last executing test programs: 11m20.923677472s ago: executing program 32 (id=1669): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x101) close(r0) inotify_init() r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1, 0x34080) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x7, {0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x5, 0x7, 0x19, "30134af64fb79f1716ee1b88de0586bff579e10caef0a143e1a1652421deb36f6ac3976c3ad61cf4a2a699ea627708bdb5637aac4f5e5f37faca0d30f1a08ed3", "52ee7d6b3c0c1fe636fcdf2150345f555afae9335e706a34560b2097282b6ac7c3e8fd7a0ea9e699b7542bfaf310176d2a1d4ce3a8859528e9df822081458d06", "77ea94c209e036ba9a9f0825887e07d74622758d63f3b3034fa9de8304c46dff", [0x469471f, 0x100]}}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) inotify_add_watch(r2, &(0x7f00000004c0)='./file1\x00', 0x400007e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000140)={0x1, 0x3, 0x7, 0x6, 0x1, 0x0, [{0x81, 0x401, 0x3, '\x00', 0x801}]}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000024d564bc3"]) (async) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) (async) clock_gettime(0x0, 0x0) write$evdev(r6, &(0x7f00000003c0)=[{{}, 0x4, 0x9, 0x8}, {{}, 0x12, 0x251, 0x1}], 0x30) (async) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)={0x10400, 0x8, 0x8}, 0x18) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000000300)) 10m33.715588266s ago: executing program 33 (id=2791): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003440)={'tunl0\x00', &(0x7f00000033c0)={'sit0\x00', 0x0, 0x40, 0x8000, 0xf3, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x200, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0) 8m43.079740981s ago: executing program 34 (id=5081): mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ext2\x00', 0x1020000, &(0x7f0000000180)='./binderfs\x00') 8m9.582582298s ago: executing program 35 (id=5574): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 7m11.0574029s ago: executing program 36 (id=6149): r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x1, 0x40000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x2, 0x0, 0x98, &(0x7f0000000280)={0x100000000, 0x1, 0x6}}) socket$packet(0x11, 0x0, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) syz_usb_connect(0x2, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003834a6b2099040d10a2840102030109025200010c2440070904b800018c8c02010900000000000000020924030203030201a60d2408010700bc5affd3dc187508240806050005f9072408020600030924030605030303070905032b3b"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff}, 0x80009}], 0x1, 0x10002, 0x0) read$FUSE(r1, &(0x7f00000042c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002740)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000002840)=0xe8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x0) fstat(r1, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r10, r10, 0x0) stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000400)="5cf5000e405092aee36f795d2c153b264bcafc01d3e22f513b384264f057e602a8228de6866c9c178379dd69a6342496ecbdb7d437c48bbfc622443c0ba888420b4cd4835f299c3eb5c71977417e41e9a2fc2a9f7dd30d9623e8902699e4d0c174260a15f555a01943efea71ee5603e10ad6a14d33f046213ef634210be3494ebe382aba1aea22aa63586e3c648da056bfaeccd55c82645c4f9fda2bab9628b9f64674006bc1f4c7f143812c7d7fff72545000e6e8ddf11ce050bffd496d1f1a7d17d8a40f8bb45fc3cf7e2fd6071e57f76e45aa1e9fe045cb631b2b7248d245bd350f3759f2aa35cf4f613db18983f91d7092d19045e473b2334ffb73ec44571b046fe40a4cfb9fe9a07aa6347d32f6d0ca2c7cc24f2045ab23847aded0e20ebb87878003100a8c944bb51b141006e7f7b5d795815befd0c75ab8bd6d7b6eb9421317795551012e25d304c1994ddd878790121219446aacc12059c368de56bd149357c9e540f9f5e466a1c74a904afa1adfc723ac55c08cec306bbb632018e6a14b2628059ff919eede8f9d0659c79b11c512d9716ec9fef326970ab3b84f1ef0068ff84c0bcf85bd62539bdba1cb6c524380dfcb3a349e4600cf76f66c4ee104e79fee0451751e93e6e24f488d26abde44180aaf3caeb8004c0a670cc74ae56aef115b27ff67bb6cc2cbc304b487f035a78a578118cde7baae73228cd4c79608e7ed4b63689b1c85359bfdf91665a84bcd4c9667c79bae2b988ae8412092689132077ed32a3285161ed8a67c1639395fbaa73cd810e178958318e3cf8b1a5d66474f1ee340646351f70bdb8e49b7383506aee6371ad4326dcdcde554d6663a7c879f5263abf34d1b3b7e85d9a305a28811952aab1592342e27cb911f3092f21ca8c54d8f496c4405c99911ef87b705a4581f5eec915ebf3c321b9b458f9cd2e8e54871020dad7fc50d9ed888f4a1f11b1ba60dcb5aa2f36e4d88ed7fac6340925c5976356c54788e3171beccf94e59b7a534d3df4b73b314c808ed3291dbe4e308ff33f5d1e611116e886ef5ad1e0a9337c46dde8b5cb65b46ee765a2c6e7d36aaa8f51975e0bf2b3cdbf0a18c461ce709cdd62854847b6c4532e46a1931e3bf24715c221b275f7daac760ef5f7889d6d6dd251db36ffde8324a4bee4f5bf76e6ff2002f8346b0c7f7c1c96d528437cdf918e063c8b31696a0f27fc8d2a1d33da4ebb83332b9bdd2e874026287cc3705a80461a284f19e719fb65d56bbb2c0290f92983bb5a1267fe442dfa2261889a7f43e47a97e1a349fbe87068d5e40f918bcd175afeec0839240f4b4e922162363fbf862b66cb96e9f1ed107b6dfb1b68572e48c4ec44f865a0f15d27dc9a67e1f5a7f05cbf6f840a8f9ecd5dfe5e0efa5dece3a72d8646192a4650f47fa2decaaf5e270a2bfcfda38a8793c2744cb0e11232f1179ae111919afe1ca172699c0c1b78a742f4e1427bffbb2d15df06d4a0387f7d1279e7317614e957a7191c40f28d82e2098d0d427ab8812d3283a45e278e7320425856fdcc0b3f64e007540919ff8c77319fd6b005f3a194e9d35e98c1eba447b48fee4394c319eec952d7beda1893b527fcfe0e5565cd0b523f4ef5d690c27d78cd40907bd4945327390f5127bd14c6aa91c2e37aa97c7116abc837ed1f71221870de26b2baa9a1550459676ffc6a2099083202e516026488a4f5d93ab024d5c0ea9bad5aa1ea4aaaabb8139c81a9d90a1e0f97dad25a1350310bbc326e5a80f4f383afe09410bdc5c96ea8547c53cbbccd097a094ad3faa9ee3cc16d2f367e47d4f3e95e7d7800230c836e729b730fa6b1ba28067a19c61767b672b1d1a2dbfe083c6a25831b97fcbab4924f0385ad61c9a5187e06a3cc80c4c75a818270c24f17ee2e69634f707804645d8193d551090823ccb23af2a517b6ef2763c48ede0e9f9bd963d3a2bbadae451d195ec906dd0cc79507e7e160906c7103b1112e55d6ea72e5e901dbdc0159b7ec5344632448bfbd1f13a07943482ce8863826dd27beeefccf62e6b613564eff45177e9d776ea3b24790c1e2962e7f219d31aea7ed63c4941f216c56288d05787623caf63f0e000472c74607bfb665d7cab495ab3d84642077861ef05435b1b9a63b8642d518d696dd9bd9048993a9d8f0241183aeca98c542ae1886228cdb5072f11cb551d5137bedeb4b8de37e1e17fbb590e437fbfbba1fc907c741a2a1df987859d20f9b6d8c36e9c45069864ac9aee03bf73cdae81fce42c457983c23a39209efa97aee3c1591b8e10701e4c4c5456fc494ecebfa19c557a05794177142fb32dc6bc1d2efd207c91f00c88aa472f55588cbdb80b43e4db9f14f9879acad739133f337d2e43cfdae6a3f1e5fb5a7ef7ad664b58c9fad892a5305695a9c260275c49e1eb7859f02b3147b9fe6a4e7b130bbc651f74ce7570abaa0bbf8f62dfba5d553dfea51c2f974fe67b857dbfb5f06e6387efc4e9070475ba93ee8b5b6ff77c95c55cf4747ab11029016f00de9a6b5acb86b55f70d4998457a599dfd1138fc9e422ca6fc9baa68a07d0ed782a49b2325f2764c60c0c68fc586289f3631b48d5f79ee45fb8384f2131b2772ae6e11f6c2eac6f31f0d7cdafa822632e4e31e1b33f7a3f9e452290926cf017678e510b1305df15fe215640f30f12a1e782337e0e2d44baea612103f71766f0bddf404ccd5b869da1f4a079ae4a70d733f46c208eb362d9535ccbc545dbdc06d31073f0601f6325fc1129650fdeab722b403398340377dbda05c6fb41cf81d2039c399c704a29cae535ef2d665c0294e3bc1f11ff9c2936ecee1ff4efc1b31187a09df0cd43b3aba5d37bc0b50ca69021fb85e937a1a812eb96db420c0aee15bd13bff1644e10b34bc16aa81d715f655ff4301255324170f083eae0b8aeb98d8bf8a52e7a48ba5e14b1bcd16ced90a045ff8d8562954f08640e3881c97853c9e76f0e65a288cfe42767319a3f26740d93c54999849a7f3ad89fca945ef8425d00be5173faee2b23ccf26f0318f495bdcd6ebe63d66923314cbc000af9d246f483663d8d8d52ac03758c5db2806b31910db666c6eaee543c7565623cbfb5e3d484cde36fdf0180115b4f41f70abe5e9e410c3011eaf8ce47e7552db7757ffcf7bf80972fe183d2367d765b4100bb11f9e7334f67632c6757c706b2801e72e4addb1312789ebc55347ad1c9be08e8494edc5ed9b13001c0e2ee74ae6263a7f2a2eb9ff3325082f9710dc3288172629f98d71e3b1b3a453a890c3bed9bf0d770cab3da073bcebb51b63f66f4968bc36e49f06bb30384b7475f7b44490bb7e7720e60faf0fbe9e98514f26c13ae3c5c67df2456678bfa68e5c459a11942c4409674ec2d31a4640b4fdeaaad384fec0492212e144d1b571cb89bed8799f90be8e20de81621f0c3fecdea3d5925fc635c5b39579eaf13842b360cbcaedb7fe332e35c77efd6d3f4965d862d4d3212e5e1181123b6af97af5a411e567ddfd364fad6c52c93184417ca0dcc693d9620c68820e37af2ffa55d253dbc989f7a525867abced827801dc2e9c9084c677f61cb8e4918a24833a02b0196a89146960f99e4ef1c5e504e3ad19426bdf317dabd400f191ee21e382736c75dd377d4bf6950f434a33410baac6564101fbffb6953f7f36b5486d3ec07d8f8f23ea45e5ae3573fd5f5ea8e5b81463862ed33f604fe185e78940ae5e4279c92fc70aaceae1fb92a7124f3e348ccda0b1b3086c34a36b423a5f5691c4087d6a67c4062958ef0fea6911e1ad442c763127acd4ca95805e69c89270d759c8385130732f876daee74b72543a96603519c54105d73ed481aa658407722c1885b6d74d03525f8e2900b273e19cf7529aa85da7e0e11c680f7c8f9b8a334ebf6eead3afc5a8969488ff20d7ca34ab8808cf70929b248f551fabe8af9b9843fee6a0b16263f6daea43e16ae63cee685b713a2ac12f1f7d23ea1cef88330298f6139329fdb0d1320cf503d3c06d89f7a4e19aa08fdda4ad215c02462ed1bd783771dd9cdbbd825727c87c5dca04767994b8bc42d2c6c0f6e1d63cca08eb254c3408c82071a5062e15868a50b006333fd1834a995040a34d24f218259c249422fff83121495286c735f3a0e25ee59d071580e42285cbca6572b19b46cef8289ced7c77eaa72f51196b510ed59abe921fd71866d0b27f99e0b24164bdc974a9910f2feba811969ff8c2f0d5a3ccd2da55366ed66bc537be35d47ce959d496d2e1d9081c63e766b95abc08ce0aa06a0ba55dbb9ed7b243ab4af65acec4e47d442f9cb05b82e15e5602475342da2e671a85b12e200699c538da0c189202ec08784961c676de4ca686ed6a6a29ba5beb0c341d37904406c444ba94195d85e2081cb9e20ab3fe8c59579c4256d27d030c64357a13907a2d6073fa5d348160ff542909a39778c5ad6beb2a67db747bbbdec02a3fe1121a8c40e683c9f9878bf29e3816c254efb07697bdef33c9f15b7fcf659fddb65e722345524d6c6562d7a79752cbd7831073466001a003a83598a62d911e54f1dffe197a5ec1694ce6e66edb5cf05240e18697cd1c84d2bdd41bc018a2de2dccc09d6b1a02d49c3e33100323649e5da3c93e3fcb510714e457427bb644171e4f493410bc315edb0a62969d1131656d961ccf4ad1db08f9eda641191f03a464b675ac88c89d2a93e1b8c6e19093230b68057d09fc14c6f31ccb15e4890fcae40a142ecf2dc2eefcd6e9b5349f29bba3081b3009bf6ad943934a355026b394c2a18b4689a0e8bcbbfe3f82089b50531c1ad4f2de244b6e4e4eaf779dddbc848aedc239e4ccd91f0474cafcbece77c63dd30b1fdb6d72f378ddcd57e98c85dd086d057f9e2b44ef3b3610203d2d37ad11bb433a3fa5ac7a15e8b33cec2e00e78483c5f33a1766e38640623e73cb79d5171d1241932fa87447f3ada6fca21b3e739cea31c73b0a4176eae36040544ba2d65eee09ffe1e138c83d1081f5903a8a2f41d65ef9fa30d3b8b03b264a945321938639f05371d59cbfd9e00d453f21187dc466cf4ee4c29d4a6e9b6fb5b2b002c4506e973328b1502b69857599bbe5c991d1c3caa4c821f933ec66afacc76ad8d2f06e0b8578787ee7cad18a1f4034876731efcd83a4fa613412682ea2944640551e346ca4efa3200ffed85df9132111714c116ec8170e5776e0519b7006171e4af1bc1ee07bba43792e3f16e7baf2950dce1711d42028170cd653af60063677d7bc5b81d8e5c787361db3133c9162a1c0a225709ab3a009be9749a2811527b48efd59735f2531decefacc2e1d43e5b9b62927ae9289a3627ddf7f903524c8dd83635d60d9851a4e0b7846533fb5f4195924d1015f423f4d9e3b14c829486c021d3fb52ccefbaa447bfe48d153dba2a8136374537ab2334ee9a6c04ee8a22f83695f4b0e8c5b69a54b2e7a6b786890dddf94edc9a135fd5d8e6e8998a90e4a437d6b10039605cf36ed9b2ed265e0de79282c348ec7c6d753895a517e9b50a5a22d84012aaf5eade44eea53714da638bb06dabacd35320a3701b8c5b9fe8c462c7976b92b5adcddf164420636148fd0fb186f108b3ca36aa72a52d363b61166a5ad190e20c14f097bba470ba3c6139af9295302e522b1a27385659fcbbe9ce48ecc95a503a4e621ee485e0ee7804d99a29241274e402834364389f77aec850a238cc138f31c057d1c303b37691ccb01c13a88d2eb9c1e6445842b987380776305c4ac5f10b6fbbc4526517800e62a2fe095e322ff3425ef2084ee2ccc9ccdb0b9b525b5177313368b42874dccf103d0932053910249969cd0902e8ebabfb40b773ccdaeedbb927ec58aaef07f38d388799543ba09fdc6d987e718c17976b91261ff621c87f09d63973d7967a6adcc6913668453400f71ebf842ea5a1933fdb90d0b6561fde5e69235a0973e6f65e445e80e4d416de37cd611eddae1a2fd8f68b3fb866aa5f3b52252720becf2b3ea98dde78ce691d5cba03d8e1275ae381c63e0175dcfa7c4d5d1b2726dc388eedfae65cade047d2aa33d98de99f98efda76be4a45e5007b9fa7bbd6472a0df25ef2a17f1a3d31d13342c89f293ea977f5332e97d961aabd153a59a63473ec504e32923b7fa1cf9c456f57aec6003f9161deebeedef56721475f4ae2b410c4a00727776e2ecd447911685b45ac22782f1b9e154067db46a8753d4a848d681ce70a3dd649c1dcefe2fead01cf0af7719c794e595a94a707905a81b45763fea1545195125d573b5874a23ec4d3e0dc85048dd5fd262b192dfab69273726cd45d271d4db8891f93f1333e33410942a2fe76db027c3432e40e763b2b3b3bd0cbd4793dc0880d02005226cdb18abbcc37a7853599cb651e8a795e083bfff27e193b35470c76acac21af4e9df1ce36b3817b205350c17ec84096f59f8a4a1dad4d00e0edea27443b4d99cbb24a1961047e656e08c84c730ffd4a45c1cbfd6d0fe47a0ab0a5c6c4c708b3d6d73d73b0ff302fd51f961e5c96cfdb1efe6454dd8eb578446afc070f0052d96aa58bc483812bbe8df1aa604381befe05d0e32c5ef823b444df37b2becd9595088fba968c3e14a0235d3b9a200fb2e85e9ec2ff67e68a06d43f7858b78dc49b4aef4c89033a2fc86d305d3165b9a8b389a80af3ed48bcab9541970702603c3dc763849b765b587f5968d4c184630d6eaa5a2a8cecf94a958caf629bd170d284ebe4d4aaacc7e7623f0b64e07f2ecb7f5cfc0624615247a2844bc7d034aa538a717dc7c02d971fad7b11d8dd2d02cc000eb7c14bd7aa9a78d965b1d1a553de1fcec201a827ccc87dd9d77829e0aae5add41dd871391fd3a9a41896a6c442781aa6ffc5a4de946ac8fcd0efa73ba0c1850133f265998c37bf1ccf06f3cc3cdda18652d8f13e7c27a453ba28464df501ce791160610cad8f1d1c7f92297b81b29032479882559da29aaa780ece8b1f7852aa43e960ca002b65ef55ef7619c1df4f2dcdf571c667261c67b22a6636adf4e6e2aa392f3d13ffd0cf95a7cb5f32fd21c4f103509f0fc0ebc63357d76edea7e5b305ae0928de773f8a963e1e836152ef6c575cfa97e46be60fda08bd30787763de6c992c0dab683cb3d41dc237ba8740229bc0da043dd74b2f5948eefb4ed84d4104f13a2c01f447cac9ca61fcc1f3ff3e42f9cb8e7aa81054dce1e6038a61555bf9fd3c79f2a042bb9960852ce1fd0c7b85a8943e71c758df3de4fbc54fbbd722e2ffb723f8d0a01009479b535c500f22f20229191b0858136d9185bc0cd3d241109cf69e8b7d08913de26d829b8fcd81c32bc2658a13fe26e4cc063878cbf852fe4505923a17ac4b503ed29593d34f29e8b69960fb2f008585734c0de89dfd4e9122d3ff7ce06b8764ba3a6789875f8b6d6ebdb069d18cc17af5eb4d1e3102f2a81e6249c3c405cbfde515a50373af756e9b3a473d7f9a9dc6305e2e354ab18e2f57c3e022ea3f268733c04af513c2522bf59c673d73d56d1105837be06d10e82c8eae22c0e96d8cc6604b4e388b9fb1c59f689585814daf9f8b4fc50a2f9d5a69cfe5c4d80f34bfb778b356d60f4c3a2fa4aa036155e04d2079dfb4f7605a0881aa0ae685134ba4a60d19a618da2d55eaa22c4f42a54cb1e8e6759d1f5c5fc7e43ed9d3b394e2bec43e37d89b2ca19542b9c4c2670956df0967c318674864ea593564e13934b716bc8b9048b19372f818a2249afc02147d3af77a725719d5821c4d4f2698ba4cd08b794089ea8a23502683604f27203325afaa083069570071eccf7a6b4086ee0c54a3706cffae644a8b2b73ffeb5d6f7ed9cc71351e561ef25ecf653a72a36ef08c3c4a1f0d85777f84a01e2a073e52f250ee696d3fdbf56c8c5a33af660d436b14dd65b678023202ec7c2ebee3acafa1e39ecf29f51d3ea560cec8470cc50ce4edbe0fb118fa9cf5b66367c92fbf1e0fc874a92bce39edb9d35cb1556c9e09b46be2b19a3b3782f5c95cae48bed043a5ed9409677f661b314724cf2d438a70167b4ae336911f9ba1c0afcc537bc3e8be9fab42c13af0879a937f32b763a9c5ef3f8f93a41573c3ea93ed73d6a89113f5fbb850df0489b554f7d0c51c6b9c121dc5d64ad6c3673bc78445666b2ff0cdb96110354c5cbdcb34ed1c22eccc2fb271081d2ca3bf36d8c49cae34057e3eadd3d85adce937f800628f91bdae1798a8bfbcab6205096d7f06a8f82f616a7329f464d94a32bd0bd309a157a09b0b72c5b6ac8b56f3f59e6763da490b9c81f3cfbd60002a83e87bf4db214ec5f182e878ad86f943d29ca492ad409a1606c6a762d2154bed44fbc988cc4d794489b46fe6a64288bf9e3f908c19ae6fc3efc8420b1abaee5e91084c20af84777f6f312b5d0a0538e241f21f18e1d1afb954af913a10a2ca0fed662e790471a674a563b0839f37520119d0872bb63e3d83930d43f7e5691e438a05707c45949ed4f9e9f436b902145e69b931dea0f6231f08c1b74efa043b746a33222e20065e1919ff11ae92f899e9d079fd520eedb2df89f5230fbcd8cb3594eb242132f901906e3936556a5e69a38e7caaf01804b32cb9b02b16e3b6361eba1edef09c54f81fc71cb643b46da46235bce15cf98d01a7c7bb3f987561b4bbbf4af60f533255b44c2370ff2460d16c2a314cc58006944eb14ef1675179f82e6128ba97f17ca6d588aa3597ef0f5f6bfbca72490c6d6ca34bc706613795acf6fe7935fc1874e11f2afd0bad20f71fa5d7933b4f0c2bb235621ce0cc40a8d461d85f31c478b099f7c61abb7527ceb17b28e702242f68d86fa46582bf4b14e07ecf53be40fe13f093ef3216f762c71ab97ec2876545a143e693ca2d99234e0c7bddd0d56325c4c651639332cec945e7710589cfc4eecfd3b295dde8d04e3e3b5a23c10097e58e20694233bb124e4c6b6f4b08af0eb5206dd738004d2b5122af48a71732fee7e9cacf9756c349dbb9010de1215aa675e2ba644eb8ea70a5c5a3f1bef288154916b0ee73f76eb0a0928d587bf623baac02675a338ad143d87e3cbba42232ae5511c3426549f7b123fddbfe38cea8c140e9ab0740fcd329fcc8599128069d7cea640d07aebe8dbc0ec2ec9feb9de098d6627f7ea11dccc90e2021a28d528716705bf1a4b84b948d533aeca7fe7cf1de0513c6a0be6d7c8d8b73bcf676f170ce71a8ac6124134c2802d3d37ebd60dfd8ee6ed6df5c313d30b25125abc1cae237e9bd20b318be27379e5c304d6efde9b634d57e1b00f4cd42709454d5d83403d3359444791545608707a13f542baaecb7d62311b477852aa07c6d8ff674bb84f5a353f466c12c36072e65811902d9f6d2f50b08d2914ea5be4d162e6b4104507aacd3fbd4645f677c683eae746abb459603fbf639e497062b886bc822439f1755b4ad92d59469e03ba24121cb374e134bb3083d7df3915fda675a1b951c16be451539087323f6408797a12a8e4e0963970aec0bd5c3ed56021dc37eaceae2ad34cb2b16cba1111df029e08d4cd4d918071c05a9a2f3aab2e6074c694dd0b814e25aabe94f4af3056b9ceadeb7c0e93a7d3bdd4cf8292a7483beaecad2f7f35cf84cd08d00dc67df5e28d1f6fc3efc19ee639cf383cff88b68e073bd08ac9fc16267cecc4435bb6af41121107cbcda58323c0d04e8de9705ab9ce7200fa7eaeaebcac7b601e68d7d8d6896260eb8fc20ca96e6398731eec65a553ae05fe9d83c1c97bb5c6b65c31d6f03348833f510c83f4a7f8590b14c30b6bba499d2356b532b242465396d9fa95577f4db132bf3aecc752285cbd6e195315e518ac8e26a4dfa347dd8d4d4b6da3b946868fdb777bc3327cf9d562b0d67e54d3a92e881d61facaebada7fcd319ef695ab1bf9a20e9d593733864a567254f56f669b316e07886d19e0470eecea5bd6e3e34aa11c787955cc06b3294b1d1d0134f57c07bd5e6625e149e4fab6b6e78345aa4eb670d88c335acc4f2e1ea931ed7f4a74834fc6128a495440acce6486dfa2cc1abb859e7ec6752d6e8ab1b149f668cd17876e2da9c9dae96f29fb2bc0077f7065de6f86c2d959a1a6123324be30de8e41e7d89a330a88b79a5246582664b686884f5cd38f71f115d65d6033068d0358096068f8e4fdd48ff89bd512d43758faf8c57c2222294e36d8dcbf983f25c206eb4fcfafe851206a8946f80ce8c397df6a8ca2d83c42063d50692379752752c2d4a90108f1680722a401b6938ad024fcaefda3c66d23a7a5f4be16d35d27625dcd5f99b9635107ca091ab337aef6369031d38081523b75565d3b9f4bc5c230ff7866b7dbbd8e8ed479d7208ba5b4a25e84cb1120f57011ec1fa8e80cb90446c35639981d0d575f7198f1403b995acd0c96495d67cd2f8ff2f73356814b8d2b0b1aeb749a81d9725e7db87eb61de5e04784d871a9aae5a726e1985370ae7eb64a425dd1cb7f0faae7a2837a1282e601d58b80e4f28996a77b3a6a4ad2c006d8748f34ee1e35f640be590c19cb2817ae14d5c63bc02b200bd977d732dabe701e780a9faf670decf00537be693d25a7bce914a34cf07a7f3759f2ba34be663dfe783f5464def4d3fe62a8b62d40e8785cdaf6cabac9483ce88db2554ee6494674becee468f6f192470dde615dc028d41c3d71f9524786d9738c95dffb48690c48c059143dcd7c87b94e2b31f27986592b99fd30dd740fe55e2c2ba5e58771f2ef354605a231cda42bec6cecd987034eb061bdf9473577448ae5bbee64943108c1683e0450e5d4e70fd701e31eb2572e7175ad3663eeef4ddf2588c8d69bb851db5c4e4236d7ce8b2e8c21984f3af4f4290400b2365dfed9dbf916c02dabff01317658da46f77cd2ebe72709ced1b163d3f32f15d36de4aa23af490bbe62c190e5c69b43f3e48a05097a027302f3e23de084577a267240668e97176be3276d0435fdd1ed3d7ffa0336d1ac38125b231dc486c79c27f350e6e9d5c009e933ceecd0663b5ec39ec71ccbe1288867221ea1406c834b068a2040c820e99dfa9de6ebdb078d40a83b98a644fcd28eece40c00ecb34dfbec7a1082c40ab74eab67a1d81cff43fe38cfdd1607022ee239705896ef9e32eacc0f5575491faa82c036ae65ac7ec157b2ab877e0e93ff6f26128b6899f33cbf86a3214a3d6d12a02fe374882ee9dc6412217d7d2259fda8547b505bb05f2860632c48e0784d340aa5083f3ab8803e99d043b55d4b73ea56fcc606cc0dc7c0b64214260bc5e21b7e8a195fdd6feddea4af55465609a068c7c2db47a2d7699e0ced9dc9312ceb1356e4b171988823e22845a582ea4d301b927d650e6fd9c07db5e0c616a17e713cf60bd361fb9153bbb5ba5cea90a442e1d9d5114b7c01a52c771feebfd2f643b85b6325923d1a4b0c33b21477114500df53da1f44a2d5efaad93023bad00036b7074c52220b782c07b2dae14d0ee56dc0e58f94dffdb312cafdc8800cc5a4ba587cc883b6cc54be839ae1bea19c8227810843e90bcaa31d77139e3984fb0ba473fbb88f1ed428f307798d022ada98699e041ab63da0212b1abad82106", 0x2000, &(0x7f0000002f40)={&(0x7f0000000240)={0x50, 0x0, 0xe15, {0x7, 0x2b, 0xd, 0x100, 0x5, 0xe7, 0xefd, 0x1, 0x0, 0x0, 0x10, 0x7}}, &(0x7f0000000000)={0x18, 0x0, 0x49f, {0x8}}, &(0x7f00000000c0)={0x18, 0x0, 0xed4, {0x2}}, &(0x7f00000001c0)={0x18, 0x0, 0x1b, {0x2}}, &(0x7f00000002c0)={0x18, 0x0, 0x2f, {0x7}}, &(0x7f0000000340)={0x28, 0x0, 0x3, {{0x9, 0xff, 0x2, r6}}}, &(0x7f0000002400)={0x60, 0x0, 0x2000000000, {{0xa0, 0x6, 0x2, 0x6, 0x2, 0x2, 0x0, 0x7}}}, &(0x7f0000000380)={0x18, 0x0, 0xdf, {0x1}}, &(0x7f0000002480)={0x11, 0x0, 0x6, {'\x00'}}, &(0x7f00000024c0)={0x20, 0x0, 0xa7c3, {0x0, 0x12}}, &(0x7f0000002500)={0x78, 0x0, 0x5, {0x7fffffff, 0xfa89, 0x0, {0x2, 0x4, 0x0, 0x7fffffffffffffff, 0x8, 0x41b3, 0x0, 0x1, 0x40, 0xa000, 0x9, r4, r5, 0x6, 0x81}}}, &(0x7f0000002580)={0x90, 0xb, 0x6, {0x6, 0x3, 0x0, 0xf, 0x6, 0x4, {0x2, 0x0, 0x6, 0x6, 0x2, 0x4, 0xffffffff, 0xf, 0x5, 0xc000, 0x5, r4, r5, 0x2f, 0x1}}}, &(0x7f0000002640)={0xe8, 0x0, 0x6, [{0x5, 0x3, 0x0, 0x4}, {0x2, 0x9, 0x9, 0x3c5, 'userxattr'}, {0x0, 0x100000001, 0x8, 0xe, 'cgroup2\x00'}, {0x3, 0x7, 0x0, 0xba59123}, {0x2, 0x9, 0x8, 0x10, 'cgroup2\x00'}, {0x4, 0x7, 0x8, 0x76, 'lowerdir'}, {0x3, 0xd1b5, 0x8, 0x7, 'lowerdir'}]}, &(0x7f00000029c0)={0x338, 0x0, 0x5, [{{0x0, 0x0, 0xc, 0x0, 0x3, 0x5, {0x2, 0x8, 0x8, 0x3, 0x10000, 0xe92, 0x8, 0xfae, 0xfffffffb, 0xc000, 0x1, r7, r5, 0x10001, 0x81}}, {0x3, 0x1, 0x7, 0x80000000, 'mounts\x00'}}, {{0x5, 0x1, 0x7fff, 0xc58, 0x9, 0x0, {0x3, 0x100, 0x4, 0x2, 0x4, 0x7ff, 0x0, 0x9, 0x9, 0xc000, 0x7, r4, r5, 0x3, 0x5}}, {0x1, 0x2, 0x8, 0xfffffffa, 'cgroup2\x00'}}, {{0x0, 0x1, 0x9, 0x7, 0x7, 0x9, {0x6, 0x3, 0x80000000, 0x6, 0x8, 0x8b, 0xfffffffd, 0x2, 0x33, 0xa000, 0x94c6, r9, 0xee01, 0xa, 0x80}}, {0x1, 0xe000000000000000, 0x2, 0x9, '-\''}}, {{0x3, 0x3, 0x6, 0x9, 0x6, 0x92e, {0x2, 0x8ac2, 0x1, 0x138, 0x2260, 0xfffffffffffffff9, 0x9, 0x8, 0x88, 0xa000, 0xca15, r10, r11, 0x8, 0x1}}, {0x1, 0xc, 0x9, 0x4f17, 'userxattr'}}, {{0x6, 0x1, 0x9, 0x3, 0x8, 0x5, {0x6, 0x7, 0x4, 0x8, 0x52b, 0x800, 0x6, 0x5, 0x0, 0x8000, 0x400, r4, r5, 0xf2, 0xffffff47}}, {0x0, 0x9, 0x8, 0x6, 'overlay\x00'}}]}, &(0x7f0000002d00)={0xa0, 0x0, 0x10, {{0x2, 0x2, 0x5, 0x4, 0x80, 0x5, {0x4, 0x4, 0x100000000, 0x0, 0x40, 0xfffffffffffffff7, 0xfffffffa, 0x800, 0xfffffe5e, 0x6000, 0xf24, r4, r5, 0x5, 0x4}}, {0x0, 0x5}}}, &(0x7f0000002dc0)={0x20, 0x0, 0x75b6, {0x9, 0x4, 0x8, 0x7}}, &(0x7f0000002e00)={0x130, 0xffffffffffffffda, 0x2, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x810, 0xc7b, 0x5, 0x9, r4, r5, 0x8000, '\x00', 0x400, 0x5, 0xac, 0x81, {0x400, 0x10000}, {0x5, 0xffff}, {0x798, 0x2}, {0x3, 0x9}, 0x0, 0x4, 0x8, 0x6}}}}) 6m24.918289522s ago: executing program 4 (id=7218): r0 = memfd_secret(0x80000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000004b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@deltfilter={0x48e8, 0x2d, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xbe49ca88aac16b17, 0x6}, {0xfff2, 0xd}, {0x3, 0xa}}, [@f_tcindex={{0xc}, {0x1318, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0xfff2}}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff3, 0x8}}, @TCA_TCINDEX_ACT={0x70, 0x7, [@m_mpls={0x6c, 0x13, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x10}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f8d}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0xf, 0x6, "817281d0c3968278eb9c2c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x57db87a5223b59fa}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff2, 0xffe0}}, @TCA_TCINDEX_ACT={0x1264, 0x7, [@m_tunnel_key={0x74, 0x20, 0x0, 0x0, {{0xf}, {0x4}, {0x42, 0x6, "4a0276bad215c1aea9ab959a3927e8c98b0618d4e76e9e268f46ec5b624f85d2b9916a9dd26ca9106f72bf8b1cb104ca8e692abc6a55b3922f24eae636c7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xe8, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xa}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0xa3, 0x6, "db59a3dedc1df9a8198c5fd15fce0144e83868cb82f1ff5203bc1045276fe2cdc3aa882d9107a907cbb958c604b526c99d91ef9a9e3af0c030534daa803ccd255dde7ee2ac35d0b4500abf193259a5ed7aa68e0e39d42f7d2f593277bc96dc25f2c47eeb0f934033e30df1442e545dfe43f5b74e972905dc3ea3c7f1b0c5f87297bb41a4f60a742c49e1d3e70b236447ad7f2ff7d325d6e9c75532fd266c51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x1030, 0x8, 0x0, 0x0, {{0x9}, {0x4}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xd4, 0x1d, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xffffffff, 0x3, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x24c417c6, 0xffffffffffffffff, 0x9, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc38f, 0x8, 0x0, 0x0, 0x7f}}, @TCA_DEF_DATA={0x8, 0x3, '[+,\x00'}]}, {0x55, 0x6, "a5219536a2ac2c3664b8ecdc74f10ca9852ec8950b62fdd62be8befc8ce0001f85a79c476ca5bfb09fb7fa14dba05fb6a16bc7d0a1a9368725ed2e383f6d11917bade69454c8b4b7db057003d3365303af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x7}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x2a9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xfca1}]}}, @f_rsvp={{0x9}, {0xeec, 0x2, [@TCA_RSVP_POLICE={0xc48, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0xaafa, 0x8, 0x7, 0x7, 0xdc, 0xf, 0x1ccd, 0x7f, 0x9, 0x400, 0x4, 0x2, 0x1, 0xd, 0x9, 0x81, 0x7cfa, 0x7ff, 0x6, 0x9, 0x1, 0xf, 0xa013de3, 0x7, 0x1, 0x7e63, 0x9, 0x7, 0x8, 0x4, 0x401, 0x9, 0xd, 0x5, 0xfffffff7, 0x401, 0x6, 0x7, 0x200, 0x3, 0x80000001, 0x6, 0x8, 0x1, 0x4, 0x8, 0x7fff, 0x4, 0x10001, 0x80, 0x7, 0x37e0, 0x7ff, 0x0, 0x9, 0x5, 0x7, 0x7fff, 0x5, 0x7, 0x9, 0x80000001, 0x46, 0x2, 0x3, 0xfffffffb, 0xfffffff8, 0x4, 0xfffffffa, 0x4, 0x7, 0x4, 0xfffffff7, 0x5, 0x5, 0x4, 0x8, 0x0, 0x4, 0x9, 0xfffffff9, 0x5, 0x1, 0x4, 0x4, 0x5, 0x1ff, 0x9, 0x4cb3, 0x2, 0x1, 0x3e4, 0x8, 0x400, 0x3, 0x1, 0x80, 0x43d, 0x40, 0x7, 0x65, 0xb7f4, 0xb, 0x6d7ee240, 0x6, 0x0, 0x0, 0x4, 0x9, 0x2, 0x5, 0x2a, 0x5, 0x6, 0x8001, 0xd90d, 0x6, 0x7, 0x0, 0x9, 0x1, 0x8, 0xf, 0x0, 0x2, 0x1, 0x1, 0xcebd, 0x1, 0x401, 0xfffffffd, 0x5, 0x6, 0x9, 0x81, 0x2, 0x8b1, 0xf87, 0x3fe0000, 0xf0e4, 0x3, 0x185, 0x0, 0x101, 0x8, 0x0, 0xab, 0x1, 0x3ff, 0x7fff, 0xf, 0x40, 0x10, 0x3, 0x2, 0xd, 0x1, 0x1000, 0x45df, 0x80000000, 0x1000000, 0x8001, 0x1, 0x47f, 0x9bf8, 0x2, 0x8, 0xfffff4df, 0xe, 0x45eb, 0x8, 0x1, 0x4, 0x5, 0x4, 0x5, 0x7e6c27a9, 0x0, 0x7, 0x9, 0x9, 0x4, 0x701, 0x1, 0x6, 0x8000, 0xfffffffe, 0x1d3, 0x5, 0x2, 0x7fffffff, 0x40, 0x4, 0x4f58, 0x5, 0x9, 0xffff6e13, 0x1, 0xc, 0x7, 0xc68, 0x1, 0x5a8e, 0x80000000, 0x330, 0x1, 0x7, 0x3, 0x6, 0x4, 0xfffffffc, 0x3, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7f, 0x1c00, 0xfff, 0x3, 0x1, 0x521f, 0x8, 0x8001, 0xc, 0x64a, 0x7, 0x2, 0x6, 0x101, 0x4, 0x2, 0x9, 0x7, 0x6f34, 0x8, 0xd, 0xd, 0x51, 0xc, 0x7, 0x1, 0x3, 0x0, 0xa, 0x8, 0xdbf, 0x66ba, 0x5, 0xb, 0x2, 0x3, 0xfffffffb, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x9998, 0x7, 0x1, 0x5, 0x4, 0x1, 0x0, 0x4, 0x8, 0x7, 0x7, 0x4, 0x5, 0x1ff, 0x65e, 0x4, 0x2, 0xa, 0x642b, 0xffffffac, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x10000, 0x1, 0x7, 0x3, 0x4, 0x4ee2, 0xfffffff9, 0x2d2, 0x8, 0xee86, 0x0, 0xfffffffd, 0xfffffffc, 0x4, 0xa, 0x8, 0x9, 0x2, 0x1ff, 0xa, 0x5, 0x4, 0x2, 0x100, 0xfffff800, 0x333, 0x6, 0x5, 0xc, 0x10, 0x6, 0x2, 0xfffffffd, 0x6, 0x4, 0x200, 0x6, 0x8, 0x2, 0x3, 0xb5d, 0x5e35, 0x1, 0x80, 0x9, 0xffff, 0x9, 0x4, 0x7fffffff, 0xfffff00a, 0x8, 0x0, 0xa, 0x6, 0x9, 0xff, 0x0, 0xd2, 0x5, 0x8, 0x6, 0x4, 0x2, 0x8, 0x4, 0x10001, 0x0, 0x1, 0x7fffffff, 0x1, 0x3, 0x1, 0x0, 0x4, 0x7, 0x30f78a6, 0x3, 0x2, 0x4, 0x7, 0x101, 0x6, 0x2, 0xe4b, 0xa, 0x2, 0xe, 0x1, 0x2, 0x8, 0x1, 0xc, 0x4, 0x10, 0x2, 0x1db, 0x1, 0x1000, 0x5b2, 0x1, 0x9, 0x3c, 0x7, 0x7f, 0x0, 0x4, 0xc60, 0x7ff, 0x10000, 0x6, 0xb, 0x3, 0x3, 0x7, 0x7, 0x7, 0x5, 0x1ff, 0x10, 0x8000, 0x6a3d6c39, 0x1, 0x7, 0x4, 0x7ff, 0x28, 0x4, 0x2b7, 0x6, 0x62, 0x10, 0x315e, 0x1, 0x1, 0x5, 0x5, 0x88f, 0x3, 0xffff, 0xdf6f, 0x1, 0x5, 0x2, 0xcd, 0x5, 0x6, 0x1, 0xe87, 0x4, 0x0, 0x2, 0xd, 0x8001, 0x5, 0x81a, 0x9, 0xc, 0xfffffff7, 0x3ff, 0x8, 0x3, 0x9, 0x8, 0xfffffffa, 0x0, 0xfaa, 0x5, 0x4, 0x0, 0x1, 0x78, 0xc, 0x5, 0x4, 0x5, 0x7fffffff, 0x6, 0x0, 0x10001, 0x1cc4, 0x200, 0x401, 0x3, 0x2, 0xd, 0xa83d, 0xa1e, 0x8, 0xffff, 0x7, 0x9, 0xffffffff, 0x7, 0x6, 0x2bf, 0x0, 0x4, 0xc, 0x3, 0x8, 0x40, 0x0, 0xb, 0x4, 0x8001, 0x1ff, 0x1000, 0x7, 0x1, 0x7ff, 0x1, 0xffff, 0xf90, 0x4, 0x1, 0x7, 0x6, 0x0, 0x7, 0xb323, 0x5, 0x0, 0x3, 0x4e, 0x5, 0x997, 0x1ff, 0xaca, 0xf8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xa53, 0x1ff, 0xbc8, 0x10001, 0x4, 0x2, 0x3, 0x1, 0xfffffff8, 0x14, 0x8, 0xb, 0xffff3de5, 0x7, 0x7, 0x6, 0xffff, 0x1, 0x4, 0x81, 0x2, 0x2, 0x7, 0x0, 0x3, 0xaf, 0x3997, 0x3, 0x7fffffff, 0x3, 0xd70d, 0x0, 0x4, 0x9, 0x3, 0x9, 0x8, 0x3, 0x1, 0x3, 0x800, 0x7, 0x7, 0x2, 0x45, 0x9, 0xfffffffd, 0x7, 0xc, 0x5, 0x2, 0x40, 0xffff, 0x7, 0x0, 0x7, 0x0, 0x1, 0x42d, 0x5, 0x25a, 0x8001, 0x6, 0x4, 0x3, 0x5, 0x7e, 0x125, 0x9e95, 0x5, 0xd, 0x80, 0x3, 0x8, 0x2, 0x86765a7a, 0xa, 0xf7, 0x4, 0x52c5, 0x80, 0x40, 0x8, 0x80, 0x2, 0x60, 0xfffffffd, 0x4, 0x1000, 0xf10b, 0xe0000000, 0x8, 0x400, 0x80000001, 0x3, 0x5f, 0x5, 0x6, 0xf, 0xa9, 0x7, 0xc164, 0xffff, 0x3, 0x100, 0x4, 0x1, 0xffff, 0xcdaf, 0x7, 0x1, 0xffffffff, 0x3, 0x0, 0x100, 0x1, 0xb0, 0xfffffeff, 0x2, 0xcb, 0x3, 0x6cf, 0x4, 0x6, 0x6a, 0xfff, 0x3, 0x1ff, 0x1, 0x6, 0x5, 0x2, 0x8, 0x1d4, 0x7fff, 0x5, 0x6, 0x3, 0x8, 0x10, 0x30f, 0xfffffff3, 0x4, 0x3, 0xffffffff, 0xc, 0x10, 0x6, 0xaa08de0, 0x1, 0x0, 0x3, 0x6, 0x5, 0x8, 0x101, 0x36d3, 0x801c, 0x101, 0x5, 0x0, 0x81, 0x81, 0xffff, 0x2, 0x10000, 0x0, 0x9429, 0x6, 0x8, 0x4, 0x3, 0x2f, 0x1, 0x3ff, 0x7fffffff, 0x3, 0x8, 0x7, 0x2, 0x5d0, 0x15, 0x4c, 0x7, 0x4, 0x2, 0x4, 0x400, 0x6, 0x7fff, 0xacf9, 0x8710914a, 0x4, 0x5, 0x5, 0x4, 0x46, 0x2, 0x5b5f5ede, 0x8, 0x40, 0x53b8, 0x81, 0x5, 0x8, 0x80000000, 0xc, 0x4, 0x1, 0x1, 0x2, 0x400, 0x4, 0x441a4a0, 0x100, 0x6, 0x253, 0x3, 0x7d82d2c, 0x9, 0x3ff, 0x4, 0x5, 0x30, 0xfffff947, 0x1000, 0x9, 0xa, 0x9b90, 0x8, 0x5, 0x9, 0x101, 0x10001, 0x8, 0x680, 0x947, 0x2, 0x1, 0xbed, 0x6000, 0x1, 0x3, 0x9, 0x5, 0x7, 0x8, 0xffffffff, 0x2, 0x4, 0x4, 0x81, 0x3, 0x6, 0x400000, 0x40]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x7fff}}, @TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x9}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x10001, 0x8000}, {0x1d, 0xe, 0x4}, 0x73, 0x9, 0x1}}, @TCA_RSVP_SRC={0x8, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x4a83, 0x7, 0x1000}, {0x6, 0x3, 0x5}, 0x84, 0x8, 0x96}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8ac9, 0xbe0, 0x3}, {0x8, 0x3, 0xec2b}, 0x2f, 0x2, 0xae}}, @TCA_RSVP_ACT={0x220, 0x6, [@m_skbmod={0x78, 0x25c0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8, 0x3, 0x9}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x13, 0x6, "02268881fec3a1f62ec69000ffbaa4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x118, 0xd, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xd6, 0x6, "e76935224fc47790042e17581149608233405737d134f6df37e303045924e15356eb87f47ebc679c2ed56f316c3d4f9bae08800a7b68ebfd8c62ff5cccffb60b8b57f889b976fa505dadf0228de81ac26757f657dd295558f0050d1c88a06381430fd31412e4ecaf5911506b84578d726b0118cac562c65da6ebe790c28e5fbe132f17c6720609b3ec488e594b3b91a85bade6dd649fd9523e86a96a50cf75c1827b3531ebcbbfd5ad86305c45c5101aaf79e6c89bdb7f6de8b516340afe588712f495cd8b578afd23e0efb39c1c4baa2ca9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_gact={0x8c, 0x1f, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3fd, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2465, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x8, 0xf}}]}, {0x2e, 0x6, "f5dc9b8baaea945d56293a45de2c2ca8c4a1c3c43d0d750c9035ed59058d250b7b71799cc21f44dc657a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}]}}, @f_tcindex={{0xc}, {0x270, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xedd8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xf}}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x254, 0x7, [@m_sample={0x168, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x40000}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x10000, 0x4, 0x1, 0x7ff}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffe}]}, {0xfb, 0x6, "bdfd5048799de77e6535c7f0c6994ad7e876cb8cadd08816a47acfabf8fb54d39747fd5123537be0ad0deed0925a4c44c97cf5b32973febea79ada3a03b764d016567106a46ce93adc73ab2e722fc5d008c5f2871ce53654dcf3acdc195615105b59abff77751f1040b45813d944191a8ff3cb08f44eef058ce9ef054a91796ce11b670650120b8bc2f161791d2aea4db5cb1393c8359f746095daefa1407aadc99ae4bab88fe4dac3634d053880a2800a266ed6244838b38b4ec42fa55f946981df1f16bc9415f56411f5b0c2674c5c5997f10f93c0603a476bff7a8ecdafe1318da42c94c5b51eb7c8317e88a5dca796a877c46eef80"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x90, 0x1a, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88e5}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}]}, {0x3b, 0x6, "35f0847969cbcd7a63b5a50c02288d3ab8959ecb52befa079c974673ef84d2f3846e1f43cba01794d99aa7e7a2a726fa9433f9d7ac4f87"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x58, 0x6, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x23, 0x6, "0633adde16e9171341f2d5e6381888ce259728ad2d9d0e24c253bc5a7b5478"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x110, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xe, 0x10}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x2, 0x80}, {0xbf, 0x16, 0x7}, 0x11, 0xc3, 0x3}}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_ACT={0xd4, 0x6, [@m_simple={0xd0, 0x1d, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x5, 0x4, 0x6b5}}]}, {0x8a, 0x6, "f0288e049ada7150488e014ecde486cba0b42efa35ff8fe2bab237ede946a0da49f1116fe38e62dea61736ceac2c80e960d463ec2bff53c0cbe7d89226d4383ac09467c988cdb72a91c10a8cbaa1f0a76ca9e8fb76b2661db1a4cd7a2b30a09cb07e78ab57c73fbecf2c475469d936a421ffed421bc109754437c45ee4585447a5702967a810"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x474, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x7fbc}, @TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x4, 0x423, 0x2, {0x3, 0x2, 0x6, 0x3, 0x8001, 0xd}, {0x7d, 0x1, 0x6, 0x3, 0x9, 0x2}, 0x3a6, 0x3, 0xfff}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x4}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x24}, @TCA_TCINDEX_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xfffffffb, 0x1ff, 0x4, 0x9, 0x837, 0x8, 0x0, 0x3, 0x2, 0x1, 0xff, 0x7, 0x0, 0x100, 0x2, 0x3, 0x0, 0x82d4, 0x9, 0xe, 0x8, 0x8, 0x10001, 0x1, 0x1000, 0x80000000, 0x40, 0x7, 0x7, 0x4, 0x93, 0x9, 0x0, 0x5, 0x0, 0xffffffff, 0x9, 0xfff, 0x1, 0x2, 0x3, 0xf9a, 0x7, 0x9d, 0x4, 0x8, 0x10, 0x0, 0x2, 0x8, 0xb, 0x400, 0xfffffc01, 0x0, 0xffffff8a, 0x4, 0xff, 0x724, 0x5, 0xffffff00, 0x1000, 0x2, 0x0, 0xb, 0x7, 0x10001, 0x8d1, 0xffffffff, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x2, 0x8000, 0x0, 0x401, 0xfffffff8, 0x2, 0xac, 0x4000, 0x39, 0x8, 0xfffffff9, 0x3, 0x1, 0x2000000, 0x57, 0x8, 0xb0, 0xdf, 0x8415, 0x7, 0x4, 0x3, 0x8463, 0x7, 0x16c, 0x0, 0x3, 0x1ff, 0xc, 0x100, 0x5, 0x38000000, 0x4, 0x81f2, 0x0, 0x0, 0x400, 0x1, 0x6693, 0x3b84b1ab, 0x10001, 0x6, 0x4, 0x7ff, 0x3, 0x9, 0x40, 0x8, 0x1, 0xc, 0xfffffff7, 0x101, 0x0, 0x5, 0x69, 0x5a0f, 0x5, 0x80000001, 0x5, 0x1, 0x8, 0x6, 0x10001, 0xfffffff8, 0x7, 0x10001, 0x100, 0x5, 0x9e, 0xce8d, 0xfffffff7, 0x2, 0x47833c55, 0x7fffffff, 0x6, 0x0, 0xa5c2, 0x4, 0x3, 0x1, 0xe, 0x6, 0x3, 0xb, 0x4, 0x7fffffff, 0x9d, 0x4fd7, 0x8, 0x90, 0xfff, 0x7, 0x0, 0xfff, 0x5, 0x7, 0xaf1, 0x80000001, 0xda1, 0x367a, 0x1, 0x7, 0x8, 0x5, 0x4, 0xff, 0x1000, 0x5, 0x10001, 0x1, 0x4, 0x7, 0x4, 0x101, 0x1, 0x6, 0x9, 0x8, 0x8, 0x8, 0xffffffed, 0x7, 0x7, 0x1, 0x7, 0x80000000, 0x4, 0xffffff80, 0x4, 0x9, 0x1ff, 0x0, 0x8, 0x8001, 0x7fffffff, 0x8, 0x6, 0x1000, 0x0, 0xa, 0x8, 0x3f60, 0x4, 0xff, 0x0, 0x4, 0x1000, 0x757e, 0x8000, 0x0, 0x1, 0x2, 0xdf, 0x94, 0x10, 0x1, 0x75a, 0x8, 0xfc1, 0x100, 0x5, 0x0, 0x8, 0x691c, 0xf0, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0x7, 0x5, 0xcbd9, 0x6, 0x8be9, 0x4, 0x9, 0x100, 0x7, 0x0, 0xfff]}]}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xffff, 0xb0059c1252b81586}}]}}, @f_rsvp6={{0xa}, {0x1e84, 0x2, [@TCA_RSVP_ACT={0x11b0, 0x6, [@m_gact={0x1090, 0x14, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xebc, 0x1, 0x2, 0xa85a, 0xffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xcda, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x7, 0x10000000, 0x1, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a9e, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0x2, 0x4, 0x3, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x11c, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xcd, 0x8, 0x0, 0xc60}}}]}, {0x8a, 0x6, "7663fe67df05f87a810a8f7aaac78b2656feca3e1dffed1ac6bd798e140c7dba21415080e79cb9c2c48912543d537cb838614714c9132aa83d3210f0b1491ee85a97432c3d8811d8e07490e145e3533775619f6043620d098d410fc30330229cbda8a83658505d3c0282d7d825259adf21a2cc7412eafd108505ae6cc528e91ccb9c4dea6e3b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffe, 0xffffffff, 0x7f}, {0x7, 0x55, 0x40}, 0x2e, 0xfc}}, @TCA_RSVP_DST={0x14, 0x2, @mcast1}, @TCA_RSVP_POLICE={0xc9c, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x190a}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x9, 0x3c80000, 0x6e8, {0x25, 0x1, 0x3, 0x2, 0x81, 0x400}, {0x7, 0x0, 0x3, 0xa, 0x2, 0x2}, 0xc99, 0x3, 0xfffffe00}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x2, 0x5, 0xa, {0x5, 0x0, 0x4, 0x964, 0xffff, 0x80000001}, {0xc0, 0x1, 0x2, 0x3800, 0xa5}, 0x2, 0x2, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x77f6aad1, 0x2, 0xcfd, 0xd, 0x5, 0x10, 0x2e9, 0xff, 0x1, 0x80000001, 0x6bec, 0x9, 0x0, 0xf, 0x44a, 0x7, 0x100, 0x90, 0xffffffff, 0x2, 0x6, 0x6, 0xff, 0x7, 0x100, 0x0, 0xfffeffff, 0x0, 0x1000, 0x9, 0x7, 0xbf, 0x8001, 0x6, 0x200, 0x80, 0x38, 0xad, 0x430, 0x7, 0x2, 0x9, 0x1, 0x40, 0x5, 0x11, 0x2, 0x8, 0x3, 0x4, 0xd5, 0x180, 0xc, 0x5245, 0x8c97, 0x6, 0x1, 0xfffffffd, 0x4d5, 0xa9, 0x7, 0x7, 0x5, 0xffffff1b, 0x4, 0x5, 0xc9a, 0x37dc, 0xf, 0x9, 0x8, 0xfffffff4, 0x9f8, 0x8, 0x0, 0x17ad, 0x8, 0x3, 0x0, 0x0, 0xe823, 0x25b9, 0xf, 0x2, 0x6, 0x8, 0x1, 0x100, 0x7, 0x4, 0x4d, 0x9, 0x8, 0x32b, 0x8, 0x2, 0x8000, 0x3, 0x7fffffff, 0x73a0, 0x5, 0x1, 0x4beca749, 0x4, 0x4, 0x8, 0x0, 0x0, 0x9, 0x9, 0x5, 0x4, 0x5, 0x80000001, 0x1, 0xcb7, 0x8000, 0x1ff, 0x8, 0x101, 0x7ff, 0x4, 0x9, 0x1000, 0x6, 0x5, 0x5, 0x3, 0x8001, 0x9, 0x4, 0x6, 0x7, 0x80000001, 0x2, 0x8, 0x3, 0x3, 0x3, 0x6, 0x81, 0xaa, 0x2, 0x7, 0x80, 0x1, 0x2, 0xffffa990, 0x6cd, 0xdb, 0x8, 0x9, 0x5, 0x9ac, 0x0, 0x80000001, 0x8, 0xfff, 0xf, 0x4f, 0x2, 0xe, 0xf, 0x7fffffff, 0x6, 0x9, 0x5, 0x0, 0xc7, 0x0, 0x2, 0x0, 0x6, 0x9, 0x7, 0x30000000, 0xcc59, 0x4, 0xfffffff7, 0xd8, 0x80, 0x7ff, 0xa8, 0x2, 0xffffffff, 0x8, 0x3, 0x8, 0x1, 0x4, 0x1, 0x0, 0x3, 0xffffff80, 0x5, 0xfffffeec, 0x6, 0x4, 0x4, 0x26, 0x3, 0x5, 0x1, 0x0, 0x6, 0xff, 0x9, 0x1, 0x970, 0x7, 0x8, 0x923, 0x7fff, 0xfff, 0x6, 0xfff, 0xdc6, 0x1000, 0x10000, 0x2, 0x9, 0x5, 0x7, 0x6, 0xfd6, 0x2, 0x1, 0x7, 0x800, 0x8, 0xfffffff7, 0x24, 0x7f, 0x3, 0x8, 0x3, 0x9, 0xc, 0x9, 0x1, 0x4286, 0x0, 0x4, 0x5, 0x8, 0x8, 0x2, 0xcb44, 0x1, 0x871, 0x0, 0xfffffffd, 0x94b, 0xc7, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10001, 0x80000000, 0x9, 0x5, 0x80, 0x0, 0xffffffff, 0x2c034d82, 0x4, 0x2, 0x7fffffff, 0xbc5f, 0x7b0, 0xfffffff9, 0x0, 0x1, 0x401, 0x8, 0x6, 0x6, 0x389, 0x800, 0x7, 0x8, 0x6, 0x81, 0x9, 0x8, 0x3, 0x7ff, 0x786, 0xfffffffb, 0x8, 0x0, 0x7, 0x3, 0x0, 0x400, 0x3, 0x1, 0x80000000, 0x9, 0x2, 0x9, 0x5, 0x5, 0x0, 0x1, 0x8, 0x200, 0x7f, 0x1000, 0x7, 0x5, 0x9, 0x2, 0x6, 0xee, 0x5, 0x3, 0xffff, 0x6, 0x6, 0x68, 0x0, 0x1112, 0x80000000, 0x5, 0x401, 0x2, 0x760, 0x7, 0x819, 0x100, 0x6, 0x2, 0x0, 0x10, 0x9, 0x1, 0x1, 0x0, 0x3, 0x3, 0x5, 0x72, 0x0, 0x7, 0x1, 0xbc7d, 0x9052, 0x7fffffff, 0xc3d, 0xa0000, 0x307aea46, 0x0, 0x9, 0xffff, 0x5b1, 0x2, 0xfffffffa, 0x4, 0x1ff, 0x9, 0x7fffffff, 0x5, 0x3, 0xde, 0x8, 0x2, 0x5, 0x0, 0x7, 0x6, 0x200, 0x1, 0x7b25, 0xc, 0x127, 0x5d2, 0x800, 0x7, 0x0, 0x10000, 0xff, 0x3, 0x8, 0x7, 0x7, 0x9, 0x3, 0x8, 0x3, 0x6, 0x8001, 0xb89d, 0x4, 0x7, 0xe9, 0x80, 0xfffffff9, 0x3ff, 0xa, 0x318, 0x4, 0x6, 0x9, 0x1, 0xa2, 0x4, 0x478, 0x7, 0x0, 0x200, 0x0, 0xf, 0x33a, 0xfffffffc, 0x2, 0x6, 0x6, 0x0, 0xf8000000, 0x101, 0x8, 0x6, 0xffff, 0x1fa, 0x3, 0x8001, 0x4, 0x8, 0x2, 0x9, 0x5, 0x3, 0x3, 0x1, 0x6, 0x5, 0x80000000, 0x7fffffff, 0x138, 0xffff8e35, 0x0, 0x3ff, 0x400, 0x3ff, 0x0, 0x81, 0x40, 0x1, 0x1, 0xb71, 0x0, 0x7, 0xfffffff8, 0x8, 0x5cc, 0x0, 0xc3fe, 0x7fff, 0x2, 0x6, 0x80000001, 0x8, 0x5, 0xc5, 0x7f, 0x3, 0x6, 0x9, 0x3, 0xf, 0x8d0, 0x7b3, 0x0, 0x1ff, 0x17, 0x2, 0x4, 0x380, 0x0, 0x2, 0x7, 0x4, 0x2, 0x1d5, 0x8, 0x4, 0x80000001, 0x7, 0x1, 0xffffff7f, 0x1, 0x4, 0x88e250fe, 0x3, 0x8, 0x8, 0x6, 0x2, 0x2, 0x0, 0x7, 0x1, 0x7fff, 0x6b3, 0x7ff, 0x4, 0x101, 0x9, 0xffff, 0x8001, 0x201e349e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1be, 0x3886aba7, 0xf, 0x52, 0x10001, 0x6, 0x3, 0x4, 0x1, 0x9, 0x6006, 0x1, 0x9, 0x2, 0x27c1d3a3, 0x1, 0xa, 0x7, 0x9, 0x2e, 0x7ff, 0x8, 0x9, 0xd04e, 0x0, 0xdb08, 0x9, 0xfa10, 0x1, 0x3, 0x80, 0x8, 0x82, 0x10, 0x0, 0x34, 0x9, 0x2, 0x3, 0xfff, 0x0, 0x1, 0x7, 0x27d, 0x80000000, 0x7, 0x51, 0x0, 0x10, 0x7, 0x9d, 0x8, 0x3, 0x5, 0x3, 0x2, 0x56ae, 0x2, 0x0, 0x8, 0x7, 0x1, 0x7, 0x6, 0x1748, 0x6, 0xfffffff9, 0x6d4, 0x2, 0x2, 0x7, 0xc00, 0xffff1d8c, 0x8000, 0x2, 0x6, 0x5, 0x8, 0x78, 0xc01, 0x6, 0x4, 0x5, 0x7, 0x5, 0xc8b, 0x7, 0x5, 0xa, 0xf, 0x2, 0x5b, 0x9, 0x101, 0x4, 0xc, 0xffffffe6, 0x19, 0x6, 0x30, 0x7, 0x2, 0x0, 0x7, 0x8, 0xfffffff8, 0x2, 0x0, 0x9, 0x2, 0x7, 0x800, 0x4, 0x1, 0x390, 0x9, 0x3, 0x5, 0x2, 0x5, 0x3, 0xffffffff, 0x7, 0xffffffff, 0x81, 0x80, 0x62e9, 0xa, 0x7, 0x2, 0xc, 0x6, 0x58bf, 0x7, 0x80000000, 0x2000000, 0x7, 0x5, 0x101, 0x8, 0x3, 0x2, 0x9d, 0x0, 0x6, 0x558, 0x1, 0x0, 0x7, 0x5, 0x80000000, 0x210, 0x0, 0x1, 0x7, 0x9, 0x1, 0x7fffffff, 0x2, 0x40, 0x3, 0x7, 0x9, 0x7, 0x4, 0x0, 0xb, 0x8, 0x4, 0x1, 0x0, 0x5, 0x7, 0xfffffff8, 0x7ff, 0x6, 0x6, 0x2a, 0xfff, 0x2, 0x1, 0x9, 0x2856a7f7, 0x9, 0x9, 0x7, 0x2, 0x5, 0x0, 0x2, 0x0, 0x80000001, 0x80, 0x4, 0x6, 0x80000000, 0x4342, 0x16e4, 0x6, 0x7a, 0x0, 0x4, 0xffffffff, 0x7, 0x7fffffff, 0x5, 0x6, 0x5, 0x7, 0x9, 0x2, 0x5, 0x8, 0x7, 0x1, 0x3a3, 0x6, 0x63, 0x1, 0x7, 0x2, 0x9, 0x0, 0x1ff, 0x10001, 0x3, 0x9, 0x1ff, 0x9, 0x6, 0x3, 0x0, 0x3ff, 0x8, 0x7, 0x8, 0x3, 0xfffffff8, 0x3, 0x1b20248e, 0x5, 0x2e, 0x9, 0x2, 0x4, 0x5, 0x8000, 0x1, 0xfffffff2, 0x8, 0xfffffff9, 0xab53, 0x2, 0x9, 0x4]}]}]}}]}, 0x48e8}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async, rerun: 32) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async, rerun: 64) setfsgid(0x0) (rerun: 64) fstat(r1, &(0x7f0000005640)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000056c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000007700)=0x0) (async) r8 = getuid() (async) r9 = getgid() r10 = syz_clone3(&(0x7f0000007980)={0x10001080, &(0x7f0000007740), &(0x7f0000007780), &(0x7f00000077c0), {0x39}, &(0x7f0000007800)=""/132, 0x84, &(0x7f00000078c0)=""/72, &(0x7f0000007940)=[0x0, 0x0], 0x2, {r0}}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r12, r12) stat(&(0x7f0000007a00)='./file0\x00', &(0x7f0000007a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(r0, &(0x7f0000007ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000009b00)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000009c00)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000009c40)='./file0\x00', &(0x7f0000009c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) read$FUSE(r0, &(0x7f0000009d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 64) r18 = getuid() (rerun: 64) lstat(&(0x7f000000bd40)='./file0\x00', &(0x7f000000bd80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000004b40)={0x2b8, 0x11, 0x100, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1c1, 0x41, 0x0, 0x1, [@generic="9db03460b7e615f0fd", @generic="b48fa54ad2d3d5ce1030cf3a251236832dead003adb28566d139d4b41d82ef937601f0f6cde1573b596ef653102319eb2f7f7f946efe5d2a97049bffd64d5e5ad9c062c6d140b26541872f1397d7208c5227035a987325f1740646464e1fccd0fe2dcf97315160e54876fec0ad3cba4147e2ac668803767efccf1278af2f30efb7ba9b50a40d2c3f7a8765066bd0b1ab4a3a4f05b1f4434929f29a82b3c0dfc0ea485fc90f48d7c59b09f23505f2764f8d04b85c0aac2e66d2d1774a46c27d557a5a7ba82f17cc08c6dec49a1750ee4e96869f216051af", @nested={0x4, 0x101}, @generic="2e842316c7f17b556a452a95c7b567963e58ca36fe095339174f0531602a64d8788039eff3e62c37185f7522d7", @nested={0x4, 0x48}, @generic="55a49a503ddea618b980ad21626289070df7bdc5462278d24ae1b553a6603e72a1d7d23521b466f47fe47fad03510998ae45a6eeee396bb966a8f93d4af4ea5d58fa42e47b1ab69269e3441df6819658a01c58fbd4c304078887380dc0fc72cedb3033b570c348d86f51ca906ec983dc9900a39ce4965dbd9da4926fb1e83748d5aebc88a431f3a69c962b9e81c5d1b2f2d73014451c9f5c27487bb98c32419a4b8e2b84c897bebd"]}, @generic="d27f3b9105a3f869624174a0b82b6e81f6e68cc915dbe13e2dbe22f34fec4ee16dc5c49544bab1f5ebdc2cb5e19a8d7906bf33c445c71b81b3d0d5b3f7a63e83c279a9bfe71f3a081b34098a4627da1943599767f9b4d791", @nested={0x10, 0xce, 0x0, 0x1, [@nested={0x4, 0x1a}, @nested={0x4, 0xa4}, @nested={0x4, 0x8}]}, @generic="e57c8a5285b8e1afe280187cbcfe693bf38cba30c178debb6005acc84b4c538a47876633b06c82874e6efeaf362e31fa5b98ab51f8f07bf1634a2e90e008c7e4d8459e29eb488ae6a26b415502251d8cd1347cb3fb03103ba26d22e27919373aedeab6f76e80f3a149232990fa8d929d1cd58435fbd314ee01d391a1"]}, 0x2b8}, {&(0x7f0000004e80)={0x1f8, 0x17, 0x800, 0x70bd26, 0x25dfdbfd, "", [@generic="bd58240b30c740d5b42fad392acc8ed3dd1b7f4cfedd1132a857e91b7ebf1c3e71732eed522b1a1b7575fbb8de3d21d8d7b42701e6dfcf21db3576709f", @typed={0x30, 0x5f, 0x0, 0x0, @binary="a1dff6625456d01d855effc90fdea8fd23e7221f02035b19898dff03b1fce62ab0b27a4df5eb780ddf170087"}, @typed={0x5, 0x60, 0x0, 0x0, @str='\x00'}, @generic="a2096de7cd20345ffb56eaa6f1650d0bf4a9c8963a74907f0b3344d2af007bdc10ec52b137621dc9357f4f4546fc46c858f3a27af4e0382b495a308f6ede8435cb72c7a7e6616835e5529dfc30aba01e3107ac7905d993bda11efd53fe951a2554e245316ea2f01e358902654b9dd5220018183b0478ad6e737c84c741308e6cdb4f23520e0091f4a8c5618a18b2cc5e6c7335f47eeb1ca4bfe823371fa826258dec358a2bb6ca4d47c23a0bedaa2ba55cad59cece3719cf267bcf1e8a425a80874d49b66d572cac8fd39ae724eb4f797c8e2ed7d0191b66613f0ff4b4eb0b5edebe759b26c1371f5e51a880b781", @typed={0x8, 0x5e, 0x0, 0x0, @pid}, @generic="9d3327d186676ba565304042b186fd0d9fc2cf8136299e968740b71a0bbad05df43e0edc0bc919dd5c503b1628e0c3e2c352ab785a5ba3c3b943c6162ef9aad210effb333f85a1c16ee2ad9ee950baf2288465b819fc8c2701bb51552b84f8f0b3d1a6da35ad", @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@remote}]}, 0x1f8}, {&(0x7f0000005080)={0xc8, 0x2f, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@generic="1463e2b6e71f3540cd4fe2b0cabcc4fbaac2e7089f19b89edee9c5fe72bfe0b34ece2ef5e13b07f96f585f420f518b3af2f1240272b3436969e8f8a517ec2c252dac3c67029ca8ef437dbf5cf392fd3e0635a8901ae5dd7591d28095d3e29ced109851a9dc4e8f6d0ea92653ee82d4f3f3deaffe5bd9ce6ad947f3b63dec14087d298925dd37892ac3300a51902efb3187e4ef833a84b71f1440bacb08a1fb0da7b85cd1f74127bd7350c3e6f06e26f377f45d73351348"]}, 0xc8}, {&(0x7f0000005180)={0x328, 0x21, 0x8, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x5a, 0x0, 0x0, @uid=0xee01}, @nested={0x135, 0x14, 0x0, 0x1, [@typed={0x7, 0xe9, 0x0, 0x0, @str='},\x00'}, @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x5}, @typed={0xf1, 0x30, 0x0, 0x0, @binary="27e14e109c47e2e0cb660a326e8faa7b75f320a0729ebd66891544320304a8eb2fcb721157e44a989963a0ba531e4168d766b5de041ab88a2a3bc0d347e4332538cbde6d40ff88f99a6a6620e1f61eb6e9dec7b09649025c413d951c5587855e3e732e18a28d659197ac015a3ff89deb69d325bf3d9c8dd9effd80154571a41671bdc1724dda3c1d6497b66d408c781cbcc55865ebc287cf2c05b053c7a834e707f3d4e4e09942cb9bebe34a6c051f31fe077edb8d5cfd88b65283259123144cea4f0cdfd58af513107b2e222c75267976d1c5eb74ea364a7a87bdff9b04b85a2c890f52985a7af3c869efbbd2"}, @nested={0x4, 0x56}, @generic="b4f628d93798b3c0b825a1b6b0ca85b392ec7a401363a30acfc7d11d8aa85b44f59d056e7461a6f4d4"]}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@private1}, @typed={0x86, 0xaf, 0x0, 0x0, @binary="120efeca502d21b2d6c8c85f485ce8ef8d0f4821d7022183f54d653f07d099f1ef4736194605ceb3933dd31303f7e8e8e168282f19523ada930f978d9bfb23e736e9f1539554e9c84cb6b64093bbcff987c5e31847e7bfb67baedc040c2d96120d2efaa911d0f4a1c0f52510c082f52fe36208580f0a888d856da6d6bda94943298d"}, @nested={0x12a, 0xc0, 0x0, 0x1, [@generic="9aca39b7b65a9addad3fd8faf313e40f221daa8242f730cf9450ab6a4f75d308ff2d8c81ed36ef005c44316a676581ebb199", @typed={0x8, 0x35, 0x0, 0x0, @pid}, @nested={0x4, 0x114}, @generic="34ef1b3b9de2266f714097562b06c473fb305774fede6c95d7c75b1fd964aa04b761bdd95b9b5d647de3f3534068efee25ecaaf35d0f66980f027d3dd3fbced8066465812fe99475c0870d0a9298430c788420bab947712b4f674cf7de8e67223850c0471e0634330ac505cfcf6bd4802e482001c75f9394dce263b61dd62289da86e2668d94ae90ea1cf7b843f95a94b2f450805d134b9f3685386cf67f50b920e099b687c796ab97627c82eebb1c2f4e5fb4e64f1768eebdeefc3483da8db2dc6fef5f239ea378e16a0ab3ef2cc29b", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x2d}]}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@remote}, @typed={0x5, 0xd3, 0x0, 0x0, @str='\x00'}]}, 0x328}], 0x4, &(0x7f000000be00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xd8, 0x18090}, 0x8080) write(r4, &(0x7f00000002c0)='u', 0x1) (async, rerun: 32) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x40000100000200) (async, rerun: 32) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x85b83000) 6m24.855731414s ago: executing program 4 (id=7219): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d316b6692010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)={0x0, 0xb, 0x7, "27f0d36c1e5c91"}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000000b00)={0x34, &(0x7f00000008c0)={0x20, 0x18, 0x42, "2fcd39c527373abb0179659ee92dc1c59a04f971f5888e6d5b84fe5c69acbb20009f31ba30cb3d6bf17ea64228d7292f0d8afb984afa2422037a752455aa73d5c07e"}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2adc0, 0x1c1}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r5 = dup(r1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_int(r6, 0x29, 0x24, 0x0, &(0x7f0000000100)) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c5042, 0x0) fadvise64(r7, 0xa, 0x3, 0x7) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) (async) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) (async) sendfile(r9, r8, 0x0, 0xffffffff) 6m24.385451333s ago: executing program 4 (id=7228): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x2, 0x78, 0x0, 0x0, 0x192, 0x4}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000840)={0x2, 0xb1, {0x52, 0x7fff, 0xfff9, {0x8, 0x98f}, {0x4, 0x4}, @period={0x2e, 0x1, 0xc, 0x8, 0x3, {0x8000, 0xfe00}, 0x0, 0x0}}, {0x56, 0x4, 0x27, {0x3, 0x101}, {0x3, 0xa5}, @const={0x200, {0x5, 0x8, 0x9, 0x6}}}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'vlan0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x110000a, 0x1}, {0x5f32, 0x8}]}}) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x3b9ac9ff, 0x0, 0x0, 0x7, 0x4000000000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@ptr={0x70742a85, 0xfffffffc, &(0x7f00000001c0)=""/76, 0x0, 0x0, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/169, 0x0, 0x0, 0x3d}, @fda={0x66646185, 0x8, 0x1, 0x9}}, &(0x7f0000000380)}, 0xbdcd807aba1e6bb6}, @acquire_done={0x40106309, 0x2}], 0x22, 0x0, 0x0}) fstat(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r5, &(0x7f0000000600)={0x4, 0x2, 0x49, 0x5, 0x4, 0xff, 0x8, 0x8, 0x200}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r1) fcntl$setown(r1, 0x8, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000002000)=ANY=[@ANYBLOB='1-6:', @ANYRESDEC, @ANYRESDEC], 0x28) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) 6m24.370757514s ago: executing program 4 (id=7229): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000100), 0x4a81, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x2}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000000)=""/78, 0x4e) getdents(0xffffffffffffff9c, &(0x7f00000021c0)=""/256, 0x100) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) 6m24.355894094s ago: executing program 4 (id=7230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x12b8b000) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0xfffffffffffffffd) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x18, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 6m24.279938406s ago: executing program 4 (id=7231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x8, r4) 6m24.277011285s ago: executing program 37 (id=7231): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002d00), 0x2000) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000002d40)={0x5, 0x8e5, 0x2, 0x9, 0x5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace(0x8, r4) 4m35.735717051s ago: executing program 9 (id=9438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0x6, 0xc8}]}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x1629e96d6d3aafb1, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000020002000300030000000903000038000000fcffffff0e0000000000200001000500000000000000000003"], 0x58) close(r8) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='J\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="0100000000000000180b0000000000000d000000020000002f6465762f726e756c6c623000000000060000000000000000e604000000000005000000008001006578743300000000"], 0x58) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000200), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r8) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000025c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r10, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) sendmsg$key(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)=ANY=[@ANYRESOCT], 0x118}}, 0x20000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 4m34.932263507s ago: executing program 9 (id=9458): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x0}, r0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)={[{@subsystem='blkio'}]}) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x1) r3 = socket$inet6(0xa, 0x3, 0x7) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f00000001c0)) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x8}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206"], 0x10}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x9, "88ef26", 0x7, 0x10}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"]) 4m34.905800677s ago: executing program 9 (id=9459): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000740)=0xffffff2d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 4m34.839810559s ago: executing program 9 (id=9460): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@cred={{0x18, 0x1, 0x2, {r5, r6, r7}}}], 0x18, 0x40804}}], 0x1, 0x14008004) sendmmsg$unix(r0, &(0x7f00000007c0)=[{{&(0x7f0000000480)=@file={0x0, './file0/../file0/file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000500)="8b6c4dbbac3ea1a1f547dea33d2eda263a8fe01ec339b948bc8710b53d64ada791eaf2f2b37e3ec4f91b3ef7d65ed62bc595a361348946147b4aa3005b0344395abed198dcb9f2874142d4ffd987417402c480878e84ee82ff3c98521ee8e1b57bcf1518c7ea41eababffa438957ca723f65bc13cf9736428f9363e185e0062770b08f3a18b7df017004ed7843f56767e38bcaa8bb43c7060565528fa77c772c38422ccd3a14983fce13839fa74509232a451edc30eb348520682b715fa7fec3038b9dc32dc7f0c9dc157f1473db09e8117d8e71ab87e803cc8f", 0xda}], 0x1, 0x0, 0x0, 0x2404c015}}, {{&(0x7f0000000600)=@file={0xfb3caa99a825a410, './file1\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)="f1076f967b35", 0x6}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f00000006c0)="73159fe6ab9ae3f02662ad568807b09eb091ae1fcc029cd88837e0faf19bdb86e35d4c476be39f39271f5bf10344748ecb2dd7383a483be6a59199e16aeceed133d0c10e1193d39f6b25a737", 0x4c}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, r2, r7}}}], 0x20, 0x4}}], 0x2, 0x40) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) fstat(0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [{0x2, 0x6, r2}, {0x2, 0x5, r8}]}, 0x34, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) 4m34.838034999s ago: executing program 9 (id=9462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/78, 0x4e}], 0x4, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}, 0x40000000) 4m34.419207468s ago: executing program 9 (id=9473): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000500)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xf) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000500)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') (async) pipe(&(0x7f0000000040)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xf) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) splice(r5, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r6, 0x0, 0x25a5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) 4m34.324565199s ago: executing program 38 (id=9473): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000500)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xf) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r6, 0x0, 0x25a5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockopt$packet_int(r0, 0x107, 0x9, 0x0, &(0x7f0000000500)) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') (async) pipe(&(0x7f0000000040)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xf) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) (async) splice(r5, 0x0, r3, 0x0, 0x10000008ebc, 0x0) (async) splice(r2, 0x0, r6, 0x0, 0x25a5, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) 4m19.691888819s ago: executing program 3 (id=9798): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private0}]}]}, 0x2c}}, 0x0) (async) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m19.5869821s ago: executing program 3 (id=9805): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000200)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @private2, 0x23}, 0x1c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4cf938b1bb00130628b57000fddbdf2506ff01fc4e244e2108000000f8ffffff0600000009000000090000007d000000a0adbf3295e9d203000000f2e385469033a5b4e8e458c788cfdc5df6c7a714926e5376b5f151a46dc084a636c120bb2eacdaf86f87ae1072b65fe13d079d084380878918ed0354f784b6d0bd1cb183fc988cb3a33ebbaaf718a6a2338528d2ab5a505dfdd9e73f400f4943e5a5258a844e230ec7c3d99a12ec808183350a63227836ea390024ec5d2e09031625cbdce7f307aea348f0de8bb80d20da301d01ef793dfe8d3f9d08aa3599cebe1e8522fb83cfb1f3", @ANYRES32=0x0, @ANYBLOB="04000000040000000200000009000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket(0x10, 0x80002, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x8, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r10, 0x540a, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) sendmmsg(r5, &(0x7f0000000140)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)='C', 0x1}], 0x1}}], 0x1, 0x200400c1) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYRES8=r4]) 4m18.747022778s ago: executing program 3 (id=9831): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xfe) unlinkat(r1, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x1, 0x9, 0xd, 0x766425b1, 0x18, "0f6dd54109be6eae2d4ea9522a508e543476e4"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) r4 = getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) r6 = syz_pidfd_open(r4, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r9, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) setreuid(0x0, r10) 4m17.851575366s ago: executing program 3 (id=9851): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mlock(&(0x7f0000feb000/0x13000)=nil, 0x13000) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x4, 0x3a, '\\]}%+(', 0x3a, '(]#', 0x3a, './bus', 0x3a, [0x43, 0x4f]}, 0x30) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) 4m17.792751097s ago: executing program 3 (id=9854): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 4m16.911899225s ago: executing program 3 (id=9873): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) (async) 4m1.915672081s ago: executing program 39 (id=9873): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) (async) 1m37.217606596s ago: executing program 1 (id=12414): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)="b5667faff45e1a66fe2b4f403dbfada8bdafa3bd049925366b9e9c0a18a24e5bde7d35e8a5acc5feecea20c9d6525d816865050ce443c7d21ce0c77397f55b58f849fcf99b9620b5e7c085fd2505d27806fabed56501a8db4a0242d1", 0x5c}], 0x1}, 0x4048805) sendmsg$inet6(r0, &(0x7f0000000080)={0x0, 0x2d, &(0x7f0000000180)}, 0x24004894) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) 1m37.163875597s ago: executing program 1 (id=12415): r0 = epoll_create(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async) epoll_pwait(r0, &(0x7f0000000280)=[{}], 0x1, 0x8, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) io_setup(0x1d9, &(0x7f00000011c0)=0x0) io_getevents(r2, 0x4, 0x0, 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 64) mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r1, 0x22e7c000) 1m36.879007923s ago: executing program 1 (id=12423): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x200a82, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x20000023896) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x1, 0x9, 0xd, 0x766425b1, 0x18, "0f6dd54109be6eae2d4ea9522a508e543476e4"}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_io_uring_setup(0x743b, &(0x7f00000001c0)={0x0, 0x59f5, 0x8, 0x1, 0xee, 0x0, r2}, &(0x7f0000000000), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x28011, r3, 0xffffe000) 1m36.863122233s ago: executing program 1 (id=12424): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001800000004000000", 0x1c) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @remote, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000009, 0x108031, r0, 0x4000) sendto$inet6(r2, &(0x7f00000009c0)="c7", 0x1, 0xc001, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000080)={0x2, {0x19d2, 0x3, 0x6, 0x5, 0x6d, 0x7}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)) chdir(&(0x7f00000001c0)='./bus\x00') fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mkdir(0x0, 0x3d) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x4cb0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x110, 0xffffffffffffffff, 0x6d64000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) lremovexattr(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)=@random={'security.', '\x00'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 1m36.779932485s ago: executing program 1 (id=12426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/230) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000017c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0107289084abf4fbbf1445bd7000fcffff2d6700000008000100", @ANYRES32=0x0, @ANYBLOB="0800c300040000000800c40001800000"], 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28131, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m36.668354827s ago: executing program 1 (id=12432): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 1m36.649649298s ago: executing program 40 (id=12432): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00') 1m34.622535039s ago: executing program 2 (id=12465): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) syz_clone3(&(0x7f0000000640)={0x102002080, &(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000440), {0x3e}, &(0x7f0000000480)=""/180, 0xb4, &(0x7f0000000540)=""/171, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r0}}, 0x58) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f00000001c0)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) signalfd4(r0, &(0x7f0000000000), 0x8, 0x800) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100002000c0010000800014004000000", 0x58}], 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x8) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) r6 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) fcntl$getown(r6, 0x9) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dbc0eb458b885da8adb5ef9a9a52d46389d4bec43c3d6017c564242daf75c8ed1dd117feff7cd3e049056c44aefb97e94966b91", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) writev(r8, &(0x7f00000001c0), 0x0) write$P9_RRENAME(r7, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m34.527969831s ago: executing program 2 (id=12466): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000140018000080007564703a73797a32064c710b"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) splice(r3, &(0x7f0000000200), r4, 0x0, 0x808, 0x0) write$P9_RAUTH(r3, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x4af1960fa251d545, 0x3}}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000500)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1m34.527391901s ago: executing program 2 (id=12467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x1, 0x70b929, 0x25dfdbfd, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) 1m34.525199191s ago: executing program 2 (id=12468): r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x4}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf8, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@tfcpad={0x8, 0x16, 0x1}]}, 0xf8}}, 0x0) r3 = syz_pidfd_open(r0, 0x0) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x10000000) mount$9p_fd(0x0, &(0x7f0000000280)='.\x00', 0x0, 0x2004840, 0x0) umount2(&(0x7f0000000080)='\x00', 0x1) setns(r4, 0x20000) syz_clone(0x80060800, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x54) r5 = open_tree(r4, &(0x7f0000000240)='./file1\x00', 0x80001) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) setitimer(0x1, &(0x7f0000000300)={{}, {0x77359400}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f0000000180)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14, 0x9, 0xd, 0x7}, 0x8, 0x1000c, 0x7ff, 0x0, 0x401, 0x45b670bb, 0x0}) setitimer(0x1, &(0x7f00000001c0)={{}, {0x77359400}}, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m34.513025721s ago: executing program 2 (id=12470): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) unshare(0x62040200) (async) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x84) openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4, 0x110}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000095000040"]) (async) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000000000100", @ANYRES64=0x2710], 0x48}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, ':'}}], [], 0x6b}}) (async) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r11 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r11, r10, 0x0, 0xffffffff) 1m34.479812692s ago: executing program 2 (id=12471): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) signalfd4(r1, &(0x7f0000000080), 0x8, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x2, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m34.439040582s ago: executing program 41 (id=12471): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x1c000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) signalfd4(r1, &(0x7f0000000080), 0x8, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x2, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1m27.360097047s ago: executing program 6 (id=12638): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x180) close(r1) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1m27.359676087s ago: executing program 6 (id=12640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mmap(&(0x7f00001fb000/0x2000)=nil, 0x2000, 0x1000009, 0x4010, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlink(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x100008, 0x0, 0x0, 0x0, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffeff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r4, &(0x7f00000003c0), 0x100000000000022d) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x18, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000340)=""/234, 0xea}], 0x2, &(0x7f0000000440)=""/4096, 0x1000}, 0x40010001) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r6 = getpid() syz_pidfd_open(r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m27.336019297s ago: executing program 6 (id=12642): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$snapshot(r1, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/122, 0x7a, 0xfffffffffffffffd, 0x20}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x40}], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r5, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x9, 0x800, 0x2, 0x5, 0x963, 0x6, 0x8]}}]}]}]}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40040) 1m27.333789958s ago: executing program 6 (id=12644): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x1, 0x1, 0x8}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB='fscontext?}']) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) process_vm_readv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000200)=""/17, 0x11}, {&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/33, 0x21}], 0x5, &(0x7f0000000480)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000180)=0x8000, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r9}, 0x60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r12, &(0x7f00000004c0)="a0", 0x1, 0x200080d1, 0x0, 0x0) recvfrom$unix(r13, 0x0, 0xffffffffffffff89, 0x12001, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x66, 0x0, &(0x7f0000000000)=[@increfs_done={0x40106308, 0x2}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 1m27.281984338s ago: executing program 6 (id=12645): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @remote, 0x7}, 0x18) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165142, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_clone3(&(0x7f00000002c0)={0x6141000, 0x0, 0x0, 0x0, {0x801}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="40010000100033060000000000000080e0000002000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d232000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000010000000000000000000000000000000000000002000000000000000200040000000000000000006369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000008000c00ff070000"], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xc8e}]}, 0x10) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r6, &(0x7f0000004240)=[{{&(0x7f0000000280)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001cc0)="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", 0xb89}], 0x1}}], 0x2, 0x20008844) sendto$inet(r6, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000035b000/0x400000)=nil, 0x400000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/80, 0x50}) write(r1, &(0x7f0000000400)="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", 0x1f000) 1m27.280545539s ago: executing program 6 (id=12648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x80030}], 0x1, 0xe7b, 0x0, 0x41) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)=0x0) timer_getoverrun(r1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205000000a51674f439e8070b90a2"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18e) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, 0x0) 1m12.189549667s ago: executing program 42 (id=12648): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x80030}], 0x1, 0xe7b, 0x0, 0x41) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)=0x0) timer_getoverrun(r1) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f20421140000000000010902240001000050b109040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205000000a51674f439e8070b90a2"], 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0)) r5 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18e) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000009880), 0x380, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r7, 0x7706, 0x0) 4.147863626s ago: executing program 5 (id=14171): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x200000000000000) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x31) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x21000, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726775705f88643ddcf24beb8c039448a14aa37875d3689ba01f13e75429010000000000000061d29429d4f96aab89792aea10c1a0745544", @ANYRESDEC=0x0, @ANYRES64=r2]) sendfile(r4, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x200000000000000) (async) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0x5) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x31) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000280)={"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"}) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x21000, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726775705f88643ddcf24beb8c039448a14aa37875d3689ba01f13e75429010000000000000061d29429d4f96aab89792aea10c1a0745544", @ANYRESDEC=0x0, @ANYRES64=r2]) (async) sendfile(r4, r0, 0x0, 0x7ffff000) (async) 4.146757916s ago: executing program 5 (id=14173): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000080)=ANY=[@ANYBLOB="eb0e0000030000003e"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) syz_open_dev$hiddev(&(0x7f00000001c0), 0x3, 0x10f001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x9, 0x7fff}) r2 = socket(0x11, 0x2, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f0000000000)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r3]) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 4.117602297s ago: executing program 5 (id=14175): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000400)='\x00', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r2, &(0x7f0000000140)="77213a79eda19703acd077b149f3be1e66782744c905980f98e2", 0x1a, 0x3b00, 0x0, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x18, 0x0, &(0x7f00000002c0)=[@decrefs={0x400c6314, 0xfffffffd}, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) 4.052212718s ago: executing program 5 (id=14177): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1f}, @fda={0x66646185, 0x4, 0x0, 0xffffffffffffffff}, @flat=@weak_binder={0x77622a85, 0x10b, 0x3}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket(0xa, 0x801, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x27, 0x400ed80, &(0x7f0000000040)={0xa, 0x4e22, 0x10000, @local}, 0x1c) getsockopt(r2, 0x0, 0x40, 0x0, &(0x7f00000000c0)=0x54) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0xf8, 0x453, 0x400, 0x70bd28, 0x25dfdbff, "3389145be2505a8d11491356a2a2fa6373c6d0986073ab094fcb10f7567cbcd7db7ec7744f9d233653083bddf7882ae981b4ef0f7fd59203df716c1aceda22bed541f27e96abdf3f4bbc8334a31da9bc34a68dfb52a1beb04f0cd622c83581b27bb1e2dfbb9e88aca7ced35f9765f18e7f9beb911683fbd83b7b48b115600260768826f13d0ebc59d93114b6dd034b97766e4a9bb174e2371b196a610f748bfd57c78e58916178950e93ea55d0c646871bcc80c9a64236916975e1af69023a7bca234420c30a64568fd66453c0b94a03e22458c45b480801224228cc9fd96d25d7879d1ca101", ["", "", "", "", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 4.047638038s ago: executing program 5 (id=14178): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=""/189, &(0x7f00000000c0)=0xbd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40000, 0x4) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x3802880, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x37, 0x6b, 0x6b]}}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x36, 0x39, 0x30, 0x61, 0x65, 0x35], 0x2d, [0x30, 0x65, 0x62, 0x36], 0x2d, [0x30, 0x33, 0x35, 0x37], 0x2d, [0x39, 0x63, 0x62, 0x30], 0x2d, [0x66, 0x30, 0x39, 0x38, 0x33, 0x33, 0x64, 0x39]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+'}}]}) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.origin\x00', &(0x7f00000002c0)='size', 0x4, 0x3) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000300)=""/136) r1 = memfd_create(&(0x7f00000003c0)='tmpfs\x00', 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000400)=0x5, 0x4) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futimesat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{0x77359400}, {r2, r3/1000+10000}}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000500)=""/27) recvfrom$unix(r0, &(0x7f0000000540)=""/251, 0xfb, 0x40010020, &(0x7f0000000640)=@file={0x1, './file0\x00'}, 0x6e) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000006c0)) nanosleep(&(0x7f0000000700)={0x77359400}, &(0x7f0000000740)) clock_nanosleep(0x1, 0x0, &(0x7f0000000780), &(0x7f00000007c0)) r4 = syz_open_dev$evdev(&(0x7f0000000800), 0x8, 0x20000) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000840)=[0xc0, 0x14e1b2e6]) write$UHID_INPUT(r0, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x4100c3, 0x3) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000001900)=@v2={0x2, @aes128, 0x2, '\x00', @auto="84f4fba431a3b17ebba4bec5e4bddca7"}) faccessat2(r5, &(0x7f0000001940)='./file0\x00', 0x80, 0x0) write$char_usb(r0, &(0x7f0000001980)="b214d88e99caec7116b30d51ce0f888e9a450330758c04dc1eb90f9bb61d9376c20a06f829b6e3a7fe9f21266ac9fd8fe4081af97ff5b9238219ebb8d32d081cc34c292791f8f08941f1601be97a6efa55b66cf93a5a2b52115a0748a44765376794e579b434e3f2383664d336d5a7b1642317a75a4f99c57bde8f571c03fbd224ebf9f75a03195aa1ebe0a2b724b3f69fe9706d53945d0957133fdd3660888c4cf202b9efab62b9b92424ef1877eec4732723", 0xb3) inotify_init1(0x80000) faccessat2(r5, &(0x7f0000001a40)='./file0\x00', 0x4, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x6, 0x50, r1, 0xcb2f2000) io_getevents(0x0, 0x4, 0x6, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}], 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001b80)={0x6, &(0x7f0000001b40)=[{0x3, 0x9, 0x8, 0x8000}, {0xb1, 0x7, 0x4, 0x7}, {0xfffa, 0xf8, 0x78, 0x9}, {0x8000, 0x40, 0x0, 0x7fff}, {0x5, 0x6, 0x5, 0x5b0}, {0x4, 0x9, 0xc, 0x9}]}, 0x10) bind$inet6(r0, &(0x7f0000001bc0)={0xa, 0x4e22, 0x1, @private1, 0x8}, 0x1c) bind$unix(r0, &(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000001c80)={0x2, 0xc, 0x3}) 3.172251216s ago: executing program 5 (id=14194): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000480)) r3 = pidfd_getfd(r1, r1, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500), 0x0, 0x0, 0x2) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.140401377s ago: executing program 8 (id=14204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000001a40)=""/211, 0xd3}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f0000002d00)=""/128, 0x80}, {&(0x7f0000000600)=""/265, 0x109}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0) accept4$inet6(r2, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000380)=0x1c, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x58, 0x0, &(0x7f0000000400), 0x54, 0x0, &(0x7f0000000480)="f433f37e209b678f1b09a098aa77d9ba5718a19491b7ee8db65998f822616f652515d96f86c8d6f86100a1e006ca600cf8d0590b6aea74aadd60ae2f3b8fe3f66c5305f2e2d6d7e102ce60e1e849537011171512"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x4381) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000300)={0xc, 0x48, [0x5, 0xffffffff, 0xfcb, 0xda39], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.059955509s ago: executing program 8 (id=14205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010485000000000000003c78291100010500010004"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) shutdown(r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 1.843560673s ago: executing program 0 (id=14206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f0000000100)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r3, 0x0, r5, 0x0, 0x25a5, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x3) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r7, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x20, 0x1, 0x202, r8, 0x0, 0x0, 0x8800000}]) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x9c2, 0x2, 0x8, 0xffffffffffffffff, 0x8}) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0xfff, @loopback, 0x449b}, 0x1c) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000002201"]) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x1, @multicast}, 0x0, {0x2, 0x4e21, @loopback}, 'batadv_slave_0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1.680668307s ago: executing program 0 (id=14207): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000080)=0xfffffff7, 0x4) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f000000a1c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0xe0, @local, 0x7}, 0x18, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff01"], 0x28}}], 0x1, 0x81) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (rerun: 64) 1.587948128s ago: executing program 0 (id=14208): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xcb, 0x0, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x132, 0x0, &(0x7f00000002c0)="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"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) 1.409974832s ago: executing program 0 (id=14209): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000700040004000180"], 0x18}}, 0x0) (async, rerun: 64) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) (rerun: 32) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) close_range(r4, r4, 0x0) (async, rerun: 64) close_range(r3, r4, 0x2) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0x4e24, 0x21f, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=[@dontfrag={{0x18, 0x29, 0x3e, 0x3b}}], 0x18}, 0x4080) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) mount$binderfs(0x0, 0x0, 0x0, 0x80086, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) r7 = inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x82000716) inotify_rm_watch(0xffffffffffffffff, r7) (async, rerun: 64) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) (rerun: 64) 1.375894093s ago: executing program 0 (id=14210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x58, 0x7, 0x2, [0x8, 0xffffffffffffffff]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200000000000002) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000580)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x3efe47d89f46adca, 0x0) bind$bt_l2cap(r6, &(0x7f0000000280)={0x1f, 0x0, @none, 0x100, 0x2}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r7, &(0x7f0000000340)) listen(r7, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 1.151823057s ago: executing program 8 (id=14211): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="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", 0x3a3, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="0201140084dc003f7fa682de9ecc01140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x1) (async) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3ca) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000000000000f0bb81f700"/28], 0x18}}], 0x2, 0x0) (async) wait4(r8, 0x0, 0x80000000, 0x0) 1.150283017s ago: executing program 0 (id=14212): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "b37b"}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x84, 0x2, "a3bd"}, 0x0}) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast2, 0x2a3c}, {0xa, 0xfffd, 0xfffffffd, @remote, 0x8000024}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffe, 0x10083, 0x0, 0x2, 0x1]}}, 0x5c) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000400)={0x40, 0x10, 0x2, "c935"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) 988.01887ms ago: executing program 8 (id=14213): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000072b000/0x2000)=nil, 0x2000}, 0x1}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 950.492651ms ago: executing program 8 (id=14214): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x3032, r2, 0x201f5000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 341.451564ms ago: executing program 7 (id=14220): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='coda\x00', 0x1200000, 0x0) 322.306274ms ago: executing program 7 (id=14221): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@uuid_off}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 218.877336ms ago: executing program 7 (id=14222): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66800, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x2) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000080), 0x80, &(0x7f0000000480)={[{@index_off}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_off}], [{@dont_appraise}, {@flag='lazytime'}, {@uid_lt}]}) (async) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000720008701700ff00000000080109d079b6954b4c3d203b2ec3dc20ed3d022400010000b000090400faff03000122050009"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="201018"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) (async, rerun: 32) chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000600)=0x1d) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, 0x0) (async, rerun: 64) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 64) tgkill(r5, r5, 0x21) (async) fstat(0xffffffffffffffff, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32=r3, @ANYBLOB="02008d409d24a3", @ANYRES32=r4, @ANYBLOB="0400000000000000100000000000000020000000000005001e221be29b9c2b11df6f0d9719f79e69cb73b5e7588fbaebeaf1cd6114f5878a398334b2c8ffd20374dfd2fe4c30452c58733259e5d8d96bb338c122f9ad15116c80a999b186"], 0x34, 0x3) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs2/binder1\x00', 0x0, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) (rerun: 64) lchown(&(0x7f0000000400)='./file0/../file0\x00', r3, 0x0) (async) setresuid(0xffffffffffffffff, 0x0, 0xee01) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES64=r6, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303130303830302c7573655f299a8b3d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/116) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) r7 = open_tree(r0, &(0x7f0000000580)='./file1\x00', 0x80100) (async, rerun: 32) r8 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f00000006c0)={0x8, 0xffffffffffffffff, 'id0\x00'}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) 218.668266ms ago: executing program 7 (id=14223): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f00000001c0)={0x8f, 0x0, 0x11}) (async) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r2, 0x4068aea3, &(0x7f0000000140)={0x9f, 0x0, 0x1}) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, 0x0, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 90.825289ms ago: executing program 7 (id=14224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250c000000180001801400020076657468305f746f5f687372000000006c0001801400020076657468300000000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000c9140002006261746164765f736c6176655f3100000800030003000000140002006970766c616e30000000000000000000ef3106441009892ce46c363be2855c860def50c2bc00c262501bda747950d439ee"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x8014) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xf5262000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_proto_private(r4, 0x89e0, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r3, 0x0, 0x8840) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000000240)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250c000000180001801400020076657468305f746f5f687372000000006c0001801400020076657468300000000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000c9140002006261746164765f736c6176655f3100000800030003000000140002006970766c616e30000000000000000000ef3106441009892ce46c363be2855c860def50c2bc00c262501bda747950d439ee"], 0x98}, 0x1, 0x0, 0x0, 0x40080}, 0x8014) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0xf5262000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_proto_private(r4, 0x89e0, 0x0) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r3, 0x0, 0x8840) (async) write$selinux_load(0xffffffffffffffff, 0x0, 0x6000) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) (async) 70.772259ms ago: executing program 7 (id=14225): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) mmap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x5, 0xfffff, 0xffffffffffffffff, 0x4f3b2000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x4, 0x58fd, 0x3, 0x9, 0x2, 0x6, 0x6, 0xab, 0x5}) setresuid(r4, r4, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000001c0)=0x200) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$PTP_PIN_GETFUNC2(r6, 0x40043d14, &(0x7f0000000080)={'\x00', 0x4, 0x0, 0x7ff}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'cpu'}, {0x2d, 'perf_event'}, {0x2b, 'cpu'}, {0x2d, 'cpuset'}, {0x2b, 'net_prio'}]}, 0x28) preadv2(r5, &(0x7f0000000380)=[{0x0}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f00000002c0)=""/170, 0xaa}], 0x3, 0x0, 0xf, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 0s ago: executing program 8 (id=14226): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) (async) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0xf00, 0x5, 0x0, 0x0, 0x12, '\x00 \x00'}) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0xf00, 0x5, 0x0, 0x0, 0x12, '\x00 \x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r1, 0x0, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_open_pts(r2, 0x80) ioctl$TCSETS(r3, 0x5402, 0x0) (async) ioctl$TCSETS(r3, 0x5402, 0x0) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r5], 0x0) openat$incfs(r4, &(0x7f00000000c0)='.log\x00', 0x800, 0x34) (async) openat$incfs(r4, &(0x7f00000000c0)='.log\x00', 0x800, 0x34) r6 = syz_open_pts(r0, 0x20800) dup3(r6, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x44) kernel console output (not intermixed with test programs): 6.11708': attribute type 6 has an invalid length. [ 682.019928][ T2118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11707'. [ 682.041731][ T2123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11709'. [ 682.051098][ T2123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11709'. [ 682.082481][ T2127] overlayfs: failed to clone upperpath [ 682.099899][ T2130] /dev/rnullb0: Can't lookup blockdev [ 682.610176][ T2148] netlink: 60 bytes leftover after parsing attributes in process `syz.6.11718'. [ 682.641913][ T36] audit: type=1400 audit(2016782936.079:1605): avc: denied { connect } for pid=2151 comm="syz.6.11720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 682.807265][ T2186] netlink: 'syz.5.11732': attribute type 5 has an invalid length. [ 682.815174][ T2186] netlink: 'syz.5.11732': attribute type 5 has an invalid length. [ 682.861986][ T36] audit: type=1400 audit(2016782936.299:1606): avc: denied { setopt } for pid=2189 comm="syz.8.11734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 682.892297][ T2193] binder: Unknown parameter '<@U' [ 682.910252][ T36] audit: type=1400 audit(2016782936.349:1607): avc: denied { execute } for pid=2196 comm="syz.8.11736" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 683.246775][ T2206] overlayfs: failed to clone upperpath [ 683.356101][ T36] audit: type=1400 audit(2016782936.789:1608): avc: denied { map } for pid=2212 comm="syz.5.11743" path="socket:[114075]" dev="sockfs" ino=114075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 683.382502][ T36] audit: type=1400 audit(2016782936.809:1609): avc: denied { setopt } for pid=2212 comm="syz.5.11743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 683.410616][ T36] audit: type=1400 audit(2016782936.849:1610): avc: denied { unmount } for pid=2215 comm="syz.5.11744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 683.464103][ T2222] overlayfs: failed to clone upperpath [ 683.483387][ T2224] : renamed from bond_slave_0 [ 683.524974][ T2234] /dev/rnullb0: Can't lookup blockdev [ 683.833395][ T36] audit: type=1326 audit(2016782937.269:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x50000 [ 683.856749][ T36] audit: type=1326 audit(2016782937.269:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x50000 [ 683.880632][ T36] audit: type=1326 audit(2016782937.269:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x50000 [ 685.153028][ T2264] /dev/rnullb0: Can't lookup blockdev [ 685.408269][ T2286] 9pnet_fd: Insufficient options for proto=fd [ 685.680852][ T2300] overlay: ./file0 is not a directory [ 686.669803][ T36] kauditd_printk_skb: 50158 callbacks suppressed [ 686.669825][ T36] audit: type=1326 audit(2016782940.099:51772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x50000 [ 686.699837][ T36] audit: type=1326 audit(2016782940.109:51773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.723403][ T36] audit: type=1326 audit(2016782940.109:51774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.747245][ T36] audit: type=1326 audit(2016782940.109:51775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.770980][ T36] audit: type=1326 audit(2016782940.109:51776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.794607][ T36] audit: type=1326 audit(2016782940.109:51777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.819780][ T36] audit: type=1326 audit(2016782940.109:51778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.862780][ T36] audit: type=1326 audit(2016782940.109:51779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.887872][ T36] audit: type=1326 audit(2016782940.109:51780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 686.912093][ T36] audit: type=1326 audit(2016782940.109:51781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2240 comm="syz.6.11754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eacb code=0x50000 [ 687.030319][ T2359] fuse: Unknown parameter 'Kroupmjڹ_id' [ 687.642565][ T2385] __nla_validate_parse: 3 callbacks suppressed [ 687.642588][ T2385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11805'. [ 687.659185][ T2385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2385 comm=syz.1.11805 [ 687.673095][ T2385] 9pnet_fd: Insufficient options for proto=fd [ 687.887519][ T2409] /dev/sr0: Can't lookup blockdev [ 687.924958][ T2420] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11818'. [ 687.945443][ T2422] 9pnet_fd: Insufficient options for proto=fd [ 687.945631][ T2423] 9pnet_virtio: no channels available for device syz [ 688.037107][ T2429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=2429 comm=syz.5.11821 [ 688.204331][ T2438] /dev/rnullb0: Can't lookup blockdev [ 688.801401][ T2469] bpf: Bad value for 'gid' [ 688.953252][ T2482] /dev/loop0: Can't lookup blockdev [ 689.100025][ T2498] netlink: 188 bytes leftover after parsing attributes in process `syz.6.11851'. [ 689.290609][ T2513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11857'. [ 689.392085][ T2519] /dev/rnullb0: Can't lookup blockdev [ 689.398295][ T2519] /dev/rnullb0: Can't lookup blockdev [ 689.545922][ T2527] tipc: Started in network mode [ 689.550931][ T2527] tipc: Node identity 4, cluster identity 4711 [ 689.557434][ T2527] tipc: Node number set to 4 [ 689.594091][ T2537] netlink: 'syz.5.11865': attribute type 4 has an invalid length. [ 689.601998][ T2537] netlink: 3649 bytes leftover after parsing attributes in process `syz.5.11865'. [ 689.612452][ T2537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=2537 comm=syz.5.11865 [ 689.626126][ T2540] netlink: 'syz.5.11865': attribute type 4 has an invalid length. [ 689.634425][ T2540] netlink: 3649 bytes leftover after parsing attributes in process `syz.5.11865'. [ 689.677246][ T2546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2546 comm=syz.5.11867 [ 689.718432][ T2551] overlayfs: failed to resolve './file1': -2 [ 689.761722][ T2561] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11872'. [ 690.444294][ T2603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11887'. [ 690.630399][T32581] bridge0: port 3(veth0_to_team) entered blocking state [ 690.637402][T32581] bridge0: port 3(veth0_to_team) entered forwarding state [ 690.683344][ T2624] overlayfs: failed to clone upperpath [ 691.159753][ T2650] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11903'. [ 691.201200][ T2655] overlayfs: failed to clone upperpath [ 691.432896][ T2660] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.11907'. [ 691.951732][ T2685] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 692.373542][ T2726] overlayfs: missing 'lowerdir' [ 692.378597][ T2725] overlayfs: missing 'lowerdir' [ 692.400990][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 692.401012][ T36] audit: type=1326 audit(2016782945.829:51852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2727 comm="syz.6.11930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f779ab8eec9 code=0x0 [ 692.453687][ T2733] overlayfs: failed to clone lowerpath [ 692.466909][ T2735] rust_binder: inc_ref_done called when no active inc_refs [ 692.474574][ T36] audit: type=1400 audit(2016782945.899:51853): avc: denied { append } for pid=2734 comm="syz.8.11932" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 693.090793][ T2750] __nla_validate_parse: 3 callbacks suppressed [ 693.090816][ T2750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11939'. [ 693.118529][ T2752] overlayfs: failed to clone lowerpath [ 693.243834][ T2770] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11949'. [ 693.253376][ T2770] bpf: Bad value for 'gid' [ 693.494390][ T36] audit: type=1400 audit(2016782946.929:51854): avc: denied { map } for pid=2782 comm="syz.6.11954" path="socket:[115866]" dev="sockfs" ino=115866 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 693.560673][ T2792] overlayfs: failed to clone upperpath [ 693.771161][ T2802] 9pnet_fd: Insufficient options for proto=fd [ 693.779785][ T36] audit: type=1400 audit(2016782947.209:51855): avc: denied { create } for pid=2801 comm="syz.1.11960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 693.800461][ T36] audit: type=1400 audit(2016782947.209:51856): avc: denied { write } for pid=2801 comm="syz.1.11960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 694.062270][ T2819] /dev/loop0: Can't lookup blockdev [ 694.214158][ T2828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11969'. [ 694.593069][ T2830] /dev/rnullb0: Can't lookup blockdev [ 694.657020][ T2840] netlink: 'syz.5.11975': attribute type 1 has an invalid length. [ 694.665072][ T2840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11975'. [ 694.752508][ T36] audit: type=1400 audit(2016782948.189:51857): avc: denied { bind } for pid=2847 comm="syz.1.11981" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 694.773499][ T36] audit: type=1400 audit(2016782948.189:51858): avc: denied { name_bind } for pid=2847 comm="syz.1.11981" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 694.797614][ T36] audit: type=1400 audit(2016782948.189:51859): avc: denied { node_bind } for pid=2847 comm="syz.1.11981" saddr=255.255.255.255 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 694.825435][ T36] audit: type=1400 audit(2016782948.259:51860): avc: denied { name_bind } for pid=2853 comm="syz.6.11982" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 694.882483][ T36] audit: type=1326 audit(2016782948.319:51861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.11987" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x0 [ 695.277495][ T2884] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11993'. [ 695.524467][ T2903] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.12000'. [ 695.562860][ T2905] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 695.645303][ T2908] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 695.645323][ T2909] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 696.237219][ T2922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12008'. [ 696.891056][ T2938] 9pnet_fd: p9_fd_create_tcp (2938): problem connecting socket to 127.0.0.1 [ 696.900083][ T2937] 9pnet_fd: p9_fd_create_tcp (2937): problem connecting socket to 127.0.0.1 [ 697.432012][ T2944] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2944 comm=syz.1.12016 [ 697.445133][ T2944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2944 comm=syz.1.12016 [ 697.445556][ T2945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=2945 comm=syz.1.12016 [ 697.472418][ T2944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12016'. [ 698.123541][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 698.123559][ T36] audit: type=1400 audit(2016782951.559:51863): avc: denied { map } for pid=3006 comm="syz.1.12035" path="pipe:[116857]" dev="pipefs" ino=116857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 698.153418][ T36] audit: type=1400 audit(2016782951.559:51864): avc: denied { bpf } for pid=2991 comm="syz.5.12029" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 698.176300][ T3012] 9pnet_fd: p9_fd_create_tcp (3012): problem connecting socket to 127.0.0.1 [ 698.196382][ T3014] netlink: 'syz.1.12037': attribute type 4 has an invalid length. [ 698.204526][ T3014] netlink: 'syz.1.12037': attribute type 4 has an invalid length. [ 698.216367][ T3015] netlink: 'syz.1.12037': attribute type 4 has an invalid length. [ 698.522388][ T3023] overlayfs: failed to clone upperpath [ 698.689956][ T3056] 9p: Unknown Cache mode or invalid value mmapderfs/binder1 [ 698.709254][ T3060] IPv6: NLM_F_CREATE should be specified when creating new route [ 698.727193][ T36] audit: type=1400 audit(2016782952.159:51865): avc: denied { shutdown } for pid=3059 comm="syz.8.12050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 698.996343][ T3083] fuse: Unknown parameter 'ϖ/I #S݅xLGN0y^Й[f4O60{9' [ 699.007596][ T36] audit: type=1326 audit(2016782952.439:51866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.032088][ T36] audit: type=1326 audit(2016782952.439:51867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.056073][ T36] audit: type=1326 audit(2016782952.449:51868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.080240][ T36] audit: type=1326 audit(2016782952.449:51869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.104097][ T36] audit: type=1326 audit(2016782952.449:51870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.127663][ T36] audit: type=1326 audit(2016782952.449:51871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.151449][ T36] audit: type=1326 audit(2016782952.449:51872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3082 comm="syz.5.12056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f469938eec9 code=0x7ffc0000 [ 699.185267][ T3087] netlink: 'syz.5.12058': attribute type 5 has an invalid length. [ 699.575120][ T3128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=3128 comm=syz.1.12070 [ 700.245425][ T3134] x_tables: duplicate underflow at hook 4 [ 700.278198][ T3139] /dev/nbd5: Can't lookup blockdev [ 700.562103][ T3153] /dev/rnullb0: Can't lookup blockdev [ 700.612882][ T3163] overlayfs: failed to clone upperpath [ 701.104315][ T3186] overlayfs: missing 'lowerdir' [ 701.733996][ T3207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12102'. [ 702.047743][ T3236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 702.047783][ T3236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:156 [ 702.156223][ T3243] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:159 [ 702.495822][ T3269] netlink: 'syz.6.12121': attribute type 4 has an invalid length. [ 702.528009][ T3269] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.12121'. [ 702.559975][ T3272] netlink: 37 bytes leftover after parsing attributes in process `syz.6.12121'. [ 702.746665][ T3305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12131'. [ 702.757234][ T3305] batadv_slave_1: entered promiscuous mode [ 702.764279][ T3304] batadv_slave_1: left promiscuous mode [ 703.835581][ T3360] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 703.865031][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 703.865056][ T36] audit: type=1400 audit(2016782958.299:51890): avc: denied { audit_read } for pid=3363 comm="syz.5.12154" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 704.330635][ T36] audit: type=1400 audit(2016782958.769:51891): avc: denied { read } for pid=3375 comm="syz.6.12158" path="socket:[117775]" dev="sockfs" ino=117775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 705.087570][ T3423] /dev/nbd5: Can't lookup blockdev [ 705.104502][ T3425] devpts: called with bogus options [ 705.111322][ T36] audit: type=1400 audit(2016782959.549:51892): avc: denied { module_load } for pid=3424 comm="syz.5.12177" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=117881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 705.139321][ T3428] overlayfs: failed to clone upperpath [ 705.494779][ T3439] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 705.494897][ T3439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:174 [ 705.562051][ T3442] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 705.571544][ T3441] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 705.578091][ T3441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 705.586263][ T3441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:176 [ 705.785024][ T3454] overlayfs: failed to clone upperpath [ 705.800598][ T3452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3452 comm=syz.5.12187 [ 706.014507][ T3457] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12188'. [ 706.180160][ T3471] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12192'. [ 706.231268][ T3481] /dev/nullb0: Can't lookup blockdev [ 706.547423][ T36] audit: type=1400 audit(2016782960.979:51893): avc: denied { setopt } for pid=3501 comm="syz.5.12203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 707.327314][ T36] audit: type=1400 audit(2016782961.759:51894): avc: denied { getopt } for pid=3538 comm="syz.5.12215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 707.334166][ T3539] cgroup2: Unknown parameter 'smackfsfloor' [ 707.355553][ T3539] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 707.364826][ T3539] 9pnet: Could not find request transport: xen [ 707.401429][ T3548] fuse: Unknown parameter 'ׂEY$' [ 707.423120][ T3556] netlink: 'syz.5.12221': attribute type 16 has an invalid length. [ 707.431291][ T3556] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.12221'. [ 707.451197][ T3559] /dev/loop5: Can't lookup blockdev [ 707.457009][ T3561] /dev/rnullb0: Can't lookup blockdev [ 707.991161][ T3567] /dev/rnullb0: Can't lookup blockdev [ 708.293731][ T3577] tmpfs: Bad value for 'nr_inodes' [ 708.630184][ T36] audit: type=1400 audit(2016782963.069:51895): avc: denied { append } for pid=3602 comm="syz.8.12237" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 708.656718][ T36] audit: type=1400 audit(2016782963.069:51896): avc: denied { append } for pid=3602 comm="syz.8.12237" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 708.716824][ T36] audit: type=1400 audit(2016782963.149:51897): avc: denied { setopt } for pid=3612 comm="syz.8.12241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 708.741309][ T3613] futex_wake_op: syz.8.12241 tries to shift op by -1; fix this program [ 708.749709][ T36] audit: type=1400 audit(2016782963.179:51898): avc: denied { append } for pid=3612 comm="syz.8.12241" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 708.784058][ T36] audit: type=1400 audit(2016782963.179:51899): avc: denied { ioctl } for pid=3612 comm="syz.8.12241" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 709.082890][ T3628] overlayfs: failed to resolve './file0': -2 [ 709.089277][ T3632] overlayfs: failed to resolve './file0': -2 [ 709.097718][ T3635] overlayfs: failed to clone upperpath [ 709.129067][ T3637] netlink: 'syz.5.12249': attribute type 1 has an invalid length. [ 709.410072][ T3672] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 709.489916][ T3679] 9pnet_fd: Insufficient options for proto=fd [ 709.712552][ T3702] EXT4-fs: dax option not supported [ 709.879197][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 709.879217][ T36] audit: type=1400 audit(2016782964.309:51901): avc: denied { read } for pid=3707 comm="syz.8.12272" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 709.942688][ T36] audit: type=1400 audit(2016782964.309:51902): avc: denied { open } for pid=3707 comm="syz.8.12272" path="/dev/ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 709.979844][ T36] audit: type=1400 audit(2016782964.359:51903): avc: denied { ioctl } for pid=3707 comm="syz.8.12272" path="/dev/ptp0" dev="devtmpfs" ino=196 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 710.039781][ T36] audit: type=1326 audit(2016782964.469:51905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.079772][ T36] audit: type=1326 audit(2016782964.469:51906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.129776][ T36] audit: type=1326 audit(2016782964.469:51907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.153884][ T36] audit: type=1326 audit(2016782964.469:51904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.219902][ T36] audit: type=1326 audit(2016782964.469:51908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.249925][ T36] audit: type=1326 audit(2016782964.469:51909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.275791][ T36] audit: type=1326 audit(2016782964.469:51910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3710 comm="syz.8.12273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7ffc0000 [ 710.388633][ T3719] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3719 comm=syz.1.12275 [ 710.422377][ T3724] veth1: entered allmulticast mode [ 710.626787][ T3747] tipc: Cannot configure node identity twice [ 710.837143][ T3765] netlink: 'syz.5.12292': attribute type 63 has an invalid length. [ 710.845642][ T3765] netlink: 5 bytes leftover after parsing attributes in process `syz.5.12292'. [ 711.255528][ T3723] veth1: left allmulticast mode [ 711.643466][ T3826] 9pnet_fd: Insufficient options for proto=fd [ 711.746314][ T3845] /dev/rnullb0: Can't lookup blockdev [ 711.746587][ T3846] /dev/rnullb0: Can't lookup blockdev [ 711.896710][ T3860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3860 comm=syz.1.12326 [ 713.317462][ T3916] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 713.375908][ T3916] 9pnet_fd: Insufficient options for proto=fd [ 714.169839][ T3960] rust_binder: Error while translating object. [ 714.169873][ T3960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 714.176308][ T3960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:242 [ 714.333631][ T3974] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12363'. [ 714.410114][ T3980] 9pnet_fd: Insufficient options for proto=fd [ 714.544061][ T3987] /dev/rnullb0: Can't lookup blockdev [ 714.871017][ T4010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 714.878268][ T4010] IPv6: NLM_F_CREATE should be set when creating new route [ 714.885534][ T4010] IPv6: NLM_F_CREATE should be set when creating new route [ 714.923326][ T4005] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.931974][ T4005] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.939137][ T4005] bridge_slave_0: entered allmulticast mode [ 714.945944][ T4005] bridge_slave_0: entered promiscuous mode [ 714.952260][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 714.952279][ T36] audit: type=1400 audit(2000000003.270:51986): avc: denied { create } for pid=4018 comm="syz.8.12377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 714.952788][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.960591][ T4019] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 714.978876][ T4005] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.978956][ T4005] bridge_slave_1: entered allmulticast mode [ 714.979514][ T4005] bridge_slave_1: entered promiscuous mode [ 714.987180][ T36] audit: type=1400 audit(2000000003.270:51987): avc: denied { connect } for pid=4018 comm="syz.8.12377" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 714.998970][ T4019] rust_binder: Write failure EINVAL in pid:267 [ 715.002022][ T36] audit: type=1400 audit(2000000003.270:51988): avc: denied { name_connect } for pid=4018 comm="syz.8.12377" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 715.117175][ T4005] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.124830][ T4005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.132278][ T4005] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.139360][ T4005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.168788][T32581] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.178768][T32581] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.189062][T32581] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.196180][T32581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.206060][T26050] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.213278][T26050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.241163][ T4005] veth0_vlan: entered promiscuous mode [ 715.253525][ T4005] veth1_macvtap: entered promiscuous mode [ 715.310916][ T4049] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 715.310952][ T4049] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:9 [ 715.629804][ T46] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 715.791011][ T46] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 715.799442][ T46] usb 2-1: config 0 has no interface number 0 [ 715.813565][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 715.822831][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.830915][ T46] usb 2-1: Product: syz [ 715.835407][ T46] usb 2-1: Manufacturer: syz [ 715.840059][ T46] usb 2-1: SerialNumber: syz [ 715.845465][ T46] usb 2-1: config 0 descriptor?? [ 716.060063][ T46] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 716.066489][ T46] usb 2-1: No valid video chain found. [ 716.072996][ T46] usb 2-1: USB disconnect, device number 61 [ 716.108657][ T4073] rust_binder: 25: no such ref 1 [ 716.114225][ T4073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25 [ 716.140435][ T4080] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 716.214577][ T4083] rust_binder: 4082 RLIMIT_NICE not set [ 716.223781][ T4082] rust_binder: Write failure EINVAL in pid:34 [ 716.238270][ T362] rust_binder: 4081: removing orphan mapping 0:1168 [ 716.499810][ T46] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 716.651036][ T46] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.660088][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.670248][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.679247][ T46] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.694162][ T46] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 716.703369][ T46] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 716.711455][ T46] usb 2-1: Product: syz [ 716.715731][ T46] usb 2-1: Manufacturer: syz [ 716.722653][ T46] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 716.925063][ T4087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.933845][ T4087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.944082][ T362] usb 2-1: USB disconnect, device number 62 [ 717.195598][ T4110] 9p: Unknown uid 00000000004294967295 [ 717.699882][ T517] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 717.849828][ T517] usb 2-1: Using ep0 maxpacket: 16 [ 717.856186][ T517] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 717.864449][ T517] usb 2-1: config 0 has no interface number 0 [ 717.872235][ T517] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 717.881351][ T517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.889353][ T517] usb 2-1: Product: syz [ 717.893557][ T517] usb 2-1: Manufacturer: syz [ 717.898221][ T517] usb 2-1: SerialNumber: syz [ 717.903861][ T517] usb 2-1: config 0 descriptor?? [ 717.909933][ T517] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 717.916296][ T517] usb 2-1: No valid video chain found. [ 718.183741][ T4115] rust_binder: Error in use_page_slow: ESRCH [ 718.183769][ T4115] rust_binder: use_range failure ESRCH [ 718.190233][ T4115] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 718.195984][ T4115] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 718.204196][ T4115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:41 [ 718.214780][ T362] usb 2-1: USB disconnect, device number 63 [ 718.738576][ T4126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12413'. [ 718.748319][ T4127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12413'. [ 718.912455][ T4137] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.986748][ T4146] __vm_enough_memory: pid: 4146, comm: syz.8.12419, bytes: 18014402804453376 not enough memory for the allocation [ 719.029076][ T4149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.030007][ T4150] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true [ 719.070253][ T4156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4156 comm=syz.8.12422 [ 719.289769][ T36] audit: type=1400 audit(2000000007.600:51989): avc: denied { setattr } for pid=4176 comm="syz.5.12431" name="XDP" dev="sockfs" ino=119762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.345008][ T4180] overlayfs: failed to clone upperpath [ 719.411896][ T36] audit: type=1400 audit(2000000007.730:51990): avc: denied { create } for pid=4183 comm="syz.5.12436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 719.505824][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.512980][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.520589][ T4192] bridge_slave_0: entered allmulticast mode [ 719.527437][ T4192] bridge_slave_0: entered promiscuous mode [ 719.534487][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.541684][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.548768][ T4192] bridge_slave_1: entered allmulticast mode [ 719.555174][ T4192] bridge_slave_1: entered promiscuous mode [ 719.565672][T32581] bridge_slave_1: left allmulticast mode [ 719.571491][T32581] bridge_slave_1: left promiscuous mode [ 719.577211][T32581] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.585209][T32581] bridge_slave_0: left allmulticast mode [ 719.591016][T32581] bridge_slave_0: left promiscuous mode [ 719.596828][T32581] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.697552][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.704675][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.712017][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.719140][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.732530][T32581] veth1_macvtap: left promiscuous mode [ 719.738247][T32581] veth0_vlan: left promiscuous mode [ 719.795857][T32579] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.805785][T32579] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.815902][T26050] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.823022][T26050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.833140][T26050] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.840255][T26050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.870604][ T4192] veth0_vlan: entered promiscuous mode [ 719.882892][ T4192] veth1_macvtap: entered promiscuous mode [ 719.917947][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12433'. [ 719.930476][ T4210] rust_binder: Write failure EFAULT in pid:301 [ 719.932096][ T4208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12433'. [ 719.950580][ T4212] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 719.950601][ T4212] rust_binder: Error while translating object. [ 719.959582][ T4212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 719.966384][ T4212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:303 [ 719.977780][ T4213] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.995561][ T36] audit: type=1400 audit(2000000008.310:51991): avc: denied { unmount } for pid=1000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 720.028141][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.034382][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.040308][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.046150][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.053285][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.059049][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.064965][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.072388][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.078080][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.084423][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.090466][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.096325][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.102160][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.107829][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.113701][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.119316][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.125064][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.131302][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.136906][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.142847][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.148470][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.154312][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.160181][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.165776][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.171816][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.177449][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.183396][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.189030][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.194755][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.199788][ T517] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 720.200870][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.213969][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.219575][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.226285][ T4220] /dev/rnullb0: Can't lookup blockdev [ 720.228876][ T4229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 720.232527][ T4229] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 720.252051][ T36] audit: type=1400 audit(2000000008.570:51992): avc: denied { ioctl } for pid=4230 comm="syz.8.12448" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 720.369884][ T517] usb 3-1: Using ep0 maxpacket: 8 [ 720.376162][ T517] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 720.384507][ T517] usb 3-1: config 179 has no interface number 0 [ 720.391046][ T517] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 720.402563][ T517] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 720.414108][ T517] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 720.424249][ T517] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 720.437730][ T517] usb 3-1: config 179 interface 65 has no altsetting 0 [ 720.444753][ T517] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 720.453901][ T517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.467803][ T4231] SELinux: security_context_str_to_sid () failed with errno=-22 [ 720.667608][ T517] usb 3-1: USB disconnect, device number 13 [ 720.801035][ T4246] overlayfs: failed to clone lowerpath [ 721.377997][ T4283] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 721.378018][ T4283] rust_binder: Error while translating object. [ 721.386852][ T4283] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 721.393355][ T4283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 721.639025][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.655363][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.662538][ T4293] bridge_slave_0: entered allmulticast mode [ 721.668843][ T4293] bridge_slave_0: entered promiscuous mode [ 721.675844][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.683225][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.690477][ T4293] bridge_slave_1: entered allmulticast mode [ 721.696850][ T4293] bridge_slave_1: entered promiscuous mode [ 721.753592][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.760872][ T4293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.768280][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.775357][ T4293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.798082][T27577] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.806423][T27577] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.816327][T26050] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.823459][T26050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.840455][T27577] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.847579][T27577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.879047][ T4293] veth0_vlan: entered promiscuous mode [ 721.886653][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12474'. [ 721.894510][ T4293] veth1_macvtap: entered promiscuous mode [ 721.927572][ T4308] rust_binder: Read failure Err(EAGAIN) in pid:2 [ 722.041835][ T36] audit: type=1400 audit(2000000010.360:51993): avc: denied { ioctl } for pid=4323 comm="syz.6.12479" path="socket:[121230]" dev="sockfs" ino=121230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 722.045276][ T4310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14102 sclass=netlink_route_socket pid=4310 comm=syz.0.12475 [ 722.071052][ T4326] netlink: 'syz.6.12480': attribute type 16 has an invalid length. [ 722.099397][ T4326] netlink: 'syz.6.12480': attribute type 16 has an invalid length. [ 722.139829][ T4330] binder: Bad value for 'stats' [ 722.485662][ T4342] rust_binder: Error while translating object. [ 722.485715][ T4342] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.492400][ T4342] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 722.609420][ T4347] __vm_enough_memory: pid: 4347, comm: syz.0.12488, bytes: 18014402804453376 not enough memory for the allocation [ 722.757618][ T36] audit: type=1326 audit(2000000011.070:51994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.5.12495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f469938eec9 code=0x0 [ 722.795796][ T4367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 722.795833][ T4367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 723.193495][ T4395] tmpfs: Unknown parameter 'e' [ 723.239673][ T36] audit: type=1400 audit(2000000011.550:51995): avc: denied { write } for pid=4400 comm="syz.0.12509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 723.690098][ T36] audit: type=1400 audit(2000000012.010:51996): avc: denied { unmount } for pid=4437 comm="syz.5.12521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 723.793480][ T4454] cannot load conntrack support for proto=3 [ 723.830639][ T4458] overlayfs: failed to clone upperpath [ 724.185941][ T36] audit: type=1326 audit(2000000012.500:51997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.6.12515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 724.226514][ T36] audit: type=1326 audit(2000000012.500:51998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.6.12515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 724.269778][ T36] audit: type=1326 audit(2000000012.500:51999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.6.12515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 724.307924][ T36] audit: type=1326 audit(2000000012.500:52000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4419 comm="syz.6.12515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 724.343463][ T4486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 724.343501][ T4486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:80 [ 724.359194][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12536'. [ 724.410602][ T4488] /dev/rnullb0: Can't open blockdev [ 724.534370][ T4509] netlink: 'syz.5.12542': attribute type 4 has an invalid length. [ 724.554984][ T4509] devpts: called with bogus options [ 724.584614][ T4516] netlink: 'syz.8.12544': attribute type 4 has an invalid length. [ 724.593437][ T4516] netlink: 3649 bytes leftover after parsing attributes in process `syz.8.12544'. [ 724.668323][ T4532] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 724.677962][ T4532] netlink: 452 bytes leftover after parsing attributes in process `syz.5.12549'. [ 724.688654][ T4532] 9pnet_fd: Insufficient options for proto=fd [ 724.724235][T32581] bridge_slave_1: left allmulticast mode [ 724.729988][T32581] bridge_slave_1: left promiscuous mode [ 724.733449][ T4541] netlink: 'syz.5.12552': attribute type 32 has an invalid length. [ 724.735740][T32581] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.751577][T32581] bridge_slave_0: left allmulticast mode [ 724.757303][T32581] bridge_slave_0: left promiscuous mode [ 724.763282][T32581] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.789819][ T517] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 724.902193][T32581] veth1_macvtap: left promiscuous mode [ 724.907852][T32581] veth0_vlan: left promiscuous mode [ 724.950425][ T517] usb 1-1: Using ep0 maxpacket: 8 [ 724.958924][ T517] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 724.967617][ T517] usb 1-1: config 179 has no interface number 0 [ 724.974306][ T517] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 724.985669][ T517] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 724.997186][ T517] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 725.007371][ T517] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 725.021629][ T517] usb 1-1: config 179 interface 65 has no altsetting 0 [ 725.028577][ T517] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 725.037741][ T517] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.250536][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.260467][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.268899][ T4570] netlink: 'syz.8.12562': attribute type 4 has an invalid length. [ 725.270300][ T330] usb 1-1: USB disconnect, device number 38 [ 725.306541][ T4577] overlayfs: failed to resolve './file0/file0': -2 [ 725.323761][ T4582] 9pnet_fd: Insufficient options for proto=fd [ 725.331226][ T4588] 9pnet_fd: Insufficient options for proto=fd [ 725.888639][ T4662] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 725.966672][ T4666] 9pnet_fd: Insufficient options for proto=fd [ 725.992678][ T4668] tipc: Started in network mode [ 725.998192][ T4668] tipc: Node identity ac14140f, cluster identity 4711 [ 726.005217][ T4668] tipc: New replicast peer: 255.255.255.255 [ 726.011411][ T4668] tipc: Enabled bearer , priority 10 [ 726.050964][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 726.050984][ T36] audit: type=1400 audit(2000000014.370:52032): avc: denied { execute } for pid=4671 comm="syz.0.12598" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 726.122903][ T4674] 9pnet_fd: Insufficient options for proto=fd [ 726.143340][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12600'. [ 726.179935][ T36] audit: type=1400 audit(2000000014.500:52033): avc: denied { create } for pid=4679 comm="syz.0.12602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 726.235232][ T4686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=94 sclass=netlink_tcpdiag_socket pid=4686 comm=syz.8.12605 [ 726.287352][ T36] audit: type=1326 audit(2000000014.600:52034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.6.12608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x0 [ 726.444225][ T4707] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12612'. [ 727.009859][T17117] tipc: Node number set to 2886997007 [ 727.066374][ T4721] netlink: 'syz.5.12616': attribute type 16 has an invalid length. [ 727.074453][ T4721] netlink: 'syz.5.12616': attribute type 3 has an invalid length. [ 727.082504][ T4721] netlink: 'syz.5.12616': attribute type 1 has an invalid length. [ 727.090871][ T4721] netlink: 64030 bytes leftover after parsing attributes in process `syz.5.12616'. [ 727.430777][ T36] audit: type=1326 audit(2000000015.750:52035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.455318][ T36] audit: type=1326 audit(2000000015.770:52036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.490672][ T36] audit: type=1326 audit(2000000015.810:52037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.514311][ T36] audit: type=1326 audit(2000000015.810:52038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.550552][ T36] audit: type=1326 audit(2000000015.870:52039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.574904][ T36] audit: type=1326 audit(2000000015.870:52040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.610566][ T36] audit: type=1326 audit(2000000015.930:52041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.6.12621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab8eec9 code=0x7fc00000 [ 727.904204][ T4758] netlink: 396 bytes leftover after parsing attributes in process `syz.8.12628'. [ 727.914264][ T4759] netlink: 396 bytes leftover after parsing attributes in process `syz.8.12628'. [ 728.008143][ T4768] 9pnet_virtio: no channels available for device [ 728.024868][ T4768] netlink: 'syz.8.12630': attribute type 22 has an invalid length. [ 728.888467][ T4828] netlink: 76 bytes leftover after parsing attributes in process `syz.5.12655'. [ 730.289925][ T4880] fuse: Bad value for 'fd' [ 731.173613][ T4896] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 731.831352][ T4921] netlink: 'syz.0.12690': attribute type 1 has an invalid length. [ 732.026218][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12696'. [ 732.239844][ T4936] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12696'. [ 732.249914][ T4936] tipc: Enabling of bearer rejected, failed to enable media [ 732.366954][ T4938] netlink: 'syz.0.12697': attribute type 28 has an invalid length. [ 732.410204][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12700'. [ 732.936535][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.943675][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.951506][ T4964] bridge_slave_0: entered allmulticast mode [ 732.957928][ T4964] bridge_slave_0: entered promiscuous mode [ 732.964604][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.971706][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.978811][ T4964] bridge_slave_1: entered allmulticast mode [ 732.985289][ T4964] bridge_slave_1: entered promiscuous mode [ 733.033672][ T4971] fuse: Bad value for 'fd' [ 733.066814][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.074010][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.081349][ T4964] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.088418][ T4964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.112749][T27577] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.120518][T27577] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.131955][T26050] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.139047][T26050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.147975][T27577] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.155097][T27577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.184381][ T4964] veth0_vlan: entered promiscuous mode [ 733.196928][ T4964] veth1_macvtap: entered promiscuous mode [ 733.229202][ T4984] rust_binder: Write failure EFAULT in pid:2 [ 733.243153][ T4987] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 733.284605][ T36] kauditd_printk_skb: 343 callbacks suppressed [ 733.284625][ T36] audit: type=1326 audit(2000000021.600:52385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4991 comm="syz.5.12712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x0 [ 733.618773][ T36] audit: type=1400 audit(2000000021.930:52386): avc: denied { setattr } for pid=5005 comm="syz.0.12716" name="NETLINK" dev="sockfs" ino=124137 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 733.643170][ T362] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 733.710640][ T5021] netlink: 'syz.0.12721': attribute type 1 has an invalid length. [ 733.779784][ T362] usb 6-1: device descriptor read/64, error -71 [ 734.019847][ T362] usb 6-1: device descriptor read/64, error -71 [ 734.259801][ T362] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 734.293010][ T5028] fuse: Bad value for 'fd' [ 734.353187][T27577] tipc: Left network mode [ 734.358644][T27577] veth1_macvtap: left promiscuous mode [ 734.399805][ T362] usb 6-1: device descriptor read/64, error -71 [ 734.639798][ T362] usb 6-1: device descriptor read/64, error -71 [ 734.706631][ T5044] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12729'. [ 734.716059][ T5044] gretap0: entered promiscuous mode [ 734.750051][ T362] usb usb6-port1: attempt power cycle [ 734.830038][ T5073] fuse: Bad value for 'fd' [ 734.842139][ T5076] overlayfs: empty lowerdir [ 735.089987][ T362] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 735.110966][ T362] usb 6-1: device descriptor read/8, error -71 [ 735.240925][ T362] usb 6-1: device descriptor read/8, error -71 [ 735.479772][ T362] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 735.501015][ T362] usb 6-1: device descriptor read/8, error -71 [ 735.630902][ T362] usb 6-1: device descriptor read/8, error -71 [ 735.741179][ T362] usb usb6-port1: unable to enumerate USB device [ 735.758791][ T5115] netlink: 'syz.0.12751': attribute type 1 has an invalid length. [ 735.766967][ T5115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12751'. [ 735.787342][ T5117] netlink: 'syz.0.12752': attribute type 10 has an invalid length. [ 735.795669][ T5117] netlink: 5 bytes leftover after parsing attributes in process `syz.0.12752'. [ 735.805105][ T5117] bridge_slave_1: left promiscuous mode [ 735.811200][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.820774][ T5118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5118 comm=syz.0.12752 [ 735.849863][ T5121] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 735.862137][ T5121] overlayfs: missing 'lowerdir' [ 735.942502][ T5143] overlay: Unknown parameter 'dont_hash' [ 735.948872][ T5143] overlayfs: failed to clone lowerpath [ 735.954918][ T5143] overlayfs: failed to clone lowerpath [ 735.960919][ T5143] overlayfs: failed to clone lowerpath [ 735.966754][ T5143] overlayfs: failed to clone lowerpath [ 735.972718][ T5143] overlayfs: failed to clone lowerpath [ 735.978586][ T5143] overlayfs: failed to clone lowerpath [ 735.984518][ T5143] overlayfs: failed to clone lowerpath [ 735.990503][ T5143] overlayfs: failed to clone lowerpath [ 735.996442][ T5143] overlayfs: failed to clone lowerpath [ 736.002382][ T5143] overlayfs: failed to clone lowerpath [ 736.008136][ T5143] overlayfs: failed to clone lowerpath [ 736.013993][ T5143] overlayfs: failed to clone lowerpath [ 736.019805][ T5143] overlayfs: failed to clone lowerpath [ 736.025594][ T5143] overlayfs: failed to clone lowerpath [ 736.031393][ T5143] overlayfs: failed to clone lowerpath [ 736.037243][ T5143] overlayfs: failed to clone lowerpath [ 736.043083][ T5143] overlayfs: failed to clone lowerpath [ 736.048948][ T5143] overlayfs: failed to clone lowerpath [ 736.054889][ T5143] overlayfs: failed to clone lowerpath [ 736.060733][ T5143] overlayfs: failed to clone lowerpath [ 736.066640][ T5143] overlayfs: failed to clone lowerpath [ 736.072584][ T5143] overlayfs: failed to clone lowerpath [ 736.078343][ T5143] overlayfs: failed to clone lowerpath [ 736.084250][ T5143] overlayfs: failed to clone lowerpath [ 736.090082][ T5143] overlayfs: failed to clone lowerpath [ 736.095848][ T5143] overlayfs: failed to clone lowerpath [ 736.101977][ T5143] overlayfs: failed to clone lowerpath [ 736.108014][ T5143] overlayfs: failed to clone lowerpath [ 736.113962][ T5143] overlayfs: failed to clone lowerpath [ 736.119914][ T5143] overlayfs: failed to clone lowerpath [ 736.125937][ T5143] overlayfs: failed to clone lowerpath [ 736.132424][ T5143] overlayfs: failed to clone lowerpath [ 736.138287][ T5143] overlayfs: failed to clone lowerpath [ 736.367631][ T36] audit: type=1400 audit(2000000024.680:52387): avc: denied { create } for pid=5176 comm="syz.0.12773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 736.402866][ T5181] sit0: entered promiscuous mode [ 736.410016][ T5181] netlink: 'syz.5.12774': attribute type 1 has an invalid length. [ 736.418207][ T5181] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12774'. [ 736.428799][ T5182] netlink: 'syz.5.12774': attribute type 1 has an invalid length. [ 736.436927][ T5182] netlink: 1 bytes leftover after parsing attributes in process `syz.5.12774'. [ 736.453168][ T5181] !@: renamed from xfrm0 (while UP) [ 736.527738][ T5203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 736.683323][ T36] audit: type=1400 audit(2000000025.000:52388): avc: denied { read } for pid=5202 comm="syz.5.12782" path="socket:[124403]" dev="sockfs" ino=124403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 736.716198][ T36] audit: type=1400 audit(2000000025.000:52389): avc: denied { ioctl } for pid=5202 comm="syz.5.12782" path="socket:[124403]" dev="sockfs" ino=124403 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 737.361988][ T5213] overlayfs: failed to clone lowerpath [ 738.517422][ T5270] fuse: Bad value for 'fd' [ 739.449881][ T330] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 739.462907][ T36] audit: type=1400 audit(2016777472.777:52390): avc: denied { execute } for pid=5285 comm="syz.0.12810" path="/memory.events" dev="rootfs" ino=11909 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 739.592636][ T5308] netlink: 'syz.0.12818': attribute type 32 has an invalid length. [ 739.610830][ T330] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 739.622389][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 739.633332][ T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 739.643223][ T330] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.656280][ T330] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.665371][ T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.674065][ T330] usb 6-1: config 0 descriptor?? [ 740.090483][ T330] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 740.100895][ T330] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 740.110179][ T330] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 740.313282][ T5343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12832'. [ 740.322570][ T5343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12832'. [ 740.331865][ T5343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12832'. [ 740.369778][ T5347] fuse: Bad value for 'fd' [ 740.393212][ T36] audit: type=1400 audit(2016777473.707:52391): avc: denied { execmod } for pid=5283 comm="syz.5.12809" path="/12/cpuacct.usage_sys" dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 741.043100][ T5394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12854'. [ 742.133467][ T5452] fuse: Bad value for 'fd' [ 742.209855][ T10] usb 6-1: reset high-speed USB device number 32 using dummy_hcd [ 742.380134][ T10] usb 6-1: device firmware changed [ 742.387703][T17117] usb 6-1: USB disconnect, device number 32 [ 742.541071][T17117] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 742.700861][T17117] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 742.709607][T17117] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.720053][T17117] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 742.729125][T17117] usb 6-1: config 1 has no interface number 1 [ 742.735488][T17117] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 742.748489][T17117] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.763624][T17117] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.772954][T17117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.781255][T17117] usb 6-1: Product: syz [ 742.785705][T17117] usb 6-1: Manufacturer: syz [ 742.790579][T17117] usb 6-1: SerialNumber: syz [ 742.972418][ T5475] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12890'. [ 743.001834][T17117] usb 6-1: MIDIStreaming interface descriptor not found [ 743.022353][T17117] usb 6-1: USB disconnect, device number 33 [ 743.035289][ T5408] udevd[5408]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 743.799774][ T31] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 743.959873][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 743.966644][ T31] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.978627][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.989087][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 743.992952][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.995910][ T31] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 744.012456][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.013078][ T5505] bridge_slave_0: entered allmulticast mode [ 744.027339][ T5505] bridge_slave_0: entered promiscuous mode [ 744.032824][ T31] usb 6-1: config 0 descriptor?? [ 744.039325][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.046585][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.053795][ T5505] bridge_slave_1: entered allmulticast mode [ 744.060199][ T5505] bridge_slave_1: entered promiscuous mode [ 744.117493][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.124715][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.132061][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.139130][ T5505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.163596][T32579] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.171388][T32579] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.182155][T32579] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.189422][T32579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.198903][T32581] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.206031][T32581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.235860][ T5505] veth0_vlan: entered promiscuous mode [ 744.248340][ T5505] veth1_macvtap: entered promiscuous mode [ 744.448793][ T31] hid-generic 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 744.846133][ T31] usb 6-1: USB disconnect, device number 34 [ 745.371657][ T5544] rust_binder: 69: no such ref 0 [ 745.376870][ T5544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:69 [ 746.949774][T17117] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 747.121241][T17117] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.131602][T17117] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 747.140930][T17117] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 747.159770][T17117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.168714][T17117] usb 6-1: config 0 descriptor?? [ 747.425286][ T31] usb 6-1: USB disconnect, device number 35 [ 747.530111][ T36] audit: type=1400 audit(2016777480.847:52392): avc: denied { ioctl } for pid=5638 comm="syz.7.12954" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 747.822001][ T36] audit: type=1400 audit(2016777481.137:52393): avc: denied { getopt } for pid=5661 comm="syz.7.12962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 747.962641][ T36] audit: type=1400 audit(2016777481.277:52394): avc: denied { setattr } for pid=5668 comm="syz.5.12964" path="socket:[125952]" dev="sockfs" ino=125952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 748.063143][ T36] audit: type=1400 audit(2016777481.377:52395): avc: denied { accept } for pid=5671 comm="syz.5.12965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 748.369143][ T36] audit: type=1326 audit(2016777481.677:52396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5681 comm="syz.8.12969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 748.826288][ T36] audit: type=1400 audit(4033554966.136:52397): avc: denied { sqpoll } for pid=5710 comm="syz.0.12980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 748.880551][ T5720] 9p filesystem being mounted at /212/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 748.902804][ T5722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12984'. [ 749.020869][ T5739] /dev/rnullb0: Can't open blockdev [ 749.172677][ T5760] rust_binder: Failed to allocate buffer. len:96, is_oneway:false [ 749.173117][ T5761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 749.254775][ T5765] /dev/rnullb0: Can't open blockdev [ 749.351186][ T5775] rust_binder: Failed to allocate buffer. len:1168, is_oneway:false [ 749.361758][ T5777] rust_binder: Write failure EINVAL in pid:127 [ 749.851369][ T36] audit: type=1400 audit(4033554967.166:52398): avc: denied { write } for pid=5788 comm="syz.0.13005" path="socket:[127315]" dev="sockfs" ino=127315 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 750.243601][ T5795] veth1: entered allmulticast mode [ 750.300194][ T5798] veth1: left allmulticast mode [ 750.942271][ T36] audit: type=1400 audit(4033554968.256:52399): avc: denied { accept } for pid=5806 comm="syz.0.13013" path="socket:[126576]" dev="sockfs" ino=126576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 751.100409][ T36] audit: type=1400 audit(4033554968.416:52400): avc: denied { lock } for pid=5823 comm="syz.5.13018" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=127369 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 751.239158][ T5857] netlink: 'syz.5.13028': attribute type 32 has an invalid length. [ 751.247165][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13028'. [ 752.079978][ T36] audit: type=1400 audit(4033554969.396:52401): avc: denied { map } for pid=5873 comm="syz.8.13034" path="socket:[127425]" dev="sockfs" ino=127425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 752.182200][ T5886] netlink: 32 bytes leftover after parsing attributes in process `syz.8.13038'. [ 752.734717][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 752.734736][ T36] audit: type=1326 audit(4033554970.046:52403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5919 comm="syz.8.13050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x0 [ 753.674961][ T5929] overlayfs: failed to clone upperpath [ 754.048992][ T36] audit: type=1400 audit(4033554971.356:52404): avc: denied { load_policy } for pid=5943 comm="syz.7.13059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 754.049061][ T5944] SELinux: failed to load policy [ 754.077655][ T5944] bridge0: port 3(veth0_to_team) entered blocking state [ 754.084865][ T5944] bridge0: port 3(veth0_to_team) entered disabled state [ 754.092113][ T5944] veth0_to_team: entered allmulticast mode [ 754.098403][ T5944] veth0_to_team: entered promiscuous mode [ 755.305023][ T5998] netlink: 'syz.5.13078': attribute type 46 has an invalid length. [ 755.405317][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13084'. [ 755.416213][ T6016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6016 comm=syz.0.13085 [ 755.751103][ T6020] netlink: 'syz.8.13087': attribute type 27 has an invalid length. [ 755.844225][ T6036] 9pnet_fd: Insufficient options for proto=fd [ 755.903306][ T6040] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13095'. [ 755.927051][ T36] audit: type=1326 audit(755.545:52405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6041 comm="syz.8.13096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x0 [ 756.025768][ T6061] fuse: Bad value for 'fd' [ 756.026706][ T6060] 9pnet_fd: Insufficient options for proto=fd [ 756.059968][ T6068] overlayfs: failed to resolve './file1': -2 [ 756.074028][ T6070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=6070 comm=syz.5.13106 [ 756.144311][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13108'. [ 756.153543][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13108'. [ 756.385186][ T6093] overlayfs: failed to clone upperpath [ 756.393108][ T6094] overlayfs: failed to clone upperpath [ 756.969004][ T6118] netlink: 'syz.0.13121': attribute type 16 has an invalid length. [ 757.092711][ T6134] binder: Bad value for 'max' [ 757.173107][ T36] audit: type=1400 audit(756.795:52406): avc: denied { connect } for pid=6136 comm="syz.0.13127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 757.254673][ T6142] rust_binder: 59: no such ref 0 [ 757.281211][ T6147] ip6gretap0: mtu less than device minimum [ 757.283305][ T6149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6149 comm=syz.7.13131 [ 757.337074][ T36] audit: type=1400 audit(756.955:52407): avc: denied { map } for pid=6162 comm="syz.7.13136" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 757.360495][ T36] audit: type=1400 audit(756.955:52408): avc: denied { execute } for pid=6162 comm="syz.7.13136" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 757.514040][ T6178] rust_binder: Write failure EFAULT in pid:73 [ 757.526989][ T6180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 757.533681][ T36] audit: type=1400 audit(757.165:52409): avc: denied { shutdown } for pid=6179 comm="syz.7.13142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 757.537253][ T6180] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:75 [ 757.712847][ T6187] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 757.729343][ T6187] rust_binder: Write failure EINVAL in pid:79 [ 757.942792][ T6204] fuse: Bad value for 'group_id' [ 757.954584][ T6204] fuse: Bad value for 'group_id' [ 757.983983][ T6208] tipc: Enabled bearer , priority 10 [ 758.061561][ T6236] __vm_enough_memory: pid: 6236, comm: syz.7.13155, bytes: 18014402804453376 not enough memory for the allocation [ 758.079153][ T6211] cgroup: fork rejected by pids controller in /syz7 [ 758.146645][ T36] audit: type=1400 audit(757.765:52410): avc: denied { map } for pid=6249 comm="syz.7.13157" path="socket:[127960]" dev="sockfs" ino=127960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 758.183663][ T36] audit: type=1400 audit(757.765:52411): avc: denied { read } for pid=6249 comm="syz.7.13157" path="socket:[127960]" dev="sockfs" ino=127960 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 758.478402][ T6300] 9pnet_fd: Insufficient options for proto=fd [ 758.485375][ T6302] 9pnet_fd: Insufficient options for proto=fd [ 758.509071][ T6306] netlink: 'syz.8.13163': attribute type 11 has an invalid length. [ 758.580280][ T6322] cgroup: Bad value for 'name' [ 758.637340][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13168'. [ 759.458316][ T6349] overlayfs: failed to clone upperpath [ 759.479644][ T6355] syz.8.13179: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0 [ 759.495077][ T6355] CPU: 1 UID: 0 PID: 6355 Comm: syz.8.13179 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 759.495114][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 759.495133][ T6355] Call Trace: [ 759.495143][ T6355] [ 759.495154][ T6355] __dump_stack+0x21/0x30 [ 759.495195][ T6355] dump_stack_lvl+0x10c/0x190 [ 759.495230][ T6355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 759.495265][ T6355] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 759.495324][ T6355] dump_stack+0x19/0x20 [ 759.495354][ T6355] warn_alloc+0x1bc/0x2a0 [ 759.495387][ T6355] ? stack_depot_save_flags+0x38/0x800 [ 759.495416][ T6355] ? __cfi_warn_alloc+0x10/0x10 [ 759.495458][ T6355] ? kasan_save_track+0x4f/0x80 [ 759.495484][ T6355] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 759.495507][ T6355] ? xskq_create+0x68/0x2a0 [ 759.495538][ T6355] ? xsk_init_queue+0xb6/0x120 [ 759.495570][ T6355] ? xsk_setsockopt+0x43f/0x6f0 [ 759.495599][ T6355] ? do_sock_setsockopt+0x26a/0x400 [ 759.495633][ T6355] ? __x64_sys_setsockopt+0x1b8/0x250 [ 759.495665][ T6355] ? x64_sys_call+0x2adc/0x2ee0 [ 759.495702][ T6355] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 759.495743][ T6355] __vmalloc_node_range_noprof+0x135/0x1420 [ 759.495785][ T6355] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 759.495821][ T6355] ? avc_has_perm+0x144/0x220 [ 759.495856][ T6355] ? kasan_save_alloc_info+0x40/0x50 [ 759.495891][ T6355] ? __kasan_kmalloc+0x96/0xb0 [ 759.495919][ T6355] vmalloc_user_noprof+0x77/0x90 [ 759.495955][ T6355] ? xskq_create+0xdb/0x2a0 [ 759.495988][ T6355] xskq_create+0xdb/0x2a0 [ 759.496023][ T6355] xsk_init_queue+0xb6/0x120 [ 759.496054][ T6355] xsk_setsockopt+0x43f/0x6f0 [ 759.496083][ T6355] ? __cfi_xsk_setsockopt+0x10/0x10 [ 759.496115][ T6355] ? do_futex+0x309/0x500 [ 759.496136][ T6355] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 759.496158][ T6355] ? security_socket_setsockopt+0x33/0xd0 [ 759.496175][ T6355] ? __cfi_xsk_setsockopt+0x10/0x10 [ 759.496198][ T6355] do_sock_setsockopt+0x26a/0x400 [ 759.496221][ T6355] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 759.496247][ T6355] __x64_sys_setsockopt+0x1b8/0x250 [ 759.496271][ T6355] x64_sys_call+0x2adc/0x2ee0 [ 759.496296][ T6355] do_syscall_64+0x58/0xf0 [ 759.496317][ T6355] ? clear_bhb_loop+0x50/0xa0 [ 759.496334][ T6355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 759.496360][ T6355] RIP: 0033:0x7f07e6d8eec9 [ 759.496376][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.496390][ T6355] RSP: 002b:00007f07e7c8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 759.496409][ T6355] RAX: ffffffffffffffda RBX: 00007f07e6fe5fa0 RCX: 00007f07e6d8eec9 [ 759.496423][ T6355] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 759.496444][ T6355] RBP: 00007f07e6e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 759.496456][ T6355] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.496468][ T6355] R13: 00007f07e6fe6038 R14: 00007f07e6fe5fa0 R15: 00007ffc916bdab8 [ 759.496484][ T6355] [ 759.496525][ T6355] Mem-Info: [ 759.802495][ T6355] active_anon:25180 inactive_anon:3133 isolated_anon:0 [ 759.802495][ T6355] active_file:7431 inactive_file:18578 isolated_file:0 [ 759.802495][ T6355] unevictable:19346 dirty:49 writeback:0 [ 759.802495][ T6355] slab_reclaimable:6063 slab_unreclaimable:87127 [ 759.802495][ T6355] mapped:39703 shmem:18488 pagetables:1075 [ 759.802495][ T6355] sec_pagetables:0 bounce:0 [ 759.802495][ T6355] kernel_misc_reclaimable:0 [ 759.802495][ T6355] free:1423200 free_pcp:2817 free_cma:0 [ 759.848877][ T6355] Node 0 active_anon:100776kB inactive_anon:12532kB active_file:29724kB inactive_file:74312kB unevictable:77384kB isolated(anon):0kB isolated(file):0kB mapped:158812kB dirty:196kB writeback:0kB shmem:73952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:10080kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no [ 759.867094][ T6365] lo: entered allmulticast mode [ 759.882325][ T6355] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:1208kB free_cma:0kB [ 759.895398][ T6365] lo: left allmulticast mode [ 759.918284][ T6355] lowmem_reserve[]: 0 3921 3921 [ 759.931899][ T6355] Normal free:2732492kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100760kB inactive_anon:12532kB active_file:29724kB inactive_file:74312kB unevictable:77384kB writepending:196kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5744kB local_pcp:2968kB free_cma:0kB [ 759.970426][ T6355] lowmem_reserve[]: 0 0 0 [ 759.975069][ T6355] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 759.991044][ T6355] Normal: 161*4kB (UME) 236*8kB (ME) 250*16kB (UME) 345*32kB (UME) 350*64kB (UME) 479*128kB (UME) 307*256kB (UME) 105*512kB (UME) 30*1024kB (UME) 6*2048kB (UME) 598*4096kB (UM) = 2726052kB [ 760.010254][ T6355] 67043 total pagecache pages [ 760.015150][ T6355] 3716 pages in swap cache [ 760.020190][ T6355] Free swap = 109684kB [ 760.024532][ T6355] Total swap = 124996kB [ 760.028933][ T6355] 2097051 pages RAM [ 760.033532][ T6355] 0 pages HighMem/MovableOnly [ 760.038688][ T6355] 351537 pages reserved [ 760.043140][ T6355] 0 pages cma reserved [ 760.052581][ T6355] Memory allocations: [ 760.059644][ T6355] 0 B 0 init/main.c:1370 func:do_initcalls [ 760.067814][ T6355] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 760.076249][ T6355] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 760.084474][ T6355] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 760.097348][ T6355] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 760.106099][ T6355] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 760.109974][ T6376] overlayfs: failed to clone upperpath [ 760.117457][ T6355] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 760.128268][ T6355] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 760.130515][ T36] audit: type=1400 audit(759.755:52412): avc: denied { watch } for pid=6375 comm="syz.5.13188" path="/" dev="ramfs" ino=129090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 760.136302][ T6355] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 760.165481][ T6355] 0 B 0 init/initramfs.c:101 func:find_link [ 760.757190][ T6400] cannot load conntrack support for proto=3 [ 760.766418][ T6404] cannot load conntrack support for proto=3 [ 761.269060][ T6453] netlink: 'syz.8.13215': attribute type 4 has an invalid length. [ 761.277064][ T6453] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.13215'. [ 761.301440][ T6456] netlink: 'syz.8.13215': attribute type 4 has an invalid length. [ 761.309585][ T6456] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.13215'. [ 761.526634][ T6492] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 761.529179][ T36] audit: type=1400 audit(761.145:52413): avc: denied { relabelfrom } for pid=6490 comm="syz.8.13229" name="NETLINK" dev="sockfs" ino=128404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 761.560874][ T36] audit: type=1400 audit(761.165:52414): avc: denied { relabelto } for pid=6490 comm="syz.8.13229" name="NETLINK" dev="sockfs" ino=128404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:checkpolicy_exec_t:s0" [ 761.605624][ T6496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=6496 comm=syz.7.13231 [ 761.620079][ T6496] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 761.620117][ T6496] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:185 [ 761.774832][ T6515] rust_binder: Read failure Err(EAGAIN) in pid:187 [ 761.785466][ T6515] rust_binder: 187: no such ref 3 [ 761.798699][ T6515] rust_binder: 187: no such ref 3 [ 761.804124][ T6515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:187 [ 761.825704][ T6517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 761.836244][ T6517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 761.864066][ T6526] rust_binder: Write failure EINVAL in pid:191 [ 761.888619][ T6529] /dev/loop0: Can't lookup blockdev [ 761.962868][ T36] audit: type=1400 audit(761.585:52415): avc: denied { read } for pid=6539 comm="syz.7.13248" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 761.990768][ T36] audit: type=1400 audit(761.605:52416): avc: denied { open } for pid=6539 comm="syz.7.13248" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 762.139771][ T6559] batadv_slave_1: entered promiscuous mode [ 762.200940][ T6558] batadv_slave_1: left promiscuous mode [ 762.436379][ T6568] overlayfs: failed to clone upperpath [ 762.542743][ T6574] netlink: 'syz.8.13260': attribute type 13 has an invalid length. [ 763.273151][ T6581] bpf: Bad value for 'uid' [ 763.437080][ T6609] overlayfs: failed to clone lowerpath [ 764.094681][ T36] audit: type=1400 audit(763.715:52417): avc: denied { map } for pid=6633 comm="syz.0.13283" path="socket:[129392]" dev="sockfs" ino=129392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 764.118798][ T36] audit: type=1400 audit(763.725:52418): avc: denied { getopt } for pid=6633 comm="syz.0.13283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 765.009596][ T6658] /dev/rnullb0: Can't open blockdev [ 765.154743][ T6669] netlink: 188 bytes leftover after parsing attributes in process `syz.5.13297'. [ 765.378373][ T36] audit: type=1400 audit(764.995:52419): avc: denied { write } for pid=46 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=129487 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 765.415188][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13311'. [ 765.437362][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13312'. [ 765.557683][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13320'. [ 765.771307][ T6748] netlink: 44 bytes leftover after parsing attributes in process ` [ 765.771307][ T6748]  !'. [ 765.843079][ T6750] netlink: 'syz.8.13326': attribute type 2 has an invalid length. [ 765.977682][ T6758] 9pnet_fd: Insufficient options for proto=fd [ 766.007455][ T36] audit: type=1326 audit(765.625:52420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6759 comm="syz.7.13329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f3a8c18eec9 code=0x0 [ 766.180637][ T36] audit: type=1326 audit(765.805:52421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.0.13332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9afd78eec9 code=0x0 [ 766.203276][ T36] audit: type=1326 audit(765.805:52422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6769 comm="syz.0.13332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9afd78eec9 code=0x0 [ 766.672920][ T36] audit: type=1326 audit(766.295:52423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.8.13326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 766.696014][ T36] audit: type=1326 audit(766.295:52424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.8.13326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 766.719125][ T36] audit: type=1326 audit(766.295:52425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.8.13326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 766.742512][ T36] audit: type=1326 audit(766.295:52426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6749 comm="syz.8.13326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 766.832314][ T6825] veth1: entered allmulticast mode [ 766.897153][ T6830] veth1: left allmulticast mode [ 766.960386][ T6839] netlink: 'syz.8.13358': attribute type 19 has an invalid length. [ 767.091479][ T6842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6842 comm=syz.0.13359 [ 767.190081][ T6839] incfs: ino conflict with backing FS 1 [ 768.374122][ T6886] 9pnet_fd: Insufficient options for proto=fd [ 768.664744][ T6919] netlink: 80 bytes leftover after parsing attributes in process `syz.0.13385'. [ 769.001007][ T6961] overlayfs: failed to clone lowerpath [ 769.032241][ T6966] netlink: 'syz.8.13401': attribute type 27 has an invalid length. [ 769.040568][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13401'. [ 769.088665][ T6976] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.098407][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.108092][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.117394][ T6976] rust_binder: Write failure EFAULT in pid:221 [ 769.117548][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.133424][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.143250][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.160449][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.172386][ T6975] netlink: 104 bytes leftover after parsing attributes in process `syz.7.13404'. [ 769.206614][ T6991] fuse: Bad value for 'group_id' [ 769.214265][ T36] kauditd_printk_skb: 65 callbacks suppressed [ 769.214287][ T36] audit: type=1400 audit(768.845:52492): avc: denied { setcheckreqprot } for pid=6992 comm="syz.7.13411" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 769.215150][ T6991] fuse: Bad value for 'group_id' [ 769.228795][ T6995] cgroup: none used incorrectly [ 769.341244][ T7011] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 769.341247][ T36] audit: type=1400 audit(768.965:52493): avc: denied { getattr } for pid=7010 comm="syz.7.13418" name="/" dev="incremental-fs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 769.927489][ T7026] netlink: 'syz.5.13424': attribute type 28 has an invalid length. [ 769.949503][ T7031] netlink: 'syz.5.13425': attribute type 13 has an invalid length. [ 770.009890][ T7042] overlayfs: failed to clone lowerpath [ 770.129563][ T36] audit: type=1326 audit(769.745:52494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7049 comm="syz.0.13432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9afd78eec9 code=0x0 [ 770.806441][ T36] audit: type=1326 audit(770.425:52495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 770.830156][ T36] audit: type=1326 audit(770.425:52496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 770.853387][ T36] audit: type=1326 audit(770.425:52497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 770.876813][ T36] audit: type=1326 audit(770.425:52498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 770.900136][ T36] audit: type=1326 audit(770.425:52499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 770.923308][ T36] audit: type=1326 audit(770.425:52500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f218cb8d710 code=0x7ffc0000 [ 770.931164][ T7080] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 770.946890][ T36] audit: type=1326 audit(770.425:52501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7073 comm="syz.5.13439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ffc0000 [ 771.111036][ T7094] tc_dump_action: action bad kind [ 772.720956][ T7143] netlink: 'syz.8.13462': attribute type 16 has an invalid length. [ 772.989190][ T7178] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7178 comm=syz.8.13475 [ 773.040166][ T7187] netlink: 'syz.0.13480': attribute type 64 has an invalid length. [ 773.058572][ T7187] netlink: 'syz.0.13480': attribute type 4 has an invalid length. [ 773.079874][ T7187] netlink: 'syz.0.13480': attribute type 4 has an invalid length. [ 773.340040][ T7219] 9pnet_fd: Insufficient options for proto=fd [ 773.583825][ T7241] devpts: called with bogus options [ 773.876464][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7249 comm=syz.5.13503 [ 773.889923][ T7250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7250 comm=syz.5.13503 [ 773.927178][ T7256] __nla_validate_parse: 41 callbacks suppressed [ 773.927201][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13505'. [ 774.085645][ T7280] netlink: 68 bytes leftover after parsing attributes in process `syz.5.13514'. [ 774.247063][ T7303] devpts: called with bogus options [ 774.294103][ T7307] netlink: 'syz.5.13524': attribute type 4 has an invalid length. [ 774.302222][ T7307] netlink: 17 bytes leftover after parsing attributes in process `syz.5.13524'. [ 774.313633][ T7308] netlink: 'syz.5.13524': attribute type 1 has an invalid length. [ 774.321531][ T7308] netlink: 'syz.5.13524': attribute type 2 has an invalid length. [ 774.341066][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 774.341087][ T36] audit: type=1326 audit(773.968:52543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7311 comm="syz.5.13526" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f218cb8eec9 code=0x0 [ 774.494091][ T36] audit: type=1400 audit(774.109:52544): avc: denied { shutdown } for pid=7319 comm="syz.0.13529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 775.086074][ T7347] overlayfs: failed to clone upperpath [ 775.577484][ T36] audit: type=1326 audit(775.131:52545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7380 comm="syz.0.13547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9afd78eec9 code=0x0 [ 776.230587][ T7396] netlink: 'syz.5.13552': attribute type 12 has an invalid length. [ 776.604805][ T7410] rust_binder: 248: no such ref 0 [ 776.609973][ T7410] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 776.617347][ T7410] rust_binder: 248: no such ref 2 [ 776.622978][ T7410] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 776.636113][ T7413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 776.644983][ T7412] rust_binder: Error while translating object. [ 776.651657][ T7412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 776.658198][ T7412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:250 [ 776.682269][ T7416] netlink: 'syz.7.13558': attribute type 3 has an invalid length. [ 776.699661][ T7416] netlink: 944 bytes leftover after parsing attributes in process `syz.7.13558'. [ 776.713502][ T7416] binder: Binderfs stats mode cannot be changed during a remount [ 776.788536][ T36] audit: type=1400 audit(776.257:52546): avc: denied { lock } for pid=7432 comm="syz.0.13564" path="socket:[130804]" dev="sockfs" ino=130804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 776.795550][ T7421] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:255 [ 776.814960][ T36] audit: type=1400 audit(776.286:52547): avc: denied { write } for pid=7419 comm="syz.7.13560" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 776.851340][ T36] audit: type=1400 audit(776.286:52548): avc: denied { ioctl } for pid=7419 comm="syz.7.13560" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 776.878237][ T7436] netlink: 'syz.7.13560': attribute type 16 has an invalid length. [ 776.886194][ T7436] netlink: 'syz.7.13560': attribute type 3 has an invalid length. [ 776.894082][ T7436] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.13560'. [ 777.352925][ T7459] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13573'. [ 777.363448][ T7459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=7459 comm=syz.8.13573 [ 777.426329][ T7470] overlayfs: failed to clone upperpath [ 777.444411][ T7474] tipc: Enabling not permitted [ 777.450220][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 777.470824][ T7476] netlink: 156 bytes leftover after parsing attributes in process `syz.8.13580'. [ 777.507533][ T7480] netlink: 92 bytes leftover after parsing attributes in process `syz.8.13582'. [ 777.863860][ T7487] rust_binder: 267: no such ref 3 [ 777.869137][ T7487] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 777.876318][ T7487] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 777.883453][ T7487] rust_binder: 267: no such ref 0 [ 777.888554][ T7487] rust_binder: 267: no such ref 0 [ 778.308264][ T36] audit: type=1400 audit(778.693:52549): avc: denied { nlmsg_read } for pid=7531 comm="syz.8.13603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 778.696786][ T36] audit: type=1326 audit(779.050:52550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.7.13605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a8c18eec9 code=0x0 [ 778.765863][ T36] audit: type=1400 audit(779.115:52551): avc: denied { read } for pid=7542 comm="syz.7.13606" name="usbmon1" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 778.789098][ T36] audit: type=1400 audit(779.115:52552): avc: denied { open } for pid=7542 comm="syz.7.13606" path="/dev/usbmon1" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 778.909345][ T7565] tipc: Enabling of bearer rejected, failed to enable media [ 778.919345][ T7565] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 778.928187][ T7565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 778.960490][ T7556] 9pnet: Could not find request transport: d [ 778.967159][ T7556] batadv_slave_0: entered promiscuous mode [ 778.974453][ T7556] batadv_slave_0: left promiscuous mode [ 778.995131][ T7572] /dev/rnullb0: Can't open blockdev [ 779.013861][ T7574] __vm_enough_memory: pid: 7574, comm: syz.7.13617, bytes: 18014402804453376 not enough memory for the allocation [ 779.976552][ T7597] rust_binder: Got transaction with invalid offset. [ 779.976586][ T7597] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 779.983513][ T7597] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:308 [ 780.010230][ T7599] input: syz0 as /devices/virtual/input/input51 [ 780.026997][ T36] audit: type=1400 audit(33548.299:52553): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=768 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.049670][ T36] audit: type=1400 audit(33548.299:52554): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=768 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.072824][ T36] audit: type=1400 audit(33548.299:52555): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=768 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 780.213879][ T7621] netlink: 'syz.5.13633': attribute type 27 has an invalid length. [ 780.224105][ T7621] sit0: left promiscuous mode [ 780.724569][ T7655] overlay: ./file1 is not a directory [ 780.724824][ T36] audit: type=1400 audit(33548.956:52556): avc: denied { mounton } for pid=7649 comm="syz.0.13644" path="/bus" dev="rootfs" ino=116613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 780.924323][ T36] audit: type=1326 audit(33549.134:52557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.0.13646" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9afd78eec9 code=0x0 [ 782.187952][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13653'. [ 782.197587][ T7674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7674 comm=syz.5.13653 [ 782.398612][ T7677] netlink: 104 bytes leftover after parsing attributes in process `syz.8.13652'. [ 783.067284][ T36] audit: type=1326 audit(33551.152:52558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.8.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 783.090865][ T36] audit: type=1326 audit(33551.152:52559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.8.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 783.114285][ T36] audit: type=1326 audit(33551.152:52560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.8.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 783.137744][ T36] audit: type=1326 audit(33551.152:52561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.8.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 783.161471][ T36] audit: type=1326 audit(33551.152:52562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7671 comm="syz.8.13652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x7fc00000 [ 783.215387][ T7706] 9pnet_fd: Insufficient options for proto=fd [ 783.248974][ T7711] tipc: Started in network mode [ 783.254073][ T7711] tipc: Node identity ac14140f, cluster identity 6 [ 783.260769][ T7711] tipc: New replicast peer: 255.255.255.255 [ 783.267106][ T7711] tipc: Enabled bearer , priority 10 [ 783.274534][ T7711] bridge0: port 3(veth1_macvtap) entered blocking state [ 783.281539][ T7711] bridge0: port 3(veth1_macvtap) entered disabled state [ 783.288808][ T7711] veth1_macvtap: entered allmulticast mode [ 783.300094][ T7711] veth1_macvtap: left allmulticast mode [ 783.473847][ T7730] netlink: 9 bytes leftover after parsing attributes in process `syz.8.13675'. [ 783.483048][ T7730] 0{: renamed from gretap0 (while UP) [ 783.489439][ T7730] 0{: entered allmulticast mode [ 783.494723][ T7730] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 783.945879][ T7735] netlink: 'syz.0.13677': attribute type 1 has an invalid length. [ 784.169563][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13684'. [ 784.421524][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13701'. [ 784.465002][ T10] tipc: Node number set to 2886997007 [ 784.830940][ T7822] 9pnet_fd: Insufficient options for proto=fd [ 785.435328][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 785.435348][ T36] audit: type=1400 audit(33554.377:52568): avc: denied { ioctl } for pid=7862 comm="syz.7.13722" path="/" dev="configfs" ino=439 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.593705][ T7879] overlayfs: failed to clone upperpath [ 785.905347][ T7896] overlayfs: failed to clone upperpath [ 785.912413][ T7897] overlayfs: failed to resolve './file1': -2 [ 786.033488][ T7917] netlink: 'syz.0.13739': attribute type 16 has an invalid length. [ 786.041558][ T7917] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.13739'. [ 794.197015][ T7934] overlayfs: failed to clone upperpath [ 794.237543][ T7948] overlayfs: failed to clone upperpath [ 794.272544][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13753'. [ 794.286634][ T7951] netlink: 152 bytes leftover after parsing attributes in process `syz.7.13753'. [ 794.320087][ T36] audit: type=1326 audit(33562.708:52569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.343454][ T36] audit: type=1326 audit(33562.708:52570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.367010][ T36] audit: type=1326 audit(33562.708:52571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.390324][ T36] audit: type=1326 audit(33562.708:52572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.415388][ T36] audit: type=1326 audit(33562.708:52573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.438755][ T36] audit: type=1326 audit(33562.708:52574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.462060][ T36] audit: type=1326 audit(33562.708:52575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.485776][ T36] audit: type=1326 audit(33562.708:52576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.509487][ T36] audit: type=1326 audit(33562.708:52577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 794.532856][ T36] audit: type=1326 audit(33562.708:52578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.5.13757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f218cb8eec9 code=0x7ff00000 [ 795.111685][ T8012] fuse: Bad value for 'fd' [ 795.358226][ T8029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8029 comm=syz.5.13781 [ 795.386502][ T8033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 795.442270][ T8048] overlayfs: failed to clone upperpath [ 795.460846][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13789'. [ 795.471324][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13789'. [ 795.543063][ T8056] overlayfs: failed to clone upperpath [ 795.548843][ T8058] overlayfs: failed to clone upperpath [ 795.759766][ T8088] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13800'. [ 795.971980][ T8132] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13816'. [ 796.110724][ T8144] overlayfs: failed to clone upperpath [ 796.576554][ T8163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13826'. [ 798.049227][ T8272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8272 comm=syz.8.13864 [ 798.980787][ T8319] cgroup2: Unknown parameter 'pids_localevents' [ 799.432997][ T8337] tipc: Started in network mode [ 799.438027][ T8337] tipc: Node identity , cluster identity 4711 [ 799.444211][ T8337] tipc: Failed to set node id, please configure manually [ 799.451660][ T8337] tipc: Enabling of bearer rejected, failed to enable media [ 799.539896][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13889'. [ 799.951644][ T8375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13900'. [ 799.965952][ T8375] netlink: 59 bytes leftover after parsing attributes in process `syz.5.13900'. [ 799.975132][ T8375] netlink: 59 bytes leftover after parsing attributes in process `syz.5.13900'. [ 800.185866][ T36] kauditd_printk_skb: 130 callbacks suppressed [ 800.185887][ T36] audit: type=1326 audit(33568.206:52709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.216743][ T36] audit: type=1326 audit(33568.206:52710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.240546][ T36] audit: type=1326 audit(33568.206:52711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.264383][ T36] audit: type=1326 audit(33568.206:52712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.288219][ T36] audit: type=1326 audit(33568.206:52713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.313453][ T36] audit: type=1326 audit(33568.206:52714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.337143][ T36] audit: type=1326 audit(33568.206:52715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.360820][ T36] audit: type=1326 audit(33568.206:52716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.393927][ T36] audit: type=1326 audit(33568.206:52717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.435213][ T36] audit: type=1326 audit(33568.206:52718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8401 comm="syz.8.13909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07e6d8eec9 code=0x50000 [ 800.821111][ T8405] overlayfs: failed to clone lowerpath [ 801.073551][ T8409] 9pnet_fd: Insufficient options for proto=fd [ 801.097332][ T8412] 9pnet_fd: Insufficient options for proto=fd [ 801.448775][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13929'. [ 802.587092][ T8509] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 802.601091][ T8509] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 802.619575][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13946'. [ 802.654131][ T8511] fuse: Unknown parameter '' [ 802.673751][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13948'. [ 802.776314][ T8522] 9pnet_fd: Insufficient options for proto=fd [ 803.008954][ T8542] overlayfs: failed to clone upperpath [ 803.049302][ T8544] overlayfs: failed to clone upperpath [ 803.464771][ T8560] 9pnet_fd: Insufficient options for proto=fd [ 803.501251][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13968'. [ 803.566384][ T8573] 9pnet_fd: Insufficient options for proto=fd [ 803.777974][ T8594] 9pnet_fd: Insufficient options for proto=fd [ 803.816989][ T8603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=8603 comm=syz.0.13978 [ 803.838150][ T8608] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13979'. [ 803.873253][ T8617] netlink: 'syz.0.13982': attribute type 27 has an invalid length. [ 803.944721][ T8632] tipc: Enabling of bearer rejected, failed to enable media [ 804.428342][ T8667] overlay: ./file0 is not a directory [ 804.545719][ T8683] x_tables: unsorted entry at hook 2 [ 804.579004][ T8687] netlink: 156 bytes leftover after parsing attributes in process `syz.7.14010'. [ 804.654165][ T8704] netlink: 80 bytes leftover after parsing attributes in process `syz.5.14017'. [ 805.484545][ T8756] netlink: 44 bytes leftover after parsing attributes in process `syz.8.14038'. [ 805.499716][ T8756] netlink: 43 bytes leftover after parsing attributes in process `syz.8.14038'. [ 805.509167][ T8756] netlink: 'syz.8.14038': attribute type 6 has an invalid length. [ 805.517266][ T8756] netlink: 'syz.8.14038': attribute type 5 has an invalid length. [ 805.525395][ T8756] netlink: 43 bytes leftover after parsing attributes in process `syz.8.14038'. [ 805.837762][ T8765] netlink: 252 bytes leftover after parsing attributes in process `syz.0.14041'. [ 805.848122][ T8765] IPv6: NLM_F_CREATE should be specified when creating new route [ 806.026312][ T8785] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.14048'. [ 806.477067][ T8791] overlayfs: failed to clone upperpath [ 806.703891][ T8823] veth1: entered allmulticast mode [ 806.717370][ T36] kauditd_printk_skb: 16863 callbacks suppressed [ 806.717391][ T36] audit: type=1400 audit(33574.342:69582): avc: denied { checkpoint_restore } for pid=8826 comm="syz.7.14065" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 807.300226][ T8856] netlink: 120 bytes leftover after parsing attributes in process `syz.8.14071'. [ 807.590331][ T8822] veth1: left allmulticast mode [ 807.608763][ T8869] netlink: 'syz.5.14076': attribute type 15 has an invalid length. [ 807.871685][ T8877] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14080'. [ 808.063223][ T8904] netlink: 'syz.8.14088': attribute type 14 has an invalid length. [ 808.301031][ T8936] netlink: 'syz.7.14102': attribute type 4 has an invalid length. [ 808.309609][ T8936] netlink: 992 bytes leftover after parsing attributes in process `syz.7.14102'. [ 808.909531][ T36] audit: type=1400 audit(33576.396:69583): avc: denied { nlmsg_write } for pid=8954 comm="syz.0.14109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 808.931321][ T36] audit: type=1400 audit(33576.396:69584): avc: denied { audit_write } for pid=8954 comm="syz.0.14109" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 808.953162][ T36] audit: type=1107 audit(33576.396:69585): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 809.183399][ T8976] incfs: iterate_incfs_dir / -22 [ 809.283370][ T36] audit: type=1400 audit(33576.753:69586): avc: denied { append } for pid=8975 comm="syz.8.14117" name="memory.events" dev="incremental-fs" ino=11909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 809.332945][ T8984] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 809.341777][ T8984] overlayfs: missing 'lowerdir' [ 809.347881][ T8984] netlink: 44 bytes leftover after parsing attributes in process `syz.8.14120'. [ 809.357602][ T8984] netlink: 35 bytes leftover after parsing attributes in process `syz.8.14120'. [ 809.366833][ T8984] netlink: 'syz.8.14120': attribute type 6 has an invalid length. [ 809.374848][ T8984] netlink: 'syz.8.14120': attribute type 5 has an invalid length. [ 809.573765][ T9008] veth1: entered allmulticast mode [ 810.235792][ T36] audit: type=1400 audit(33577.635:69587): avc: denied { nlmsg_tty_audit } for pid=9012 comm="syz.8.14130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 810.428828][ T9030] tipc: Enabling of bearer rejected, already enabled [ 810.461295][ T9007] veth1: left allmulticast mode [ 811.011991][ T9057] cgroup: Invalid name [ 811.640667][ T9095] 9pnet_fd: Insufficient options for proto=fd [ 811.709060][ T9106] overlayfs: failed to clone upperpath [ 811.803726][ T9119] incfs: Options parsing error. -22 [ 811.813847][ T9119] incfs: mount failed -22 [ 811.897250][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.909270][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.916830][ T9116] bridge_slave_0: entered allmulticast mode [ 811.923729][ T9116] bridge_slave_0: entered promiscuous mode [ 811.931229][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.939054][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.946536][ T9116] bridge_slave_1: entered allmulticast mode [ 811.952950][ T9116] bridge_slave_1: entered promiscuous mode [ 811.959413][T27577] bridge_slave_0: left allmulticast mode [ 811.965165][T27577] bridge_slave_0: left promiscuous mode [ 811.971421][T27577] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.098554][ T9158] __nla_validate_parse: 1 callbacks suppressed [ 812.098574][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14185'. [ 812.119377][T27577] tipc: Disabling bearer [ 812.124989][T27577] tipc: Disabling bearer [ 812.130384][T27577] tipc: Left network mode [ 812.138308][T27577] veth1_macvtap: left promiscuous mode [ 812.143857][T27577] veth0_vlan: left promiscuous mode [ 812.208345][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.215492][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.222964][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.230128][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.258753][T23058] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.274905][T23058] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.286588][T32579] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.294160][T32579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.306896][T23058] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.314270][T23058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.350546][ T9116] veth0_vlan: entered promiscuous mode [ 812.363912][ T9116] veth1_macvtap: entered promiscuous mode [ 812.394689][ T9179] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2 [ 812.409642][ T9181] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 812.426251][ T9181] rust_binder: Write failure EINVAL in pid:4 [ 812.710601][ T5409] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 812.882553][ T5409] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.895887][ T5409] usb 1-1: config 0 interface 0 has no altsetting 0 [ 812.903493][ T5409] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 812.912810][ T5409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.921195][ T9189] fuse: Unknown parameter '@ ' [ 812.927079][ T5409] usb 1-1: config 0 descriptor?? [ 812.935191][ T9189] fuse: Bad value for 'rootmode' [ 813.578698][ T5409] usbhid 1-1:0.0: can't add hid device: -71 [ 813.591857][ T5409] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 813.606843][ T5409] usb 1-1: USB disconnect, device number 39 [ 814.307171][ T9222] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 814.650735][ T9233] batadv_slave_1: entered promiscuous mode [ 814.663538][ T9233] batadv_slave_1: left promiscuous mode [ 815.066095][ T5409] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 815.215320][ T5409] usb 1-1: device descriptor read/64, error -71 [ 815.481789][ T5409] usb 1-1: device descriptor read/64, error -71 [ 815.666633][ T9267] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 815.680827][ T9267] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 815.692793][ T9267] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 815.748276][ T5409] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 815.897476][ T5409] usb 1-1: device descriptor read/64, error -71 [ 959.940546][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 153s! [syz.5.14194:9192] [ 959.940574][ C0] CPU#0 Utilization every 22s during lockup: [ 959.940583][ C0] #1: 100% system, 1% softirq, 1% hardirq, 0% idle [ 959.940597][ C0] #2: 100% system, 1% softirq, 1% hardirq, 0% idle [ 959.940610][ C0] #3: 100% system, 0% softirq, 1% hardirq, 0% idle [ 959.940623][ C0] #4: 100% system, 1% softirq, 1% hardirq, 0% idle [ 959.940636][ C0] #5: 100% system, 0% softirq, 1% hardirq, 0% idle [ 959.940649][ C0] Modules linked in: [ 959.940662][ C0] CPU: 0 UID: 0 PID: 9192 Comm: syz.5.14194 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 959.940683][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 959.940695][ C0] RIP: 0010:change_mnt_propagation+0x112/0xb00 [ 959.940720][ C0] Code: 24 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 f7 e8 77 4e e7 ff 4d 39 2e 0f 84 8f 00 00 00 <49> 81 c4 d8 00 00 00 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc [ 959.940733][ C0] RSP: 0018:ffffc900026979c0 EFLAGS: 00000202 [ 959.940747][ C0] RAX: 1ffff1102900d804 RBX: ffffffffffffff28 RCX: dffffc0000000000 [ 959.940759][ C0] RDX: ffffc9000a14a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 959.940770][ C0] RBP: ffffc90002697a10 R08: ffff88811752066f R09: 0000000000000000 [ 959.940782][ C0] R10: ffff888117520660 R11: ffffed1022ea40ce R12: ffff88814806c000 [ 959.940793][ C0] R13: ffff888110404660 R14: ffff88814806c020 R15: ffff88814f9d8a80 [ 959.940805][ C0] FS: 00007f218d99d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 959.940904][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 959.940916][ C0] CR2: 0000200000010000 CR3: 0000000114300000 CR4: 00000000003526b0 [ 959.940931][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 959.940941][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 959.940952][ C0] Call Trace: [ 959.940959][ C0] [ 959.940970][ C0] umount_tree+0xdfd/0xf70 [ 959.940995][ C0] ? irqentry_exit+0x4a/0x60 [ 959.941011][ C0] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 959.941046][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 959.941062][ C0] ? __detach_mounts+0x610/0x610 [ 959.941084][ C0] attach_recursive_mnt+0x6df/0x21e0 [ 959.941104][ C0] ? __asan_memset+0x39/0x50 [ 959.941127][ C0] ? graft_tree+0x1c0/0x1c0 [ 959.941143][ C0] ? clone_mnt+0xa27/0xc80 [ 959.941164][ C0] graft_tree+0x157/0x1c0 [ 959.941181][ C0] do_loopback+0x364/0x4b0 [ 959.941204][ C0] ? path_mount+0x1050/0x1050 [ 959.941226][ C0] ? security_capable+0xcf/0xf0 [ 959.941248][ C0] ? ns_capable+0x91/0xf0 [ 959.941270][ C0] path_mount+0x582/0x1050 [ 959.941294][ C0] ? putname+0x113/0x150 [ 959.941310][ C0] __se_sys_mount+0x2bd/0x480 [ 959.941325][ C0] ? __x64_sys_mount+0xf0/0xf0 [ 959.941339][ C0] ? __kasan_check_write+0x18/0x20 [ 959.941362][ C0] ? fpregs_restore_userregs+0x11d/0x260 [ 959.941381][ C0] __x64_sys_mount+0xc3/0xf0 [ 959.941395][ C0] x64_sys_call+0x2021/0x2ee0 [ 959.941419][ C0] do_syscall_64+0x58/0xf0 [ 959.941438][ C0] ? clear_bhb_loop+0x50/0xa0 [ 959.941454][ C0] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 959.941479][ C0] RIP: 0033:0x7f218cb8eec9 [ 959.941494][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.941509][ C0] RSP: 002b:00007f218d99d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 959.941525][ C0] RAX: ffffffffffffffda RBX: 00007f218cde6180 RCX: 00007f218cb8eec9 [ 959.941538][ C0] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 959.941549][ C0] RBP: 00007f218cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 959.941559][ C0] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000000 [ 959.941570][ C0] R13: 00007f218cde6218 R14: 00007f218cde6180 R15: 00007fff9e915368 [ 959.941583][ C0] [ 959.941592][ C0] Sending NMI from CPU 0 to CPUs 1: [ 960.342869][ C1] NMI backtrace for cpu 1 [ 960.342887][ C1] CPU: 1 UID: 0 PID: 9285 Comm: syz.8.14226 Not tainted syzkaller #0 274f9aef60e05467e019488b9f7ece6681bb0342 [ 960.342912][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 960.342923][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 960.342948][ C1] Code: cc cc cc b8 88 2c ed c8 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 32 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 960.342963][ C1] RSP: 0018:ffffc90003a17930 EFLAGS: 000002d3 [ 960.342979][ C1] RAX: ffffffff81439535 RBX: 0000000000000003 RCX: ffff888119c1a600 [ 960.342992][ C1] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 960.343002][ C1] RBP: ffffc90003a17930 R08: ffffffff8720d604 R09: 1ffffffff0e41ac0 [ 960.343016][ C1] R10: dffffc0000000000 R11: fffffbfff0e41ac1 R12: dffffc0000000000 [ 960.343029][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff92000742f28 [ 960.343041][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 960.343057][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.343069][ C1] CR2: 00007f3a8cfe0f98 CR3: 000000015bd70000 CR4: 00000000003526b0 [ 960.343084][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000009800 [ 960.343096][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 960.343107][ C1] Call Trace: [ 960.343114][ C1] [ 960.343123][ C1] kvm_wait+0x1ba/0x220 [ 960.343147][ C1] ? __cfi_kvm_wait+0x10/0x10 [ 960.343170][ C1] __pv_queued_spin_lock_slowpath+0x78d/0xcc0 [ 960.343194][ C1] ? do_syscall_64+0x58/0xf0 [ 960.343216][ C1] ? __cfi___pv_queued_spin_lock_slowpath+0x10/0x10 [ 960.343241][ C1] _raw_spin_lock+0x109/0x120 [ 960.343260][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 960.343280][ C1] mntput_no_expire+0x147/0x6c0 [ 960.343312][ C1] ? __kasan_check_write+0x18/0x20 [ 960.343337][ C1] ? lockref_put_return+0x156/0x1d0 [ 960.343362][ C1] ? mntput+0xd0/0xd0 [ 960.343382][ C1] ? __kasan_check_write+0x18/0x20 [ 960.343407][ C1] ? _raw_spin_lock+0x8c/0x120 [ 960.343427][ C1] mntput+0x63/0xd0 [ 960.343447][ C1] path_put+0x5b/0x70 [ 960.343463][ C1] exit_fs+0xe8/0x160 [ 960.343479][ C1] do_exit+0x98d/0x2630 [ 960.343500][ C1] ? ttwu_do_activate+0x279/0x630 [ 960.343524][ C1] ? preempt_schedule_common+0x2d/0x60 [ 960.343555][ C1] ? __cfi_do_exit+0x10/0x10 [ 960.343574][ C1] ? preempt_schedule+0xb0/0xd0 [ 960.343595][ C1] ? __cfi_preempt_schedule+0x10/0x10 [ 960.343620][ C1] do_group_exit+0x22a/0x300 [ 960.343641][ C1] __x64_sys_exit_group+0x43/0x50 [ 960.343662][ C1] x64_sys_call+0x2ed2/0x2ee0 [ 960.343688][ C1] do_syscall_64+0x58/0xf0 [ 960.343707][ C1] ? clear_bhb_loop+0x50/0xa0 [ 960.343724][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 960.343752][ C1] RIP: 0033:0x7f07e6d8eec9 [ 960.343766][ C1] Code: Unable to access opcode bytes at 0x7f07e6d8ee9f. [ 960.343776][ C1] RSP: 002b:00007ffc916bde18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 960.343802][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f07e6d8eec9 [ 960.343814][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 960.343825][ C1] RBP: 00007ffc916bde7c R08: 00000014916bdf0f R09: 00000000000927c0 [ 960.343837][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000247 [ 960.343848][ C1] R13: 00000000000927c0 R14: 00000000000c64ee R15: 00007ffc916bded0 [ 960.343862][ C1]