last executing test programs: 3m30.79077147s ago: executing program 1 (id=255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0x5]}, 0x0, 0x0, 0x8) io_setup(0x2, &(0x7f0000000000)=0x0) r2 = eventfd(0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r2, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3df5, 0xffffffffffffffff, &(0x7f0000000080)="753b7a556f37bef3ce7a1d7bf1042dafc22e7306337d8f188e78adf9f770a70d68e8", 0x22, 0x0, 0x0, 0x1, r2}]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0x5, 0x1a, 0x1, 0x0, 0x7f, 0x3, 0x40, 0x5, 0x7f, 0x3, 0x5, 0x2, 0x0, 0x0, 0x1ff, 0xc, 0x1b, 0x4, 0x6, '\x00', 0x8, 0x6}) r7 = socket(0x80000000000000a, 0x2, 0x6) sendto$inet(r7, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0x2, 0x4e26, @local}, 0x10) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="697ea79857c8dd7ed9066138a7ce6f9ef399f27dcd33e40678cdfd9a509b56019a7614f933d4822d67e71815", 0x2c, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) restart_syscall() ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f00000000c0)={0xa4, 0x0, 0x1}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x4, 0x3, 0x4, 0x6, 0x6, 0x3, 0x70, 0x50, 0x9, 0x7, 0x5, 0x8, 0x45, 0x7, 0x4, 0x79}}) 3m29.929161513s ago: executing program 1 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x8, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x800) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x397512bb09a18081) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r1, 0xffffffffffffffff, 0x0) 3m29.822658745s ago: executing program 1 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/dev_snmp6\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) mmap(&(0x7f00004c9000/0x2000)=nil, 0x2000, 0x27fffff, 0x4002011, r2, 0x0) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 3m29.822436505s ago: executing program 1 (id=282): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) r2 = dup3(r1, r1, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) 3m29.804468265s ago: executing program 1 (id=283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket(0x10, 0x80002, 0x2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc080}, 0x40048010) 3m29.770858826s ago: executing program 1 (id=284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) r2 = getpid() prlimit64(r2, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003021000082505a1a44000030109023b00010104909c09040000030206004d052406000005240037090d240f010900000006000900080905820210000e"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000600), 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x5, 0x486, 0x0, {}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "3ad26e6b434a5fd6"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES64=r3, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000c00249ec0000b561245f527b661d545ee7"], 0x48}}, 0x4048880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.682793177s ago: executing program 32 (id=284): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) r2 = getpid() prlimit64(r2, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003021000082505a1a44000030109023b00010104909c09040000030206004d052406000005240037090d240f010900000006000900080905820210000e"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000600), 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x5, 0x486, 0x0, {}, {}, {0x2, 0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "3ad26e6b434a5fd6"}}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x40000) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES64=r3, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000c00249ec0000b561245f527b661d545ee7"], 0x48}}, 0x4048880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.293128066s ago: executing program 4 (id=675): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket(0x2a, 0x3, 0xff) syz_usb_connect(0x2, 0x24, &(0x7f0000000ac0)={{0x12, 0x1, 0x300, 0x39, 0xa6, 0x97, 0x20, 0x7b4, 0xf02, 0x5370, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x94, 0x3, 0x10, 0x7f, [{{0x9, 0x4, 0x91, 0x8, 0x0, 0x2, 0x6, 0x0, 0x5}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async, rerun: 32) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) (async) getdents64(0xffffffffffffffff, 0x0, 0x40) (async) close(r2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0xa5) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000e3ff6d6179"]) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r0, 0x0) mremap(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000703000/0x4000)=nil) getpid() 3m6.276707296s ago: executing program 4 (id=676): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c06, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) (async) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x2000000) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 3m6.108885659s ago: executing program 4 (id=677): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x2, 0x3, 0x2007, 0x10000000000009}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_fuse_handle_req(r1, &(0x7f0000002240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r3 = gettid() fcntl$lock(r0, 0x26, &(0x7f0000000380)={0x1, 0x3, 0x8, 0x81, r3}) keyctl$join(0x1, 0x0) ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000300)={{r4}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, 0x0, &(0x7f0000000000)) mount$binderfs(&(0x7f0000000340), &(0x7f0000000280)='./binderfs2\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x2, 0x1, &(0x7f0000000080)=""/167, &(0x7f0000000180)=""/186, &(0x7f00000002c0)=""/106, 0xf000}) 3m6.107153469s ago: executing program 4 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000841}, 0x8800) 3m6.060790719s ago: executing program 4 (id=679): futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xc9701, 0x0) write(r1, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d377b8de28339830b955ae18d346babd288571ec8c5c53f287a703be84eac0a4f3011e2b2ee6ac5e56ce93b6c70971ca9203c34159559be", 0xfffffdbc) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) r2 = syz_open_dev$loop(&(0x7f0000000c40), 0x8, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000d40)={0x1, 0x0, 0x98, &(0x7f0000000c80)={0xffffffffffffe2ef, 0x401, 0x9}}) creat(&(0x7f0000000fc0)='./file0\x00', 0x1c2) close_range(r0, 0xffffffffffffffff, 0x0) 3m5.896787902s ago: executing program 4 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r0, &(0x7f0000000e80)=ANY=[@ANYRES16=r0], 0xfffffe57) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008010}, 0x24040800) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x0, 0x18, {0x10, @bearer=@l2={'eth', 0x3a, 'wlan1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000400)={r6, 0x1, 0x6}, 0x10) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x40) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f00000002c0)=0x7fff, 0x4) (async) userfaultfd(0x1) sendfile(r2, r1, 0x0, 0x7ff) 3m5.847574783s ago: executing program 33 (id=681): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r0, &(0x7f0000000e80)=ANY=[@ANYRES16=r0], 0xfffffe57) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008010}, 0x24040800) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x0, 0x18, {0x10, @bearer=@l2={'eth', 0x3a, 'wlan1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) (async, rerun: 32) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904"], 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000180)='`', 0xcc, 0x0, &(0x7f0000000240)={0x6, 0x0, r6, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) (async) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000400)={r6, 0x1, 0x6}, 0x10) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x40) (async, rerun: 64) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) read$FUSE(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x8, &(0x7f00000002c0)=0x7fff, 0x4) (async) userfaultfd(0x1) sendfile(r2, r1, 0x0, 0x7ff) 1m57.255344576s ago: executing program 0 (id=2083): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) socket$igmp(0x2, 0x3, 0x2) 1m57.254789796s ago: executing program 0 (id=2085): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ffffff8000"/108], 0x16c}}, 0x0) 1m56.950738221s ago: executing program 0 (id=2100): syz_open_dev$usbmon(&(0x7f000000a240), 0x6, 0x8001) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) socketpair(0x18, 0x6, 0x4, &(0x7f0000000300)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) poll(&(0x7f0000000040)=[{r0}, {r0, 0x4210}], 0x2, 0x4) 1m56.930218452s ago: executing program 0 (id=2101): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setresuid(0xee01, 0xee01, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x1}, 0x4) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x19, "0062ba7d820000a75e0000000000fcff00"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x44) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r11 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000340)={"9cdaa2a0aa8cfb4d0173eefb9af88b141ed8e62694d7e84cbf9743f47c9dee917a3514ccca7d219b0e886e1e2e89683aa80c1efe79fa59c15f6ac66859ae978095e19737898dfd774466d570a122ff880fd68ff048de4d2ea071ec705a792708b7535ec97b13093675644df118f24df25732a0f0c7d10563f575a3fd471fadf1cd94dbaea963d9446bef46f4a9ca041af483ac4802faaa6caa23eefa3f86649413975226a593f825aae4bee7a4c5fd95c20cdb306e29d4662a99c1eb0c0c9a1dd57c7773bb1e1e1f2b248e49f32b04cf8aa5c5324d96e3274a4a9ce8c716c2eff63ba4985081ebea8beba49b5e777d3aebfd7206988498a998d2164cb8bd39c7f31fef8c27b087341b282664f7c57312b755aa40c82baefdc1c38cfacbf540f4154ba3df0322effa6668a2e8a8696d24fe69bd5b39a31c3436c52a460c03f84883a9658bf0482710d92ea0ab28848ebd15b091b7a83b4c7514f9fec42160efa471d086b5ae5c9c103e685d16e346653936006c002ddb045779003d51d7796a7a64e9a8ba9c23439973d9c1706b14b162917a4800bda5743822d8297a00be8e808427b8353c94e833f6c7e6872b63803e1b61f0d334d6eb81ae8154cc4cfc9f518651394b24771ede3c6444c92ddeaa2158b8cf263f267122391875d9a0e7588013cd7e8f4057338e576ac2794f19c34b7f69619f2cd00b35024cf1a2ac1364dfc001315ec3278d252600d3829be839d8be743255811c570e4d58fb3f02e52777f1f735062fd8e820bb93cbb1bdc485d2c64d5289ea7ee06b60b60e1209cbf8f3dae5c658031005fce2a62dd847b85ea5da7ba0c21ba53c7683cd27fe459cc82b97b7503b43a3894ee802f598bcac740e7c57f71a8d97a95ca7815cdab3d1d7e06f4acd377e4e7713dfe71f6bda40b4128783e821b4f6e5a3033a411a1e0395464328b1d28eba1db89ef849cb9cff469d571317001489c389a4e3384001536c3792792b6ce63e0c61e6fc726cbf9aeef7842741011d2ada1454df618ce9dad078b63366798a196bdc127f0c1ea4a4014d03bf15808aebc3ddb1456501ffb3add6e2d290063225f6b61ac1339667a9a826eb9c319f88978db8bfe8ece08e35060e5435e8ed749f3c8233dca1ef6a06b4b21db62a829c12ff336b577b93c780b37c0d6be6a20ad6696c5704516d898605e3f14ceb5fdc9cba9dcef8f3e696808052c5c908c872a2da579fa9321ec4b9af7f8042f71866f1a14b1174fdc18efda18a592037fa3d7d920fc54a6a044421f6d6492da606db9a83aed90a2d2b6fd38838bbed0ed96adc07bfd1a4e56a9fadc0aaf7d5df5a0edb2f31b29cbc6b2b8ca4b86eddc9c65db19a01f102f91b87668da238fe7a5848eb958562234e49e6291553e12ce1de2561c34eed154fcca09a3d61f2fe34241fff518db53bf90cdd322586"}) getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mmap$KVM_VCPU(&(0x7f0000fe9000/0x3000)=nil, r11, 0x1000006, 0x13, r10, 0x0) syz_kvm_setup_cpu$x86(r2, r10, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x22, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1m56.876890493s ago: executing program 0 (id=2102): syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') read$FUSE(r1, &(0x7f0000001040)={0x2020}, 0x2020) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x7, 0x0, 0x53eb}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000006a}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xea143, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x94) 1m56.876541463s ago: executing program 0 (id=2103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-!\'(/{]-!}!'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_role={'subj_role', 0x3d, '!-}\xe5+\\'}}, {@dont_hash}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 1m41.879488815s ago: executing program 34 (id=2103): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x3b, 0x5a, 0x3d, 0x40, 0x1de1, 0xc102, 0x56c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc0, 0xc, 0x40, 0xe, [{{0x9, 0x4, 0xa2, 0x5, 0x0, 0xb1, 0x5, 0xc, 0x14}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f05000b"]}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '-!\'(/{]-!}!'}}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_role={'subj_role', 0x3d, '!-}\xe5+\\'}}, {@dont_hash}]}}) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 1m34.16466656s ago: executing program 5 (id=2490): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x806, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x5}], 0xfd97, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b59e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309dd0d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0xfffffffffffffe7d) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "35931506993479e9", "47e059d8f4f0d675d50fd267f4dd300f", "468a3591", "5ce5b685f4df603e"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) 1m33.63599053s ago: executing program 5 (id=2499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8) fallocate(r1, 0x58, 0xa, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m33.62380956s ago: executing program 5 (id=2500): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x455e19bc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) syz_open_dev$usbfs(&(0x7f0000000500), 0x4e9, 0x10000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000005c0)=0xa, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101880, 0x0) r4 = dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000800)) r5 = syz_usb_connect$uac1(0x3, 0xd1, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xc8, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x9}, [@selector_unit={0x6, 0x24, 0x5, 0x1, 0x8, "cf"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x840a, 0x4, "c90f"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x5, "b2aa0b"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xffff, 0x3, "bc"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0x9, 0x10, 0xf2, 0xf}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xff, 0x7c439226c746b8b}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0xa, 0xf1, "", "3c9407"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x9, 0xfa, "4aa9e457"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x9, 0x80, {0x7, 0x25, 0x1, 0x2, 0x7, 0xafc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x6, 0x80, "4bd3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x4, 0xa9, {0x7, 0x25, 0x1, 0x1, 0x5, 0x48}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x2, 0x2, 0x5, 0x20, 0x9c}, 0x1f, &(0x7f0000000980)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x1, 0xf4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0xb4, 0x1, 0x5, 0x0, 0xd46, [0xff3e80]}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x5807}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x0, 0xa, 0x98, {0x98, 0x31, "2387ebe58360a576b5256e05a4942b7f054231c9e158316153a6bcb2d98816b1380497f0445b94c024b66d8dfd0bceea40c7010b79cfe4ac332998139344e74bcf53252d329f900b3b217c906d34ecac79c221d556e3470821d4a26867aa609043519f2cfd1a210ed77ce4645063f524d05281bbca1dc1a20345550407dc631574d5b0b0cb45c240778d59ff5a2b1ad9ab781b745104"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x40, 0x9, 0x20, "0294d5d50ab808335814b272d5ec17ed7b213b144de4c928b4349afe37e3ba46"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "ecb4"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, '8M}'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "13b3ee"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "b9c7935e"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "cb9ed1"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000e00)={0x20, 0x2, 0x5e, {0x5e, 0x7, "9bfadc9bbe96cf7007dc48e77cf847f9f01e439d3acdb6d4b8a38a442afa2ae921a2e19e8a906dbfef613f4c5893f1b86a809a5532d7afb928223e752ffb67154265664aa9b92474470c7e6fe91b4ad9f1127db5f0f68f006caa3928"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x1c, &(0x7f0000000f00)={0x20, 0x17, 0xa9, "1e36d81616d885d828616f604c09a44dd524fe4284004836ec551a5de8e12f5ea3b7290166798f822ef2b771e001915e020c0d217c8597a1f0ccb4ba6403bfcdfa251f654d04cd44f40b6a90587a37bf6a7e16496f7e7b11178911111079047ad35131715f575ca2beae75576a63bdaf9c170525fcc5f503193fa92593a8fca8ad5b743f069a5abf08bff98b21ce0a35f9ec8d02c097bef5a39f2d1f7ce09eedb181531afe118cb04d"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r4) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f00000015c0)={0x3, 0x6}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001600)={0x1, 'dummy0\x00', {}, 0x2}) syz_usb_connect$uac1(0x0, 0x100, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff2, 0xf8}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x574b161f0c6f0b92, 0x2, "58db0d6344"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x7, 0x0, "a9861ba564ea15"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2ad3, 0x4, 0x0, "8def7a93c5dd9174f2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x9, "e9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0xf0, 0x8, "d4ae"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x3, "6de6b69167d2fb"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x0, 0x40, "02b8c1e0935d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x5, {0x7, 0x25, 0x1, 0x1, 0x1, 0xa4b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x101, 0x8, 0x6}, @as_header={0x7, 0x24, 0x1, 0xf9, 0x2, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0xff42, 0x45, "a57e88f01f8a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x35, "7c321f16743af48db4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x3d, 0x0, {0x7, 0x25, 0x1, 0x0, 0x56, 0x7}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x200, 0x44, 0x80, 0xff, 0x40, 0x3}, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x827}}, {0xc1, &(0x7f0000001880)=@string={0xc1, 0x3, "6374e01548cdbc81e3978ee38cee2973e382094de868fe5aac4be760dfe65555aafa3caafad1f8aed9a06422a407deb3d1d829ab9beb216ae43c1fb9ca84800f08fb25def6557adb6b1e900279e03e0b8db1fb0e6e9b03eec1d8e5a9f6345e2ec0989d7bd65386bbdb391499258b707df32ac685a8b8e8ecf66f1c2f9a5b8a1c6d1a5abb51095024a90c9ec27ff6d9d09523f5b84c4f4050aec903ca37d9f29b6dadaaf7857089d1fc8d7e45591d5a6c0832c92c3e378bc31da1136412c158"}}, {0xb2, &(0x7f0000001980)=@string={0xb2, 0x3, "517fc6dc7e0d546b513cc94f3cb938bb99ff721f1fdb32b0fcc437a123cf8db5d03d83f9ea17993139418fad43a0941d5de2485673b69522ce0f9a54cdefdf705a8a2d67f168f8266db7724a83877ae27575b70405bb751f2f58141b6546df2a6d76c5a2f56b035664c15d5328bd4510588bcd5034452e5e5b58966584b257516268dc8e82a7fb47151ea0837ceeb2b745c8513d99bd47d0bbe9790e48db3362550fc03dbac390a78a89911047bc7969"}}]}) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r4) 1m32.988819491s ago: executing program 5 (id=2511): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000240)=[0x38b, 0x6, 0x58, 0x6, 0x7fffffff, 0x7, 0x10, 0x4]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', 0x0, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000240)=[0x38b, 0x6, 0x58, 0x6, 0x7fffffff, 0x7, 0x10, 0x4]) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) fstat(r0, &(0x7f0000000140)) (async) chown(&(0x7f0000000000)='./file0\x00', 0x0, r3) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x1000000}], 0x0, 0x0, 0x0}) (async) 1m32.988190991s ago: executing program 5 (id=2512): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x1000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) time(&(0x7f0000000000)) setuid(0xee00) (async) setuid(0xee00) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$inet6(0xa, 0x2, 0x3a) (async) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = creat(0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x40, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x12, 0x14, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) connect$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x1, @empty}}, 0x1e) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m32.877789933s ago: executing program 5 (id=2513): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) shutdown(r1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r2 = syz_pidfd_open(r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r3, 0x0, r3, 0x0, 0x2, 0x99) ppoll(&(0x7f0000000080)=[{r2, 0x2000}, {r3}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={[0x5c]}, 0x8) setns(r2, 0x2000000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m32.825774044s ago: executing program 35 (id=2513): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() r1 = socket(0x2, 0x1, 0x0) listen(r1, 0x0) accept$inet6(r1, 0x0, 0x0) shutdown(r1, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r2 = syz_pidfd_open(r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) copy_file_range(r3, 0x0, r3, 0x0, 0x2, 0x99) ppoll(&(0x7f0000000080)=[{r2, 0x2000}, {r3}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={[0x5c]}, 0x8) setns(r2, 0x2000000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m18.072844563s ago: executing program 6 (id=2792): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000002b80)={&(0x7f0000001580)={0xa, 0x4e21, 0x6, @mcast2, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1288}, 0x20000001) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@verity_require}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 1m18.070476963s ago: executing program 6 (id=2793): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') lseek(r0, 0x43, 0x0) getdents(r0, 0x0, 0x51) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f00000000c0)=0x8000, 0x4) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 1m18.064298763s ago: executing program 6 (id=2794): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) 1m18.046952323s ago: executing program 6 (id=2795): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket(0x10, 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(r0, 0x0, 0x0, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsm_set_self_attr(0x69, &(0x7f0000001940)=ANY=[@ANYBLOB="65000022b8c8bf000a00000000000000250000000000000005000000000000000a5cb59ce8"], 0x25, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f00000019c0)=""/109, 0x6d}], 0x1, &(0x7f0000002880)=[@rights={{0x10}}], 0x10}}], 0x4, 0x400000a0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80083, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e5aca830000000028a21ff831e58874d3a2b502000000a8d8003681194a68375fc8ca3e2175eb10e66fd63f18eaae456bf239f96ff4aadda76056aabad238939a65923d8c4c323cbb232e71e8415fb0ea65b6f5f85e0a2dd19d337bdd20ce41bf8081144039d91e231057b768ab78b07c84dddd3c26539b66f8f440fe0b3dd0a8f26e59a6399f342e5312adfe18b276fcd29066d7c3d768e9519a2892fef5d4a778cb"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f00000002c0)={0x2, "b389"}) ioctl$HIDIOCSFLAG(r5, 0x4004480f, &(0x7f0000000000)=0x3) fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) lseek(r1, 0x4, 0x0) 1m17.455930983s ago: executing program 6 (id=2800): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)={0x12b4, 0x0, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x8}, 0x1, 0x1, 0x7, 0x8, 0x7, 'syz1\x00', "a8fc250c74788540b17022ecc0b33a3648010916e39e849c730b25b10dddd899", "eddb005bd9e2df56fa6c585adc973669908259a660b12b3ee48ee29ba782cac3", [{0x8, 0x4, {0x3, 0x7}}, {0xa9a, 0x5, {0x1, 0x8}}, {0x9, 0x44ec, {0x1, 0x8}}, {0x6, 0x3, {0x2, 0x5}}, {0xf8, 0x3, {0x0, 0x4}}, {0x4, 0x9404, {0x3, 0x100}}, {0x0, 0x17fc, {0x3, 0xaa}}, {0x5, 0x7, {0x2, 0xb0a5}}, {0x6, 0x6, {0x3, 0x400}}, {0x80, 0x2, {0x2, 0x8}}, {0x8000, 0x1000, {0x0, 0x8}}, {0x8fd, 0x0, {0x2, 0x100}}, {0x2, 0x7ff, {0x3, 0xe818}}, {0x9, 0x1, {0x2, 0x7f}}, {0x200, 0x8, {0x1, 0x1}}, {0x3, 0x3, {0x3, 0x1}}, {0x4, 0x7, {0x3, 0x2}}, {0x7, 0x2, {0x2, 0x7}}, {0x0, 0x8, {0x1, 0x3}}, {0x6, 0x0, {0x2}}, {0x4, 0xffff, {0x3}}, {0x15f4, 0x71, {0x2, 0xffff6529}}, {0x1, 0x1, {0x1, 0x5}}, {0x7f, 0x6, {0x0, 0x80}}, {0x1, 0x3, {0x2, 0x200000}}, {0x387b, 0x7, {0x1, 0x1000}}, {0x7, 0xf5f5, {0x2, 0xfff}}, {0x8, 0xe7d9, {0x2, 0x8802}}, {0x1ff, 0xfffa, {0x0, 0x8}}, {0xfff5, 0x4b8f, {0x2, 0x8}}, {0xfff, 0x1f9, {0x3, 0x101}}, {0x6, 0x7fff, {0x0, 0xe}}, {0x3, 0x9, {0x2, 0x7fffffff}}, {0x9b6b, 0xb, {0x0, 0x1}}, {0x4, 0x4, {0x0, 0x8}}, {0x9, 0xfffc, {0x0, 0xd146}}, {0x7, 0x0, {0x3, 0xffff0000}}, {0x7, 0x9, {0x0, 0x5}}, {0x7ff, 0x1353, {0x2, 0x200}}, {0x1, 0x0, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x3, 0x69, 0x8001, 0x0, 0xa, 'syz0\x00', "e2b68ddb6ee28d958e3839b2c1d1f0e5be5a6443dcae38cae0931f68f94ed48d", "a54eca7d5fae55f663c521dfe78b2590eee9a1c8d7a96b8879845057d64e5ee7", [{0x6, 0x6, {0x0, 0x3}}, {0xe1, 0xf4b, {0x1, 0x5}}, {0x1, 0x0, {0x0, 0x7fff}}, {0x6, 0x1, {0x2, 0x1}}, {0x7, 0x8, {0x2, 0x1}}, {0x7, 0xffff, {0x1, 0x7}}, {0x9, 0x7, {0x1, 0x3}}, {0xfff, 0xe, {0x0, 0x8}}, {0x6, 0x884, {0x0, 0x6f}}, {0x6, 0x5, {0x3, 0x905}}, {0x6, 0xb2b, {0x3, 0x7fffffff}}, {0x7, 0x6, {0x1, 0x10000}}, {0xfffd, 0x8, {0x0, 0x7}}, {0x81, 0xfffe, {0x0, 0x2}}, {0x1, 0x4, {0x0, 0x9}}, {0x3ff, 0x200, {0x1, 0x5}}, {0x100, 0xfff8, {0x3, 0x607}}, {0x1, 0x2, {0x3, 0xd3d}}, {0xcfc, 0x3, {0x2, 0x7f}}, {0x4, 0x1, {0x1, 0x1}}, {0x9, 0xc, {0x1, 0xe}}, {0x5, 0x0, {0x1, 0x4}}, {0x0, 0x1c00, {0x0, 0x3}}, {0x422f, 0x93, {0x3, 0x3}}, {0x4, 0x100, {0x0, 0x2d}}, {0x6, 0x1, {0x3, 0x8b5}}, {0x6, 0x8d, {0x1, 0x7}}, {0x1, 0x0, {0x0, 0x1}}, {0x9, 0x7, {0x3, 0x1}}, {0x2, 0x4, {0x0, 0x20}}, {0x9, 0x9, {0x1, 0x4}}, {0x4, 0xffff, {0x2, 0x2}}, {0xb83, 0x2fe4, {0x3, 0xe3}}, {0xebe6, 0x1, {0x1, 0xffffff00}}, {0xa6a2, 0xfffb, {0x1, 0x5}}, {0xa, 0x2, {0x2, 0x4}}, {0x9, 0x1, {0x3, 0x401}}, {0x58b, 0x100, {0x1, 0x1}}, {0x7, 0x100, {0x0, 0x8}}, {0xd37, 0x9, {0x2, 0x80000001}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x2, 0x9, 0x9, 0x4, 0x1f, 'syz1\x00', "c3bd96dfc35667df23bd18e1401c2a308cafe190fb9b2d70e92a04230902d795", "82ea77788eb8014a42a5053fcd9e3673b18fdb2fa9cb76cec87a1a09a86de7fa", [{0x9, 0xfff7, {0x2, 0x80000000}}, {0x51e, 0x9, {0x2, 0x4}}, {0x8000, 0x7fff, {0x0, 0x1}}, {0x1, 0xff69, {0x0, 0x9}}, {0x9, 0x6, {0x0, 0xb9}}, {0x0, 0x2, {0x1, 0x7}}, {0x81, 0xe694, {0x3, 0x1}}, {0x7, 0x8, {0x2, 0x180}}, {0x9, 0x9, {0x2, 0x7}}, {0x1, 0x80, {0x1, 0xc}}, {0x3, 0xf, {0x0, 0x94a}}, {0x8, 0xa, {0x2, 0x7}}, {0xfffb, 0x943f, {0x3, 0x8}}, {0x4, 0x7, {0x3, 0x7}}, {0x7, 0x200, {0x0, 0xc}}, {0x602, 0x9, {0x1, 0x4}}, {0x1, 0x5e7, {0x1, 0x1}}, {0x2, 0x1, {0x1, 0x2}}, {0x60, 0x1, {0x0, 0x2}}, {0x101, 0x7, {0x1, 0x30446450}}, {0xc0, 0xfff, {0x0, 0x6}}, {0x9, 0x8, {0x0, 0x1}}, {0x7ff, 0x6, {0x2, 0x1}}, {0x7fff, 0x9, {0x3, 0x3}}, {0x2, 0x200, {0x2, 0x4}}, {0xacb, 0x2, {0x0, 0x8}}, {0x5c7, 0x5, {0x2, 0x4}}, {0x4000, 0x8, {0x2, 0xb558}}, {0x9, 0x6, {0x2}}, {0x81, 0xa8b, {0x1, 0x2}}, {0x6, 0x9, {0x1, 0x2}}, {0xce25, 0x33, {0x0, 0x3}}, {0x6, 0x68a, {0x0, 0x3ff}}, {0x3, 0x6, {0x2}}, {0x7, 0x6, {0x0, 0x2}}, {0x1, 0x6, {0x3, 0x6}}, {0x21, 0xd836, {0x1, 0x2}}, {0x579, 0x0, {0x2, 0x8}}, {0x9, 0x100, {0x1, 0x9}}, {0x3, 0x1, {0x0, 0x7ff}}]}}}, {{0x254, 0x1, {{0x3, 0xfffffff7}, 0x2, 0x3, 0x9, 0x10, 0x0, 'syz0\x00', "b0c71b03c3e93467f3ae94d133a204f35970dfbecd189668cb66c1fe3255c1e1", "8367dc5130b9cff4325bd5d27e651596417181d0e6a1d8dfcf6a5550a3fde104", [{0x7, 0x2}, {0x200, 0x1, {0x3, 0x10000}}, {0x200, 0x1, {0x0, 0xc1}}, {0x6, 0x8}, {0x1, 0x4, {0x2, 0x1}}, {0x61d, 0x8, {0x2, 0x10000}}, {0x3, 0x3, {0x3, 0x100}}, {0x5, 0x6, {0x2, 0x4}}, {0x2fe7, 0xff, {0x2, 0x5}}, {0x6, 0x7, {0x1, 0x8}}, {0x8, 0x0, {0x3, 0x6}}, {0x5139, 0x3, {0x1, 0x314}}, {0x0, 0x6}, {0x4, 0x3, {0x1, 0xffffff7f}}, {0x8001, 0x1, {0x3, 0x5}}, {0x401, 0x9, {0x2, 0xa}}, {0x5, 0x8, {0x1, 0x32}}, {0xd45d, 0x3, {0x1, 0x6}}, {0x4, 0x4, {0x0, 0x7}}, {0x80, 0x5, {0x0, 0x401}}, {0x4, 0x2, {0x2, 0x6}}, {0x8, 0x7f, {0x1, 0x9}}, {0x6, 0x7, {0x1, 0xe8}}, {0x1b, 0x4, {0x0, 0xab14}}, {0x7, 0x87, {0x0, 0x7}}, {0xe, 0x6, {0x1, 0x2}}, {0x8001, 0x7, {0x2, 0x3}}, {0x4, 0x7, {0x3, 0x10001}}, {0x401, 0xffff, {0x2, 0x5}}, {0x9, 0x9, {0x3, 0x7fffffff}}, {0x6, 0x0, {0x0, 0x6}}, {0x4, 0x9414, {0x1, 0x8000}}, {0x80, 0x5, {0x2, 0x8}}, {0xfff, 0xfc00, {0x1}}, {0x3, 0x401, {0x0, 0x3}}, {0x8000, 0x3, {0x0, 0x3}}, {0x1, 0x3, {0x3, 0x9}}, {0x5, 0x4}, {0x1, 0x5, {0x1}}, {0x9892, 0x2, {0x2, 0x7}}]}}}, {{0x254, 0x1, {{0x0, 0x108}, 0x9, 0x5, 0x10, 0x7, 0x1, 'syz0\x00', "301907e21c1c028c73303fba627011459d3f2667ce193e7022ea96ec8ba45bba", "66bdf099e4c132c9d145d0d1a0f46577a15a5597934863e0a2faacc8ce83b4d8", [{0x9f61, 0x9, {0x1, 0x1}}, {0x9, 0x2, {0x2}}, {0x9, 0x8, {0x1, 0x1}}, {0x5, 0x9, {0x3, 0x4}}, {0x1, 0x80, {0x0, 0x1}}, {0xffc0, 0x0, {0x1, 0xffffffff}}, {0x7, 0x5, {0x2, 0x9ca1}}, {0x4fd, 0x4070, {0x0, 0x437f91fb}}, {0x6, 0xc, {0x0, 0x2}}, {0x9, 0xbab, {0x3, 0x96d2}}, {0x0, 0x5, {0x0, 0x7}}, {0x1e3a, 0x2, {0x1, 0x7262}}, {0x8, 0xb5e, {0x0, 0x10}}, {0x80, 0x6670, {0x1, 0x3}}, {0x1, 0x1ff, {0x0, 0xa}}, {0x4, 0x3, {0x3, 0x1d44def6}}, {0x401, 0x5, {0x2, 0xfffffff8}}, {0x5, 0x2, {0x3, 0x6}}, {0x10, 0x1, {0x3, 0x6}}, {0x4, 0x3, {0x0, 0x4}}, {0x5, 0x6, {0x1, 0xfffffff2}}, {0x8, 0x7, {0x3, 0x200}}, {0x5, 0x1, {0x0, 0x5200}}, {0x7, 0x390, {0x1, 0x10}}, {0x5, 0x2e, {0x0, 0x8}}, {0x6c48, 0x6, {0x1, 0x7ff}}, {0x7ff, 0x2, {0x3, 0x5}}, {0x2, 0x79, {0x1, 0x1000}}, {0x0, 0xda9, {0x1, 0x572118dd}}, {0x1, 0xffc9, {0x0, 0x5}}, {0xf868, 0x81}, {0x2, 0x609e, {0x1, 0x90}}, {0xfffd, 0x7f, {0x1, 0x9}}, {0x33, 0x416c, {0x1, 0xffffffff}}, {0x8, 0x2e, {0x3, 0x3}}, {0x3, 0x6, {0x2, 0x3}}, {0x0, 0x4, {0x0, 0x1}}, {0x6, 0x6, {0x2, 0x8}}, {0x10, 0xaf, {0x2, 0xffff}}, {0x401, 0xd000, {0x0, 0xa}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xfb, 0xff, 0x80, 0xfff5, 0x1, 'syz0\x00', "550446043af440cc1da0fb71117bd1d88e8bafb306728b6fbe6b901cbdebbae9", "9d0eb05e515ab5f15ddf9e268b9dbc6697c55c47ac3002ea80f8c343ca3fb340", [{0xfffb, 0x7fff, {0x3, 0x6}}, {0x6, 0x1, {0x0, 0xfff}}, {0x4, 0x10, {0x3, 0x8000}}, {0x5, 0x8001, {0x0, 0x1ff}}, {0xff, 0x0, {0x1, 0x8}}, {0x4a0f, 0x10, {0x2, 0x5}}, {0x7, 0x800, {0x1, 0x9}}, {0x80, 0x7, {0x2, 0xffffffff}}, {0x1, 0x2, {0x1, 0xea92}}, {0x81, 0x9, {0x1, 0x7}}, {0x3, 0x8000, {0x2, 0x8}}, {0x5, 0x6, {0x2, 0x8}}, {0x6, 0x101, {0x0, 0xfffff157}}, {0x4015, 0xffb4, {0x3, 0xae}}, {0xc22d, 0x4, {0x3, 0x6}}, {0x6, 0x6, {0x64d20438ea6ea64b, 0x546}}, {0x4, 0x5ce, {0x0, 0x2}}, {0x4, 0x7, {0x2}}, {0x9, 0xffff, {0x2, 0x7}}, {0x200, 0xbf, {0x1, 0x5}}, {0xfff, 0xbd8, {0x1, 0x5}}, {0x2, 0xffff, {0x2, 0x84}}, {0xa4b4, 0x9, {0x2, 0x8}}, {0xfffb, 0x7b00, {0x0, 0x20}}, {0x9, 0xff, {0x0, 0x60}}, {0x7, 0x0, {0x3, 0x3}}, {0x9, 0x7, {0x0, 0xffffffff}}, {0x8, 0x3, {0x1, 0xffff}}, {0x4c63, 0xf25, {0x2}}, {0x6, 0x2}, {0x3, 0x5, {0x1, 0xac321594}}, {0x2, 0xce9, {0xed17c25d665ae4fa, 0xd470}}, {0x9d1, 0x80, {0x1, 0x5}}, {0x8, 0x5, {0x3, 0xb}}, {0x9, 0x9, {0x3, 0x5}}, {0x9, 0xa6, {0x3, 0x65a}}, {0x3, 0x3, {0x2, 0xe}}, {0x5, 0xf008, {0x1}}, {0x7f, 0x10, {0x2, 0x4}}, {0x81a, 0x4, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0xe, 0x2, 0x9, 0x8, 0x24, 'syz1\x00', "beeb7f2ad005c33405449d87cdc980696827f63564c44bc053d340ed415ae85e", "fc89e735de0e26b1eac2fb4c9f172e7e33667090568c1b50afbeb3e6a9c696c8", [{0x6e94, 0x8, {0x0, 0x2}}, {0x40, 0x2, {0x2, 0x400}}, {0xaff, 0xfff7, {0x0, 0x8}}, {0x800, 0x1, {0x3, 0x7}}, {0x6, 0xd800, {0x1, 0x477}}, {0xff, 0x100, {0x3, 0xeab96a56}}, {0x8c, 0x8, {0x1, 0x10}}, {0x401, 0x1, {0x0, 0x3ff}}, {0xd, 0x5, {0x2, 0x9}}, {0xf000, 0xffff, {0x2, 0x9}}, {0x67, 0x30, {0x3, 0xa70}}, {0x7, 0xffff, {0x0, 0x5}}, {0x2b, 0x6, {0x2, 0x7}}, {0x2ec7, 0x3, {0x1, 0xffffff28}}, {0x4, 0xff, {0x3}}, {0x0, 0x1, {0x1, 0xe}}, {0x18, 0x1, {0x1, 0x1}}, {0x47, 0x5, {0x3, 0x2}}, {0xfff, 0xf7, {0x1, 0x8}}, {0x2, 0xff0f, {0x3, 0xb}}, {0x8, 0x2, {0x3, 0x7fff}}, {0x7, 0x1, {0x0, 0xe}}, {0xc, 0x40, {0x3, 0x6}}, {0x5, 0x9, {0x0, 0x9}}, {0x8000, 0x0, {0x3, 0x2}}, {0x4b89, 0xf6a, {0x2, 0xfff}}, {0x3, 0x5bd, {0x1, 0x10000}}, {0xfffa, 0x4, {0x1, 0x7}}, {0xe, 0x3cd, {0x3, 0xe099}}, {0x8000, 0x0, {0x1}}, {0x9, 0xffff, {0x1, 0x2}}, {0x0, 0x7, {0x2, 0x1}}, {0x6, 0x101, {0x1, 0x200}}, {0x1, 0xb, {0x0, 0x3}}, {0x8, 0xe0, {0x3, 0x7}}, {0x8, 0x9, {0x0, 0x8}}, {0x10, 0x6, {0x3, 0x5}}, {0x7f, 0xb6, {0x3, 0xb7}}, {0x80, 0x7, {0x3, 0x6}}, {0xa805, 0x4, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x10, 0xd, 0x6, 0x8, 0x15, 'syz1\x00', "579795a9f4f6927e2babb673e027c7b2e79b72c4c43cedff744e296e51853a9a", "6e52ec9a92d612ed87d6289415ed1d311fe5275881bc5c5c9778283b10c26621", [{0x9, 0x6, {0x0, 0xfffffff9}}, {0xf, 0x10}, {0x9, 0x7, {0x2, 0x3074}}, {0x3, 0xe, {0x0, 0x6}}, {0x211c, 0x6, {0x0, 0x6}}, {0x9, 0x46d4, {0x1, 0x3}}, {0x1, 0xfffd, {0x1, 0x5}}, {0x5, 0x7fff, {0x1, 0x8}}, {0x1ff, 0x257, {0x1, 0x2}}, {0xa9, 0xa, {0x1, 0x800}}, {0xfff, 0xeb, {0x1, 0x1}}, {0x4, 0x80, {0x3, 0xb4}}, {0xa, 0x8, {0x1}}, {0x0, 0x10, {0x2, 0x4}}, {0x6, 0x2, {0x0, 0x7}}, {0xecf3, 0x8, {0x2, 0x2}}, {0x0, 0x4, {0x1, 0x8001}}, {0x6, 0x3, {0x2, 0x4}}, {0x64dd, 0x8, {0x3, 0x6}}, {0x6, 0x3, {0x3, 0x80000000}}, {0x0, 0x1ff, {0x0, 0x57bb}}, {0x0, 0x101, {0x3, 0x6}}, {0x400, 0x0, {0x0, 0xfffffff9}}, {0x2, 0x6000, {0x3, 0x7}}, {0x0, 0x0, {0x2, 0x3}}, {0x1, 0x1, {0x3}}, {0xfff7, 0x9, {0x64817f8b8280441a, 0x6}}, {0xf, 0xc1, {0x3, 0xf88a}}, {0x6, 0x83e, {0x0, 0x2000000}}, {0x26b9, 0xb, {0x3, 0x7}}, {0x8, 0x0, {0x1, 0x4}}, {0x2, 0x400, {0x3, 0x6}}, {0x8, 0x1, {0x2, 0x6}}, {0x33c, 0x7d6, {0x1, 0x6}}, {0x2, 0x7ff, {0x3, 0x1}}, {0x3, 0x8, {0x0, 0x8000}}, {0x1, 0x0, {0x0, 0xffffffff}}, {0x8001, 0x1fc, {0x3, 0xe8}}, {0x8, 0x8ee, {0x1, 0xffffff00}}, {0x7, 0x6c4d, {0x3, 0x4}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x40054) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r2) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000015c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000001800)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001640)={0x17c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e6f5fdfeb629260b109b459df3a21bc"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f0f1b24b10a788ff2bfd2f3ba4d9058"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c77c439940255f80b7f7baa3e3af7429e1f59b5519dd7c0faae7315b0e4dfe7d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x24}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xdc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "aa82e6c44ddf53645f80da087a2486c26b52481ef223c850210e3ead7f6cf4ae"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "39afadffe65e197d2ea0cad7e1e55fef"}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "887f4df5acb2f3edb9a610960643e42d"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x15}]}, 0x2c}}, 0x11) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001980), r2) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x44, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), r2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r9, &(0x7f0000001c00)={&(0x7f0000001b00), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, r10, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x64, r12, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x40) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001dc0), 0x800, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r13, 0x800448d2, &(0x7f0000002340)={0x9, &(0x7f0000001e00)=[{}, {@none}, {@fixed}, {@none}, {@fixed}, {@none}, {@none}, {@none}, {@fixed}]}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r9, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x70, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_io_uring_complete(0x0) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002500), r13) sendmsg$SEG6_CMD_GET_TUNSRC(r14, &(0x7f0000002600)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x7c, r15, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3589}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x30b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x3]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000045) 1m17.360911325s ago: executing program 6 (id=2803): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x61) 1m17.312381606s ago: executing program 36 (id=2803): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x61) 1m8.573371859s ago: executing program 8 (id=2964): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x182881, 0x0) mmap(&(0x7f000054c000/0x1000)=nil, 0x1000, 0x3000001, 0x22051, r0, 0x3c3f4000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000300), 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x28, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(r5, 0x802c542a, 0xffffffffffffffff) splice(r4, 0x0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x62, 0xc) 1m8.480832381s ago: executing program 8 (id=2966): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) getsockopt$sock_int(r1, 0x1, 0xa, 0x0, &(0x7f00000015c0)) socket$inet6(0xa, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000140)={0x2c, 0x78097926f6234a39, 0x0, 0x3a}, 0x10) ioctl$TCFLSH(r4, 0x540b, 0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 1m8.166354876s ago: executing program 8 (id=2970): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000100)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x64, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x598523812f34064c}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x64}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000180)=[@request_death], 0x0, 0x0, 0x0}) 1m8.165213146s ago: executing program 8 (id=2971): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) memfd_create(0x0, 0x3aaea528bbe6e4bc) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.103244377s ago: executing program 8 (id=2975): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000006c0)="fac28d000090e9c3aee5dbe57493388f51e611ceb53a5c9866a207ace2b5957fe5ac95a01f7ceb22c6198cb55a91489a9c06457941f270ea9982947c9f2bbe18232844eeab6796f3220606366b66adcdbdaa9d52c6bdc16d311e5da98997031d27dcad941eb670e53fcb75a7c4b9ba6a3027cbbaa9b9fa55ff178181b6d798bbcba0a9195802c8b4c0b6590bd04b22a0e8e7ab058ff877c48c419da077efcb78c2f9fd0359ac3222b9078ad5365c69da29e4c712ba014525d404f85d79d56895b834213eb185136ca623490955eb0a9d6a8447315a2377d1d474c43c228c42f9608d36bf207aae7096c63b9b873c1cb5dd9059914ff4ffa17a05126910e50338080000000000000067474c83564a2b1fbbf11231008bbf11bfa4b75a597b2018ca8c0f36378b62628d59a76c44b1414a7cd5b0a02ed90f9f4cfe10501edbaf114259652efa99a4319211eb0364f6b8224c1da83ae83fd55be72530949197603467e45deed2d2cfd6f74cd14b8d968555d554a623df2069f9b45856de29a5fd334c86c46a57e445db25188ebcb6289779c760ff8eef66afae0cf848c754b80a5fce558bd95963a4d79eaf71304529dea4b28d1a59f1bd069b2e057af846d557a34e48e72f63d0aa5a259647b7ee2f52518308f9f1cad379614a405953ab8c4afe5a48ace74fb163f729fc4949537d6f98c3adc8771d2b1b9014d2b35ebd7dbe24f39adbcace50a90192a5464fa79ddacff779012284a398ac91f4430f8bb902f736c712bc69b9198b7991b3acfd73a16fa7f44c7859b28e35a8ca5c0ac07f824572", 0x241}], 0x1}}], 0x1, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) 1m8.016918289s ago: executing program 8 (id=2979): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40a03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000000000080002", @ANYRES32], 0x24}, 0x4, 0x700000000000000}, 0x8850) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), 0x4) 1m7.92028234s ago: executing program 37 (id=2979): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40a03, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="4d7e00000000fbdbdf252a00000008002f0000000000080002", @ANYRES32], 0x24}, 0x4, 0x700000000000000}, 0x8850) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000007980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x75, 0x2, 0x100, 0xffffffff, 0x4000000}) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), 0x4) 3.612309518s ago: executing program 3 (id=4342): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x84}, {0x6}]}) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x3}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r5, 0x2000) 2.710891783s ago: executing program 3 (id=4360): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="f0d8a7", 0x3}], 0x1}}], 0x1, 0x9200000000000000) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1}, 0x6}], 0x1, 0x3fffcca3, 0x0) 2.708476523s ago: executing program 3 (id=4362): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x1100000000000000) 2.636839685s ago: executing program 3 (id=4363): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x43, 0x81, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0x147a5000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000332000/0x4000)=nil) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, 0x0, &(0x7f0000000080)) 2.636569765s ago: executing program 3 (id=4364): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) epoll_create(0x3) mkdir(&(0x7f00000000c0)='./bus\x00', 0xcd) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.801491979s ago: executing program 3 (id=4380): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "35931506993479e9", "47e059d8f4f0d675d50fd267f4dd300f", "468a3591", "5ce5b685f4df603e"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 1.644113202s ago: executing program 9 (id=4386): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x19, r0, 0xd, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8929, &(0x7f0000001b00)={'ip_vti0\x00', 0x0}) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2\x00', 0x1ff) mount$binderfs(&(0x7f00000000c0), &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000040), 0x8030, 0x0) 1.584916573s ago: executing program 9 (id=4387): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) symlink(0x0, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004f7d, &(0x7f0000000040)={0x2, 0x4e2b, @rand_addr=0x64010101}, 0x10) 1.356785717s ago: executing program 2 (id=4390): keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/dev/input/mouse#\x00', 0x20, 0x1000}, 0xffffffffffffff4f, 0xfffffffffffffffb) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000080)={0x4, 0x9, 0x8, 0x6, 0xa7, 0x3}) r2 = getpid() prlimit64(r2, 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003021000082505a1a44000030109023b00010104909c09040000030206004d052406000005240037090d240f010900000006000900080905820210000e"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000600), 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.261098009s ago: executing program 9 (id=4391): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x0, 0xffffffffffffffff}) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x1ae048f7b2239b82, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x2, 0x100}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') mknod$loop(&(0x7f0000000280)='./file0\x00', 0x400, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200c40f, &(0x7f0000000180)=ANY=[@ANYBLOB='fd<', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=r0, @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES8=r0]) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840c, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000000)='./file0/file0\x00', 0xf) umount2(&(0x7f00000000c0)='.\x00', 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r6 = eventfd2(0x5cd, 0x801) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x40104506, 0x0) io_setup(0x239f, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x158}, 0x1, 0x0, 0x0, 0x20000804}, 0x20000000) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005060000000000000a00020077a9e200000022c1"], 0x28}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r0, 0x0) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10) 832.960556ms ago: executing program 2 (id=4395): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x24040045) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xff, 0x30}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x48000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0xe60000000000000, 0x7ff, 0x4, 0xc, 0x5, 0x0, [{0x2, 0x4, 0x0, '\x00', 0x100}, {0x3, 0x0, 0x7}, {0x748, 0x588, 0x6, '\x00', 0x800}, {0x5, 0xa, 0x10000}, {0x2, 0x6, 0x3, '\x00', 0x201}]}) chdir(&(0x7f00000004c0)='./file0\x00') sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8010001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r0, 0x71667a96fc2e429b, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x40080) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x30) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000a00)={0x6, 'veth0_to_batadv\x00', {0x81}, 0x80}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r8, 0x4008af13, &(0x7f0000000a80)={0x1, 0x805}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r9, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r10 = signalfd(r6, &(0x7f0000000c00)={[0x2]}, 0x8) fcntl$getflags(r10, 0x40a) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r11, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r5, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) statx(r10, &(0x7f0000000e00)='./file0\x00', 0x5800, 0x20, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r10, &(0x7f0000000f40)='./file0\x00', 0x100, 0x100, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000d40), &(0x7f0000000d80)='./file1\x00', &(0x7f0000000dc0), 0x840000, &(0x7f0000001080)={'trans=virtio,', {[{@version_u}, {@cachetag={'cachetag', 0x3d, '}\'.'}}, {@noextend}, {@msize={'msize', 0x3d, 0xd}}, {@dfltgid={'dfltgid', 0x3d, r12}}, {@dfltuid={'dfltuid', 0x3d, r13}}, {@uname={'uname', 0x3d, '802.15.4 MAC\x00'}}, {@msize={'msize', 0x3d, 0x3e}}, {@noxattr}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, '\\'}}, {@hash}]}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000001180)={0x0, @aes256, 0x0, @desc3}) 822.085437ms ago: executing program 2 (id=4396): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x7901}}], 0x400000000000172, 0x4001c00) 760.887067ms ago: executing program 2 (id=4397): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x303}, "8f00dd5ee881c4b8", "3f46895d7d1214202f3741961b542032", '!\"7H', "050587fc5ffe6c4e"}, 0x28) madvise(&(0x7f0000403000/0x3000)=nil, 0x3000, 0xf) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000000000/0x400000)=nil) 729.916218ms ago: executing program 9 (id=4398): socketpair(0x1, 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8) r0 = getpid() r1 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) prctl$PR_GET_NAME(0x10, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) timer_delete(0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 707.485308ms ago: executing program 9 (id=4399): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x0) symlink(0x0, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004f7d, &(0x7f0000000040)={0x2, 0x4e2b, @rand_addr=0x64010101}, 0x10) 404.781694ms ago: executing program 7 (id=4404): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x10000000000016, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @private0, @rand_addr=' \x01\x00', 0x4, 0x40, 0x5, 0x100, 0x6, 0x4440248, r4}) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r5, 0xf84af3108e6461e7, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x54}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004840}, 0x24000080) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) r7 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r8, 0x10e, 0x5, &(0x7f0000001200)=""/4109, &(0x7f0000000000)=0x100d) (async) r9 = dup(r7) write$nbd(r9, &(0x7f0000000240)=ANY=[], 0x10) (async, rerun: 64) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$uinput_user_dev(r11, 0x0, 0x0) (async) clock_settime(0xfffffffb, 0x0) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r10, 0x80083313, &(0x7f0000001300)) (async) finit_module(r9, 0x0, 0x0) (async) faccessat(r9, &(0x7f0000000180)='./cgroup\x00', 0x109) (async) r12 = socket(0x2, 0x3, 0xff) (async) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r13, &(0x7f0000000100)=""/80, 0x2f) connect$inet(r13, &(0x7f00000000c0)={0x2, 0xfffd, @multicast1}, 0x10) (async) close(r12) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 404.609744ms ago: executing program 7 (id=4405): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x80fe}}], 0x400000000000172, 0x4001c00) 327.126805ms ago: executing program 7 (id=4406): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x39) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 184.264817ms ago: executing program 2 (id=4407): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c06, 0x3) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/134, 0x0, 0x2, 0xd}, @fda={0x66646185, 0x7, 0x1, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x1, 0x4}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) 151.063238ms ago: executing program 7 (id=4408): socket$inet_udp(0x2, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) read(r0, &(0x7f0000000080)=""/9, 0x9) (async) io_setup(0x2, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x40007f, 0xa, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x77359400}, &(0x7f0000000180)={&(0x7f00000002c0)={[0x401]}, 0x8}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66b63d", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x200) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x4044) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0xac506000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) clock_settime(0xfffffffb, &(0x7f0000000140)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x1}) 150.719318ms ago: executing program 9 (id=4409): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/108], 0x16c}}, 0x0) 81.64431ms ago: executing program 2 (id=4410): syz_usb_connect(0x3, 0x3b, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xc1, 0xe4, 0xa4, 0x20, 0x2040, 0x651f, 0x55c7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x2, 0x5, 0x7, 0x90, 0x5, [{{0x9, 0x4, 0x61, 0x1, 0x0, 0xe, 0x1, 0x1, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x6}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x5}]}]}}, {{0x9, 0x4, 0x1a, 0x32, 0x0, 0xff, 0xff, 0xff, 0x4}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x111, 0x6, 0xb4, 0x0, 0x40, 0x9}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="7ebed61a3a7ea501"]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@filename='./file0\x00', r0, &(0x7f00000001c0)={0x9, 0xd, 0x0, 0x1}) 81.345899ms ago: executing program 7 (id=4411): r0 = socket(0x1d, 0x3, 0x1) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x79, 0x3, 0xe, 0x6, 0xb79]}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x8) accept4(r2, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) sendto$inet6(r0, &(0x7f0000000100)="7fcaf070c0b3cc3fc869e996de", 0xd, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x1, @mcast2, 0x3}, 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) socket(0x1d, 0x3, 0x1) (async) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0x79, 0x3, 0xe, 0x6, 0xb79]}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r2, 0x0) (async) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x8) (async) accept4(r2, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) sendto$inet6(r0, &(0x7f0000000100)="7fcaf070c0b3cc3fc869e996de", 0xd, 0x40000, &(0x7f00000001c0)={0xa, 0x4e20, 0x1, @mcast2, 0x3}, 0x1c) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) syz_open_dev$usbfs(0x0, 0x1ff, 0x1501) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) 0s ago: executing program 7 (id=4412): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r6, r6) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): [ T36] audit: type=1400 audit(1752807568.078:470): avc: denied { accept } for pid=4914 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.591127][ T4917] overlayfs: failed to clone upperpath [ 106.629503][ T4917] overlayfs: failed to clone lowerpath [ 106.655826][ T4921] netlink: 'syz.5.1544': attribute type 27 has an invalid length. [ 106.682509][ T4921] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.690184][ T4921] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.044893][ T4949] netlink: 'syz.2.1553': attribute type 27 has an invalid length. [ 107.077626][ T4950] overlayfs: failed to clone upperpath [ 107.201334][ T4964] @: renamed from vlan0 [ 107.302485][ T4974] overlayfs: failed to clone upperpath [ 107.490199][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 107.490218][ T36] audit: type=1326 audit(1752807568.988:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4984 comm="syz.5.1567" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef0dd8e9a9 code=0x0 [ 107.731146][ T5003] overlayfs: failed to clone upperpath [ 107.739217][ T5003] syz.0.1573(5003): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 107.766260][ T5005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=5005 comm=syz.0.1574 [ 107.816626][ T5011] overlayfs: failed to clone upperpath [ 107.920744][ T36] audit: type=1326 audit(1752807569.418:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596718e9a9 code=0x7ffc0000 [ 107.944446][ T36] audit: type=1326 audit(1752807569.418:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596718e9a9 code=0x7ffc0000 [ 107.968630][ T36] audit: type=1326 audit(1752807569.418:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f596718e9a9 code=0x7ffc0000 [ 107.994691][ T36] audit: type=1326 audit(1752807569.418:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596718e9a9 code=0x7ffc0000 [ 108.019776][ T36] audit: type=1326 audit(1752807569.418:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5022 comm="syz.0.1581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596718e9a9 code=0x7ffc0000 [ 108.043802][ T36] audit: type=1400 audit(1752807569.488:480): avc: denied { accept } for pid=5026 comm="syz.0.1583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.062389][ T5033] netlink: 'syz.3.1585': attribute type 27 has an invalid length. [ 108.330049][ T36] audit: type=1400 audit(1752807569.828:481): avc: denied { map } for pid=5044 comm="syz.5.1589" path="socket:[18960]" dev="sockfs" ino=18960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 108.440914][ T5070] /dev/loop2: Can't lookup blockdev [ 108.453228][ T5072] 9pnet_fd: Insufficient options for proto=fd [ 108.670041][ T5075] netlink: 'syz.2.1601': attribute type 29 has an invalid length. [ 108.678255][ T5075] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1601'. [ 108.689470][ T36] audit: type=1400 audit(1752807570.198:482): avc: denied { create } for pid=5074 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 108.939185][ T5096] fuse: Unknown parameter '' [ 108.946350][ T5096] netlink: 'syz.3.1609': attribute type 4 has an invalid length. [ 108.954292][ T5096] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1609'. [ 109.154931][ T36] audit: type=1400 audit(1752807570.648:483): avc: denied { getattr } for pid=5117 comm="syz.0.1617" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19076 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.390462][ T5137] netlink: 'syz.5.1623': attribute type 27 has an invalid length. [ 109.777377][ T5159] netlink: 'syz.0.1632': attribute type 27 has an invalid length. [ 110.220373][ T5194] overlay: ./bus is not a directory [ 110.268647][ T5203] fuse: Unknown parameter '' [ 110.342674][ T5220] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 110.362497][ T5223] netlink: 'syz.2.1654': attribute type 27 has an invalid length. [ 110.383558][ T5226] netlink: 'syz.0.1655': attribute type 27 has an invalid length. [ 110.485631][ T5224] tipc: Started in network mode [ 110.490530][ T5224] tipc: Node identity 2, cluster identity 2 [ 110.496678][ T5224] tipc: Node number set to 2 [ 110.538444][ T5252] netlink: 'syz.5.1664': attribute type 27 has an invalid length. [ 110.563137][ T5254] incfs: Error accessing: ./file0. [ 110.568520][ T5254] incfs: mount failed -20 [ 110.645462][ T5270] overlayfs: failed to clone upperpath [ 110.684663][ T5282] netlink: 'syz.5.1674': attribute type 27 has an invalid length. [ 111.063898][ T5344] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1697'. [ 120.491284][ T5346] /dev/rnullb0: Can't lookup blockdev [ 120.539121][ T5359] /dev/rnullb0: Can't lookup blockdev [ 120.615686][ T5378] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1707'. [ 120.855329][ T5390] netlink: 'syz.5.1715': attribute type 19 has an invalid length. [ 120.863459][ T5391] netlink: 'syz.5.1715': attribute type 19 has an invalid length. [ 120.928902][ T5390] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1715'. [ 121.319305][ T5405] netlink: 'syz.2.1720': attribute type 27 has an invalid length. [ 121.406063][ T5412] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1723'. [ 121.490004][ T5414] cgroup: fork rejected by pids controller in /syz0 [ 121.754906][ T5464] netlink: 'syz.2.1730': attribute type 27 has an invalid length. [ 121.949509][ T5504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1737'. [ 121.958726][ T5504] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1737'. [ 121.968585][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1737'. [ 122.179829][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 122.179850][ T36] audit: type=1400 audit(1752807583.678:490): avc: denied { module_load } for pid=5551 comm="syz.2.1747" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=20412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 122.312783][ T5571] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1752'. [ 122.911031][ T5618] netlink: 1599 bytes leftover after parsing attributes in process `syz.3.1770'. [ 122.928003][ T5618] t: renamed from tunl0 [ 122.983195][ T5639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1780'. [ 123.034927][ T5645] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1778'. [ 123.448747][ T5653] batadv_slave_1: entered promiscuous mode [ 123.475213][ T5660] 9pnet_fd: Insufficient options for proto=fd [ 124.097159][ T36] audit: type=1326 audit(1752807585.598:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.1802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f596718e9a9 code=0x0 [ 124.270688][ T5652] batadv_slave_1: left promiscuous mode [ 124.312757][ T5715] overlayfs: failed to clone upperpath [ 124.319223][ T5715] netlink: 'syz.3.1808': attribute type 58 has an invalid length. [ 124.960582][ T36] audit: type=1400 audit(1752807586.458:492): avc: denied { create } for pid=5748 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 125.033441][ T36] audit: type=1400 audit(1752807586.528:493): avc: denied { write } for pid=1899 comm="kworker/0:7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21694 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 125.390749][ T5770] /dev/loop0: Can't lookup blockdev [ 125.930206][ T5794] __nla_validate_parse: 6 callbacks suppressed [ 125.930222][ T5794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1836'. [ 126.055443][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 126.364888][ T5826] overlayfs: failed to clone upperpath [ 126.372611][ T5826] overlayfs: failed to clone upperpath [ 126.544711][ T5839] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1849'. [ 126.568644][ T5845] 9pnet_fd: Insufficient options for proto=fd [ 126.764420][ T5852] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 126.773340][ T5852] overlayfs: missing 'lowerdir' [ 127.164385][ T5868] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1858'. [ 127.699767][ T5912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=5912 comm=syz.0.1873 [ 127.938758][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1881'. [ 128.178308][ T5962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1889'. [ 128.275717][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 128.285990][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 128.295510][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 128.334371][ T5970] 9pnet_fd: Insufficient options for proto=fd [ 128.341747][ T5970] 9pnet_fd: Insufficient options for proto=fd [ 128.450075][ T5993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1896'. [ 128.523030][ T36] audit: type=1400 audit(1752807590.018:494): avc: denied { map } for pid=6003 comm="syz.3.1903" path="socket:[22095]" dev="sockfs" ino=22095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.535068][ T6007] netlink: 'syz.3.1904': attribute type 27 has an invalid length. [ 128.559309][ T6007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=6007 comm=syz.3.1904 [ 128.703727][ T6011] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 128.714565][ T36] audit: type=1400 audit(1752807590.218:495): avc: denied { accept } for pid=6010 comm="syz.0.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 129.100295][ T6021] /dev/rnullb0: Can't lookup blockdev [ 129.236368][ T6025] overlayfs: failed to clone upperpath [ 129.242880][ T6028] overlayfs: failed to clone upperpath [ 129.837368][ T6054] fuseblk: Unknown parameter 'Dd' [ 129.931116][ T6060] lo: entered promiscuous mode [ 129.936184][ T6060] lo: left promiscuous mode [ 129.949707][ T6062] /dev/loop2: Can't lookup blockdev [ 129.970412][ T6070] overlayfs: missing 'lowerdir' [ 130.032826][ T6083] TCP: TCP_TX_DELAY enabled [ 130.049960][ T6086] /dev/sg0: Can't lookup blockdev [ 130.058898][ T6086] fuse: Unknown parameter 'f' [ 130.217170][ T6107] /dev/loop0: Can't lookup blockdev [ 130.256228][ T6118] overlayfs: failed to clone upperpath [ 130.987011][ T36] audit: type=1400 audit(1752807592.488:496): avc: denied { setattr } for pid=6176 comm="syz.3.1963" name="KEY" dev="sockfs" ino=22376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.009848][ T36] audit: type=1400 audit(1752807592.488:497): avc: denied { getopt } for pid=6176 comm="syz.3.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 131.096991][ T6198] __nla_validate_parse: 8 callbacks suppressed [ 131.097013][ T6198] netlink: 57 bytes leftover after parsing attributes in process `syz.5.1971'. [ 132.218508][ T6265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=6265 comm=syz.3.1994 [ 132.232437][ T36] audit: type=1400 audit(1752807593.738:498): avc: denied { ioctl } for pid=6264 comm="syz.3.1994" path="socket:[21420]" dev="sockfs" ino=21420 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.431094][ T6267] cgroup: fork rejected by pids controller in /syz2 [ 132.625913][ T6306] overlayfs: failed to clone upperpath [ 132.946410][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.953496][ T6337] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.960999][ T6337] bridge_slave_0: entered allmulticast mode [ 132.967940][ T6337] bridge_slave_0: entered promiscuous mode [ 132.974616][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.984020][ T6337] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.991570][ T6337] bridge_slave_1: entered allmulticast mode [ 132.998581][ T6337] bridge_slave_1: entered promiscuous mode [ 133.101334][ T1364] bridge_slave_1: left allmulticast mode [ 133.108440][ T1364] bridge_slave_1: left promiscuous mode [ 133.114181][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.122481][ T1364] bridge_slave_0: left allmulticast mode [ 133.131510][ T1364] bridge_slave_0: left promiscuous mode [ 133.137704][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.209327][ T6337] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.216574][ T6337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.224171][ T6337] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.231411][ T6337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.242274][ T1364] tipc: Disabling bearer [ 133.247866][ T1364] tipc: Left network mode [ 133.305574][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.313191][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.323691][ T1363] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.331069][ T1363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.341016][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.348222][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.387778][ T6337] veth0_vlan: entered promiscuous mode [ 133.401775][ T6351] netlink: 'syz.2.2007': attribute type 6 has an invalid length. [ 133.411241][ T6337] veth1_macvtap: entered promiscuous mode [ 133.599861][ T36] audit: type=1400 audit(1752807595.098:499): avc: denied { audit_write } for pid=6364 comm="syz.0.2010" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 133.623949][ T36] audit: type=1107 audit(1752807595.118:500): pid=6364 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 134.084004][ T6399] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6399 comm=syz.2.2024 [ 134.135548][ T1898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.244774][ T6420] /dev/loop0: Can't lookup blockdev [ 134.285538][ T1898] usb 4-1: device descriptor read/64, error -71 [ 134.525587][ T1898] usb 4-1: device descriptor read/64, error -71 [ 134.760909][ T6434] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2036'. [ 134.765571][ T1898] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 134.835268][ T36] audit: type=1326 audit(1752807596.328:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6435 comm="syz.2.2037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc35e58e9a9 code=0x0 [ 134.915576][ T1898] usb 4-1: device descriptor read/64, error -71 [ 135.003726][ T6441] fuse: Bad value for 'fd' [ 135.046750][ T36] audit: type=1400 audit(1752807596.548:502): avc: denied { execute } for pid=6461 comm="syz.0.2044" name="file0" dev="ramfs" ino=22848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 135.047474][ T6462] 9pnet_fd: Insufficient options for proto=fd [ 135.070215][ T36] audit: type=1400 audit(1752807596.548:503): avc: denied { execute_no_trans } for pid=6461 comm="syz.0.2044" path="/file0" dev="ramfs" ino=22848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 135.101331][ T36] audit: type=1400 audit(1752807596.548:504): avc: denied { mounton } for pid=6461 comm="syz.0.2044" path="/" dev="ramfs" ino=22847 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 135.157867][ T1898] usb 4-1: device descriptor read/64, error -71 [ 135.265759][ T1898] usb usb4-port1: attempt power cycle [ 135.277686][ T6494] 9pnet_virtio: no channels available for device syz [ 135.402840][ T6521] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2065'. [ 135.455302][ T36] audit: type=1326 audit(1752807596.948:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.5.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef0dd8e9a9 code=0x7ffc0000 [ 135.479713][ T36] audit: type=1326 audit(1752807596.988:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.5.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef0dd8e9a9 code=0x7ffc0000 [ 135.505760][ T36] audit: type=1326 audit(1752807597.008:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.5.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef0dd8e9a9 code=0x7ffc0000 [ 135.529656][ T36] audit: type=1326 audit(1752807597.008:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6526 comm="syz.5.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef0dd8e9a9 code=0x7ffc0000 [ 135.569108][ T6532] tipc: Enabling of bearer rejected, failed to enable media [ 135.592955][ T6536] overlay: Unknown parameter 'fowner>00000000000000000000' [ 135.605554][ T1898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 135.634755][ T1898] usb 4-1: device descriptor read/8, error -71 [ 135.678570][ T6541] overlayfs: missing 'workdir' [ 135.766506][ T1898] usb 4-1: device descriptor read/8, error -71 [ 135.836486][ T6580] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2085'. [ 135.900329][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2094'. [ 135.943327][ T6604] overlayfs: failed to clone upperpath [ 136.015568][ T1898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.037066][ T1898] usb 4-1: device descriptor read/8, error -71 [ 136.087199][ T6613] 9pnet_fd: Insufficient options for proto=fd [ 136.166853][ T1898] usb 4-1: device descriptor read/8, error -71 [ 136.275648][ T1898] usb usb4-port1: unable to enumerate USB device [ 136.959128][ T1363] Bluetooth: hci0: Frame reassembly failed (-84) [ 137.040997][ T6643] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2109'. [ 137.240876][ T6655] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 137.249973][ T6655] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 137.848960][ T6664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2118'. [ 138.843046][ T6693] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2127'. [ 138.998504][ T2658] Bluetooth: hci0: command 0x1003 tx timeout [ 138.998926][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 139.084272][ T6702] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2128'. [ 139.089378][ T6704] sit0: entered promiscuous mode [ 139.099039][ T6704] netlink: 'syz.5.2131': attribute type 1 has an invalid length. [ 139.107113][ T6704] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2131'. [ 139.166596][ T6709] 9pnet_fd: Insufficient options for proto=fd [ 139.295520][ T1898] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.374504][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2139'. [ 139.385554][ T6725] overlay: ./file0 is not a directory [ 139.391662][ T6725] incfs: Error accessing: ./file0. [ 139.397079][ T6725] incfs: mount failed -20 [ 139.425544][ T1898] usb 4-1: device descriptor read/64, error -71 [ 139.444589][ T6733] fuse: Unknown parameter '0x0000000000000004' [ 139.451843][ T6733] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2143'. [ 139.464003][ T6736] fuse: Unknown parameter '0x0000000000000004' [ 139.479666][ T6740] cgroup: No subsys list or none specified [ 139.505366][ T6744] netlink: 'syz.2.2146': attribute type 13 has an invalid length. [ 139.513948][ T6744] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 139.617934][ T6758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2151'. [ 139.675507][ T1898] usb 4-1: device descriptor read/64, error -71 [ 139.925606][ T1898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.075961][ T1898] usb 4-1: device descriptor read/64, error -71 [ 140.089442][ T6776] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2156'. [ 140.325509][ T1898] usb 4-1: device descriptor read/64, error -71 [ 140.435814][ T1898] usb usb4-port1: attempt power cycle [ 140.706442][ T6788] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2160'. [ 140.785513][ T1898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.806530][ T1898] usb 4-1: device descriptor read/8, error -71 [ 140.946534][ T1898] usb 4-1: device descriptor read/8, error -71 [ 141.185522][ T1898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.206543][ T1898] usb 4-1: device descriptor read/8, error -71 [ 141.213025][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 141.213046][ T36] audit: type=1401 audit(1752807602.708:519): op=fscreate invalid_context=CFA7AE [ 141.228718][ T36] audit: type=1400 audit(1752807602.708:520): avc: denied { listen } for pid=6819 comm="syz.2.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 141.298013][ T6825] binder: Unknown parameter 'obj_user' [ 141.337044][ T1898] usb 4-1: device descriptor read/8, error -71 [ 141.445601][ T1898] usb usb4-port1: unable to enumerate USB device [ 141.497569][ T6839] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 141.725973][ T6844] tipc: Enabling of bearer rejected, failed to enable media [ 141.827020][ T6860] 9pnet_fd: Insufficient options for proto=fd [ 142.099593][ T6877] overlay: filesystem on ./bus not supported as upperdir [ 142.372292][ T36] audit: type=1400 audit(1752807603.868:521): avc: denied { append } for pid=6911 comm="syz.3.2206" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.372389][ T6912] random: crng reseeded on system resumption [ 142.396367][ T36] audit: type=1400 audit(1752807603.868:522): avc: denied { open } for pid=6911 comm="syz.3.2206" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.426660][ T36] audit: type=1400 audit(1752807603.918:523): avc: denied { read write } for pid=6911 comm="syz.3.2206" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.473719][ T6918] 9pnet_fd: Insufficient options for proto=fd [ 142.503915][ T6922] 9pnet_fd: Insufficient options for proto=fd [ 143.396385][ T6947] overlayfs: missing 'lowerdir' [ 143.462376][ T6960] fuse: Bad value for 'user_id' [ 143.467804][ T6960] fuse: Bad value for 'user_id' [ 143.562851][ T6979] netlink: 'syz.5.2228': attribute type 4 has an invalid length. [ 143.570697][ T6979] __nla_validate_parse: 4 callbacks suppressed [ 143.570716][ T6979] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2228'. [ 143.791018][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.796776][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.802322][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.808246][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.813948][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.819556][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.825078][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.830647][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.836265][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.841806][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.847347][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.852832][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.858350][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.863989][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.869607][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.875055][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.880587][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.886541][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.892088][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.897818][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.903356][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.909302][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.914928][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.920527][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.926089][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.931763][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.937405][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.942906][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.948737][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.954298][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.959853][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.965331][ T7010] /dev/rnullb0: Can't lookup blockdev [ 143.970847][ T7010] /dev/rnullb0: Can't lookup blockdev [ 144.375546][ T1898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 144.502491][ T7020] overlayfs: failed to clone upperpath [ 144.505580][ T1898] usb 4-1: device descriptor read/64, error -71 [ 144.611838][ T7030] /dev/rnullb0: Can't lookup blockdev [ 144.631193][ T36] audit: type=1401 audit(1752807606.128:524): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 144.745558][ T1898] usb 4-1: device descriptor read/64, error -71 [ 144.967142][ T7040] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2249'. [ 145.085567][ T1898] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 145.166883][ T7054] /dev/loop0: Can't lookup blockdev [ 145.215541][ T1898] usb 4-1: device descriptor read/64, error -71 [ 145.455537][ T1898] usb 4-1: device descriptor read/64, error -71 [ 145.463069][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.463198][ T7073] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2258'. [ 145.470490][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.494240][ T7069] bridge_slave_0: entered allmulticast mode [ 145.501773][ T7069] bridge_slave_0: entered promiscuous mode [ 145.508482][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.516065][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.523466][ T7069] bridge_slave_1: entered allmulticast mode [ 145.530043][ T7069] bridge_slave_1: entered promiscuous mode [ 145.565612][ T1898] usb usb4-port1: attempt power cycle [ 145.618732][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.626038][ T7069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.633350][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.640893][ T7069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.668739][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.676588][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.697628][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.704851][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.724625][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.731743][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.777194][ T7069] veth0_vlan: entered promiscuous mode [ 145.792601][ T7069] veth1_macvtap: entered promiscuous mode [ 145.905577][ T1898] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 145.926559][ T1898] usb 4-1: device descriptor read/8, error -71 [ 145.932866][ T1363] tipc: Left network mode [ 146.057681][ T1898] usb 4-1: device descriptor read/8, error -71 [ 146.295618][ T1898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 146.316832][ T1898] usb 4-1: device descriptor read/8, error -71 [ 146.446676][ T1898] usb 4-1: device descriptor read/8, error -71 [ 146.555692][ T1898] usb usb4-port1: unable to enumerate USB device [ 147.250977][ T7101] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 16777216 [ 147.284050][ T36] audit: type=1400 audit(1752807608.778:525): avc: denied { append } for pid=7105 comm="syz.3.2268" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.308888][ T7107] fuse: blksize only supported for fuseblk [ 147.396293][ T7126] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2276'. [ 147.575550][ T36] audit: type=1400 audit(1752807609.068:526): avc: denied { setattr } for pid=7136 comm="syz.2.2280" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 147.697204][ T7143] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 148.107000][ T7156] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2286'. [ 148.425261][ T7178] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 148.592893][ T7192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47 [ 148.650830][ T7202] overlayfs: failed to clone upperpath [ 148.835907][ T7205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2303'. [ 149.657145][ T7237] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2312'. [ 149.941588][ T36] audit: type=1400 audit(1752807611.438:527): avc: denied { listen } for pid=7241 comm="syz.2.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.038869][ T7255] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2320'. [ 150.047921][ T7256] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2320'. [ 150.203821][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2321'. [ 150.873070][ T36] audit: type=1400 audit(1752807612.368:528): avc: denied { mounton } for pid=7275 comm="syz.3.2326" path="/46/file0" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 150.873794][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 151.273058][ T7290] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2330'. [ 151.295755][ T7289] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2330'. [ 151.333048][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.340194][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.347701][ T7285] bridge_slave_0: entered allmulticast mode [ 151.354197][ T7285] bridge_slave_0: entered promiscuous mode [ 151.376651][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.394290][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.421308][ T7297] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2332'. [ 151.479281][ T7285] bridge_slave_1: entered allmulticast mode [ 151.486297][ T7285] bridge_slave_1: entered promiscuous mode [ 151.607747][ T7285] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.614958][ T7285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.622320][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.629563][ T7285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.670956][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.678559][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.704296][ T1363] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.711470][ T1363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.726180][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.733288][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.819322][ T7285] veth0_vlan: entered promiscuous mode [ 151.849495][ T7285] veth1_macvtap: entered promiscuous mode [ 152.002925][ T7323] overlayfs: failed to clone upperpath [ 152.126564][ T7321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2341'. [ 152.156366][ T7334] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2346'. [ 152.331596][ T7340] netlink: 'syz.6.2348': attribute type 4 has an invalid length. [ 152.346274][ T7340] netlink: 'syz.6.2348': attribute type 17 has an invalid length. [ 152.588543][ T7365] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 152.610959][ T7365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=7365 comm=syz.6.2359 [ 152.706458][ T7384] 9pnet_fd: Insufficient options for proto=fd [ 152.737808][ T36] audit: type=1326 audit(1752807614.228:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.782811][ T36] audit: type=1326 audit(1752807614.228:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.808099][ T36] audit: type=1326 audit(1752807614.228:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.832200][ T36] audit: type=1326 audit(1752807614.228:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.857759][ T36] audit: type=1326 audit(1752807614.228:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.884316][ T36] audit: type=1326 audit(1752807614.228:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.884718][ T7390] fuse: Bad value for 'fd' [ 152.908236][ T36] audit: type=1326 audit(1752807614.228:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.912860][ T7387] rust_binder: 7387: no such ref 0 [ 152.936255][ T36] audit: type=1326 audit(1752807614.228:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.964983][ T36] audit: type=1326 audit(1752807614.228:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 152.988389][ T36] audit: type=1326 audit(1752807614.228:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7366 comm="syz.3.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x50000 [ 153.711438][ T7414] fuse: Bad value for 'fd' [ 153.766722][ T7420] overlayfs: failed to clone upperpath [ 153.908208][ T7436] 9pnet_fd: Insufficient options for proto=fd [ 154.021770][ T7449] 9pnet: Could not find request transport: fdrfdno=0x0000000000000004 [ 154.264023][ T7485] __nla_validate_parse: 5 callbacks suppressed [ 154.264047][ T7485] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2401'. [ 154.426857][ T7487] overlay: Unknown parameter 'audit' [ 154.524163][ T7514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32812 sclass=netlink_route_socket pid=7514 comm=syz.2.2413 [ 154.565866][ T7516] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2414'. [ 154.574863][ T7516] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2414'. [ 154.602291][ T7516] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 154.675272][ T7536] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 154.993339][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2428'. [ 155.035577][ T1900] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 155.186862][ T1900] usb 7-1: config 1 has an invalid interface number: 3 but max is 2 [ 155.195303][ T1900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.205761][ T1900] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 155.214819][ T1900] usb 7-1: config 1 has no interface number 1 [ 155.220947][ T1900] usb 7-1: too many endpoints for config 1 interface 3 altsetting 6: 230, using maximum allowed: 30 [ 155.231980][ T1900] usb 7-1: config 1 interface 3 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 230 [ 155.245191][ T1900] usb 7-1: config 1 interface 3 has no altsetting 0 [ 155.254574][ T1900] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.264049][ T1900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.272252][ T1900] usb 7-1: Product: 骛鴨蝍饯鼩ꂚි흯䦪违ඖ⼴麗넴㏌뫡⭻ඛ쌍㙡ⷘ恟郁䱽靅ჵ監뷆狊欔扤阬䙨稿ꇚꬁ㻡ᜍDㄢ೮槌뗑敊篐્舕ꤿᆿಽ㈚疻ꏚ㸌ᚣ⡈괜ᶉ䞩驠퇣㽩࣌詑䬯㳯ኵ菹Ǻ筽桭팂䪕갖၃랠䠥埵礛⯠㔝丐㏯쩯昺夺 [ 155.301784][ T1900] usb 7-1: Manufacturer: ⪦洽ட윅恆椙瘦⾪顇√憒ᦣꆾ㙧鿢妛ꚨ췝ꦡ醈쥡嬋뿎嗙썠⎧麘ꛟ걝᥋❄癐輷✺ȵ떤Ᾱ妊滖׮쯲㗠街 [ 155.318360][ T1900] usb 7-1: SerialNumber: ᰉ [ 155.559481][ T1900] usb 7-1: 0:2 : does not exist [ 155.577860][ T1900] usb 7-1: USB disconnect, device number 2 [ 155.609605][ T6625] udevd[6625]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 155.669509][ T7578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2434'. [ 156.003961][ T7581] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2435'. [ 156.014326][ T7582] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2435'. [ 156.058482][ T7596] 9pnet_fd: Insufficient options for proto=fd [ 156.146313][ T7620] futex_wake_op: syz.2.2448 tries to shift op by -1; fix this program [ 156.154202][ T7622] overlayfs: failed to clone upperpath [ 156.249040][ T7636] overlayfs: failed to clone upperpath [ 156.376457][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 156.729175][ T7661] overlayfs: failed to clone lowerpath [ 157.043469][ T7670] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2465'. [ 157.188934][ T7675] 9pnet: Could not find request transport: fE [ 158.059046][ T7709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2479'. [ 158.373543][ T7715] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 158.384811][ T7715] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.704017][ T1900] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 158.855902][ T1900] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.867800][ T1900] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 158.874427][ T7737] netlink: 'syz.2.2489': attribute type 27 has an invalid length. [ 158.880072][ T1900] usb 7-1: config 0 interface 0 has no altsetting 0 [ 158.894741][ T1900] usb 7-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 158.903818][ T1900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.912701][ T1900] usb 7-1: config 0 descriptor?? [ 158.920580][ T7720] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 159.182100][ T7755] IPv6: NLM_F_CREATE should be specified when creating new route [ 159.710406][ T7770] 9pnet_fd: Insufficient options for proto=fd [ 159.764293][ T7783] overlayfs: failed to resolve './file0': -2 [ 159.933397][ T7796] fuse: Unknown parameter 'g' [ 160.304004][ T36] kauditd_printk_skb: 5416 callbacks suppressed [ 160.304023][ T36] audit: type=1400 audit(1752808133.810:5955): avc: denied { read } for pid=7814 comm="syz.2.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 160.341834][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.349018][ T7813] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.356474][ T7813] bridge_slave_0: entered allmulticast mode [ 160.363342][ T7813] bridge_slave_0: entered promiscuous mode [ 160.370168][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.377576][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.384889][ T7813] bridge_slave_1: entered allmulticast mode [ 160.391633][ T7813] bridge_slave_1: entered promiscuous mode [ 160.480222][ T7813] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.487371][ T7813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.494718][ T7813] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.501779][ T7813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.550450][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.558521][ T7829] __nla_validate_parse: 1 callbacks suppressed [ 160.558541][ T7829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2522'. [ 160.630645][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.657532][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.664741][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.681379][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.688493][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.728201][ T7813] veth0_vlan: entered promiscuous mode [ 160.745240][ T7813] veth1_macvtap: entered promiscuous mode [ 160.788735][ T7831] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2514'. [ 160.798467][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2514'. [ 160.857665][ T7833] overlayfs: failed to clone upperpath [ 161.435635][ T1900] usbhid 7-1:0.0: can't add hid device: -71 [ 161.441779][ T1900] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 161.489475][ T1900] usb 7-1: USB disconnect, device number 3 [ 161.508376][ T36] audit: type=1400 audit(1752808135.011:5956): avc: denied { execute } for pid=7864 comm="syz.6.2536" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 161.640964][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2543'. [ 161.892195][ T1900] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 162.041927][ T1900] usb 7-1: Invalid ep0 maxpacket: 32 [ 162.056111][ T7897] 9pnet_fd: Insufficient options for proto=fd [ 162.141909][ T1899] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 162.171908][ T1900] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 162.272319][ T1899] usb 8-1: device descriptor read/64, error -71 [ 162.321801][ T1900] usb 7-1: Invalid ep0 maxpacket: 32 [ 162.327234][ T1900] usb usb7-port1: attempt power cycle [ 162.511750][ T1899] usb 8-1: device descriptor read/64, error -71 [ 162.681577][ T1900] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 162.702236][ T1900] usb 7-1: Invalid ep0 maxpacket: 32 [ 162.751719][ T1899] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 162.831905][ T1900] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 162.851937][ T1900] usb 7-1: Invalid ep0 maxpacket: 32 [ 162.857691][ T1900] usb usb7-port1: unable to enumerate USB device [ 162.881432][ T1899] usb 8-1: device descriptor read/64, error -71 [ 163.121299][ T1899] usb 8-1: device descriptor read/64, error -71 [ 163.231283][ T1899] usb usb8-port1: attempt power cycle [ 163.529888][ T36] audit: type=1400 audit(1752808137.032:5957): avc: denied { create } for pid=7915 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 163.549486][ T36] audit: type=1400 audit(1752808137.032:5958): avc: denied { create } for pid=7915 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 163.570984][ T1899] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 163.592016][ T1899] usb 8-1: device descriptor read/8, error -71 [ 163.721993][ T1899] usb 8-1: device descriptor read/8, error -71 [ 163.960780][ T1899] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 163.981905][ T1899] usb 8-1: device descriptor read/8, error -71 [ 164.122478][ T1899] usb 8-1: device descriptor read/8, error -71 [ 164.240659][ T1899] usb usb8-port1: unable to enumerate USB device [ 164.551286][ T7933] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 164.661442][ T36] audit: type=1326 audit(1752808138.173:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7880 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x7fc00000 [ 164.845776][ T36] audit: type=1400 audit(1752808138.353:5960): avc: denied { execute } for pid=7955 comm="syz.3.2568" name="file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.871323][ T36] audit: type=1400 audit(1752808138.353:5961): avc: denied { execute_no_trans } for pid=7955 comm="syz.3.2568" path="/113/file0" dev="tmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.899476][ T7959] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2569'. [ 164.918560][ T7961] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 165.013871][ T1358] bridge_slave_1: left allmulticast mode [ 165.019575][ T1358] bridge_slave_1: left promiscuous mode [ 165.034764][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.045691][ T1358] bridge_slave_0: left allmulticast mode [ 165.051491][ T1358] bridge_slave_0: left promiscuous mode [ 165.057142][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.180082][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.187262][ T7973] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.194964][ T7973] bridge_slave_0: entered allmulticast mode [ 165.201797][ T7973] bridge_slave_0: entered promiscuous mode [ 165.209058][ T1358] veth1_macvtap: left promiscuous mode [ 165.214777][ T1358] veth0_vlan: left promiscuous mode [ 165.248853][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.256307][ T7973] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.263715][ T7973] bridge_slave_1: entered allmulticast mode [ 165.270136][ T7973] bridge_slave_1: entered promiscuous mode [ 165.313336][ T7973] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.320519][ T7973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.327773][ T7973] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.334825][ T7973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.349910][ T1898] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.360482][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.370204][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.382510][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.389672][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.400177][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.407253][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.438571][ T7973] veth0_vlan: entered promiscuous mode [ 165.449308][ T7973] veth1_macvtap: entered promiscuous mode [ 165.520004][ T1898] usb 8-1: Using ep0 maxpacket: 32 [ 165.522447][ T36] audit: type=1400 audit(1752808139.033:5962): avc: denied { write } for pid=8002 comm="syz.6.2585" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.539471][ T1898] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.552902][ T36] audit: type=1400 audit(1752808139.033:5963): avc: denied { remove_name } for pid=8002 comm="syz.6.2585" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.579724][ T1898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 165.615661][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2584'. [ 165.617345][ T1898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 165.670036][ T1898] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 165.671213][ T36] audit: type=1400 audit(1752808139.033:5964): avc: denied { unlink } for pid=8002 comm="syz.6.2585" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 165.679802][ T1898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.729302][ T1898] usb 8-1: config 0 descriptor?? [ 165.746086][ T1898] hub 8-1:0.0: USB hub found [ 165.938397][ T1898] hub 8-1:0.0: 2 ports detected [ 165.959017][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2588'. [ 165.969250][ T8015] fuse: Unknown parameter '' [ 166.396536][ T8029] binder: Bad value for 'max' [ 166.467311][ T8041] overlayfs: conflicting options: nfs_export=on,index=off [ 166.611598][ T8044] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2596'. [ 166.925713][ T8055] fuse: Unknown parameter 'fd0x0000000000000004' [ 166.981408][ T8065] overlay: ./file1 is not a directory [ 167.110780][ T36] audit: type=1400 audit(1752808140.624:5965): avc: denied { mounton } for pid=8075 comm="syz.6.2607" path="/19/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 167.155944][ T1898] hub 8-1:0.0: activate --> -90 [ 167.244616][ T8080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2608'. [ 167.559957][ T8094] overlayfs: failed to clone upperpath [ 167.569155][ T8094] 9pnet_fd: Insufficient options for proto=fd [ 167.625537][ T7969] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4005099896 (256326393344 ns) > initial count (100029563648 ns). Using initial count to start timer. [ 167.707450][ T45] usb 8-1: USB disconnect, device number 6 [ 167.814784][ T8144] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2622'. [ 167.913114][ T8152] 9pnet_fd: Insufficient options for proto=fd [ 167.976104][ T8157] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 168.009291][ T8157] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 168.038871][ T8157] overlayfs: missing 'lowerdir' [ 168.306438][ T36] audit: type=1400 audit(2000000000.570:5966): avc: denied { getattr } for pid=8163 comm="syz.3.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 168.602512][ T8178] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 168.612944][ T36] audit: type=1400 audit(2000000000.880:5967): avc: denied { relabelto } for pid=8177 comm="syz.6.2638" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.643252][ T36] audit: type=1400 audit(2000000000.880:5968): avc: denied { associate } for pid=8177 comm="syz.6.2638" name="file0" dev="tmpfs" ino=187 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 168.802563][ T36] audit: type=1400 audit(2000000001.070:5969): avc: denied { setcheckreqprot } for pid=8182 comm="syz.7.2640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 168.936416][ T8188] rust_binder: 8188: no such ref 1 [ 168.947286][ T8188] rust_binder: 8188: no such ref 2 [ 168.955726][ T8188] rust_binder: 8188: no such ref 2 [ 168.980466][ T8187] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2641'. [ 169.051264][ T8183] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 4294967293 [ 169.103260][ T8191] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 169.145965][ T8194] 9pnet_fd: Insufficient options for proto=fd [ 169.148560][ T8193] 9pnet_fd: Insufficient options for proto=fd [ 169.175306][ T8196] netlink: 'syz.3.2643': attribute type 13 has an invalid length. [ 169.183655][ T8196] erspan0: refused to change device tx_queue_len [ 169.229502][ T8206] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 169.229530][ T8206] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 169.236888][ T8208] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 169.239789][ T8206] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:32 [ 169.250107][ T8208] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 169.293631][ T8208] overlayfs: missing 'lowerdir' [ 169.401062][ T8230] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2650'. [ 169.492600][ T8242] fuse: Unknown parameter 'group&d' [ 169.518399][ T8242] netlink: 'syz.2.2659': attribute type 4 has an invalid length. [ 169.527006][ T8242] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2659'. [ 169.581202][ T36] audit: type=1400 audit(2000000001.850:5970): avc: denied { getopt } for pid=8248 comm="syz.2.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 169.716872][ T8260] tipc: Started in network mode [ 169.721916][ T8260] tipc: Node identity ac1414aa, cluster identity 4711 [ 169.729376][ T8260] tipc: Enabled bearer , priority 10 [ 169.788777][ T8267] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 169.788810][ T8267] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:41 [ 169.821420][ T8271] rust_binder: 8271: no such ref 0 [ 169.848853][ T36] audit: type=1400 audit(2000000002.110:5971): avc: denied { lock } for pid=8270 comm="syz.7.2669" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.187169][ T8294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 170.187206][ T8294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:54 [ 170.341760][ T8297] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2676'. [ 170.436333][ T8306] overlay: Unknown parameter 'smackfstransmute' [ 170.477982][ T8308] overlayfs: failed to clone upperpath [ 170.588951][ T8318] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2684'. [ 170.848423][ T31] tipc: Node number set to 2886997162 [ 170.901325][ T8328] 9pnet_fd: Insufficient options for proto=fd [ 170.927981][ T36] audit: type=1326 audit(2000000003.200:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8331 comm="syz.2.2690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a02d8e9a9 code=0x0 [ 170.980927][ T36] audit: type=1326 audit(2000000003.250:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8339 comm="syz.2.2692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a02d8e9a9 code=0x0 [ 171.088486][ T1900] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 171.248394][ T1900] usb 8-1: Using ep0 maxpacket: 32 [ 171.254132][ T1900] usb 8-1: too many configurations: 10, using maximum allowed: 8 [ 171.263030][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.272078][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.275080][ T8343] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2693'. [ 171.283001][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.294705][ T8343] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2693'. [ 171.299276][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.315785][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.325951][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.333175][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.341310][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.351835][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.359062][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.367340][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.377839][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.384747][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.393427][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.403855][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.410815][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.419318][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.429929][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.437644][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.456054][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.474907][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.488397][ T1900] usb 8-1: config 2 has an invalid interface number: 66 but max is 0 [ 171.496740][ T1900] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 171.514697][ T1900] usb 8-1: config 2 has no interface number 0 [ 171.521252][ T8347] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2694'. [ 171.585734][ T1900] usb 8-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d [ 171.595753][ T1900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.606266][ T1900] usb 8-1: Product: syz [ 171.623067][ T36] audit: type=1400 audit(2000000003.880:5974): avc: denied { unlink } for pid=7973 comm="syz-executor" name="file0" dev="tmpfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 171.650570][ T1900] usb 8-1: Manufacturer: syz [ 171.655316][ T1900] usb 8-1: SerialNumber: syz [ 171.727185][ T8353] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2696'. [ 171.808796][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.888836][ T8367] 9pnet_fd: p9_fd_create_tcp (8367): problem connecting socket to 127.0.0.1 [ 171.959515][ T8377] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2687'. [ 172.055328][ T1900] usb 8-1: USB disconnect, device number 7 [ 172.193049][ T8383] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2705'. [ 172.412170][ T8397] overlayfs: failed to clone upperpath [ 173.240692][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 173.268545][ T8445] netlink: 'syz.2.2726': attribute type 27 has an invalid length. [ 173.268717][ T8446] netlink: 'syz.2.2726': attribute type 27 has an invalid length. [ 173.414087][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.427790][ T31] usb 8-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 173.441942][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.451985][ T31] usb 8-1: config 0 descriptor?? [ 173.621543][ T8505] tc_dump_action: action bad kind [ 173.627405][ T8505] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2747'. [ 173.638255][ T8505] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2747'. [ 173.647619][ T8505] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 173.793880][ T8513] fuse: Unknown parameter '0000000000000000000300000000000000000003' [ 173.871836][ T31] zeroplus 0003:0C12:0005.0003: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.7-1/input0 [ 173.891379][ T31] zeroplus 0003:0C12:0005.0003: no inputs found [ 174.069668][ T8430] netlink: 404 bytes leftover after parsing attributes in process `syz.7.2719'. [ 174.074559][ T8549] netlink: 'syz.2.2758': attribute type 11 has an invalid length. [ 174.092807][ T31] usb 8-1: USB disconnect, device number 8 [ 174.099283][ T8549] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2758'. [ 174.150993][ T8556] netlink: 'syz.2.2760': attribute type 11 has an invalid length. [ 174.743995][ T8614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=8614 comm=syz.6.2779 [ 174.751777][ T8618] 9pnet_fd: Insufficient options for proto=fd [ 174.757804][ T8619] 9pnet_fd: Insufficient options for proto=fd [ 174.925381][ T8648] overlayfs: failed to clone upperpath [ 174.992327][ T8654] overlayfs: failed to clone upperpath [ 175.630672][ T1358] bridge_slave_1: left allmulticast mode [ 175.639498][ T1358] bridge_slave_1: left promiscuous mode [ 175.659014][ T1358] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.670260][ T1358] bridge_slave_0: left allmulticast mode [ 175.676195][ T1358] bridge_slave_0: left promiscuous mode [ 175.698500][ T1358] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.774414][ T8675] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 175.815697][ T1358] veth1_macvtap: left promiscuous mode [ 175.821476][ T1358] veth0_vlan: left promiscuous mode [ 175.901171][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.908244][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.915594][ T8684] bridge_slave_0: entered allmulticast mode [ 175.922088][ T8684] bridge_slave_0: entered promiscuous mode [ 175.929315][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.936630][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.943967][ T8684] bridge_slave_1: entered allmulticast mode [ 175.950691][ T8684] bridge_slave_1: entered promiscuous mode [ 175.994581][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.001776][ T8684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.009119][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.016253][ T8684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.036747][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.044193][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.054973][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.062197][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.071474][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.078739][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.105391][ T8684] veth0_vlan: entered promiscuous mode [ 176.118365][ T8684] veth1_macvtap: entered promiscuous mode [ 176.199836][ T36] audit: type=1400 audit(2000000008.470:5975): avc: denied { mounton } for pid=8698 comm="syz.8.2804" path="/0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 176.339861][ T8713] FAT-fs (rnullb0): bogus number of reserved sectors [ 176.346926][ T8713] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 176.460842][ T8725] bridge0: port 3(veth0_vlan) entered blocking state [ 176.467789][ T8725] bridge0: port 3(veth0_vlan) entered disabled state [ 176.475008][ T8725] veth0_vlan: entered allmulticast mode [ 176.481044][ T8725] bridge0: port 3(veth0_vlan) entered blocking state [ 176.487849][ T8725] bridge0: port 3(veth0_vlan) entered forwarding state [ 176.503389][ T36] audit: type=1400 audit(2000000008.770:5976): avc: denied { write } for pid=8729 comm="syz.7.2824" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.527535][ T36] audit: type=1400 audit(2000000008.770:5977): avc: denied { open } for pid=8729 comm="syz.7.2824" path="/dev/usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.551751][ T36] audit: type=1400 audit(2000000008.770:5978): avc: denied { read } for pid=8729 comm="syz.7.2824" name="usbmon6" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.785424][ T8740] incfs: Options parsing error. -22 [ 176.790798][ T8740] incfs: mount failed -22 [ 177.031300][ T8761] __nla_validate_parse: 3 callbacks suppressed [ 177.031323][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2835'. [ 177.350404][ T36] audit: type=1400 audit(2000000009.620:5979): avc: denied { ioctl } for pid=8765 comm="syz.7.2837" path="socket:[31692]" dev="sockfs" ino=31692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 177.443750][ T8770] kvm: kvm [8767]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffffffffffffff [ 177.608216][ T8779] fuse: Unknown parameter 'f' [ 177.735394][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'. [ 177.767654][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2852'. [ 177.776975][ T8804] 9pnet_fd: Insufficient options for proto=fd [ 177.798393][ T1900] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 177.968418][ T1900] usb 8-1: Using ep0 maxpacket: 32 [ 177.979125][ T1900] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.987512][ T1900] usb 8-1: config 0 has no interface number 0 [ 178.004284][ T1900] usb 8-1: config 0 interface 184 has no altsetting 0 [ 178.019804][ T1900] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.029072][ T1900] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.037433][ T1900] usb 8-1: Product: syz [ 178.048428][ T1900] usb 8-1: Manufacturer: syz [ 178.053176][ T1900] usb 8-1: SerialNumber: syz [ 178.062968][ T1900] usb 8-1: config 0 descriptor?? [ 178.071649][ T1900] smsc75xx v1.0.0 [ 178.082039][ T8825] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2861'. [ 178.280851][ T8828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=8828 comm=syz.3.2862 [ 178.936598][ T8844] /dev/loop0: Can't lookup blockdev [ 179.092481][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2872'. [ 179.275945][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 179.287134][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 179.297079][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 179.308383][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 179.318772][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.329151][ T1900] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 179.338697][ T1900] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 179.350046][ T1900] usb 8-1: USB disconnect, device number 9 [ 179.408431][ T31] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 179.522892][ T8876] overlayfs: failed to clone upperpath [ 179.559659][ T31] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.568560][ T31] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.577596][ T31] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.586957][ T31] usb 9-1: config 1 has no interface number 0 [ 179.593923][ T31] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 179.605413][ T31] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.618497][ T31] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.627629][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.687546][ T36] audit: type=1326 audit(2000000011.950:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8895 comm="syz.2.2887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a02d8e9a9 code=0x0 [ 180.025630][ T36] audit: type=1326 audit(2000000012.290:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8906 comm="syz.7.2890" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a2c38e9a9 code=0x0 [ 180.081955][ T36] audit: type=1400 audit(2000000012.350:5982): avc: denied { checkpoint_restore } for pid=8906 comm="syz.7.2890" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.911427][ T8942] binder: Bad value for 'defcontext' [ 180.942936][ T8950] proc: Bad value for 'gid' [ 180.943098][ T36] audit: type=1400 audit(2000000013.210:5983): avc: denied { remount } for pid=8949 comm="syz.7.2903" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 180.967676][ T36] audit: type=1400 audit(2000000013.220:5984): avc: denied { unmount } for pid=7813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 181.198467][ T1894] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 181.348405][ T1894] usb 8-1: Using ep0 maxpacket: 16 [ 181.354929][ T1894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.366149][ T1894] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 181.376465][ T1894] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 181.386463][ T1894] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 181.400223][ T1894] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.410093][ T1894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.418289][ T1894] usb 8-1: SerialNumber: syz [ 181.424195][ T8952] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.431577][ T8952] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.439358][ T1894] hub 8-1:1.0: bad descriptor, ignoring hub [ 181.445285][ T1894] hub 8-1:1.0: probe with driver hub failed with error -5 [ 181.639244][ T8952] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.646516][ T8952] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.857530][ T1894] cdc_ether 8-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.7-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 181.883107][ T36] audit: type=1400 audit(2000000014.150:5985): avc: denied { read } for pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 181.909531][ T36] audit: type=1400 audit(2000000014.150:5986): avc: denied { search } for pid=148 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.931402][ T36] audit: type=1400 audit(2000000014.150:5987): avc: denied { read } for pid=148 comm="dhcpcd" name="n15" dev="tmpfs" ino=2568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.955901][ T36] audit: type=1400 audit(2000000014.150:5988): avc: denied { open } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 181.976181][ T8986] netlink: 'syz.2.2914': attribute type 15 has an invalid length. [ 181.985975][ T36] audit: type=1400 audit(2000000014.150:5989): avc: denied { getattr } for pid=148 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2568 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 182.042852][ T36] audit: type=1400 audit(2000000014.180:5990): avc: denied { read } for pid=8979 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.091963][ T36] audit: type=1400 audit(2000000014.180:5991): avc: denied { open } for pid=8979 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.120141][ T36] audit: type=1400 audit(2000000014.180:5992): avc: denied { getattr } for pid=8979 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.156234][ T1898] usb 9-1: USB disconnect, device number 2 [ 182.170703][ T36] audit: type=1400 audit(2000000014.280:5993): avc: denied { write } for pid=8978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.179207][ C0] cdc_ether 8-1:1.0 usb0: CDC: unexpected notification 68! [ 182.195461][ T36] audit: type=1400 audit(2000000014.280:5994): avc: denied { add_name } for pid=8978 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.281013][ T9030] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:46 [ 183.462692][ T9058] 9pnet_fd: Insufficient options for proto=fd [ 183.553018][ T9069] overlayfs: failed to clone upperpath [ 183.557417][ T9045] binder: Unknown parameter '6' [ 183.955012][ T9096] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2947'. [ 183.991164][ T1898] usb 8-1: USB disconnect, device number 10 [ 183.997968][ T1898] cdc_ether 8-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.7-1, CDC Ethernet Device [ 184.197717][ T9131] bridge0: port 3(veth1_to_team) entered blocking state [ 184.209377][ T9131] bridge0: port 3(veth1_to_team) entered disabled state [ 184.209398][ T9129] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 184.209425][ T9129] rust_binder: Write failure EINVAL in pid:169 [ 184.216584][ T9131] veth1_to_team: entered allmulticast mode [ 184.236971][ T9131] veth1_to_team: entered promiscuous mode [ 184.240606][ T9129] rust_binder: Write failure EFAULT in pid:169 [ 184.652895][ T9181] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 184.654630][ T9182] rust_binder: Failed to allocate buffer. len:18446744073709551448, is_oneway:false [ 184.673002][ T9181] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 184.678439][ T9182] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 184.698447][ T9181] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:183 [ 184.720795][ T9182] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:183 [ 184.818800][ T9195] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 184.965585][ T1363] veth0_vlan: left allmulticast mode [ 184.974502][ T1363] bridge0: port 3(veth0_vlan) entered disabled state [ 185.004546][ T1363] bridge_slave_1: left allmulticast mode [ 185.018425][ T9219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2977'. [ 185.027633][ T1363] bridge_slave_1: left promiscuous mode [ 185.038432][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.058974][ T1363] bridge_slave_0: left allmulticast mode [ 185.074077][ T1363] bridge_slave_0: left promiscuous mode [ 185.095180][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.267779][ T1363] veth1_macvtap: left promiscuous mode [ 185.281734][ T1363] veth0_vlan: left promiscuous mode [ 185.434755][ T9237] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 185.434790][ T9237] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:198 [ 185.469222][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.506666][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.514173][ T9226] bridge_slave_0: entered allmulticast mode [ 185.521290][ T9226] bridge_slave_0: entered promiscuous mode [ 185.539509][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.547149][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.555524][ T9226] bridge_slave_1: entered allmulticast mode [ 185.562642][ T9226] bridge_slave_1: entered promiscuous mode [ 185.570389][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2989'. [ 185.581891][ T9251] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2989'. [ 185.595409][ T9251] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 185.612960][ T9259] netlink: 'syz.3.2989': attribute type 16 has an invalid length. [ 185.620912][ T9259] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 185.629992][ T9259] netlink: 'syz.3.2989': attribute type 1 has an invalid length. [ 185.637976][ T9259] netlink: 'syz.3.2989': attribute type 2 has an invalid length. [ 185.650811][ T9259] netlink: 64006 bytes leftover after parsing attributes in process `syz.3.2989'. [ 185.744331][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.751473][ T9226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.758999][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.766225][ T9226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.796616][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.804955][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.820789][ T1363] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.828353][ T1363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.836090][ T1363] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.843313][ T1363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.879436][ T9226] veth0_vlan: entered promiscuous mode [ 185.895010][ T9226] veth1_macvtap: entered promiscuous mode [ 186.350711][ T9297] exFAT-fs (rnullb0): invalid boot record signature [ 186.357383][ T9297] exFAT-fs (rnullb0): failed to read boot sector [ 186.364257][ T9297] exFAT-fs (rnullb0): failed to recognize exfat type [ 186.460309][ T9309] kvm: user requested TSC rate below hardware speed [ 186.902113][ T36] kauditd_printk_skb: 19 callbacks suppressed [ 186.902131][ T36] audit: type=1400 audit(2000000019.170:6014): avc: denied { append } for pid=9317 comm="syz.7.3008" name="001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.915032][ T9318] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:221 [ 186.957141][ T9323] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.008144][ T9322] binder: Bad value for 'defcontext' [ 187.107829][ T36] audit: type=1326 audit(2000000019.370:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9332 comm="syz.9.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb8e9a9 code=0x7fc00000 [ 187.132773][ T36] audit: type=1400 audit(2000000019.400:6016): avc: denied { read write } for pid=9337 comm="syz.9.3014" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.158126][ T36] audit: type=1400 audit(2000000019.400:6017): avc: denied { open } for pid=9337 comm="syz.9.3014" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.182221][ T36] audit: type=1400 audit(2000000019.400:6018): avc: denied { ioctl } for pid=9337 comm="syz.9.3014" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.368470][ T1900] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 187.447325][ T9352] tipc: Enabling of bearer rejected, media not registered [ 187.464735][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3021'. [ 187.476223][ T9357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3021'. [ 187.519466][ T1900] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 187.535652][ T1900] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.545163][ T36] audit: type=1400 audit(2000000019.810:6019): avc: denied { bind } for pid=9368 comm="syz.2.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 187.565390][ T1900] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.574415][ T1900] usb 10-1: Product: syz [ 187.578932][ T1900] usb 10-1: Manufacturer: syz [ 187.583658][ T1900] usb 10-1: SerialNumber: syz [ 187.590480][ T9338] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 187.807899][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3032'. [ 187.810700][ T1900] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 187.822663][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3032'. [ 187.832734][ T1900] usb 10-1: USB disconnect, device number 2 [ 187.945207][ T9409] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.962219][ T9413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.964215][ T9413] 9pnet_fd: p9_fd_create_tcp (9413): problem connecting socket to 127.0.0.1 [ 187.991682][ T9415] FAT-fs (rnullb0): bogus number of reserved sectors [ 187.998525][ T9415] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 188.018954][ T9420] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 188.540857][ T9451] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3045'. [ 188.639645][ T36] audit: type=1400 audit(2000000020.910:6020): avc: denied { append } for pid=9465 comm="syz.9.3057" name="pfkey" dev="proc" ino=4026533134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 188.682463][ T36] audit: type=1400 audit(2000000020.930:6021): avc: denied { associate } for pid=9465 comm="syz.9.3057" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 189.082806][ T9497] __nla_validate_parse: 2 callbacks suppressed [ 189.082829][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3067'. [ 189.348428][ T9517] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 189.348475][ T36] audit: type=1400 audit(2000000021.610:6022): avc: denied { relabelfrom } for pid=9515 comm="syz.3.3075" name="XDP" dev="sockfs" ino=35999 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.381015][ T36] audit: type=1400 audit(2000000021.620:6023): avc: denied { relabelto } for pid=9515 comm="syz.3.3075" name="XDP" dev="sockfs" ino=35999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:mtrr_device_t:s0" [ 189.408551][ T1894] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 189.485708][ T9528] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3079'. [ 189.559591][ T1894] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.571030][ T1894] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 189.580501][ T1894] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.606990][ T1894] usb 10-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 189.622851][ T1894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.632076][ T1894] usb 10-1: Product: syz [ 189.636508][ T1894] usb 10-1: Manufacturer: syz [ 189.641489][ T1894] usb 10-1: SerialNumber: syz [ 189.647452][ T1894] usb 10-1: config 0 descriptor?? [ 189.716258][ T9537] SELinux: Context system_u:object_r:zero_device_t:s0 is not valid (left unmapped). [ 189.909384][ T1894] usb 10-1: USB disconnect, device number 3 [ 190.545243][ T9554] binder: Bad value for 'stats' [ 190.562227][ T9556] netlink: 'syz.9.3090': attribute type 16 has an invalid length. [ 190.570374][ T9556] netlink: 'syz.9.3090': attribute type 3 has an invalid length. [ 190.578252][ T9556] netlink: 64038 bytes leftover after parsing attributes in process `syz.9.3090'. [ 190.764571][ T9583] fuse: Bad value for 'user_id' [ 190.769811][ T9583] fuse: Bad value for 'user_id' [ 190.785586][ T9587] 9pnet_fd: Insufficient options for proto=fd [ 190.805450][ T9589] veth1_macvtap: left promiscuous mode [ 190.811313][ T9589] macsec0: entered allmulticast mode [ 190.943226][ T9606] 9pnet_fd: Insufficient options for proto=fd [ 191.063666][ T9613] 9pnet_fd: Insufficient options for proto=fd [ 191.420655][ T9621] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 191.521236][ T9637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.521724][ T9637] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 191.555203][ T9639] 9pnet_fd: Insufficient options for proto=fd [ 192.272054][ T9664] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3132'. [ 192.503450][ T9676] netlink: 'syz.7.3136': attribute type 19 has an invalid length. [ 192.526227][ T9678] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3137'. [ 192.763248][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3135'. [ 192.897378][ T9697] can: request_module (can-proto-0) failed. [ 192.909192][ T9697] binder: Bad value for 'max' [ 193.034870][ T9706] binder: Unknown parameter 'context' [ 193.041041][ T9706] binder: Unknown parameter 'context' [ 193.188372][ T9717] /dev/sr0: Can't lookup blockdev [ 193.502306][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 193.502325][ T36] audit: type=1400 audit(2000000025.769:6031): avc: denied { map } for pid=9729 comm="syz.9.3152" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 193.571031][ T9736] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 193.609698][ T9739] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3155'. [ 194.078396][ T1894] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 194.226868][ T9793] netlink: 'syz.3.3175': attribute type 33 has an invalid length. [ 194.228404][ T1894] usb 10-1: Using ep0 maxpacket: 32 [ 194.234902][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 194.242538][ T1894] usb 10-1: unable to get BOS descriptor or descriptor too short [ 194.258142][ T1894] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.268747][ T1894] usb 10-1: config 0 has no interfaces? [ 194.276857][ T1894] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.286623][ T1894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.294835][ T1894] usb 10-1: Product: syz [ 194.299456][ T1894] usb 10-1: Manufacturer: syz [ 194.304156][ T1894] usb 10-1: SerialNumber: syz [ 194.309639][ T1894] usb 10-1: config 0 descriptor?? [ 194.518604][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.527401][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.536036][ T1898] usb 10-1: USB disconnect, device number 4 [ 194.968417][ T1894] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 195.119814][ T1894] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.130277][ T1894] usb 10-1: config 0 has no interfaces? [ 195.137542][ T1894] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 195.146805][ T1894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.155257][ T1894] usb 10-1: Product: syz [ 195.159787][ T1894] usb 10-1: Manufacturer: syz [ 195.164580][ T1894] usb 10-1: SerialNumber: syz [ 195.170068][ T1894] usb 10-1: config 0 descriptor?? [ 195.377615][ T9745] netlink: 164 bytes leftover after parsing attributes in process `syz.9.3158'. [ 195.544843][ T1898] usb 10-1: USB disconnect, device number 5 [ 195.761996][ T9822] netlink: 'syz.3.3187': attribute type 15 has an invalid length. [ 195.770159][ T9822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3187'. [ 195.859300][ T9826] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3189'. [ 195.868571][ T9826] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3189'. [ 196.049471][ T36] audit: type=1400 audit(2000000028.319:6032): avc: denied { read } for pid=9842 comm="syz.9.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.121095][ T9857] netlink: 272 bytes leftover after parsing attributes in process `syz.9.3194'. [ 196.121366][ T36] audit: type=1400 audit(2000000028.389:6033): avc: denied { nlmsg_read } for pid=9842 comm="syz.9.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 196.272845][ T9877] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3205'. [ 196.419271][ T9895] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3208'. [ 196.475791][ T9907] fuse: Bad value for 'fd' [ 196.525135][ T9913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3210'. [ 196.587564][ T9915] binder: Unknown parameter 'fscontext?}' [ 196.644060][ T9925] binder: Unknown parameter '00000000000000000000464' [ 196.708552][ T36] audit: type=1400 audit(2000000028.969:6034): avc: denied { read } for pid=9926 comm="syz.9.3217" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 196.750167][ T36] audit: type=1400 audit(2000000028.969:6035): avc: denied { open } for pid=9926 comm="syz.9.3217" path="/55/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 197.440617][ T9963] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3229'. [ 198.396484][T10005] overlayfs: failed to resolve 'appraise': -2 [ 198.396672][T10006] overlayfs: failed to resolve 'appraise': -2 [ 198.766875][ T36] audit: type=1326 audit(2000000031.029:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.3.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x7fc00000 [ 198.819139][ T36] audit: type=1400 audit(2000000031.089:6037): avc: denied { watch watch_reads } for pid=10020 comm="syz.9.3251" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 199.028475][T10034] 9pnet_fd: Insufficient options for proto=fd [ 199.189167][ T1898] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 199.243743][T10055] __nla_validate_parse: 3 callbacks suppressed [ 199.243766][T10055] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3264'. [ 199.358375][ T1898] usb 10-1: device descriptor read/64, error -71 [ 199.559838][T10064] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3269'. [ 199.569870][T10068] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3269'. [ 199.572925][T10069] overlayfs: failed to resolve './file1': -2 [ 199.598420][ T1898] usb 10-1: device descriptor read/64, error -71 [ 199.643760][T10076] 9pnet: p9_errstr2errno: server reported unknown error [ 199.651482][T10076] fuse: Bad value for 'fd' [ 199.672746][T10078] overlayfs: missing 'workdir' [ 199.815530][T10098] fuseblk: Bad value for 'group_id' [ 199.821076][T10098] fuseblk: Bad value for 'group_id' [ 199.847787][ T1898] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 199.978395][ T1898] usb 10-1: device descriptor read/64, error -71 [ 200.045729][T10101] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3282'. [ 200.218403][ T1898] usb 10-1: device descriptor read/64, error -71 [ 200.328575][ T1898] usb usb10-port1: attempt power cycle [ 200.411924][T10119] netlink: 'syz.3.3290': attribute type 11 has an invalid length. [ 200.445338][T10119] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3290'. [ 200.531893][T10119] tipc: Started in network mode [ 200.552089][T10119] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 200.584331][T10119] tipc: Enabled bearer , priority 10 [ 200.654294][T10151] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.668527][ T1898] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 200.689484][ T1898] usb 10-1: device descriptor read/8, error -71 [ 200.809283][ T36] audit: type=1326 audit(2000000033.079:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10154 comm="syz.3.3300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94faf8e9a9 code=0x0 [ 200.833725][ T1898] usb 10-1: device descriptor read/8, error -71 [ 201.078387][ T1898] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 201.103109][ T1898] usb 10-1: device descriptor read/8, error -71 [ 201.227662][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3312'. [ 201.239571][ T1898] usb 10-1: device descriptor read/8, error -71 [ 201.329168][T10211] incfs: Options parsing error. -22 [ 201.334734][T10211] incfs: mount failed -22 [ 201.348515][ T1898] usb usb10-port1: unable to enumerate USB device [ 201.361522][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3322'. [ 201.380581][ T36] audit: type=1400 audit(2000000033.649:6039): avc: denied { name_bind } for pid=10217 comm="syz.7.3323" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 201.381461][T10218] netlink: 'syz.7.3323': attribute type 27 has an invalid length. [ 201.415006][T10218] 9pnet_fd: Insufficient options for proto=fd [ 201.431658][T10222] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 201.441025][T10222] overlayfs: conflicting options: userxattr,metacopy=on [ 201.461738][T10225] fuse: Bad value for 'fd' [ 201.698410][ T1900] tipc: Node number set to 4269801488 [ 201.985545][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3338'. [ 202.070395][T10278] netlink: 165 bytes leftover after parsing attributes in process `syz.9.3342'. [ 202.116322][T10284] 9pnet_fd: Insufficient options for proto=fd [ 202.181997][T10288] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3346'. [ 202.242843][ T36] audit: type=1400 audit(2000000035.507:6040): avc: denied { setopt } for pid=10285 comm="syz.2.3345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.161209][T10350] 9pnet_fd: Insufficient options for proto=fd [ 204.126680][ T36] audit: type=1400 audit(2000000037.387:6041): avc: denied { watch } for pid=10453 comm="syz.3.3399" path="/320/file0" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 204.490582][T10482] __nla_validate_parse: 1 callbacks suppressed [ 204.490657][T10482] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3409'. [ 204.644001][ T36] audit: type=1326 audit(2000000037.907:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10444 comm="syz.9.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb8e9a9 code=0x7fc00000 [ 204.866111][T10506] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3420'. [ 204.892952][T10510] overlayfs: failed to clone upperpath [ 205.416223][T10535] cgroup: Need name or subsystem set [ 205.918398][T10549] @: renamed from veth0_vlan (while UP) [ 206.407927][T10568] /dev/loop0: Can't lookup blockdev [ 206.979552][T10583] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3448'. [ 207.071939][T10595] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3453'. [ 207.289363][T10616] devtmpfs: Unknown parameter '^ *([%' [ 207.295692][T10616] 9pnet_fd: Insufficient options for proto=fd [ 207.363777][T10627] overlayfs: failed to clone upperpath [ 207.371435][T10627] netlink: 'syz.7.3464': attribute type 3 has an invalid length. [ 207.893470][T10649] netlink: 'syz.3.3472': attribute type 13 has an invalid length. [ 207.909618][T10650] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3470'. [ 208.536674][T10695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10695 comm=syz.3.3488 [ 208.588961][T10707] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3489'. [ 209.719066][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3502'. [ 209.971903][T10764] 9pnet_fd: Insufficient options for proto=fd [ 210.017893][T10771] 9pnet_fd: Insufficient options for proto=fd [ 210.562130][T10829] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 210.570981][T10829] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 210.580485][T10829] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 210.599489][T10829] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 211.122517][T10886] netlink: 'syz.7.3558': attribute type 63 has an invalid length. [ 211.130479][T10886] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3558'. [ 211.185129][T10897] cgroup: Invalid name [ 211.356970][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3574'. [ 211.909775][T10957] overlayfs: failed to clone upperpath [ 211.917999][T10947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3579'. [ 211.994322][T10960] overlayfs: missing 'lowerdir' [ 212.026516][T10967] fuse: Bad value for 'group_id' [ 212.032008][T10967] fuse: Bad value for 'group_id' [ 212.066044][T10975] netlink: 'syz.7.3589': attribute type 4 has an invalid length. [ 212.087393][T10975] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3589'. [ 212.325888][ T36] audit: type=1326 audit(2000000045.588:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.2.3608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a02d8e9a9 code=0x0 [ 212.393888][T11029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3605'. [ 212.499543][ T36] audit: type=1400 audit(2000000045.768:6044): avc: denied { create } for pid=11027 comm="syz.2.3608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 212.566958][T11033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11033 comm=syz.9.3609 [ 212.635422][T11045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3615'. [ 212.963618][T11067] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 213.133512][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3621'. [ 214.183603][T11115] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3635'. [ 214.408190][ T36] audit: type=1400 audit(2000000047.678:6045): avc: denied { accept } for pid=11128 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 214.437586][T11127] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3637'. [ 214.734276][T11154] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3649'. [ 214.849361][ T36] audit: type=1400 audit(2000000048.118:6046): avc: denied { create } for pid=11159 comm="syz.7.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 215.020197][T11170] netlink: 'syz.9.3656': attribute type 4 has an invalid length. [ 215.184528][T11176] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3658'. [ 215.437439][T11198] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3664'. [ 215.826135][T11208] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3670'. [ 216.080530][ T36] audit: type=1400 audit(2000000049.348:6047): avc: denied { execute } for pid=11238 comm="syz.9.3682" path="pipe:[40865]" dev="pipefs" ino=40865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 216.463484][T11258] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3688'. [ 216.666334][T11272] 9pnet_fd: Insufficient options for proto=fd [ 217.340118][T11292] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3700'. [ 217.464597][T11298] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 217.572598][T11314] 9pnet: Could not find request transport: f [ 217.572598][T11314] @aeKd [ 217.772238][T11329] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3713'. [ 218.001236][T11341] 9pnet_fd: Insufficient options for proto=fd [ 218.047571][T11354] netlink: 'syz.3.3723': attribute type 16 has an invalid length. [ 218.223443][T11360] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3722'. [ 218.704594][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3738'. [ 218.738070][T11418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 218.747127][T11418] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 218.759034][T11418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 218.798225][T11428] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3744'. [ 218.967418][T11459] overlayfs: failed to clone upperpath [ 219.039927][T11474] 9pnet_fd: Insufficient options for proto=fd [ 219.282766][T11490] /dev/loop0: Can't lookup blockdev [ 219.309700][T11494] 9pnet_fd: Insufficient options for proto=fd [ 219.336060][T11501] 9pnet_fd: Insufficient options for proto=fd [ 219.394526][T11502] overlayfs: failed to clone upperpath [ 219.712566][T11526] batadv_slave_0: entered promiscuous mode [ 219.719142][T11525] batadv_slave_0: left promiscuous mode [ 219.918722][T11542] overlayfs: failed to clone upperpath [ 220.393918][ T36] audit: type=1400 audit(2000000053.659:6048): avc: denied { accept } for pid=11621 comm="syz.7.3811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.648220][ T36] audit: type=1326 audit(2000000053.919:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11534 comm="syz.9.3780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43dbb8e9a9 code=0x7fc00000 [ 221.107120][T11638] tipc: Failed to remove unknown binding: 66,1,1/4269801488:1096809115/1096809117 [ 221.133850][ T36] audit: type=1326 audit(2000000054.399:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz.3.3820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x0 [ 221.171884][T11650] bpf: Bad value for 'gid' [ 221.230898][T11663] __nla_validate_parse: 2 callbacks suppressed [ 221.230913][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3826'. [ 221.525618][T11678] netlink: 'syz.7.3832': attribute type 4 has an invalid length. [ 221.533907][T11678] netlink: 'syz.7.3832': attribute type 5 has an invalid length. [ 221.542347][T11678] netlink: 'syz.7.3832': attribute type 1 has an invalid length. [ 221.552688][T11678] netlink: 'syz.7.3832': attribute type 16 has an invalid length. [ 221.699164][ T36] audit: type=1400 audit(2000000054.969:6051): avc: denied { add_name } for pid=11685 comm="syz.7.3835" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.723881][T11692] overlayfs: upper fs does not support tmpfile. [ 221.732259][ T36] audit: type=1400 audit(2000000054.969:6052): avc: denied { create } for pid=11685 comm="syz.7.3835" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 221.756253][T11692] overlayfs: upper fs does not support tmpfile. [ 221.765129][ T36] audit: type=1400 audit(2000000054.969:6053): avc: denied { associate } for pid=11685 comm="syz.7.3835" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 221.790596][ T36] audit: type=1400 audit(2000000054.999:6054): avc: denied { getattr } for pid=11685 comm="syz.7.3835" name="/" dev="incremental-fs" ino=12394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 221.821807][ T36] audit: type=1400 audit(2000000055.029:6055): avc: denied { rmdir } for pid=11685 comm="syz.7.3835" name="work" dev="incremental-fs" ino=42488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.453879][ T36] audit: type=1400 audit(2000000055.719:6056): avc: denied { watch_reads } for pid=11714 comm="syz.2.3845" path="/514/file0" dev="tmpfs" ino=2828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.586215][T11725] netlink: 'syz.2.3848': attribute type 3 has an invalid length. [ 222.594214][T11725] netlink: 944 bytes leftover after parsing attributes in process `syz.2.3848'. [ 222.988926][T11727] overlayfs: failed to clone upperpath [ 223.088274][T11743] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 223.100250][T11744] fuse: Unknown parameter '0x00000000000000060x0000000000000003' [ 223.115588][T11744] fuse: Unknown parameter '~$' [ 223.305474][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3866'. [ 223.558682][T11794] /dev/loop0: Can't lookup blockdev [ 223.565472][T11794] /dev/loop0: Can't lookup blockdev [ 223.588193][T11799] 9pnet_fd: Insufficient options for proto=fd [ 223.781841][T11814] fuse: Bad value for 'fd' [ 224.650445][T11886] incfs: Options parsing error. -22 [ 224.655834][T11886] incfs: mount failed -22 [ 224.802456][T11911] 9pnet: Could not find request transport: fd=l'~%.l#Q.2)$ٱ [ 225.060638][T11924] tipc: Enabling of bearer rejected, failed to enable media [ 225.666993][T11933] 9pnet_fd: Insufficient options for proto=fd [ 225.694186][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'. [ 225.817638][T11943] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3925'. [ 225.972337][T11967] netlink: 'syz.2.3933': attribute type 58 has an invalid length. [ 226.185783][ T36] audit: type=1326 audit(2000000059.440:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.3.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x7fc00000 [ 226.189224][T12001] tipc: Enabling of bearer rejected, already enabled [ 226.276886][T12006] 9pnet_fd: Insufficient options for proto=fd [ 226.490100][T12035] /dev/loop0: Can't lookup blockdev [ 226.923936][ T36] audit: type=1400 audit(2000000060.190:6058): avc: denied { map } for pid=12056 comm="syz.3.3965" path="socket:[43196]" dev="sockfs" ino=43196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.079620][T12076] overlayfs: failed to clone upperpath [ 227.141587][T12082] netlink: 'syz.9.3974': attribute type 19 has an invalid length. [ 227.238822][T12090] overlayfs: conflicting options: nfs_export=on,index=off [ 227.776819][T12110] overlayfs: failed to clone upperpath [ 227.853007][T12117] fuse: Unknown parameter 'dG?;&x~ BFa*+cSqozβ{zFJ-`-r~ҔyHW?A+t0x0000000000000007' [ 227.925172][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3990'. [ 228.532575][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4008'. [ 229.094927][T12247] 9p: Unknown access argument : -22 [ 229.250957][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4033'. [ 230.277812][T12282] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4044'. [ 230.601663][T12294] tipc: Started in network mode [ 230.611840][T12294] tipc: Node identity ac14142f, cluster identity 4711 [ 230.628042][T12294] tipc: New replicast peer: 0.0.0.0 [ 230.640573][T12294] tipc: Enabled bearer , priority 10 [ 230.663825][T12294] 9pnet_fd: Insufficient options for proto=fd [ 230.691994][T12306] overlayfs: failed to clone upperpath [ 231.755118][ T1894] tipc: Node number set to 2886997039 [ 239.001731][ T36] audit: type=1400 audit(2000000328.271:6059): avc: denied { create } for pid=12354 comm="syz.3.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 239.142971][T12357] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4071'. [ 239.343938][T12371] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4077'. [ 239.354186][T12371] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4077'. [ 239.363397][T12371] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 239.392936][T12374] overlayfs: failed to clone upperpath [ 239.597582][T12400] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4084'. [ 239.616092][T12411] x_tables: duplicate underflow at hook 1 [ 239.872571][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4101'. [ 240.117550][T12455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4108'. [ 240.422646][ T36] audit: type=1400 audit(2000000329.691:6060): avc: denied { map } for pid=12481 comm="syz.9.4119" path="socket:[44620]" dev="sockfs" ino=44620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 240.545675][T12483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4118'. [ 240.692242][T12496] 9pnet_fd: Insufficient options for proto=fd [ 240.971568][T12526] 9pnet_fd: Insufficient options for proto=fd [ 241.346377][T12540] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4139'. [ 241.545886][T12547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=12547 comm=syz.3.4142 [ 241.642836][T12550] netlink: 'syz.3.4143': attribute type 5 has an invalid length. [ 241.650830][T12550] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4143'. [ 242.297833][T12577] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4153'. [ 242.314221][T12577] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 242.407091][T12595] netlink: 'syz.9.4160': attribute type 5 has an invalid length. [ 242.820910][ T36] audit: type=1326 audit(2000000332.091:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12611 comm="syz.3.4167" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94faf8e9a9 code=0x0 [ 243.550834][T12667] overlayfs: failed to resolve './file0': -2 [ 243.569526][T12669] netlink: 'syz.7.4190': attribute type 3 has an invalid length. [ 243.615608][T12676] netlink: 'syz.7.4193': attribute type 1 has an invalid length. [ 243.698883][T12688] overlayfs: failed to clone upperpath [ 244.921441][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.928732][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.936381][T12724] bridge_slave_0: entered allmulticast mode [ 244.942978][T12724] bridge_slave_0: entered promiscuous mode [ 244.949896][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.957883][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.968988][T12724] bridge_slave_1: entered allmulticast mode [ 244.988933][T12724] bridge_slave_1: entered promiscuous mode [ 245.003798][T12732] batadv_slave_1: entered promiscuous mode [ 245.016079][T12731] batadv_slave_1: left promiscuous mode [ 245.094418][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.101768][T12724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.109271][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.116523][T12724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.194601][ T1364] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.213513][ T1364] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.234334][ T1364] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.241550][ T1364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.253377][ T1364] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.260447][ T1364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.322459][T12724] veth0_vlan: entered promiscuous mode [ 245.347030][T12724] veth1_macvtap: entered promiscuous mode [ 245.653558][ T45] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 245.813339][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 245.820153][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.828973][ T45] usb 3-1: config 1 has an invalid interface number: 81 but max is 0 [ 245.839876][ T45] usb 3-1: config 1 has no interface number 0 [ 245.849707][ T45] usb 3-1: New USB device found, idVendor=19d2, idProduct=6a61, bcdDevice=b0.c0 [ 245.863952][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.872521][ T45] usb 3-1: Product: syz [ 245.879527][ T45] usb 3-1: Manufacturer: syz [ 245.884605][ T45] usb 3-1: SerialNumber: syz [ 245.938464][T12785] batadv_slave_1: entered promiscuous mode [ 245.980351][T12784] batadv_slave_1: left promiscuous mode [ 245.995405][T12790] 9pnet_fd: Insufficient options for proto=fd [ 246.039023][T12801] netlink: 'syz.9.4238': attribute type 27 has an invalid length. [ 246.048060][T12801] __nla_validate_parse: 7 callbacks suppressed [ 246.048079][T12801] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4238'. [ 246.069464][T12802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=12802 comm=syz.3.4235 [ 246.102735][ T45] usb 3-1: bad CDC descriptors [ 246.113087][ T45] usb 3-1: USB disconnect, device number 10 [ 246.119666][ T36] audit: type=1326 audit(2000000335.382:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12808 comm="syz.3.4241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x0 [ 246.133683][T12814] 9pnet_fd: Insufficient options for proto=fd [ 246.220501][T12818] overlayfs: upper fs does not support tmpfile. [ 246.243492][T12820] 9pnet_fd: Insufficient options for proto=fd [ 246.746685][ T36] audit: type=1400 audit(2000000336.022:6063): avc: denied { read write } for pid=12835 comm="syz.2.4251" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.772501][ T36] audit: type=1400 audit(2000000336.022:6064): avc: denied { open } for pid=12835 comm="syz.2.4251" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.796493][ T36] audit: type=1400 audit(2000000336.022:6065): avc: denied { map } for pid=12835 comm="syz.2.4251" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 246.868738][ T36] audit: type=1400 audit(2000000336.142:6066): avc: denied { ioctl } for pid=12837 comm="syz.2.4252" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 247.134550][T12857] 9pnet: p9_errstr2errno: server reported unknown error syz0 [ 247.143029][T12857] overlayfs: failed to clone upperpath [ 247.148216][ T36] audit: type=1400 audit(2000000336.412:6067): avc: denied { search } for pid=12858 comm="syz.2.4260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 247.196712][T12865] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 247.203972][T12865] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 247.211210][T12865] rust_binder: 12865: no such ref 1 [ 247.216787][T12865] rust_binder: 12865: no such ref 1 [ 247.222096][T12865] rust_binder: 12865: no such ref 3 [ 247.227876][T12865] rust_binder: 12865: no such ref 1 [ 247.241742][T12866] overlay: ./file0 is not a directory [ 247.261206][T12872] 9pnet_fd: Insufficient options for proto=fd [ 247.499977][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4272'. [ 247.510078][T12895] rust_binder: 12894 RLIMIT_NICE not set [ 247.579589][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4274'. [ 247.594815][T12899] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4274'. [ 247.603904][T12899] netlink: 'syz.2.4274': attribute type 6 has an invalid length. [ 247.611872][T12899] netlink: 'syz.2.4274': attribute type 5 has an invalid length. [ 247.619945][T12899] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4274'. [ 247.648995][T12907] 9pnet: Could not find request transport: xen [ 248.053124][ T45] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 248.121448][ T36] audit: type=1326 audit(2000000593.391:6068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12940 comm="syz.3.4288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x7fc00000 [ 248.158434][T12948] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4290'. [ 248.167449][T12948] netlink: 3 bytes leftover after parsing attributes in process `syz.9.4290'. [ 248.176772][T12948] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 248.203082][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 248.209479][ T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.224946][ T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.232780][T12969] overlay: ./file0 is not a directory [ 248.235855][ T45] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.248615][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.256847][ T45] usb 3-1: Product: ࠧ [ 248.261055][ T45] usb 3-1: Manufacturer: Б [ 248.265598][ T45] usb 3-1: SerialNumber: 瑣ᗠ쵈膼韣猩苣䴉棨嫾䮬惧啕着꨼퇺껸ꃙ≤ޤ돞ꬩ模㳤뤟蓊ྀ﬈嗶ṫʐା농໻魮ꧥ㓶⹞飀箝取뮆㧛餔謥絰⫳藆뢨濶⼜定ᲊᩭ뭚॑⑐಩슞탙⎕룵佌偀즮쨃鯲국炅톉跼䕾ᵙ汚㈈ⳉ㜾쎋ꄝ搓섒 [ 248.497173][ T45] usb 3-1: 0:2 : does not exist [ 248.504555][ T45] usb 3-1: USB disconnect, device number 11 [ 248.513747][T12743] udevd[12743]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 248.795080][ T36] audit: type=1400 audit(2000000594.071:6069): avc: denied { audit_write } for pid=12985 comm="syz.9.4302" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 248.819582][ T36] audit: type=1400 audit(2000000594.091:6070): avc: denied { read } for pid=12989 comm="syz.9.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.010471][T13017] incfs: Options parsing error. -22 [ 249.015995][T13017] incfs: mount failed -22 [ 249.137490][T13055] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4326'. [ 249.146940][T13055] 0M: renamed from gretap0 (while UP) [ 249.154119][T13055] 0M: entered allmulticast mode [ 249.159799][T13055] A link change request failed with some changes committed already. Interface 30M may have been left with an inconsistent configuration, please check. [ 249.170066][T13066] overlayfs: failed to resolve './file1': -2 [ 249.187466][T13067] overlayfs: failed to resolve './file0': -2 [ 249.196430][T13069] 9pnet_fd: Insufficient options for proto=fd [ 249.222364][T13079] overlayfs: failed to resolve './file1': -2 [ 249.250319][T13085] netlink: 'syz.3.4335': attribute type 20 has an invalid length. [ 249.259442][T13085] 9pnet: Unknown protocol version 9 [ 249.387687][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4340'. [ 249.397089][T13100] ip6tnl0: entered promiscuous mode [ 249.609996][ T36] audit: type=1326 audit(2000000594.881:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13103 comm="syz.3.4342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94faf8e9a9 code=0x0 [ 249.768673][T13115] netlink: 'syz.7.4346': attribute type 6 has an invalid length. [ 249.779262][T13115] IPv6: NLM_F_CREATE should be specified when creating new route [ 249.802200][T13121] overlayfs: failed to clone upperpath [ 249.897027][T13131] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4352'. [ 249.967070][T13135] netlink: 'syz.9.4354': attribute type 12 has an invalid length. [ 249.987712][T13137] overlayfs: failed to clone upperpath [ 250.443013][T13160] overlayfs: upper fs does not support tmpfile. [ 250.491663][T13166] netlink: 'syz.2.4367': attribute type 27 has an invalid length. [ 250.500340][T13166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13166 comm=syz.2.4367 [ 251.775681][T13231] fuseblk: Unknown parameter 'fd<0x000000000000000300000000000000000000' [ 252.943737][T13284] __nla_validate_parse: 1 callbacks suppressed [ 252.943768][T13284] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4409'. [ 253.016862][T13286] 9pnet_fd: Insufficient options for proto=fd [ 253.092056][T13292] ------------[ cut here ]------------ [ 253.097726][T13292] WARNING: CPU: 0 PID: 13292 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 253.105886][T13292] Modules linked in: [ 253.110066][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.7.4412 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 253.124661][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.134870][T13292] RIP: 0010:drop_nlink+0xce/0x110 [ 253.140062][T13292] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 57 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 253.160247][T13292] RSP: 0018:ffffc90009a8f1f0 EFLAGS: 00010283 [ 253.166492][T13292] RAX: ffffffff81ed532e RBX: ffff88813e276a40 RCX: 0000000000080000 [ 253.174764][T13292] RDX: ffffc900136c5000 RSI: 0000000000000b15 RDI: 0000000000000b16 [ 253.183077][T13292] RBP: ffffc90009a8f218 R08: 0000000000000003 R09: 0000000000000004 [ 253.191181][T13292] R10: dffffc0000000000 R11: fffff52001351e34 R12: dffffc0000000000 [ 253.199769][T13292] R13: 1ffff11027c4ed51 R14: ffff88813e276a88 R15: 0000000000000000 [ 253.207839][T13292] FS: 00007f7a2d2506c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 253.216930][T13292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.223852][T13292] CR2: 0000200000001000 CR3: 0000000125a6c000 CR4: 00000000003526b0 [ 253.232117][T13292] DR0: 000000000000ffff DR1: 0000000000000001 DR2: 0000000000001000 [ 253.240156][T13292] DR3: 000000000000000f DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 253.248317][T13292] Call Trace: [ 253.251876][T13292] [ 253.254944][T13292] simple_rmdir+0x153/0x260 [ 253.259470][T13292] vfs_rmdir+0x3e0/0x560 [ 253.264376][T13292] dir_rmdir+0x236/0x320 [ 253.268843][T13292] ? __cfi_dir_rmdir+0x10/0x10 [ 253.273825][T13292] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 253.278992][T13292] vfs_rmdir+0x3e0/0x560 [ 253.283275][T13292] ovl_workdir_cleanup+0x192/0x780 [ 253.288427][T13292] ? dentry_revalidate+0x2e0/0x370 [ 253.294303][T13292] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 253.300077][T13292] ? lookup_one+0x2d2/0x2e0 [ 253.304624][T13292] ? __cfi_lookup_one+0x10/0x10 [ 253.309650][T13292] ? kasan_save_alloc_info+0x40/0x50 [ 253.315078][T13292] ovl_workdir_create+0x2af/0x750 [ 253.320145][T13292] ? __kasan_check_write+0x18/0x20 [ 253.325468][T13292] ? ovl_statfs+0x2d0/0x2d0 [ 253.330349][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.335325][T13292] ? _raw_spin_unlock+0x45/0x60 [ 253.340366][T13292] ? mnt_want_write+0x321/0x510 [ 253.345346][T13292] ovl_get_workdir+0x328/0x1650 [ 253.350232][T13292] ? ovl_fill_super+0x36f0/0x36f0 [ 253.355287][T13292] ? __kasan_check_write+0x18/0x20 [ 253.360508][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.365398][T13292] ? __cfi__raw_spin_lock+0x10/0x10 [ 253.370883][T13292] ? __kasan_check_write+0x18/0x20 [ 253.376047][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.380846][T13292] ? __cfi__raw_spin_lock+0x10/0x10 [ 253.386238][T13292] ? __kasan_check_write+0x18/0x20 [ 253.391397][T13292] ? up_read+0x26/0x1d0 [ 253.395792][T13292] ? _raw_spin_unlock+0x45/0x60 [ 253.400847][T13292] ? ovl_inuse_trylock+0xbd/0x110 [ 253.405966][T13292] ovl_fill_super+0x133f/0x36f0 [ 253.410867][T13292] ? xas_nomem+0x71/0x2d0 [ 253.415372][T13292] ? ida_alloc_range+0xa12/0xa50 [ 253.420461][T13292] ? __cfi_ovl_fill_super+0x10/0x10 [ 253.425888][T13292] ? __kasan_check_write+0x18/0x20 [ 253.431039][T13292] ? mutex_unlock+0x8b/0x240 [ 253.435668][T13292] ? __cfi_mutex_unlock+0x10/0x10 [ 253.440732][T13292] ? __kasan_check_write+0x18/0x20 [ 253.446067][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.450946][T13292] ? sget_fc+0x9ce/0xad0 [ 253.455410][T13292] ? __cfi_set_anon_super_fc+0x10/0x10 [ 253.460903][T13292] get_tree_nodev+0xcb/0x170 [ 253.465598][T13292] ? __cfi_ovl_fill_super+0x10/0x10 [ 253.470927][T13292] ovl_get_tree+0x20/0x30 [ 253.475664][T13292] vfs_get_tree+0xa1/0x290 [ 253.480564][T13292] do_new_mount+0x251/0xb40 [ 253.485196][T13292] ? security_capable+0xcf/0xf0 [ 253.490227][T13292] path_mount+0x688/0x1050 [ 253.494811][T13292] ? putname+0x113/0x150 [ 253.499120][T13292] __se_sys_mount+0x2bd/0x480 [ 253.503983][T13292] ? __x64_sys_mount+0xf0/0xf0 [ 253.508790][T13292] ? __kasan_check_write+0x18/0x20 [ 253.513967][T13292] ? fpregs_restore_userregs+0x11d/0x260 [ 253.519809][T13292] __x64_sys_mount+0xc3/0xf0 [ 253.524637][T13292] x64_sys_call+0x2021/0x2ee0 [ 253.529434][T13292] do_syscall_64+0x58/0xf0 [ 253.533989][T13292] ? clear_bhb_loop+0x50/0xa0 [ 253.538816][T13292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 253.545440][T13292] RIP: 0033:0x7f7a2c38e9a9 [ 253.550057][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.570006][T13292] RSP: 002b:00007f7a2d250038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.578689][T13292] RAX: ffffffffffffffda RBX: 00007f7a2c5b6080 RCX: 00007f7a2c38e9a9 [ 253.587024][T13292] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 253.595152][T13292] RBP: 00007f7a2c410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 253.603186][T13292] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 253.611182][T13292] R13: 0000000000000000 R14: 00007f7a2c5b6080 R15: 00007ffde3e5f838 [ 253.619455][T13292] [ 253.622877][T13292] ---[ end trace 0000000000000000 ]--- [ 253.628618][T13292] ------------[ cut here ]------------ [ 253.634166][T13292] WARNING: CPU: 1 PID: 13292 at fs/dcache.c:774 dput+0x3cd/0x510 [ 253.642113][T13292] Modules linked in: [ 253.646062][T13292] CPU: 1 UID: 0 PID: 13292 Comm: syz.7.4412 Tainted: G W 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 253.661621][T13292] Tainted: [W]=WARN [ 253.666219][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.676456][T13292] RIP: 0010:dput+0x3cd/0x510 [ 253.681089][T13292] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 33 55 99 ff <0f> 0b e9 9c fe ff ff e8 27 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 253.701401][T13292] RSP: 0018:ffffc90009a8f488 EFLAGS: 00010246 [ 253.707536][T13292] RAX: ffffffff81ec55cd RBX: ffff88812fd9fee0 RCX: 0000000000080000 [ 253.715733][T13292] RDX: ffffc900136c5000 RSI: 000000000007ffff RDI: 0000000000080000 [ 253.723764][T13292] RBP: ffffc90009a8f4b8 R08: 0000000000000003 R09: 0000000000000004 [ 253.731844][T13292] R10: dffffc0000000000 R11: fffff52001351e80 R12: 00000000ffffff80 [ 253.740162][T13292] R13: ffff88812fd9ff64 R14: ffff88812fd9ff60 R15: 1ffff11025fb3fec [ 253.748403][T13292] FS: 00007f7a2d2506c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 253.757410][T13292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.764237][T13292] CR2: 00007fff4241ae38 CR3: 0000000125a6c000 CR4: 00000000003526b0 [ 253.772405][T13292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.780496][T13292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.788653][T13292] Call Trace: [ 253.791999][T13292] [ 253.795155][T13292] path_put+0x3d/0x70 [ 253.799162][T13292] dentry_release+0x53/0xb0 [ 253.803794][T13292] ? __cfi_dentry_release+0x10/0x10 [ 253.809018][T13292] __dentry_kill+0x22b/0x5f0 [ 253.813942][T13292] ? lock_for_kill+0xae/0x230 [ 253.818666][T13292] dput+0x3f2/0x510 [ 253.822802][T13292] ovl_workdir_create+0x2bf/0x750 [ 253.827886][T13292] ? __kasan_check_write+0x18/0x20 [ 253.833100][T13292] ? ovl_statfs+0x2d0/0x2d0 [ 253.837741][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.842680][T13292] ? _raw_spin_unlock+0x45/0x60 [ 253.847651][T13292] ? mnt_want_write+0x321/0x510 [ 253.852615][T13292] ovl_get_workdir+0x328/0x1650 [ 253.857715][T13292] ? ovl_fill_super+0x36f0/0x36f0 [ 253.862915][T13292] ? __kasan_check_write+0x18/0x20 [ 253.868231][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.873209][T13292] ? __cfi__raw_spin_lock+0x10/0x10 [ 253.878454][T13292] ? __kasan_check_write+0x18/0x20 [ 253.883738][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.888572][T13292] ? __cfi__raw_spin_lock+0x10/0x10 [ 253.894126][T13292] ? __kasan_check_write+0x18/0x20 [ 253.899344][T13292] ? up_read+0x26/0x1d0 [ 253.903642][T13292] ? _raw_spin_unlock+0x45/0x60 [ 253.908525][T13292] ? ovl_inuse_trylock+0xbd/0x110 [ 253.913876][T13292] ovl_fill_super+0x133f/0x36f0 [ 253.918771][T13292] ? xas_nomem+0x71/0x2d0 [ 253.923249][T13292] ? ida_alloc_range+0xa12/0xa50 [ 253.928386][T13292] ? __cfi_ovl_fill_super+0x10/0x10 [ 253.933626][T13292] ? __kasan_check_write+0x18/0x20 [ 253.938966][T13292] ? mutex_unlock+0x8b/0x240 [ 253.943718][T13292] ? __cfi_mutex_unlock+0x10/0x10 [ 253.949311][T13292] ? __kasan_check_write+0x18/0x20 [ 253.954632][T13292] ? _raw_spin_lock+0x8c/0x120 [ 253.959671][T13292] ? sget_fc+0x9ce/0xad0 [ 253.963959][T13292] ? __cfi_set_anon_super_fc+0x10/0x10 [ 253.970072][T13292] get_tree_nodev+0xcb/0x170 [ 253.974940][T13292] ? __cfi_ovl_fill_super+0x10/0x10 [ 253.980430][T13292] ovl_get_tree+0x20/0x30 [ 253.984924][T13292] vfs_get_tree+0xa1/0x290 [ 253.989461][T13292] do_new_mount+0x251/0xb40 [ 253.994022][T13292] ? security_capable+0xcf/0xf0 [ 253.998991][T13292] path_mount+0x688/0x1050 [ 254.003471][T13292] ? putname+0x113/0x150 [ 254.007743][T13292] __se_sys_mount+0x2bd/0x480 [ 254.012477][T13292] ? __x64_sys_mount+0xf0/0xf0 [ 254.017456][T13292] ? __kasan_check_write+0x18/0x20 [ 254.023035][T13292] ? fpregs_restore_userregs+0x11d/0x260 [ 254.028783][T13292] __x64_sys_mount+0xc3/0xf0 [ 254.033667][T13292] x64_sys_call+0x2021/0x2ee0 [ 254.038373][T13292] do_syscall_64+0x58/0xf0 [ 254.042851][T13292] ? clear_bhb_loop+0x50/0xa0 [ 254.047554][T13292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 254.053494][T13292] RIP: 0033:0x7f7a2c38e9a9 [ 254.058009][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.077848][T13292] RSP: 002b:00007f7a2d250038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.086415][T13292] RAX: ffffffffffffffda RBX: 00007f7a2c5b6080 RCX: 00007f7a2c38e9a9 [ 254.094966][T13292] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 254.103087][T13292] RBP: 00007f7a2c410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 254.111173][T13292] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 254.119174][T13292] R13: 0000000000000000 R14: 00007f7a2c5b6080 R15: 00007ffde3e5f838 [ 254.127196][T13292] [ 254.130244][T13292] ---[ end trace 0000000000000000 ]--- [ 254.136021][T13292] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 254.145715][T13292] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null.