdddd4000, 0x7}, 0x80000031, 0x0, 0xeeee0000, 0x2004, 0x4006, 0x0, 0x8080000, [0x8000000000000000, 0x0, 0x15e, 0x3]}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x9, 0x10000) times(&(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setitimer(0x2, &(0x7f00000000c0)={{0x0, 0xea60}, {0xffffffff}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x6d, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0xd, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x91, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "4cc80ca7a0f8"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x800, 0x9}, [@country_functional={0x8, 0x24, 0x7, 0x4, 0x1, [0x2a]}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x7, 0x8, 0x94, 0xffff, 0x14}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x90, 0x5, 0xf0}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0xf, 0x1}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x1, 0x9, 0x4, 0x40, 0x5}, 0x19, &(0x7f0000000200)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "ed9ae48f16aaf8a5c445284f6e74ae6c"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x441}}, {0x56, &(0x7f0000000280)=@string={0x56, 0x3, "98289bf9f44956fb0cd461a62ac5f663c3a9c4d0fe3d8135227a524073e8d43f2af556ed9a110dd866a8acc919ab7abf664b47b41e3f1a12ac83c111a79838f5099eb2db069f2686a7cc4961a3482a1f0bbef88e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}, {0xc, &(0x7f0000000340)=@string={0xc, 0x3, "9ae95a24a683c3194c2c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}]}) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r8, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r9 = socket$inet(0x2, 0x3, 0x6) r10 = dup3(r8, r9, 0x0) setsockopt$inet_int(r10, 0x0, 0x22, &(0x7f0000000000)=0x7, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 565.79031ms ago: executing program 4 (id=1807): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010100}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r6, 0x1200}, {r4, 0x201}], 0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_procfs(r3, &(0x7f00000018c0)='net/rt6_stats\x00') mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@verity_require}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) 565.27047ms ago: executing program 1 (id=1808): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000000a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0xfff, 0x3, 0xfffff200, 0x0, 0x1, 0xca, 0xffffa0ba, 0x5f4}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x1}, @enter_looper], 0x1d8, 0x0, &(0x7f0000000600)="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"}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0xb0, 0x0, &(0x7f0000000640)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}, @free_buffer, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer={0x40086303, r4}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x6, 0x0, 0x11}, @fda={0x66646185, 0x7, 0x1, 0x100}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f00000002c0)={0x0, 0x20, 0x40}}}], 0xaf, 0x0, &(0x7f0000000700)="af618c08f3904bfc5e544141208707a82461319accb11f4dfbadfc4dfc95bf82ebca6eea6029447958d13fcb620b1dd7b63e2a794658dcac1cc36248a5364c323a354b4bfb8969934e469bb7e3b7a1a46f3269e77fb1e7c3cbf40e323e4ac1d09ea2c9b87b5e88f74431d27dda3caa731429ecaf6770db3c406d12d04002ae5d746d4d2d1519f9a1834d07d54afaeece558962e58231df1c7bbe821432f279de6091fdb55d07a1166ec907cdd93542"}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="d6"}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x420000, 0x103) openat$incfs(0xffffffffffffffff, &(0x7f0000000980)='.pending_reads\x00', 0x400100, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 565.18884ms ago: executing program 1 (id=1809): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xa80, @loopback, 0x8000000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2400c049, &(0x7f00000001c0)={0xa, 0x4e20, 0x18000000, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000040, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x5, &(0x7f0000000080)="00de8de9", 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x3) 514.205981ms ago: executing program 2 (id=1812): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000000001010400000000141a000002000000240001801400018008000100e000000108000200640101000c00028005"], 0x78}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 499.330191ms ago: executing program 2 (id=1813): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getrandom(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000000) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001800), 0x8000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f0000004200)=0x80000000) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000280)='\xef>\x95\xfb\x84\xe8\x00RX\xf4\xf40\tx\xe2wXq[l\x93\xda\v\x9f\xd7\xa8p#P\xdf\xff93\xaf0\"R\r\x86F$\x7f8\x19d\xae\xd7\xb0\xc1\x8b/.Xo\xc0\xc6ecT\xab\x87\xe6\xc3I z(\x8f\x1b\xf6\x9c\x1d:\xd9.\xac\xb5o\xd7\xd9?') read$FUSE(r5, &(0x7f00000043c0)={0x2020}, 0x2020) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 430.722952ms ago: executing program 2 (id=1814): futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) (async) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000129000/0x3000)=nil, &(0x7f00004ed000/0x4000)=nil, 0x3000, 0x2}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) mount$incfs(0x0, 0x0, 0x0, 0x1004000, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x2, 0x100}, 0x18) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = getpid() syz_pidfd_open(r3, 0x0) timer_create(0x2, &(0x7f00000001c0)={0x0, 0xd, 0x2, @thr={&(0x7f0000000400)="d5e1187d318931b76cb032ef113d394424a8f27768d7a09c6ffb788caf781b516dddad", &(0x7f0000002700)="de9b91e68ca4acfb22cc2a5b7899dd85ea5ce48318c46415d55a2864a45ed78588b6afdc6bd89cf28434c85ee6f40af8d584ee0ed671960d53ffce05d14b2d07c8e7158114b06b61b00cf874485d2180f82ee1385c8c954e48487596b69906d948fa2e300cef4d883959b8faccfd6033fbf61a3474af18b2f64fa7f9375b6329b7a6bcc853841898358272c75072b3f4a698cc74664eb9a2e4bef5600fa67bae287390a5f3eb32d2d94386bbf5b8d095af42770bbec1b1c4ff99d62e289dbdd98780b989aee8e3eba6d132e7b4c3124aadd06acce26050795d94fa700120234ce50c7771dad3711735ae9eb47278ce6a854efb382a55865afd07140734c2405c8353985d7f946d2725856cd074eb1af7f4bcd9fb1fadeb7bfac16229c73ddcee5afb8e15b214de02ce3d68fbaab85d984dbfa0cfa20db932c96f281ad50b7ad4586217a68c1ff1d34570de0a468dfa7ae146c80958630035e137dd2fe50780970cb7a8aae70dedd1"}}, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000440)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x69, "213a00b53c8a98"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001640)={r4, r5, "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", "4843d25bc0b9291422f02ff8352868861f9777e1f4395337c3df8fdc9ddbc82f88564b3bbbe2b0fdd9b2a84b3fd8982869c9d8c775fe8d1b11bf3be62d555680a545b733717be3f21728892373b8185a67c53156ab0da7bd06551137046051f6d4e0e7cdd45a34353c353617815d8d415febb680561746a2622400f71234d54aa43e36b1e7d855c2302032225650f0b347a0d50250c99acad115c78870e0caf815ccf4429da5ed153ba3cc31f8824a7d5989369859a2b9edcb0249bf6d1e4208a67c5bb817f17e297f23c9827176596ea43620fc95f5c95dd674052a6830e579c12651d83802f7f4b624fcc29fe7e614ce647b1fe36172fc0e1366dc6664fe68542a75cb9fdee8fbbd1521f32b644c637e2c4a710d73f228479e2a03884680f6cc6ce9605e8747cad45e52cb6c423f2135b2b42f900d81ab9b65d3e34bf51522c055474050d49b27248b65c2dffd9ee9a7ac809798fddb798d1e2c1c68efa11a6ccaf44f78a86d1ade002c0d73cf6809894d7c3aa956c46b8754d0e9c34e106d68f48a04fdb1657202eb0ecf11cdb21b3b6e8ad26af1cd82b4a773e5bd553c256e88c368bd25f8134026a8ce768aec3be395bd2764d510ef8502f305dd1a34ac983cbc0298918f98c6728597ea9751aa6a46af8887f7a70c268b74126b6eb93d6f31cc8b12493c91b89cec4455174a65701a7855bcfc2153b4ef32d91154750176f517bf207336e3a428d9a54865647c3208ede2a6c56605bdd4b9b3b80e1c5b64c03fce6710e11fdf916e30ef9495326aa218c3f619cd2c37146e2b250a34b1327bf4926bf6ce14fc4b3c797a87e62a1803c6f9f1504435735dd706d2032ee72d7a074151c212fe6abd166244d175c1b1e3abe989ccdf31fa6ddcc9e83cfff160d589381d59549d1e30a010c25b777a3641bbff038bcc76313ed23b24684e5760f2a2fb4d4de3e5ab3dcae69dd5b0a4ea9fdf6f7565e2fe68515dac2ec881c11ccb629282980a4d25bc1974626b5c93974fbd131adf33f2bcc76a97ccc0e2f5e8a1f89760dcb9d82d59aeca625b2200dd44341d54ac140da67f255d24200f6032645d16faa9115cf781212b5c5bd2cf8bad8d7061da6102e6eee746c38b6e0af88dc005d325efe62986572a29117dc19185bcd5c3316db894e5bbd761d50d5758bb7b51c6ee0e835134d70e130c1e0315ad9bd8f4ddf3dc286227a2de78ef3a558dcf65d7d94c024a9550026a1e67ac1378eb15b443eb599c94c09fa9c5c8422d9b430a71d197b4904d39480c285e35a314041a459e05ef02f213ec05d77e38d07e810cd49fb2f1029700b139c252f603e18a3bf929c77103d85a33d53eef1c6edfee5717e37fc1fe945ed17c97d10a0f99050ce8460492a2f5a5ddc373d8c4872154bbc47f5136ddcb967b657edb1d64727362882e5f6e7fa03e6b1f9f819089a1adf1424cbf55334f4e9ce8115bf3f5ef8cc1eb0b98965fea87ff4690076a0b47af2601f07327746b85d2de1536d951a81548fc7b3216719d98c299e34eedf35d10ce1effc22654812a11efab3b7e72d111374de742c372830ee862880e95f82c6cbc4b2bc197040208700842f421434270752b3edf09d6044808118779cb6d524753259663caea0ac5b0333ff732e5465f3a243efecfc9fe785f5240da90b198a7701114b3023a3e6c8d73eb02973b9677735c18d4254ed99dd2b568aa7f700b22dbfe0b27312e1a3a9f054b00a1ff1ac87824f7147a2fda5e470e7c8932e098d123663ce423c3420567393bee0e054321574691f58374af06bae4b3d63c10076ec1af6c140aac4a87db40d0436b2f68102356254b28a691fb7d6469d277be58810f5af658bd53785fe96aa2249fbac95aca0535e230efde035292c00b1f7a493f7624b6535f6f1f68fb1ebce32c32277a657b330d69a679df4f31fe0b6de2cfe70be05e443a4494af6a4434579942869dce96ad2da785ec48ccfc764dedaf0448439b1b2408902e2f721a8f480b5029270a84934ef8afa6e22686419650ee6097252832c14f03a00c8b6b7044f03e4c709c4d04f0db6462e14a06622657240afc4f4ca81a1fba9edc08f11c15bdf85b21d71fea64c4c6efb9e464cd8e2e3c4325394abbaba4c769236a706cb12d46e4b317c16c2be715d62e0b3eb873be8c874ff5f6f982f81a7561407d36a9da1d9a4367eb76dd17e2067e5d1a30ecb24b1ec02806d6e74abc056378143574e210c4646a565f88fbb2f856235d4266acc10e841e49576bc0fb855a68d06ede6f91eeacc8a48424d300ae8b879aa04d6ccddf19bdb13b8841b8f415c7608cf2015d6f91d31778f4a324cb93f5fb4c9f63e1f1ad9ebe0ad5a1130bbe27e1324f9e95c44c45bfcd3295a528f1c855697c3c6861f8460a47b9a279d9b7d1d2c1bf0822ff98e40c6af534d311896e1379063c1cab08bbc70f9cf4dd6cd3e98dfb84699a9480288d2bb2f12303a7ed906be8820f3fae466d82b44fcf8b9fed235c0073749b7d4a78488a75a23fc875ab4bfc62c5ee55c42b756e66268264a1f7414faf5404faac0eca1fd1d1b84816a927b619e64076417212a80c321da684a81ad1eccc1397e4201a5017241a4d71f49e68557ae2e7cba63a824b3db8608f5f4b506cefe266cab03fdae06f02403e1ca7aaee7700b05c35b88ed01e878acc58dd0c7dd5de0270e3fd642fd2b47179313304b15ade7eecc97036471c84b5fd971feb592c3bbcb2d3a13bc480175e50e7ed51cae8d43a71fb132ca1b50d240f853995ae63e3c6747917b05f1c5828e8d0dd2ea2d8090a784350a43ac8827ccda36b1348c3b9799f69f4b722e12639cf60dae8336ee2d81b44b13342205376c17cd97738ac374a33d9bc7b64f6b1b2252ebaadeed40cc0a67c39978e16aeca34e6ef3b3aaf358aa3c81c51d2c807cc6b041d9873ba5153475528eada70adc03933bfe5af750717952bd7d66ffbec020b5236490e30f14de19fccbe18804885bedda6cbae392dfaa937d12198226bc39f47d20addf43fd85cc43237f555d143be75c581c889ba689bd312d071d79ce4a4fc448f579c95070947cb472034352d86afa5151475bf49d44b526be84072a8133ffeccac68b05a05093f613649db802ebec55de3b9959ddff520e72d504195beb0d2a6638e7da178b00158695431208975c2df8c1169dd22f137f4c9055b77781943cef43a705838aa3e96ca2d9f4d1b02af797ef7ba2798e87647d96b111ccc2af915df9aa47d547a925ff43ead8284e7eec3cfed6cf1cd10726e6ba09f1ddeadec2c58e6b7f151b264112f3f9cf15967888732083a7ae073071a0ddd179b50a51b41f4ee244d8518e027a5fb9bd9266852aabda9ad3bc6292a41615749be3009da08909d8ff1261ea538481b870dbae096825fe2eeebe627e30309ad9de7ece52bdf6708fffbdbae7c1f028f7e208dbfce315c6b3379272398e26c3b82a6212417fa90f75d8aef0fce9ea8a1a101075f906abc8fce7b0a45e41fd1398a1a9cd669b3d4e46af1d29784f105b4da0ded9cbc4f7b4191ee847514302a1ec5ab51bd7973396a8f55a792277f114ebb580f98049dfa30f6232cd9e50217e28cf03508547a6153322b23ab1518fde78f21a105c0a879c36018f76b2bf27b4d6796536215909cd9f8e5341eb5ac36ed1d6dc149c134f0115f575a466987f255796b51344fbbf514e156be92a6493a6154d9182a1c53ee2c3857264193441d57adc107e015417eca6a54b800c1b95710227da4204415b8c52732ba426f780050e7f311d8780a3cb03535400f11bd73b76dd71aabcbda546e209527b385eb1aee918a73c408dc614eb91519f3e2b063b4c04084c7efc634bef107c1c13167c114644149da696e5efb672b3f3d7dd975a27c488f6257313d8e4c06c4e568f6c9a1997e0a322c13eb10499a354fbc3465604b4c5bf7d38ee9f8b464a1f9fd10c083f6ce980d64b105aa8bfc2d6b3a1b4cf262baaffa653834f7f01221439242683e7c4ed173ab2336f664d8c9f9c39546ad6ef10c1541a1a105b61ad76c127fb2926595860417b66e606a970198dc34b591a3946e01adcdb3af3c793f34d980b44b7d2003113ffcee92aa8cd2b9a08883cbda31a8f6a4e42febbb37642b6e2d59f62d002b914d9cfb70b679e41f539eb89d41415a995fab12772a16a848291f9b8b53be7d36edbfc978bca5ad07da2be6b6c8b8f2c56ec6860e8a7f3f44344407ac72f14a5ed08063c3b0172666f9798249211f21df5cc8504de74e5322418686128a682ebb41bf3a3c8a27b540046b8547c2273ed863897e1f8a70becd32286fe8076d7073f263854783a3736f98a5b16285fe2e29772040d4259641118b0b54d60cfe9118ae391c9ee8c2aaa53497f7424c6aeb8dc32765c7e5e94ddd29eeb30c59bfae85897b0c315b5dadfeec23cd6eeb742d8ba112e765849670e69af3164181d89cc37b0f20e6db5f25554dd767446c1e25c4b9b8c04eaba1f8feac1cd6ea622d94be8640be28d0f0551ad7a51b7764ee4aecc63dae5ac710bf4ea645f431099376aa5555bff4cee9a84f926480ef646be89a8adbec02d0e3e6404cf8839477d0980706ed90f062437f00fe8c542a2917118f7389458bf66a5995dffac96a3c32f79aea98798583285e64dfb53ef4eaa514f996952d5ad1b1da3a2c1f5a17d135eb47b5c4d73734a463a07d95dc30298b3560392721774f4464a4d659ba16a3ced89797d61ca70064d4bfea00aed11f9c60e84aebc768a4ada8129cfd3991c1569c17a1af37ae611a390a128f4eff58b4b781137374c095fc57aa0faca7c43c8381913ca6bc7261b102ab02e7e679fc30d301fbaf0611f8fca2b797b516e4923e92d1e7f0af2527749abc93f2c944db6e43d56027467543a75c68998a37800ceaf261a3359e19f2c8a99b825bd698c5779423780804fc6d0d1e82d047b0fd0f687d2896786e968fa29d87c9cfc45dc51fc63dec36d94c27c76eee2e5882812a54a95f2c6ff9fc04da8aad3497970bab96cc5746fc10a39b2c7188847a4091b367db02b95f0eea007fb9b56612d522cfc3fb5a0d3bd362b773e998e485414f2173ea06e09debd28e75ab5e1d59a2db35c5ae355fe72404f653871545711238394d58a2a78528529059edac7e2145fcb8002fffa11fcec21e1fe76b328277566dc827a9e599bbf764086bef50c10e2dc26aacf9b27c7be209a3c28db757bdf2778d49823a174eefd3a2a2d74f8ff8624e7dcb55f84db7940e7552c4aa47fe22048af4cd516c58a1d2f0a6498c67f822f5397693748a9b23af63af438f999d5871613a103398eee05b93626b59378b1c1b352c37e157c61a3887a049a39fba268b59dd4c7eaa5ea93d7de2469349cfe7707441709ddbca"}) (async) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) (async) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40f, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="1267726f75705f69643dfc9b0165dea562decde7bf06ade9a64cf368cb02489e2b36a53674e72439af6a6633035e8f2628e13ce80a8a58e7c3df0e2d6098cdd96da72c54b866ca8465fddd4e47ee37d5e0f9036a941accd8391632a447e4c37957036782c065000fb2a0e1a22961d107100a3bc8ac4249", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) munmap(&(0x7f0000fee000/0x4000)=nil, 0x4000) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0x1000, 0x6000}) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0x2000, 0x100000}) (async) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840c, 0x0) (async) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getpid() (async) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) 376.834673ms ago: executing program 2 (id=1815): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz1\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x10000, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 376.446433ms ago: executing program 2 (id=1816): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/108], 0x16c}}, 0x0) 370.368294ms ago: executing program 3 (id=1817): r0 = memfd_create(&(0x7f0000000000)=']\x00', 0x3) io_setup(0x2adf, &(0x7f0000000180)) (async) io_setup(0x2adf, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x7fff, r0, 0x0}]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0x14, 0x80, 0xfe, 0x0, 0x16357b09, 0x10, 0x2, 0x40, 0x14, 0xe, 0x50, 0x6, 0x0, 0x0, 0x3, 0x7, 0x3f, 0x7, 0x80, '\x00', 0x8, 0x25}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0xa6, 0x7, 0x0, 0x24, 0x6f, 0x40, 0xf, 0x15, 0xc, 0x8, 0x13, 0x0, 0x2, 0xa8000000, 0xd, 0x1a, 0x9, 0x8, '\x00', 0xfc, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mlockall(0x2) brk(0x689d80000000) (async) brk(0x689d80000000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) pipe2(0x0, 0x84080) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 0s ago: executing program 2 (id=1818): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) epoll_create(0x3) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): pe=1400 audit(1752807601.290:196): avc: denied { remount } for pid=544 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.393883][ T545] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 31.447525][ T549] rust_binder: Error while translating object. [ 31.447561][ T549] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 31.453888][ T549] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:47 [ 31.581962][ T36] audit: type=1400 audit(1752807601.550:197): avc: denied { transfer } for pid=554 comm="syz.1.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 31.582001][ T556] rust_binder: 555 RLIMIT_NICE not set [ 31.618307][ T558] overlayfs: failed to clone upperpath [ 31.642221][ T553] 9pnet_fd: Insufficient options for proto=fd [ 31.709936][ T561] tmpfs: Unknown parameter 'quota' [ 31.715887][ T558] netlink: 'syz.3.81': attribute type 13 has an invalid length. [ 31.817890][ T558] erspan0: refused to change device tx_queue_len [ 31.897644][ T572] fuse: Bad value for 'fd' [ 32.177444][ T569] syz.2.85 uses obsolete (PF_INET,SOCK_PACKET) [ 32.226834][ T591] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42 [ 32.267258][ T596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.324778][ T596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.486167][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.531570][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.556341][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.576465][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.585124][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.613329][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.622634][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.631307][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.654233][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.663357][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.672357][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.788905][ T621] binder: Unknown parameter 's{Jl' [ 32.855590][ T628] rust_binder: Write failure EFAULT in pid:78 [ 32.960068][ T637] rust_binder: 637: no such ref 0 [ 32.985474][ T637] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 33.007820][ T637] rust_binder: Write failure EINVAL in pid:60 [ 34.127237][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.171017][ T695] netlink: 'syz.2.124': attribute type 27 has an invalid length. [ 34.307257][ T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 34.327556][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.336970][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.345012][ T10] usb 1-1: Product: syz [ 34.361465][ T10] usb 1-1: Manufacturer: syz [ 34.369585][ T10] usb 1-1: SerialNumber: syz [ 34.537918][ T706] random: crng reseeded on system resumption [ 34.591621][ T683] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 16777216 [ 34.606728][ T10] cdc_ncm 1-1:1.0: bind() failure [ 34.616643][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 34.627840][ T10] cdc_ncm 1-1:1.1: bind() failure [ 34.635780][ T10] usb 1-1: USB disconnect, device number 3 [ 34.766862][ T720] batadv_slave_1: entered promiscuous mode [ 34.778363][ T719] batadv_slave_1: left promiscuous mode [ 35.285124][ T737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 35.292026][ T736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=736 comm=syz.1.137 [ 35.312434][ T736] rust_binder: Error in use_page_slow: ESRCH [ 35.312462][ T736] rust_binder: use_range failure ESRCH [ 35.319293][ T736] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 35.325044][ T736] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 35.333433][ T736] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:98 [ 35.396170][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.428771][ T754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.428795][ T754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:105 [ 35.536285][ T31] usb 1-1: device descriptor read/64, error -71 [ 35.565806][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 35.565825][ T36] audit: type=1400 audit(1752807605.530:227): avc: denied { sqpoll } for pid=768 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.672319][ T36] audit: type=1400 audit(1752807605.640:228): avc: denied { mount } for pid=782 comm="syz.2.150" name="/" dev="configfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.676810][ T783] overlayfs: failed to clone lowerpath [ 35.786232][ T31] usb 1-1: device descriptor read/64, error -71 [ 36.026224][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 36.156254][ T31] usb 1-1: device descriptor read/64, error -71 [ 36.244838][ T36] audit: type=1400 audit(1752807606.210:229): avc: denied { append } for pid=788 comm="syz.1.152" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 36.406160][ T31] usb 1-1: device descriptor read/64, error -71 [ 36.516293][ T31] usb usb1-port1: attempt power cycle [ 36.571987][ T36] audit: type=1400 audit(1752807606.540:230): avc: denied { bind } for pid=798 comm="syz.2.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.666226][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 36.796384][ T45] usb 2-1: device descriptor read/64, error -71 [ 36.842298][ T36] audit: type=1400 audit(1752807606.810:231): avc: denied { create } for pid=801 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 36.861684][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.887229][ T31] usb 1-1: device descriptor read/8, error -71 [ 36.890793][ T36] audit: type=1400 audit(1752807606.860:232): avc: denied { mount } for pid=808 comm="syz.3.159" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.951620][ T36] audit: type=1400 audit(1752807606.920:233): avc: denied { create } for pid=816 comm="syz.3.162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.972206][ T36] audit: type=1400 audit(1752807606.940:234): avc: denied { mounton } for pid=816 comm="syz.3.162" path="/48/file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 36.994882][ T36] audit: type=1400 audit(1752807606.940:235): avc: denied { bind } for pid=816 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.014058][ T36] audit: type=1400 audit(1752807606.940:236): avc: denied { unlink } for pid=290 comm="syz-executor" name="file0" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 37.046177][ T45] usb 2-1: device descriptor read/64, error -71 [ 37.053816][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.111803][ T840] netlink: 'syz.3.170': attribute type 12 has an invalid length. [ 37.286182][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.296158][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.317493][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.416169][ T45] usb 2-1: device descriptor read/64, error -71 [ 37.447135][ T31] usb 1-1: device descriptor read/8, error -71 [ 37.479064][ T867] netlink: 68 bytes leftover after parsing attributes in process `syz.2.177'. [ 37.556278][ T31] usb usb1-port1: unable to enumerate USB device [ 37.656155][ T45] usb 2-1: device descriptor read/64, error -71 [ 37.766285][ T45] usb usb2-port1: attempt power cycle [ 38.028117][ T894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.189'. [ 38.074035][ T901] overlayfs: failed to clone lowerpath [ 38.082598][ T903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 38.104726][ T905] process 'syz.3.194' launched './file1' with NULL argv: empty string added [ 38.106197][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.137141][ T45] usb 2-1: device descriptor read/8, error -71 [ 38.198239][ T915] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 38.198267][ T915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:95 [ 38.269392][ T45] usb 2-1: device descriptor read/8, error -71 [ 38.292746][ T923] af_packet: tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 38.407399][ T937] netlink: 64 bytes leftover after parsing attributes in process `syz.2.207'. [ 38.516868][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 38.558282][ T45] usb 2-1: device descriptor read/8, error -71 [ 38.687387][ T45] usb 2-1: device descriptor read/8, error -71 [ 38.796278][ T45] usb usb2-port1: unable to enumerate USB device [ 39.394105][ T975] binder: Bad value for 'max' [ 39.561637][ T988] rust_binder: 988: no such ref 2 [ 39.566915][ T988] rust_binder: Write failure EFAULT in pid:118 [ 39.612410][ T993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 39.654569][ T989] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 39.765653][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.779004][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.843115][ T1010] rust_binder: 1004 RLIMIT_NICE not set [ 39.874415][ T1017] exFAT-fs (rnullb0): invalid boot record signature [ 39.894822][ T1003] fido_id[1003]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.896337][ T1017] exFAT-fs (rnullb0): failed to read boot sector [ 39.914935][ T1017] exFAT-fs (rnullb0): failed to recognize exfat type [ 39.931608][ T1017] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 40.025019][ T1020] syzkaller0: entered promiscuous mode [ 40.038933][ T1020] syzkaller0: entered allmulticast mode [ 40.049342][ T1029] netlink: 'syz.1.238': attribute type 29 has an invalid length. [ 40.061651][ T1028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.237'. [ 40.070726][ T1029] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.238'. [ 40.131322][ T1036] netlink: 'syz.1.240': attribute type 4 has an invalid length. [ 40.376178][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.506192][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.744188][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 40.744206][ T36] audit: type=1400 audit(1752807610.710:269): avc: denied { unlink } for pid=288 comm="syz-executor" name="cgroup" dev="tmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:systemd_logind_var_run_t:s0" [ 40.748512][ T45] usb 2-1: device descriptor read/64, error -71 [ 40.778697][ T1048] input: syz1 as /devices/virtual/input/input6 [ 40.792181][ T36] audit: type=1400 audit(1752807610.760:270): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=438 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.794128][ T1048] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.815325][ T36] audit: type=1400 audit(1752807610.760:271): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=438 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.823216][ T1048] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 40.859353][ T36] audit: type=1400 audit(1752807610.760:272): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=438 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.884491][ T1048] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 40.898340][ T1048] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 41.026187][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 41.036153][ T36] audit: type=1326 audit(1752807611.000:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1037 comm="syz.3.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x7fc00000 [ 41.120829][ T1063] netlink: 68 bytes leftover after parsing attributes in process `syz.3.250'. [ 41.166188][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.314515][ T36] audit: type=1400 audit(1752807611.280:274): avc: denied { write } for pid=1064 comm="syz.3.251" path="socket:[5896]" dev="sockfs" ino=5896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.406186][ T45] usb 2-1: device descriptor read/64, error -71 [ 41.516289][ T45] usb usb2-port1: attempt power cycle [ 41.821280][ T1085] 9pnet_fd: Insufficient options for proto=fd [ 41.842312][ T36] audit: type=1400 audit(1752807611.810:275): avc: denied { ioctl } for pid=1088 comm="syz.2.259" path="socket:[5940]" dev="sockfs" ino=5940 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 41.856227][ T45] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 41.866808][ T36] audit: type=1400 audit(1752807611.810:276): avc: denied { bind } for pid=1088 comm="syz.2.259" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.894387][ T36] audit: type=1400 audit(1752807611.810:277): avc: denied { name_bind } for pid=1088 comm="syz.2.259" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 41.899502][ T45] usb 2-1: device descriptor read/8, error -71 [ 41.922196][ T36] audit: type=1400 audit(1752807611.810:278): avc: denied { node_bind } for pid=1088 comm="syz.2.259" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 42.047181][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.076244][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 42.226178][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 42.232534][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 42.241095][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 42.249850][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 42.258886][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 42.268601][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 42.278339][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 42.289641][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 42.296185][ T45] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.302862][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 42.319618][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.328457][ T9] usb 1-1: config 0 descriptor?? [ 42.337484][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.467217][ T45] usb 2-1: device descriptor read/8, error -71 [ 42.524245][ T1113] capability: warning: `syz.2.267' uses 32-bit capabilities (legacy support in use) [ 42.541089][ T1087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.550779][ T1087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.576312][ T45] usb usb2-port1: unable to enumerate USB device [ 42.594394][ T1087] SELinux: failed to load policy [ 42.611010][ T45] usb 1-1: USB disconnect, device number 8 [ 43.203653][ T1158] binfmt_misc: register: failed to install interpreter file ./file0 [ 43.251821][ T1162] binder: Unknown parameter 'seclab' [ 43.280910][ T1170] overlayfs: failed to clone lowerpath [ 44.246542][ T1191] tmpfs: Unknown parameter 'cntext' [ 44.425127][ T1202] rust_binder: Error while translating object. [ 44.425171][ T1202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 44.465407][ T1202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:161 [ 45.291003][ T1227] overlayfs: failed to resolve './file2': -2 [ 45.312821][ T1231] fuse: Bad value for 'rootmode' [ 45.341474][ T1236] /dev/rnullb0: Can't open blockdev [ 46.340218][ T1271] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 46.462377][ T1278] netlink: 68 bytes leftover after parsing attributes in process `syz.3.323'. [ 46.683910][ T1280] netlink: 48 bytes leftover after parsing attributes in process `syz.0.324'. [ 47.063664][ T1282] 9pnet_fd: Insufficient options for proto=fd [ 47.133065][ T36] kauditd_printk_skb: 14 callbacks suppressed [ 47.133084][ T36] audit: type=1400 audit(1752807617.100:293): avc: denied { map } for pid=1286 comm="syz.2.327" path="/89" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 47.246280][ T36] audit: type=1400 audit(1752807617.210:294): avc: denied { getopt } for pid=1288 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.400354][ T1300] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:183 [ 47.432689][ T310] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 47.456327][ T310] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 47.586687][ T36] audit: type=1400 audit(1752807617.560:295): avc: denied { write } for pid=1316 comm="syz.0.337" name="tcp6" dev="proc" ino=4026532362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 47.632140][ T36] audit: type=1400 audit(1752807617.600:296): avc: denied { remount } for pid=1320 comm="syz.0.339" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.846188][ T310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 47.852600][ T1343] fuseblk: Bad value for 'fd' [ 48.006145][ T310] usb 2-1: Using ep0 maxpacket: 8 [ 48.015540][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 48.031413][ T310] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 48.041774][ T310] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 48.058395][ T310] usb 2-1: config 4 has no interface number 0 [ 48.075807][ T310] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 48.085232][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.093510][ T310] usb 2-1: Product: syz [ 48.097959][ T310] usb 2-1: Manufacturer: syz [ 48.102628][ T310] usb 2-1: SerialNumber: syz [ 48.353459][ T310] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 48.360075][ T310] usb 2-1: No valid video chain found. [ 48.368088][ T310] usb 2-1: USB disconnect, device number 11 [ 48.636696][ T36] audit: type=1400 audit(1752807618.610:297): avc: denied { accept } for pid=1362 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.664799][ T36] audit: type=1400 audit(1752807618.630:298): avc: denied { remount } for pid=1364 comm="syz.3.358" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.770770][ T36] audit: type=1400 audit(1752807618.740:299): avc: denied { map } for pid=1373 comm="syz.2.362" path="socket:[7424]" dev="sockfs" ino=7424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.086217][ T310] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 49.236181][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 49.246807][ T310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 49.265448][ T310] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 49.274341][ T310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.294731][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.305757][ T310] usb 1-1: string descriptor 0 read error: -22 [ 49.312074][ T310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.325637][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.338169][ T310] usb 1-1: 0:2 : does not exist [ 49.369533][ T1391] overlayfs: failed to clone upperpath [ 49.390263][ T36] audit: type=1326 audit(1752807619.360:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.3.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x0 [ 49.468920][ T36] audit: type=1400 audit(1752807619.440:301): avc: denied { getopt } for pid=1396 comm="syz.3.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.470223][ T1396] TCP: out of memory -- consider tuning tcp_mem [ 49.553143][ T310] usb 1-1: USB disconnect, device number 9 [ 49.553422][ T36] audit: type=1400 audit(1752807619.520:302): avc: denied { create } for pid=1404 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.693492][ T1414] tipc: Started in network mode [ 49.698885][ T1414] tipc: Node identity ac14142f, cluster identity 4711 [ 49.705908][ T1414] tipc: New replicast peer: 0.0.0.0 [ 49.711769][ T1414] tipc: Enabled bearer , priority 10 [ 49.718500][ T1414] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0000 [ 49.770675][ T1425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.956394][ T1436] netlink: 56 bytes leftover after parsing attributes in process `syz.2.381'. [ 50.009149][ T1439] rust_binder: 1438 RLIMIT_NICE not set [ 50.022507][ T1443] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 50.405797][ T1472] netlink: 68 bytes leftover after parsing attributes in process `syz.1.391'. [ 50.441944][ T1465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.387'. [ 50.826148][ T45] tipc: Node number set to 2886997039 [ 51.155337][ T1530] overlayfs: failed to clone upperpath [ 51.161677][ T1530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.411'. [ 51.268670][ T1539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.415'. [ 51.679860][ T1573] netlink: 68 bytes leftover after parsing attributes in process `syz.1.425'. [ 52.297461][ T1610] overlayfs: failed to clone upperpath [ 52.317159][ T1610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 52.556451][ T1614] @: renamed from veth0_vlan (while UP) [ 52.826185][ T1635] netlink: 3 bytes leftover after parsing attributes in process `syz.1.445'. [ 52.857400][ T1635] netlink: 3 bytes leftover after parsing attributes in process `syz.1.445'. [ 52.883348][ T1635] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 52.997039][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 52.997058][ T36] audit: type=1400 audit(2000000002.890:309): avc: denied { map } for pid=1652 comm="syz.1.450" path="socket:[7855]" dev="sockfs" ino=7855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 53.130564][ T1670] fuseblk: Bad value for 'fd' [ 53.297122][ T1682] netlink: 'syz.1.457': attribute type 64 has an invalid length. [ 53.341491][ T1682] 9pnet_fd: Insufficient options for proto=fd [ 54.345156][ T36] audit: type=1326 audit(2000000004.230:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1689 comm="syz.1.459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7fc00000 [ 55.096231][ T1713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.464'. [ 55.136694][ T36] audit: type=1326 audit(2000000005.030:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1715 comm="syz.1.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x0 [ 55.265203][ T1730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 55.647138][ T36] audit: type=1400 audit(2000000005.530:312): avc: denied { bind } for pid=1740 comm="syz.0.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.671056][ T36] audit: type=1400 audit(2000000005.530:313): avc: denied { name_bind } for pid=1740 comm="syz.0.473" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 55.697248][ T36] audit: type=1400 audit(2000000005.540:314): avc: denied { node_bind } for pid=1740 comm="syz.0.473" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 55.722157][ T36] audit: type=1400 audit(2000000005.540:315): avc: denied { setattr } for pid=1740 comm="syz.0.473" name="PACKET" dev="sockfs" ino=7959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.043422][ T1756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 56.100836][ T36] audit: type=1400 audit(2000000005.990:316): avc: denied { ioctl } for pid=1757 comm="syz.0.479" path="socket:[7978]" dev="sockfs" ino=7978 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.167505][ T1765] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 56.224407][ T1768] binder: Bad value for 'max' [ 56.320569][ T1775] 9pnet: p9_errstr2errno: server reported unknown error OX۵רѳlu9 [ 56.626144][ T310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 56.786170][ T310] usb 1-1: Using ep0 maxpacket: 32 [ 56.792576][ T310] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 56.801327][ T310] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 56.816137][ T310] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 56.835409][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 56.847059][ T310] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 56.857539][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.871878][ T310] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 56.886180][ T310] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 56.901542][ T310] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 56.911264][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.926442][ T310] usb 1-1: config 0 descriptor?? [ 56.936520][ T1777] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.944479][ T310] usblp0: Disabling reads from problematic bidirectional printer [ 57.004098][ T1794] 9pnet_fd: Insufficient options for proto=fd [ 57.146644][ T1800] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 57.193651][ T310] usblp 1-1:0.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 57.210135][ T310] usb 1-1: USB disconnect, device number 10 [ 57.224651][ T1805] fuseblk: Bad value for 'fd' [ 57.230690][ T310] usblp0: removed [ 57.335401][ T1693] syz.2.448 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 57.353867][ T1693] CPU: 0 UID: 0 PID: 1693 Comm: syz.2.448 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 57.353906][ T1693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.353925][ T1693] Call Trace: [ 57.353932][ T1693] [ 57.353941][ T1693] __dump_stack+0x21/0x30 [ 57.353982][ T1693] dump_stack_lvl+0x10c/0x190 [ 57.354007][ T1693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.354032][ T1693] ? ___ratelimit+0x3f7/0x5a0 [ 57.354060][ T1693] dump_stack+0x19/0x20 [ 57.354084][ T1693] dump_header+0xd7/0x490 [ 57.354116][ T1693] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 57.354140][ T1693] oom_kill_process+0x4c0/0x7e0 [ 57.354161][ T1693] ? sched_clock_cpu+0x75/0x400 [ 57.354188][ T1693] out_of_memory+0x7ee/0xbd0 [ 57.354208][ T1693] ? __cfi_out_of_memory+0x10/0x10 [ 57.354227][ T1693] ? mutex_lock_killable+0x92/0x1c0 [ 57.354257][ T1693] ? __cfi_mutex_lock_killable+0x10/0x10 [ 57.354287][ T1693] mem_cgroup_out_of_memory+0x279/0x350 [ 57.354322][ T1693] ? drain_obj_stock+0xed0/0xed0 [ 57.354352][ T1693] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 57.354381][ T1693] try_charge_memcg+0x8f7/0xde0 [ 57.354406][ T1693] ? __cfi_try_charge_memcg+0x10/0x10 [ 57.354430][ T1693] ? __alloc_pages_noprof+0x30d/0x6c0 [ 57.354454][ T1693] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 57.354476][ T1693] ? __folio_batch_add_and_move+0x2ab/0x370 [ 57.354499][ T1693] __mem_cgroup_charge+0xf6/0x410 [ 57.354522][ T1693] ? __kasan_check_write+0x18/0x20 [ 57.354547][ T1693] ? _raw_spin_lock+0x8c/0x120 [ 57.354568][ T1693] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 57.354597][ T1693] shmem_alloc_and_add_folio+0x86d/0x1050 [ 57.354635][ T1693] ? put_swap_device+0x130/0x130 [ 57.354668][ T1693] ? shmem_huge_global_enabled+0x2da/0x360 [ 57.354707][ T1693] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 57.354740][ T1693] ? __kasan_check_write+0x18/0x20 [ 57.354766][ T1693] ? _raw_spin_lock+0x8c/0x120 [ 57.354786][ T1693] shmem_get_folio_gfp+0x5f0/0x1380 [ 57.354820][ T1693] ? shmem_get_folio+0xc0/0xc0 [ 57.354850][ T1693] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 57.354877][ T1693] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 57.354903][ T1693] ? inode_to_bdi+0x6d/0x100 [ 57.354929][ T1693] shmem_write_begin+0xf4/0x270 [ 57.354966][ T1693] generic_perform_write+0x32d/0x960 [ 57.354996][ T1693] ? __cfi_generic_perform_write+0x10/0x10 [ 57.355023][ T1693] ? down_write+0xe9/0x2a0 [ 57.355054][ T1693] ? mnt_get_write_access_file+0x1af/0x3b0 [ 57.355083][ T1693] ? mnt_put_write_access_file+0xc2/0x100 [ 57.355106][ T1693] ? file_update_time+0x1ef/0x220 [ 57.355132][ T1693] shmem_file_write_iter+0x105/0x130 [ 57.355155][ T1693] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.355177][ T1693] __kernel_write_iter+0x395/0x830 [ 57.355204][ T1693] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 57.355225][ T1693] ? __cfi___kernel_write_iter+0x10/0x10 [ 57.355250][ T1693] ? get_dump_page+0x160/0x220 [ 57.355271][ T1693] ? __asan_memset+0x39/0x50 [ 57.355295][ T1693] ? iov_iter_bvec+0xc0/0x180 [ 57.355325][ T1693] dump_user_range+0xb06/0xdf0 [ 57.355352][ T1693] ? __cfi_dump_emit+0x10/0x10 [ 57.355376][ T1693] ? __cfi_dump_user_range+0x10/0x10 [ 57.355402][ T1693] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 57.355430][ T1693] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 57.355459][ T1693] elf_core_dump+0x2cd9/0x3810 [ 57.355495][ T1693] ? __cfi_elf_core_dump+0x10/0x10 [ 57.355533][ T1693] ? dump_interrupted+0xf0/0xf0 [ 57.355558][ T1693] ? filp_open+0x182/0x1d0 [ 57.355580][ T1693] ? 0xffffffffff600000 [ 57.355613][ T1693] do_coredump+0x1bfa/0x2bd0 [ 57.355642][ T1693] ? __cfi_do_coredump+0x10/0x10 [ 57.355666][ T1693] ? asm_exc_page_fault+0x2b/0x30 [ 57.355708][ T1693] ? __kasan_slab_free+0x6a/0x80 [ 57.355739][ T1693] ? kmem_cache_free+0x1c1/0x510 [ 57.355768][ T1693] ? get_signal+0xa75/0x14f0 [ 57.355791][ T1693] get_signal+0x11fd/0x14f0 [ 57.355817][ T1693] arch_do_signal_or_restart+0x96/0x720 [ 57.355847][ T1693] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 57.355882][ T1693] irqentry_exit_to_user_mode+0x4e/0xb0 [ 57.355916][ T1693] irqentry_exit+0x16/0x60 [ 57.355947][ T1693] exc_page_fault+0x66/0xc0 [ 57.355978][ T1693] asm_exc_page_fault+0x2b/0x30 [ 57.356006][ T1693] RIP: 0033:0x7f64e138e9b1 [ 57.356025][ T1693] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 57.356045][ T1693] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 57.356074][ T1693] RAX: 0000000000000000 RBX: 00007f64e15b5fa0 RCX: 00007f64e138e9a9 [ 57.356090][ T1693] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 57.356105][ T1693] RBP: 00007f64e1410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 57.356119][ T1693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 57.356134][ T1693] R13: 0000000000000000 R14: 00007f64e15b5fa0 R15: 00007ffe306dd8f8 [ 57.356153][ T1693] [ 57.842941][ T1693] memory: usage 307200kB, limit 307200kB, failcnt 19092 [ 57.849977][ T1693] memory+swap: usage 431804kB, limit 9007199254740988kB, failcnt 0 [ 57.858347][ T1693] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.865362][ T1693] Memory cgroup stats for /syz2: [ 57.865534][ T1693] cache 314331136 [ 57.867355][ T1813] rust_binder: 1813: no such ref 1 [ 57.870641][ T1693] rss 217088 [ 57.875024][ T1814] rust_binder: 1814: no such ref 1 [ 57.879767][ T1693] rss_huge 0 [ 57.883067][ T1813] rust_binder: 1813: no such ref 2 [ 57.887867][ T1693] shmem 314331136 [ 57.891394][ T1814] rust_binder: 1814: no such ref 2 [ 57.896315][ T1693] mapped_file 0 [ 57.908608][ T1693] dirty 0 [ 57.911657][ T1693] writeback 0 [ 57.914998][ T1693] workingset_refault_anon 68 [ 57.919625][ T1693] workingset_refault_file 63 [ 57.924561][ T1693] swap 127594496 [ 57.928323][ T1693] swapcached 40960 [ 57.932165][ T1693] pgpgin 166431 [ 57.935703][ T1693] pgpgout 90142 [ 57.939264][ T1693] pgfault 72639 [ 57.942741][ T1693] pgmajfault 20 [ 57.946243][ T1693] inactive_anon 155947008 [ 57.950592][ T1693] active_anon 158625792 [ 57.954754][ T1693] inactive_file 0 [ 57.959332][ T1693] active_file 0 [ 57.962904][ T1693] unevictable 0 [ 57.966951][ T1693] hierarchical_memory_limit 314572800 [ 57.972399][ T1693] hierarchical_memsw_limit 9223372036854771712 [ 57.978760][ T1693] total_cache 314331136 [ 57.982953][ T1693] total_rss 217088 [ 57.986822][ T1693] total_rss_huge 0 [ 57.991052][ T1693] total_shmem 314331136 [ 57.995263][ T1693] total_mapped_file 0 [ 57.999521][ T1693] total_dirty 0 [ 58.003039][ T1693] total_writeback 0 [ 58.006994][ T1693] total_workingset_refault_anon 68 [ 58.012197][ T1693] total_workingset_refault_file 63 [ 58.017513][ T1693] total_swap 127594496 [ 58.024381][ T1693] total_swapcached 40960 [ 58.032405][ T1693] total_pgpgin 166431 [ 58.042120][ T1693] total_pgpgout 90142 [ 58.052902][ T1693] total_pgfault 72639 [ 58.059497][ T1693] total_pgmajfault 20 [ 58.063960][ T1693] total_inactive_anon 155947008 [ 58.069026][ T1693] total_active_anon 158625792 [ 58.073912][ T1693] total_inactive_file 0 [ 58.078267][ T1693] total_active_file 0 [ 58.081369][ T1823] rust_binder: 1823: no such ref 1 [ 58.082802][ T1693] total_unevictable 0 [ 58.087965][ T1823] rust_binder: 1823: no such ref 2 [ 58.091693][ T1693] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.448,pid=1644,uid=0 [ 58.098520][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 58.111968][ T1693] Memory cgroup out of memory: Killed process 1644 (syz.2.448) total-vm:89836kB, anon-rss:944kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 58.137324][ T36] audit: type=1400 audit(2000000008.030:317): avc: denied { read write } for pid=1822 comm="syz.0.501" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.186206][ T36] audit: type=1400 audit(2000000008.030:318): avc: denied { open } for pid=1822 comm="syz.0.501" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.189126][ T1829] rust_binder: 1826 RLIMIT_NICE not set [ 58.610730][ T36] audit: type=1400 audit(2000000000.320:319): avc: denied { create } for pid=1844 comm="syz.3.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 58.661439][ T1651] syz.2.448 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 58.683586][ T36] audit: type=1400 audit(2000000000.380:320): avc: denied { create } for pid=1849 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 58.723728][ T1651] CPU: 1 UID: 0 PID: 1651 Comm: syz.2.448 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 58.723769][ T1651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.723785][ T1651] Call Trace: [ 58.723807][ T1651] [ 58.723816][ T1651] __dump_stack+0x21/0x30 [ 58.723853][ T1651] dump_stack_lvl+0x10c/0x190 [ 58.723881][ T1651] ? __cfi_dump_stack_lvl+0x10/0x10 [ 58.723914][ T1651] ? ___ratelimit+0x3f7/0x5a0 [ 58.723939][ T1651] dump_stack+0x19/0x20 [ 58.723961][ T1651] dump_header+0xd7/0x490 [ 58.723990][ T1651] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 58.724012][ T1651] oom_kill_process+0x4c0/0x7e0 [ 58.724030][ T1651] ? sched_clock_cpu+0x75/0x400 [ 58.724054][ T1651] out_of_memory+0x7ee/0xbd0 [ 58.724072][ T1651] ? __cfi_out_of_memory+0x10/0x10 [ 58.724089][ T1651] ? mutex_lock_killable+0x92/0x1c0 [ 58.724115][ T1651] ? __cfi_mutex_lock_killable+0x10/0x10 [ 58.724143][ T1651] mem_cgroup_out_of_memory+0x279/0x350 [ 58.724169][ T1651] ? drain_obj_stock+0xed0/0xed0 [ 58.724197][ T1651] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 58.724222][ T1651] try_charge_memcg+0x8f7/0xde0 [ 58.724245][ T1651] ? __cfi_try_charge_memcg+0x10/0x10 [ 58.724266][ T1651] ? __alloc_pages_noprof+0x30d/0x6c0 [ 58.724287][ T1651] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 58.724307][ T1651] ? __folio_batch_add_and_move+0x2ab/0x370 [ 58.724337][ T1651] __mem_cgroup_charge+0xf6/0x410 [ 58.724360][ T1651] ? __kasan_check_write+0x18/0x20 [ 58.724383][ T1651] ? _raw_spin_lock+0x8c/0x120 [ 58.724401][ T1651] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 58.724426][ T1651] shmem_alloc_and_add_folio+0x86d/0x1050 [ 58.724459][ T1651] ? put_swap_device+0x130/0x130 [ 58.724488][ T1651] ? shmem_huge_global_enabled+0x2da/0x360 [ 58.724515][ T1651] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 58.724543][ T1651] ? __kasan_check_write+0x18/0x20 [ 58.724565][ T1651] ? _raw_spin_lock+0x8c/0x120 [ 58.724584][ T1651] shmem_get_folio_gfp+0x5f0/0x1380 [ 58.724614][ T1651] ? shmem_get_folio+0xc0/0xc0 [ 58.724639][ T1651] ? follow_page_pte+0xa5c/0xb90 [ 58.724661][ T1651] ? inode_to_bdi+0x6d/0x100 [ 58.724682][ T1651] shmem_write_begin+0xf4/0x270 [ 58.724713][ T1651] generic_perform_write+0x32d/0x960 [ 58.724738][ T1651] ? __cfi_generic_perform_write+0x10/0x10 [ 58.724761][ T1651] ? down_write+0xe9/0x2a0 [ 58.724788][ T1651] ? file_update_time+0xa3/0x220 [ 58.724810][ T1651] shmem_file_write_iter+0x105/0x130 [ 58.724831][ T1651] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.724851][ T1651] __kernel_write_iter+0x395/0x830 [ 58.724876][ T1651] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 58.724907][ T1651] ? __cfi___kernel_write_iter+0x10/0x10 [ 58.724931][ T1651] ? get_dump_page+0x160/0x220 [ 58.724950][ T1651] ? __asan_memset+0x39/0x50 [ 58.724973][ T1651] ? iov_iter_bvec+0xc0/0x180 [ 58.725004][ T1651] dump_user_range+0xb06/0xdf0 [ 58.725031][ T1651] ? __cfi_dump_emit+0x10/0x10 [ 58.725055][ T1651] ? __cfi_dump_user_range+0x10/0x10 [ 58.725079][ T1651] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 58.725106][ T1651] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 58.725132][ T1651] elf_core_dump+0x2cd9/0x3810 [ 58.725165][ T1651] ? __cfi_elf_core_dump+0x10/0x10 [ 58.725201][ T1651] ? dump_interrupted+0xf0/0xf0 [ 58.725224][ T1651] ? filp_open+0x182/0x1d0 [ 58.725243][ T1651] ? 0xffffffffff600000 [ 58.725259][ T1651] do_coredump+0x1bfa/0x2bd0 [ 58.725285][ T1651] ? __cfi_do_coredump+0x10/0x10 [ 58.725307][ T1651] ? asm_exc_page_fault+0x2b/0x30 [ 58.725339][ T1651] ? __kasan_slab_free+0x6a/0x80 [ 58.725367][ T1651] ? kmem_cache_free+0x1c1/0x510 [ 58.725392][ T1651] ? get_signal+0xa75/0x14f0 [ 58.725413][ T1651] get_signal+0x11fd/0x14f0 [ 58.725436][ T1651] arch_do_signal_or_restart+0x96/0x720 [ 58.725463][ T1651] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 58.725492][ T1651] irqentry_exit_to_user_mode+0x4e/0xb0 [ 58.725520][ T1651] irqentry_exit+0x16/0x60 [ 58.725546][ T1651] exc_page_fault+0x66/0xc0 [ 58.725571][ T1651] asm_exc_page_fault+0x2b/0x30 [ 58.725594][ T1651] RIP: 0033:0x7f64e138e9b1 [ 58.725609][ T1651] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 58.725625][ T1651] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 58.725644][ T1651] RAX: 0000000000000000 RBX: 00007f64e15b5fa0 RCX: 00007f64e138e9a9 [ 58.725659][ T1651] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 58.725673][ T1651] RBP: 00007f64e1410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 58.725685][ T1651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 58.725697][ T1651] R13: 0000000000000000 R14: 00007f64e15b5fa0 R15: 00007ffe306dd8f8 [ 58.725714][ T1651] [ 58.728178][ T1651] memory: usage 307200kB, limit 307200kB, failcnt 20321 [ 58.966175][ T36] audit: type=1400 audit(2000000000.640:321): avc: denied { execute } for pid=1863 comm="syz.0.513" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 58.969408][ T1651] memory+swap: usage 431804kB, limit 9007199254740988kB, failcnt 0 [ 58.988155][ T36] audit: type=1400 audit(2000000000.690:322): avc: denied { setcheckreqprot } for pid=1865 comm="syz.0.514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 58.990477][ T1651] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 59.013765][ T1866] raw_sendmsg: syz.0.514 forgot to set AF_INET. Fix it! [ 59.014338][ T1651] Memory cgroup stats for /syz2: [ 59.268394][ T1651] cache 314331136 [ 59.277131][ T1651] rss 217088 [ 59.286520][ T1651] rss_huge 0 [ 59.289796][ T1651] shmem 314331136 [ 59.293522][ T1651] mapped_file 0 [ 59.297188][ T1651] dirty 0 [ 59.300543][ T1651] writeback 0 [ 59.304104][ T1651] workingset_refault_anon 69 [ 59.309046][ T1651] workingset_refault_file 191 [ 59.314075][ T1651] swap 127594496 [ 59.318147][ T1651] swapcached 40960 [ 59.328862][ T1651] pgpgin 174804 [ 59.332380][ T1651] pgpgout 98515 [ 59.336522][ T36] audit: type=1400 audit(2000000001.050:323): avc: denied { write } for pid=1869 comm="syz.1.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.337809][ T1651] pgfault 75810 [ 59.360561][ T1871] 9pnet_fd: Insufficient options for proto=fd [ 59.366829][ T1651] pgmajfault 25 [ 59.375540][ T1651] inactive_anon 303169536 [ 59.382984][ T1651] active_anon 11403264 [ 59.387683][ T1651] inactive_file 0 [ 59.391551][ T1651] active_file 0 [ 59.395146][ T1651] unevictable 0 [ 59.400292][ T1651] hierarchical_memory_limit 314572800 [ 59.406036][ T1651] hierarchical_memsw_limit 9223372036854771712 [ 59.412508][ T1651] total_cache 314331136 [ 59.416932][ T1875] netlink: 5 bytes leftover after parsing attributes in process `syz.3.518'. [ 59.431747][ T1651] total_rss 217088 [ 59.435663][ T1651] total_rss_huge 0 [ 59.439777][ T1651] total_shmem 314331136 [ 59.444024][ T1651] total_mapped_file 0 [ 59.449257][ T1651] total_dirty 0 [ 59.452842][ T1651] total_writeback 0 [ 59.456928][ T1651] total_workingset_refault_anon 69 [ 59.463053][ T1651] total_workingset_refault_file 191 [ 59.469681][ T1651] total_swap 127594496 [ 59.476048][ T1651] total_swapcached 40960 [ 59.480565][ T1651] total_pgpgin 174804 [ 59.484607][ T1651] total_pgpgout 98515 [ 59.488873][ T1651] total_pgfault 75810 [ 59.492872][ T1651] total_pgmajfault 25 [ 59.497189][ T1651] total_inactive_anon 303169536 [ 59.502192][ T1651] total_active_anon 11403264 [ 59.507424][ T1651] total_inactive_file 0 [ 59.511894][ T1651] total_active_file 0 [ 59.512337][ T1890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 59.516058][ T1651] total_unevictable 0 [ 59.529045][ T1651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.448,pid=1674,uid=0 [ 59.544172][ T1651] Memory cgroup out of memory: Killed process 1674 (syz.2.448) total-vm:90100kB, anon-rss:944kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 59.757523][ T36] audit: type=1400 audit(2000000001.470:324): avc: denied { associate } for pid=1914 comm="syz.3.530" name="rnullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 59.775190][ T1675] syz.2.448 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 59.807015][ T1675] CPU: 1 UID: 0 PID: 1675 Comm: syz.2.448 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 59.807056][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.807071][ T1675] Call Trace: [ 59.807078][ T1675] [ 59.807087][ T1675] __dump_stack+0x21/0x30 [ 59.807120][ T1675] dump_stack_lvl+0x10c/0x190 [ 59.807147][ T1675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 59.807174][ T1675] ? ___ratelimit+0x3f7/0x5a0 [ 59.807203][ T1675] dump_stack+0x19/0x20 [ 59.807228][ T1675] dump_header+0xd7/0x490 [ 59.807262][ T1675] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 59.807287][ T1675] oom_kill_process+0x4c0/0x7e0 [ 59.807309][ T1675] ? sched_clock_cpu+0x75/0x400 [ 59.807336][ T1675] out_of_memory+0x7ee/0xbd0 [ 59.807358][ T1675] ? __cfi_out_of_memory+0x10/0x10 [ 59.807378][ T1675] ? mutex_lock_killable+0x92/0x1c0 [ 59.807409][ T1675] ? __cfi_mutex_lock_killable+0x10/0x10 [ 59.807442][ T1675] mem_cgroup_out_of_memory+0x279/0x350 [ 59.807474][ T1675] ? drain_obj_stock+0xed0/0xed0 [ 59.807505][ T1675] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 59.807536][ T1675] try_charge_memcg+0x8f7/0xde0 [ 59.807561][ T1675] ? __cfi_try_charge_memcg+0x10/0x10 [ 59.807585][ T1675] ? __alloc_pages_noprof+0x30d/0x6c0 [ 59.807618][ T1675] ? __switch_to+0xc7b/0x1310 [ 59.807646][ T1675] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 59.807671][ T1675] __mem_cgroup_charge+0xf6/0x410 [ 59.807699][ T1675] ? __kasan_check_write+0x18/0x20 [ 59.807726][ T1675] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 59.807756][ T1675] shmem_alloc_and_add_folio+0x86d/0x1050 [ 59.807793][ T1675] ? put_swap_device+0x130/0x130 [ 59.807828][ T1675] ? shmem_huge_global_enabled+0x2da/0x360 [ 59.807859][ T1675] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 59.807888][ T1675] ? __kasan_check_write+0x18/0x20 [ 59.807912][ T1675] ? _raw_spin_lock+0x8c/0x120 [ 59.807933][ T1675] shmem_get_folio_gfp+0x5f0/0x1380 [ 59.807963][ T1675] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 59.807994][ T1675] ? shmem_get_folio+0xc0/0xc0 [ 59.808023][ T1675] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 59.808050][ T1675] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 59.808077][ T1675] ? inode_to_bdi+0x6d/0x100 [ 59.808104][ T1675] shmem_write_begin+0xf4/0x270 [ 59.808141][ T1675] generic_perform_write+0x32d/0x960 [ 59.808171][ T1675] ? __cfi_generic_perform_write+0x10/0x10 [ 59.808198][ T1675] ? down_write+0xe9/0x2a0 [ 59.808230][ T1675] ? mnt_get_write_access_file+0x1af/0x3b0 [ 59.808255][ T1675] ? mnt_put_write_access_file+0xc2/0x100 [ 59.808280][ T1675] ? file_update_time+0x1ef/0x220 [ 59.808304][ T1675] shmem_file_write_iter+0x105/0x130 [ 59.808327][ T1675] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.808351][ T1675] __kernel_write_iter+0x395/0x830 [ 59.808379][ T1675] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 59.808403][ T1675] ? __cfi___kernel_write_iter+0x10/0x10 [ 59.808431][ T1675] ? get_dump_page+0x160/0x220 [ 59.808452][ T1675] ? __asan_memset+0x39/0x50 [ 59.808477][ T1675] ? iov_iter_bvec+0xc0/0x180 [ 59.808511][ T1675] dump_user_range+0xb06/0xdf0 [ 59.808542][ T1675] ? __cfi_dump_emit+0x10/0x10 [ 59.808569][ T1675] ? __cfi_dump_user_range+0x10/0x10 [ 59.808598][ T1675] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 59.808637][ T1675] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 59.808668][ T1675] elf_core_dump+0x2cd9/0x3810 [ 59.808707][ T1675] ? __cfi_elf_core_dump+0x10/0x10 [ 59.808747][ T1675] ? dump_interrupted+0xf0/0xf0 [ 59.808771][ T1675] ? filp_open+0x182/0x1d0 [ 59.808793][ T1675] ? 0xffffffffff600000 [ 59.808810][ T1675] do_coredump+0x1bfa/0x2bd0 [ 59.808841][ T1675] ? __cfi_do_coredump+0x10/0x10 [ 59.808865][ T1675] ? asm_exc_page_fault+0x2b/0x30 [ 59.808902][ T1675] ? __kasan_slab_free+0x6a/0x80 [ 59.808934][ T1675] ? kmem_cache_free+0x1c1/0x510 [ 59.808963][ T1675] ? get_signal+0xa75/0x14f0 [ 59.808988][ T1675] get_signal+0x11fd/0x14f0 [ 59.809015][ T1675] arch_do_signal_or_restart+0x96/0x720 [ 59.809045][ T1675] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 59.809079][ T1675] irqentry_exit_to_user_mode+0x4e/0xb0 [ 59.809112][ T1675] irqentry_exit+0x16/0x60 [ 59.809143][ T1675] exc_page_fault+0x66/0xc0 [ 59.809173][ T1675] asm_exc_page_fault+0x2b/0x30 [ 59.809199][ T1675] RIP: 0033:0x7f64e138e9b1 [ 59.809217][ T1675] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 59.809236][ T1675] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 59.809258][ T1675] RAX: 0000000000000000 RBX: 00007f64e15b5fa0 RCX: 00007f64e138e9a9 [ 59.809273][ T1675] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 59.809288][ T1675] RBP: 00007f64e1410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 59.809300][ T1675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 59.809313][ T1675] R13: 0000000000000000 R14: 00007f64e15b5fa0 R15: 00007ffe306dd8f8 [ 59.809330][ T1675] [ 59.809416][ T1675] memory: usage 307200kB, limit 307200kB, failcnt 22443 [ 59.826745][ T1917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 59.968079][ T1675] memory+swap: usage 410068kB, limit 9007199254740988kB, failcnt 0 [ 60.193023][ T1927] 9pnet_fd: Insufficient options for proto=fd [ 60.200747][ T1675] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 60.303760][ T1934] fuse: Unknown parameter 'dd' [ 60.318135][ T1675] Memory cgroup stats for [ 60.345645][ T1944] fuse: Bad value for 'group_id' [ 60.369853][ T1944] fuse: Bad value for 'group_id' [ 60.377637][ T1948] overlayfs: failed to clone upperpath [ 60.391237][ T1948] mmap: syz.3.541 (1948): VmData 29081600 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 60.404427][ T1675] /syz2: [ 60.404593][ T1675] cache 302800896 [ 60.411762][ T36] audit: type=1400 audit(2000000002.110:325): avc: denied { append } for pid=1949 comm="syz.0.543" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 60.446125][ T1675] rss 212992 [ 60.449458][ T1675] rss_huge 0 [ 60.452697][ T1675] shmem 302407680 [ 60.457453][ T1675] mapped_file 262144 [ 60.462152][ T36] audit: type=1326 audit(2000000002.170:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1957 comm="syz.3.546" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x0 [ 60.462437][ T1675] dirty 0 [ 60.488198][ T1675] writeback 0 [ 60.491739][ T1675] workingset_refault_anon 69 [ 60.496560][ T1675] workingset_refault_file 287 [ 60.501623][ T1675] swap 123342848 [ 60.505245][ T1675] swapcached 49152 [ 60.509057][ T1675] pgpgin 180816 [ 60.512834][ T1675] pgpgout 107341 [ 60.517811][ T1675] pgfault 78773 [ 60.521409][ T1675] pgmajfault 26 [ 60.524979][ T1675] inactive_anon 269508608 [ 60.529638][ T1675] active_anon 33144832 [ 60.533810][ T1675] inactive_file 0 [ 60.537611][ T1675] active_file 393216 [ 60.541580][ T1675] unevictable 0 [ 60.545118][ T1675] hierarchical_memory_limit 314572800 [ 60.550768][ T1675] hierarchical_memsw_limit 9223372036854771712 [ 60.557060][ T1675] total_cache 302800896 [ 60.561340][ T1675] total_rss 212992 [ 60.565149][ T1675] total_rss_huge 0 [ 60.569154][ T1675] total_shmem 302407680 [ 60.573427][ T1675] total_mapped_file 262144 [ 60.577967][ T1675] total_dirty 0 [ 60.581605][ T1675] total_writeback 0 [ 60.585596][ T1675] total_workingset_refault_anon 69 [ 60.590842][ T1675] total_workingset_refault_file 287 [ 60.596183][ T1675] total_swap 123342848 [ 60.600252][ T1675] total_swapcached 49152 [ 60.604491][ T1675] total_pgpgin 180816 [ 60.608752][ T1675] total_pgpgout 107341 [ 60.612857][ T1675] total_pgfault 78773 [ 60.616944][ T1675] total_pgmajfault 26 [ 60.621012][ T1675] total_inactive_anon 269508608 [ 60.626028][ T1675] total_active_anon 33144832 [ 60.630846][ T1675] total_inactive_file 0 [ 60.635162][ T1675] total_active_file 393216 [ 60.639633][ T1675] total_unevictable 0 [ 60.643720][ T1675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.448,pid=1655,uid=0 [ 60.658552][ T1675] Memory cgroup out of memory: Killed process 1655 (syz.2.448) total-vm:90100kB, anon-rss:924kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 61.328433][ T1970] rust_binder: 1965 RLIMIT_NICE not set [ 61.636199][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 61.677217][ T1675] syz.2.448 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 61.710679][ T1675] CPU: 0 UID: 0 PID: 1675 Comm: syz.2.448 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 61.710721][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.710736][ T1675] Call Trace: [ 61.710744][ T1675] [ 61.710753][ T1675] __dump_stack+0x21/0x30 [ 61.710786][ T1675] dump_stack_lvl+0x10c/0x190 [ 61.710813][ T1675] ? __cfi_dump_stack_lvl+0x10/0x10 [ 61.710840][ T1675] ? ___ratelimit+0x3f7/0x5a0 [ 61.710869][ T1675] dump_stack+0x19/0x20 [ 61.710895][ T1675] dump_header+0xd7/0x490 [ 61.710929][ T1675] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 61.710955][ T1675] oom_kill_process+0x4c0/0x7e0 [ 61.710977][ T1675] ? sched_clock_cpu+0x75/0x400 [ 61.711005][ T1675] out_of_memory+0x7ee/0xbd0 [ 61.711037][ T1675] ? __cfi_out_of_memory+0x10/0x10 [ 61.711058][ T1675] ? mutex_lock_killable+0x92/0x1c0 [ 61.711091][ T1675] ? __cfi_mutex_lock_killable+0x10/0x10 [ 61.711124][ T1675] mem_cgroup_out_of_memory+0x279/0x350 [ 61.711157][ T1675] ? drain_obj_stock+0xed0/0xed0 [ 61.711189][ T1675] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 61.711219][ T1675] try_charge_memcg+0x8f7/0xde0 [ 61.711246][ T1675] ? __cfi_try_charge_memcg+0x10/0x10 [ 61.711272][ T1675] ? __alloc_pages_noprof+0x30d/0x6c0 [ 61.711300][ T1675] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 61.711324][ T1675] ? __folio_batch_add_and_move+0x2ab/0x370 [ 61.711349][ T1675] __mem_cgroup_charge+0xf6/0x410 [ 61.711377][ T1675] ? __kasan_check_write+0x18/0x20 [ 61.711405][ T1675] ? _raw_spin_lock+0x8c/0x120 [ 61.711429][ T1675] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 61.711468][ T1675] shmem_alloc_and_add_folio+0x86d/0x1050 [ 61.711508][ T1675] ? put_swap_device+0x130/0x130 [ 61.711543][ T1675] ? shmem_huge_global_enabled+0x2da/0x360 [ 61.711582][ T1675] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 61.711616][ T1675] ? __kasan_check_write+0x18/0x20 [ 61.711644][ T1675] ? _raw_spin_lock+0x8c/0x120 [ 61.711667][ T1675] shmem_get_folio_gfp+0x5f0/0x1380 [ 61.711704][ T1675] ? shmem_get_folio+0xc0/0xc0 [ 61.711735][ T1675] ? follow_page_pte+0xa5c/0xb90 [ 61.711761][ T1675] ? inode_to_bdi+0x6d/0x100 [ 61.711787][ T1675] shmem_write_begin+0xf4/0x270 [ 61.711823][ T1675] generic_perform_write+0x32d/0x960 [ 61.711854][ T1675] ? __cfi_generic_perform_write+0x10/0x10 [ 61.711882][ T1675] ? down_write+0xe9/0x2a0 [ 61.711915][ T1675] ? file_update_time+0xa3/0x220 [ 61.711941][ T1675] shmem_file_write_iter+0x105/0x130 [ 61.711967][ T1675] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.711992][ T1675] __kernel_write_iter+0x395/0x830 [ 61.712022][ T1675] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 61.712048][ T1675] ? __cfi___kernel_write_iter+0x10/0x10 [ 61.712077][ T1675] ? get_dump_page+0x160/0x220 [ 61.712101][ T1675] ? __asan_memset+0x39/0x50 [ 61.712128][ T1675] ? iov_iter_bvec+0xc0/0x180 [ 61.712163][ T1675] dump_user_range+0xb06/0xdf0 [ 61.712195][ T1675] ? __cfi_dump_emit+0x10/0x10 [ 61.712223][ T1675] ? __cfi_dump_user_range+0x10/0x10 [ 61.712253][ T1675] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 61.712285][ T1675] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 61.712317][ T1675] elf_core_dump+0x2cd9/0x3810 [ 61.712355][ T1675] ? __cfi_elf_core_dump+0x10/0x10 [ 61.712399][ T1675] ? dump_interrupted+0xf0/0xf0 [ 61.712426][ T1675] ? filp_open+0x182/0x1d0 [ 61.712457][ T1675] ? 0xffffffffff600000 [ 61.712477][ T1675] do_coredump+0x1bfa/0x2bd0 [ 61.712509][ T1675] ? __cfi_do_coredump+0x10/0x10 [ 61.712535][ T1675] ? asm_exc_page_fault+0x2b/0x30 [ 61.712574][ T1675] ? __kasan_slab_free+0x6a/0x80 [ 61.712607][ T1675] ? kmem_cache_free+0x1c1/0x510 [ 61.712637][ T1675] ? get_signal+0xa75/0x14f0 [ 61.712663][ T1675] get_signal+0x11fd/0x14f0 [ 61.712692][ T1675] arch_do_signal_or_restart+0x96/0x720 [ 61.712725][ T1675] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 61.712761][ T1675] irqentry_exit_to_user_mode+0x4e/0xb0 [ 61.712796][ T1675] irqentry_exit+0x16/0x60 [ 61.712828][ T1675] exc_page_fault+0x66/0xc0 [ 61.712858][ T1675] asm_exc_page_fault+0x2b/0x30 [ 61.712885][ T1675] RIP: 0033:0x7f64e138e9b1 [ 61.712905][ T1675] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 61.712926][ T1675] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 61.712949][ T1675] RAX: 0000000000000000 RBX: 00007f64e15b5fa0 RCX: 00007f64e138e9a9 [ 61.712966][ T1675] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 61.712983][ T1675] RBP: 00007f64e1410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 61.712999][ T1675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 61.713014][ T1675] R13: 0000000000000000 R14: 00007f64e15b5fa0 R15: 00007ffe306dd8f8 [ 61.713035][ T1675] [ 61.713106][ T1675] memory: usage 307200kB, limit 307200kB, failcnt 26174 [ 62.187558][ T1675] memory+swap: usage 431776kB, limit 9007199254740988kB, failcnt 0 [ 62.195977][ T1675] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 62.202166][ T1984] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 62.204597][ T1675] Memory cgroup stats for /syz2: [ 62.211585][ T1675] cache 314417152 [ 62.220303][ T1675] rss 98304 [ 62.223604][ T1675] rss_huge 0 [ 62.227060][ T1675] shmem 314413056 [ 62.230758][ T1675] mapped_file 0 [ 62.234273][ T1675] dirty 0 [ 62.237287][ T1675] writeback 0 [ 62.240595][ T1675] workingset_refault_anon 110 [ 62.245379][ T1675] workingset_refault_file 493 [ 62.250492][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.251044][ T1675] swap 127565824 [ 62.260369][ T1675] swapcached 69632 [ 62.264082][ T1675] pgpgin 212855 [ 62.267610][ T1675] pgpgout 136566 [ 62.271179][ T1675] pgfault 103130 [ 62.274744][ T1675] pgmajfault 51 [ 62.278269][ T1675] inactive_anon 51441664 [ 62.282948][ T1675] active_anon 263127040 [ 62.287610][ T1675] inactive_file 0 [ 62.291364][ T1675] active_file 4096 [ 62.295606][ T1675] unevictable 0 [ 62.299555][ T1675] hierarchical_memory_limit 314572800 [ 62.305073][ T1675] hierarchical_memsw_limit 9223372036854771712 [ 62.311768][ T1675] total_cache 314417152 [ 62.316059][ T1675] total_rss 98304 [ 62.320019][ T1675] total_rss_huge 0 [ 62.323901][ T1675] total_shmem 314413056 [ 62.328384][ T1675] total_mapped_file 0 [ 62.332475][ T1675] total_dirty 0 [ 62.336315][ T1675] total_writeback 0 [ 62.337211][ T1998] fuseblk: Bad value for 'rootmode' [ 62.340295][ T1675] total_workingset_refault_anon 110 [ 62.350905][ T1675] total_workingset_refault_file 493 [ 62.356406][ T1675] total_swap 127565824 [ 62.360585][ T1675] total_swapcached 69632 [ 62.364991][ T1675] total_pgpgin 212855 [ 62.369134][ T1675] total_pgpgout 136566 [ 62.373359][ T1675] total_pgfault 103130 [ 62.377841][ T1675] total_pgmajfault 51 [ 62.382011][ T1675] total_inactive_anon 51441664 [ 62.386906][ T1675] total_active_anon 263127040 [ 62.391900][ T1675] total_inactive_file 0 [ 62.396165][ T1675] total_active_file 4096 [ 62.399831][ T2004] netlink: 168 bytes leftover after parsing attributes in process `syz.1.561'. [ 62.400455][ T1675] total_unevictable 0 [ 62.413863][ T1675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.448,pid=1692,uid=0 [ 62.428966][ T1675] Memory cgroup out of memory: Killed process 1692 (syz.2.448) total-vm:90100kB, anon-rss:944kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 62.516170][ T9] usb 1-1: device descriptor read/64, error -71 [ 62.556976][ T1650] syz.2.448 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 62.596124][ T1650] CPU: 0 UID: 0 PID: 1650 Comm: syz.2.448 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 62.596165][ T1650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.596181][ T1650] Call Trace: [ 62.596188][ T1650] [ 62.596198][ T1650] __dump_stack+0x21/0x30 [ 62.596232][ T1650] dump_stack_lvl+0x10c/0x190 [ 62.596260][ T1650] ? __cfi_dump_stack_lvl+0x10/0x10 [ 62.596286][ T1650] ? ___ratelimit+0x3f7/0x5a0 [ 62.596314][ T1650] dump_stack+0x19/0x20 [ 62.596339][ T1650] dump_header+0xd7/0x490 [ 62.596373][ T1650] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 62.596399][ T1650] oom_kill_process+0x4c0/0x7e0 [ 62.596421][ T1650] ? sched_clock_cpu+0x75/0x400 [ 62.596450][ T1650] out_of_memory+0x7ee/0xbd0 [ 62.596472][ T1650] ? __cfi_out_of_memory+0x10/0x10 [ 62.596493][ T1650] ? mutex_lock_killable+0x92/0x1c0 [ 62.596524][ T1650] ? __cfi_mutex_lock_killable+0x10/0x10 [ 62.596556][ T1650] mem_cgroup_out_of_memory+0x279/0x350 [ 62.596587][ T1650] ? drain_obj_stock+0xed0/0xed0 [ 62.596618][ T1650] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 62.596655][ T1650] try_charge_memcg+0x8f7/0xde0 [ 62.596683][ T1650] ? __cfi_try_charge_memcg+0x10/0x10 [ 62.596709][ T1650] ? __alloc_pages_noprof+0x30d/0x6c0 [ 62.596734][ T1650] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 62.596760][ T1650] ? __folio_batch_add_and_move+0x2ab/0x370 [ 62.596784][ T1650] __mem_cgroup_charge+0xf6/0x410 [ 62.596811][ T1650] ? __kasan_check_write+0x18/0x20 [ 62.596838][ T1650] ? _raw_spin_lock+0x8c/0x120 [ 62.596860][ T1650] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 62.596890][ T1650] shmem_alloc_and_add_folio+0x86d/0x1050 [ 62.596929][ T1650] ? put_swap_device+0x130/0x130 [ 62.596965][ T1650] ? shmem_huge_global_enabled+0x2da/0x360 [ 62.596999][ T1650] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 62.597032][ T1650] ? __kasan_check_write+0x18/0x20 [ 62.597059][ T1650] ? _raw_spin_lock+0x8c/0x120 [ 62.597081][ T1650] shmem_get_folio_gfp+0x5f0/0x1380 [ 62.597115][ T1650] ? shmem_get_folio+0xc0/0xc0 [ 62.597144][ T1650] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 62.597171][ T1650] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 62.597198][ T1650] ? inode_to_bdi+0x6d/0x100 [ 62.597225][ T1650] shmem_write_begin+0xf4/0x270 [ 62.597261][ T1650] generic_perform_write+0x32d/0x960 [ 62.597291][ T1650] ? __cfi_generic_perform_write+0x10/0x10 [ 62.597318][ T1650] ? down_write+0xe9/0x2a0 [ 62.597348][ T1650] ? mnt_get_write_access_file+0x1af/0x3b0 [ 62.597370][ T1650] ? mnt_put_write_access_file+0xc2/0x100 [ 62.597393][ T1650] ? file_update_time+0x1ef/0x220 [ 62.597418][ T1650] shmem_file_write_iter+0x105/0x130 [ 62.597442][ T1650] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 62.597465][ T1650] __kernel_write_iter+0x395/0x830 [ 62.597493][ T1650] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 62.597518][ T1650] ? __cfi___kernel_write_iter+0x10/0x10 [ 62.597548][ T1650] ? get_dump_page+0x160/0x220 [ 62.597571][ T1650] ? __asan_memset+0x39/0x50 [ 62.597598][ T1650] ? iov_iter_bvec+0xc0/0x180 [ 62.597639][ T1650] dump_user_range+0xb06/0xdf0 [ 62.597670][ T1650] ? __cfi_dump_emit+0x10/0x10 [ 62.597696][ T1650] ? __cfi_dump_user_range+0x10/0x10 [ 62.597724][ T1650] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 62.597754][ T1650] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 62.597785][ T1650] elf_core_dump+0x2cd9/0x3810 [ 62.597824][ T1650] ? __cfi_elf_core_dump+0x10/0x10 [ 62.597867][ T1650] ? dump_interrupted+0xf0/0xf0 [ 62.597895][ T1650] ? filp_open+0x182/0x1d0 [ 62.597918][ T1650] ? 0xffffffffff600000 [ 62.597937][ T1650] do_coredump+0x1bfa/0x2bd0 [ 62.597968][ T1650] ? __cfi_do_coredump+0x10/0x10 [ 62.597993][ T1650] ? asm_exc_page_fault+0x2b/0x30 [ 62.598029][ T1650] ? __kasan_slab_free+0x6a/0x80 [ 62.598062][ T1650] ? kmem_cache_free+0x1c1/0x510 [ 62.598091][ T1650] ? get_signal+0xa75/0x14f0 [ 62.598116][ T1650] get_signal+0x11fd/0x14f0 [ 62.598145][ T1650] arch_do_signal_or_restart+0x96/0x720 [ 62.598177][ T1650] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 62.598207][ T1650] ? do_user_addr_fault+0x1a3/0x1200 [ 62.598239][ T1650] irqentry_exit_to_user_mode+0x4e/0xb0 [ 62.598272][ T1650] irqentry_exit+0x16/0x60 [ 62.598304][ T1650] exc_page_fault+0x66/0xc0 [ 62.598334][ T1650] asm_exc_page_fault+0x2b/0x30 [ 62.598362][ T1650] RIP: 0033:0x7f64e138e9b1 [ 62.598381][ T1650] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 62.598399][ T1650] RSP: 002b:fffffffffffffc70 EFLAGS: 00010217 [ 62.598422][ T1650] RAX: 0000000000000000 RBX: 00007f64e15b5fa0 RCX: 00007f64e138e9a9 [ 62.598454][ T1650] RDX: 0000000000000000 RSI: fffffffffffffc70 RDI: 0000000001022000 [ 62.598471][ T1650] RBP: 00007f64e1410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 62.598487][ T1650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 62.598514][ T1650] R13: 0000000000000000 R14: 00007f64e15b5fa0 R15: 00007ffe306dd8f8 [ 62.598533][ T1650] [ 62.598542][ T1650] memory: usage 300020kB, limit 307200kB, failcnt 26707 [ 63.078807][ T2013] netlink: 'syz.1.565': attribute type 27 has an invalid length. [ 63.082711][ T1650] memory+swap: usage 431464kB, limit 9007199254740988kB, failcnt 0 [ 63.116504][ T1650] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 63.123508][ T1650] Memory cgroup stats for /syz2: [ 63.123661][ T1650] cache 314146816 [ 63.132481][ T1650] rss 94208 [ 63.135684][ T1650] rss_huge 0 [ 63.139081][ T1650] shmem 311844864 [ 63.142736][ T1650] mapped_file 782336 [ 63.147934][ T1650] dirty 0 [ 63.155531][ T1650] writeback 0 [ 63.162281][ T2013] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.169158][ T1650] workingset_refault_anon 132 [ 63.169822][ T2013] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.174248][ T1650] workingset_refault_file 1795 [ 63.174261][ T1650] swap 127496192 [ 63.206225][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 63.224189][ T1650] swapcached 122880 [ 63.236205][ T1650] pgpgin 222227 [ 63.239879][ T1650] pgpgout 145992 [ 63.261805][ T1650] pgfault 106181 [ 63.265509][ T1650] pgmajfault 76 [ 63.270842][ T2016] fuseblk: Unknown parameter 'fd}]0x0000000000000003' [ 63.286172][ T1650] inactive_anon 5328896 [ 63.306173][ T1650] active_anon 306675712 [ 63.310420][ T1650] inactive_file 1777664 [ 63.314601][ T1650] active_file 0 [ 63.336182][ T9] usb 1-1: device descriptor read/64, error -71 [ 63.346312][ T1650] unevictable 0 [ 63.349842][ T1650] hierarchical_memory_limit 314572800 [ 63.355246][ T1650] hierarchical_memsw_limit 9223372036854771712 [ 63.375552][ T1650] total_cache 314146816 [ 63.380197][ T1650] total_rss 94208 [ 63.384298][ T1650] total_rss_huge 0 [ 63.396150][ T1650] total_shmem 311844864 [ 63.400473][ T1650] total_mapped_file 782336 [ 63.404918][ T1650] total_dirty 0 [ 63.416121][ T1650] total_writeback 0 [ 63.419993][ T1650] total_workingset_refault_anon 132 [ 63.425307][ T1650] total_workingset_refault_file 1795 [ 63.432289][ T1650] total_swap 127496192 [ 63.450406][ T1650] total_swapcached 122880 [ 63.460494][ T1650] total_pgpgin 222227 [ 63.484858][ T1650] total_pgpgout 145992 [ 63.490301][ T1650] total_pgfault 106181 [ 63.495027][ T1650] total_pgmajfault 76 [ 63.505165][ T1650] total_inactive_anon 5328896 [ 63.525059][ T1650] total_active_anon 306675712 [ 63.542352][ T1650] total_inactive_file 1777664 [ 63.552489][ T1650] total_active_file 0 [ 63.567502][ T1650] total_unevictable 0 [ 63.571553][ T1650] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.448,pid=1688,uid=0 [ 63.594234][ T1650] Memory cgroup out of memory: Killed process 1688 (syz.2.448) total-vm:90100kB, anon-rss:944kB, file-rss:53376kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 63.596185][ T9] usb 1-1: device descriptor read/64, error -71 [ 63.643641][ T2032] can: request_module (can-proto-0) failed. [ 63.732228][ T2044] netlink: 104 bytes leftover after parsing attributes in process `syz.3.574'. [ 63.746335][ T9] usb usb1-port1: attempt power cycle [ 63.858669][ T2049] overlayfs: failed to clone upperpath [ 63.937853][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 63.937936][ T36] audit: type=1400 audit(2000000005.650:331): avc: denied { ioctl } for pid=2054 comm="syz.1.579" path="socket:[10284]" dev="sockfs" ino=10284 ioctlcmd=0x5418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.106166][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 64.137223][ T9] usb 1-1: device descriptor read/8, error -71 [ 64.153279][ T2072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.584'. [ 64.176629][ T2072] netlink: 3 bytes leftover after parsing attributes in process `syz.2.584'. [ 64.206164][ T2072] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 64.237094][ T36] audit: type=1400 audit(2000000005.950:332): avc: denied { search } for pid=2071 comm="syz.2.584" name="/" dev="configfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 64.287161][ T9] usb 1-1: device descriptor read/8, error -71 [ 64.369566][ T2082] overlayfs: failed to resolve './file1': -2 [ 64.445869][ T36] audit: type=1400 audit(2000000006.150:333): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 64.543122][ T2101] netlink: 48 bytes leftover after parsing attributes in process `syz.1.594'. [ 64.657632][ T2107] binder: Bad value for 'max' [ 64.861190][ T2123] 9pnet_fd: Insufficient options for proto=fd [ 65.343466][ T2133] netlink: 68 bytes leftover after parsing attributes in process `syz.0.602'. [ 65.575426][ T36] audit: type=1400 audit(2000000007.280:334): avc: denied { getopt } for pid=2147 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.612749][ T36] audit: type=1400 audit(2000000007.280:335): avc: denied { remount } for pid=2147 comm="syz.2.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.644386][ T2152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.611'. [ 65.864700][ T2166] netlink: 'syz.2.617': attribute type 5 has an invalid length. [ 65.876603][ T2166] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.617'. [ 65.933811][ T36] audit: type=1400 audit(2000000007.640:336): avc: denied { write } for pid=2181 comm="syz.0.622" name="config" dev="proc" ino=4026532396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 66.199428][ T2205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.626'. [ 66.364371][ T2216] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 66.375455][ T2216] incfs: Options parsing error. -22 [ 66.382289][ T2216] incfs: mount failed -22 [ 66.461791][ T2224] fuse: Bad value for 'fd' [ 66.506159][ T45] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 66.525272][ T2238] netlink: 'syz.2.640': attribute type 27 has an invalid length. [ 66.542280][ T2238] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.549550][ T2238] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.656166][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 66.662596][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.673694][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.683566][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 66.697591][ T45] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 66.706692][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.715579][ T45] usb 1-1: config 0 descriptor?? [ 67.124836][ T45] hid (null): bogus close delimiter [ 67.138191][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0003/input/input11 [ 67.152978][ T45] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0003/input/input12 [ 67.191675][ T45] kye 0003:0458:5013.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 67.272598][ T2265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.649'. [ 67.281495][ T2265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.649'. [ 67.290378][ T2265] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 67.789975][ T2277] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 67.837123][ T2284] fuseblk: Bad value for 'user_id' [ 67.842567][ T2284] fuseblk: Bad value for 'user_id' [ 68.236381][ C0] kye 0003:0458:5013.0003: usb_submit_urb(ctrl) failed: -1 [ 68.381829][ T36] audit: type=1400 audit(2000000010.090:337): avc: denied { create } for pid=2294 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 68.477296][ T36] audit: type=1400 audit(2000000010.190:338): avc: denied { create } for pid=2316 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 68.709740][ T36] audit: type=1400 audit(2000000010.420:339): avc: denied { mounton } for pid=2337 comm="syz.2.678" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 68.709794][ T2338] 9pnet_fd: Insufficient options for proto=fd [ 69.009325][ T2383] overlayfs: failed to clone upperpath [ 69.039070][ T2388] fuseblk: Bad value for 'fd' [ 69.274104][ T36] audit: type=1400 audit(2000000010.980:340): avc: denied { create } for pid=2416 comm="syz.1.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.300784][ T855] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 69.309155][ T2419] netlink: 'syz.1.706': attribute type 4 has an invalid length. [ 69.310138][ T855] usb 1-1: device reset changed ep0 maxpacket size! [ 69.336372][ T9] usb 1-1: USB disconnect, device number 15 [ 69.382922][ T2424] fuse: Unknown parameter 'g' [ 69.476145][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 69.568912][ T2433] 9pnet_fd: Insufficient options for proto=fd [ 69.636141][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 69.642625][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 69.652692][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 69.663146][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.672310][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 69.680507][ T9] usb 1-1: SerialNumber: syz [ 69.686908][ T2448] 9pnet_fd: Insufficient options for proto=fd [ 69.690555][ T2379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.694852][ T2451] 9pnet_fd: Insufficient options for proto=fd [ 69.700717][ T2379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.722358][ T2453] overlayfs: failed to clone upperpath [ 69.930696][ T2460] overlayfs: failed to clone upperpath [ 70.418896][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 70.429992][ T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 70.445529][ T9] usb 1-1: USB disconnect, device number 16 [ 70.455320][ T855] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 70.476203][ T855] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.623168][ T2523] __nla_validate_parse: 1 callbacks suppressed [ 70.623194][ T2523] netlink: 3 bytes leftover after parsing attributes in process `syz.1.745'. [ 70.638912][ T2523] netlink: 3 bytes leftover after parsing attributes in process `syz.1.745'. [ 70.649437][ T2523] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 70.666636][ T2509] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 70.710564][ T36] audit: type=1326 audit(2000000012.420:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2533 comm="syz.3.749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x0 [ 70.742992][ T36] audit: type=1400 audit(2000000012.440:342): avc: denied { listen } for pid=2537 comm="syz.3.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.815917][ T2552] overlayfs: failed to resolve './file0': -2 [ 70.848873][ T2556] overlayfs: failed to resolve './file1': -2 [ 70.893470][ T36] audit: type=1326 audit(2000000012.600:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2559 comm="syz.1.759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f266438e9a9 code=0x0 [ 71.169439][ T2574] /dev/rnullb0: Can't open blockdev [ 71.175661][ T2576] /dev/rnullb0: Can't open blockdev [ 71.489650][ T2586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.766'. [ 71.498782][ T2586] rust_binder: Write failure EFAULT in pid:408 [ 71.499496][ T2588] rust_binder: Write failure EINVAL in pid:408 [ 71.519271][ T36] audit: type=1400 audit(2000000013.230:344): avc: denied { create } for pid=2590 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 71.846152][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 71.976160][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.052136][ T2604] overlayfs: missing 'workdir' [ 72.082877][ T2613] overlayfs: failed to resolve './file0': -2 [ 72.122908][ T2617] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 72.131879][ T2617] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 72.141363][ T2617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2617 comm=syz.2.777 [ 72.219384][ T36] audit: type=1400 audit(2000000013.930:345): avc: denied { mount } for pid=2629 comm="syz.2.781" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.241369][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.245934][ T2630] 9pnet: Could not find request transport: rdma [ 72.266352][ T2632] overlayfs: failed to resolve './file0': -2 [ 72.496169][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 72.626145][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.866205][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.882921][ T2641] overlayfs: failed to clone upperpath [ 72.890365][ T2643] overlayfs: failed to clone upperpath [ 72.976231][ T9] usb usb1-port1: attempt power cycle [ 73.326140][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 73.357153][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.487264][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.553993][ T2679] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 73.591237][ T2684] 9pnet_fd: Insufficient options for proto=fd [ 73.693962][ T2693] 9pnet_fd: Insufficient options for proto=fd [ 73.726149][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 73.750543][ T2703] netlink: 'syz.2.808': attribute type 11 has an invalid length. [ 73.757340][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.758792][ T2703] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.808'. [ 73.800515][ T2705] overlayfs: failed to clone upperpath [ 73.826612][ T2709] batadv_slave_0: mtu less than device minimum [ 73.835297][ T2711] overlayfs: failed to clone upperpath [ 73.842547][ T2711] 9pnet_fd: Insufficient options for proto=fd [ 73.887201][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.962656][ T36] audit: type=1400 audit(2000000015.670:346): avc: denied { read } for pid=2717 comm="syz.1.814" name="/" dev="configfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.984847][ T36] audit: type=1400 audit(2000000015.670:347): avc: denied { open } for pid=2717 comm="syz.1.814" path="/" dev="configfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.007520][ T36] audit: type=1400 audit(2000000015.680:348): avc: denied { ioctl } for pid=2717 comm="syz.1.814" path="/" dev="configfs" ino=2401 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.016445][ T9] usb usb1-port1: unable to enumerate USB device [ 74.034626][ T36] audit: type=1400 audit(2000000015.740:349): avc: denied { watch } for pid=2725 comm="syz.1.817" path="/195/file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.594575][ T36] audit: type=1400 audit(2000000016.300:350): avc: denied { create } for pid=2739 comm="syz.2.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 74.748468][ T2757] x_tables: unsorted underflow at hook 4 [ 74.755351][ T2757] /dev/loop0: Can't lookup blockdev [ 74.763139][ T2757] overlay: ./file0 is not a directory [ 74.769928][ T36] audit: type=1400 audit(2000000016.480:351): avc: denied { connect } for pid=2756 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.598547][ T2787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.839'. [ 75.617660][ T2787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.839'. [ 75.697639][ T2793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 75.864837][ T2791] 9pnet_fd: Insufficient options for proto=fd [ 75.992975][ T2821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 76.004143][ T2821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.850'. [ 76.025856][ T2823] veth0_to_hsr: entered allmulticast mode [ 76.026494][ T2825] overlayfs: failed to clone upperpath [ 76.042872][ T2823] veth0_to_hsr: left allmulticast mode [ 76.400774][ T36] audit: type=1400 audit(2000000018.110:352): avc: denied { create } for pid=2838 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.433133][ T2841] tc_dump_action: action bad kind [ 76.438886][ T2841] overlayfs: failed to clone upperpath [ 77.048032][ T2853] 9pnet_fd: Insufficient options for proto=fd [ 77.085624][ T2857] netlink: 'syz.1.862': attribute type 25 has an invalid length. [ 77.228609][ T2867] netlink: 'syz.3.865': attribute type 25 has an invalid length. [ 77.963894][ T2871] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 78.165900][ T2896] netlink: 48 bytes leftover after parsing attributes in process `syz.3.876'. [ 78.526196][ T855] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 78.666155][ T855] usb 1-1: device descriptor read/64, error -71 [ 78.900227][ T2926] 9pnet_fd: Insufficient options for proto=fd [ 78.916146][ T855] usb 1-1: device descriptor read/64, error -71 [ 78.928633][ T2928] overlayfs: failed to clone upperpath [ 79.066659][ T2931] netlink: 48 bytes leftover after parsing attributes in process `syz.1.888'. [ 79.174406][ T2936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=2936 comm=syz.2.890 [ 79.206735][ T855] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 79.356160][ T855] usb 1-1: device descriptor read/64, error -71 [ 79.515587][ T2954] tipc: Started in network mode [ 79.521196][ T2954] tipc: Node identity 2, cluster identity 2 [ 79.527433][ T2954] tipc: Node number set to 2 [ 79.532323][ T2955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=2955 comm=syz.3.897 [ 79.552872][ T2955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=2955 comm=syz.3.897 [ 79.614515][ T36] audit: type=1326 audit(2000000021.320:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.2.901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64e138e9a9 code=0x0 [ 79.626233][ T855] usb 1-1: device descriptor read/64, error -71 [ 79.756284][ T855] usb usb1-port1: attempt power cycle [ 80.096338][ T855] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 80.117455][ T855] usb 1-1: device descriptor read/8, error -71 [ 80.146472][ T2971] tipc: Failed to remove unknown binding: 66,1,1/0:1864966555/1864966557 [ 80.247252][ T855] usb 1-1: device descriptor read/8, error -71 [ 80.402984][ T36] audit: type=1326 audit(2000000022.110:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2956 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7fc00000 [ 80.426408][ T36] audit: type=1326 audit(2000000022.110:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2956 comm="syz.1.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f266438e9a9 code=0x7fc00000 [ 80.450010][ T36] audit: type=1400 audit(2000000022.150:356): avc: denied { read } for pid=2972 comm="syz.1.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.506139][ T855] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 80.527343][ T855] usb 1-1: device descriptor read/8, error -71 [ 80.589817][ T2977] netlink: 48 bytes leftover after parsing attributes in process `syz.2.905'. [ 80.657211][ T855] usb 1-1: device descriptor read/8, error -71 [ 80.767137][ T855] usb usb1-port1: unable to enumerate USB device [ 80.944069][ T2998] overlayfs: failed to clone upperpath [ 80.956230][ T2998] tmpfs: Unsupported parameter 'mpol' [ 81.106309][ T3011] netlink: 48 bytes leftover after parsing attributes in process `syz.3.914'. [ 81.287094][ T36] audit: type=1326 audit(2000000022.990:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.396249][ T36] audit: type=1326 audit(2000000022.990:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.427678][ T36] audit: type=1326 audit(2000000022.990:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.494227][ T36] audit: type=1326 audit(2000000022.990:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.537944][ T36] audit: type=1326 audit(2000000022.990:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.586126][ T36] audit: type=1326 audit(2000000022.990:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3016 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266438e9a9 code=0x7ffc0000 [ 81.619037][ T3035] netlink: 224 bytes leftover after parsing attributes in process `syz.0.919'. [ 81.679875][ T3041] 9pnet: Could not find request transport: ;l= [ 81.739834][ T3042] fuse: Unknown parameter 'roo' [ 82.248878][ T3074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.934'. [ 82.435677][ T3098] syzkaller0: entered allmulticast mode [ 82.441601][ T3098] syzkaller0: entered promiscuous mode [ 82.447672][ T3097] syzkaller0: left promiscuous mode [ 82.453155][ T3097] syzkaller0: left allmulticast mode [ 82.657499][ T3120] cgroup: Invalid name [ 83.116167][ T855] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 83.286485][ T855] usb 1-1: Using ep0 maxpacket: 8 [ 83.296859][ T855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.310985][ T855] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 83.327246][ T855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.342031][ T855] usb 1-1: config 0 descriptor?? [ 83.465423][ T3163] overlayfs: missing 'lowerdir' [ 83.470627][ T3162] overlayfs: missing 'lowerdir' [ 83.752827][ T855] lenovo 0003:17EF:6062.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 83.950901][ T306] usb 1-1: USB disconnect, device number 25 [ 84.142222][ T3207] netlink: 'syz.2.986': attribute type 12 has an invalid length. [ 84.252545][ T3212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 84.582155][ T3238] 9pnet_fd: Insufficient options for proto=fd [ 84.589901][ T3238] 9pnet_fd: Insufficient options for proto=fd [ 85.928914][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 85.928932][ T36] audit: type=1400 audit(2000000027.640:380): avc: denied { ioctl } for pid=3287 comm="syz.3.1017" path="socket:[12957]" dev="sockfs" ino=12957 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.960954][ T36] audit: type=1400 audit(2000000027.640:381): avc: denied { setopt } for pid=3287 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.986729][ T36] audit: type=1400 audit(2000000027.640:382): avc: denied { read } for pid=3287 comm="syz.3.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 86.527661][ T36] audit: type=1400 audit(2000000028.240:383): avc: denied { ioctl } for pid=3310 comm="syz.0.1025" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 86.580146][ T3314] netlink: 'syz.3.1026': attribute type 16 has an invalid length. [ 86.588243][ T3314] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1026'. [ 86.597048][ T3319] overlayfs: failed to clone upperpath [ 86.619367][ T3321] 9pnet_fd: Insufficient options for proto=fd [ 86.710259][ T36] audit: type=1400 audit(2000000028.420:384): avc: denied { accept } for pid=3347 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.732503][ T36] audit: type=1400 audit(2000000028.440:385): avc: denied { read } for pid=3347 comm="syz.2.1037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.763453][ T3353] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 86.772342][ T3353] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 87.349128][ T3371] futex_wake_op: syz.3.1045 tries to shift op by -1; fix this program [ 87.379086][ T36] audit: type=1400 audit(2000000029.090:386): avc: denied { getopt } for pid=3376 comm="syz.0.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.491227][ T3386] overlayfs: failed to clone upperpath [ 87.676964][ T855] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 87.686772][ T3427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 87.701364][ T855] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.703778][ T3434] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 87.733470][ T3435] fido_id[3435]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 87.736170][ T36] audit: type=1400 audit(2000000029.440:387): avc: denied { watch_reads } for pid=3431 comm="syz.3.1064" path="/336/file0" dev="tmpfs" ino=1878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.794577][ T36] audit: type=1326 audit(2000000029.500:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e138e9a9 code=0x7ffc0000 [ 87.838455][ T36] audit: type=1326 audit(2000000029.500:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3439 comm="syz.2.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e138e9a9 code=0x7ffc0000 [ 87.898808][ T3442] kvm: kvm [3441]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x41b [ 87.913938][ T3442] kvm: kvm [3441]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x1f1f [ 87.935801][ T3442] kvm: kvm [3441]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x100002424 [ 87.945409][ T3442] kvm: kvm [3441]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x100000028 [ 87.964338][ T3442] kvm: kvm [3441]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x100002424 [ 87.985598][ T3442] netlink: 'syz.0.1067': attribute type 27 has an invalid length. [ 88.015422][ T3474] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 88.024397][ T3474] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 88.033734][ T3474] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 88.234630][ T3497] overlayfs: failed to clone lowerpath [ 88.256223][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 88.266368][ T3501] veth0_to_hsr: entered allmulticast mode [ 88.279698][ T3500] veth0_to_hsr: left allmulticast mode [ 89.137859][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1114'. [ 89.213177][ T3599] overlayfs: failed to clone upperpath [ 89.402703][ T3614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1123'. [ 89.821161][ T3632] binder: Unknown parameter '' [ 89.919396][ T3638] overlayfs: failed to resolve './file1': -2 [ 89.927581][ T3638] tipc: Enabling of bearer rejected, failed to enable media [ 90.502495][ T3651] netlink: 'syz.1.1136': attribute type 63 has an invalid length. [ 90.510408][ T3651] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1136'. [ 90.519578][ T3651] gretap0: entered allmulticast mode [ 90.525499][ T3651] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.607271][ T3661] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1137'. [ 90.641413][ T3665] 9pnet_fd: Insufficient options for proto=fd [ 90.863954][ T3698] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1152'. [ 91.091907][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 91.091928][ T36] audit: type=1400 audit(2000000032.800:423): avc: denied { remove_name } for pid=288 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.128739][ T36] audit: type=1400 audit(2000000032.800:424): avc: denied { unlink } for pid=288 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.288579][ T36] audit: type=1400 audit(2000000033.000:425): avc: denied { mounton } for pid=3724 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.331540][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.338644][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.345734][ T3724] bridge_slave_0: entered allmulticast mode [ 91.352133][ T3724] bridge_slave_0: entered promiscuous mode [ 91.358591][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.365648][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.372830][ T3724] bridge_slave_1: entered allmulticast mode [ 91.379306][ T3724] bridge_slave_1: entered promiscuous mode [ 91.438284][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.445500][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.452846][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.459929][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.482277][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.489925][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.499842][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.506955][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.519016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.526144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.558741][ T3724] veth0_vlan: entered promiscuous mode [ 91.570898][ T3724] veth1_macvtap: entered promiscuous mode [ 91.591622][ T36] audit: type=1400 audit(2000000033.300:426): avc: denied { mounton } for pid=3724 comm="syz-executor" path="/root/syzkaller.qp1VEa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 91.629962][ T3734] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 91.862639][ T3739] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1164'. [ 91.945032][ T3742] 9pnet_fd: Insufficient options for proto=fd [ 92.107497][ T3746] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=3746 comm=syz.2.1167 [ 92.163442][ T3746] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=59 sclass=netlink_xfrm_socket pid=3746 comm=syz.2.1167 [ 92.210556][ T3753] rust_binder: 3753: no such ref 1 [ 92.217245][ T3753] rust_binder: 3753: no such ref 2 [ 92.345907][ T3764] overlayfs: failed to clone upperpath [ 92.794907][ T3781] 9pnet_fd: Insufficient options for proto=fd [ 92.830771][ T3787] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.201195][ T3827] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.364024][ T45] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.521487][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 93.541526][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.552708][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.573973][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.587341][ T3840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 93.588247][ T36] audit: type=1400 audit(2000000035.300:427): avc: denied { create } for pid=3839 comm="syz.1.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.618287][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.636259][ T45] usb 5-1: Product: ࠧ [ 93.643041][ T45] usb 5-1: Manufacturer: Б [ 93.647778][ T45] usb 5-1: SerialNumber: 瑣ᗠ쵈膼韣猩苣䴉棨嫾䮬惧啕着꨼퇺껸ꃙ≤ޤ돞ꬩ模㳤뤟蓊ྀ﬈嗶ṫʐା농໻魮ꧥ㓶⹞飀箝取뮆㧛餔謥絰⫳藆뢨濶⼜定ᲊᩭ뭚॑⑐಩슞탙⎕룵佌偀즮쨃鯲국炅톉跼䕾ᵙ汚㈈ⳉ㜾쎋ꄝ搓섒 [ 93.902684][ T45] usb 5-1: 0:2 : does not exist [ 93.916290][ T45] usb 5-1: USB disconnect, device number 2 [ 93.936486][ T2900] udevd[2900]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.439551][ T3874] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 94.453338][ T3876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.476820][ T3876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.509321][ T36] audit: type=1400 audit(2000000036.220:428): avc: denied { module_load } for pid=3881 comm="syz.4.1217" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 94.537448][ T3882] Invalid ELF header len 16 [ 94.563738][ T36] audit: type=1326 audit(2000000036.270:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3884 comm="syz.2.1218" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64e138e9a9 code=0x0 [ 94.707609][ T3899] x_tables: unsorted underflow at hook 4 [ 94.839741][ T3913] netlink: 'syz.3.1228': attribute type 1 has an invalid length. [ 95.080800][ T3936] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1238'. [ 95.438098][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1243'. [ 95.527439][ T3961] overlayfs: failed to clone lowerpath [ 95.536943][ T36] audit: type=1400 audit(2000000037.240:430): avc: denied { create } for pid=3960 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 95.575033][ T3966] kvm: emulating exchange as write [ 95.646026][ T36] audit: type=1400 audit(2000000037.350:431): avc: denied { create } for pid=3979 comm="syz.4.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 95.681281][ T3982] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 96.213658][ T4016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4016 comm=syz.2.1268 [ 96.270755][ T4026] netlink: 'syz.2.1272': attribute type 13 has an invalid length. [ 97.108229][ T4064] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1286'. [ 97.697056][ T36] audit: type=1400 audit(2000000039.410:432): avc: denied { write } for pid=4074 comm="syz.4.1291" name="file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.719653][ T36] audit: type=1400 audit(2000000039.410:433): avc: denied { open } for pid=4074 comm="syz.4.1291" path="/27/file0" dev="tmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.742412][ T36] audit: type=1400 audit(2000000039.410:434): avc: denied { ioctl } for pid=4074 comm="syz.4.1291" path="/27/file0" dev="tmpfs" ino=162 ioctlcmd=0x301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.772235][ T4083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4083 comm=syz.2.1293 [ 97.798200][ T4085] tipc: Enabling of bearer rejected, failed to enable media [ 97.807846][ T4085] 9pnet_fd: Insufficient options for proto=fd [ 98.408861][ T4128] overlayfs: failed to clone lowerpath [ 98.858045][ T4137] overlayfs: failed to clone upperpath [ 99.136196][ T4142] rust_binder: 4142: no such ref 0 [ 99.142269][ T4142] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 99.149894][ T4142] rust_binder: Write failure EINVAL in pid:81 [ 99.150476][ T4142] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 99.163946][ T4142] rust_binder: Write failure EINVAL in pid:81 [ 99.192190][ T4148] overlayfs: failed to resolve './file1': -2 [ 99.439744][ T4165] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1319'. [ 99.634163][ T4169] overlayfs: failed to clone lowerpath [ 99.634215][ T36] audit: type=1400 audit(2000000041.340:435): avc: denied { mount } for pid=4166 comm="syz.2.1320" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 99.982669][ T4188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1328'. [ 100.266250][ T4209] 9pnet_fd: Insufficient options for proto=fd [ 100.283890][ T36] audit: type=1400 audit(2000000041.990:436): avc: denied { accept } for pid=4210 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 100.366120][ T855] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.500612][ T4218] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1339'. [ 100.527810][ T855] usb 5-1: config 192 has an invalid interface number: 162 but max is 0 [ 100.542006][ T855] usb 5-1: config 192 has no interface number 0 [ 100.553293][ T855] usb 5-1: config 192 interface 162 has no altsetting 0 [ 100.567495][ T855] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 100.576980][ T855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.598606][ T855] usb 5-1: Product: syz [ 100.607589][ T855] usb 5-1: Manufacturer: syz [ 100.617685][ T855] usb 5-1: SerialNumber: syz [ 100.829617][ T4194] rust_binder: Error while translating object. [ 100.829673][ T4194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 100.835996][ T4194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:95 [ 100.856128][ T36] audit: type=1326 audit(2000000042.560:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4230 comm="syz.3.1344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x0 [ 100.895674][ T855] usb-storage 5-1:192.162: USB Mass Storage device detected [ 100.911910][ T855] usb-storage 5-1:192.162: device ignored [ 100.964932][ T855] usb 5-1: USB disconnect, device number 3 [ 101.430996][ T36] audit: type=1400 audit(2000000043.140:438): avc: denied { mount } for pid=4258 comm="syz.4.1354" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.453388][ T4259] devpts: called with bogus options [ 101.459566][ T36] audit: type=1400 audit(2000000043.160:439): avc: denied { remount } for pid=4258 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.488506][ T36] audit: type=1400 audit(2000000043.200:440): avc: denied { unmount } for pid=3724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 101.516471][ T4266] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1356'. [ 101.547778][ T36] audit: type=1400 audit(2000000043.250:441): avc: denied { setattr } for pid=4268 comm="syz.4.1358" name="NFC_RAW" dev="sockfs" ino=16726 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.759364][ T4287] batadv_slave_1: entered promiscuous mode [ 101.787082][ T4283] batadv_slave_1: left promiscuous mode [ 101.963246][ T4313] batadv_slave_1: entered promiscuous mode [ 102.038210][ T4320] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1374'. [ 102.357155][ T4329] overlayfs: failed to clone upperpath [ 102.402017][ T4338] sit0: entered promiscuous mode [ 102.408777][ T4338] netlink: 'syz.4.1381': attribute type 1 has an invalid length. [ 102.416818][ T4338] netlink: 'syz.4.1381': attribute type 3 has an invalid length. [ 102.425526][ T4339] /dev/loop0: Can't lookup blockdev [ 102.444519][ T4341] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 102.451895][ T4341] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 102.459151][ T4341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 102.744685][ T4311] batadv_slave_1: left promiscuous mode [ 102.920659][ T4372] overlayfs: failed to clone upperpath [ 103.260951][ T4388] 9pnet_fd: Insufficient options for proto=fd [ 103.745089][ T4414] fuse: Bad value for 'user_id' [ 103.750327][ T4414] fuse: Bad value for 'user_id' [ 104.257462][ T4429] overlayfs: failed to clone upperpath [ 104.393213][ T4446] overlayfs: failed to resolve './file1': -2 [ 104.400258][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 104.400278][ T36] audit: type=1400 audit(2000000046.110:443): avc: denied { remount } for pid=4444 comm="syz.2.1418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 105.668690][ T4464] fuse: Bad value for 'fd' [ 105.808303][ T4470] overlayfs: failed to clone upperpath [ 106.572831][ T4479] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1431'. [ 106.688569][ T4491] netlink: 'syz.2.1435': attribute type 27 has an invalid length. [ 106.823405][ T36] audit: type=1400 audit(2000000048.530:444): avc: denied { nlmsg_write } for pid=4506 comm="syz.2.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 106.853595][ T36] audit: type=1326 audit(2000000048.560:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4512 comm="syz.2.1443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e138e9a9 code=0x0 [ 107.134289][ T4560] bpf: Bad value for 'mode' [ 107.942167][ T4614] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.958689][ T4614] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 107.970887][ T4614] overlayfs: missing 'lowerdir' [ 108.049077][ T4626] fuse: Bad value for 'fd' [ 108.435859][ T4652] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1488'. [ 109.366542][ T4687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1500'. [ 109.428760][ T4699] fuseblk: Bad value for 'fd' [ 109.696580][ T36] audit: type=1400 audit(2000000052.408:446): avc: denied { create } for pid=4703 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 110.293309][ T4718] incfs: Can't find or create .index dir in ./bus [ 110.294387][ T4719] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1513'. [ 110.300144][ T4718] incfs: mount failed -17 [ 110.362758][ T4734] overlayfs: failed to clone upperpath [ 110.390426][ T36] audit: type=1400 audit(2000000053.098:447): avc: denied { read } for pid=4738 comm="syz.3.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.483873][ T4749] overlayfs: failed to clone lowerpath [ 110.490758][ T36] audit: type=1400 audit(2000000053.198:448): avc: denied { lock } for pid=4747 comm="syz.4.1523" path="socket:[18584]" dev="sockfs" ino=18584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 110.518657][ T36] audit: type=1400 audit(2000000053.228:449): avc: denied { execstack } for pid=4752 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 110.539303][ T4753] overlayfs: failed to clone upperpath [ 110.904049][ T4796] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1538'. [ 110.940168][ T36] audit: type=1400 audit(2000000053.648:450): avc: denied { map } for pid=4799 comm="syz.3.1540" path="socket:[18635]" dev="sockfs" ino=18635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 110.964116][ T36] audit: type=1400 audit(2000000053.648:451): avc: denied { connect } for pid=4799 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.399835][ T36] audit: type=1326 audit(2000000054.108:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4759 comm="syz.4.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb298e9a9 code=0x7fc00000 [ 111.464850][ T4813] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.472628][ T4813] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.480135][ T4813] bridge0: entered allmulticast mode [ 111.487502][ T4813] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.494597][ T4813] bridge0: port 2(bridge_slave_1) entered listening state [ 111.501929][ T4813] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.509040][ T4813] bridge0: port 1(bridge_slave_0) entered listening state [ 111.517729][ T36] audit: type=1326 audit(2000000054.228:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4661 comm="syz.2.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e138e9a9 code=0x7fc00000 [ 111.524816][ T4813] bridge0: entered promiscuous mode [ 111.554096][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1545'. [ 112.061392][ T36] audit: type=1400 audit(2000000054.768:454): avc: denied { create } for pid=4831 comm="syz.4.1551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.088103][ T4833] overlayfs: upper fs does not support tmpfile. [ 112.097024][ T36] audit: type=1400 audit(2000000054.798:455): avc: denied { getattr } for pid=4831 comm="syz.4.1551" name="/" dev="incremental-fs" ino=17124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 112.122513][ T4833] overlayfs: upper fs does not support tmpfile. [ 114.570374][ T4976] 9pnet_fd: Insufficient options for proto=fd [ 115.127647][ T5009] overlayfs: failed to clone upperpath [ 115.211911][ T5015] overlayfs: failed to clone upperpath [ 115.218221][ T5015] overlayfs: failed to clone upperpath [ 115.667696][ T5025] overlayfs: failed to clone upperpath [ 115.748758][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 115.748778][ T36] audit: type=1326 audit(2000000058.458:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5032 comm="syz.3.1621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa36e78e9a9 code=0x0 [ 115.757181][ T5035] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1622'. [ 115.787840][ T5035] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1622'. [ 115.799160][ T5035] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 116.152322][ T5050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1625'. [ 116.388151][ T5059] overlayfs: failed to clone lowerpath [ 116.469615][ T5066] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1631'. [ 116.695253][ T36] audit: type=1400 audit(2000000059.398:460): avc: denied { write } for pid=5074 comm="syz.4.1634" name="/" dev="configfs" ino=2401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.712728][ T5076] overlayfs: failed to clone upperpath [ 116.717462][ T36] audit: type=1400 audit(2000000059.398:461): avc: denied { add_name } for pid=5074 comm="syz.4.1634" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.744078][ T36] audit: type=1400 audit(2000000059.398:462): avc: denied { create } for pid=5074 comm="syz.4.1634" name="cgroup.kill" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 116.763840][ T5080] overlayfs: failed to clone upperpath [ 117.298692][ T5090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1637'. [ 117.449277][ T5107] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1642'. [ 117.761415][ T5146] overlayfs: failed to clone upperpath [ 117.770986][ T5146] overlayfs: failed to clone upperpath [ 117.844763][ T5155] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 117.924079][ T5171] tipc: Started in network mode [ 117.929121][ T5171] tipc: Node identity ac14142f, cluster identity 4711 [ 117.936133][ T5171] tipc: New replicast peer: 0.0.0.0 [ 117.941770][ T5171] tipc: Enabled bearer , priority 10 [ 117.950209][ T5171] 9pnet_fd: Insufficient options for proto=fd [ 118.003846][ T5172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1665'. [ 118.957186][ T5235] 9pnet_fd: Insufficient options for proto=fd [ 119.038292][ T5238] netlink: 'syz.1.1690': attribute type 27 has an invalid length. [ 119.055835][ T5238] 9pnet_fd: Insufficient options for proto=fd [ 119.062095][ T306] tipc: Node number set to 2886997039 [ 119.249399][ T5268] overlayfs: failed to clone lowerpath [ 119.270898][ T5270] 9pnet_fd: Insufficient options for proto=fd [ 119.278673][ T5270] 9pnet_fd: Insufficient options for proto=fd [ 119.319186][ T5276] fuse: Bad value for 'fd' [ 119.364607][ T36] audit: type=1400 audit(2000000062.068:463): avc: denied { mounton } for pid=5279 comm="syz.4.1704" path=2F3133332FE91F7189591E9233614B dev="tmpfs" ino=780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 119.558773][ T5283] 9pnet_fd: Insufficient options for proto=fd [ 119.558778][ T5284] 9pnet_fd: Insufficient options for proto=fd [ 119.611809][ T5291] overlayfs: failed to clone upperpath [ 120.007638][ T36] audit: type=1326 audit(2000000062.718:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x7fc00000 [ 120.031129][ T36] audit: type=1326 audit(2000000062.718:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa36e78e9a9 code=0x7fc00000 [ 120.055322][ T36] audit: type=1326 audit(2000000062.718:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x7fc00000 [ 120.079327][ T36] audit: type=1326 audit(2000000062.718:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.1696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36e78e9a9 code=0x7fc00000 [ 120.089141][ T5309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.110325][ T5309] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 120.119340][ T5309] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 120.126358][ T5309] overlayfs: failed to set xattr on upper [ 120.132485][ T5309] overlayfs: ...falling back to redirect_dir=nofollow. [ 120.139922][ T5309] overlayfs: ...falling back to metacopy=off. [ 120.146136][ T5309] overlayfs: ...falling back to uuid=null. [ 120.213866][ T5319] overlayfs: failed to clone lowerpath [ 120.387528][ T5334] overlayfs: failed to clone upperpath [ 120.830384][ T5351] overlayfs: upper fs does not support tmpfile. [ 120.923869][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 120.923890][ T36] audit: type=1400 audit(2000000063.628:533): avc: denied { create } for pid=5365 comm="syz.4.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.974140][ T5376] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1741'. [ 121.039393][ T5383] overlayfs: failed to clone upperpath [ 121.045313][ T5384] overlayfs: failed to clone upperpath [ 121.458984][ T36] audit: type=1400 audit(2000000320.162:534): avc: denied { mounton } for pid=5405 comm="syz.3.1751" path="/516/file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 121.615364][ T36] audit: type=1400 audit(2000000320.312:535): avc: denied { create } for pid=5426 comm="syz.4.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 121.662629][ T5439] bpf: Bad value for 'mode' [ 122.418034][ T36] audit: type=1326 audit(2000000321.122:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.2.1779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f64e138e9a9 code=0x0 [ 122.832853][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 123.350571][ T5552] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1789'. [ 123.422271][ T5562] overlayfs: upper fs does not support tmpfile. [ 123.634846][ T5573] 9pnet_fd: Insufficient options for proto=fd [ 123.729073][ T5594] 9pnet_fd: Insufficient options for proto=fd [ 123.737831][ T5595] 9pnet_fd: Insufficient options for proto=fd [ 123.872880][ T5604] 9pnet_fd: Insufficient options for proto=fd [ 123.989608][ T5609] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1805'. [ 124.238230][ T5616] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 124.252444][ T5616] overlayfs: workdir and upperdir must reside under the same mount [ 124.315385][ T5624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1812'. [ 124.486561][ T5640] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1816'. [ 124.856609][ T5644] ------------[ cut here ]------------ [ 124.862154][ T5644] WARNING: CPU: 0 PID: 5644 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 124.870278][ T5644] Modules linked in: [ 124.874241][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: syz.2.1818 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 124.887842][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.897967][ T5644] RIP: 0010:drop_nlink+0xce/0x110 [ 124.903033][ T5644] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 57 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 124.922814][ T5644] RSP: 0018:ffffc9000f11f0d0 EFLAGS: 00010287 [ 124.929043][ T5644] RAX: ffffffff81ed532e RBX: ffff888127389380 RCX: 0000000000080000 [ 124.937082][ T5644] RDX: ffffc90002605000 RSI: 00000000000014da RDI: 00000000000014db [ 124.945099][ T5644] RBP: ffffc9000f11f0f8 R08: 0000000000000003 R09: 0000000000000004 [ 124.953197][ T5644] R10: dffffc0000000000 R11: fffff52001e23e10 R12: dffffc0000000000 [ 124.961248][ T5644] R13: 1ffff11024e71279 R14: ffff8881273893c8 R15: 0000000000000000 [ 124.969398][ T5644] FS: 00007f64e21b76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 124.978451][ T5644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.985105][ T5644] CR2: 0000200000001000 CR3: 0000000148cae000 CR4: 00000000003526b0 [ 124.993230][ T5644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.001353][ T5644] DR3: 00000000d88e3eb2 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.009380][ T5644] Call Trace: [ 125.012690][ T5644] [ 125.015640][ T5644] simple_rmdir+0x153/0x260 [ 125.020230][ T5644] vfs_rmdir+0x3e0/0x560 [ 125.024526][ T5644] dir_rmdir+0x236/0x320 [ 125.028880][ T5644] ? __cfi_dir_rmdir+0x10/0x10 [ 125.033783][ T5644] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 125.038975][ T5644] vfs_rmdir+0x3e0/0x560 [ 125.043280][ T5644] dir_rmdir+0x236/0x320 [ 125.047612][ T5644] ? __cfi_dir_rmdir+0x10/0x10 [ 125.052446][ T5644] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 125.057570][ T5644] vfs_rmdir+0x3e0/0x560 [ 125.061889][ T5644] ovl_workdir_cleanup+0x192/0x780 [ 125.067111][ T5644] ? lookup_one_len+0x2f0/0x2f0 [ 125.072065][ T5644] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 125.077793][ T5644] ? lookup_one+0x197/0x2e0 [ 125.082711][ T5644] ? __cfi_lookup_one+0x10/0x10 [ 125.088196][ T5644] ? kasan_save_alloc_info+0x40/0x50 [ 125.093540][ T5644] ovl_workdir_create+0x2af/0x750 [ 125.098913][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.104081][ T5644] ? ovl_statfs+0x2d0/0x2d0 [ 125.108690][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.113491][ T5644] ? _raw_spin_unlock+0x45/0x60 [ 125.118671][ T5644] ? mnt_want_write+0x321/0x510 [ 125.123576][ T5644] ovl_get_workdir+0x328/0x1650 [ 125.128499][ T5644] ? ovl_fill_super+0x36f0/0x36f0 [ 125.133591][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.138850][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.143738][ T5644] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.149237][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.154393][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.159227][ T5644] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.164475][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.169681][ T5644] ? up_read+0x26/0x1d0 [ 125.173869][ T5644] ? _raw_spin_unlock+0x45/0x60 [ 125.178796][ T5644] ? ovl_inuse_trylock+0xbd/0x110 [ 125.183881][ T5644] ovl_fill_super+0x133f/0x36f0 [ 125.188801][ T5644] ? xas_nomem+0x71/0x2d0 [ 125.193171][ T5644] ? ida_alloc_range+0xa12/0xa50 [ 125.198180][ T5644] ? __cfi_ovl_fill_super+0x10/0x10 [ 125.203445][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.208651][ T5644] ? mutex_unlock+0x8b/0x240 [ 125.213392][ T5644] ? __cfi_mutex_unlock+0x10/0x10 [ 125.218574][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.223727][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.228557][ T5644] ? sget_fc+0x9ce/0xad0 [ 125.232832][ T5644] ? __cfi_set_anon_super_fc+0x10/0x10 [ 125.238467][ T5644] get_tree_nodev+0xcb/0x170 [ 125.243103][ T5644] ? __cfi_ovl_fill_super+0x10/0x10 [ 125.248670][ T5644] ovl_get_tree+0x20/0x30 [ 125.253040][ T5644] vfs_get_tree+0xa1/0x290 [ 125.257553][ T5644] do_new_mount+0x251/0xb40 [ 125.262104][ T5644] ? security_capable+0xcf/0xf0 [ 125.267011][ T5644] path_mount+0x688/0x1050 [ 125.271488][ T5644] ? putname+0x113/0x150 [ 125.275823][ T5644] __se_sys_mount+0x2bd/0x480 [ 125.280665][ T5644] ? __x64_sys_mount+0xf0/0xf0 [ 125.285471][ T5644] ? __se_sys_chdir+0x1ba/0x290 [ 125.290407][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.295658][ T5644] ? fpregs_restore_userregs+0x11d/0x260 [ 125.301388][ T5644] __x64_sys_mount+0xc3/0xf0 [ 125.306022][ T5644] x64_sys_call+0x2021/0x2ee0 [ 125.310796][ T5644] do_syscall_64+0x58/0xf0 [ 125.315253][ T5644] ? clear_bhb_loop+0x50/0xa0 [ 125.320547][ T5644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.326521][ T5644] RIP: 0033:0x7f64e138e9a9 [ 125.331139][ T5644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.351036][ T5644] RSP: 002b:00007f64e21b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.359553][ T5644] RAX: ffffffffffffffda RBX: 00007f64e15b6080 RCX: 00007f64e138e9a9 [ 125.367596][ T5644] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 125.375596][ T5644] RBP: 00007f64e1410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 125.383628][ T5644] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 125.391748][ T5644] R13: 0000000000000000 R14: 00007f64e15b6080 R15: 00007ffe306dd8f8 [ 125.399805][ T5644] [ 125.402845][ T5644] ---[ end trace 0000000000000000 ]--- [ 125.408637][ T5644] ------------[ cut here ]------------ [ 125.414197][ T5644] WARNING: CPU: 1 PID: 5644 at fs/dcache.c:774 dput+0x3cd/0x510 [ 125.421931][ T5644] Modules linked in: [ 125.425854][ T5644] CPU: 1 UID: 0 PID: 5644 Comm: syz.2.1818 Tainted: G W 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 125.441055][ T5644] Tainted: [W]=WARN [ 125.444918][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.455122][ T5644] RIP: 0010:dput+0x3cd/0x510 [ 125.459780][ T5644] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 33 55 99 ff <0f> 0b e9 9c fe ff ff e8 27 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 125.479444][ T5644] RSP: 0018:ffffc9000f11f3b0 EFLAGS: 00010246 [ 125.485544][ T5644] RAX: ffffffff81ec55cd RBX: ffff88812f255550 RCX: 0000000000080000 [ 125.493604][ T5644] RDX: ffffc90002605000 RSI: 000000000007ffff RDI: 0000000000080000 [ 125.501738][ T5644] RBP: ffffc9000f11f3e0 R08: 0000000000000003 R09: 0000000000000004 [ 125.509788][ T5644] R10: dffffc0000000000 R11: fffff52001e23e68 R12: 00000000ffffff80 [ 125.517828][ T5644] R13: ffff88812f2555d4 R14: ffff88812f2555d0 R15: 1ffff11025e4aaba [ 125.525829][ T5644] FS: 00007f64e21b76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.534813][ T5644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.541453][ T5644] CR2: 00007f2664583178 CR3: 0000000148cae000 CR4: 00000000003526b0 [ 125.549489][ T5644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.557577][ T5644] DR3: 00000000d88e3eb2 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 125.565581][ T5644] Call Trace: [ 125.569015][ T5644] [ 125.571978][ T5644] path_put+0x3d/0x70 [ 125.575985][ T5644] dentry_release+0x53/0xb0 [ 125.580559][ T5644] ? __cfi_dentry_release+0x10/0x10 [ 125.585837][ T5644] __dentry_kill+0x22b/0x5f0 [ 125.590485][ T5644] ? lock_for_kill+0xa7/0x230 [ 125.595200][ T5644] dput+0x3f2/0x510 [ 125.599062][ T5644] path_put+0x3d/0x70 [ 125.603095][ T5644] dentry_release+0x53/0xb0 [ 125.607718][ T5644] ? __cfi_dentry_release+0x10/0x10 [ 125.613014][ T5644] __dentry_kill+0x22b/0x5f0 [ 125.617667][ T5644] ? lock_for_kill+0xae/0x230 [ 125.622470][ T5644] dput+0x3f2/0x510 [ 125.626333][ T5644] ovl_workdir_create+0x2bf/0x750 [ 125.631406][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.636667][ T5644] ? ovl_statfs+0x2d0/0x2d0 [ 125.641228][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.646035][ T5644] ? _raw_spin_unlock+0x45/0x60 [ 125.651108][ T5644] ? mnt_want_write+0x321/0x510 [ 125.656003][ T5644] ovl_get_workdir+0x328/0x1650 [ 125.660919][ T5644] ? ovl_fill_super+0x36f0/0x36f0 [ 125.665981][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.671209][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.676014][ T5644] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.681313][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.686516][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.691430][ T5644] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.696900][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.702073][ T5644] ? up_read+0x26/0x1d0 [ 125.706319][ T5644] ? _raw_spin_unlock+0x45/0x60 [ 125.711237][ T5644] ? ovl_inuse_trylock+0xbd/0x110 [ 125.716360][ T5644] ovl_fill_super+0x133f/0x36f0 [ 125.721259][ T5644] ? xas_nomem+0x71/0x2d0 [ 125.725613][ T5644] ? ida_alloc_range+0xa12/0xa50 [ 125.730739][ T5644] ? __cfi_ovl_fill_super+0x10/0x10 [ 125.735980][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.741330][ T5644] ? mutex_unlock+0x8b/0x240 [ 125.745956][ T5644] ? __cfi_mutex_unlock+0x10/0x10 [ 125.751040][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.756241][ T5644] ? _raw_spin_lock+0x8c/0x120 [ 125.761218][ T5644] ? sget_fc+0x9ce/0xad0 [ 125.765482][ T5644] ? __cfi_set_anon_super_fc+0x10/0x10 [ 125.770997][ T5644] get_tree_nodev+0xcb/0x170 [ 125.775633][ T5644] ? __cfi_ovl_fill_super+0x10/0x10 [ 125.780896][ T5644] ovl_get_tree+0x20/0x30 [ 125.785264][ T5644] vfs_get_tree+0xa1/0x290 [ 125.789765][ T5644] do_new_mount+0x251/0xb40 [ 125.794613][ T5644] ? security_capable+0xcf/0xf0 [ 125.799613][ T5644] path_mount+0x688/0x1050 [ 125.804159][ T5644] ? putname+0x113/0x150 [ 125.808487][ T5644] __se_sys_mount+0x2bd/0x480 [ 125.813469][ T5644] ? __x64_sys_mount+0xf0/0xf0 [ 125.818314][ T5644] ? __se_sys_chdir+0x1ba/0x290 [ 125.823248][ T5644] ? __kasan_check_write+0x18/0x20 [ 125.828445][ T5644] ? fpregs_restore_userregs+0x11d/0x260 [ 125.834115][ T5644] __x64_sys_mount+0xc3/0xf0 [ 125.838764][ T5644] x64_sys_call+0x2021/0x2ee0 [ 125.843575][ T5644] do_syscall_64+0x58/0xf0 [ 125.848042][ T5644] ? clear_bhb_loop+0x50/0xa0 [ 125.852850][ T5644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.858818][ T5644] RIP: 0033:0x7f64e138e9a9 [ 125.863260][ T5644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.882926][ T5644] RSP: 002b:00007f64e21b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.891428][ T5644] RAX: ffffffffffffffda RBX: 00007f64e15b6080 RCX: 00007f64e138e9a9 [ 125.899474][ T5644] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 125.907510][ T5644] RBP: 00007f64e1410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 125.915505][ T5644] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 125.923560][ T5644] R13: 0000000000000000 R14: 00007f64e15b6080 R15: 00007ffe306dd8f8 [ 125.931618][ T5644] [ 125.934653][ T5644] ---[ end trace 0000000000000000 ]--- [ 125.941946][ T5644] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 125.951379][ T5644] overlayfs: maximum fs stacking depth exceeded