last executing test programs: 5m18.608516908s ago: executing program 0 (id=2745): syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x8001) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000012"], 0x30}], 0x1}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5m17.708715302s ago: executing program 0 (id=2748): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x2, 'veth1_to_hsr\x00', {0x7fffffff}, 0x317}) setreuid(0xee00, 0x0) ioprio_get$uid(0x3, 0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="736d63210d19e8b61248"]) setresuid(0xee00, 0xee00, 0x0) r3 = getpid() prlimit64(r3, 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001140)=ANY=[@ANYBLOB="12011003021000082505a1a44000030109023b00010104909c09040000030206004d052406000005240037090d240f010900000006000900080905820210000e"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000600), 0x4) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) mlock(&(0x7f000025e000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000003c0), 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_XSAVE2(r10, 0x9000aecf, &(0x7f00000e9000/0x2000)=nil) 5m14.408642893s ago: executing program 0 (id=2778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x3d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) fchdir(0xffffffffffffffff) r4 = dup3(r2, r0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x6c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x48000) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001500010025bd7000fbdbdf250a06"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000680)=[@request_death={0x400c630e, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x1}], 0x50, 0x0, &(0x7f0000000740)="9f81763523961e903bb53fa3a72a8740bcfab047e25cb9deffede99103f455d8374b313b23ce726a9216f207fe3fb05fcc1fcc2c4853b2a9ac3b13746ccb29bc795175d0529510859d4445fe177e2fe2"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="34000000000000000000000002"], 0x38}, 0x4000014) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) timer_create(0x7, &(0x7f0000000000)={0x0, 0x3d, 0x4, @tid=0xffffffffffffffff}, &(0x7f00000000c0)) (async) timer_settime(r3, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000180)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) fchdir(0xffffffffffffffff) (async) dup3(r2, r0, 0x0) (async) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x6c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x48000) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001500010025bd7000fbdbdf250a06"], 0x4c}, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x24, 0x0, &(0x7f0000000680)=[@request_death={0x400c630e, 0x1}, @enter_looper, @clear_death={0x400c630f, 0x1}], 0x50, 0x0, &(0x7f0000000740)="9f81763523961e903bb53fa3a72a8740bcfab047e25cb9deffede99103f455d8374b313b23ce726a9216f207fe3fb05fcc1fcc2c4853b2a9ac3b13746ccb29bc795175d0529510859d4445fe177e2fe2"}) (async) 5m14.329543934s ago: executing program 0 (id=2781): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0x402c2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r2, 0x5, 0x2, 0x3766689785d1053e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r1, &(0x7f0000000040)=""/37, 0x25) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000100)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FITHAW(r6, 0xc0045878) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) getpid() 5m14.195259906s ago: executing program 0 (id=2785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000001c0)={[], [{@context={'context', 0x3d, 'user_u'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0xe, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x5, 0x7, 0x3, 0x6, 0x5f, 0xfffffffc, 0x0, 0x2, 0x80000000, 0x5, 0x1ff, 0xfffffff9, 0xa}}) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 5m14.156040956s ago: executing program 0 (id=2787): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x8000000, 0x0, 0x10, 0x800, 0x0, 0x0, 0x4}}) ptrace$peeksig(0x4209, r2, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000140)=ANY=[@ANYBLOB="1a3f4cbd86000000007022b3bead1f6a4e7b7656982c89760f3a6c7635b35375434cbf30fa702466343ec0ad2dc2c452395a5cb2694762497e8aad2f25", @ANYRESHEX=r5, @ANYRES16=r4]) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 5m14.121793637s ago: executing program 32 (id=2787): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x10, 0x8000000, 0x0, 0x10, 0x800, 0x0, 0x0, 0x4}}) ptrace$peeksig(0x4209, r2, &(0x7f00000003c0)={0x1, 0x0, 0x1}, &(0x7f0000000dc0)=[{}]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000140)=ANY=[@ANYBLOB="1a3f4cbd86000000007022b3bead1f6a4e7b7656982c89760f3a6c7635b35375434cbf30fa702466343ec0ad2dc2c452395a5cb2694762497e8aad2f25", @ANYRESHEX=r5, @ANYRES16=r4]) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 3m59.883513336s ago: executing program 2 (id=4209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x200000000000, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x54, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000584000/0x2000)=nil, 0x2000, 0x13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000280)=[@acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x19}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @release], 0x0, 0x0, 0x0}) 3m59.63359094s ago: executing program 2 (id=4212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) syz_open_dev$loop(0x0, 0x8, 0x0) add_key(&(0x7f0000000040)='blacklist\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003f00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000003f40)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4010) close_range(r0, 0xffffffffffffffff, 0x0) 3m59.512913722s ago: executing program 2 (id=4216): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz0\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x10000, 0x1}) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x10000042}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) sendmsg$tipc(r7, &(0x7f0000001840)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz0\x00') (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000080)={0xd000, 0x10000, 0x1}) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x10000042}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) (async) sendmsg$tipc(r7, &(0x7f0000001840)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) 3m59.232203156s ago: executing program 2 (id=4221): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) tkill(r2, 0x12) ptrace(0x4208, r2) ptrace(0x4208, r2) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) close_range(r0, 0xffffffffffffffff, 0x0) 3m59.175298337s ago: executing program 2 (id=4223): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$setlease(r0, 0x400, 0x1) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x40000000, &(0x7f0000000080)) fcntl$getflags(r0, 0x11) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000600)={0xd4, 0x0, 0x8}) listen(r4, 0x802) sendfile(r1, r1, 0x0, 0x7ffff000) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000380)=""/192, 0xc0}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/198, 0xc6}], 0x5, 0x1, 0xffff70e6) 3m59.063169699s ago: executing program 2 (id=4226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/134, 0x0, 0x2, 0xd}, @fda={0x66646185, 0x7, 0x1, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x1, 0x4}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x80, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x1}) 3m58.97420839s ago: executing program 33 (id=4226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/134, 0x0, 0x2, 0xd}, @fda={0x66646185, 0x7, 0x1, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x1, 0x4}}, &(0x7f0000000000)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x80, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x1}) 3m19.510826273s ago: executing program 1 (id=4755): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb90}, 0x1c) bind$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e21, 0x399, @private0}, 0x1c) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x416000, 0x104) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000080)=0x8000, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2c}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x70}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x26, 0x0, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x9, 0x3, 0xb, [{@local, 0x9}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xff}]}]}}}}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'erspan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b041400e0ffe2ff02004788001ca13bb100000208007f604803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendmmsg$inet(r4, &(0x7f0000005d00), 0x6, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) read$eventfd(r4, &(0x7f0000000fc0), 0x8) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x4044014) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001400)={0x0, 0x0, 0xfc000000}) 3m19.432133315s ago: executing program 1 (id=4756): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x68c902, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x11a, 0x1d, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4000010, r2, 0x2000) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x891d0611, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x68c902, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x11a, 0x1d, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x4000010, r2, 0x2000) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, 0x0) (async) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) syz_clone(0x891d0611, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) 3m19.421748115s ago: executing program 1 (id=4757): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x11c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd838d5c}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffab73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7178}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb82}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20004800) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x150, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7c8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x455e19bc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff81}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40850}, 0x8000) syz_open_dev$usbfs(&(0x7f0000000500), 0x4e9, 0x10000) llistxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000005c0)=0xa, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101880, 0x0) r5 = dup(r4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}}, 0x94) ioctl$PPPIOCGUNIT(r5, 0x80047456, &(0x7f0000000800)) r7 = syz_usb_connect$uac1(0x3, 0xd1, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0xc8, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xe, 0x9}, [@selector_unit={0x6, 0x24, 0x5, 0x1, 0x8, "cf"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x840a, 0x4, "c90f"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x5, "b2aa0b"}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0xffff, 0x3, "bc"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x6, 0x9, 0x10, 0xf2, 0xf}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0xff, 0x7c439226c746b8b}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x1, 0xa, 0xf1, "", "3c9407"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x9, 0xfa, "4aa9e457"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x9, 0x80, {0x7, 0x25, 0x1, 0x2, 0x7, 0xafc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x6, 0x80, "4bd3"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x1, 0x4, 0xa9, {0x7, 0x25, 0x1, 0x1, 0x5, 0x48}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x2, 0x2, 0x5, 0x20, 0x9c}, 0x1f, &(0x7f0000000980)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x1, 0xf4, 0x4}, @ssp_cap={0x10, 0x10, 0xa, 0xb4, 0x1, 0x5, 0x0, 0xd46, [0xff3e80]}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x5807}}]}) syz_usb_control_io$uac1(r7, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x0, 0xa, 0x98, {0x98, 0x31, "2387ebe58360a576b5256e05a4942b7f054231c9e158316153a6bcb2d98816b1380497f0445b94c024b66d8dfd0bceea40c7010b79cfe4ac332998139344e74bcf53252d329f900b3b217c906d34ecac79c221d556e3470821d4a26867aa609043519f2cfd1a210ed77ce4645063f524d05281bbca1dc1a20345550407dc631574d5b0b0cb45c240778d59ff5a2b1ad9ab781b745104"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x40, 0x9, 0x20, "0294d5d50ab808335814b272d5ec17ed7b213b144de4c928b4349afe37e3ba46"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "ecb4"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, '8M}'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "13b3ee"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "b9c7935e"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "cb9ed1"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000e00)={0x20, 0x2, 0x5e, {0x5e, 0x7, "9bfadc9bbe96cf7007dc48e77cf847f9f01e439d3acdb6d4b8a38a442afa2ae921a2e19e8a906dbfef613f4c5893f1b86a809a5532d7afb928223e752ffb67154265664aa9b92474470c7e6fe91b4ad9f1127db5f0f68f006caa3928"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x1c, &(0x7f0000000f00)={0x20, 0x17, 0xa9, "1e36d81616d885d828616f604c09a44dd524fe4284004836ec551a5de8e12f5ea3b7290166798f822ef2b771e001915e020c0d217c8597a1f0ccb4ba6403bfcdfa251f654d04cd44f40b6a90587a37bf6a7e16496f7e7b11178911111079047ad35131715f575ca2beae75576a63bdaf9c170525fcc5f503193fa92593a8fca8ad5b743f069a5abf08bff98b21ce0a35f9ec8d02c097bef5a39f2d1f7ce09eedb181531afe118cb04d"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}}) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r5) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r8, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x175c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x40810) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000001580)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000001280)={0x2b4, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2b7caf69}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2730}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa726}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "badb8ab599f0d3fd029cfda4f3d0a49560d323fd2967e947b0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "112e3d0b2d86dcd403f7a854f5ab457b1f929a10c615fd40d74d81ef3073fffce6"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2d094cee1f40a904bab6b3bc6dec318621ddeadc37e73d80311a00be448353c6"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f0262fbc51d55452951a7838ce104690d12e9b9c1648c620"}}]}, @TIPC_NLA_LINK={0xa0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5be}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3343}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x80}, 0x5) ioctl$BLKCLOSEZONE(r5, 0x40101287, &(0x7f00000015c0)={0x3, 0x6}) syz_usb_connect$uac1(0x0, 0x100, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff2, 0xf8}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x574b161f0c6f0b92, 0x2, "58db0d6344"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x7, 0x0, "a9861ba564ea15"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2ad3, 0x4, 0x0, "8def7a93c5dd9174f2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x9, "e9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0xf0, 0x8, "d4ae"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x3, "6de6b69167d2fb"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x0, 0x40, "02b8c1e0935d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x5, {0x7, 0x25, 0x1, 0x1, 0x1, 0xa4b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x101, 0x8, 0x6}, @as_header={0x7, 0x24, 0x1, 0xf9, 0x2, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0xff42, 0x45, "a57e88f01f8a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x35, "7c321f16743af48db4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x3d, 0x0, {0x7, 0x25, 0x1, 0x0, 0x56, 0x7}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x200, 0x44, 0x80, 0xff, 0x40, 0x3}, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x827}}, {0xc1, &(0x7f0000001880)=@string={0xc1, 0x3, "6374e01548cdbc81e3978ee38cee2973e382094de868fe5aac4be760dfe65555aafa3caafad1f8aed9a06422a407deb3d1d829ab9beb216ae43c1fb9ca84800f08fb25def6557adb6b1e900279e03e0b8db1fb0e6e9b03eec1d8e5a9f6345e2ec0989d7bd65386bbdb391499258b707df32ac685a8b8e8ecf66f1c2f9a5b8a1c6d1a5abb51095024a90c9ec27ff6d9d09523f5b84c4f4050aec903ca37d9f29b6dadaaf7857089d1fc8d7e45591d5a6c0832c92c3e378bc31da1136412c158"}}, {0xb2, &(0x7f0000001980)=@string={0xb2, 0x3, "517fc6dc7e0d546b513cc94f3cb938bb99ff721f1fdb32b0fcc437a123cf8db5d03d83f9ea17993139418fad43a0941d5de2485673b69522ce0f9a54cdefdf705a8a2d67f168f8266db7724a83877ae27575b70405bb751f2f58141b6546df2a6d76c5a2f56b035664c15d5328bd4510588bcd5034452e5e5b58966584b257516268dc8e82a7fb47151ea0837ceeb2b745c8513d99bd47d0bbe9790e48db3362550fc03dbac390a78a89911047bc7969"}}]}) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r5) 3m18.824163925s ago: executing program 1 (id=4769): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3a0, 0xe8, 0x1d0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0xff000000, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) syz_usb_connect(0x3, 0x2d, &(0x7f0000002d00)={{0x12, 0x1, 0x250, 0x29, 0x9, 0x8f, 0x40, 0xb57, 0xb2eb, 0x36b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x2, 0x10, 0x2, [{{0x9, 0x4, 0x18, 0x4, 0x0, 0x3, 0x1, 0x2, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x4}}]}}]}}]}}, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='net/dev_snmp6\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x18}}], 0x1, 0x8084) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r6, 0x89a3, &(0x7f0000000200)='bridge0\x00') write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x6000000) lseek(r4, 0x1, 0x0) getdents(r4, 0x0, 0x51) syz_clone(0x88004200, 0x0, 0xfffffffffffffc83, 0x0, 0x0, 0x0) 3m18.214529636s ago: executing program 1 (id=4773): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) mkdir(0x0, 0x19a) r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120103010902120001de0000080904000000d076d80e0000000000000000000000000000368526a107a8e633b0cfbb30a6cc2e74e3fd9ff04c80bddef924c62526c85e6751c08939b96e87d56f47abff5b9a209a379b79f961ef32c31d1a54ac9179058fbfe2d15c51c2d4bc3cd40cef9b60ecedd2d927bd14f691aadfa7a223b9775c0586d7dd6b7a3d40014b3cb416282e51e5b2bf8e3b47ee14060098ea8070aaa3c44291092ada52128e07ebf4693934a161f2516ba9ac3151e8c3d0b59ab456000000000000"], 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x8000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x200000, 0x80) unlinkat(r8, &(0x7f0000000200)='./file0\x00', 0x200) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2705ca3409e73b94, 0x2f, 0x1ff, 0x4, 0xc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0xfffffffffffffffe, 0xfffffffffffffffe, {0x1, 0x904, 0x0, {0x3, 0x0, 0x2, 0x8, 0x0, 0x1, 0x2, 0x8, 0x3, 0x1000, 0xffffffff, r6, r7, 0x7ff, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 3m17.679683446s ago: executing program 1 (id=4778): sched_setscheduler(0x0, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unshare(0x2040400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) io_setup(0x3e52, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@remote, @empty, r6}, 0xc) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xee) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x480001, 0x0) (async) sendfile(r8, r0, 0x0, 0x80000000) 3m1.411500631s ago: executing program 34 (id=4778): sched_setscheduler(0x0, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unshare(0x2040400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r4 = dup(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'syz_tun\x00', {}, 0x3}) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) io_setup(0x3e52, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@remote, @empty, r6}, 0xc) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xee) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}]}}) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x480001, 0x0) (async) sendfile(r8, r0, 0x0, 0x80000000) 4.358889103s ago: executing program 5 (id=7690): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40850}, 0x8000) syz_open_dev$usbfs(0x0, 0x4e9, 0x10000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101880, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) ioctl$PPPIOCGUNIT(r3, 0x80047456, 0x0) r4 = syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x2, 0x2, 0x5, 0x20, 0x9c}, 0x15, &(0x7f0000000980)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xb4, 0x1, 0x5, 0x0, 0xd46, [0xff3e80]}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x5807}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x0, 0xa, 0x40, {0x40, 0x31, "2387ebe58360a576b5256e05a4942b7f054231c9e158316153a6bcb2d98816b1380497f0445b94c024b66d8dfd0bceea40c7010b79cfe4ac332998139344"}}, 0x0}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x40, 0x9, 0x20, "0294d5d50ab808335814b272d5ec17ed7b213b144de4c928b4349afe37e3ba46"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x81, 0x2, "ecb4"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, '8M}'}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, "13b3ee"}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "b9c7935e"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "cb9ed1"}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000e00)={0x20, 0x2, 0x5e, {0x5e, 0x7, "9bfadc9bbe96cf7007dc48e77cf847f9f01e439d3acdb6d4b8a38a442afa2ae921a2e19e8a906dbfef613f4c5893f1b86a809a5532d7afb928223e752ffb67154265664aa9b92474470c7e6fe91b4ad9f1127db5f0f68f006caa3928"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x1c, &(0x7f0000000f00)={0x20, 0x17, 0xa9, "1e36d81616d885d828616f604c09a44dd524fe4284004836ec551a5de8e12f5ea3b7290166798f822ef2b771e001915e020c0d217c8597a1f0ccb4ba6403bfcdfa251f654d04cd44f40b6a90587a37bf6a7e16496f7e7b11178911111079047ad35131715f575ca2beae75576a63bdaf9c170525fcc5f503193fa92593a8fca8ad5b743f069a5abf08bff98b21ce0a35f9ec8d02c097bef5a39f2d1f7ce09eedb181531afe118cb04d"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r3) ioctl$BLKCLOSEZONE(r3, 0x40101287, &(0x7f00000015c0)={0x3, 0x6}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001600)={0x1, 'dummy0\x00', {}, 0x2}) syz_usb_connect$uac1(0x0, 0x100, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff2, 0xf8}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x574b161f0c6f0b92, 0x2, "58db0d6344"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x7, 0x0, "a9861ba564ea15"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2ad3, 0x4, 0x0, "8def7a93c5dd9174f2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x9, "e9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0xf0, 0x8, "d4ae"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x3, "6de6b69167d2fb"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x0, 0x40, "02b8c1e0935d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x5, {0x7, 0x25, 0x1, 0x1, 0x1, 0xa4b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x101, 0x8, 0x6}, @as_header={0x7, 0x24, 0x1, 0xf9, 0x2, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0xff42, 0x45, "a57e88f01f8a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x35, "7c321f16743af48db4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x3d, 0x0, {0x7, 0x25, 0x1, 0x0, 0x56, 0x7}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x200, 0x44, 0x80, 0xff, 0x40, 0x3}, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x827}}, {0xc1, &(0x7f0000001880)=@string={0xc1, 0x3, "6374e01548cdbc81e3978ee38cee2973e382094de868fe5aac4be760dfe65555aafa3caafad1f8aed9a06422a407deb3d1d829ab9beb216ae43c1fb9ca84800f08fb25def6557adb6b1e900279e03e0b8db1fb0e6e9b03eec1d8e5a9f6345e2ec0989d7bd65386bbdb391499258b707df32ac685a8b8e8ecf66f1c2f9a5b8a1c6d1a5abb51095024a90c9ec27ff6d9d09523f5b84c4f4050aec903ca37d9f29b6dadaaf7857089d1fc8d7e45591d5a6c0832c92c3e378bc31da1136412c158"}}, {0xb2, &(0x7f0000001980)=@string={0xb2, 0x3, "517fc6dc7e0d546b513cc94f3cb938bb99ff721f1fdb32b0fcc437a123cf8db5d03d83f9ea17993139418fad43a0941d5de2485673b69522ce0f9a54cdefdf705a8a2d67f168f8266db7724a83877ae27575b70405bb751f2f58141b6546df2a6d76c5a2f56b035664c15d5328bd4510588bcd5034452e5e5b58966584b257516268dc8e82a7fb47151ea0837ceeb2b745c8513d99bd47d0bbe9790e48db3362550fc03dbac390a78a89911047bc7969"}}]}) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) 3.799127683s ago: executing program 5 (id=7693): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000101"], 0x44}}, 0x0) symlink(0x0, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004f7d, &(0x7f0000000040)={0x2, 0x4e2b, @rand_addr=0x64010101}, 0x10) 3.335795841s ago: executing program 5 (id=7697): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000800)={[{@subsystem='net_prio'}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x0, 0xffff8881f6e28191) r2 = socket(0x10, 0x80002, 0x2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x1d, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) syz_clone3(&(0x7f0000001200)={0x24100000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/4096, 0x1000, &(0x7f0000001180)=""/44, &(0x7f00000011c0)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) setpriority(0x1, r4, 0x0) 3.251987303s ago: executing program 5 (id=7699): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "35931506993479e9", "47e059d8f4f0d675d50fd267f4dd300f", "468a3591", "5ce5b685f4df603e"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 1.578238442s ago: executing program 3 (id=7716): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) epoll_create(0x3) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.12067486s ago: executing program 4 (id=7718): r0 = socket(0x5, 0x5, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050001280"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x200000, 0x0) 1.102456921s ago: executing program 4 (id=7719): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001a005f0014f9f40700090400810000000001400000000000", 0x1c) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4000010, r0, 0xb2d41000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000840)=ANY=[@ANYBLOB="1a000000000000008604"]) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x16) 1.012197342s ago: executing program 4 (id=7720): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0) symlink(0x0, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004f7d, &(0x7f0000000040)={0x2, 0x4e2b, @rand_addr=0x64010101}, 0x10) 1.011726092s ago: executing program 6 (id=7721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = epoll_create1(0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x14}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001100)) dup3(r1, r3, 0x80000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000400)={[], [{@flag='dirsync'}]}) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000080)=0x2, 0x4) 1.008239122s ago: executing program 6 (id=7722): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x481, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x1) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000006c0)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000b40)={"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"}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) r6 = socket$unix(0x1, 0x5, 0x0) poll(&(0x7f0000000080)=[{r6, 0x200}], 0x1, 0x6) writev(r0, 0x0, 0x0) 959.692473ms ago: executing program 6 (id=7723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x4c, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 926.032224ms ago: executing program 6 (id=7724): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="070304001600010000002e"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x4880) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0x147a5000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 832.049745ms ago: executing program 6 (id=7725): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r1) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40850}, 0x8000) syz_open_dev$usbfs(0x0, 0x4e9, 0x10000) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x101880, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) ioctl$PPPIOCGUNIT(r3, 0x80047456, 0x0) r4 = syz_usb_connect$uac1(0x3, 0x0, 0x0, &(0x7f0000000a00)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x300, 0x2, 0x2, 0x5, 0x20, 0x9c}, 0x15, &(0x7f0000000980)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xb4, 0x1, 0x5, 0x0, 0xd46, [0xff3e80]}]}, 0x1, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x5807}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x0, 0xa, 0x40, {0x40, 0x31, "2387ebe58360a576b5256e05a4942b7f054231c9e158316153a6bcb2d98816b1380497f0445b94c024b66d8dfd0bceea40c7010b79cfe4ac332998139344"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000e00)={0x20, 0x2, 0x5e, {0x5e, 0x7, "9bfadc9bbe96cf7007dc48e77cf847f9f01e439d3acdb6d4b8a38a442afa2ae921a2e19e8a906dbfef613f4c5893f1b86a809a5532d7afb928223e752ffb67154265664aa9b92474470c7e6fe91b4ad9f1127db5f0f68f006caa3928"}}, &(0x7f0000000e80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x1c, &(0x7f0000000f00)={0x20, 0x17, 0xa9, "1e36d81616d885d828616f604c09a44dd524fe4284004836ec551a5de8e12f5ea3b7290166798f822ef2b771e001915e020c0d217c8597a1f0ccb4ba6403bfcdfa251f654d04cd44f40b6a90587a37bf6a7e16496f7e7b11178911111079047ad35131715f575ca2beae75576a63bdaf9c170525fcc5f503193fa92593a8fca8ad5b743f069a5abf08bff98b21ce0a35f9ec8d02c097bef5a39f2d1f7ce09eedb181531afe118cb04d"}, &(0x7f0000000fc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001000)={0x0, 0x8, 0x1, 0x8}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000010c0), r3) ioctl$BLKCLOSEZONE(r3, 0x40101287, &(0x7f00000015c0)={0x3, 0x6}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000001600)={0x1, 'dummy0\x00', {}, 0x2}) syz_usb_connect$uac1(0x0, 0x100, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff2, 0xf8}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x574b161f0c6f0b92, 0x2, "58db0d6344"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7, 0x7, 0x0, "a9861ba564ea15"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x2ad3, 0x4, 0x0, "8def7a93c5dd9174f2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x3, 0x1, 0x9, "e9"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0xf0, 0x8, "d4ae"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x3, "6de6b69167d2fb"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x0, 0x40, "02b8c1e0935d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x5, {0x7, 0x25, 0x1, 0x1, 0x1, 0xa4b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x101, 0x8, 0x6}, @as_header={0x7, 0x24, 0x1, 0xf9, 0x2, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0xff42, 0x45, "a57e88f01f8a"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8, 0x35, "7c321f16743af48db4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x3d, 0x0, {0x7, 0x25, 0x1, 0x0, 0x56, 0x7}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x200, 0x44, 0x80, 0xff, 0x40, 0x3}, 0x5, &(0x7f0000001780)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x827}}, {0xc1, &(0x7f0000001880)=@string={0xc1, 0x3, "6374e01548cdbc81e3978ee38cee2973e382094de868fe5aac4be760dfe65555aafa3caafad1f8aed9a06422a407deb3d1d829ab9beb216ae43c1fb9ca84800f08fb25def6557adb6b1e900279e03e0b8db1fb0e6e9b03eec1d8e5a9f6345e2ec0989d7bd65386bbdb391499258b707df32ac685a8b8e8ecf66f1c2f9a5b8a1c6d1a5abb51095024a90c9ec27ff6d9d09523f5b84c4f4050aec903ca37d9f29b6dadaaf7857089d1fc8d7e45591d5a6c0832c92c3e378bc31da1136412c158"}}, {0xb2, &(0x7f0000001980)=@string={0xb2, 0x3, "517fc6dc7e0d546b513cc94f3cb938bb99ff721f1fdb32b0fcc437a123cf8db5d03d83f9ea17993139418fad43a0941d5de2485673b69522ce0f9a54cdefdf705a8a2d67f168f8266db7724a83877ae27575b70405bb751f2f58141b6546df2a6d76c5a2f56b035664c15d5328bd4510588bcd5034452e5e5b58966584b257516268dc8e82a7fb47151ea0837ceeb2b745c8513d99bd47d0bbe9790e48db3362550fc03dbac390a78a89911047bc7969"}}]}) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r3) 737.006567ms ago: executing program 4 (id=7726): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x80fe}], 0x400000000000172, 0x4001c00) 718.853687ms ago: executing program 4 (id=7727): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300"/108], 0x16c}}, 0x0) 665.950428ms ago: executing program 3 (id=7728): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, &(0x7f0000000000)=ANY=[@ANYBLOB='rlog_pages=0']) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r1, &(0x7f00000046c0)={0x50, 0x0, r2, {0x7, 0x9, 0x9, 0x403a1810, 0xffff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x100}}, 0x50) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 580.06181ms ago: executing program 3 (id=7729): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0xfab5, 0x5, 0x2}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x2bc, 0xd, 0x6}, {0x93ff, 0x8, 0x0, 0x6}, {0x9, 0x81, 0x7f}, {0x5, 0xf0, 0x5f, 0x2}, {0x6000, 0x51, 0x7, 0x203d}, {0x85d, 0x81, 0xff, 0x6}, {0x0, 0x0, 0x1, 0x54}]}) (async) r1 = syz_io_uring_complete(0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x8, 0x0, 0x1, 0x4}) (async) lseek(r0, 0x6, 0x3) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c) (async) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONE(r0, 0x40049409, r3) (async) write(r3, &(0x7f0000000180)="b7f8485e92b18e20e2103a13b7ac5061c967fe858cd6f3be594cc843a2698f541aaa7f6736051f8417398ca8030730591881695e514d93d9b35b2efadf0a02", 0x3f) ioctl$FIOCLEX(r0, 0x5451) (async, rerun: 32) io_setup(0x8000, &(0x7f00000001c0)=0x0) (async, rerun: 32) r6 = accept4$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x0, @none}, &(0x7f0000000380)=0xe, 0x800) io_submit(r5, 0x3, &(0x7f00000004c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x2b, r2, &(0x7f0000000200), 0x0, 0x5, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000280)="7292cf6a3debce97e06cb605216059830625cbc3bb36b0ec45809bb11bcfcd58f268d8fac25f225441cdd16af800163529eb80a307a04e56bd950bf7862e17537319eeb4783df06ae505325de6024ba8c3933db783dd775a3cd5ca54f270e340a4626bc4f43488c3fff3863145a8fa4f65c74acfae8db0c5", 0x78, 0x7, 0x0, 0x0, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xe, 0x1, r6, &(0x7f00000003c0)="4ac36df6e8411c3b8ed48c409e02fcd72831b86efd859a9b06ae9a03b45a220abd4f9bb794e130992eaee67044edb929a50194641017801e5caaa5a8bce8b8b544d3e222209660df7a9f382d307f819faeedfcc1fad9971d3a02e62f030a09b98564d640ae7dd277365e3819139e6d4f3e587e3797146687acac0c27003b81a51833489c5ec2d4ce42178d5c5075487ceb2fb4c1935eed76b9d5c5bb", 0x9c, 0x800, 0x0, 0x1}]) (async) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0xffff, 0x5}]}) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, 0x0, 0x30a, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async, rerun: 64) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000003, 0x4000010, r6, 0x6cab2000) (async, rerun: 64) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r1) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000740)={0x20000000}) (async) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000780)={0x4, 0xf0, 0x7, 0xffffff8000000000, 0x7f, 0x4, 0x0, 0xffffffffffffff10}, &(0x7f00000007c0)={0xfffffffffffffffe, 0xffffffffffffffff, 0x200, 0x9, 0x2, 0x1, 0x4, 0x9117}, &(0x7f0000000800)={0x10, 0x1, 0x3, 0x236, 0x6, 0x0, 0x2, 0x7}, &(0x7f0000000880)={r9, r10+60000000}, &(0x7f0000000900)={&(0x7f00000008c0)={[0xe57]}, 0x8}) io_setup(0xa45, &(0x7f0000000940)=0x0) (async, rerun: 64) r12 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 64) io_cancel(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0xd, 0x0, r12, &(0x7f0000000980)="c0f1f309e43ef85fc69199ba94c872b66bed13", 0x13, 0x3, 0x0, 0x1, r3}, &(0x7f0000000a00)) (async) fcntl$addseals(r0, 0x409, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000d80)={&(0x7f0000000b00)={0x26c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "ae8ec627056f777508b64da77eab7e9244f3a0f0ddc34646"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "714e5bf78b9b9758d295de46c0fe57d7aef05af2e0cdf8bc2a5fbe05c250"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb619}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4f2}]}, @TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2023d323}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9807}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 534.36111ms ago: executing program 3 (id=7730): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x18c0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x460, &(0x7f0000000400)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x6000, 0xa, 0x3, 0xf, 0x6, 0x22, 0x72, 0x1, 0x24, 0x2, 0x61}, {0xd000, 0x80a0000, 0x10, 0x3, 0x7, 0x4, 0x40, 0x5c, 0x2, 0x5}, {0xdddd0000, 0x2, 0xe, 0x7, 0x6, 0xe1, 0x8, 0xe, 0x7, 0xc, 0x5, 0x5}, {0xdddd0000, 0xeeee8000, 0xd, 0x5, 0x10, 0x5, 0x6, 0x9, 0xa9, 0x6, 0x0, 0x1}, {0x2000, 0x2000, 0x9, 0x2, 0x1, 0x9, 0x1, 0x9, 0x3, 0x9, 0x8, 0xb}, {0x8080000, 0x4, 0xe, 0x4, 0x4, 0x8, 0x80, 0xb7, 0xf7, 0xd, 0x10, 0xe}, {0x2000, 0x3000, 0x4, 0x2, 0x7, 0x73, 0x27, 0x4, 0x2, 0x9, 0x8, 0x1}, {0x10000, 0xd000, 0xb, 0x3, 0x2, 0x4, 0x0, 0x3, 0x9, 0x5, 0x0, 0x1}, {0x5000, 0x8001}, {0x2, 0x9}, 0xc0050001, 0x0, 0x4, 0x80, 0xc, 0x6000, 0xffff1000, [0x8000000000000001, 0xb276, 0x8, 0x8]}) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x18c0}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000002fc0)=@ethtool_stats}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x460, &(0x7f0000000400)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) lseek(r4, 0x10001, 0x0) (async) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x6000, 0xa, 0x3, 0xf, 0x6, 0x22, 0x72, 0x1, 0x24, 0x2, 0x61}, {0xd000, 0x80a0000, 0x10, 0x3, 0x7, 0x4, 0x40, 0x5c, 0x2, 0x5}, {0xdddd0000, 0x2, 0xe, 0x7, 0x6, 0xe1, 0x8, 0xe, 0x7, 0xc, 0x5, 0x5}, {0xdddd0000, 0xeeee8000, 0xd, 0x5, 0x10, 0x5, 0x6, 0x9, 0xa9, 0x6, 0x0, 0x1}, {0x2000, 0x2000, 0x9, 0x2, 0x1, 0x9, 0x1, 0x9, 0x3, 0x9, 0x8, 0xb}, {0x8080000, 0x4, 0xe, 0x4, 0x4, 0x8, 0x80, 0xb7, 0xf7, 0xd, 0x10, 0xe}, {0x2000, 0x3000, 0x4, 0x2, 0x7, 0x73, 0x27, 0x4, 0x2, 0x9, 0x8, 0x1}, {0x10000, 0xd000, 0xb, 0x3, 0x2, 0x4, 0x0, 0x3, 0x9, 0x5, 0x0, 0x1}, {0x5000, 0x8001}, {0x2, 0x9}, 0xc0050001, 0x0, 0x4, 0x80, 0xc, 0x6000, 0xffff1000, [0x8000000000000001, 0xb276, 0x8, 0x8]}) (async) 447.879952ms ago: executing program 4 (id=7731): sched_setscheduler(0x0, 0x1, 0x0) unshare(0x2040400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e732ac93bac2a785b67dff23a353d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0xc9100161, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r0, 0x0, 0x80000000) 411.868323ms ago: executing program 3 (id=7732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x4c, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 410.881892ms ago: executing program 3 (id=7733): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000006400)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x104, {0x0, 0x3, 0x7, 0x2, 0x8005, 0x4, {0x2, 0x8, 0xfffffffffffffff6, 0x3, 0x7, 0x9, 0x800, 0x2, 0xfffffffe, 0x1000, 0x44, 0x0, r4, 0x10000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet(0x2, 0x80001, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESDEC], 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x1408002, 0x5, 0x7, 0x1, 0x2, 0x0, 0x0, 0x10, 0x6}}, 0x50) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, r3, {0x7, 0x28, 0xd1a0, 0x0, 0x1, 0xfffe, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 236.176615ms ago: executing program 6 (id=7734): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000003c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101"], 0x44}}, 0x0) symlink(0x0, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004f7d, &(0x7f0000000040)={0x2, 0x4e2b, @rand_addr=0x64010101}, 0x10) 42.074959ms ago: executing program 5 (id=7735): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0xc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x97ff}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=7736): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = getpid() fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x8f5, 0x100000000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f0000000380)=[@register_looper, @acquire={0x40046305, 0x1}], 0x3a, 0x0, &(0x7f00000003c0)="a2d443814a86af91a46b388e83fd0ee4e7211197b91369928c1306ec1d3581eaf190d4e26b5c447ba5f9c5019e9d7f1036ca32483407b7f95df9"}) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = fspick(r4, &(0x7f0000000440)='./bus\x00', 0x0) fstat(r5, &(0x7f0000000480)) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) epoll_create(0x3) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1004040, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): ibutes in process `syz.5.6244'. [ 393.949351][T19139] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 394.406823][T19154] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6249'. [ 394.457116][ T36] kauditd_printk_skb: 652 callbacks suppressed [ 394.457134][ T36] audit: type=1400 audit(2000000005.378:51586): avc: denied { mounton } for pid=19155 comm="syz.5.6250" path="/516/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 394.513164][ T36] audit: type=1400 audit(2000000005.434:51587): avc: denied { create } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.538198][ T36] audit: type=1400 audit(2000000005.434:51588): avc: denied { write } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.559654][ T36] audit: type=1400 audit(2000000005.434:51589): avc: denied { read } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.580904][ T36] audit: type=1400 audit(2000000005.434:51590): avc: denied { read } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.602557][ T36] audit: type=1400 audit(2000000005.444:51591): avc: denied { create } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.626868][ T36] audit: type=1400 audit(2000000005.444:51592): avc: denied { create } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.649346][ T36] audit: type=1400 audit(2000000005.444:51593): avc: denied { create } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.669895][ T36] audit: type=1400 audit(2000000005.444:51594): avc: denied { ioctl } for pid=19155 comm="syz.5.6250" path="socket:[75962]" dev="sockfs" ino=75962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.705058][ T36] audit: type=1400 audit(2000000005.444:51595): avc: denied { write } for pid=19155 comm="syz.5.6250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 394.776933][T19165] 9pnet_fd: Insufficient options for proto=fd [ 395.001986][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6259'. [ 395.485790][T19187] 9pnet_fd: Insufficient options for proto=fd [ 395.650310][T19202] 9pnet_fd: Insufficient options for proto=fd [ 396.116298][T19213] overlayfs: failed to clone upperpath [ 397.322335][T19233] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6279'. [ 398.102006][T19261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6288'. [ 398.187782][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6290'. [ 398.441193][T19287] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6296'. [ 398.450199][T19287] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6296'. [ 398.452031][T19288] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6295'. [ 398.460791][T19287] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 398.896742][T19314] 9pnet_fd: Insufficient options for proto=fd [ 399.213433][T19331] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6308'. [ 399.421865][T19343] SELinux: Context system_u:object_r:udev_tbl_t:s0 is not valid (left unmapped). [ 399.817779][ T36] kauditd_printk_skb: 446 callbacks suppressed [ 399.817797][ T36] audit: type=1400 audit(2000000010.401:52042): avc: denied { create } for pid=19350 comm="syz.3.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 399.832815][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6316'. [ 399.846112][ T36] audit: type=1400 audit(2000000010.411:52043): avc: denied { create } for pid=19350 comm="syz.3.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.858501][T19351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6316'. [ 399.873812][ T36] audit: type=1400 audit(2000000010.411:52044): avc: denied { bind } for pid=19350 comm="syz.3.6316" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.903611][ T36] audit: type=1400 audit(2000000010.411:52045): avc: denied { node_bind } for pid=19350 comm="syz.3.6316" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 399.925565][ T36] audit: type=1400 audit(2000000010.411:52046): avc: denied { connect } for pid=19350 comm="syz.3.6316" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.948066][ T36] audit: type=1400 audit(2000000010.411:52047): avc: denied { bind } for pid=19350 comm="syz.3.6316" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 399.971816][ T36] audit: type=1400 audit(2000000010.411:52048): avc: denied { name_bind } for pid=19350 comm="syz.3.6316" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 399.992938][ T36] audit: type=1400 audit(2000000010.411:52049): avc: denied { node_bind } for pid=19350 comm="syz.3.6316" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 400.015909][ T36] audit: type=1400 audit(2000000010.411:52050): avc: denied { write } for pid=19350 comm="syz.3.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.038214][ T36] audit: type=1400 audit(2000000010.439:52051): avc: denied { write } for pid=19350 comm="syz.3.6316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.064371][T19355] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6318'. [ 400.112168][T19358] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6317'. [ 401.633487][T19391] /dev/rnullb0: Can't open blockdev [ 402.158248][T19408] rust_binder: 19408: no such ref 0 [ 402.164122][T19408] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 402.172903][T19408] rust_binder: Write failure EINVAL in pid:419 [ 402.173462][T19408] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 402.186831][T19408] rust_binder: Write failure EINVAL in pid:419 [ 402.470595][T19417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:423 [ 402.559453][T19419] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 402.992481][T19426] incfs: Backing dir is not set, filesystem can't be mounted. [ 402.999996][T19426] incfs: mount failed -2 [ 403.010770][T19426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19426 comm=syz.3.6344 [ 403.026763][T19428] incfs: Backing dir is not set, filesystem can't be mounted. [ 403.034366][T19428] incfs: mount failed -2 [ 403.143621][T19433] tipc: Trying to set illegal importance in message [ 403.451130][T19450] __nla_validate_parse: 2 callbacks suppressed [ 403.451152][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6351'. [ 403.492173][T19450] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3095185786 (6190371572 ns) > initial count (5484635560 ns). Using initial count to start timer. [ 404.462080][T19473] rust_binder: Write failure EFAULT in pid:434 [ 404.488539][T19467] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6359'. [ 404.652675][T19483] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6364'. [ 404.838064][T19491] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 404.845840][T19491] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 405.178705][ T36] kauditd_printk_skb: 793 callbacks suppressed [ 405.178723][ T36] audit: type=1400 audit(2000000015.415:52845): avc: denied { read write } for pid=15962 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.210521][ T36] audit: type=1400 audit(2000000015.415:52846): avc: denied { read write open } for pid=15962 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.236851][ T36] audit: type=1400 audit(2000000015.415:52847): avc: denied { ioctl } for pid=15962 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.572773][ T36] audit: type=1400 audit(2000000015.780:52848): avc: denied { create } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.593564][ T36] audit: type=1400 audit(2000000015.798:52849): avc: denied { bind } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.614261][ T36] audit: type=1400 audit(2000000015.826:52850): avc: denied { create } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.634789][ T36] audit: type=1400 audit(2000000015.826:52851): avc: denied { bind } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.655759][ T36] audit: type=1400 audit(2000000015.826:52852): avc: denied { bind } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.675914][ T36] audit: type=1400 audit(2000000015.826:52853): avc: denied { create } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.696376][ T36] audit: type=1400 audit(2000000015.826:52854): avc: denied { bind } for pid=19514 comm="syz.5.6375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 405.835901][T19518] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6376'. [ 406.054600][T19531] rust_binder: 19530 RLIMIT_NICE not set [ 407.122215][T19560] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6390'. [ 407.492938][T19574] netlink: 'syz.5.6395': attribute type 4 has an invalid length. [ 407.502426][T19573] netlink: 'syz.5.6395': attribute type 4 has an invalid length. [ 407.747550][T19584] 9pnet_fd: Insufficient options for proto=fd [ 407.945473][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6408'. [ 407.962177][T19588] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6408'. [ 408.158362][T19602] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6403'. [ 408.310806][T19607] fuse: Bad value for 'user_id' [ 408.315854][T19607] fuse: Bad value for 'user_id' [ 408.598931][T19627] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6413'. [ 408.749884][T19632] netlink: 'syz.6.6415': attribute type 29 has an invalid length. [ 408.757818][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6415'. [ 409.099032][T19656] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6423'. [ 409.587303][T19695] overlayfs: failed to clone upperpath [ 409.611656][T19698] incfs: Options parsing error. -22 [ 409.616985][T19698] incfs: mount failed -22 [ 409.624708][T19698] overlayfs: failed to clone upperpath [ 409.748035][T19710] sock: sock_set_timeout: `syz.6.6443' (pid 19710) tries to set negative timeout [ 409.961736][T19735] overlayfs: failed to clone upperpath [ 410.149464][T19755] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.160908][T19755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19755 comm=syz.5.6458 [ 410.369990][T19774] overlayfs: failed to clone lowerpath [ 410.531343][ T36] kauditd_printk_skb: 441 callbacks suppressed [ 410.531362][ T36] audit: type=1400 audit(2000000020.418:53296): avc: denied { write } for pid=19779 comm="syz.3.6468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 410.532215][T19785] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6468'. [ 410.537563][ T36] audit: type=1400 audit(2000000020.418:53297): avc: denied { nlmsg_write } for pid=19779 comm="syz.3.6468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 410.576057][T19781] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6464'. [ 410.641797][ T36] audit: type=1400 audit(2000000020.521:53298): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.700368][ T36] audit: type=1400 audit(2000000020.521:53299): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.726072][ T36] audit: type=1400 audit(2000000020.521:53300): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.763786][ T36] audit: type=1400 audit(2000000020.521:53301): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.804416][ T36] audit: type=1400 audit(2000000020.521:53302): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.826135][ T36] audit: type=1400 audit(2000000020.521:53303): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.878814][ T36] audit: type=1400 audit(2000000020.521:53304): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.905973][ T36] audit: type=1400 audit(2000000020.521:53305): avc: denied { create } for pid=19788 comm="syz.6.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 411.260526][T19819] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6478'. [ 411.626762][T19844] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6486'. [ 412.002511][T19869] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6496'. [ 412.011980][T19869] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6496'. [ 412.024145][T19869] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 412.200230][T19885] bridge0: entered allmulticast mode [ 412.206845][T19887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6501'. [ 412.216071][T19887] bridge_slave_1: left allmulticast mode [ 412.221826][T19887] bridge_slave_1: left promiscuous mode [ 412.227459][T19887] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.235452][T19887] bridge_slave_0: left allmulticast mode [ 412.241145][T19887] bridge_slave_0: left promiscuous mode [ 412.246843][T19887] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.257165][T19887] bridge0 (unregistering): left allmulticast mode [ 412.629368][T19901] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 413.135632][T19941] 9pnet: p9_errstr2errno: server reported unknown error syz0 [ 413.554896][T19964] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.562033][T19964] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.569197][T19964] bridge_slave_0: entered allmulticast mode [ 413.576052][T19964] bridge_slave_0: entered promiscuous mode [ 413.583843][T19972] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6533'. [ 413.593018][T19964] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.601162][T19964] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.608991][T19964] bridge_slave_1: entered allmulticast mode [ 413.615398][T19964] bridge_slave_1: entered promiscuous mode [ 413.625891][T19975] 9pnet_fd: Insufficient options for proto=fd [ 413.632303][T19974] 9pnet_fd: Insufficient options for proto=fd [ 413.735528][T19964] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.742614][T19964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.749929][T19964] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.756973][T19964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.807110][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.815062][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.828230][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.835333][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.851551][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.858669][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.948029][T19964] veth0_vlan: entered promiscuous mode [ 413.990471][T19964] veth1_macvtap: entered promiscuous mode [ 414.074479][T19995] fuse: Bad value for 'fd' [ 414.180556][T20000] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 414.180598][T20000] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 414.189621][T20000] rust_binder: Read failure Err(EFAULT) in pid:2 [ 414.295616][T20010] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 414.310636][T20010] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 414.506729][T20023] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6549'. [ 415.257457][T20043] overlayfs: failed to resolve './file0': -2 [ 415.357849][T20049] 9pnet_fd: Insufficient options for proto=fd [ 415.515166][T20063] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6563'. [ 415.880977][T20073] fuse: Bad value for 'fd' [ 415.885482][ T36] kauditd_printk_skb: 666 callbacks suppressed [ 415.885500][ T36] audit: type=1400 audit(2000000025.422:53972): avc: denied { name_bind } for pid=20077 comm="syz.6.6569" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 415.926671][ T36] audit: type=1400 audit(2000000025.422:53973): avc: denied { node_bind } for pid=20077 comm="syz.6.6569" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 415.947909][ T36] audit: type=1400 audit(2000000025.432:53974): avc: denied { create } for pid=20077 comm="syz.6.6569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.968870][ T36] audit: type=1400 audit(2000000025.488:53975): avc: denied { mounton } for pid=20082 comm="syz.3.6570" path="/493/file0" dev="tmpfs" ino=2723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 416.012653][ T36] audit: type=1400 audit(2000000025.488:53976): avc: denied { create } for pid=20082 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.046655][T20088] overlayfs: missing 'workdir' [ 416.087735][ T36] audit: type=1400 audit(2000000025.488:53977): avc: denied { write } for pid=20082 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.127227][ T36] audit: type=1400 audit(2000000025.488:53978): avc: denied { read } for pid=20082 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.149813][ T36] audit: type=1400 audit(2000000025.488:53979): avc: denied { read } for pid=20082 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 416.181131][ T36] audit: type=1400 audit(2000000025.488:53980): avc: denied { create } for pid=20082 comm="syz.3.6570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.211747][ T36] audit: type=1400 audit(2000000025.507:53981): avc: denied { read write } for pid=20072 comm="syz.5.6567" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 416.353416][T20107] binder: Bad value for 'max' [ 416.356026][T20106] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6578'. [ 417.716300][T20160] netlink: 4676 bytes leftover after parsing attributes in process `syz.6.6601'. [ 418.435812][T20199] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 61) [ 418.435837][T20199] rust_binder: Error while translating object. [ 418.450978][T20199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 418.457745][T20199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:52 [ 418.699971][T20220] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 418.716485][T20220] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 418.716516][T20220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 418.724612][T20220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:71 [ 418.962150][T20230] netlink: 'syz.3.6627': attribute type 27 has an invalid length. [ 418.964983][T20226] 9pnet_fd: Insufficient options for proto=fd [ 419.239635][T20252] overlayfs: failed to clone upperpath [ 419.630882][T20259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6639'. [ 419.757797][T20266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6642'. [ 419.999916][T20281] binder: Bad value for 'max' [ 420.289374][ T320] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 421.183652][T20313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6655'. [ 421.332358][ T36] kauditd_printk_skb: 612 callbacks suppressed [ 421.332376][ T36] audit: type=1400 audit(2000000030.520:54594): avc: denied { create } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.365410][ T36] audit: type=1400 audit(2000000030.548:54595): avc: denied { create } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.388388][ T36] audit: type=1400 audit(2000000030.548:54596): avc: denied { write } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.409375][ T36] audit: type=1400 audit(2000000030.548:54597): avc: denied { read } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.434667][ T36] audit: type=1400 audit(2000000030.548:54598): avc: denied { read } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.456337][ T36] audit: type=1400 audit(2000000030.548:54599): avc: denied { write } for pid=20315 comm="syz.3.6656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.479810][ T36] audit: type=1400 audit(2000000030.661:54600): avc: denied { create } for pid=20321 comm="syz.3.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.501824][ T36] audit: type=1400 audit(2000000030.661:54601): avc: denied { mounton } for pid=20317 comm="syz.6.6657" path="/438/file0" dev="tmpfs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 421.529307][ T36] audit: type=1400 audit(2000000030.661:54602): avc: denied { create } for pid=20321 comm="syz.3.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.534142][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6658'. [ 421.552798][ T36] audit: type=1400 audit(2000000030.661:54603): avc: denied { write } for pid=20321 comm="syz.3.6658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 421.574482][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6658'. [ 421.817310][T20346] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6666'. [ 421.876226][T20347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6664'. [ 422.054084][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6668'. [ 422.106741][T20363] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 423.192123][T20395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6681'. [ 423.463954][T20398] 9pnet_fd: Insufficient options for proto=fd [ 424.307920][T20435] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6694'. [ 424.444896][T20442] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 424.466611][T20444] fuseblk: Unknown parameter 'fd0x0000000000000003' [ 424.687466][T20456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6704'. [ 424.730884][T20461] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6703'. [ 424.872078][T20468] incfs: Options parsing error. -22 [ 424.883201][T20468] incfs: mount failed -22 [ 424.977656][T20466] /dev/rnullb0: Can't open blockdev [ 425.371228][T20512] 9pnet_fd: Insufficient options for proto=fd [ 426.107656][T20575] overlayfs: failed to clone upperpath [ 426.200451][T20586] 9pnet_fd: Insufficient options for proto=fd [ 426.229168][T20588] netlink: 'syz.6.6749': attribute type 11 has an invalid length. [ 426.239303][T20588] cgroup: release_agent respecified [ 426.675222][T20591] overlayfs: failed to clone upperpath [ 426.715264][ T36] kauditd_printk_skb: 591 callbacks suppressed [ 426.715282][ T36] audit: type=1326 audit(2000000035.562:55195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.745403][ T36] audit: type=1326 audit(2000000035.562:55196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.751202][T20593] __nla_validate_parse: 2 callbacks suppressed [ 426.751220][T20593] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6751'. [ 426.769200][ T36] audit: type=1326 audit(2000000035.581:55197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d7f8d310 code=0x7ffc0000 [ 426.813535][ T36] audit: type=1326 audit(2000000035.581:55198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d7f8d310 code=0x7ffc0000 [ 426.838314][ T36] audit: type=1326 audit(2000000035.581:55199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.863758][ T36] audit: type=1326 audit(2000000035.581:55200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.887639][ T36] audit: type=1326 audit(2000000035.581:55201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.911430][ T36] audit: type=1326 audit(2000000035.581:55202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.940819][ T36] audit: type=1326 audit(2000000035.581:55203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 426.968004][ T36] audit: type=1326 audit(2000000035.581:55204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20592 comm="syz.3.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff4d7f8e9a9 code=0x7ffc0000 [ 427.102570][T20623] netlink: 'syz.4.6762': attribute type 27 has an invalid length. [ 427.114624][T20623] overlayfs: failed to clone upperpath [ 428.774227][T20674] netlink: 'syz.6.6782': attribute type 4 has an invalid length. [ 428.782159][T20674] netlink: 'syz.6.6782': attribute type 21 has an invalid length. [ 428.790047][T20674] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.6782'. [ 428.947293][T20687] netlink: 'syz.6.6787': attribute type 64 has an invalid length. [ 428.955181][T20687] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6787'. [ 429.024456][T20696] incfs: Options parsing error. -22 [ 429.029697][T20696] incfs: mount failed -22 [ 429.169664][T20707] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6794'. [ 429.945791][T20719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20719 comm=syz.3.6798 [ 430.055081][T20735] overlayfs: failed to clone upperpath [ 430.095043][T20736] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6803'. [ 430.239542][T20748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20748 comm=syz.3.6809 [ 430.366320][T20754] syz.3.6812 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 430.384737][T20757] fuse: Unknown parameter 'f' [ 430.389607][T20756] fuse: Unknown parameter 'f' [ 430.425190][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.431731][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.456527][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.463252][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.470069][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.476622][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.483360][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.489949][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.496484][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.503222][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.509803][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.516313][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.523376][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.530110][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.536807][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.543410][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.549952][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.556682][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.564005][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.570505][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.577200][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.583690][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.590496][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.597028][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.603610][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.610377][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.616952][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.623511][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.630255][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.636777][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.643538][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.650050][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.656596][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.663347][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.669930][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.676433][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.683387][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.689959][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.696984][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.703505][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.711397][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.718446][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.725165][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.731894][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.738623][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.740080][T20764] fuseblk: Bad value for 'fd' [ 430.746198][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.756131][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.762675][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.769790][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.776402][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.783169][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.789669][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.796188][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.802876][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.809520][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.815986][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.822685][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.829188][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.835890][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.842437][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.848915][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.855589][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.862156][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.868632][T20761] 9pnet_fd: Insufficient options for proto=fd [ 430.875373][T20761] 9pnet_fd: Insufficient options for proto=fd [ 431.062081][T20783] netlink: 'syz.3.6822': attribute type 27 has an invalid length. [ 431.219563][T20791] 9pnet_fd: Insufficient options for proto=fd [ 431.442623][T20816] overlay: Unknown parameter 'permit_directio' [ 431.449700][T20816] 9pnet_fd: Insufficient options for proto=fd [ 431.479082][T20818] overlayfs: failed to clone upperpath [ 431.982875][T20860] overlayfs: failed to clone upperpath [ 432.176661][ T36] kauditd_printk_skb: 477 callbacks suppressed [ 432.176678][ T36] audit: type=1400 audit(2000000040.660:55682): avc: denied { mounton } for pid=20868 comm="syz.4.6852" path="/222/bus" dev="tmpfs" ino=1237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 432.211849][ T36] audit: type=1400 audit(2000000040.660:55683): avc: denied { create } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.232541][ T36] audit: type=1400 audit(2000000040.660:55684): avc: denied { write } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.253266][ T36] audit: type=1400 audit(2000000040.660:55685): avc: denied { read } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.273959][ T36] audit: type=1400 audit(2000000040.660:55686): avc: denied { read } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.278136][T20875] overlayfs: failed to clone upperpath [ 432.294943][ T36] audit: type=1400 audit(2000000040.697:55687): avc: denied { create } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.321059][ T36] audit: type=1400 audit(2000000040.697:55688): avc: denied { write } for pid=20868 comm="syz.4.6852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 432.345295][ T36] audit: type=1400 audit(2000000040.763:55689): avc: denied { mounton } for pid=20874 comm="syz.4.6854" path="/224/file0" dev="tmpfs" ino=1248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 432.368770][ T36] audit: type=1400 audit(2000000040.763:55690): avc: denied { mount } for pid=20874 comm="syz.4.6854" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 432.375545][T20880] overlayfs: failed to clone upperpath [ 432.391630][ T36] audit: type=1400 audit(2000000040.763:55691): avc: denied { mounton } for pid=20874 comm="syz.4.6854" path="/224/bus" dev="tmpfs" ino=1250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 432.735771][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6862'. [ 432.836823][T20911] incfs: Options parsing error. -22 [ 432.842133][T20911] incfs: mount failed -22 [ 432.848249][T20911] veth1_macvtap: left promiscuous mode [ 432.853745][T20911] macsec0: entered allmulticast mode [ 433.490635][T20939] fuseblk: Bad value for 'fd' [ 435.090251][T20986] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6894'. [ 435.104383][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6894'. [ 435.344210][T21000] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6899'. [ 435.773094][T21026] overlay: Unknown parameter 'euid' [ 436.108744][T21036] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.132612][T21036] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.154707][T21036] bridge_slave_0: entered allmulticast mode [ 436.175812][T21036] bridge_slave_0: entered promiscuous mode [ 436.190363][T21036] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.207755][T21036] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.214905][T21036] bridge_slave_1: entered allmulticast mode [ 436.223367][T21036] bridge_slave_1: entered promiscuous mode [ 436.275620][ T46] tipc: Disabling bearer [ 436.349971][T21036] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.357041][T21036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.364453][T21036] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.371525][T21036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.388247][ T46] tipc: Left network mode [ 436.412744][T21066] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6923'. [ 436.470440][T21067] fuseblk: Bad value for 'user_id' [ 436.479483][T21067] fuseblk: Bad value for 'user_id' [ 436.484931][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.492420][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.509557][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.516661][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.532051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.539158][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.642504][T21036] veth0_vlan: entered promiscuous mode [ 436.687842][T21036] veth1_macvtap: entered promiscuous mode [ 437.800459][ T36] kauditd_printk_skb: 466 callbacks suppressed [ 437.800480][ T36] audit: type=1400 audit(2000000045.926:56158): avc: denied { create } for pid=21089 comm="syz.5.6932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.827019][ T36] audit: type=1400 audit(2000000045.926:56159): avc: denied { ioctl } for pid=21089 comm="syz.5.6932" path="socket:[82392]" dev="sockfs" ino=82392 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 437.852142][ T36] audit: type=1400 audit(2000000045.926:56160): avc: denied { name_bind } for pid=21089 comm="syz.5.6932" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 437.874262][ T36] audit: type=1400 audit(2000000045.926:56161): avc: denied { name_bind } for pid=21089 comm="syz.5.6932" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 437.896183][ T36] audit: type=1400 audit(2000000045.926:56162): avc: denied { mount } for pid=21089 comm="syz.5.6932" name="/" dev="configfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 437.919373][ T36] audit: type=1400 audit(2000000045.926:56163): avc: denied { search } for pid=21089 comm="syz.5.6932" name="/" dev="configfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.941814][ T36] audit: type=1400 audit(2000000045.926:56164): avc: denied { search } for pid=21089 comm="syz.5.6932" name="/" dev="configfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.964533][ T36] audit: type=1400 audit(2000000045.926:56165): avc: denied { read } for pid=21089 comm="syz.5.6932" name="/" dev="configfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 437.987094][ T36] audit: type=1400 audit(2000000045.926:56166): avc: denied { read open } for pid=21089 comm="syz.5.6932" path="/" dev="configfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 438.010488][ T36] audit: type=1400 audit(2000000046.104:56167): avc: denied { create } for pid=21099 comm="syz.6.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.546518][T21119] rust_binder: Write failure EFAULT in pid:6 [ 438.613315][T21125] devtmpfs: Cannot disable swap on remount [ 438.629590][T21125] fuse: Bad value for 'fd' [ 439.112833][T21145] rust_binder: 21145: no such ref 1 [ 439.331753][T21149] 9pnet_fd: Insufficient options for proto=fd [ 439.514022][T21163] fuse: Bad value for 'user_id' [ 439.520105][T21163] fuse: Bad value for 'user_id' [ 439.532720][T21163] fuse: Bad value for 'user_id' [ 439.540931][T21163] fuse: Bad value for 'user_id' [ 439.552904][T21163] fuse: Bad value for 'user_id' [ 439.563599][T21163] fuse: Bad value for 'user_id' [ 439.570012][T21163] fuse: Bad value for 'user_id' [ 439.574990][T21163] fuse: Bad value for 'user_id' [ 439.580680][T21163] fuse: Bad value for 'user_id' [ 439.588217][T21163] fuse: Bad value for 'user_id' [ 439.593810][T21163] fuse: Bad value for 'user_id' [ 439.599681][T21163] fuse: Bad value for 'user_id' [ 439.605274][T21163] fuse: Bad value for 'user_id' [ 439.612191][T21163] fuse: Bad value for 'user_id' [ 439.617678][T21163] fuse: Bad value for 'user_id' [ 439.623718][T21163] fuse: Bad value for 'user_id' [ 439.630050][T21163] fuse: Bad value for 'user_id' [ 439.634922][T21163] fuse: Bad value for 'user_id' [ 439.641411][T21163] fuse: Bad value for 'user_id' [ 439.646284][T21163] fuse: Bad value for 'user_id' [ 439.651904][T21163] fuse: Bad value for 'user_id' [ 439.656981][T21163] fuse: Bad value for 'user_id' [ 439.662732][T21163] fuse: Bad value for 'user_id' [ 439.667598][T21163] fuse: Bad value for 'user_id' [ 439.673262][T21163] fuse: Bad value for 'user_id' [ 439.678112][T21163] fuse: Bad value for 'user_id' [ 439.683682][T21163] fuse: Bad value for 'user_id' [ 439.688561][T21163] fuse: Bad value for 'user_id' [ 439.695244][T21163] fuse: Bad value for 'user_id' [ 439.700107][T21163] fuse: Bad value for 'user_id' [ 439.705679][T21163] fuse: Bad value for 'user_id' [ 439.710534][T21163] fuse: Bad value for 'user_id' [ 439.716145][T21163] fuse: Bad value for 'user_id' [ 439.721016][T21163] fuse: Bad value for 'user_id' [ 439.726656][T21163] fuse: Bad value for 'user_id' [ 439.731510][T21163] fuse: Bad value for 'user_id' [ 439.737185][T21163] fuse: Bad value for 'user_id' [ 439.742040][T21163] fuse: Bad value for 'user_id' [ 439.747996][T21163] fuse: Bad value for 'user_id' [ 439.753045][T21163] fuse: Bad value for 'user_id' [ 439.758576][T21163] fuse: Bad value for 'user_id' [ 439.763444][T21163] fuse: Bad value for 'user_id' [ 439.768987][T21163] fuse: Bad value for 'user_id' [ 439.776724][T21163] fuse: Bad value for 'user_id' [ 439.782938][T21163] fuse: Bad value for 'user_id' [ 439.787985][T21163] fuse: Bad value for 'user_id' [ 439.793683][T21163] fuse: Bad value for 'user_id' [ 439.798889][T21163] fuse: Bad value for 'user_id' [ 439.804575][T21163] fuse: Bad value for 'user_id' [ 439.809442][T21163] fuse: Bad value for 'user_id' [ 439.816353][T21163] fuse: Bad value for 'user_id' [ 439.821483][T21163] fuse: Bad value for 'user_id' [ 439.826945][T21163] fuse: Bad value for 'user_id' [ 439.831832][T21163] fuse: Bad value for 'user_id' [ 439.837188][T21163] fuse: Bad value for 'user_id' [ 439.842042][T21163] fuse: Bad value for 'user_id' [ 439.848960][T21163] fuse: Bad value for 'user_id' [ 439.853861][T21163] fuse: Bad value for 'user_id' [ 439.859392][T21163] fuse: Bad value for 'user_id' [ 439.864322][T21163] fuse: Bad value for 'user_id' [ 439.869717][T21163] fuse: Bad value for 'user_id' [ 439.874666][T21163] fuse: Bad value for 'user_id' [ 439.880172][T21163] fuse: Bad value for 'user_id' [ 439.885093][T21163] fuse: Bad value for 'user_id' [ 439.890644][T21163] fuse: Bad value for 'user_id' [ 439.895537][T21163] fuse: Bad value for 'user_id' [ 439.901143][T21163] fuse: Bad value for 'user_id' [ 439.906094][T21163] fuse: Bad value for 'user_id' [ 439.911722][T21163] fuse: Bad value for 'user_id' [ 439.916571][T21163] fuse: Bad value for 'user_id' [ 439.922139][T21163] fuse: Bad value for 'user_id' [ 439.927007][T21163] fuse: Bad value for 'user_id' [ 439.932759][T21163] fuse: Bad value for 'user_id' [ 439.937622][T21163] fuse: Bad value for 'user_id' [ 439.943358][T21163] fuse: Bad value for 'user_id' [ 439.949131][T21163] fuse: Bad value for 'user_id' [ 439.954630][T21163] fuse: Bad value for 'user_id' [ 439.959511][T21163] fuse: Bad value for 'user_id' [ 439.961720][T21176] netlink: 'syz.5.6960': attribute type 4 has an invalid length. [ 439.981908][T21163] fuse: Bad value for 'user_id' [ 439.986786][T21163] fuse: Bad value for 'user_id' [ 439.996413][T21163] fuse: Bad value for 'user_id' [ 440.001292][T21163] fuse: Bad value for 'user_id' [ 440.007593][T21163] fuse: Bad value for 'user_id' [ 440.009060][T21176] 9pnet_fd: Insufficient options for proto=fd [ 440.012816][T21163] fuse: Bad value for 'user_id' [ 440.031319][T21163] fuse: Bad value for 'user_id' [ 440.036999][T21163] fuse: Bad value for 'user_id' [ 440.043915][T21163] fuse: Bad value for 'user_id' [ 440.049650][T21163] fuse: Bad value for 'user_id' [ 440.055366][T21163] fuse: Bad value for 'user_id' [ 440.061027][T21163] fuse: Bad value for 'user_id' [ 440.080224][T21163] fuse: Bad value for 'user_id' [ 440.085089][T21163] fuse: Bad value for 'user_id' [ 440.094577][T21163] fuse: Bad value for 'user_id' [ 440.103069][T21163] fuse: Bad value for 'user_id' [ 440.114093][T21163] fuse: Bad value for 'user_id' [ 440.118968][T21163] fuse: Bad value for 'user_id' [ 440.142579][T21163] fuse: Bad value for 'user_id' [ 440.147456][T21163] fuse: Bad value for 'user_id' [ 440.159705][T21163] fuse: Bad value for 'user_id' [ 440.165551][T21163] fuse: Bad value for 'user_id' [ 440.176831][T21163] fuse: Bad value for 'user_id' [ 440.181756][T21163] fuse: Bad value for 'user_id' [ 440.188361][T21163] fuse: Bad value for 'user_id' [ 440.193250][T21163] fuse: Bad value for 'user_id' [ 440.199470][T21163] fuse: Bad value for 'user_id' [ 440.204347][T21163] fuse: Bad value for 'user_id' [ 440.221103][T21163] fuse: Bad value for 'user_id' [ 440.226051][T21163] fuse: Bad value for 'user_id' [ 440.233688][T21163] fuse: Bad value for 'user_id' [ 440.239259][T21163] fuse: Bad value for 'user_id' [ 440.244969][T21163] fuse: Bad value for 'user_id' [ 440.255466][T21163] fuse: Bad value for 'user_id' [ 440.262776][T21163] fuse: Bad value for 'user_id' [ 440.267647][T21163] fuse: Bad value for 'user_id' [ 440.273493][T21163] fuse: Bad value for 'user_id' [ 440.278378][T21163] fuse: Bad value for 'user_id' [ 440.284193][T21163] fuse: Bad value for 'user_id' [ 440.289043][T21163] fuse: Bad value for 'user_id' [ 440.295290][T21163] fuse: Bad value for 'user_id' [ 440.300147][T21163] fuse: Bad value for 'user_id' [ 440.305941][T21163] fuse: Bad value for 'user_id' [ 440.310784][T21163] fuse: Bad value for 'user_id' [ 440.316866][T21163] fuse: Bad value for 'user_id' [ 440.321910][T21163] fuse: Bad value for 'user_id' [ 440.327595][T21163] fuse: Bad value for 'user_id' [ 440.334046][T21163] fuse: Bad value for 'user_id' [ 440.339660][T21163] fuse: Bad value for 'user_id' [ 440.346162][T21163] fuse: Bad value for 'user_id' [ 440.352112][T21163] fuse: Bad value for 'user_id' [ 440.357748][T21163] fuse: Bad value for 'user_id' [ 440.487244][T21205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6970'. [ 440.892990][T21212] overlayfs: upper fs does not support tmpfile. [ 440.910654][T21212] overlayfs: upper fs does not support tmpfile. [ 441.192912][T21225] overlayfs: failed to clone upperpath [ 441.344676][T21228] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6979'. [ 441.620007][T21238] fuse: blksize only supported for fuseblk [ 441.755681][T21251] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6988'. [ 441.791570][T21255] 9pnet_fd: Insufficient options for proto=fd [ 442.104855][T21278] netlink: 316 bytes leftover after parsing attributes in process `syz.4.6997'. [ 442.116299][T21278] netlink: 316 bytes leftover after parsing attributes in process `syz.4.6997'. [ 442.233655][T21289] 9pnet_fd: Insufficient options for proto=fd [ 442.699999][T21321] syz.4.7016(21321): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 442.843108][T21339] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7022'. [ 443.103371][T21348] netlink: 'syz.3.7025': attribute type 13 has an invalid length. [ 443.104758][T21349] binder: Unknown parameter 'fscontext?}' [ 443.167717][ T36] kauditd_printk_skb: 590 callbacks suppressed [ 443.167741][ T36] audit: type=1400 audit(2000000050.949:56758): avc: denied { read } for pid=21350 comm="syz.3.7026" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.197231][ T36] audit: type=1400 audit(2000000050.949:56759): avc: denied { read open } for pid=21350 comm="syz.3.7026" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.220963][ T36] audit: type=1400 audit(2000000050.949:56760): avc: denied { map } for pid=21350 comm="syz.3.7026" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.244765][ T36] audit: type=1400 audit(2000000050.949:56761): avc: denied { read } for pid=21350 comm="syz.3.7026" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 443.270857][ T36] audit: type=1400 audit(2000000050.949:56762): avc: denied { create } for pid=21350 comm="syz.3.7026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 443.271875][T21356] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 443.291496][ T36] audit: type=1400 audit(2000000050.959:56763): avc: denied { read write } for pid=21036 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.325312][ T36] audit: type=1400 audit(2000000050.959:56764): avc: denied { read write open } for pid=21036 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.351060][ T36] audit: type=1400 audit(2000000050.959:56765): avc: denied { ioctl } for pid=21036 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 443.383303][ T36] audit: type=1400 audit(2000000050.978:56766): avc: denied { read } for pid=21353 comm="syz.3.7027" name="binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 443.410957][ T36] audit: type=1400 audit(2000000050.978:56767): avc: denied { read open } for pid=21353 comm="syz.3.7027" path="/dev/binderfs/binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 443.836879][T21378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7033'. [ 444.523415][T21390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7037'. [ 444.554170][T21390] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7037'. [ 444.770654][ T31] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 444.931043][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 444.938217][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.949003][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.960569][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.970182][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.978358][ T31] usb 4-1: Product: ࠧ [ 444.982525][ T31] usb 4-1: Manufacturer: Б [ 444.987059][ T31] usb 4-1: SerialNumber: 瑣ᗠ쵈膼韣猩苣䴉棨嫾䮬惧啕着꨼퇺껸ꃙ≤ޤ돞ꬩ模㳤뤟蓊ྀ﬈嗶ṫʐା농໻魮ꧥ㓶⹞飀箝取뮆㧛餔謥絰⫳藆뢨濶⼜定ᲊᩭ뭚॑⑐಩슞탙⎕룵佌偀즮쨃鯲국炅톉跼䕾ᵙ汚㈈ⳉ㜾쎋ꄝ搓섒 [ 445.234714][T21410] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7043'. [ 445.255114][ T31] usb 4-1: 0:2 : does not exist [ 445.264483][ T31] usb 4-1: USB disconnect, device number 53 [ 445.317311][T21391] udevd[21391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 445.385629][T21414] overlayfs: upper fs does not support tmpfile. [ 445.402273][T21414] overlayfs: upper fs does not support tmpfile. [ 445.950616][T21432] __nla_validate_parse: 1 callbacks suppressed [ 445.950635][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7049'. [ 445.968929][T21432] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7049'. [ 446.702095][T21476] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7067'. [ 446.766447][T21480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7069'. [ 446.856022][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7068'. [ 446.899642][T21482] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7068'. [ 447.284257][ T12] vlan0: left allmulticast mode [ 447.290425][ T12] veth0_vlan: left allmulticast mode [ 447.296762][ T12] vlan0: left promiscuous mode [ 447.301766][ T12] bridge0: port 3(vlan0) entered disabled state [ 447.309430][ T12] bridge_slave_1: left allmulticast mode [ 447.318074][ T12] bridge_slave_1: left promiscuous mode [ 447.324710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.333750][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.465790][ T12] tipc: Left network mode [ 447.468730][T21508] rust_binder: Failed to allocate buffer. len:1128, is_oneway:true [ 447.500918][ T12] veth1_macvtap: left promiscuous mode [ 447.525879][ T12] veth0_vlan: left promiscuous mode [ 447.557803][T21519] binder: Bad value for 'max' [ 447.774779][T21530] SELinux: security_context_str_to_sid () failed with errno=-22 [ 448.471157][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7090'. [ 448.815160][ T36] kauditd_printk_skb: 530 callbacks suppressed [ 448.815177][ T36] audit: type=1400 audit(2000000056.234:57298): avc: denied { mounton } for pid=21547 comm="syz.4.7092" path="/291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 448.868328][ T36] audit: type=1400 audit(2000000056.234:57299): avc: denied { mount } for pid=21547 comm="syz.4.7092" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 448.932589][ T36] audit: type=1400 audit(2000000056.337:57300): avc: denied { create } for pid=21550 comm="syz.4.7093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 448.953492][ T36] audit: type=1400 audit(2000000056.365:57301): avc: denied { write } for pid=21550 comm="syz.4.7093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 448.977317][ T36] audit: type=1400 audit(2000000056.365:57302): avc: denied { nlmsg_write } for pid=21550 comm="syz.4.7093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 448.998870][ T36] audit: type=1400 audit(2000000056.365:57303): avc: denied { mounton } for pid=21550 comm="syz.4.7093" path="/292/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 449.023359][ T36] audit: type=1400 audit(2000000056.365:57304): avc: denied { mount } for pid=21550 comm="syz.4.7093" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 449.084536][ T36] audit: type=1400 audit(2000000056.478:57305): avc: denied { create } for pid=21545 comm="syz.6.7091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 449.111388][ T36] audit: type=1400 audit(2000000056.496:57306): avc: denied { create } for pid=21555 comm="syz.4.7094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.132060][ T36] audit: type=1400 audit(2000000056.496:57307): avc: denied { setopt } for pid=21555 comm="syz.4.7094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 449.686687][T21586] 9pnet_fd: Insufficient options for proto=fd [ 449.792199][T21592] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7104'. [ 449.935899][T21595] tipc: Enabling of bearer rejected, failed to enable media [ 449.956840][T21598] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 449.984232][T21595] 9pnet_fd: Insufficient options for proto=fd [ 450.878959][T21639] overlayfs: upper fs does not support tmpfile. [ 451.030885][T21647] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7117'. [ 451.260830][T21655] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 451.363901][T21661] tipc: Can't bind to reserved service type 0 [ 451.366730][ T31] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 451.516417][ T31] usb 4-1: device descriptor read/64, error -71 [ 451.647305][T21673] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7130'. [ 451.783664][ T31] usb 4-1: device descriptor read/64, error -71 [ 451.805598][T21681] 9pnet_fd: Insufficient options for proto=fd [ 451.950106][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7136'. [ 451.974319][T21692] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 452.051220][ T31] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 452.146578][T21704] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7141'. [ 452.200627][ T31] usb 4-1: device descriptor read/64, error -71 [ 452.457189][ T31] usb 4-1: device descriptor read/64, error -71 [ 452.575199][ T31] usb usb4-port1: attempt power cycle [ 452.910260][T21720] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7147'. [ 452.951908][ T31] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 453.004958][ T31] usb 4-1: device descriptor read/8, error -71 [ 453.143969][ T31] usb 4-1: device descriptor read/8, error -71 [ 453.269016][T21743] overlayfs: failed to clone upperpath [ 453.397960][ T31] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 453.425752][ T31] usb 4-1: device descriptor read/8, error -71 [ 453.506483][T21762] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7163'. [ 453.586888][ T31] usb 4-1: device descriptor read/8, error -71 [ 453.640160][T21765] netlink: 'syz.4.7165': attribute type 4 has an invalid length. [ 453.658974][T21765] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7165'. [ 453.718824][ T31] usb usb4-port1: unable to enumerate USB device [ 454.010703][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7173'. [ 454.312133][ T36] kauditd_printk_skb: 586 callbacks suppressed [ 454.312151][ T36] audit: type=1400 audit(8000131304.370:57894): avc: denied { read write } for pid=21036 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.343852][ T36] audit: type=1400 audit(8000131304.408:57895): avc: denied { read write open } for pid=21036 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.369257][ T36] audit: type=1400 audit(8000131304.408:57896): avc: denied { ioctl } for pid=21036 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 454.369467][T21811] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7179'. [ 454.395429][ T36] audit: type=1400 audit(8000131304.417:57897): avc: denied { create } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.425136][ T36] audit: type=1400 audit(8000131304.417:57898): avc: denied { create } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 454.445063][ T36] audit: type=1400 audit(8000131304.417:57899): avc: denied { create } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.465555][ T36] audit: type=1400 audit(8000131304.417:57900): avc: denied { create } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.485971][ T36] audit: type=1400 audit(8000131304.417:57901): avc: denied { write } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.506371][ T36] audit: type=1400 audit(8000131304.417:57902): avc: denied { nlmsg_write } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.533602][ T36] audit: type=1400 audit(8000131304.417:57903): avc: denied { write } for pid=21810 comm="syz.3.7179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.610037][T21825] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 109) [ 454.610067][T21825] rust_binder: Error while translating object. [ 454.633870][T21825] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 454.641430][T21825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 455.382889][T21861] overlayfs: failed to clone upperpath [ 455.400470][T21862] overlayfs: failed to clone upperpath [ 455.952169][T21899] rust_binder: Error while translating object. [ 455.952191][T21899] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 455.958537][T21899] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:171 [ 456.019303][T21905] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7208'. [ 456.100983][T21909] 9pnet_fd: Insufficient options for proto=fd [ 456.125580][T21905] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7208'. [ 456.134515][T21905] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 456.626516][ T618] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 456.789348][ T618] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.800025][ T618] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.811658][ T618] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 456.821758][ T618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 456.830235][ T618] usb 4-1: SerialNumber: syz [ 457.076850][T21939] veth0_vlan: left promiscuous mode [ 457.082091][T21939] veth0_vlan: entered allmulticast mode [ 457.089040][T21939] veth0_vlan: entered promiscuous mode [ 457.114525][T21940] rust_binder: 21918 RLIMIT_NICE not set [ 457.117184][ T618] usb 4-1: 0:2 : does not exist [ 457.140290][ T618] usb 4-1: 5:0: cannot get min/max values for control 1 (id 5) [ 457.149747][ T618] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 457.159446][ T618] usb 4-1: 5:0: cannot get min/max values for control 7 (id 5) [ 457.171513][ T618] usb 4-1: USB disconnect, device number 58 [ 457.207326][T21391] udevd[21391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 457.390636][T21945] netlink: 'syz.5.7223': attribute type 28 has an invalid length. [ 458.683455][T22010] __nla_validate_parse: 1 callbacks suppressed [ 458.683475][T22010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7247'. [ 458.754832][T22015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7249'. [ 458.829842][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7252'. [ 458.993446][T22033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22033 comm=syz.3.7257 [ 459.006823][T22033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22033 comm=syz.3.7257 [ 459.946918][ T36] kauditd_printk_skb: 646 callbacks suppressed [ 459.946936][ T36] audit: type=1400 audit(8000131309.637:58550): avc: denied { create } for pid=22059 comm="syz.3.7268" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 459.978004][ T36] audit: type=1400 audit(8000131309.674:58551): avc: denied { ioctl } for pid=22059 comm="syz.3.7268" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86293 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.005464][ T36] audit: type=1400 audit(8000131309.702:58552): avc: denied { ioctl } for pid=22059 comm="syz.3.7268" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86293 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 460.139538][ T36] audit: type=1400 audit(8000131309.824:58553): avc: denied { execmem } for pid=22071 comm="syz.4.7271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 460.280078][ T36] audit: type=1400 audit(8000131309.955:58554): avc: denied { create } for pid=22082 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.307272][ T36] audit: type=1400 audit(8000131309.983:58555): avc: denied { setopt } for pid=22082 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.337735][ T36] audit: type=1400 audit(8000131309.983:58556): avc: denied { ioctl } for pid=22082 comm="syz.4.7272" path="socket:[86306]" dev="sockfs" ino=86306 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.363013][ T36] audit: type=1400 audit(8000131310.011:58557): avc: denied { create } for pid=22082 comm="syz.4.7272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.432511][T22088] fuseblk: Unknown parameter 'ro_efotmodcHÚ ڌV1e' [ 460.440052][ T36] audit: type=1400 audit(8000131310.095:58558): avc: denied { mounton } for pid=22087 comm="syz.4.7274" path="/349/file0" dev="tmpfs" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.466274][T22088] 9pnet_fd: Insufficient options for proto=fd [ 460.472425][ T36] audit: type=1400 audit(8000131310.132:58559): avc: denied { mounton } for pid=22087 comm="syz.4.7274" path="/349/file0" dev="tmpfs" ino=1949 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 460.660462][T22098] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7276'. [ 460.676503][T22098] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7276'. [ 460.690194][T22098] netlink: 'syz.4.7276': attribute type 6 has an invalid length. [ 460.700298][T22098] netlink: 'syz.4.7276': attribute type 5 has an invalid length. [ 460.710332][T22098] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7276'. [ 460.765205][T22100] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7278'. [ 460.818594][T22104] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7279'. [ 461.284856][T22119] tipc: Trying to set illegal importance in message [ 461.474345][T22125] overlay: ./file0 is not a directory [ 461.719110][T22138] 9pnet_fd: Insufficient options for proto=fd [ 462.008522][T22150] netlink: 188 bytes leftover after parsing attributes in process `syz.4.7297'. [ 462.585091][T22159] tipc: Started in network mode [ 462.591892][T22159] tipc: Node identity 2, cluster identity 2 [ 462.597821][T22159] tipc: Node number set to 2 [ 462.763766][T22169] fuse: Bad value for 'fd' [ 463.046663][T22175] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.066360][T22175] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.091129][T22175] bridge_slave_0: entered allmulticast mode [ 463.116161][T22175] bridge_slave_0: entered promiscuous mode [ 463.134607][T22175] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.158456][T22175] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.169264][T22175] bridge_slave_1: entered allmulticast mode [ 463.175753][T22175] bridge_slave_1: entered promiscuous mode [ 463.250641][T22066] syz.3.7270 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 463.325936][T22066] CPU: 0 UID: 0 PID: 22066 Comm: syz.3.7270 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 463.325965][T22066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.325980][T22066] Call Trace: [ 463.325986][T22066] [ 463.325994][T22066] __dump_stack+0x21/0x30 [ 463.326022][T22066] dump_stack_lvl+0x10c/0x190 [ 463.326042][T22066] ? __cfi_dump_stack_lvl+0x10/0x10 [ 463.326061][T22066] ? ___ratelimit+0x3f7/0x5a0 [ 463.326083][T22066] dump_stack+0x19/0x20 [ 463.326101][T22066] dump_header+0xd7/0x490 [ 463.326128][T22066] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 463.326151][T22066] oom_kill_process+0x4c0/0x7e0 [ 463.326171][T22066] ? sched_clock_cpu+0x75/0x400 [ 463.326193][T22066] out_of_memory+0x7ee/0xbd0 [ 463.326210][T22066] ? __cfi_out_of_memory+0x10/0x10 [ 463.326227][T22066] ? mutex_lock_killable+0x92/0x1c0 [ 463.326248][T22066] ? __cfi_mutex_lock_killable+0x10/0x10 [ 463.326271][T22066] mem_cgroup_out_of_memory+0x279/0x350 [ 463.326317][T22066] ? drain_obj_stock+0xed0/0xed0 [ 463.326340][T22066] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 463.326364][T22066] try_charge_memcg+0x8f7/0xde0 [ 463.326384][T22066] ? __cfi_try_charge_memcg+0x10/0x10 [ 463.326403][T22066] ? __alloc_pages_noprof+0x30d/0x6c0 [ 463.326423][T22066] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 463.326442][T22066] ? __folio_batch_add_and_move+0x2ab/0x370 [ 463.326462][T22066] __mem_cgroup_charge+0xf6/0x410 [ 463.326485][T22066] ? __kasan_check_write+0x18/0x20 [ 463.326509][T22066] ? _raw_spin_lock+0x8c/0x120 [ 463.326529][T22066] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 463.326550][T22066] shmem_alloc_and_add_folio+0x86d/0x1050 [ 463.326580][T22066] ? put_swap_device+0x130/0x130 [ 463.326605][T22066] ? shmem_huge_global_enabled+0x2da/0x360 [ 463.326630][T22066] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 463.326655][T22066] ? __kasan_check_write+0x18/0x20 [ 463.326675][T22066] ? _raw_spin_lock+0x8c/0x120 [ 463.326693][T22066] shmem_get_folio_gfp+0x5f0/0x1380 [ 463.326721][T22066] ? shmem_get_folio+0xc0/0xc0 [ 463.326746][T22066] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 463.326769][T22066] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 463.326789][T22066] ? inode_to_bdi+0x6d/0x100 [ 463.326809][T22066] shmem_write_begin+0xf4/0x270 [ 463.326837][T22066] generic_perform_write+0x32d/0x960 [ 463.326862][T22066] ? __cfi_generic_perform_write+0x10/0x10 [ 463.326884][T22066] ? down_write+0xe9/0x2a0 [ 463.326909][T22066] ? mnt_get_write_access_file+0x1af/0x3b0 [ 463.326931][T22066] ? mnt_put_write_access_file+0xc2/0x100 [ 463.326951][T22066] ? file_update_time+0x1ef/0x220 [ 463.326972][T22066] shmem_file_write_iter+0x105/0x130 [ 463.326993][T22066] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 463.327013][T22066] __kernel_write_iter+0x395/0x830 [ 463.327035][T22066] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 463.327055][T22066] ? __cfi___kernel_write_iter+0x10/0x10 [ 463.327082][T22066] ? get_dump_page+0x160/0x220 [ 463.327102][T22066] ? __asan_memset+0x39/0x50 [ 463.327123][T22066] ? iov_iter_bvec+0xc0/0x180 [ 463.327151][T22066] dump_user_range+0xb06/0xdf0 [ 463.327178][T22066] ? __cfi_dump_emit+0x10/0x10 [ 463.327201][T22066] ? __cfi_dump_user_range+0x10/0x10 [ 463.327224][T22066] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 463.327250][T22066] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 463.327274][T22066] elf_core_dump+0x2cd9/0x3810 [ 463.327308][T22066] ? __cfi_elf_core_dump+0x10/0x10 [ 463.327340][T22066] ? dump_interrupted+0xf0/0xf0 [ 463.327363][T22066] ? filp_open+0x182/0x1d0 [ 463.327382][T22066] ? 0xffffffffff600000 [ 463.327399][T22066] do_coredump+0x1bfa/0x2bd0 [ 463.327424][T22066] ? __cfi_do_coredump+0x10/0x10 [ 463.327446][T22066] ? asm_exc_page_fault+0x2b/0x30 [ 463.327476][T22066] ? __kasan_slab_free+0x6a/0x80 [ 463.327502][T22066] ? kmem_cache_free+0x1c1/0x510 [ 463.327526][T22066] ? get_signal+0xa75/0x14f0 [ 463.327546][T22066] get_signal+0x11fd/0x14f0 [ 463.327569][T22066] arch_do_signal_or_restart+0x96/0x720 [ 463.327597][T22066] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 463.327625][T22066] irqentry_exit_to_user_mode+0x4e/0xb0 [ 463.327652][T22066] irqentry_exit+0x16/0x60 [ 463.327677][T22066] exc_page_fault+0x66/0xc0 [ 463.327702][T22066] asm_exc_page_fault+0x2b/0x30 [ 463.327723][T22066] RIP: 0033:0x7f5f3544f837 [ 463.327740][T22066] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 79 14 1c 00 48 8d 3d 7f 14 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 463.327755][T22066] RSP: 002b:00007f5f33bb7120 EFLAGS: 00010202 [ 463.327772][T22066] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5f3558e9a9 [ 463.327785][T22066] RDX: 00007f5f33bb7140 RSI: 00007f5f33bb7270 RDI: 000000000000000b [ 463.327797][T22066] RBP: 00007f5f35610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 463.327809][T22066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 463.327821][T22066] R13: 0000000000000001 R14: 00007f5f357b6080 R15: 00007fffedfa0c18 [ 463.327836][T22066] [ 463.327851][T22066] memory: usage 307200kB, limit 307200kB, failcnt 22166 [ 463.355157][T22175] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.415021][T22066] memory+swap: usage 431912kB, limit 9007199254740988kB, failcnt 0 [ 463.415445][T22175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.421046][T22066] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 463.426669][T22175] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.523385][T22066] Memory cgroup stats for [ 463.526875][T22175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.596796][T22066] /syz3 [ 463.865886][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.869570][T22066] : [ 463.876923][T22066] cache 313962496 [ 463.886995][ T305] bridge_slave_1: left allmulticast mode [ 463.893675][ T305] bridge_slave_1: left promiscuous mode [ 463.899408][T22187] fuse: Bad value for 'fd' [ 463.903523][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.916914][T22066] rss 348160 [ 463.921362][T22066] rss_huge 0 [ 463.924572][T22066] shmem 313962496 [ 463.938705][T22066] mapped_file 0 [ 463.942490][ T305] bridge_slave_0: left allmulticast mode [ 463.948191][ T305] bridge_slave_0: left promiscuous mode [ 463.960333][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.964350][T22066] dirty 0 [ 463.970322][T22066] writeback 0 [ 463.980004][T22066] workingset_refault_anon 1378 [ 463.984834][T22066] workingset_refault_file 63 [ 463.991650][T22066] swap 127705088 [ 463.999853][T22066] swapcached 286720 [ 464.003803][T22066] pgpgin 1128405 [ 464.008391][T22066] pgpgout 1060803 [ 464.012644][T22066] pgfault 903217 [ 464.016275][T22066] pgmajfault 264 [ 464.020153][T22066] inactive_anon 213811200 [ 464.024530][T22066] active_anon 100761600 [ 464.028869][T22066] inactive_file 0 [ 464.032545][T22066] active_file 0 [ 464.036051][T22066] unevictable 0 [ 464.039962][T22066] hierarchical_memory_limit 314572800 [ 464.042682][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.045398][T22066] hierarchical_memsw_limit 9223372036854771712 [ 464.052489][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.080164][T22066] total_cache 313962496 [ 464.080474][ T305] tipc: Left network mode [ 464.092238][T22066] total_rss 348160 [ 464.100138][T22066] total_rss_huge 0 [ 464.108566][T22066] total_shmem 313962496 [ 464.117361][T22066] total_mapped_file 0 [ 464.125600][T22066] total_dirty 0 [ 464.132539][T22066] total_writeback 0 [ 464.140468][T22066] total_workingset_refault_anon 1378 [ 464.151836][T22066] total_workingset_refault_file 63 [ 464.163085][T22066] total_swap 127705088 [ 464.171493][T22066] total_swapcached 286720 [ 464.180482][T22066] total_pgpgin 1128405 [ 464.189231][T22066] total_pgpgout 1060803 [ 464.198072][T22066] total_pgfault 903217 [ 464.207403][T22066] total_pgmajfault 264 [ 464.211546][T22066] total_inactive_anon 213811200 [ 464.216479][T22066] total_active_anon 100761600 [ 464.221444][T22066] total_inactive_file 0 [ 464.225646][T22066] total_active_file 0 [ 464.238870][T22066] total_unevictable 0 [ 464.247477][T22066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7061,pid=21459,uid=0 [ 464.271238][T22066] Memory cgroup out of memory: Killed process 21459 (syz.3.7061) total-vm:93676kB, anon-rss:976kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 464.305257][T22175] veth0_vlan: entered promiscuous mode [ 464.313850][T22072] syz.3.7270 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 464.332529][T22072] CPU: 1 UID: 0 PID: 22072 Comm: syz.3.7270 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 464.332567][T22072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.332581][T22072] Call Trace: [ 464.332588][T22072] [ 464.332597][T22072] __dump_stack+0x21/0x30 [ 464.332626][T22072] dump_stack_lvl+0x10c/0x190 [ 464.332649][T22072] ? __cfi_dump_stack_lvl+0x10/0x10 [ 464.332670][T22072] ? ___ratelimit+0x3f7/0x5a0 [ 464.332694][T22072] dump_stack+0x19/0x20 [ 464.332714][T22072] dump_header+0xd7/0x490 [ 464.332741][T22072] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 464.332762][T22072] oom_kill_process+0x4c0/0x7e0 [ 464.332781][T22072] ? sched_clock_cpu+0x75/0x400 [ 464.332804][T22072] out_of_memory+0x7ee/0xbd0 [ 464.332822][T22072] ? __cfi_out_of_memory+0x10/0x10 [ 464.332839][T22072] ? mutex_lock_killable+0x104/0x1c0 [ 464.332865][T22072] ? __cfi_mutex_lock_killable+0x10/0x10 [ 464.332891][T22072] mem_cgroup_out_of_memory+0x279/0x350 [ 464.332917][T22072] ? drain_obj_stock+0xed0/0xed0 [ 464.332942][T22072] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 464.332966][T22072] try_charge_memcg+0x8f7/0xde0 [ 464.332987][T22072] ? __cfi_try_charge_memcg+0x10/0x10 [ 464.333008][T22072] ? __alloc_pages_noprof+0x30d/0x6c0 [ 464.333029][T22072] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 464.333049][T22072] ? __folio_batch_add_and_move+0x2ab/0x370 [ 464.333069][T22072] __mem_cgroup_charge+0xf6/0x410 [ 464.333091][T22072] ? __kasan_check_write+0x18/0x20 [ 464.333113][T22072] ? _raw_spin_lock+0x8c/0x120 [ 464.333132][T22072] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 464.333155][T22072] shmem_alloc_and_add_folio+0x86d/0x1050 [ 464.333185][T22072] ? put_swap_device+0x130/0x130 [ 464.333212][T22072] ? shmem_huge_global_enabled+0x2da/0x360 [ 464.333249][T22072] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 464.333276][T22072] ? __kasan_check_write+0x18/0x20 [ 464.333297][T22072] ? _raw_spin_lock+0x8c/0x120 [ 464.333316][T22072] shmem_get_folio_gfp+0x5f0/0x1380 [ 464.333344][T22072] ? shmem_get_folio+0xc0/0xc0 [ 464.333365][T22072] ? follow_page_pte+0xa5c/0xb90 [ 464.333385][T22072] ? inode_to_bdi+0x6d/0x100 [ 464.333405][T22072] shmem_write_begin+0xf4/0x270 [ 464.333433][T22072] generic_perform_write+0x32d/0x960 [ 464.333457][T22072] ? __cfi_generic_perform_write+0x10/0x10 [ 464.333479][T22072] ? down_write+0xe9/0x2a0 [ 464.333505][T22072] ? file_update_time+0xa3/0x220 [ 464.333525][T22072] shmem_file_write_iter+0x105/0x130 [ 464.333546][T22072] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 464.333567][T22072] __kernel_write_iter+0x395/0x830 [ 464.333590][T22072] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 464.333611][T22072] ? __cfi___kernel_write_iter+0x10/0x10 [ 464.333634][T22072] ? get_dump_page+0x160/0x220 [ 464.333652][T22072] ? __asan_memset+0x39/0x50 [ 464.333673][T22072] ? iov_iter_bvec+0xc0/0x180 [ 464.333700][T22072] dump_user_range+0xb06/0xdf0 [ 464.333725][T22072] ? __cfi_dump_emit+0x10/0x10 [ 464.333747][T22072] ? __cfi_dump_user_range+0x10/0x10 [ 464.333770][T22072] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 464.333795][T22072] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 464.333819][T22072] elf_core_dump+0x2cd9/0x3810 [ 464.333849][T22072] ? __cfi_elf_core_dump+0x10/0x10 [ 464.333881][T22072] ? dump_interrupted+0xf0/0xf0 [ 464.333902][T22072] ? filp_open+0x182/0x1d0 [ 464.333920][T22072] ? 0xffffffffff600000 [ 464.333936][T22072] do_coredump+0x1bfa/0x2bd0 [ 464.333961][T22072] ? __cfi_do_coredump+0x10/0x10 [ 464.333982][T22072] ? asm_exc_page_fault+0x2b/0x30 [ 464.334011][T22072] ? __kasan_slab_free+0x6a/0x80 [ 464.334036][T22072] ? kmem_cache_free+0x1c1/0x510 [ 464.334064][T22072] ? get_signal+0xa75/0x14f0 [ 464.334084][T22072] get_signal+0x11fd/0x14f0 [ 464.334106][T22072] arch_do_signal_or_restart+0x96/0x720 [ 464.334131][T22072] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 464.334158][T22072] irqentry_exit_to_user_mode+0x4e/0xb0 [ 464.334184][T22072] irqentry_exit+0x16/0x60 [ 464.334208][T22072] exc_page_fault+0x66/0xc0 [ 464.334232][T22072] asm_exc_page_fault+0x2b/0x30 [ 464.334260][T22072] RIP: 0033:0x7f5f3544f837 [ 464.334276][T22072] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 79 14 1c 00 48 8d 3d 7f 14 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 464.334291][T22072] RSP: 002b:00007f5f33bb7120 EFLAGS: 00010202 [ 464.334311][T22072] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5f3558e9a9 [ 464.334325][T22072] RDX: 00007f5f33bb7140 RSI: 00007f5f33bb7270 RDI: 000000000000000b [ 464.334338][T22072] RBP: 00007f5f35610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 464.334351][T22072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 464.334364][T22072] R13: 0000000000000001 R14: 00007f5f357b6080 R15: 00007fffedfa0c18 [ 464.334380][T22072] [ 464.407816][T22175] veth1_macvtap: entered promiscuous mode [ 464.508305][T22072] memory: usage 307200kB, limit 307200kB, failcnt 22197 [ 464.813785][T22072] memory+swap: usage 431740kB, limit 9007199254740988kB, failcnt 0 [ 464.824818][T22072] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 464.831787][T22072] Memory cgroup stats for /syz3: [ 464.832566][T22072] cache 313962496 [ 464.841418][T22072] rss 348160 [ 464.868595][T22072] rss_huge 0 [ 464.871869][T22072] shmem 313962496 [ 464.875714][T22072] mapped_file 0 [ 464.879190][T22072] dirty 0 [ 464.888167][T22072] writeback 0 [ 464.891538][T22072] workingset_refault_anon 1378 [ 464.896402][T22072] workingset_refault_file 63 [ 464.901115][T22072] swap 127705088 [ 464.904667][T22072] swapcached 286720 [ 464.908477][T22072] pgpgin 1128405 [ 464.912313][T22072] pgpgout 1060803 [ 464.915947][T22072] pgfault 903217 [ 464.919488][T22072] pgmajfault 264 [ 464.923589][T22072] inactive_anon 213811200 [ 464.927982][T22072] active_anon 100761600 [ 464.932134][T22072] inactive_file 0 [ 464.936182][T22072] active_file 0 [ 464.939653][T22072] unevictable 0 [ 464.943144][T22072] hierarchical_memory_limit 314572800 [ 464.963728][T22072] hierarchical_memsw_limit 9223372036854771712 [ 464.989948][T22072] total_cache 313962496 [ 464.995134][T22072] total_rss 348160 [ 464.998936][T22072] total_rss_huge 0 [ 465.002892][T22072] total_shmem 313962496 [ 465.007072][T22072] total_mapped_file 0 [ 465.024533][T22072] total_dirty 0 [ 465.039486][T22072] total_writeback 0 [ 465.055347][T22072] total_workingset_refault_anon 1378 [ 465.066463][T22072] total_workingset_refault_file 63 [ 465.079539][T22072] total_swap 127705088 [ 465.090506][T22072] total_swapcached 286720 [ 465.098515][T22072] total_pgpgin 1128405 [ 465.102668][T22072] total_pgpgout 1060803 [ 465.108047][T22072] total_pgfault 903217 [ 465.112238][T22072] total_pgmajfault 264 [ 465.129253][T22072] total_inactive_anon 213811200 [ 465.141338][T22072] total_active_anon 100761600 [ 465.148729][T22072] total_inactive_file 0 [ 465.152962][T22072] total_active_file 0 [ 465.156971][T22072] total_unevictable 0 [ 465.161132][T22072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7270,pid=22070,uid=0 [ 465.176110][T22072] Memory cgroup out of memory: Killed process 22070 (syz.3.7270) total-vm:89968kB, anon-rss:1092kB, file-rss:53532kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 465.243351][T22198] SELinux: security_context_str_to_sid () failed with errno=-22 [ 465.297796][ T36] kauditd_printk_skb: 286 callbacks suppressed [ 465.297814][ T36] audit: type=1400 audit(8000131314.650:58846): avc: denied { read write } for pid=22175 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.357519][ T36] audit: type=1400 audit(8000131314.679:58847): avc: denied { read write open } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.392151][ T36] audit: type=1400 audit(8000131314.679:58848): avc: denied { ioctl } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 465.438135][ T36] audit: type=1400 audit(8000131314.697:58849): avc: denied { create } for pid=22204 comm="syz.4.7314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 465.478342][ T36] audit: type=1400 audit(8000131314.697:58850): avc: denied { connect } for pid=22204 comm="syz.4.7314" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 465.519554][ T36] audit: type=1400 audit(8000131314.725:58851): avc: denied { create } for pid=22206 comm="syz.6.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.553475][ T36] audit: type=1400 audit(8000131314.735:58852): avc: denied { create } for pid=22206 comm="syz.6.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.583961][ T36] audit: type=1400 audit(8000131314.735:58853): avc: denied { setopt } for pid=22206 comm="syz.6.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.617983][ T36] audit: type=1400 audit(8000131314.735:58854): avc: denied { setopt } for pid=22206 comm="syz.6.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.651598][ T36] audit: type=1400 audit(8000131314.744:58855): avc: denied { write } for pid=22206 comm="syz.6.7315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.912082][T22216] netlink: 'syz.3.7319': attribute type 10 has an invalid length. [ 465.945939][T22220] fuse: Bad value for 'fd' [ 466.063285][T22068] syz.3.7270 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 466.098415][T22068] CPU: 0 UID: 0 PID: 22068 Comm: syz.3.7270 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 466.098451][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.098464][T22068] Call Trace: [ 466.098471][T22068] [ 466.098479][T22068] __dump_stack+0x21/0x30 [ 466.098508][T22068] dump_stack_lvl+0x10c/0x190 [ 466.098529][T22068] ? __cfi_dump_stack_lvl+0x10/0x10 [ 466.098551][T22068] ? ___ratelimit+0x3f7/0x5a0 [ 466.098575][T22068] dump_stack+0x19/0x20 [ 466.098596][T22068] dump_header+0xd7/0x490 [ 466.098623][T22068] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 466.098644][T22068] oom_kill_process+0x4c0/0x7e0 [ 466.098663][T22068] ? sched_clock_cpu+0x75/0x400 [ 466.098685][T22068] out_of_memory+0x7ee/0xbd0 [ 466.098704][T22068] ? __cfi_out_of_memory+0x10/0x10 [ 466.098721][T22068] ? mutex_lock_killable+0x92/0x1c0 [ 466.098745][T22068] ? __cfi_mutex_lock_killable+0x10/0x10 [ 466.098771][T22068] mem_cgroup_out_of_memory+0x279/0x350 [ 466.098805][T22068] ? drain_obj_stock+0xed0/0xed0 [ 466.098830][T22068] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 466.098855][T22068] try_charge_memcg+0x8f7/0xde0 [ 466.098876][T22068] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 466.098901][T22068] ? __cfi_try_charge_memcg+0x10/0x10 [ 466.098923][T22068] ? __alloc_pages_noprof+0x30d/0x6c0 [ 466.098944][T22068] __mem_cgroup_charge+0xf6/0x410 [ 466.098967][T22068] ? filemap_get_entry+0x3fb/0x460 [ 466.098986][T22068] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 466.099011][T22068] filemap_add_folio+0x57/0x2d0 [ 466.099029][T22068] __filemap_get_folio+0x4c2/0x7c0 [ 466.099048][T22068] filemap_fault+0xb41/0x16b0 [ 466.099070][T22068] ? __cfi_filemap_fault+0x10/0x10 [ 466.099090][T22068] ? __cfi_filemap_map_pages+0x10/0x10 [ 466.099111][T22068] ? __cfi_lru_add+0x10/0x10 [ 466.099130][T22068] ? _raw_spin_lock+0x8c/0x120 [ 466.099148][T22068] ? __cfi__raw_spin_lock+0x10/0x10 [ 466.099168][T22068] do_pte_missing+0x376e/0x3e50 [ 466.099189][T22068] ? pte_marker_clear+0x1b0/0x1b0 [ 466.099207][T22068] ? __pte_offset_map+0x1b0/0x230 [ 466.099229][T22068] ? pte_offset_map_rw_nolock+0xba/0x110 [ 466.099252][T22068] handle_mm_fault+0x1166/0x1b90 [ 466.099278][T22068] ? __kasan_check_write+0x18/0x20 [ 466.099306][T22068] ? __cfi_handle_mm_fault+0x10/0x10 [ 466.099332][T22068] ? follow_page_pte+0x2bd/0xb90 [ 466.099353][T22068] ? gup_must_unshare+0x1e0/0x1e0 [ 466.099371][T22068] ? vma_is_secretmem+0x11/0x50 [ 466.099389][T22068] __get_user_pages+0x1169/0x22d0 [ 466.099405][T22068] ? __kasan_check_write+0x18/0x20 [ 466.099428][T22068] ? populate_vma_page_range+0x230/0x230 [ 466.099445][T22068] ? __kernel_write_iter+0x65e/0x830 [ 466.099467][T22068] get_dump_page+0x107/0x220 [ 466.099485][T22068] ? __cfi_get_dump_page+0x10/0x10 [ 466.099504][T22068] ? __asan_memset+0x39/0x50 [ 466.099527][T22068] dump_user_range+0x181/0xdf0 [ 466.099553][T22068] ? __cfi_dump_emit+0x10/0x10 [ 466.099574][T22068] ? __cfi_dump_user_range+0x10/0x10 [ 466.099597][T22068] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 466.099622][T22068] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 466.099645][T22068] elf_core_dump+0x2cd9/0x3810 [ 466.099675][T22068] ? __cfi_elf_core_dump+0x10/0x10 [ 466.099707][T22068] ? dump_interrupted+0xf0/0xf0 [ 466.099726][T22068] ? filp_open+0x182/0x1d0 [ 466.099742][T22068] ? 0xffffffffff600000 [ 466.099757][T22068] do_coredump+0x1bfa/0x2bd0 [ 466.099783][T22068] ? __cfi_do_coredump+0x10/0x10 [ 466.099815][T22068] ? asm_exc_page_fault+0x2b/0x30 [ 466.099844][T22068] ? __kasan_slab_free+0x6a/0x80 [ 466.099870][T22068] ? kmem_cache_free+0x1c1/0x510 [ 466.099894][T22068] ? get_signal+0xa75/0x14f0 [ 466.099915][T22068] get_signal+0x11fd/0x14f0 [ 466.099938][T22068] arch_do_signal_or_restart+0x96/0x720 [ 466.099963][T22068] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 466.099991][T22068] irqentry_exit_to_user_mode+0x4e/0xb0 [ 466.100018][T22068] irqentry_exit+0x16/0x60 [ 466.100042][T22068] exc_page_fault+0x66/0xc0 [ 466.100067][T22068] asm_exc_page_fault+0x2b/0x30 [ 466.100089][T22068] RIP: 0033:0x7f5f3544f837 [ 466.100106][T22068] Code: 88 15 c2 5e e9 00 88 05 bf 5e e9 00 c3 50 48 8d 35 79 14 1c 00 48 8d 3d 7f 14 1c 00 31 c0 e8 30 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 466.100124][T22068] RSP: 002b:00007f5f33bb7120 EFLAGS: 00010202 [ 466.100143][T22068] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5f3558e9a9 [ 466.100157][T22068] RDX: 00007f5f33bb7140 RSI: 00007f5f33bb7270 RDI: 000000000000000b [ 466.100172][T22068] RBP: 00007f5f35610ca1 R08: 0000000000000000 R09: 0000000000000000 [ 466.100185][T22068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 466.100199][T22068] R13: 0000000000000001 R14: 00007f5f357b6080 R15: 00007fffedfa0c18 [ 466.100216][T22068] [ 466.100267][T22068] memory: usage 307200kB, limit 307200kB, failcnt 25141 [ 466.260666][T22230] 9pnet_fd: Insufficient options for proto=fd [ 466.262384][T22068] memory+swap: usage 432000kB, limit 9007199254740988kB, failcnt 0 [ 466.583216][T22068] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 466.596796][T22068] Memory cgroup stats for /syz3: [ 466.596949][T22068] cache 314114048 [ 466.607401][T22068] rss 282624 [ 466.610839][T22068] rss_huge 0 [ 466.616245][T22068] shmem 314105856 [ 466.620816][T22068] mapped_file 0 [ 466.624965][T22068] dirty 0 [ 466.627956][T22068] writeback 0 [ 466.631284][T22068] workingset_refault_anon 1381 [ 466.637403][T22068] workingset_refault_file 1910 [ 466.642715][T22068] swap 127795200 [ 466.646917][T22068] swapcached 200704 [ 466.652013][T22068] pgpgin 1143649 [ 466.656518][T22068] pgpgout 1076047 [ 466.660199][T22068] pgfault 903765 [ 466.663868][T22068] pgmajfault 297 [ 466.668837][T22068] inactive_anon 186732544 [ 466.673261][T22068] active_anon 127832064 [ 466.678489][T22068] inactive_file 8192 [ 466.682450][T22068] active_file 0 [ 466.688210][T22068] unevictable 0 [ 466.692867][T22068] hierarchical_memory_limit 314572800 [ 466.698949][T22068] hierarchical_memsw_limit 9223372036854771712 [ 466.705997][T22068] total_cache 314114048 [ 466.710289][T22068] total_rss 282624 [ 466.714255][T22068] total_rss_huge 0 [ 466.718150][T22068] total_shmem 314105856 [ 466.722515][T22068] total_mapped_file 0 [ 466.729560][T22068] total_dirty 0 [ 466.733681][T22068] total_writeback 0 [ 466.737585][T22068] total_workingset_refault_anon 1381 [ 466.747116][T22068] total_workingset_refault_file 1910 [ 466.753140][T22068] total_swap 127795200 [ 466.757294][T22068] total_swapcached 200704 [ 466.762593][T22068] total_pgpgin 1143649 [ 466.766707][T22068] total_pgpgout 1076047 [ 466.771037][T22068] total_pgfault 903765 [ 466.776369][T22068] total_pgmajfault 297 [ 466.781342][T22068] total_inactive_anon 186732544 [ 466.794381][T22068] total_active_anon 127832064 [ 466.808626][T22068] total_inactive_file 8192 [ 466.820277][T22068] total_active_file 0 [ 466.829821][T22068] total_unevictable 0 [ 466.842831][T22068] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.7270,pid=22072,uid=0 [ 466.859807][T22068] Memory cgroup out of memory: Killed process 22072 (syz.3.7270) total-vm:89968kB, anon-rss:1092kB, file-rss:54232kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:0 [ 467.260698][T22264] 9p filesystem being mounted at /179/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 467.382297][T22270] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7338'. [ 467.763626][T22273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.765791][T22275] rust_binder: Write failure EINVAL in pid:25 [ 467.775816][T22273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.815381][T22273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 467.815673][T22273] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 468.649679][T22310] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7349'. [ 469.045649][ T305] bridge_slave_1: left allmulticast mode [ 469.052236][ T305] bridge_slave_1: left promiscuous mode [ 469.065656][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.091213][ T305] bridge_slave_0: left allmulticast mode [ 469.106230][ T305] bridge_slave_0: left promiscuous mode [ 469.121080][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.134544][T22319] tmpfs: Bad value for 'nr_blocks' [ 469.269573][T22325] tipc: Started in network mode [ 469.284621][T22325] tipc: Node identity 2, cluster identity 2 [ 469.290668][T22325] tipc: Node number set to 2 [ 469.295665][ T305] tipc: Left network mode [ 469.404650][T22332] rust_binder: Write failure EFAULT in pid:41 [ 469.509320][T22340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7361'. [ 469.537104][T22340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7361'. [ 469.601784][T22344] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7362'. [ 469.616726][T22345] rust_binder: Write failure EINVAL in pid:46 [ 469.628229][T22345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:46 [ 470.074062][T22358] 9pnet_fd: Insufficient options for proto=fd [ 470.662305][ T36] kauditd_printk_skb: 348 callbacks suppressed [ 470.662322][ T36] audit: type=1400 audit(8000131319.664:59204): avc: denied { read write } for pid=22175 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.694117][ T36] audit: type=1400 audit(8000131319.664:59205): avc: denied { read write open } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.720535][ T36] audit: type=1400 audit(8000131319.664:59206): avc: denied { ioctl } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.747188][ T36] audit: type=1400 audit(8000131319.720:59207): avc: denied { append } for pid=22378 comm="syz.6.7374" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.773374][ T36] audit: type=1400 audit(8000131319.720:59208): avc: denied { append open } for pid=22378 comm="syz.6.7374" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 470.798433][ T36] audit: type=1400 audit(8000131319.748:59209): avc: denied { read write } for pid=22175 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.817468][T22381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:73 [ 470.825177][ T36] audit: type=1400 audit(8000131319.748:59210): avc: denied { read write open } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.859846][ T36] audit: type=1400 audit(8000131319.748:59211): avc: denied { ioctl } for pid=22175 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 470.886816][ T36] audit: type=1400 audit(8000131319.814:59212): avc: denied { read } for pid=22380 comm="syz.6.7375" name="binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.912212][ T36] audit: type=1400 audit(8000131319.814:59213): avc: denied { read open } for pid=22380 comm="syz.6.7375" path="/dev/binderfs/binder0" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 470.968465][T22392] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 471.292633][ T31] hid (null): unknown global tag 0x2b [ 471.316829][ T31] hid (null): unknown global tag 0xa5 [ 471.323725][ T31] hid (null): unknown global tag 0xc [ 471.335734][ T31] hid (null): unknown global tag 0xc [ 471.341725][ T31] hid (null): unknown global tag 0x59 [ 471.347307][ T31] hid (null): unknown global tag 0xd [ 471.353883][ T31] hid (null): unknown global tag 0xd4 [ 471.359849][ T31] hid (null): unknown global tag 0xe [ 471.365197][ T31] hid (null): unknown global tag 0xe [ 471.374869][ T31] hid (null): unknown global tag 0xe [ 471.381872][ T31] hid (null): invalid report_size 53691 [ 471.389855][ T31] hid (null): unknown global tag 0xc [ 471.394109][T22421] 9pnet_fd: Insufficient options for proto=fd [ 471.399758][ T31] hid (null): unknown global tag 0x10 [ 471.408242][ T31] hid (null): unknown global tag 0xe [ 471.415841][ T31] hid (null): unknown global tag 0xc [ 471.421267][ T31] hid (null): report_id 2281037693 is invalid [ 471.428709][ T31] hid (null): global environment stack underflow [ 471.432518][T22423] overlayfs: failed to clone upperpath [ 471.436035][ T31] hid (null): unknown global tag 0x77 [ 471.446023][ T31] hid (null): unknown global tag 0xe [ 471.461600][ T31] hid (null): report_id 0 is invalid [ 471.467870][ T31] hid (null): unknown global tag 0xee [ 471.473786][ T31] hid (null): report_id 43038 is invalid [ 471.483128][ T31] hid (null): invalid report_count 44565 [ 471.488874][ T31] hid (null): unknown global tag 0xc [ 471.494222][ T31] hid (null): unknown global tag 0x5f [ 471.500831][ T31] hid (null): usage index exceeded [ 471.505956][ T31] hid (null): unknown global tag 0xe [ 471.515194][ T31] hid (null): unknown global tag 0xe [ 471.521205][ T31] hid (null): bogus close delimiter [ 471.526647][ T31] hid (null): unknown global tag 0xe [ 471.532046][ T31] hid (null): unknown global tag 0xe [ 471.538649][ T31] hid (null): unknown global tag 0xc [ 471.543379][T22430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7392'. [ 471.545307][ T31] hid (null): invalid report_count 610504710 [ 471.560405][ T31] hid (null): unknown global tag 0xe [ 471.566093][ T31] hid (null): invalid report_count 49260 [ 471.573061][ T31] hid-generic 0004:0006:0001.001B: unexpected long global item [ 471.588241][ T31] hid-generic 0004:0006:0001.001B: probe with driver hid-generic failed with error -22 [ 471.973006][T22443] fuse: Bad value for 'fd' [ 472.173330][T22457] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 472.212375][T22459] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 472.230945][T22459] overlayfs: failed to set xattr on upper [ 472.236763][T22459] overlayfs: ...falling back to redirect_dir=nofollow. [ 472.245267][T22459] overlayfs: ...falling back to uuid=null. [ 472.474955][T22471] rust_binder: 22470 RLIMIT_NICE not set [ 472.571637][T22475] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7411'. [ 472.938815][T22491] /dev/rnullb0: Can't open blockdev [ 472.998739][T22495] can0: slcan on ptm0. [ 473.145209][T22493] can0 (unregistered): slcan off ptm0. [ 473.998752][ T31] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 474.169802][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 474.178550][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 474.189502][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.202949][ T31] usb 7-1: config 0 has no interfaces? [ 474.211605][ T31] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.223269][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.231295][ T31] usb 7-1: Product: syz [ 474.235789][ T31] usb 7-1: Manufacturer: syz [ 474.240411][ T31] usb 7-1: SerialNumber: syz [ 474.246934][ T31] usb 7-1: config 0 descriptor?? [ 474.479716][T22533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.488357][T22533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.730026][T22533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.747255][T22533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.914959][T22632] 9pnet_fd: Insufficient options for proto=fd [ 474.969660][ T618] usb 7-1: USB disconnect, device number 21 [ 475.017751][T22636] netlink: 'syz.3.7462': attribute type 27 has an invalid length. [ 475.045396][T22636] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.052730][T22636] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.089658][T22640] overlayfs: failed to clone upperpath [ 475.857888][T22675] overlayfs: cannot append lower layer [ 476.175076][ T36] kauditd_printk_skb: 981 callbacks suppressed [ 476.175093][ T36] audit: type=1400 audit(8000131324.818:60195): avc: denied { create } for pid=22681 comm="syz.5.7480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 476.221452][ T36] audit: type=1400 audit(8000131324.865:60196): avc: denied { create } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.225935][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7481'. [ 476.242397][ T36] audit: type=1400 audit(8000131324.865:60197): avc: denied { bind } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.257181][T22684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7481'. [ 476.273655][ T36] audit: type=1400 audit(8000131324.874:60198): avc: denied { create } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.285509][T22684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7481'. [ 476.301551][ T36] audit: type=1400 audit(8000131324.874:60199): avc: denied { bind } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.312007][T22684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7481'. [ 476.331843][ T36] audit: type=1400 audit(8000131324.874:60200): avc: denied { setopt } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.362293][ T36] audit: type=1400 audit(8000131324.874:60201): avc: denied { create } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.383271][ T36] audit: type=1400 audit(8000131324.874:60202): avc: denied { write } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.404201][ T36] audit: type=1400 audit(8000131324.921:60203): avc: denied { write } for pid=22683 comm="syz.5.7481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 476.425749][ T36] audit: type=1400 audit(8000131325.015:60204): avc: denied { mounton } for pid=22685 comm="syz.5.7482" path="/202/file0" dev="tmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 477.094693][T22743] overlayfs: failed to clone upperpath [ 477.099066][ T65] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 477.366312][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 477.373526][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.384060][ T65] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 477.395576][ T65] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 477.405311][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.413353][ T65] usb 7-1: Product: ࠧ [ 477.417568][ T65] usb 7-1: Manufacturer: Б [ 477.422115][ T65] usb 7-1: SerialNumber: 瑣ᗠ쵈膼韣猩苣䴉棨嫾䮬惧啕着꨼퇺껸ꃙ≤ޤ돞ꬩ模㳤뤟蓊ྀ﬈嗶ṫʐା농໻魮ꧥ㓶⹞飀箝取뮆㧛餔謥絰⫳藆뢨濶⼜定ᲊᩭ뭚॑⑐಩슞탙⎕룵佌偀즮쨃鯲국炅톉跼䕾ᵙ汚㈈ⳉ㜾쎋ꄝ搓섒 [ 477.475966][T22751] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7506'. [ 477.675604][ T65] usb 7-1: 0:2 : does not exist [ 477.683375][ T65] usb 7-1: USB disconnect, device number 22 [ 477.715906][T21391] udevd[21391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 477.995568][T22767] tmpfs: Unknown parameter 'W Foa' [ 478.445104][T22787] overlayfs: failed to clone upperpath [ 479.733517][T22826] binder: Bad value for 'max' [ 479.839898][T22830] overlayfs: failed to clone upperpath [ 480.016564][T22842] fuse: Unknown parameter '0x0000000000000004' [ 480.048066][T22844] overlayfs: failed to clone lowerpath [ 480.220691][ T618] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 480.402419][ T618] usb 7-1: Using ep0 maxpacket: 16 [ 480.413011][ T618] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.424152][ T618] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.437957][ T618] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.448476][ T618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.457084][ T618] usb 7-1: Product: ࠧ [ 480.467598][ T618] usb 7-1: Manufacturer: Б [ 480.473854][ T618] usb 7-1: SerialNumber: 瑣ᗠ쵈膼韣猩苣䴉棨嫾䮬惧啕着꨼퇺껸ꃙ≤ޤ돞ꬩ模㳤뤟蓊ྀ﬈嗶ṫʐା농໻魮ꧥ㓶⹞飀箝取뮆㧛餔謥絰⫳藆뢨濶⼜定ᲊᩭ뭚॑⑐಩슞탙⎕룵佌偀즮쨃鯲국炅톉跼䕾ᵙ汚㈈ⳉ㜾쎋ꄝ搓섒 [ 480.720121][T22899] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7559'. [ 480.726959][ T618] usb 7-1: 0:2 : does not exist [ 480.751153][ T618] usb 7-1: USB disconnect, device number 23 [ 480.825435][T21391] udevd[21391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 480.841937][T22905] netlink: 'syz.4.7562': attribute type 3 has an invalid length. [ 480.992316][T22916] cgroup: Name too long [ 481.163516][T22870] 9pnet_fd: p9_fd_create_tcp (22870): problem connecting socket to 127.0.0.1 [ 481.203992][T22925] 9pnet_fd: Insufficient options for proto=fd [ 481.533002][ T36] kauditd_printk_skb: 571 callbacks suppressed [ 481.533021][ T36] audit: type=1400 audit(8000131329.832:60776): avc: denied { read } for pid=22933 comm="syz.6.7573" dev="nsfs" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.560983][ T36] audit: type=1400 audit(8000131329.860:60777): avc: denied { read open } for pid=22933 comm="syz.6.7573" path="net:[4026532416]" dev="nsfs" ino=4026532416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 481.621014][ T36] audit: type=1400 audit(8000131329.860:60778): avc: denied { create } for pid=22933 comm="syz.6.7573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.660756][ T36] audit: type=1400 audit(8000131329.860:60779): avc: denied { write } for pid=22933 comm="syz.6.7573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.710088][ T36] audit: type=1400 audit(8000131329.860:60780): avc: denied { read } for pid=22933 comm="syz.6.7573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.731867][ T36] audit: type=1400 audit(8000131329.860:60781): avc: denied { read } for pid=22933 comm="syz.6.7573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.754100][T22942] No source specified [ 481.758191][ T36] audit: type=1400 audit(8000131329.935:60782): avc: denied { mounton } for pid=22935 comm="syz.5.7575" path="/234/file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 481.850633][ T36] audit: type=1400 audit(8000131329.944:60783): avc: denied { create } for pid=22936 comm="syz.4.7574" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 481.899669][T22946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7579'. [ 481.919485][ T36] audit: type=1400 audit(8000131329.991:60784): avc: denied { create } for pid=22939 comm="syz.4.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 481.940445][T22946] netlink: 'syz.4.7579': attribute type 3 has an invalid length. [ 481.961313][ T36] audit: type=1400 audit(8000131330.000:60785): avc: denied { create } for pid=22939 comm="syz.4.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 485.054373][T23073] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7621'. [ 485.367545][T23090] /dev/loop0: Can't lookup blockdev [ 485.510561][T23093] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 485.525309][T23093] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 485.543919][T23093] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 485.551483][T23093] overlayfs: failed to set xattr on upper [ 485.557364][T23093] overlayfs: ...falling back to redirect_dir=nofollow. [ 485.564284][T23093] overlayfs: ...falling back to uuid=null. [ 485.778637][T23095] fuse: Bad value for 'user_id' [ 485.783574][T23095] fuse: Bad value for 'user_id' [ 486.218224][T23114] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7637'. [ 486.922506][ T36] kauditd_printk_skb: 363 callbacks suppressed [ 486.922524][ T36] audit: type=1400 audit(8000131334.874:61149): avc: denied { mounton } for pid=23147 comm="syz.6.7649" path="/bus/bus" dev="overlay" ino=81770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 486.923258][T23149] overlay: filesystem on ./bus not supported as upperdir [ 487.245761][ T36] audit: type=1400 audit(8000131335.182:61150): avc: denied { create } for pid=23150 comm="syz.4.7650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.260205][T23155] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7650'. [ 487.275631][ T36] audit: type=1400 audit(8000131335.182:61151): avc: denied { write } for pid=23150 comm="syz.4.7650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.314337][ T36] audit: type=1400 audit(8000131335.182:61152): avc: denied { nlmsg_write } for pid=23150 comm="syz.4.7650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 487.342738][ T36] audit: type=1400 audit(8000131335.201:61153): avc: denied { mounton } for pid=23152 comm="syz.3.7651" path="/155" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 487.369593][ T36] audit: type=1400 audit(8000131335.201:61154): avc: denied { mount } for pid=23152 comm="syz.3.7651" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 487.400715][ T36] audit: type=1400 audit(8000131335.323:61155): avc: denied { name_bind } for pid=23156 comm="syz.3.7652" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 487.436867][ T36] audit: type=1400 audit(8000131335.323:61156): avc: denied { node_bind } for pid=23156 comm="syz.3.7652" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 487.462117][ T36] audit: type=1400 audit(8000131335.323:61157): avc: denied { map } for pid=23156 comm="syz.3.7652" path="socket:[90166]" dev="sockfs" ino=90166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 487.485389][ T36] audit: type=1400 audit(8000131335.351:61158): avc: denied { create } for pid=23156 comm="syz.3.7652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.159231][T23188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7662'. [ 488.399557][T23191] overlay: filesystem on ./bus not supported as upperdir [ 488.433331][T23195] tipc: Started in network mode [ 488.438233][T23195] tipc: Node identity ac14142f, cluster identity 4711 [ 488.445469][T23195] tipc: New replicast peer: 0.0.0.0 [ 488.450771][T23195] tipc: Enabled bearer , priority 10 [ 488.461584][T23195] 9pnet_fd: Insufficient options for proto=fd [ 489.301789][T23225] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7674'. [ 489.625136][T23229] tipc: New replicast peer: 0.0.0.0 [ 489.630663][T23229] tipc: Enabled bearer , priority 10 [ 489.649908][ T316] tipc: Node number set to 2886997039 [ 489.946935][T23241] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7680'. [ 490.285565][T23254] tipc: Enabling of bearer rejected, already enabled [ 490.299002][T23255] overlay: filesystem on ./bus not supported as upperdir [ 490.373851][T23258] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7686'. [ 491.244818][T23282] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7695'. [ 491.289459][T23283] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7693'. [ 491.593761][T23285] netlink: 4104 bytes leftover after parsing attributes in process `syz.6.7696'. [ 491.608223][T23285] overlay: Unknown parameter 'euid<00000000004294967295' [ 491.745064][T23294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7700'. [ 491.888527][T23299] overlay: filesystem on ./bus not supported as upperdir [ 492.333777][ T36] kauditd_printk_skb: 344 callbacks suppressed [ 492.333793][ T36] audit: type=1400 audit(8000131339.944:61503): avc: denied { create } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.363016][ T36] audit: type=1400 audit(8000131339.944:61504): avc: denied { create } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.384677][ T36] audit: type=1400 audit(8000131339.944:61505): avc: denied { create } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.405874][ T36] audit: type=1400 audit(8000131339.944:61506): avc: denied { write } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.427232][ T36] audit: type=1400 audit(8000131339.944:61507): avc: denied { read } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.448492][ T36] audit: type=1400 audit(8000131339.944:61508): avc: denied { read } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.469963][ T36] audit: type=1400 audit(8000131339.944:61509): avc: denied { write } for pid=23300 comm="syz.4.7703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.475614][T23306] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7705'. [ 492.491640][ T36] audit: type=1400 audit(8000131340.065:61510): avc: denied { create } for pid=23304 comm="syz.4.7705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.520720][ T36] audit: type=1400 audit(8000131340.065:61511): avc: denied { write } for pid=23304 comm="syz.4.7705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.541818][ T36] audit: type=1400 audit(8000131340.065:61512): avc: denied { nlmsg_write } for pid=23304 comm="syz.4.7705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.819555][T23311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7706'. [ 493.417219][T23340] overlay: filesystem on ./bus not supported as upperdir [ 493.668751][T23343] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7717'. [ 494.023879][T23354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7720'. [ 494.270664][T23367] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7727'. [ 494.402609][T23376] netlink: 5820 bytes leftover after parsing attributes in process `syz.3.7730'. [ 494.425010][T23377] netlink: 5820 bytes leftover after parsing attributes in process `syz.3.7730'. [ 494.780803][T23391] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7734'. [ 495.012311][T23398] ------------[ cut here ]------------ [ 495.017848][T23398] WARNING: CPU: 0 PID: 23398 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 495.026004][T23398] Modules linked in: [ 495.029957][T23398] CPU: 0 UID: 0 PID: 23398 Comm: syz.5.7736 Not tainted 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 495.043868][T23398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.054105][T23398] RIP: 0010:drop_nlink+0xce/0x110 [ 495.059177][T23398] Code: 04 00 00 be 08 00 00 00 e8 cf 55 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 d2 57 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 495.078937][T23398] RSP: 0018:ffffc900029671f0 EFLAGS: 00010287 [ 495.085059][T23398] RAX: ffffffff81ed532e RBX: ffff888134c5e700 RCX: 0000000000080000 [ 495.093146][T23398] RDX: ffffc9000852a000 RSI: 000000000001d9cb RDI: 000000000001d9cc [ 495.101160][T23398] RBP: ffffc90002967218 R08: 0000000000000003 R09: 0000000000000004 [ 495.109198][T23398] R10: dffffc0000000000 R11: fffff5200052ce34 R12: dffffc0000000000 [ 495.117217][T23398] R13: 1ffff1102698bce9 R14: ffff888134c5e748 R15: 0000000000000000 [ 495.125327][T23398] FS: 00007f0a641146c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 495.134321][T23398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.140907][T23398] CR2: 0000200000001000 CR3: 000000011c942000 CR4: 00000000003526b0 [ 495.148913][T23398] DR0: 0000000000010001 DR1: 0000000000000002 DR2: 000000000000007f [ 495.157098][T23398] DR3: 0000000000000004 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 495.165077][T23398] Call Trace: [ 495.168375][T23398] [ 495.171420][T23398] simple_rmdir+0x153/0x260 [ 495.176005][T23398] vfs_rmdir+0x3e0/0x560 [ 495.180556][T23398] dir_rmdir+0x236/0x320 [ 495.184814][T23398] ? __cfi_dir_rmdir+0x10/0x10 [ 495.189610][T23398] ? bpf_lsm_inode_rmdir+0xd/0x20 [ 495.194647][T23398] vfs_rmdir+0x3e0/0x560 [ 495.198909][T23398] ovl_workdir_cleanup+0x192/0x780 [ 495.204034][T23398] ? dentry_revalidate+0x2e0/0x370 [ 495.209179][T23398] ? __cfi_ovl_workdir_cleanup+0x10/0x10 [ 495.214826][T23398] ? lookup_one+0x2d2/0x2e0 [ 495.219332][T23398] ? __cfi_lookup_one+0x10/0x10 [ 495.224212][T23398] ? kasan_save_alloc_info+0x40/0x50 [ 495.229508][T23398] ovl_workdir_create+0x2af/0x750 [ 495.234568][T23398] ? __kasan_check_write+0x18/0x20 [ 495.239867][T23398] ? ovl_statfs+0x2d0/0x2d0 [ 495.244407][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.249182][T23398] ? _raw_spin_unlock+0x45/0x60 [ 495.254055][T23398] ? mnt_want_write+0x321/0x510 [ 495.258916][T23398] ovl_get_workdir+0x328/0x1650 [ 495.263816][T23398] ? ovl_fill_super+0x36f0/0x36f0 [ 495.268858][T23398] ? __kasan_check_write+0x18/0x20 [ 495.274105][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.278884][T23398] ? __cfi__raw_spin_lock+0x10/0x10 [ 495.284207][T23398] ? __kasan_check_write+0x18/0x20 [ 495.289343][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.294112][T23398] ? __cfi__raw_spin_lock+0x10/0x10 [ 495.299329][T23398] ? __kasan_check_write+0x18/0x20 [ 495.304535][T23398] ? up_read+0x26/0x1d0 [ 495.308723][T23398] ? _raw_spin_unlock+0x45/0x60 [ 495.313574][T23398] ? ovl_inuse_trylock+0xbd/0x110 [ 495.318615][T23398] ovl_fill_super+0x133f/0x36f0 [ 495.323563][T23398] ? xas_nomem+0x71/0x2d0 [ 495.327933][T23398] ? ida_alloc_range+0xa12/0xa50 [ 495.332893][T23398] ? __cfi_ovl_fill_super+0x10/0x10 [ 495.338119][T23398] ? __kasan_check_write+0x18/0x20 [ 495.343244][T23398] ? mutex_unlock+0x8b/0x240 [ 495.347872][T23398] ? __cfi_mutex_unlock+0x10/0x10 [ 495.352904][T23398] ? __kasan_check_write+0x18/0x20 [ 495.358010][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.362789][T23398] ? sget_fc+0x9ce/0xad0 [ 495.367036][T23398] ? __cfi_set_anon_super_fc+0x10/0x10 [ 495.372537][T23398] get_tree_nodev+0xcb/0x170 [ 495.377142][T23398] ? __cfi_ovl_fill_super+0x10/0x10 [ 495.382412][T23398] ovl_get_tree+0x20/0x30 [ 495.386757][T23398] vfs_get_tree+0xa1/0x290 [ 495.391231][T23398] do_new_mount+0x251/0xb40 [ 495.395754][T23398] ? security_capable+0xcf/0xf0 [ 495.400618][T23398] path_mount+0x688/0x1050 [ 495.405069][T23398] ? putname+0x113/0x150 [ 495.409325][T23398] __se_sys_mount+0x2bd/0x480 [ 495.414032][T23398] ? __x64_sys_mount+0xf0/0xf0 [ 495.418803][T23398] ? __kasan_check_write+0x18/0x20 [ 495.423928][T23398] ? fpregs_restore_userregs+0x11d/0x260 [ 495.429567][T23398] __x64_sys_mount+0xc3/0xf0 [ 495.434281][T23398] x64_sys_call+0x2021/0x2ee0 [ 495.438972][T23398] do_syscall_64+0x58/0xf0 [ 495.443380][T23398] ? clear_bhb_loop+0x50/0xa0 [ 495.448082][T23398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 495.454016][T23398] RIP: 0033:0x7f0a6338e9a9 [ 495.458538][T23398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.478346][T23398] RSP: 002b:00007f0a64114038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 495.486901][T23398] RAX: ffffffffffffffda RBX: 00007f0a635b6080 RCX: 00007f0a6338e9a9 [ 495.494879][T23398] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 495.502981][T23398] RBP: 00007f0a63410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 495.510982][T23398] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 495.519032][T23398] R13: 0000000000000000 R14: 00007f0a635b6080 R15: 00007fff3ccd85c8 [ 495.527015][T23398] [ 495.530070][T23398] ---[ end trace 0000000000000000 ]--- [ 495.535691][T23398] ------------[ cut here ]------------ [ 495.541193][T23398] WARNING: CPU: 1 PID: 23398 at fs/dcache.c:774 dput+0x3cd/0x510 [ 495.549033][T23398] Modules linked in: [ 495.552957][T23398] CPU: 1 UID: 0 PID: 23398 Comm: syz.5.7736 Tainted: G W 6.12.30-syzkaller-ge973ddb125a8 #0 134717b21a1f3bd2df592f9baa154f81907db86a [ 495.568017][T23398] Tainted: [W]=WARN [ 495.571825][T23398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.582123][T23398] RIP: 0010:dput+0x3cd/0x510 [ 495.586849][T23398] Code: 55 99 ff 48 b8 00 00 00 00 00 fc ff df 48 8b 4d d0 0f b6 04 01 84 c0 0f 85 21 01 00 00 80 0b 40 e9 a8 fe ff ff e8 33 55 99 ff <0f> 0b e9 9c fe ff ff e8 27 55 99 ff 48 89 df e8 2f 01 00 00 84 c0 [ 495.606618][T23398] RSP: 0018:ffffc90002967488 EFLAGS: 00010246 [ 495.612701][T23398] RAX: ffffffff81ec55cd RBX: ffff888134f1fee0 RCX: 0000000000080000 [ 495.620781][T23398] RDX: ffffc9000852a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 495.628770][T23398] RBP: ffffc900029674b8 R08: 0000000000000003 R09: 0000000000000004 [ 495.636806][T23398] R10: dffffc0000000000 R11: fffff5200052ce80 R12: 00000000ffffff80 [ 495.644768][T23398] R13: ffff888134f1ff64 R14: ffff888134f1ff60 R15: 1ffff110269e3fec [ 495.652758][T23398] FS: 00007f0a641146c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 495.661814][T23398] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.668662][T23398] CR2: 00007fffedf9febc CR3: 000000011c942000 CR4: 00000000003526b0 [ 495.676645][T23398] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 495.684633][T23398] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 495.692647][T23398] Call Trace: [ 495.695921][T23398] [ 495.698836][T23398] path_put+0x3d/0x70 [ 495.702833][T23398] dentry_release+0x53/0xb0 [ 495.707440][T23398] ? __cfi_dentry_release+0x10/0x10 [ 495.712674][T23398] __dentry_kill+0x22b/0x5f0 [ 495.717270][T23398] ? lock_for_kill+0xae/0x230 [ 495.721951][T23398] dput+0x3f2/0x510 [ 495.725994][T23398] ovl_workdir_create+0x2bf/0x750 [ 495.731045][T23398] ? __kasan_check_write+0x18/0x20 [ 495.736224][T23398] ? ovl_statfs+0x2d0/0x2d0 [ 495.740744][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.745654][T23398] ? _raw_spin_unlock+0x45/0x60 [ 495.750572][T23398] ? mnt_want_write+0x321/0x510 [ 495.755550][T23398] ovl_get_workdir+0x328/0x1650 [ 495.760413][T23398] ? ovl_fill_super+0x36f0/0x36f0 [ 495.765458][T23398] ? __kasan_check_write+0x18/0x20 [ 495.770577][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.775338][T23398] ? __cfi__raw_spin_lock+0x10/0x10 [ 495.780562][T23398] ? __kasan_check_write+0x18/0x20 [ 495.785684][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.790465][T23398] ? __cfi__raw_spin_lock+0x10/0x10 [ 495.795681][T23398] ? __kasan_check_write+0x18/0x20 [ 495.800823][T23398] ? up_read+0x26/0x1d0 [ 495.804983][T23398] ? _raw_spin_unlock+0x45/0x60 [ 495.809851][T23398] ? ovl_inuse_trylock+0xbd/0x110 [ 495.814884][T23398] ovl_fill_super+0x133f/0x36f0 [ 495.819760][T23398] ? xas_nomem+0x71/0x2d0 [ 495.824096][T23398] ? ida_alloc_range+0xa12/0xa50 [ 495.829062][T23398] ? __cfi_ovl_fill_super+0x10/0x10 [ 495.834277][T23398] ? __kasan_check_write+0x18/0x20 [ 495.839406][T23398] ? mutex_unlock+0x8b/0x240 [ 495.844031][T23398] ? __cfi_mutex_unlock+0x10/0x10 [ 495.849062][T23398] ? __kasan_check_write+0x18/0x20 [ 495.854193][T23398] ? _raw_spin_lock+0x8c/0x120 [ 495.858959][T23398] ? sget_fc+0x9ce/0xad0 [ 495.863235][T23398] ? __cfi_set_anon_super_fc+0x10/0x10 [ 495.868694][T23398] get_tree_nodev+0xcb/0x170 [ 495.873297][T23398] ? __cfi_ovl_fill_super+0x10/0x10 [ 495.878506][T23398] ovl_get_tree+0x20/0x30 [ 495.882873][T23398] vfs_get_tree+0xa1/0x290 [ 495.887311][T23398] do_new_mount+0x251/0xb40 [ 495.891811][T23398] ? security_capable+0xcf/0xf0 [ 495.896773][T23398] path_mount+0x688/0x1050 [ 495.901207][T23398] ? putname+0x113/0x150 [ 495.905508][T23398] __se_sys_mount+0x2bd/0x480 [ 495.910208][T23398] ? __x64_sys_mount+0xf0/0xf0 [ 495.915103][T23398] ? __kasan_check_write+0x18/0x20 [ 495.920219][T23398] ? fpregs_restore_userregs+0x11d/0x260 [ 495.925884][T23398] __x64_sys_mount+0xc3/0xf0 [ 495.930481][T23398] x64_sys_call+0x2021/0x2ee0 [ 495.935152][T23398] do_syscall_64+0x58/0xf0 [ 495.939587][T23398] ? clear_bhb_loop+0x50/0xa0 [ 495.944323][T23398] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 495.950249][T23398] RIP: 0033:0x7f0a6338e9a9 [ 495.954788][T23398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.974447][T23398] RSP: 002b:00007f0a64114038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 495.982933][T23398] RAX: ffffffffffffffda RBX: 00007f0a635b6080 RCX: 00007f0a6338e9a9 [ 495.990953][T23398] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 495.998924][T23398] RBP: 00007f0a63410ca1 R08: 0000200000000340 R09: 0000000000000000 [ 496.006913][T23398] R10: 0000000001004040 R11: 0000000000000246 R12: 0000000000000000 [ 496.014920][T23398] R13: 0000000000000000 R14: 00007f0a635b6080 R15: 00007fff3ccd85c8 [ 496.022926][T23398] [ 496.025957][T23398] ---[ end trace 0000000000000000 ]--- [ 496.036074][T23398] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 496.046387][T23398] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 496.556975][ T12] bridge_slave_1: left allmulticast mode [ 496.562624][ T12] bridge_slave_1: left promiscuous mode [ 496.568258][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.575753][ T12] bridge_slave_0: left allmulticast mode [ 496.581429][ T12] bridge_slave_0: left promiscuous mode [ 496.587058][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.610254][ T12] bridge0 (unregistering): left allmulticast mode [ 496.737903][ T12] tipc: Left network mode [ 496.823957][ T12] veth1_macvtap: left promiscuous mode [ 496.829464][ T12] veth0_vlan: left promiscuous mode