last executing test programs: 1m36.268208631s ago: executing program 0 (id=832): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x50, &(0x7f0000000700)={{{@in6=@remote, @in6=@private0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x68, 0x0, &(0x7f0000000380)=[@dead_binder_done, @exit_looper, @enter_looper, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000500)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x3c}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x2, 0x1f}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1m36.214281555s ago: executing program 0 (id=835): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000203010200000000000000000000000009000200000000010000000008000340000000070800010001"], 0x38}, 0x1, 0x0, 0x0, 0x40050}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000303"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x200000c4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) close_range(r0, 0xffffffffffffffff, 0x0) 1m36.054140289s ago: executing program 0 (id=838): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) creat(0x0, 0x1f) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/48, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20400) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x200000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) llistxattr(&(0x7f0000000100)='./file0/../file0/file0/file0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x380, 0x4, 0x1, 0x1, 0x10}}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000002400)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x14}, @fda={0x66646185, 0x0, 0x1, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 1m35.542276941s ago: executing program 0 (id=845): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r2, 0x705, 0x3fdfff, 0x4}, 0x14}}, 0x0) getgroups(0x2, &(0x7f0000005e00)=[0x0, 0x0]) setregid(r3, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x0, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x23, 0x9, 0x70bd28, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x2012, r0, 0x4d753000) 1m35.540285381s ago: executing program 0 (id=846): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.539237411s ago: executing program 0 (id=847): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_eeprom={0xb, 0x6, 0x80000000}}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x90) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000780)=ANY=[@ANYRES8=r1, @ANYRES16=r5], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '%:'}}]}}) (async) r6 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b942, 0x18) sendfile(r6, r0, 0x0, 0x80000000) 1m28.53585029s ago: executing program 3 (id=993): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x138, 0x0, &(0x7f0000000700)=[@decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x2}, @dead_binder_done, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x3003, 0x1}, @flat=@binder={0x73622a85, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000bc0)=""/4096, 0x1000, 0x0, 0x2b}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @enter_looper, @acquire={0x40046305, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0x1101}, @flat=@handle={0x73682a85, 0x1101, 0x2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x1, &(0x7f0000000500)=""/3, 0x3, 0x1, 0x21}, @flat=@weak_binder={0x77622a85, 0x110b}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/67, 0x43, 0x0, 0x3e}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}, 0x40}, @enter_looper, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x604001, 0x0) (async, rerun: 32) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e0"], 0x56}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x8, 0x10, 0x4, 0x81, 0x0, 0xb, 0x1, 0x9, 0x5d, 0x2, 0x8, 0x40, 0x31, 0x40, 0x5, 0x2e}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async) r6 = dup3(r1, r0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) (async) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r9, 0xffff) (async, rerun: 64) fcntl$addseals(r9, 0x409, 0x7) (async, rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="2d722054955d58a7496c696d697420072b6e657467040a960710515eaf3c21fb48dba8c6cc19878d082a2d2ff41f37c53c761ec4a94d548697bc08ff4580b6e08c8e186f8044c50eee002c04c0f8e8cf8f862380e7b9fe57dc"], 0x28) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r10, 0x8954, 0x0) (async, rerun: 64) connect$tipc(r10, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10) (async, rerun: 64) r11 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x8000}) ioctl$FS_IOC_RESVSP(r11, 0xc0086202, 0x0) 1m28.53274595s ago: executing program 3 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 1m28.53231582s ago: executing program 3 (id=995): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22000, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0xf}}, {@fscache}, {@mmap}, {@version_L}, {@access_any}]}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60002, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) fsopen(&(0x7f0000000000)='incremental-fs\x00', 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x22000, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) (async) mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESOCT]) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000080)='\x00', &(0x7f00000000c0)='./file0\x00', r1) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x3e0, 0x1f0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x9}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0xf}}, {@fscache}, {@mmap}, {@version_L}, {@access_any}]}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60002, 0x0) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) (async) 1m28.478095364s ago: executing program 3 (id=999): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) (async) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0x36) r5 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r5}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async) r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xf82}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/49, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0x1000, 0xbf, &(0x7f00000002c0)=""/191}]}) ioctl$EXT4_IOC_GETFSUUID(r3, 0x8008662c, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000740)=[@increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m28.41421495s ago: executing program 3 (id=1000): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') read$FUSE(r1, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffa1) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000380)={&(0x7f0000181000/0x1000)=nil, 0x1000}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) fchdir(r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0xffffffffffffffa1) (async) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/ipc\x00') (async) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) (async) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) (async) 1m28.41367397s ago: executing program 3 (id=1001): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x804, 0x0) (rerun: 64) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0x0) (async, rerun: 64) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r1, &(0x7f0000000040)) (rerun: 64) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 1m20.350262066s ago: executing program 32 (id=847): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'veth1_macvtap\x00', &(0x7f0000000180)=@ethtool_eeprom={0xb, 0x6, 0x80000000}}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x90) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000780)=ANY=[@ANYRES8=r1, @ANYRES16=r5], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@aname={'aname', 0x3d, '%:'}}]}}) (async) r6 = open(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10b942, 0x18) sendfile(r6, r0, 0x0, 0x80000000) 1m13.059711899s ago: executing program 33 (id=1001): quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x804, 0x0) (rerun: 64) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, 0x0, 0x0) (async, rerun: 64) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r1, &(0x7f0000000040)) (rerun: 64) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 1m3.0207176s ago: executing program 5 (id=1436): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x89a5f000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xe4}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044001}, 0x10) recvfrom$inet6(r2, 0x0, 0x0, 0x12003, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x9a000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000380)={0x424, 0x3f4, 0x200, 0x70bd25, 0x25dfdbfe, {0x10, 0x0, 0x2a, [0x6, 0x2, 0x8, 0x3, 0x32, 0x1, 0x40000000, 0x9, 0x3, 0x6, 0x8, 0x22, 0x2, 0x5, 0x3, 0x8, 0x0, 0x7, 0x200, 0x9, 0xd32, 0x1, 0x7e843b22, 0x6, 0x8001, 0x1, 0xb8, 0x8, 0x0, 0x0, 0x4, 0x4, 0x5, 0x6, 0xfffffffb, 0x2, 0x6, 0x24, 0xd6d, 0x6, 0xe65, 0xbb, 0x5, 0x1, 0x1, 0x6, 0x1ff, 0x7, 0x8, 0x2, 0x1, 0x8, 0xe92, 0xa, 0x9, 0x1000, 0x50a, 0x4, 0xd5a, 0x9, 0x9, 0x8, 0x1ff, 0x4], [0x2, 0x35, 0x29, 0xe, 0x2, 0x71ad, 0xf, 0xffffa631, 0x40000000, 0x8, 0x9, 0x1, 0x8, 0x80000000, 0xc0, 0xb, 0x5, 0x1ff, 0x283, 0x1d532413, 0x0, 0xb, 0x739, 0x1, 0x0, 0x6, 0x1, 0x1, 0x7fff, 0x7fffffff, 0x4, 0x9, 0x9, 0x1, 0x80000000, 0x80, 0x401, 0x5, 0x0, 0x3, 0xe, 0x5, 0xb, 0x2, 0x5, 0x6, 0x2, 0x7ff, 0x7, 0x9, 0x3ff, 0x4, 0x5, 0x4, 0x9, 0x4, 0x3, 0x1, 0x8001, 0x5, 0x5029ac36, 0x1, 0xffffdb10], [0x7, 0x0, 0xffffffff, 0x4, 0x7, 0x18, 0xf, 0x3, 0x1, 0x6, 0x5, 0x200, 0xdde, 0x8, 0x2, 0xc50, 0x21a, 0x1, 0x101, 0x5, 0x6d34, 0x4, 0xa4, 0xa72, 0x8, 0x40000, 0xdb, 0x2, 0x10001, 0x0, 0x2, 0xe6, 0x15a, 0xd, 0x4, 0x4, 0xffffffff, 0x1000, 0x8, 0x480, 0x80000001, 0x8, 0xffffffcc, 0x3, 0x8, 0x0, 0xffffffff, 0x3, 0x5, 0x4, 0x1, 0xff, 0x1, 0x4, 0xf, 0x101, 0x2, 0x80000001, 0x80, 0x9, 0x2, 0x6, 0xfffffff7, 0xd1], [0x4, 0xb, 0xc, 0x8000, 0x0, 0x800, 0xfffffffd, 0x7, 0x10000, 0x9, 0x88, 0x8, 0x3ff, 0x4, 0x7, 0x7, 0x7, 0xfffffffb, 0x6, 0x8000, 0x8f8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0xe, 0x7ff, 0x7, 0x3, 0xd368, 0x0, 0x80000001, 0x1, 0x13, 0x7, 0x72f3, 0x7, 0x2, 0x9, 0x7, 0x4, 0x7868712c, 0x6, 0x101, 0x6, 0xac6, 0x3, 0x0, 0x7ff, 0x75cbd0b, 0x0, 0x80000000, 0x4, 0xe, 0xe, 0x10000, 0x80000000, 0xc1, 0xfffffffb, 0x6, 0x6, 0x101, 0x9], 0x3, ['@\x00', '\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x200}, {r4, 0x8000}], 0x2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 1m2.153588031s ago: executing program 5 (id=1466): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee47000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x8000005}, 0x8) close(r1) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000140), 0x0, 0x6e, 0x0, 0x0) close(r3) poll(&(0x7f0000000000)=[{r2, 0xd010}], 0x1, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1800, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x8c, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0x4, 0xfffffe01, 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = dup3(r0, r0, 0x80000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pread64(r6, &(0x7f00000001c0)=""/210, 0xd2, 0x60a2d3b9) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000adb000/0x2000)=nil, 0x2000}, 0x1}) ptrace$getregset(0x4204, 0x0, 0x204, &(0x7f0000000240)={&(0x7f0000000180)=""/170, 0xaa}) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m1.242098827s ago: executing program 5 (id=1495): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) fsync(r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000040)={@local, @remote, 0x1, "29ae020c0e9426723d63b174098d35ad2ace921afefe2fa88ea524a58ba69407", 0xfff, 0x2, 0x6, 0x9}, 0x3c) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000080)={{0x0, 0x343d, 0x20000, 0x1c00000000000, 0x8000000000000001, 0x2, 0x6, 0x4, 0x7fff, 0x6, 0xfffffffa, 0x1, 0x9, 0x81, 0x1}}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000001080)) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8000000000000000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000001100)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001140), 0x40400, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001180)={{r3}, 0x9, 0xed07, 0x6}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x729) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001300)={&(0x7f0000001240)={0xb4, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x3}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xed93}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x86}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000013c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001380)="2239c8879714", 0x6, r1}, 0x68) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001480)={&(0x7f0000001440)=""/35, 0x23, 0x216, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) ioctl$int_in(r4, 0x5421, &(0x7f0000001600)=0x7fff) setsockopt$sock_int(r4, 0x1, 0x13, &(0x7f0000001640)=0x8, 0x4) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000001680)=@nullb, 0xffffffffffffffff, &(0x7f00000016c0)) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000001700), &(0x7f0000001740), 0x2, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001800)={&(0x7f0000001780)=""/96, 0x9000, 0x800, 0x3, 0x1}, 0x20) rt_sigaction(0x33, &(0x7f0000001900)={&(0x7f0000001840)="66430f1c12c4c1d01600262e66420f383e0b2e3e0f38083a430f2c16660fd6c90f0f743c179a36430f137509c4e1edfb3346dfe0", 0x18000006, &(0x7f0000001880)="400f381cae79080000660f3a08d300c4e24596c4c4439d6a7c200031f247d9ffc4a17c2e6e00c441f850f8642ef3460f5b7599df8d00000000420f45b602000000", {[0x3]}}, &(0x7f0000001a00)={&(0x7f0000001940)="660f542d57000000c4c281bce099430f0d1e3e660fe012c4020dbab74c000000c44289af2daee40000c4c209978b00000000f34a0f1ecf66440f63bf10ba3d91", 0x0, &(0x7f0000001980)="65f20fd0e2c4017a2d820000000026f040836700002e450f72f6ebc443055de05ec42229f795d0bf97e4da194d0faea300000000c481b6537993c4c3f961450585"}, 0x8, &(0x7f0000001a40)) lseek(r1, 0x30e, 0x4) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001a80)='./file0\x00', r7, r8) 1m1.241610537s ago: executing program 5 (id=1496): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x3c, r2, 0xe81, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc4}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x804c090) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f3d, 0x4000, 0x4001, 0x2bb}, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x20000000) syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), r3) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="110628bd7000fcdbdf2505000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r5, 0xa00, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x320}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x44008800}, 0x0) r6 = open(&(0x7f0000000080)='./file1\x00', 0x31fd02, 0x19) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x20, {0x2, 0x4e21, @empty}, 'veth1_to_batadv\x00'}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x301, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0600000021a500000c003a"], 0x2c}], 0x1}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0x15, "0d07193755f8b08c1b14b816f0d99ef9a722d2d8b7"}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc30309050803200006020409050302"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendfile(r6, r0, 0x0, 0x80000000) 1m0.412902495s ago: executing program 4 (id=1506): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup(r0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0, 0x100000}], 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000180), 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000240)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m0.274251237s ago: executing program 4 (id=1507): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0x80045505, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB]) (async) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) 1m0.002219599s ago: executing program 4 (id=1509): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 64) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) close_range(r0, r0, 0x2) (async) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x7ffff000) (rerun: 64) 1m0.000396449s ago: executing program 1 (id=1511): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1a, "2af01c3d0040fbffffffffffffff00"}) (async, rerun: 32) r4 = syz_open_pts(r0, 0x0) (rerun: 32) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)) (async, rerun: 64) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 64) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$chown(0x4, r5, 0x0, r6) (async, rerun: 64) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0x101, 0x104, 0x0, 0x38f, 0x3, "a0590469a322d928"}) (rerun: 64) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4) (async) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async, rerun: 64) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) listen(r8, 0x9) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x7a000000}, 0x10) (async) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r11 = dup(r7) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d4ee6beb6cd6f527944039e45b0ef0f9a634554cdd765a4a5a0d604d33e5ee8c1544e32965c6641468fd69065f25aadcc8a264e019fffd4bc8e52aa8cff7ed835a9bc7e772eb616fba35da0778fd5fb898b4ced25894b2e1e4b3fed00acf19af95c2aceba03d8e7a5281af6ac5fd9ee0a85b03fcdd2", @ANYRES32, @ANYBLOB="2c7766646e6f3ddb83295767fe4d18ed9104fb6e2da4900db7921e1c5117ba01", @ANYRESHEX=r11, @ANYBLOB=',ignoreqv,noxattr,cache=mmap,access=client,\x00']) (async) open(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x52b942, 0x0) 59.987032001s ago: executing program 1 (id=1512): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000002000)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @multicast}, 0x38, {0x2, 0x4e23, @multicast2}, 'wg0\x00'}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x4}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0xc, 0x3}, {0x1000, 0x3000, 0xe, 0x13, 0x1, 0x8, 0x7, 0x8, 0x0, 0x42, 0x2}, {0x2, 0x5001, 0x4, 0xf, 0x5, 0x6, 0xc3, 0x6, 0x3, 0x6, 0x5, 0x3}, {0x3000, 0x0, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x1, 0x6}, {0x1, 0x8000000, 0xe, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0x2, 0x8092000, 0x8, 0xbe, 0x6, 0x7, 0x10, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x5000, 0x8000000, 0x4, 0x9, 0x0, 0xf, 0x10, 0x3, 0x8, 0x4, 0x80, 0xc}, {0xdddd0000, 0xffff, 0x10, 0x4, 0x7, 0x8, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1000, 0x17}, 0x40019, 0x0, 0xd000, 0x202, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x4, 0x4000000000000009, 0x7]}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000010c0)={[0x60000000003, 0x1000000000, 0x0, 0x10, 0x2000001, 0x0, 0x2004cb, 0xa000000000000000, 0xffff, 0xfffffffffffffffb, 0x5, 0xffffffffffffffff, 0x7fffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc], 0x1, 0x202}) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r8) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0x140}], 0x1) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) 59.835458183s ago: executing program 1 (id=1515): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8a8c3, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) chdir(0x0) close_range(r0, r0, 0x2) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r3, r3) setregid(r3, r3) r4 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r6 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000006200), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x90, 0x0, 0x4, {0x2, 0x3, 0x7, 0x5, 0x7, 0x9, {0x5, 0x4, 0x2, 0x800, 0x100, 0x5, 0x5, 0x10, 0x3, 0x0, 0xa5d, r10, r11, 0x80000001, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, &(0x7f0000002600)={0x2, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x5}, [{0x2, 0x0, r1}], {0x4, 0x3}, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r6}, {0x8, 0x5, r7}, {0x8, 0x1, r11}], {}, {0x20, 0x5}}, 0x5c, 0x0) rmdir(0x0) r13 = socket$xdp(0x2c, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$XDP_UMEM_COMPLETION_RING(r13, 0x11b, 0x6, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0x8902, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf25110000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080003000100000040000180140002006d6163766c616e300000000000000000140002006d6163767461703000000000000000001400020073797a6b616c6c6572300000000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000480001801400020070696d726567310000000000000000001400020073797a5f74756e00000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007663616e300000000000000000000000200001800800030003000000140002006e657470636930000000000000000000"], 0x11c}, 0x1, 0x0, 0x0, 0x2400c050}, 0x20040800) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c26001, 0x13, r0, 0x22e7c000) 59.74579427s ago: executing program 1 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b9882", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e4", 0x1d}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5fc6b6e90b1d440a017dc84cfec4161d7c33c21eae6", 0x6d}, {&(0x7f0000001a40)="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", 0x467}], 0x3}}], 0x2, 0x4000040) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x0, 0x5, 0x7, {0x7, 0xa, "b85f54897b"}}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffd) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000001c0)=0x8001, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x52, 0x4, 0x70bd2a, 0x0, {0xa}}, 0x14}}, 0x40010) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x200080d0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000040), 0x4) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8}}], 0x1, 0x2, 0x0) fadvise64(r0, 0xa, 0x400, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 59.303542567s ago: executing program 2 (id=1521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x1}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x802, 0x0) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000440)) 59.197940655s ago: executing program 2 (id=1522): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="68750400"/13]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x4000}) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r2) ioprio_set$uid(0x3, r2, 0x4000) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x143042, 0x8c) syz_usb_connect(0x2, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x300, 0xc4, 0xb1, 0xc2, 0x20, 0x1a0a, 0x104, 0x5a51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x79, 0xa, 0x0, 0xc4, 0x7a, 0xb2, 0x2}}]}}]}}, &(0x7f0000000100)={0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x820}}, {0x6e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="6e032c00caa3675afdc5914b60d7f49c29c2a7e733e132a584d0a918ac8f58c8afa6edba0f33b999c8c9f826d54a830fe3d975fcb6850774c413ec805b339d138279982b127d226801d0704a7bfca54bf298c00998cf688059d58fc93917255b3df8913a070d02300980cf6868de"]}]}) close_range(r0, r0, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getdents(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) fadvise64(r5, 0xe3c, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x0, @remote}}) r6 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0)) 56.906642395s ago: executing program 2 (id=1523): r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x2000, &(0x7f0000000140)=',,\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x7}, 0x4) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e20, @local}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fb5000/0x4000)=nil, 0x4000, &(0x7f0000000180)='[$\x00') 56.165250536s ago: executing program 5 (id=1524): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, &(0x7f0000000080)}) 55.606003462s ago: executing program 1 (id=1525): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x3, 0x8) (async) write$eventfd(r0, &(0x7f0000000080)=0x3, 0x8) ftruncate(r2, 0x2000009) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="75e375", 0x3}], 0x1, 0x0) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) 52.814503383s ago: executing program 4 (id=1526): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002940)={0x2020}, 0x2020) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x0, 0x240, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4040) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0xa40, 0x4}}, @uexit={0x0, 0x18, 0x715d}, @wrmsr={0x1e, 0x20, {0x384, 0x5d873f01}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @wr_crn={0x46, 0x20, {0x4, 0x6}}, @code={0xa, 0x60, {"b8010000000f01d9b9800000c00f3235010000000f30c4218c558600800000b9cbc800000f32c4037144600bdc26f3450fc771a666baa000b001ee66430ff4af00000000460f7931f3422db0f9fbfd"}}, @wr_crn={0x46, 0x20, {0x3, 0x60000000000}}, @rdmsr={0x32, 0x18, {0x40000097}}], 0x130}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x237, &(0x7f0000000fc0)={0x0, 0x5cec, 0x10, 0x5, 0x2cc}, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xb29, 0x0, 0x481}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 48.874666729s ago: executing program 2 (id=1527): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100318062d40ac0531b2008501020301f801120001b00160490904da0700fffd0106"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000a80)) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfff, 0x0, 0x0, 0xafa, 0x0, "e32401186a9ed9a9"}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') (rerun: 32) r6 = userfaultfd(0x80001) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x110}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000001a80), 0x910, 0x200) (rerun: 32) mkdirat$cgroup(r5, &(0x7f0000000240)='syz0\x00', 0x1ff) (async) read$FUSE(r5, &(0x7f0000006a40)={0x2020}, 0x2020) (async) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80220020}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x50, 0x0, 0x7, 0x5, 0x0, 0x0, {0x35e69c74bb891625}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x403}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xb8df}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x76f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4008850) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@dev}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) (async, rerun: 64) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xa) (async, rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000001440)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000280)=[@dead_binder_done, @enter_looper], 0xc2d, 0x0, &(0x7f0000001480)="0c230c49b5a42b243bd7b7b1904a4b8581244fe0f0f5014a86c0f3a9ff09918d8bdfd4356787dbc1f66b79285ef7aa4f9209f28084a27e7b96c158ba52242033097a1c2243c23874f3a26940f5f91f813ce61637a0abeedd836d1fbd9db3161c45132b4b03a4dd4fe5541d2df18f1cdb3995718771703c1f9980444eb19044be6ded14234c651672f4bb67f6641ec61775ed67fed50109dd9ae5251a04cd90c33a1761b014bae317b18d7f77936d6b5ccb52e13dad94a7912b168a5bd5d5dadaaef156e25ab41b2b3ced0226ef6c301a353c61e66b3cd98365c4b174437333f4123a45b9600dd2d332d0d9898676683941b48ea8be9256df0ec523eaf4dc15e7bfbc6c1b0b9f77c38e082c520d730d0f4eba7234f1035e6cb60b5188a9eb1a803d78e55926695873c82dbd49d4ba59d1004ee1e9e7b77bde2d5b69fd778e07e8a55b8f9199da0fc459a6cb4cecc195bf9ee3ba932bf9ffcdb8e0dc63e797da3c13fe081af4a579b488edc8902679707915a2262d2d9ea350833a6310a2ef8ab5f698f3fc25a41a6948275077b4e7e35a4da6223f7b7a2622ecbceecb57383e2a198285f8e3c28f67277fa0f03eb818c5aa36abf1ed1bf360e772c01fb32633623048112ce1f76f2fb1e9ec28b97e5f28194680270d92ac98f08319f845654f9fb5c540b6771cf94b2dd4f8ac983e17e1081b0baedf6ab2d100ec53a7454bdf42fca3a3263e5c7b0c9143fc9e3874423120f9c7727f08cd5792d18f1893682a078112756d7f4e9dc662fb73915796d0412b3577c1ceca83d347383d1c4e2dbd668b973c5704346232d61fb9e93a8ebe542ca4285ff7c01f3f2171466e744f40a1e2ab2d7038561e3ba46f916dae321c5b6063dff810f6f000757c96c79ab806fb58e9d88db408609abcfc62c1074d3e1cbfe819779ea420b02ba0e2a39bd41bedd469c96501b3ee1ac455fce3c576ba7b102fba26a3d2a013d5463c3da454d45dd9d581af96cb6bd8b404a0b2aed0016df7a2d0829c1d1608aff5389eb9fd3dcc152e69cc8c2405a05457797d170b7dc58c1dc315b781f9933153eefd79290152f86acc2069c382635f8063e714b0a7aa95dde151bbe6eda6231c9fd174134ef02376dc22269b330a4495f77e85c4835f43e2f9e0a958d1038b1470b7058a8ae37b71efd8cea19db6a320c1c392b766fe1a193ffbea5a1470f8f90aaec54f757d1099bf33ff6e83ae474dc454e1825e8f5c55df1e7496c3d447f6f73b59c8b35ad445bd0662696ab82d32c56b81f38907493ad2bf4530e78df526fada4f0f35e4774f7ab252ad697a57f6edce643193b9d18ffdf45e0180a7faa1b8e47a9fb2cd7a184aafcb1d8628019dd763b614cde900ff03af4e391cee13181543a23985f806ea9ff626b7865e2fff6cec859d588a73386de447b246f15d4223d1b6563696471215a7d847e92113d1432db592eeab88a45bb93c5c2469d61f9f170d4813d8f3a609c2482a159e9010455850d43b6836a49de9b5d333238e5e8e3de4d5633924849971fca2a3ffd783c108f51d6b92fe8720ce4381739ea2f7c7060f71f962a2be407d576567a6b3f498432307819577d80b3f3ccdc61680d66657bc0b8ae0a2d1c35e6d115d26cfba884fd12a09df8f4c078bd1e53cb1f06a4e13983e5a159f8691d6f4a762bdadaf0f35690e636288a0ae717372ed8aeb9e64611da5d27664ffff354b7d3d25168c0e671797fb13315a115aa5bb1dfca49865711bbd1026d3d88db7b7aed3d9eb76d91c90e15545e11f623d9a4668b2ff12a208c1a18a2cf43c9d6f9836cc0a465a25e84770d146c60138b979785bbe68500ee7818aefc7810a53f285a735d96d76d24ee70fb50a7bc428a6e05e32c493c8aefe568da151969f71290eba74877b08dca548619af056e89a51f3f636d553c6813b32f66f64fccba78992c5e5d21e06dfdcb7b71b8e40830ffb63450c8bc353c60d5671f7a40b53fb32db70d70aac7755eb1b406acdc29cb16cb73e14e83b40718dd95b0d85507f25d52d6e9ce0d1b22ee1cbff3d752fde817c3108185bb7b75dd484de8b74fb48d4ade0f62134d8aff246e47c342fcc441d73cc0e51841b0ec7682fcbf1cf58ee6173c40f744b2f6903e765a5c55960a697d2e89f3cc9ffe650282cc6c5cd945bd2b5eb04c0bfa8ece00639545b5cbcf231fc7019ddc7acff3fa087fa3e4c5f10b104d600a05c5c3fb3c5fc4f74f0c684b9a12ba19649f182b974876d07bcf51aba4f5d67bd62c400b5349cae17148a0384b8dc54abd1ca9fd992fb7ff8e2026c907299dc1749a696f337cd20a2f8095884e3e6b72ebbf2be1eec25ca8f0f344946572679e49c9b08ab16e192da2e48a83db0050e9466693ab539c17f798f525c0eae0f5b3eeb6cfc4967ab45ee0c0d704d6857a00d3ed899b93e52c462df33705cd9e199afcc4f50fa80dc0574034d0787107ba60da10b3e06af516e5cd6018fa38b852935213fa45e999239aa811b5f7a325900c065b67e7d9b26c0bb64e0f27d8b7a4b5dea780f1bba3690294d6e43cd4528d88eac5d0d4efeab0ccbbf5bbb277c79ae3ef453bb665637830d6fa7706b56bff4fd45f4c2b1cf830c7548c8543b7150ff7a81bfca9f4a55ddb2e9db58585596c519bd74660976d526db0c5127731ceea95ff22bef872103cdc5bee43b250aebf49a7f99b57e75c1bde723025c4a098a1c909c31c40d06fcdbd50ad35def27b6593d7865490701a383e470cdb9d24b6b7a960f6e45dffe9b5b6fcf77ecae01a4453091b2ed377b5e1aaaebd7b4f9e02d3c722b45b77670f56e53a263436cc01fed25721f165e51f2d3aa7f564939638052b1b919602a21efbc3c1f72b2fc5ac999127061b13137f5a0bffa004035a7a1f5e19217e55f489b6335ea42616eaf9493a615a1d6e3a098c205259542f1ad3b490d665b5053337ae03c9804792ff48bcb325a031b2396212952665e09e42f66343f2caff7a917754866d5ee5f2623108cc97a6710f3cc111bab4744ae0e43595785c2aa556d43cb308297fe8224e336cc700bf26b900f1b411a24cf953ffc0b8c50f7bf4d7a7bc436adaea7bcfe76ab2065811feb3995730397cb258eac4d8e74bb02791a7da3b0bb976e745272af9f164c61ae47d8da7d933d723c085e47ddbb8fd628a524059b0012b3435b97e0975cf764ea64a49b3b847d88ecaa9b9239038ac07acb2c40e3cc01f22893f93f7214b81af3ce99eba1684b8e7c80600bb608857e6cab18dc7de3accc6a4ea88c48af34b92cd023b10dfd43695b9f3b50484360f5659c57c0a50cc5532c1d536c5449ea18a561ffa5a1d7b63d28a704b41ec0ec72fe61b4b6cfcbab6ec6d83c3e302799f6aa2d93d0d730ad46c86beba06e6d76428982ca2a5d3a681a8b12f3361ce803e2cff853194f97f0de5326ff9e9174c0c4c659c1c89229b1c1953aebfff008d145ba701cfe88397e7502e32d4e7626a2244cbf368f7326ed73237de34212a8323068829153ca8bc8e996e76f6159ff0978503668dba8425221ad61124a3b783b288ba71ae5c2832315108d6522fc27f92928f76aa076118f51e5dcd152eb777cef0a82cdd0c3c83dcfacfbdf64ba08242760d3cc34471038c37a2a810551e699376ba42676f727cf8380642fd6c8bada7a71a241181f61a0a6acc75f5a3d6db6800cc4ed4a93508c1c9c6680d3bf05020378d083ee61ddf629ef2502cd4e30304e233099a9568ec6abaefc80dd3411b9b1db09762e330c1befa8361a8034158218196d2262ec6260fe5c7dbf2f7f294f5e33222bcef98c2ff457821a8b69c4cfc4dfeaf0e3f1e48f10cb7a6951333034813c63879146ee0f6cd529073edb3fa009343f8c48aa1e6e312131c03d99976adc86d6c55c844d22c66bbacba52dca0afce3e145841dc26721b6ec5d1dd68c6ffa750622df1c7032cbd10e04114362a91815618cdea40ddcb4df922960c7a779f50a87267d8c5b36b2221eab7f7b0669d36e38ad49c8858274ccd9715fc1e0bdc1dd8fa9c2770adb12df1844c732c01fc5df153e7d9d9dea8d504859985ec82e304b3804d1179543b5b096a6f2e87820f6d212bc2457ad6c72a95031b8d6d4ae9dfa3c0d168d025b30fa5789c88c69cbe682febb832c7676768fe48663c4940be8b5702dc86fb2b58c1cafea14786a41f5c032c8cda5b0c9589c5b37384c5636cd2594a0bfaf9d5356e907b89979cd26dfaed0345ec2f335d7d8c1ca76ac5282298cff6ae9831338fa431468dd269d7a3ad5daf015f3742b75ec6b595c1aee8ed156a4a9d8adcf84fc5ca2ec4e25a8d12a6b9204aa189ae534affe5d7a37e587f5d84cf0ff0591810031c3d53c09f9d8e2789bdbf0085444cc999180047e857eba09d714568c"}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f0000000040)=[@request_death, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 48.044595248s ago: executing program 1 (id=1528): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x1, 0x11, 0x14, "a7001e38246d498e8ff1b558dcda341479f2c8af8fe855b8a6be587bb4b9ae4530537c0f5a7db77406dcb977907b097cf40a5c4d0ac65bea9a6521cb81d511ec", "d057e590109f6c98f63c94ebcbc72a15f3a84abbcb629a5b4f86bd2dfaebc50b", [0x1ff, 0x4]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x628000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000740)={0x1, 0x3, 0x1000, 0xc5, &(0x7f00000005c0)="45a97b6b07feb1cb588a52e541e28420a6874aa9623dc230ca7f1f813bf9907e2171d5d1450f5830535f6fd736fc757fcd6fced244d8eb9e47b9ab666061a0f298cbba63927abc249958681554d2c994cca2adff09246b5076497e64adcd7a3816c5e19642239da49491f18f5a65c0e30dad5e6c3b55ae86dbc7193d02842b8ac9b4bae5caab603a7b5b602e3e310de741ab6656b553bfdc334aca709f4f70dc7f7b601e6c2adbc2d313f84f63efd5c4e4b9d6b6b635af1d9e5b7d4c83801e47ea45503c5e", 0x59, 0x0, &(0x7f00000006c0)="e56f4f52ddfe8a8970ac61ca01a76311b9508908e6c1e618e08eac3b2f87de2cfed0ef2e00811a9c269dec1e662bcb5d750bcd51ac22bc3749d363429a72a77509c7dc2b6294584a82a8ff9322b7915389ea985dc883382ce2"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0xf98c8432db85b9c0) fallocate(r2, 0x12, 0x7fffffffffffffff, 0x7) r3 = fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000008c0)=0x0) kcmp(r3, r4, 0x2, r1, r1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x2, 0x70bd28, 0x2, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd89}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x40811) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44000) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000d00)={0x9, 0x3, 0x6, 0xf3, 0x2763, 0x8}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x4, 0x6, 0x4, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range(r2, r7, 0x2) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r1) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x10) modify_ldt$write(0x1, &(0x7f0000000fc0)={0x4, 0x20001000, 0x3400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000012c0)={'ip6tnl0\x00', 0x800}) 47.841354614s ago: executing program 5 (id=1529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2401) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 43.463594086s ago: executing program 4 (id=1530): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x18, r2, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xbc7, 0x80000001, 0x7, 0xa, 0x7}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)={0x18, r2, 0x2d1904d3112073a9, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xbc7, 0x80000001, 0x7, 0xa, 0x7}) (async) 34.453122351s ago: executing program 2 (id=1531): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000040), 0x4) fadvise64(r0, 0xa, 0x400, 0x5) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x1, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 32.568554957s ago: executing program 34 (id=1528): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x9, 0x1, 0x11, 0x14, "a7001e38246d498e8ff1b558dcda341479f2c8af8fe855b8a6be587bb4b9ae4530537c0f5a7db77406dcb977907b097cf40a5c4d0ac65bea9a6521cb81d511ec", "d057e590109f6c98f63c94ebcbc72a15f3a84abbcb629a5b4f86bd2dfaebc50b", [0x1ff, 0x4]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x628000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000740)={0x1, 0x3, 0x1000, 0xc5, &(0x7f00000005c0)="45a97b6b07feb1cb588a52e541e28420a6874aa9623dc230ca7f1f813bf9907e2171d5d1450f5830535f6fd736fc757fcd6fced244d8eb9e47b9ab666061a0f298cbba63927abc249958681554d2c994cca2adff09246b5076497e64adcd7a3816c5e19642239da49491f18f5a65c0e30dad5e6c3b55ae86dbc7193d02842b8ac9b4bae5caab603a7b5b602e3e310de741ab6656b553bfdc334aca709f4f70dc7f7b601e6c2adbc2d313f84f63efd5c4e4b9d6b6b635af1d9e5b7d4c83801e47ea45503c5e", 0x59, 0x0, &(0x7f00000006c0)="e56f4f52ddfe8a8970ac61ca01a76311b9508908e6c1e618e08eac3b2f87de2cfed0ef2e00811a9c269dec1e662bcb5d750bcd51ac22bc3749d363429a72a77509c7dc2b6294584a82a8ff9322b7915389ea985dc883382ce2"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0xf98c8432db85b9c0) fallocate(r2, 0x12, 0x7fffffffffffffff, 0x7) r3 = fcntl$getown(r2, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000008c0)=0x0) kcmp(r3, r4, 0x2, r1, r1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r0) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r5, 0x2, 0x70bd28, 0x2, {{}, {}, {0x8, 0x11, 0xfffffffc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd89}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x40811) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x44000) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000d00)={0x9, 0x3, 0x6, 0xf3, 0x2763, 0x8}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x4, 0x6, 0x4, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) close_range(r2, r7, 0x2) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ec0), r1) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x10) modify_ldt$write(0x1, &(0x7f0000000fc0)={0x4, 0x20001000, 0x3400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x4e}}}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xb2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008011}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x54, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xe}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x40}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f00000012c0)={'ip6tnl0\x00', 0x800}) 31.584341799s ago: executing program 35 (id=1529): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/resume', 0x8080, 0x40) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, 0x0, 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x2401) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 29.340532494s ago: executing program 4 (id=1534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) fchown(r7, 0xee01, 0x0) splice(r5, 0x0, r3, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0)=0x7, 0x4) ppoll(&(0x7f0000000780)=[{r9, 0x400}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x5) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f30658154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x8001, 0x2, 0x1, 0x0, @msi={0x3, 0x2, 0xa, 0x80000000}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 22.880793508s ago: executing program 2 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000700)=[@release={0x40046306, 0x2}, @increfs, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) 11.147342459s ago: executing program 36 (id=1534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x102, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) fchown(r7, 0xee01, 0x0) splice(r5, 0x0, r3, 0x0, 0x408c8, 0xe) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[], 0xfffffe3e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x8001) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0)=0x7, 0x4) ppoll(&(0x7f0000000780)=[{r9, 0x400}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x5) r11 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r11, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f30658154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x8001, 0x2, 0x1, 0x0, @msi={0x3, 0x2, 0xa, 0x80000000}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 37 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000700)=[@release={0x40046306, 0x2}, @increfs, @increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) faccessat2(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1200) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): tem_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.153924][ T36] audit: type=1400 audit(1754592706.259:202): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 26.246953][ T36] audit: type=1400 audit(1754592706.359:203): avc: denied { write } for pid=471 comm="syz.0.48" name="tcp" dev="proc" ino=4026532339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 26.280124][ T36] audit: type=1400 audit(1754592706.389:204): avc: denied { connect } for pid=476 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.280521][ T477] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 26.299642][ T36] audit: type=1400 audit(1754592706.389:205): avc: denied { ioctl } for pid=476 comm="syz.0.49" path="socket:[5207]" dev="sockfs" ino=5207 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.332114][ T36] audit: type=1400 audit(1754592706.389:206): avc: denied { setopt } for pid=476 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 26.376012][ T36] audit: type=1400 audit(1754592706.489:207): avc: denied { bind } for pid=484 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.400464][ T36] audit: type=1400 audit(1754592706.489:208): avc: denied { name_bind } for pid=484 comm="syz.2.52" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 26.905453][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.035451][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.275438][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.525443][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 27.635536][ T65] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.656203][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.785437][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 27.792536][ T65] usb 1-1: config 13 has an invalid interface number: 106 but max is 1 [ 27.801003][ T65] usb 1-1: config 13 has an invalid interface number: 246 but max is 1 [ 27.809318][ T65] usb 1-1: config 13 has no interface number 0 [ 27.815552][ T65] usb 1-1: config 13 has no interface number 1 [ 27.821729][ T65] usb 1-1: config 13 interface 106 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 27.832784][ T65] usb 1-1: config 13 interface 106 altsetting 1 endpoint 0x1 has invalid maxpacket 35695, setting to 64 [ 27.844316][ T65] usb 1-1: config 13 interface 106 altsetting 1 endpoint 0xB has invalid maxpacket 552, setting to 64 [ 27.855296][ T65] usb 1-1: config 13 interface 106 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 27.866599][ T65] usb 1-1: config 13 interface 106 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 27.877700][ T65] usb 1-1: config 13 interface 106 has no altsetting 0 [ 27.884672][ T65] usb 1-1: config 13 interface 246 has no altsetting 0 [ 27.892974][ T65] usb 1-1: New USB device found, idVendor=045e, idProduct=0433, bcdDevice=a8.32 [ 27.902104][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 27.909695][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.915421][ T31] usb 3-1: device descriptor read/64, error -71 [ 27.918016][ T65] usb 1-1: Product: ᐄ [ 27.928509][ T65] usb 1-1: Manufacturer: ဌ [ 27.933140][ T65] usb 1-1: SerialNumber: 䀁 [ 27.939193][ T521] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 27.946589][ T521] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 28.025568][ T31] usb usb3-port1: attempt power cycle [ 28.076576][ T9] usb 2-1: config index 0 descriptor too short (expected 65069, got 45) [ 28.085032][ T9] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 28.097833][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 28.108065][ T9] usb 2-1: config 0 has no interfaces? [ 28.113567][ T9] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 28.122743][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.131348][ T9] usb 2-1: config 0 descriptor?? [ 28.161643][ T65] usb 1-1: USB disconnect, device number 3 [ 28.340774][ T45] usb 2-1: USB disconnect, device number 3 [ 28.365487][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 28.386816][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.516631][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.755574][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 28.776724][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.845332][ T535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 28.872307][ T541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 28.891540][ T541] netlink: 88 bytes leftover after parsing attributes in process `syz.1.71'. [ 28.901353][ T541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=541 comm=syz.1.71 [ 28.916705][ T31] usb 3-1: device descriptor read/8, error -71 [ 28.961430][ T546] : renamed from bridge0 (while UP) [ 29.025509][ T31] usb usb3-port1: unable to enumerate USB device [ 29.100700][ T556] 9pnet_fd: Insufficient options for proto=fd [ 29.137535][ T571] netlink: 72 bytes leftover after parsing attributes in process `syz.0.82'. [ 29.712809][ T598] rust_binder: Error in use_page_slow: ESRCH [ 29.712825][ T598] rust_binder: use_range failure ESRCH [ 29.718904][ T598] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 29.724383][ T598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 29.732460][ T598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 29.846951][ T611] binder: Bad value for 'stats' [ 29.870663][ T613] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=613 comm=syz.2.97 [ 30.015026][ T620] 9pnet_fd: Insufficient options for proto=fd [ 30.021648][ T620] rust_binder: Error while translating object. [ 30.021681][ T620] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 30.028336][ T620] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:62 [ 30.054564][ T622] SELinux: ebitmap: truncated map [ 30.071216][ T622] SELinux: failed to load policy [ 30.272608][ T624] mmap: syz.1.101 (624): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data. [ 30.317513][ T631] rust_binder: Write failure EFAULT in pid:92 [ 30.395254][ T646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 30.570721][ T661] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551500) [ 30.570744][ T661] rust_binder: Error while translating object. [ 30.601815][ T661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 30.615462][ T661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:108 [ 30.710857][ T672] SELinux: security_context_str_to_sid () failed with errno=-22 [ 30.770539][ T680] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.803644][ T686] process 'syz.3.119' launched './file1' with NULL argv: empty string added [ 30.826544][ T686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 30.826582][ T686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:71 [ 30.872286][ T689] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 30.897361][ T693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=693 comm=syz.3.121 [ 30.925854][ T693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=693 comm=syz.3.121 [ 30.942228][ T693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=693 comm=syz.3.121 [ 30.964235][ T693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=693 comm=syz.3.121 [ 30.995358][ T693] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=693 comm=syz.3.121 [ 31.106370][ T707] rust_binder: 74: no such ref 1 [ 31.116469][ T707] rust_binder: Write failure EINVAL in pid:74 [ 31.134042][ T707] rust_binder: 74: no such ref 3 [ 31.153573][ T707] rust_binder: inc_ref_done called when no active inc_refs [ 31.154731][ T36] kauditd_printk_skb: 53 callbacks suppressed [ 31.154747][ T36] audit: type=1400 audit(1754592711.259:262): avc: denied { map } for pid=712 comm="syz.1.129" path="socket:[7250]" dev="sockfs" ino=7250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 31.247091][ T36] audit: type=1400 audit(1754592711.359:263): avc: denied { getopt } for pid=719 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.318117][ T36] audit: type=1400 audit(1754592711.429:264): avc: denied { create } for pid=732 comm="syz.3.135" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 31.338433][ T735] tmpfs: Unknown parameter 'huge' [ 31.373959][ T36] audit: type=1400 audit(1754592711.479:265): avc: denied { remount } for pid=737 comm="syz.3.136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.432624][ T747] usb usb5: usbfs: process 747 (syz.3.138) did not claim interface 0 before use [ 31.433439][ T36] audit: type=1400 audit(1754592711.519:266): avc: denied { mounton } for pid=740 comm="syz.0.137" path="/proc/125/cgroup" dev="proc" ino=6349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 31.473741][ T36] audit: type=1400 audit(1754592711.559:267): avc: denied { read } for pid=744 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.494575][ T36] audit: type=1400 audit(1754592711.559:268): avc: denied { ioctl } for pid=744 comm="syz.3.138" path="socket:[6358]" dev="sockfs" ino=6358 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 31.531337][ T36] audit: type=1400 audit(1754592711.629:269): avc: denied { read write } for pid=752 comm="syz.3.142" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 31.556688][ T36] audit: type=1400 audit(1754592711.629:270): avc: denied { open } for pid=752 comm="syz.3.142" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 31.587060][ T36] audit: type=1400 audit(1754592711.689:271): avc: denied { accept } for pid=756 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 31.675769][ T776] fuse: Bad value for 'fd' [ 31.905460][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.952873][ T794] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 31.952918][ T794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.965602][ T794] rust_binder: Read failure Err(EFAULT) in pid:90 [ 31.982328][ T797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.158'. [ 32.086555][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.097636][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.118387][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.132743][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.155731][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.165310][ T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.180009][ T31] usb 4-1: Manufacturer: syz [ 32.186753][ T31] usb 4-1: config 0 descriptor?? [ 32.235956][ T809] rust_binder: Error while translating object. [ 32.235999][ T809] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.242575][ T809] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:100 [ 32.344192][ T814] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 32.474174][ T820] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 32.474202][ T820] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:136 [ 32.484544][ T820] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 32.545568][ T822] rust_binder: 136: no such ref 3 [ 32.557345][ T822] rust_binder: Failed to allocate buffer. len:144, is_oneway:false [ 32.593571][ T31] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 32.608886][ T31] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 32.617697][ T31] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 33.211663][ T65] usb 4-1: USB disconnect, device number 2 [ 33.504315][ T853] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 33.545974][ T859] netlink: 'syz.1.178': attribute type 1 has an invalid length. [ 33.553904][ T859] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 33.788167][ T335] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.925988][ T335] usb 4-1: device descriptor read/64, error -71 [ 34.175938][ T335] usb 4-1: device descriptor read/64, error -71 [ 34.415448][ T335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.482814][ T897] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 34.555416][ T335] usb 4-1: device descriptor read/64, error -71 [ 34.742329][ T920] /dev/rnullb0: Can't lookup blockdev [ 34.808388][ T335] usb 4-1: device descriptor read/64, error -71 [ 34.830243][ T930] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 34.830265][ T930] rust_binder: Read failure Err(EFAULT) in pid:175 [ 34.881847][ T936] can0: slcan on ptm0. [ 34.919319][ T335] usb usb4-port1: attempt power cycle [ 35.135644][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 35.265459][ T335] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.285456][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 35.291804][ T335] usb 4-1: device descriptor read/8, error -71 [ 35.300356][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 35.309400][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 35.317067][ T31] usb 1-1: can't read configurations, error -71 [ 35.355571][ T936] can0 (unregistered): slcan off ptm0. [ 35.427788][ T335] usb 4-1: device descriptor read/8, error -71 [ 35.473299][ T983] netlink: 168 bytes leftover after parsing attributes in process `syz.1.202'. [ 35.512130][ T989] rust_binder: Failed copying remainder into alloc: EFAULT [ 35.512157][ T989] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 35.519733][ T989] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 35.528456][ T989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:116 [ 35.540053][ T995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 35.598261][ T1010] rust_binder: 125: no such ref 3 [ 35.665513][ T335] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.686500][ T335] usb 4-1: device descriptor read/8, error -71 [ 35.718980][ T1037] syzkaller0: entered promiscuous mode [ 35.724553][ T1037] syzkaller0: entered allmulticast mode [ 35.816564][ T335] usb 4-1: device descriptor read/8, error -71 [ 35.838445][ T1046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 35.838478][ T1046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141 [ 35.867297][ T1054] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.884466][ T1054] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 35.893186][ T1054] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.901896][ T1054] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 35.911693][ T1062] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.919883][ T1062] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 35.928463][ T1062] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 35.935521][ T335] usb usb4-port1: unable to enumerate USB device [ 35.936626][ T1062] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 36.205449][ T528] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 36.259144][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 36.259161][ T36] audit: type=1400 audit(1754592716.369:315): avc: denied { name_bind } for pid=1086 comm="syz.1.238" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 36.355633][ T31] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 36.367014][ T528] usb 3-1: not running at top speed; connect to a high speed hub [ 36.375754][ T528] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.388929][ T528] usb 3-1: config 1 interface 0 has no altsetting 0 [ 36.397064][ T528] usb 3-1: New USB device found, idVendor=150a, idProduct=1203, bcdDevice= 0.40 [ 36.406422][ T528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.414425][ T528] usb 3-1: Product: Й [ 36.418533][ T528] usb 3-1: Manufacturer: 㗄髄Ȓ䷉绻ઉ鳔䈏洜〦郜럝㍥瘙叧쏗咕긧빻맊≼汷팑屌齹濫銤夕ٳ㔐脄盷髙杁躤좚㢇ffi窢歫⩬秶쬷熟맆ꠟ訄ꔿᦟ츆爗ރ䳦챬㮋ￋ誆袰Ꙋ븽뇅齰膣 [ 36.441364][ T528] usb 3-1: SerialNumber: Ј [ 36.516580][ T31] usb 1-1: config 1 has an invalid interface number: 25 but max is 0 [ 36.524816][ T31] usb 1-1: config 1 has no interface number 0 [ 36.531062][ T31] usb 1-1: config 1 interface 25 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 36.544201][ T31] usb 1-1: New USB device found, idVendor=09b6, idProduct=6875, bcdDevice=ad.15 [ 36.553648][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.561701][ T31] usb 1-1: Product: syz [ 36.565974][ T31] usb 1-1: Manufacturer: syz [ 36.570598][ T31] usb 1-1: SerialNumber: syz [ 36.721363][ T36] audit: type=1400 audit(1754592716.829:316): avc: denied { load_policy } for pid=1101 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.730669][ T1102] SELinux: failed to load policy [ 36.798245][ T36] audit: type=1400 audit(1754592716.909:317): avc: denied { mount } for pid=1110 comm="syz.3.248" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.822086][ T36] audit: type=1400 audit(1754592716.929:318): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.844922][ T31] usb 1-1: bad CDC descriptors [ 36.851120][ T31] usb 1-1: USB disconnect, device number 5 [ 36.855702][ T1116] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 36.896871][ T1122] futex_wake_op: syz.0.251 tries to shift op by 144; fix this program [ 36.915849][ T1137] rust_binder: 1116 RLIMIT_NICE not set [ 36.924695][ T1136] 9pnet_fd: Insufficient options for proto=fd [ 36.967899][ T1137] rust_binder: 125: no such ref 3 [ 36.973066][ T1137] rust_binder: inc_ref_done called when no active inc_refs [ 36.973109][ T1116] rust_binder: 125: no such ref 3 [ 36.985772][ T1116] rust_binder: inc_ref_done called when no active inc_refs [ 37.138236][ T36] audit: type=1400 audit(1754592717.249:319): avc: denied { remount } for pid=1160 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.198855][ T1165] binder: Unknown parameter 'statsܒl轀' [ 37.285667][ T1174] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 37.294180][ T1174] overlayfs: missing 'lowerdir' [ 37.325832][ T36] audit: type=1400 audit(1754592717.439:320): avc: denied { mount } for pid=1175 comm="syz.3.267" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.347921][ T36] audit: type=1400 audit(1754592717.439:321): avc: denied { unmount } for pid=1175 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.426714][ T528] usbhid 3-1:1.0: can't add hid device: -71 [ 37.436007][ T528] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 37.445427][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 37.455993][ T528] usb 3-1: USB disconnect, device number 7 [ 37.484188][ T36] audit: type=1400 audit(1754592717.589:322): avc: denied { create } for pid=1185 comm="syz.3.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 37.510906][ T36] audit: type=1400 audit(1754592717.619:323): avc: denied { ioctl } for pid=1189 comm="syz.3.272" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 37.565238][ T36] audit: type=1326 audit(1754592717.669:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1194 comm="syz.3.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e258ebe9 code=0x7ffc0000 [ 37.599996][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.612104][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 37.622028][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.633504][ T9] usb 1-1: config 0 descriptor?? [ 38.043799][ T9] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.0003/input/input6 [ 38.072784][ T9] uclogic 0003:28BD:1903.0003: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 38.267340][ T1261] af_packet: tpacket_rcv: packet too big, clamped from 59510 to 3952. macoff=96 [ 38.305550][ T335] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 38.463847][ T335] usb 3-1: not running at top speed; connect to a high speed hub [ 38.472536][ T335] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 38.482174][ T335] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 38.492560][ T335] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.503234][ T335] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 38.512981][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.521269][ T335] usb 3-1: Product: ᦤ伮 [ 38.525982][ T335] usb 3-1: Manufacturer: А [ 38.530696][ T335] usb 3-1: SerialNumber: ゆ쩛洊쉩깶职塮紏ὡ逍翠䳮亲黓姚纏砟绨⿨ɗ뼃㠙ࡿ铒ｆ彞↘㋨擱꙰燽ﷱᄽ蝋Ꚁ煉聵鐠聾ਠ䱣觤ถ蠲춬蛎颼难迺ꃹ㌇偟厪御햅睩擊ꞃ䚂䄬૕뻓塞෦㰪㶽ב찑罃䛙籷ɱ橀䂨ꛬ㸙砱碀岅漢䄍焧謦↦ᅇ豔헀蚗ꉗ떽ꇿ䅙⢈嚐흧쮧䯺㟧ꙟ꯼ [ 38.766806][ T1256] raw_sendmsg: syz.2.294 forgot to set AF_INET. Fix it! [ 38.778316][ T335] usb 3-1: 0:2 : does not exist [ 38.784981][ T335] usb 3-1: USB disconnect, device number 8 [ 38.950635][ T1280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 39.295937][ T1291] netlink: 76 bytes leftover after parsing attributes in process `syz.2.304'. [ 39.358429][ T1297] fuse: Bad value for 'group_id' [ 39.363428][ T1297] fuse: Bad value for 'group_id' [ 39.615418][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 39.775422][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 39.781717][ T9] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.796105][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 39.804795][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.40 [ 39.814336][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.828688][ T9] usb 3-1: Product: syz [ 39.836193][ T9] usb 3-1: Manufacturer: ѕ [ 39.845559][ T9] usb 3-1: SerialNumber: syz [ 40.056459][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 40.062516][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 40.073364][ T9] usb 3-1: USB disconnect, device number 9 [ 40.209518][ T528] usb 1-1: USB disconnect, device number 6 [ 40.282971][ T1317] rust_binder: 1316 RLIMIT_NICE not set [ 40.283115][ T1317] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 40.301156][ T9] rust_binder: 1315: removing orphan mapping 0:4120 [ 40.368925][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.413003][ T1340] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 40.420330][ T1343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.317'. [ 40.435896][ T1343] netlink: 5 bytes leftover after parsing attributes in process `syz.0.317'. [ 40.462401][ T1341] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 40.462434][ T1341] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 40.584732][ T1350] tipc: Started in network mode [ 40.589841][ T1350] tipc: Node identity facd0e3be937, cluster identity 4711 [ 40.597650][ T1350] tipc: Enabled bearer , priority 0 [ 40.606181][ T1350] syzkaller0: MTU too low for tipc bearer [ 40.612158][ T1350] tipc: Disabling bearer [ 40.680604][ T1351] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false [ 40.680636][ T1351] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 40.689275][ T1351] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:187 [ 41.121152][ T1363] /dev/rnullb0: Can't lookup blockdev [ 41.361487][ T1376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 41.401291][ T1379] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.417744][ T1379] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.428533][ T1379] bridge0: entered promiscuous mode [ 41.433921][ T1379] bridge0: entered allmulticast mode [ 41.519008][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 41.519027][ T36] audit: type=1400 audit(1754592721.629:367): avc: denied { mounton } for pid=1385 comm="syz.2.334" path="/67/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 41.675459][ T407] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.755440][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 41.805466][ T407] usb 4-1: device descriptor read/64, error -71 [ 41.885445][ T9] usb 3-1: device descriptor read/64, error -71 [ 42.031237][ T36] audit: type=1400 audit(1754592722.139:368): avc: denied { bind } for pid=1397 comm="syz.1.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 42.051430][ T407] usb 4-1: device descriptor read/64, error -71 [ 42.125461][ T9] usb 3-1: device descriptor read/64, error -71 [ 42.267672][ T36] audit: type=1400 audit(1754592722.379:369): avc: denied { accept } for pid=1413 comm="syz.1.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.292334][ T1416] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 42.295451][ T407] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.301947][ T1417] 9pnet_fd: Insufficient options for proto=fd [ 42.315209][ T36] audit: type=1400 audit(1754592722.419:370): avc: denied { ioctl } for pid=1415 comm="syz.1.345" path="socket:[9953]" dev="sockfs" ino=9953 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.365419][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 42.415540][ T1324] Bluetooth: hci0: command 0x1003 tx timeout [ 42.421394][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.427941][ T1323] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 42.438039][ T407] usb 4-1: device descriptor read/64, error -71 [ 42.495541][ T9] usb 3-1: device descriptor read/64, error -71 [ 42.685508][ T407] usb 4-1: device descriptor read/64, error -71 [ 42.735493][ T9] usb 3-1: device descriptor read/64, error -71 [ 42.795554][ T407] usb usb4-port1: attempt power cycle [ 42.845552][ T9] usb usb3-port1: attempt power cycle [ 43.028261][ T1447] tmpfs: Bad value for 'size' [ 43.135619][ T407] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 43.158410][ T407] usb 4-1: device descriptor read/8, error -71 [ 43.185450][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 43.207361][ T9] usb 3-1: device descriptor read/8, error -71 [ 43.231899][ T1454] netlink: 165 bytes leftover after parsing attributes in process `syz.0.359'. [ 43.291139][ T407] usb 4-1: device descriptor read/8, error -71 [ 43.336498][ T9] usb 3-1: device descriptor read/8, error -71 [ 43.355792][ T1462] syz.0.361 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.479361][ T1476] rust_binder: Write failure EFAULT in pid:241 [ 43.482955][ T1476] netlink: 'syz.0.366': attribute type 58 has an invalid length. [ 43.510299][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.510327][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.515687][ T1483] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 43.517285][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.531511][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.538046][ T1483] rust_binder: Write failure EINVAL in pid:244 [ 43.538190][ T407] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 43.545202][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.551596][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.559201][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.566763][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.573036][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.579645][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.586042][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 43.594498][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.600866][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.608794][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.616165][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.621776][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.628033][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.636171][ T407] usb 4-1: device descriptor read/8, error -71 [ 43.643403][ T9] usb 3-1: device descriptor read/8, error -71 [ 43.649580][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.659737][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.661723][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.667907][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.676119][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.682916][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.689149][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.695468][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.703672][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.710354][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.716706][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.723055][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.731166][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.737473][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.744174][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.750564][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.758638][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.765187][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.771586][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.778210][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.786188][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.792585][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.799117][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.805542][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.813568][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.819862][ T9] usb 3-1: device descriptor read/8, error -71 [ 43.826401][ T407] usb 4-1: device descriptor read/8, error -71 [ 43.833242][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.839478][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.845715][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.853679][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.860246][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.866669][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.873243][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.881267][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.887857][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.894425][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.901113][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.909018][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.915542][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.921994][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.928485][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.936521][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.943082][ T9] usb usb3-port1: unable to enumerate USB device [ 43.949554][ T1481] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 43.957961][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.962422][ T407] usb usb4-port1: unable to enumerate USB device [ 43.969027][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.983535][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 43.990433][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 43.998513][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.005009][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.013058][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.019620][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.027677][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.034274][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.042312][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.048827][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.056967][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.063463][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.071501][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.078114][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.086255][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.092763][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.100890][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.107464][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.115613][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.122216][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.130254][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.136792][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.145016][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.151587][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.159699][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.166350][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.174560][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.181169][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.189340][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.195880][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.203894][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.210619][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.218816][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.225308][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.233345][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.239870][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.247919][ T1482] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 44.254427][ T1482] rust_binder: Read failure Err(EFAULT) in pid:244 [ 44.277345][ T1486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 44.283972][ T1486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:248 [ 44.367620][ T1490] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 44.377911][ T36] audit: type=1400 audit(1754592724.489:371): avc: denied { bind } for pid=1489 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.378468][ T1490] rust_binder: Error while translating object. [ 44.404037][ T1490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 44.410327][ T1490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:250 [ 44.571722][ T1505] rust_binder: 205: no such ref 2 [ 44.586161][ T1505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 44.596168][ T36] audit: type=1400 audit(1754592724.709:372): avc: denied { read } for pid=1506 comm="syz.2.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.690450][ T36] audit: type=1326 audit(1754592724.799:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee238ebe9 code=0x7ffc0000 [ 44.714115][ T36] audit: type=1326 audit(1754592724.799:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee238ebe9 code=0x7ffc0000 [ 44.737688][ T36] audit: type=1326 audit(1754592724.799:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8ee238ebe9 code=0x7ffc0000 [ 44.761092][ T36] audit: type=1326 audit(1754592724.799:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1523 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee238ebe9 code=0x7ffc0000 [ 45.207226][ T1535] capability: warning: `syz.2.386' uses 32-bit capabilities (legacy support in use) [ 45.478610][ T1563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=1563 comm=syz.1.397 [ 45.845997][ T1578] netlink: 165 bytes leftover after parsing attributes in process `syz.0.403'. [ 45.857607][ T1606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 45.937428][ T1614] 9pnet_fd: Insufficient options for proto=fd [ 46.260484][ T1626] netlink: 6 bytes leftover after parsing attributes in process `syz.1.418'. [ 46.266555][ T1627] netlink: 6 bytes leftover after parsing attributes in process `syz.1.418'. [ 46.409540][ T9] rust_binder: 1628: removing orphan mapping 0:24 [ 46.735353][ T1672] rust_binder: Error while translating object. [ 46.735435][ T1672] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 46.747173][ T1672] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:220 [ 46.850495][ T1677] fuse: Unknown parameter '' [ 46.906048][ T1674] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 46.906082][ T1674] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:276 [ 46.932951][ T1687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226 [ 47.734590][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 47.734613][ T36] audit: type=1400 audit(1754592727.839:384): avc: denied { read } for pid=1700 comm="syz.0.441" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.772970][ T1701] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 47.773003][ T1701] rust_binder: Read failure Err(EFAULT) in pid:290 [ 47.781463][ T1701] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 47.796688][ T1701] rust_binder: Write failure EINVAL in pid:290 [ 47.811423][ T36] audit: type=1400 audit(1754592727.839:385): avc: denied { open } for pid=1700 comm="syz.0.441" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.844111][ T36] audit: type=1400 audit(1754592727.839:386): avc: denied { ioctl } for pid=1700 comm="syz.0.441" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.921255][ T1730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 48.004224][ T36] audit: type=1400 audit(1754592728.109:387): avc: denied { accept } for pid=1745 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 48.050877][ T36] audit: type=1400 audit(1754592728.159:388): avc: denied { getopt } for pid=1751 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.071040][ T1752] 9pnet_fd: Insufficient options for proto=fd [ 48.090115][ T36] audit: type=1400 audit(1754592728.199:389): avc: denied { map } for pid=1753 comm="syz.2.459" path="socket:[10803]" dev="sockfs" ino=10803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.117907][ T36] audit: type=1400 audit(1754592728.199:390): avc: denied { read } for pid=1753 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.307939][ T1761] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 48.325866][ T1761] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 48.615427][ T407] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 48.752559][ T36] audit: type=1326 audit(1754592728.859:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9db38ebe9 code=0x7fc00000 [ 48.785423][ T407] usb 4-1: Using ep0 maxpacket: 8 [ 48.793295][ T36] audit: type=1400 audit(1754592728.899:392): avc: denied { sqpoll } for pid=1763 comm="syz.3.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 48.814585][ T407] usb 4-1: unable to get BOS descriptor or descriptor too short [ 48.826276][ T407] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 48.837558][ T407] usb 4-1: can't read configurations, error -71 [ 48.959309][ T1775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 48.998270][ T1779] 9pnet_fd: Insufficient options for proto=fd [ 49.055441][ T418] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 49.207948][ T418] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.217273][ T418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.225659][ T418] usb 1-1: Product: syz [ 49.229920][ T418] usb 1-1: Manufacturer: syz [ 49.234625][ T418] usb 1-1: SerialNumber: syz [ 49.363958][ T1796] can0: slcan on ptm0. [ 49.665508][ T407] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 49.815420][ T407] usb 4-1: Invalid ep0 maxpacket: 9 [ 49.820765][ T407] usb usb4-port1: attempt power cycle [ 49.884271][ T1819] overlayfs: failed to clone upperpath [ 49.898915][ T1821] overlayfs: failed to clone upperpath [ 50.012354][ T1836] overlayfs: failed to clone upperpath [ 50.165499][ T407] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 50.185832][ T407] usb 4-1: Invalid ep0 maxpacket: 9 [ 50.315435][ T407] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 50.336010][ T407] usb 4-1: Invalid ep0 maxpacket: 9 [ 50.341361][ T407] usb usb4-port1: unable to enumerate USB device [ 50.572195][ T36] audit: type=1400 audit(1754592730.679:393): avc: denied { create } for pid=1849 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.363464][ T1868] fuse: Unknown parameter '0x0000000000000003' [ 51.380908][ T1870] TCP: TCP_TX_DELAY enabled [ 51.421782][ T1880] overlayfs: failed to resolve './file1': -2 [ 51.465108][ T1894] overlayfs: failed to clone upperpath [ 51.777006][ T407] usb 1-1: USB disconnect, device number 7 [ 52.032274][ T1916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.509'. [ 52.185063][ T1921] 9pnet_fd: Insufficient options for proto=fd [ 52.407160][ T1796] can0 (unregistered): slcan off ptm0. [ 52.427323][ T1941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:258 [ 52.427764][ T1941] rust_binder: validate_parent_fixup: new_min_offset=549755813906, sg_entry.length=0 [ 52.438091][ T1941] rust_binder: Error while translating object. [ 52.447788][ T1941] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 52.453982][ T1941] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 52.533200][ T1958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.550815][ T1958] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 52.557476][ T1958] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 52.563916][ T1958] rust_binder: Read failure Err(EFAULT) in pid:267 [ 52.572432][ T1958] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:267 [ 52.765783][ T1993] netlink: 312 bytes leftover after parsing attributes in process `syz.0.524'. [ 52.915479][ T407] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 53.045461][ T407] usb 4-1: device descriptor read/64, error -71 [ 53.090470][ T2016] overlayfs: failed to clone upperpath [ 53.285525][ T407] usb 4-1: device descriptor read/64, error -71 [ 53.313219][ T2022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 53.323322][ T2022] 9pnet_fd: Insufficient options for proto=fd [ 53.350725][ T2026] netlink: 'syz.0.539': attribute type 16 has an invalid length. [ 53.350725][ T2027] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.539'. [ 53.350746][ T2026] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.539'. [ 53.525431][ T407] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 53.655445][ T407] usb 4-1: device descriptor read/64, error -71 [ 53.709871][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 53.709886][ T36] audit: type=1400 audit(1754592733.819:398): avc: denied { connect } for pid=2036 comm="syz.2.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.711159][ T2037] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.543'. [ 53.895425][ T407] usb 4-1: device descriptor read/64, error -71 [ 53.904676][ T2060] overlayfs: failed to clone upperpath [ 53.930830][ T36] audit: type=1400 audit(1754592734.039:399): avc: denied { create } for pid=2063 comm="syz.2.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 53.951107][ T36] audit: type=1400 audit(1754592734.039:400): avc: denied { write } for pid=2063 comm="syz.2.553" path="socket:[11125]" dev="sockfs" ino=11125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 53.979155][ T36] audit: type=1326 audit(1754592734.089:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2061 comm="syz.1.552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1b7d8ebe9 code=0x0 [ 54.005571][ T407] usb usb4-port1: attempt power cycle [ 54.029625][ T2068] cgroup: fork rejected by pids controller in /syz2 [ 54.345496][ T407] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 54.366533][ T407] usb 4-1: device descriptor read/8, error -71 [ 54.496451][ T407] usb 4-1: device descriptor read/8, error -71 [ 54.735473][ T407] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 54.766465][ T407] usb 4-1: device descriptor read/8, error -71 [ 54.896774][ T407] usb 4-1: device descriptor read/8, error -71 [ 55.005598][ T407] usb usb4-port1: unable to enumerate USB device [ 62.242772][ T2113] overlayfs: failed to clone upperpath [ 62.346425][ T36] audit: type=1326 audit(1754592742.459:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2124 comm="syz.0.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9db38ebe9 code=0x0 [ 62.539837][ T36] audit: type=1400 audit(1754592742.649:403): avc: denied { getopt } for pid=2135 comm="syz.2.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.587618][ T36] audit: type=1400 audit(1754592742.699:404): avc: denied { ioctl } for pid=2144 comm="syz.2.569" path="socket:[12123]" dev="sockfs" ino=12123 ioctlcmd=0x941f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.801977][ T2158] /dev/rnullb0: Can't lookup blockdev [ 62.847086][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.847117][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.860687][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.860713][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.867624][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.874149][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.882412][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.887738][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.894294][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.901262][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.908011][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.914548][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.921512][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.927968][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.939241][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.943302][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 62.957686][ T2155] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 63.199353][ T2177] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=2177 comm=syz.2.577 [ 63.235416][ T528] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 63.405414][ T528] usb 4-1: Using ep0 maxpacket: 8 [ 63.413011][ T528] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 63.424590][ T528] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 63.434835][ T528] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 63.448787][ T528] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.457997][ T528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.466212][ T528] usb 4-1: Product: 㰊 [ 63.470999][ T528] usb 4-1: Manufacturer: 鰰≠쥈川ꕎ첼Ι䫢戗禕虮楌幧ᵭ绊㷢慌ힺጎꭴ撟骬矑썌꽲涹ᘣ毟慠ঘ澼﹬⯜꘦㘄ᵨ茴ꈥ눟㦛އⳚ獫瘳☕⫧鏛⻐烧췞Ȅ왷畦Ђ唝囪↓髼뒕왇嘅紝뉿㘋덙ṕ圾ᏸ䙢먬찈怾넍칷՘ڣ않頋舉⥜커隞腷巰몘ᆏ옃㨕迂૾좪뜑쫢쵍ᣑ㹖᏿䱒 [ 63.504450][ T528] usb 4-1: SerialNumber: syz [ 63.921122][ T528] cdc_ncm 4-1:1.0: bind() failure [ 63.927007][ T528] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 63.933888][ T528] cdc_ncm 4-1:1.1: bind() failure [ 63.945310][ T528] usb 4-1: USB disconnect, device number 19 [ 64.063825][ T36] audit: type=1326 audit(1754592744.169:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2198 comm="syz.2.584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee238ebe9 code=0x0 [ 64.514924][ T36] audit: type=1326 audit(1754592744.619:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2204 comm="syz.3.587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e258ebe9 code=0x0 [ 65.132539][ T2239] overlayfs: failed to clone lowerpath [ 65.139231][ T2240] overlayfs: failed to clone lowerpath [ 65.172354][ T36] audit: type=1400 audit(1754592745.279:407): avc: denied { setopt } for pid=2249 comm="syz.0.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 65.196338][ T36] audit: type=1400 audit(1754592745.309:408): avc: denied { setattr } for pid=2249 comm="syz.0.600" name="PPTP" dev="sockfs" ino=12354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.228859][ T2252] netlink: 'syz.0.601': attribute type 2 has an invalid length. [ 66.038497][ T2286] rust_binder: Error while translating object. [ 66.038545][ T2286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 66.045085][ T2286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:296 [ 66.189662][ T2319] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 66.211797][ T2319] overlayfs: failed to clone upperpath [ 66.222307][ T2321] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.222467][ T2321] rust_binder: inc_ref_done called when no active inc_refs [ 66.229064][ T2321] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:304 [ 66.284503][ T36] audit: type=1400 audit(1754592746.390:409): avc: denied { accept } for pid=2324 comm="syz.3.621" path="socket:[13518]" dev="sockfs" ino=13518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.326599][ T2327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.348361][ T2327] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 66.355422][ T2327] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:310 [ 66.675454][ T335] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 66.826545][ T36] audit: type=1400 audit(1754592746.940:410): avc: denied { mount } for pid=2363 comm="syz.2.633" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.849369][ T36] audit: type=1400 audit(1754592746.940:411): avc: denied { search } for pid=2363 comm="syz.2.633" name="/" dev="configfs" ino=1076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.850686][ T335] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 66.880049][ T335] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 66.891746][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.902636][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.913795][ T335] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 66.926840][ T335] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 66.936176][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.944907][ T335] usb 4-1: config 0 descriptor?? [ 66.955713][ T2333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.371125][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.379219][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.387100][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.394570][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.401997][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.409424][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.417016][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.424496][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.431934][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.439361][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.446787][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.454188][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.461887][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.469310][ T335] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 67.476887][ T335] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 67.488995][ T335] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 67.687260][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 67.687275][ T36] audit: type=1400 audit(1754592747.800:414): avc: denied { map } for pid=2332 comm="syz.3.625" path="socket:[13537]" dev="sockfs" ino=13537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 68.450602][ T36] audit: type=1400 audit(1754592748.560:415): avc: denied { getopt } for pid=2391 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.471740][ T36] audit: type=1400 audit(1754592748.580:416): avc: denied { write } for pid=2391 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.627158][ T2407] overlayfs: failed to clone upperpath [ 68.649697][ T36] audit: type=1400 audit(1754592748.760:417): avc: denied { create } for pid=2409 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 68.968673][ T36] audit: type=1400 audit(1754592749.080:418): avc: denied { execute } for pid=2413 comm="syz.1.652" path="/dev/rnullb0" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.056338][ T36] audit: type=1400 audit(1754592749.170:419): avc: denied { mounton } for pid=2427 comm="syz.0.658" path="/144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.100403][ T36] audit: type=1400 audit(1754592749.170:420): avc: denied { getopt } for pid=2438 comm="syz.1.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.238401][ T2467] incfs: ino conflict with backing FS 1 [ 69.268687][ T36] audit: type=1400 audit(1754592749.380:421): avc: denied { create } for pid=2462 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 69.305658][ T2475] netlink: 188 bytes leftover after parsing attributes in process `syz.3.672'. [ 69.350032][ T2484] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 69.350396][ T2484] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 69.357028][ T36] audit: type=1400 audit(1754592749.460:422): avc: denied { accept } for pid=2483 comm="syz.0.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 69.418736][ T2491] 9pnet_fd: Insufficient options for proto=fd [ 69.482092][ T9] usb 4-1: USB disconnect, device number 20 [ 69.539659][ T36] audit: type=1400 audit(1754592749.650:423): avc: denied { write } for pid=2498 comm="syz.3.682" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 69.874874][ T2510] netlink: 68 bytes leftover after parsing attributes in process `syz.1.686'. [ 69.875439][ T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 70.048472][ T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 70.065412][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.075856][ T9] usb 4-1: config 0 descriptor?? [ 70.221640][ T2572] overlayfs: failed to resolve './file0': -2 [ 70.566166][ T2580] netlink: 'syz.1.710': attribute type 4 has an invalid length. [ 70.573955][ T2580] netlink: 'syz.1.710': attribute type 5 has an invalid length. [ 70.581686][ T2580] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.710'. [ 71.106127][ T2606] 9pnet_fd: Insufficient options for proto=fd [ 71.151943][ T2613] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 71.163421][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 71.172515][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 71.484773][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 71.505446][ T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 71.535492][ T9] asix 4-1:0.0: probe with driver asix failed with error -71 [ 71.554266][ T9] usb 4-1: USB disconnect, device number 21 [ 72.008906][ T2664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.012284][ T2664] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.047843][ T2671] fuse: Bad value for 'fd' [ 72.174552][ T2691] sit0: entered promiscuous mode [ 72.182137][ T2691] netlink: 'syz.2.749': attribute type 1 has an invalid length. [ 72.190191][ T2691] netlink: 1 bytes leftover after parsing attributes in process `syz.2.749'. [ 72.845161][ T2760] incfs: ino conflict with backing FS 1 [ 72.867246][ T2760] incfs: ino conflict with backing FS 4 [ 72.872905][ T2760] incfs: ino conflict with backing FS 2 [ 72.920420][ T2769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.930213][ T2769] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 72.941563][ T2769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:365 [ 73.019054][ T2790] mmap: syz.3.781 (2790) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 73.076891][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 73.076914][ T36] audit: type=1400 audit(1754592753.190:434): avc: denied { execute_no_trans } for pid=2786 comm="syz.2.780" path="/230/file0" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.177265][ T36] audit: type=1400 audit(1754592753.280:435): avc: denied { connect } for pid=2804 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.376946][ T2823] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 73.378073][ T2821] rust_binder: Error while translating object. [ 73.384550][ T2821] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 73.391177][ T2821] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:383 [ 73.423919][ T2827] incfs: ino conflict with backing FS 1 [ 73.581028][ T36] audit: type=1400 audit(1754592753.690:436): avc: denied { accept } for pid=2843 comm="syz.3.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.753873][ T36] audit: type=1400 audit(1754592753.860:437): avc: denied { create } for pid=2849 comm="syz.1.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.350959][ T2924] netlink: 'syz.0.825': attribute type 11 has an invalid length. [ 74.406919][ T2934] overlayfs: failed to resolve './file0': -2 [ 74.475439][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 74.485903][ T2947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.835'. [ 75.058373][ T36] audit: type=1400 audit(1754592755.170:438): avc: denied { listen } for pid=2975 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.077883][ T36] audit: type=1400 audit(1754592755.180:439): avc: denied { accept } for pid=2975 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.649950][ T2997] netlink: 'syz.2.851': attribute type 4 has an invalid length. [ 75.659131][ T2997] netlink: 'syz.2.851': attribute type 4 has an invalid length. [ 76.255049][ T36] audit: type=1400 audit(1754592756.360:440): avc: denied { create } for pid=3045 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.275034][ T36] audit: type=1400 audit(1754592756.360:441): avc: denied { create } for pid=3045 comm="syz.2.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.354958][ T3066] netlink: 84 bytes leftover after parsing attributes in process `syz.2.874'. [ 76.489134][ T36] audit: type=1400 audit(1754592756.600:442): avc: denied { wake_alarm } for pid=3085 comm="syz.1.882" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.807062][ T36] audit: type=1326 audit(1754592756.920:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3014 comm="syz.3.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e258ebe9 code=0x7fc00000 [ 77.015197][ T3118] netlink: 'syz.2.887': attribute type 58 has an invalid length. [ 77.313471][ T3133] netlink: 72 bytes leftover after parsing attributes in process `syz.1.894'. [ 77.627042][ T3161] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 77.634732][ T3161] netlink: 'syz.3.904': attribute type 5 has an invalid length. [ 77.642689][ T3161] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.904'. [ 78.412718][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 78.412735][ T36] audit: type=1326 audit(1754592758.520:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3175 comm="syz.2.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee238ebe9 code=0x0 [ 79.252071][ T3188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3188 comm=syz.2.914 [ 79.754560][ T3210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 79.786935][ T3219] 9pnet_fd: Insufficient options for proto=fd [ 79.821380][ T3225] netlink: 'syz.3.929': attribute type 28 has an invalid length. [ 80.150491][ T36] audit: type=1400 audit(1754592760.260:447): avc: denied { nlmsg_tty_audit } for pid=3226 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 80.186062][ T3229] overlayfs: failed to clone upperpath [ 80.189023][ T3231] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 80.200870][ T3231] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 80.224235][ T3235] netlink: 312 bytes leftover after parsing attributes in process `syz.2.934'. [ 80.489541][ T3287] overlayfs: failed to clone upperpath [ 81.102454][ T3317] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.110328][ T3317] IPv6: NLM_F_REPLACE set, but no existing node found! [ 81.159903][ T36] audit: type=1400 audit(1754592761.270:448): avc: denied { create } for pid=3322 comm="syz.3.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 81.189185][ T3328] /dev/rnullb0: Can't lookup blockdev [ 81.194847][ T3330] /dev/rnullb0: Can't lookup blockdev [ 81.450663][ T3338] fuse: Bad value for 'fd' [ 81.991355][ T3354] 9pnet: Could not find request transport: rf! [ 82.050782][ T3368] overlayfs: failed to clone upperpath [ 82.136827][ T3395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3395 comm=syz.3.990 [ 82.194143][ T3410] 9pnet_fd: Insufficient options for proto=fd [ 82.209111][ T3410] 9pnet_fd: Insufficient options for proto=fd [ 82.216229][ T3416] 9pnet_fd: Insufficient options for proto=fd [ 82.558133][ T36] audit: type=1326 audit(1754592762.670:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3431 comm="syz.2.1002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee238ebe9 code=0x0 [ 82.641166][ T3439] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 82.658865][ T36] audit: type=1326 audit(1754592762.770:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.2.1006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee238ebe9 code=0x0 [ 82.664952][ T3446] overlayfs: failed to resolve './file0': -2 [ 82.682407][ T36] audit: type=1400 audit(1754592762.770:451): avc: denied { mounton } for pid=3445 comm="syz.1.1007" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 83.297737][ T36] audit: type=1400 audit(1754592763.410:452): avc: denied { setopt } for pid=3452 comm="syz.1.1010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.446315][ T3473] incfs: Options parsing error. -22 [ 83.451596][ T3473] incfs: mount failed -22 [ 83.887828][ T36] audit: type=1400 audit(1754592764.000:453): avc: denied { setopt } for pid=3532 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 85.987241][ T3564] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1051'. [ 86.804760][ T3625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1074'. [ 87.161200][ T3654] overlayfs: failed to resolve './file0': -2 [ 87.174137][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 87.691447][ T3685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1093'. [ 87.770758][ T36] audit: type=1400 audit(1754592767.880:454): avc: denied { nlmsg_read } for pid=3693 comm="syz.2.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.714908][ T3708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 88.725443][ T36] audit: type=1400 audit(1754592768.830:455): avc: denied { create } for pid=3707 comm="syz.2.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 89.762940][ T3734] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 89.772437][ T3734] netlink: 'syz.2.1109': attribute type 4 has an invalid length. [ 89.826052][ T3742] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1113'. [ 89.862609][ T36] audit: type=1400 audit(1754592769.970:456): avc: denied { map } for pid=3749 comm="syz.2.1115" path="socket:[17650]" dev="sockfs" ino=17650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 90.459624][ T36] audit: type=1400 audit(1754592770.570:457): avc: denied { mounton } for pid=3760 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 90.503374][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.510535][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.522539][ T3760] bridge_slave_0: entered allmulticast mode [ 90.528982][ T3760] bridge_slave_0: entered promiscuous mode [ 90.535480][ T3783] netlink: 'syz.2.1120': attribute type 16 has an invalid length. [ 90.544173][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.551269][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.558436][ T3760] bridge_slave_1: entered allmulticast mode [ 90.564592][ T3760] bridge_slave_1: entered promiscuous mode [ 90.570826][ T3783] tipc: Enabling of bearer rejected, failed to enable media [ 90.615101][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.622196][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.629515][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.636575][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.656434][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.663829][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.672743][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.679866][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.689216][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.696300][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.719795][ T3760] veth0_vlan: entered promiscuous mode [ 90.732767][ T3760] veth1_macvtap: entered promiscuous mode [ 90.758473][ T36] audit: type=1400 audit(1754592770.870:458): avc: denied { mounton } for pid=3760 comm="syz-executor" path="/root/syzkaller.bfjfA9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 90.969106][ T3803] overlay: ./file0 is not a directory [ 91.347158][ T3809] tipc: Enabling of bearer rejected, failed to enable media [ 91.370561][ T3812] fuse: Unknown parameter 'cpoqp_id' [ 91.370583][ T3813] fuse: Unknown parameter 'cpoqp_id' [ 91.458853][ T3826] netlink: 'syz.2.1131': attribute type 4 has an invalid length. [ 91.487608][ T3828] batadv_slave_1: entered promiscuous mode [ 91.621895][ T3828] batadv_slave_1: left promiscuous mode [ 93.053920][ T3895] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 93.065750][ T3895] netlink: 'syz.1.1152': attribute type 1 has an invalid length. [ 93.838330][ T3937] SELinux: policydb version 903449274 does not match my version range 15-33 [ 93.841380][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1165'. [ 93.847231][ T3937] SELinux: failed to load policy [ 93.856577][ T3939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1165'. [ 93.878328][ T3941] fuse: Bad value for 'fd' [ 94.245434][ T335] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.387353][ T3965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1174'. [ 94.395488][ T335] usb 5-1: Using ep0 maxpacket: 8 [ 94.402957][ T335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 94.411789][ T335] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 94.420082][ T335] usb 5-1: config 4 has an invalid descriptor of length 32, skipping remainder of the config [ 94.430507][ T335] usb 5-1: config 4 has no interface number 0 [ 94.438020][ T335] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 94.447223][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.455611][ T335] usb 5-1: Product: syz [ 94.460009][ T335] usb 5-1: Manufacturer: syz [ 94.464654][ T335] usb 5-1: SerialNumber: syz [ 94.478169][ T3970] overlayfs: failed to clone upperpath [ 94.674761][ T335] usb 5-1: Found UVC 0.02 device syz (04f2:b746) [ 94.682242][ T335] usb 5-1: No valid video chain found. [ 94.692386][ T335] usb 5-1: USB disconnect, device number 2 [ 95.246750][ T4017] rust_binder: Write failure EFAULT in pid:27 [ 95.543782][ T4053] overlayfs: failed to clone upperpath [ 97.805617][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.812837][ T4128] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.820124][ T4128] bridge_slave_0: entered allmulticast mode [ 97.826527][ T4128] bridge_slave_0: entered promiscuous mode [ 97.833108][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.840379][ T4128] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.847624][ T4128] bridge_slave_1: entered allmulticast mode [ 97.853959][ T4128] bridge_slave_1: entered promiscuous mode [ 97.902260][ T4128] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.909383][ T4128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.916667][ T4128] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.923706][ T4128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.946929][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.954373][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.964622][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.971742][ T3778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.987737][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.995065][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.010441][ T36] audit: type=1400 audit(1754592778.120:459): avc: denied { mounton } for pid=4155 comm="syz.2.1238" path="/368/file0" dev="tmpfs" ino=2066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 98.022278][ T4128] veth0_vlan: entered promiscuous mode [ 98.050149][ T4128] veth1_macvtap: entered promiscuous mode [ 98.111829][ T4167] syzkaller0: entered promiscuous mode [ 98.117624][ T4167] syzkaller0: entered allmulticast mode [ 98.171598][ T4178] netlink: 'syz.5.1246': attribute type 4 has an invalid length. [ 98.179714][ T4178] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1246'. [ 98.202542][ T4182] rust_binder: Write failure EINVAL in pid:9 [ 98.272482][ T36] audit: type=1400 audit(1754592778.380:460): avc: denied { write } for pid=4188 comm="syz.1.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 98.435525][ T335] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 98.588086][ T335] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 98.597276][ T335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.605485][ T335] usb 6-1: Product: syz [ 98.609673][ T335] usb 6-1: Manufacturer: syz [ 98.614275][ T335] usb 6-1: SerialNumber: syz [ 98.619706][ T335] usb 6-1: config 0 descriptor?? [ 99.246955][ T335] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 99.260158][ T335] asix 6-1:0.0: probe with driver asix failed with error -71 [ 99.269879][ T335] usb 6-1: USB disconnect, device number 2 [ 99.396047][ T4210] overlay: ./file1 is not a directory [ 99.402323][ T4210] rust_binder: Write failure EFAULT in pid:54 [ 99.543639][ T4232] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 99.546672][ T4224] overlay: Bad value for 'verity' [ 99.550025][ T4232] rust_binder: Read failure Err(EFAULT) in pid:73 [ 99.558106][ T36] audit: type=1400 audit(1754592779.650:461): avc: denied { mount } for pid=4223 comm="syz.2.1260" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.595955][ T4238] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1263'. [ 99.656487][ T36] audit: type=1400 audit(1754592779.770:462): avc: denied { map } for pid=4240 comm="syz.4.1264" path="socket:[19809]" dev="sockfs" ino=19809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 99.925946][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1273'. [ 100.118982][ T36] audit: type=1400 audit(1754592780.230:463): avc: denied { create } for pid=4281 comm="syz.2.1276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 100.154509][ T36] audit: type=1400 audit(1754592780.260:464): avc: denied { execmem } for pid=4285 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.256878][ T36] audit: type=1400 audit(1754592780.360:465): avc: denied { create } for pid=4305 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.277217][ T36] audit: type=1400 audit(1754592780.360:466): avc: denied { write } for pid=4305 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.299437][ T36] audit: type=1400 audit(1754592780.360:467): avc: denied { nlmsg_write } for pid=4305 comm="syz.2.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.368697][ T36] audit: type=1400 audit(1754592780.480:468): avc: denied { ioctl } for pid=4318 comm="syz.2.1286" path="socket:[19245]" dev="sockfs" ino=19245 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.565464][ T335] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.715442][ T335] usb 5-1: Using ep0 maxpacket: 8 [ 100.722417][ T335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.732999][ T335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.743432][ T335] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.752540][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.760621][ T335] usb 5-1: Product: syz [ 100.764814][ T335] usb 5-1: Manufacturer: 㰁 [ 100.769518][ T335] usb 5-1: SerialNumber: syz [ 100.795887][ T4333] rust_binder: Error while translating object. [ 100.795941][ T4333] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 100.802160][ T4333] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:18 [ 100.979313][ T335] usb 5-1: 0:2 : does not exist [ 100.994908][ T335] usb 5-1: USB disconnect, device number 3 [ 101.003982][ T3984] udevd[3984]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.489358][ T4355] rust_binder: Error while translating object. [ 101.489384][ T4355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.495786][ T4355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:104 [ 101.755090][ T4361] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 101.775726][ T335] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.877030][ T4372] incfs: ino conflict with backing FS 1 [ 101.935733][ T335] usb 5-1: Using ep0 maxpacket: 16 [ 101.942043][ T335] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 101.950546][ T335] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 101.958901][ T335] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.969016][ T335] usb 5-1: config 0 has no interface number 0 [ 101.976381][ T335] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 101.985470][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.993445][ T335] usb 5-1: Product: syz [ 101.998031][ T335] usb 5-1: Manufacturer: syz [ 102.002653][ T335] usb 5-1: SerialNumber: syz [ 102.008332][ T335] usb 5-1: config 0 descriptor?? [ 102.214496][ T335] usb 5-1: Found UVC 0.00 device syz (046c:14e0) [ 102.220899][ T335] usb 5-1: No valid video chain found. [ 102.305438][ T407] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.417332][ T3885] usb 5-1: USB disconnect, device number 4 [ 102.456545][ T407] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 102.468274][ T407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 102.479279][ T407] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 102.489217][ T407] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.502163][ T407] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.511361][ T407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.520122][ T407] usb 6-1: config 0 descriptor?? [ 102.684564][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 102.705205][ T4393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1313'. [ 102.930734][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.950685][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.950727][ T4410] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 102.958609][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.974690][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.982674][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.990351][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 102.997842][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.005572][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.013229][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.020860][ T407] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 103.031929][ T407] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 103.044992][ T407] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 103.213571][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 103.213588][ T36] audit: type=1326 audit(1754592783.320:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4425 comm="syz.4.1323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc23d38ebe9 code=0x0 [ 103.386468][ T31] usb 6-1: USB disconnect, device number 3 [ 103.905678][ T36] audit: type=1400 audit(1754592784.020:472): avc: denied { audit_write } for pid=4447 comm="syz.5.1332" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 104.003524][ T36] audit: type=1400 audit(1754592784.110:473): avc: denied { remove_name } for pid=4456 comm="syz.5.1335" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.035413][ T36] audit: type=1400 audit(1754592784.110:474): avc: denied { unlink } for pid=4456 comm="syz.5.1335" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.044690][ T4459] incfs: ino conflict with backing FS 1 [ 104.066000][ T4459] incfs: ino conflict with backing FS 4 [ 104.071782][ T4459] incfs: ino conflict with backing FS 2 [ 104.181886][ T4485] overlayfs: missing 'lowerdir' [ 104.188332][ T4485] overlayfs: failed to clone lowerpath [ 104.195042][ T4485] overlayfs: failed to clone upperpath [ 104.229561][ T4493] overlayfs: failed to clone upperpath [ 104.284371][ T4505] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1355'. [ 104.297149][ T4505] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1355'. [ 104.385447][ T407] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.546687][ T407] usb 5-1: Using ep0 maxpacket: 32 [ 104.556442][ T407] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.576007][ T407] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.585738][ T407] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.594881][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.621027][ T407] usb 5-1: config 0 descriptor?? [ 104.682337][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 104.694350][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 104.704637][ T4535] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 104.723641][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 104.732793][ T4536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1363'. [ 104.741947][ T4536] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 104.824905][ T36] audit: type=1400 audit(1754592784.930:475): avc: denied { shutdown } for pid=4542 comm="syz.2.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 104.859372][ T3888] usb 5-1: USB disconnect, device number 5 [ 104.958542][ T4565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1373'. [ 105.174356][ T36] audit: type=1400 audit(1754592785.280:476): avc: denied { checkpoint_restore } for pid=4591 comm="syz.2.1383" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.354196][ T36] audit: type=1400 audit(1754592785.460:477): avc: denied { read } for pid=94 comm="acpid" name="event3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 105.378937][ T36] audit: type=1400 audit(1754592785.460:478): avc: denied { open } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=506 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 105.399723][ T4609] incfs: ino conflict with backing FS 1 [ 105.401794][ T36] audit: type=1400 audit(1754592785.460:479): avc: denied { ioctl } for pid=94 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=506 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 105.538076][ T36] audit: type=1400 audit(1754592785.650:480): avc: denied { getopt } for pid=4627 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.561830][ T4628] rust_binder: Error while translating object. [ 105.561880][ T4628] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 105.572057][ T4628] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:100 [ 105.584823][ T4628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.759669][ T4643] incfs: ino conflict with backing FS 1 [ 105.866156][ T3886] rust_binder: 4648: removing orphan mapping 0:4224 [ 105.948032][ T4653] rust_binder: Failed to allocate buffer. len:1104, is_oneway:true [ 105.948290][ T4653] rust_binder: Write failure EFAULT in pid:166 [ 106.497603][ T4676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 106.504510][ T4675] rust_binder: Write failure EINVAL in pid:110 [ 106.508761][ T4676] rust_binder: Write failure EINVAL in pid:110 [ 106.558962][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1412'. [ 106.575937][ T4686] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 106.575964][ T4686] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:117 [ 106.604037][ T4688] __vm_enough_memory: pid: 4688, comm: syz.5.1413, bytes: 18014402804453376 not enough memory for the allocation [ 106.733962][ T4701] cgroup: fork rejected by pids controller in /syz5 [ 107.234042][ T4779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.234323][ T4779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 107.241514][ T4779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:173 [ 107.289351][ T4783] incfs: ino conflict with backing FS 1 [ 107.319940][ T3886] rust_binder: 0: removing orphan mapping 0:24 [ 107.397046][ T4790] incfs: ino conflict with backing FS 1 [ 107.410578][ T4790] incfs: ino conflict with backing FS 4 [ 107.416724][ T4790] incfs: ino conflict with backing FS 2 [ 107.576034][ T4804] incfs: ino conflict with backing FS 1 [ 107.842146][ T4814] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1437'. [ 108.123966][ T4830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1442'. [ 108.133178][ T4829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1442'. [ 108.261123][ T36] audit: type=1400 audit(1754592788.370:481): avc: denied { setopt } for pid=4839 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 108.524648][ T4893] overlayfs: failed to clone upperpath [ 108.786465][ T4919] /dev/rnullb0: Can't lookup blockdev [ 108.922874][ T4938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4938 comm=syz.1.1480 [ 108.981658][ T4950] /dev/rnullb0: Can't lookup blockdev [ 109.105433][ T407] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 109.187531][ T3778] tipc: Subscription rejected, illegal request [ 109.266627][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.277971][ T407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.288177][ T407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.301659][ T407] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.310994][ T407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.320349][ T407] usb 5-1: config 0 descriptor?? [ 109.449050][ T36] audit: type=1400 audit(1754592789.560:482): avc: denied { setattr } for pid=4974 comm="syz.5.1495" name="NETLINK" dev="sockfs" ino=22499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.483530][ T4977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 109.493463][ T4977] netlink: 'syz.5.1496': attribute type 58 has an invalid length. [ 109.501851][ T4977] bridge0: port 3(veth0_to_bridge) entered blocking state [ 109.509198][ T4977] bridge0: port 3(veth0_to_bridge) entered disabled state [ 109.516516][ T4977] veth0_to_bridge: entered allmulticast mode [ 109.522882][ T4977] veth0_to_bridge: entered promiscuous mode [ 109.529064][ T4977] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 109.541702][ T4977] bridge0: port 3(veth0_to_bridge) entered blocking state [ 109.548894][ T4977] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 109.556550][ T4979] netlink: 'syz.1.1497': attribute type 12 has an invalid length. [ 109.731775][ T407] usbhid 5-1:0.0: can't add hid device: -71 [ 109.737925][ T407] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.746690][ T407] usb 5-1: USB disconnect, device number 6 [ 109.795476][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.925475][ T31] usb 6-1: device descriptor read/64, error -71 [ 109.956310][ T36] audit: type=1400 audit(1754592790.070:483): avc: denied { map } for pid=4983 comm="syz.2.1498" path="socket:[22517]" dev="sockfs" ino=22517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.175568][ T31] usb 6-1: device descriptor read/64, error -71 [ 110.267670][ T5008] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1505'. [ 110.299256][ T5008] rust_binder: Write failure EFAULT in pid:198 [ 110.335189][ T5011] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:201 [ 110.425408][ T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 110.595435][ T31] usb 6-1: device descriptor read/64, error -71 [ 110.835471][ T31] usb 6-1: device descriptor read/64, error -71 [ 110.965521][ T31] usb usb6-port1: attempt power cycle [ 111.283233][ T5051] overlayfs: failed to clone lowerpath [ 111.295540][ T5049] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 111.314532][ T36] audit: type=1400 audit(1754593047.422:484): avc: denied { relabelto } for pid=5048 comm="syz.2.1519" name="file0" dev="tmpfs" ino=2588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 111.356618][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.391325][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 111.426406][ T31] usb 6-1: device descriptor read/8, error -71 [ 111.435444][ T36] audit: type=1400 audit(1754593047.422:485): avc: denied { associate } for pid=5048 comm="syz.2.1519" name="file0" dev="tmpfs" ino=2588 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 111.530484][ T5059] tmpfs: Unknown parameter 'hu' [ 111.555036][ T5059] veth1_macvtap: left promiscuous mode [ 111.570422][ T31] usb 6-1: device descriptor read/8, error -71 [ 111.593193][ T5059] veth1_macvtap: entered promiscuous mode [ 111.615883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 111.628146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.640322][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 111.652477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.664519][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 111.676714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.688723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 111.700826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 111.712867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 111.725137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.625411][ C1] net_ratelimit: 71723 callbacks suppressed [ 116.625433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.643484][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 116.655542][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.667849][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.679861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.692150][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 116.704326][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.716421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.728693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 116.740921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 120.215399][ C0] sched: DL replenish lagged too much [ 121.635437][ C1] net_ratelimit: 69139 callbacks suppressed [ 121.635458][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 121.653512][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.665690][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.677738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.689822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 121.701935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.714382][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.726487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 121.738649][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 121.750725][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 122.855931][ T36] audit: type=1400 audit(1754593058.942:486): avc: denied { read } for pid=5073 comm="syz.4.1526" path="socket:[22909]" dev="sockfs" ino=22909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 126.645389][ C1] net_ratelimit: 71005 callbacks suppressed [ 126.645412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.663622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 126.675770][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.687847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.699905][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.712006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 126.724081][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 126.736059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.748085][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.760246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 131.655431][ C1] net_ratelimit: 72490 callbacks suppressed [ 131.655453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.673380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 131.685454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.697704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 131.709779][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.721760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.733840][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 131.745887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 131.757966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 131.770051][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 136.665443][ C1] net_ratelimit: 71573 callbacks suppressed [ 136.665465][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 136.683753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.696003][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 136.708411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.720514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.732608][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.744828][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 136.757087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 136.769183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 136.781443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.675394][ C1] net_ratelimit: 73230 callbacks suppressed [ 141.675415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 141.693510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.705683][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 141.717920][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.729913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.742004][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.754111][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 141.766425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.778693][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 141.790858][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.685430][ C1] net_ratelimit: 73359 callbacks suppressed [ 146.685452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.703560][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 146.715641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.727623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.739624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.751831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.763982][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 146.776069][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 146.788243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 146.800318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 151.695430][ C1] net_ratelimit: 73854 callbacks suppressed [ 151.695452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.713470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 151.725551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.737560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.749549][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.761646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.773793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.785914][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 151.798101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 151.810175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 156.705406][ C1] net_ratelimit: 69975 callbacks suppressed [ 156.705428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 156.723455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.735638][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.747621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.759641][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.771881][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 156.783965][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 156.796031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 156.808206][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 156.820283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.715416][ C1] net_ratelimit: 75202 callbacks suppressed [ 161.715440][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.733350][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 161.745451][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.757525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 161.769669][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 161.781797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 161.794121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.806100][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.818104][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 161.830188][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.725448][ C1] net_ratelimit: 72364 callbacks suppressed [ 166.725472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.743682][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 166.755851][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.767870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.780067][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.792170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.804267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 166.816821][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 166.828919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 166.841280][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 171.735398][ C1] net_ratelimit: 73092 callbacks suppressed [ 171.735420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.753374][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.765454][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.777701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 171.789948][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.802205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.814199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 171.826414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.838380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 171.850401][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 176.745390][ C1] net_ratelimit: 105932 callbacks suppressed [ 176.745411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.763745][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.775800][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.787773][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 176.799861][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.811925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 176.824056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 176.836034][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.848110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 176.860261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 181.755397][ C1] net_ratelimit: 108096 callbacks suppressed [ 181.755419][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.773410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.785493][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.797627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.810038][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.822118][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 181.834183][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 181.846267][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 181.858322][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 181.870414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.765419][ C1] net_ratelimit: 105107 callbacks suppressed [ 186.765441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.783441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.795581][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 186.807829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.819818][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.832074][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 186.844121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.856096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 186.868110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 186.880175][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.775447][ C1] net_ratelimit: 107494 callbacks suppressed [ 191.775468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 191.793528][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.805771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 191.817823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 191.829845][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.841897][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.854094][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 191.866255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.878239][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 191.890324][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.785391][ C1] net_ratelimit: 108452 callbacks suppressed [ 196.785413][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 196.803806][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.815994][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.827982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.840032][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.852097][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 196.864081][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 196.876264][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 196.888333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 196.900494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.795430][ C1] net_ratelimit: 106347 callbacks suppressed [ 201.795452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.813484][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.825495][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.837635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.849624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.861711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 201.873781][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 201.886231][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 201.898379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.910536][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.708994][ T37] INFO: task syz.3.1001:3428 blocked for more than 122 seconds. [ 205.766164][ T37] Not tainted 6.12.38-syzkaller-ge5a17398e40d #0 [ 205.877053][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 205.979285][ T36] audit: type=1400 audit(1754593142.082:487): avc: denied { write } for pid=281 comm="syz-executor" path="pipe:[1324]" dev="pipefs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 206.008442][ T37] task:syz.3.1001 state:D stack:0 pid:3428 tgid:3427 ppid:291 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 206.266018][ T37] Call Trace: [ 206.269353][ T37] [ 206.272291][ T37] __schedule+0x1322/0x1df0 [ 206.400830][ T37] ? __sched_text_start+0x10/0x10 [ 206.405966][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 206.411453][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 206.417333][ T37] schedule+0xc6/0x240 [ 206.421423][ T37] super_lock+0x150/0x300 [ 206.425805][ T37] ? user_get_super+0x350/0x350 [ 206.430674][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 206.436166][ T37] ? __kasan_check_write+0x18/0x20 [ 206.441296][ T37] iterate_supers+0x8a/0x560 [ 206.446031][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 206.451247][ T37] ? security_quotactl+0x3b/0xf0 [ 206.456231][ T37] __se_sys_quotactl+0x308/0x7d0 [ 206.461180][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 206.466266][ T37] ? __kasan_check_write+0x18/0x20 [ 206.471421][ T37] ? do_user_addr_fault+0xbc4/0x1200 [ 206.476751][ T37] ? __kasan_check_read+0x15/0x20 [ 206.481793][ T37] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 206.487914][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 206.492798][ T37] x64_sys_call+0x2818/0x2ee0 [ 206.497535][ T37] do_syscall_64+0x58/0xf0 [ 206.501971][ T37] ? clear_bhb_loop+0x50/0xa0 [ 206.506684][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.512601][ T37] RIP: 0033:0x7f80e258ebe9 [ 206.517062][ T37] RSP: 002b:00007f80e34ab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 206.525509][ T37] RAX: ffffffffffffffda RBX: 00007f80e27b5fa0 RCX: 00007f80e258ebe9 [ 206.533747][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 206.541796][ T37] RBP: 00007f80e2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 206.549804][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.557973][ T37] R13: 00007f80e27b6038 R14: 00007f80e27b5fa0 R15: 00007fffdad38ae8 [ 206.565977][ T37] [ 206.576558][ T37] NMI backtrace for cpu 0 [ 206.576581][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted 6.12.38-syzkaller-ge5a17398e40d #0 cff9d6c8e1f79ff946f02ca62e3ab2973be10fb4 [ 206.576613][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.576625][ T37] Call Trace: [ 206.576631][ T37] [ 206.576640][ T37] __dump_stack+0x21/0x30 [ 206.576668][ T37] dump_stack_lvl+0x10c/0x190 [ 206.576690][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 206.576719][ T37] dump_stack+0x19/0x20 [ 206.576741][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 206.576767][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 206.576788][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 206.576813][ T37] ? sched_show_task+0x379/0x560 [ 206.576835][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 206.576855][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 206.576877][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 206.576898][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 206.576925][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 206.576946][ T37] watchdog+0xd8f/0xed0 [ 206.576968][ T37] ? __cfi_watchdog+0x10/0x10 [ 206.576989][ T37] ? __kasan_check_read+0x15/0x20 [ 206.577013][ T37] ? __kthread_parkme+0x138/0x180 [ 206.577039][ T37] ? schedule+0xc6/0x240 [ 206.577057][ T37] kthread+0x2ca/0x370 [ 206.577074][ T37] ? __cfi_watchdog+0x10/0x10 [ 206.577095][ T37] ? __cfi_kthread+0x10/0x10 [ 206.577112][ T37] ret_from_fork+0x67/0xa0 [ 206.577135][ T37] ? __cfi_kthread+0x10/0x10 [ 206.577152][ T37] ret_from_fork_asm+0x1a/0x30 [ 206.577178][ T37] [ 206.577186][ T37] Sending NMI from CPU 0 to CPUs 1: [ 206.774939][ C1] NMI backtrace for cpu 1 [ 206.774962][ C1] CPU: 1 UID: 0 PID: 5093 Comm: syz-executor Not tainted 6.12.38-syzkaller-ge5a17398e40d #0 cff9d6c8e1f79ff946f02ca62e3ab2973be10fb4 [ 206.774984][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.774994][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5/0x70 [ 206.775018][ C1] Code: e8 10 25 52 00 5b 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc b8 a4 e7 d5 66 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 48 8b 45 08 65 48 8b 0c 25 80 e9 04 00 65 8b 15 ec 1d 7f [ 206.775031][ C1] RSP: 0018:ffffc90000230540 EFLAGS: 00000293 [ 206.775045][ C1] RAX: ffffffff84688527 RBX: ffff88813d4158c0 RCX: 0000000000000100 [ 206.775056][ C1] RDX: ffff888107b6a600 RSI: 00000000000005ee RDI: 0000000000000046 [ 206.775067][ C1] RBP: ffffc90000230570 R08: ffff8881204496a3 R09: 1ffff110240892d4 [ 206.775078][ C1] R10: dffffc0000000000 R11: ffffed10240892d5 R12: dffffc0000000000 [ 206.775089][ C1] R13: 1ffff920000460b8 R14: 00000000000005ee R15: 0000000000000046 [ 206.775100][ C1] FS: 00005555732dd500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 206.775113][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.775123][ C1] CR2: 0000555d6739cb98 CR3: 0000000113ab6000 CR4: 00000000003526b0 [ 206.775137][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.775146][ C1] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 206.775156][ C1] Call Trace: [ 206.775161][ C1] [ 206.775167][ C1] ? is_skb_forwardable+0x13e/0x200 [ 206.775186][ C1] br_dev_queue_push_xmit+0xa1/0x6d0 [ 206.775208][ C1] ? __copy_skb_header+0x453/0x5e0 [ 206.775222][ C1] ? __cfi_br_dev_queue_push_xmit+0x10/0x10 [ 206.775243][ C1] ? __skb_clone+0x47a/0x7a0 [ 206.775257][ C1] __br_forward+0x25c/0x390 [ 206.775277][ C1] br_flood+0x67e/0x730 [ 206.775299][ C1] br_handle_frame_finish+0x12bb/0x1720 [ 206.775313][ C1] ? copy_net_ns+0x513/0xa30 [ 206.775329][ C1] ? create_new_namespaces+0x3b5/0x720 [ 206.775349][ C1] ? __cfi_br_handle_frame_finish+0x10/0x10 [ 206.775369][ C1] br_handle_frame+0x5a6/0xba0 [ 206.775382][ C1] ? __cfi_br_handle_frame+0x10/0x10 [ 206.775395][ C1] __netif_receive_skb_core+0xf48/0x3940 [ 206.775418][ C1] ? ip6_mc_input+0x4f3/0x670 [ 206.775440][ C1] ? ip6_mc_input+0x4f3/0x670 [ 206.775460][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 206.775482][ C1] ? qdisc_run_end+0x120/0x120 [ 206.775504][ C1] ? __cfi_ip6_mc_input+0x10/0x10 [ 206.775527][ C1] ? ip6_rcv_finish+0x344/0x3c0 [ 206.775549][ C1] ? ipv6_rcv+0xed/0x220 [ 206.775570][ C1] ? arch_scale_cpu_capacity+0x1c/0xb0 [ 206.775593][ C1] ? __cfi_ipv6_rcv+0x10/0x10 [ 206.775615][ C1] ? __cfi_ip6_rcv_finish+0x10/0x10 [ 206.775637][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 206.775662][ C1] ? resched_curr+0x113/0x430 [ 206.775688][ C1] process_backlog+0x3e5/0xae0 [ 206.775715][ C1] __napi_poll+0xd0/0x610 [ 206.775739][ C1] net_rx_action+0x584/0xce0 [ 206.775767][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 206.775792][ C1] ? sched_clock+0x44/0x60 [ 206.775813][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 206.775835][ C1] ? try_to_wake_up+0xdfb/0x1b00 [ 206.775853][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 206.775874][ C1] handle_softirqs+0x1ab/0x630 [ 206.775900][ C1] __do_softirq+0xf/0x16 [ 206.775917][ C1] do_softirq+0xa6/0x100 [ 206.775939][ C1] [ 206.775946][ C1] [ 206.775959][ C1] ? __cfi_do_softirq+0x10/0x10 [ 206.775981][ C1] ? _raw_spin_lock_bh+0x90/0x120 [ 206.776006][ C1] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 206.776031][ C1] ? preempt_schedule_thunk+0x1a/0x40 [ 206.776059][ C1] __local_bh_enable_ip+0x74/0x80 [ 206.776082][ C1] _raw_spin_unlock_bh+0x54/0x60 [ 206.776107][ C1] addrconf_ifdown+0x608/0x1940 [ 206.776136][ C1] ? addrconf_cleanup+0x150/0x150 [ 206.776161][ C1] ? __kasan_check_write+0x18/0x20 [ 206.776185][ C1] ? mutex_unlock+0x8b/0x240 [ 206.776204][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 206.776224][ C1] ? macsec_notify+0x103/0x4b0 [ 206.776242][ C1] ? __cfi_mutex_unlock+0x10/0x10 [ 206.776262][ C1] addrconf_notify+0x17a/0xea0 [ 206.776282][ C1] ? __cfi_addrconf_notify+0x10/0x10 [ 206.776301][ C1] notifier_call_chain+0x10b/0x2c0 [ 206.776326][ C1] raw_notifier_call_chain+0x31/0x40 [ 206.776350][ C1] unregister_netdevice_many_notify+0xe32/0x1bd0 [ 206.776378][ C1] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 206.776404][ C1] ? unregister_netdevice_queue+0x1b4/0x380 [ 206.776428][ C1] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 206.776451][ C1] ? unregister_netdevice_queue+0x1b4/0x380 [ 206.776476][ C1] ? __kasan_check_read+0x15/0x20 [ 206.776498][ C1] ? mutex_is_locked+0x1b/0x50 [ 206.776517][ C1] ? nexthop_net_exit_batch_rtnl+0x22d/0x290 [ 206.776539][ C1] ? br_net_exit_batch_rtnl+0x157/0x1a0 [ 206.776562][ C1] unregister_netdevice_many+0x1d/0x30 [ 206.776587][ C1] setup_net+0x5cc/0x990 [ 206.776607][ C1] ? copy_net_ns+0xa30/0xa30 [ 206.776627][ C1] ? down_read_killable+0x79/0xf0 [ 206.776648][ C1] ? __cfi_down_read_killable+0x10/0x10 [ 206.776672][ C1] copy_net_ns+0x513/0xa30 [ 206.776693][ C1] create_new_namespaces+0x3b5/0x720 [ 206.776717][ C1] unshare_nsproxy_namespaces+0x126/0x180 [ 206.776740][ C1] ksys_unshare+0x4fe/0x880 [ 206.776761][ C1] ? __cfi_ksys_unshare+0x10/0x10 [ 206.776782][ C1] ? __kasan_check_read+0x15/0x20 [ 206.776803][ C1] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 206.776823][ C1] __x64_sys_unshare+0x3c/0x50 [ 206.776843][ C1] x64_sys_call+0x2998/0x2ee0 [ 206.776866][ C1] do_syscall_64+0x58/0xf0 [ 206.776891][ C1] ? clear_bhb_loop+0x50/0xa0 [ 206.776913][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 206.776933][ C1] RIP: 0033:0x7fa7cfb903e7 [ 206.776948][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 10 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.776969][ C1] RSP: 002b:00007ffc54fd7778 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 206.776989][ C1] RAX: ffffffffffffffda RBX: 00007fa7cfdb5f40 RCX: 00007fa7cfb903e7 [ 206.777003][ C1] RDX: 0000000000000005 RSI: 00007ffc54fd7640 RDI: 0000000040000000 [ 206.777016][ C1] RBP: 00007fa7cfdb67b8 R08: 00007fa7d08e7d60 R09: 0000000000000000 [ 206.777029][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 206.777041][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 206.777055][ C1] [ 207.412349][ C1] net_ratelimit: 106530 callbacks suppressed [ 207.412366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.430429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 207.442605][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.454841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 207.466978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 207.478976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.490978][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.503212][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 207.515357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 207.527339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.415418][ C1] net_ratelimit: 112110 callbacks suppressed [ 212.415441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.433525][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.445526][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.457610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0) [ 212.470010][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.481996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.494153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 212.506192][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.518253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 212.530255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:5e:8a:a5:d1:f7:a9, vlan:0)