last executing test programs: 9m57.173761914s ago: executing program 0 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc1}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x1) (rerun: 64) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x11, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m57.172989384s ago: executing program 0 (id=333): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1000, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r2, @ANYBLOB=',gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=r1, @ANYBLOB="f542b542745f61707072616973652c00"]) (async) r3 = socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000004c0), 0x60000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000000)={{0x2, 0x3, 0x81, 0x1, 0x7}}) (async, rerun: 64) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x20, 0x205, 0x70bd2c, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x24000010) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f0000000380), 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (async) eventfd(0x8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 9m57.166887314s ago: executing program 0 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000900)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x49, 0x38}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) syz_usb_control_io$printer(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_usb_control_io(r1, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x20, 0x14, 0x8, "764f555338902080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x40, 0x13, 0x6}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4008001) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) 9m55.185781506s ago: executing program 0 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {r2, r3+60000000}}, 0x0) timer_delete(r1) chdir(&(0x7f0000000100)='./bus\x00') openat$sysfs(0xffffff9c, 0x0, 0x2200, 0xe0) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x9361, 0x9) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m54.68279649s ago: executing program 0 (id=370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0xffffffffffffffc0, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 9m54.53146401s ago: executing program 0 (id=371): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efivarfs\x00', 0x800010, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(r0, &(0x7f00000001c0)={0x23, 0x6f, 0x2, {0x2, [{0x40, 0x3}, {0x90, 0x4, 0x7}]}}, 0x23) r1 = syz_open_dev$evdev(&(0x7f00000020c0), 0x2, 0x8000) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000002100)=""/197) mount$overlay(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x1000080, &(0x7f0000000140)={[{@xino_off}, {@xino_on}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@index_on}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}) 9m54.470119501s ago: executing program 32 (id=371): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000200)='efivarfs\x00', 0x800010, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWALK(r0, &(0x7f00000001c0)={0x23, 0x6f, 0x2, {0x2, [{0x40, 0x3}, {0x90, 0x4, 0x7}]}}, 0x23) r1 = syz_open_dev$evdev(&(0x7f00000020c0), 0x2, 0x8000) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000002100)=""/197) mount$overlay(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x1000080, &(0x7f0000000140)={[{@xino_off}, {@xino_on}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@index_on}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}]}) 7m20.200081226s ago: executing program 3 (id=2418): setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000001c0)={0x3, 0x0, 0xb}, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) (async) sendto$inet6(r1, &(0x7f0000000200)="4c00000012001f151ccdab049c723fd078400200000000c055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bd4d1e75f759a351d1ec0cffc8792cd800008000", 0x45, 0x0, 0x0, 0x0) (async) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) mlockall(0x7) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./file1\x00', 0x40) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x5c881, 0x55) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) (async) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=@random={'btrfs.', '\x00'}) 7m20.193792526s ago: executing program 3 (id=2421): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4011) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x10400, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000002a00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, r4}, 0x18) r5 = socket(0x18, 0x1, 0x1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$cont(0x7, r6, 0xffffffffffffff7f, 0x9) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000001010100000000000000000200de0104001640240001801483d68008000100e009000108000200e00000010c00028005000100657f84beca878907a09b319f"], 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) getsockopt$inet_int(r5, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 7m20.149817697s ago: executing program 3 (id=2423): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3}) modify_ldt$write2(0x11, &(0x7f0000000680)={0x8, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x1}]}, 0x10) flock(r0, 0x7) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x50, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b413559"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, 0x0, &(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000900)={0x9c, 0x0, &(0x7f00000007c0)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}, @acquire_done={0x40106309, 0x3}, @dead_binder_done, @clear_death, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000780)={0x30, 0x30, 0x30}}}], 0x29, 0x0, &(0x7f00000008c0)="4b30174b442288c3a9def15973bb88f9681daaf870436e821da0bd6350d981151041f99854174eafdb"}) 7m20.059530337s ago: executing program 3 (id=2429): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x81, 0x7fc00000}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x6c, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x1ff, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x0, 0x3, 0x3, 0x2, 0x1, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1001, 0x40], [0x10000007, 0xffff, 0x132, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x13, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x7fff, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0xc, 0x9, 0x6, 0xb, 0xa, 0x1, 0x2, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xfffffffd, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0xa, 0x6, 0x80000001, 0x2c, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0xfffffffe, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x9, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0xd, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xf, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x3ff, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f0000000140)=[{r1}, {r1, 0xf010}], 0x2, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0/../file0'}}, {@default_permissions}]}) chdir(&(0x7f0000000100)='./bus\x00') openat$sysfs(0xffffff9c, 0x0, 0x2200, 0xe0) lsetxattr$security_capability(&(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0x9) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100}) socket$inet6(0xa, 0x1, 0xab) 7m17.045422196s ago: executing program 3 (id=2487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) userfaultfd(0x80001) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@canfd={{0x2, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "6d5f74d0db4cc5cbe11f6df7d892c1c3577a0529743b212338f4f66fdb6809c77f6ca66bc51ccafbd485849964ccba69f3d96af5617eebad6c3025792c27dfbd"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4401) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2800}, {r0, 0x1}], 0x2, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) userfaultfd(0x80001) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) (async) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000180)=@canfd={{0x2, 0x0, 0x1}, 0x26, 0x1, 0x0, 0x0, "6d5f74d0db4cc5cbe11f6df7d892c1c3577a0529743b212338f4f66fdb6809c77f6ca66bc51ccafbd485849964ccba69f3d96af5617eebad6c3025792c27dfbd"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4401) (async) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) (async) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x2800}, {r0, 0x1}], 0x2, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) (async) 7m16.953561057s ago: executing program 3 (id=2488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$inet(r1, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="0a1a2c7cff5fabf90bf2a7044a6d9a4e107a55f652bfe0574b91deff609d91092eb7c84b10987a637f198ecb7d6247dd201e7219ba7af70dfc63be1d81af2f8b518647691b26cdcb22c12e45a7454abf40ff7c4c3dde26f1b9586eb4d02c086ccc9c2486c65bfa6f7085b4d4b5caec6a0df4a069", 0x74}, {&(0x7f0000000400)="8ee283af2bd566b905fa487d672b6318abbf90222d380e436501b4a04c47db6d210a5258372be16338b10bc6f1da4c0e8d6030d88cca58bc765f24c2f2a1dcfadab830e5f6393e50194bd8bf6e24a9d1710b58c289a156", 0x57}, {&(0x7f0000000500)="cc3077ed763de014ac8dcc3085deef5e6f0797567ddcccb582bd120ff4bd10073ce9bb05834427c646a41038c43dde676bb694752dff693d48d1fbd22a09ec67af05d486b2442bcafe96b1fff4f7385b68d9b56b164545eb9e015322232032420f1a5cef12396c4f837b74ce31cc51c4d8a272fcb7e0a885f53779fafa0110d9375e9692085565c773d8f056aef212ab3f89a249248a2647c0e6193e99cad147acd8b3880c1eaab831c82a787aee8b802a507141892d2f00219fb7a69fa2238ce0f150a7b90a5a527186127c3110904f60e653c84980b85f8b712076c6446e96f7d81e4ca526c546fcd21710eeb4f7d69b8bb6", 0xf3}, {&(0x7f0000000180)="2101c51b003d6ec3d995b3e1a605549390c4c01a4f4ae6b705e87056ab07cc", 0x1f}, {&(0x7f0000000600)="c4dc09e5a0f85181f2a42a0586ec557a1466467403f04753dd18e88a64fc590b12b7925969c28cf5f33c4546ff52ea75d8dfeebd56df2a3974617f69a53d5c2ac8d6187f7b93045e6429747047131e175997860c838f48fa1a18d3e2334df635bc85a5d4e5bd0e3937e7a913faba083d61b45bea286e0b2a05b35df63e0260576f78225ef0fc028c0136db612a7cd5b725bf47b6cfa3f9880ff7e84c03709ec346fd468dbf570ea9f244", 0xaa}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14}}], 0x48}, 0x4000000) (async) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="0a1a2c7cff5fabf90bf2a7044a6d9a4e107a55f652bfe0574b91deff609d91092eb7c84b10987a637f198ecb7d6247dd201e7219ba7af70dfc63be1d81af2f8b518647691b26cdcb22c12e45a7454abf40ff7c4c3dde26f1b9586eb4d02c086ccc9c2486c65bfa6f7085b4d4b5caec6a0df4a069", 0x74}, {&(0x7f0000000400)="8ee283af2bd566b905fa487d672b6318abbf90222d380e436501b4a04c47db6d210a5258372be16338b10bc6f1da4c0e8d6030d88cca58bc765f24c2f2a1dcfadab830e5f6393e50194bd8bf6e24a9d1710b58c289a156", 0x57}, {&(0x7f0000000500)="cc3077ed763de014ac8dcc3085deef5e6f0797567ddcccb582bd120ff4bd10073ce9bb05834427c646a41038c43dde676bb694752dff693d48d1fbd22a09ec67af05d486b2442bcafe96b1fff4f7385b68d9b56b164545eb9e015322232032420f1a5cef12396c4f837b74ce31cc51c4d8a272fcb7e0a885f53779fafa0110d9375e9692085565c773d8f056aef212ab3f89a249248a2647c0e6193e99cad147acd8b3880c1eaab831c82a787aee8b802a507141892d2f00219fb7a69fa2238ce0f150a7b90a5a527186127c3110904f60e653c84980b85f8b712076c6446e96f7d81e4ca526c546fcd21710eeb4f7d69b8bb6", 0xf3}, {&(0x7f0000000180)="2101c51b003d6ec3d995b3e1a605549390c4c01a4f4ae6b705e87056ab07cc", 0x1f}, {&(0x7f0000000600)="c4dc09e5a0f85181f2a42a0586ec557a1466467403f04753dd18e88a64fc590b12b7925969c28cf5f33c4546ff52ea75d8dfeebd56df2a3974617f69a53d5c2ac8d6187f7b93045e6429747047131e175997860c838f48fa1a18d3e2334df635bc85a5d4e5bd0e3937e7a913faba083d61b45bea286e0b2a05b35df63e0260576f78225ef0fc028c0136db612a7cd5b725bf47b6cfa3f9880ff7e84c03709ec346fd468dbf570ea9f244", 0xaa}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14}}], 0x48}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000800)={0x0, 0x4, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000c00)={r5, 0x4, 0x1, [0x5, 0xa6a0, 0x52, 0x0, 0xfff], [0x6, 0x8001, 0xf672, 0x5b44, 0x6, 0x8, 0x8, 0x10000, 0x50c, 0x10, 0x8, 0x9, 0x9, 0x9, 0x198b, 0x2, 0x8, 0x4fed, 0x4, 0x7, 0x100, 0x4, 0x10, 0xfffffffffffffffd, 0x0, 0x81, 0xfffffffffffffffd, 0x401, 0xffff, 0x1, 0xffffffff80000001, 0x8000000000000001, 0x1, 0x8, 0x8000000000000001, 0x6, 0x6, 0xd4, 0x5, 0x4, 0x4, 0xffffffffffffff7f, 0x1, 0x64e, 0x1, 0xb, 0x3, 0x2e41, 0x1, 0x2, 0xb, 0x8, 0x1, 0x3ff00000, 0x9, 0x2, 0x1, 0x3ff, 0xffff, 0x5, 0x100000000, 0x8, 0x0, 0x7, 0x9, 0x8, 0x0, 0xbf, 0x4, 0xffffffff80000001, 0x5, 0x86, 0x8, 0x6c, 0x40, 0x3, 0xfff, 0x0, 0x100000000, 0x6, 0x7, 0x5, 0x3, 0x7da, 0x2, 0x2, 0x8, 0x2, 0x9, 0x7, 0x1090, 0xffffffff, 0xffffffffffffffd9, 0x1, 0x6, 0x1, 0x10000, 0xb, 0x80000000, 0x7, 0xff, 0x9, 0x6750, 0x5, 0x5, 0x1, 0x7, 0x5, 0x5, 0x0, 0x50fa, 0x10001, 0x9, 0x8, 0xffffffffffff8000, 0x54b8, 0x6, 0x6, 0x2b2, 0x101, 0xff]}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 7m16.946508037s ago: executing program 33 (id=2488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) sendmmsg$inet(r1, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="0a1a2c7cff5fabf90bf2a7044a6d9a4e107a55f652bfe0574b91deff609d91092eb7c84b10987a637f198ecb7d6247dd201e7219ba7af70dfc63be1d81af2f8b518647691b26cdcb22c12e45a7454abf40ff7c4c3dde26f1b9586eb4d02c086ccc9c2486c65bfa6f7085b4d4b5caec6a0df4a069", 0x74}, {&(0x7f0000000400)="8ee283af2bd566b905fa487d672b6318abbf90222d380e436501b4a04c47db6d210a5258372be16338b10bc6f1da4c0e8d6030d88cca58bc765f24c2f2a1dcfadab830e5f6393e50194bd8bf6e24a9d1710b58c289a156", 0x57}, {&(0x7f0000000500)="cc3077ed763de014ac8dcc3085deef5e6f0797567ddcccb582bd120ff4bd10073ce9bb05834427c646a41038c43dde676bb694752dff693d48d1fbd22a09ec67af05d486b2442bcafe96b1fff4f7385b68d9b56b164545eb9e015322232032420f1a5cef12396c4f837b74ce31cc51c4d8a272fcb7e0a885f53779fafa0110d9375e9692085565c773d8f056aef212ab3f89a249248a2647c0e6193e99cad147acd8b3880c1eaab831c82a787aee8b802a507141892d2f00219fb7a69fa2238ce0f150a7b90a5a527186127c3110904f60e653c84980b85f8b712076c6446e96f7d81e4ca526c546fcd21710eeb4f7d69b8bb6", 0xf3}, {&(0x7f0000000180)="2101c51b003d6ec3d995b3e1a605549390c4c01a4f4ae6b705e87056ab07cc", 0x1f}, {&(0x7f0000000600)="c4dc09e5a0f85181f2a42a0586ec557a1466467403f04753dd18e88a64fc590b12b7925969c28cf5f33c4546ff52ea75d8dfeebd56df2a3974617f69a53d5c2ac8d6187f7b93045e6429747047131e175997860c838f48fa1a18d3e2334df635bc85a5d4e5bd0e3937e7a913faba083d61b45bea286e0b2a05b35df63e0260576f78225ef0fc028c0136db612a7cd5b725bf47b6cfa3f9880ff7e84c03709ec346fd468dbf570ea9f244", 0xaa}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14}}], 0x48}, 0x4000000) (async) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)="0a1a2c7cff5fabf90bf2a7044a6d9a4e107a55f652bfe0574b91deff609d91092eb7c84b10987a637f198ecb7d6247dd201e7219ba7af70dfc63be1d81af2f8b518647691b26cdcb22c12e45a7454abf40ff7c4c3dde26f1b9586eb4d02c086ccc9c2486c65bfa6f7085b4d4b5caec6a0df4a069", 0x74}, {&(0x7f0000000400)="8ee283af2bd566b905fa487d672b6318abbf90222d380e436501b4a04c47db6d210a5258372be16338b10bc6f1da4c0e8d6030d88cca58bc765f24c2f2a1dcfadab830e5f6393e50194bd8bf6e24a9d1710b58c289a156", 0x57}, {&(0x7f0000000500)="cc3077ed763de014ac8dcc3085deef5e6f0797567ddcccb582bd120ff4bd10073ce9bb05834427c646a41038c43dde676bb694752dff693d48d1fbd22a09ec67af05d486b2442bcafe96b1fff4f7385b68d9b56b164545eb9e015322232032420f1a5cef12396c4f837b74ce31cc51c4d8a272fcb7e0a885f53779fafa0110d9375e9692085565c773d8f056aef212ab3f89a249248a2647c0e6193e99cad147acd8b3880c1eaab831c82a787aee8b802a507141892d2f00219fb7a69fa2238ce0f150a7b90a5a527186127c3110904f60e653c84980b85f8b712076c6446e96f7d81e4ca526c546fcd21710eeb4f7d69b8bb6", 0xf3}, {&(0x7f0000000180)="2101c51b003d6ec3d995b3e1a605549390c4c01a4f4ae6b705e87056ab07cc", 0x1f}, {&(0x7f0000000600)="c4dc09e5a0f85181f2a42a0586ec557a1466467403f04753dd18e88a64fc590b12b7925969c28cf5f33c4546ff52ea75d8dfeebd56df2a3974617f69a53d5c2ac8d6187f7b93045e6429747047131e175997860c838f48fa1a18d3e2334df635bc85a5d4e5bd0e3937e7a913faba083d61b45bea286e0b2a05b35df63e0260576f78225ef0fc028c0136db612a7cd5b725bf47b6cfa3f9880ff7e84c03709ec346fd468dbf570ea9f244", 0xaa}], 0x5, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @timestamping={{0x14}}], 0x48}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f00000001c0)={@loopback, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000800)={0x0, 0x4, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000c00)={r5, 0x4, 0x1, [0x5, 0xa6a0, 0x52, 0x0, 0xfff], [0x6, 0x8001, 0xf672, 0x5b44, 0x6, 0x8, 0x8, 0x10000, 0x50c, 0x10, 0x8, 0x9, 0x9, 0x9, 0x198b, 0x2, 0x8, 0x4fed, 0x4, 0x7, 0x100, 0x4, 0x10, 0xfffffffffffffffd, 0x0, 0x81, 0xfffffffffffffffd, 0x401, 0xffff, 0x1, 0xffffffff80000001, 0x8000000000000001, 0x1, 0x8, 0x8000000000000001, 0x6, 0x6, 0xd4, 0x5, 0x4, 0x4, 0xffffffffffffff7f, 0x1, 0x64e, 0x1, 0xb, 0x3, 0x2e41, 0x1, 0x2, 0xb, 0x8, 0x1, 0x3ff00000, 0x9, 0x2, 0x1, 0x3ff, 0xffff, 0x5, 0x100000000, 0x8, 0x0, 0x7, 0x9, 0x8, 0x0, 0xbf, 0x4, 0xffffffff80000001, 0x5, 0x86, 0x8, 0x6c, 0x40, 0x3, 0xfff, 0x0, 0x100000000, 0x6, 0x7, 0x5, 0x3, 0x7da, 0x2, 0x2, 0x8, 0x2, 0x9, 0x7, 0x1090, 0xffffffff, 0xffffffffffffffd9, 0x1, 0x6, 0x1, 0x10000, 0xb, 0x80000000, 0x7, 0xff, 0x9, 0x6750, 0x5, 0x5, 0x1, 0x7, 0x5, 0x5, 0x0, 0x50fa, 0x10001, 0x9, 0x8, 0xffffffffffff8000, 0x54b8, 0x6, 0x6, 0x2b2, 0x101, 0xff]}) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 5m1.96117063s ago: executing program 5 (id=4533): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) 5m1.95940737s ago: executing program 5 (id=4534): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) r0 = creat(&(0x7f0000000080)='./cgroup\x00', 0x10a) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x3, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0x10, r6, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x18, 0x1, 0x0, 0x10, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x16}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x9, {0x5, 0x0, 0x9, 0x8b, 0xf5, 0x1ff, {0x3, 0x2, 0x2, 0x7, 0x0, 0x80000001, 0x7, 0x641d4d1, 0x6, 0xc000, 0x6, r6, r8, 0x57c, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r10, &(0x7f0000001040)=""/222, 0xde) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r13, r14, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x8411, &(0x7f00000004c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r2, @ANYBLOB=',gid=', @ANYRESHEX=r3, @ANYBLOB="2c6d6ff00230f13689c29823613b554c64653d30313030303030303030303030303030303030303030302c6769643d", @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',fowner>', @ANYRESDEC=r13, @ANYBLOB=',permit_directio,\x00']) syz_clone(0x20040000, &(0x7f00000006c0)="6c49a973b531a1101f7dd3fa392a60041df179f7d9545d7f5edd8d2b1620079821732bd2b44b371729ad5b69c4a3404b1e15d81532ffe820fb90f0138f60a3257f40a5b5c374d7c4ce1fe165f5537add065c1877e5b832171642c7c3f2c25001c908c555b35ab27e416fccc740e8133395bbf1d9c7edca610cd7ea7d97e6bb4c702c1af784fae27cd486f271184055b061b646036bcadd2e9cab85e3cb96dbcaed5f12668331863e5f23d4309b6f434e52c560f42e4bced6ca0e5e9ccf5b5956289180ebf0d1065375417106c69ee6db632842364035d1f571bd6fda", 0xdc, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000900)="132d79ab9fde2fd7dce5e2403085d20fe0ef04301537cedb36ce78cc184bffb8700e3256e05f54d08af2a4091de7428457a0cb4f03b74673434f4197f222514736e3cf06f1320d0330128d48e38a1ee2787d3d5fa201158a41308fa032a6e8a26471cc6252d980cee5894218be5d0381b6f4510994cd76854a9f5b979700349c9c73f1d6b3408adb918160d0b6c28558d0541c7c690c47272dac90bc0c3651542331b3c2367f28f895eb45ae4d178677466490e35aad1bfd4cd6408f504624aaa1fc9f2440e9046ef1867ab9536b8893") close_range(r0, r0, 0x0) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000007c0)={0x40, r15, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) setfsuid(r2) 5m1.930669371s ago: executing program 5 (id=4537): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000400", @ANYRES16=r4, @ANYBLOB="db272dbd7000fadbdf2541000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x40) (async) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x1, 0x1) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fchdir(r6) (async) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x10, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x10080) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0}) 5m1.420957654s ago: executing program 5 (id=4545): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$inet(0x2, 0x80001, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001a00010000000000000000000a000000050000000000000014000280bf74a7dffdd8f8331b9dd3f2f9834bff"], 0x30}}, 0x0) (async) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x400, 0x401, @private0={0xfc, 0x0, '\x00', 0x1}, 0x179}, {0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x8, 0x4, 0x6, 0x6e, 0xfffffc01, 0x2, 0x6, 0x7]}}, 0x5c) (async, rerun: 64) r4 = socket$inet6(0xa, 0x3, 0xff) (rerun: 64) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e21, 0x2a, @empty, 0x6}, 0x1c) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 5m1.399841164s ago: executing program 5 (id=4547): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) write$FUSE_WRITE(r4, &(0x7f0000000140)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8048, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) dup(r3) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) (async) write$FUSE_WRITE(r4, &(0x7f0000000140)={0x18}, 0x18) (async) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8048, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) 5m1.201779515s ago: executing program 5 (id=4553): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCSETS2(r1, 0x402c542b, 0x0) close(r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) recvmmsg(r4, &(0x7f0000004ec0)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)}, 0x3}, {{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/141, 0x8d}], 0x2, &(0x7f0000000600)=""/153, 0x99}, 0x4}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/89, 0x59}], 0x4, &(0x7f0000000a00)=""/75, 0x4b}, 0x1}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/51, 0x33}], 0x1}, 0x2}, {{&(0x7f0000000b80)=@ieee802154, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f0000000d00)=""/14, 0xe}, {&(0x7f0000000d40)=""/199, 0xc7}, {&(0x7f0000000e40)=""/248, 0xf8}, {&(0x7f0000000f40)=""/83, 0x53}, {&(0x7f0000000fc0)=""/121, 0x79}, {&(0x7f0000001040)=""/210, 0xd2}], 0x7, &(0x7f00000011c0)=""/161, 0xa1}, 0x5}, {{&(0x7f0000001280)=@generic, 0x80, &(0x7f00000017c0)}, 0xc6}, {{&(0x7f0000001840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f00000018c0)=""/29, 0x1d}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/75, 0x4b}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/247, 0xf7}, {&(0x7f0000002b80)=""/189, 0xbd}, {&(0x7f0000002c40)=""/175, 0xaf}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/50, 0x32}, {&(0x7f0000003d00)=""/251, 0xfb}], 0xa, &(0x7f0000003ec0)=""/4096, 0x1000}, 0xb26}], 0x7, 0x10002, &(0x7f0000005080)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) preadv(r1, &(0x7f0000000240), 0x0, 0x10, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x4401a) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 5m1.193615565s ago: executing program 34 (id=4553): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "299547f8a09eeacac3c4130f97f2cb9dc34b04"}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TCSETS2(r1, 0x402c542b, 0x0) close(r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r3, 0xaec7) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1809}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) recvmmsg(r4, &(0x7f0000004ec0)=[{{&(0x7f0000000300)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000240)}, 0x3}, {{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/5, 0x5}, {&(0x7f0000000500)=""/141, 0x8d}], 0x2, &(0x7f0000000600)=""/153, 0x99}, 0x4}, {{&(0x7f00000006c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/13, 0xd}, {&(0x7f00000008c0)=""/160, 0xa0}, {&(0x7f0000000980)=""/89, 0x59}], 0x4, &(0x7f0000000a00)=""/75, 0x4b}, 0x1}, {{&(0x7f0000000a80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000b00)=""/51, 0x33}], 0x1}, 0x2}, {{&(0x7f0000000b80)=@ieee802154, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c00)=""/250, 0xfa}, {&(0x7f0000000d00)=""/14, 0xe}, {&(0x7f0000000d40)=""/199, 0xc7}, {&(0x7f0000000e40)=""/248, 0xf8}, {&(0x7f0000000f40)=""/83, 0x53}, {&(0x7f0000000fc0)=""/121, 0x79}, {&(0x7f0000001040)=""/210, 0xd2}], 0x7, &(0x7f00000011c0)=""/161, 0xa1}, 0x5}, {{&(0x7f0000001280)=@generic, 0x80, &(0x7f00000017c0)}, 0xc6}, {{&(0x7f0000001840)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f00000018c0)=""/29, 0x1d}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/75, 0x4b}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/247, 0xf7}, {&(0x7f0000002b80)=""/189, 0xbd}, {&(0x7f0000002c40)=""/175, 0xaf}, {&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/50, 0x32}, {&(0x7f0000003d00)=""/251, 0xfb}], 0xa, &(0x7f0000003ec0)=""/4096, 0x1000}, 0xb26}], 0x7, 0x10002, &(0x7f0000005080)={0x77359400}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) preadv(r1, &(0x7f0000000240), 0x0, 0x10, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x4401a) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "8ba672dad0f6323f", '\a\x00', "ee862ce0", "982a2b89f61f0617"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r5) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"']) 1m14.841309887s ago: executing program 2 (id=8374): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async, rerun: 64) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000001140), &(0x7f0000001180)=0x4) (async, rerun: 64) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) (async, rerun: 32) socket$inet(0x2, 0x2, 0x0) (rerun: 32) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000, 0xffffffff80000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000011c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @multicast}, 0x10) ppoll(&(0x7f00000010c0)=[{r1}, {0xffffffffffffffff, 0x4110}], 0x2, &(0x7f0000001100), 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00'}) (async) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x40) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x2, 0x0, 0x14}, @fda={0x66646185, 0x4, 0x0, 0x26}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001802c00018014000300fc010000000000000000ba000000000014000400000000000000000000000000000000010c00028005000100ffa126e83c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300ff01000000000000000000000000000114000400"], 0xc8}}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffd86}}, 0x4) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async, rerun: 32) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/17, 0x11, 0x2, 0x10}, @fda={0x66646185, 0x2, 0x0, 0x16}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000000c0)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m14.798298617s ago: executing program 2 (id=8375): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async, rerun: 32) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) (rerun: 32) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2404}, {r0, 0x8}], 0x2, 0x101) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e) 1m14.528230269s ago: executing program 2 (id=8380): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') (async) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xf5a, 0x2000) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000480)={0x7d76be16897135f, 0x0, 0x0}) (async) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) 1m14.500505059s ago: executing program 2 (id=8381): r0 = socket$tipc(0x1e, 0x2, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000200)=0x87) accept4(r0, 0x0, 0x0, 0x400000000000000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x24c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) chroot(&(0x7f0000000100)='./file0\x00') poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r3, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xffffffffffffff93, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x0, 0x1, 0x20003f}, @flat=@weak_binder={0x77622a85, 0x1, 0xfffffffffffffffc}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 1m13.600414285s ago: executing program 2 (id=8387): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @multicast2, @private=0xa010102}, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m13.509749435s ago: executing program 2 (id=8388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2, 0x1, 0x6, 0xd5, 0x4, 0x40, 0x1bf3}, 0xc) r2 = gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x1, 0xd000, 0x1000, &(0x7f0000001000/0x1000)=nil}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000180)={0xc9, 0x0, 0xc}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000ffffffff000000000000000000000000fc02000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a017b000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c00000000000000020002001c00040002004e244e230000fc0100"/116], 0xbc}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getrandom(&(0x7f0000000080)=""/18, 0x12, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1m13.506667145s ago: executing program 35 (id=8388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1006, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x2, 0x1, 0x6, 0xd5, 0x4, 0x40, 0x1bf3}, 0xc) r2 = gettid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x1, 0xd000, 0x1000, &(0x7f0000001000/0x1000)=nil}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8}, 0x8) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000180)={0xc9, 0x0, 0xc}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc000000210001000000000000000000ffffffff000000000000000000000000fc02000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a017b000000000000000000000000000a010100000000000000000000000000640101000000000000000000000000003c00000000000000020002001c00040002004e244e230000fc0100"/116], 0xbc}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getrandom(&(0x7f0000000080)=""/18, 0x12, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000000c0)=0x20, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.617733217s ago: executing program 4 (id=9187): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3ca) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1, 0x0) r0 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3c, 0xffffffff, 0x3, 0x0, 0x4, 0x1, 0x1, 0x82000}}) r2 = fsmount(r0, 0x0, 0x8) fchdir(r2) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f00000005c0)=0x3, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000c40)) write$tcp_mem(r4, &(0x7f0000000080)={0x9, 0x20, 0x9, 0x20, 0x3}, 0x48) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) readlinkat(r2, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240)=""/2, 0x2) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x10, 0x0, 0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@empty, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r6], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="bbaff6f79abc949198cd6f4d3415443c74f1494f04cd74b8e535cb215a2d2a09b69fb69788202a6511", 0x29}], 0x1}}], 0x3, 0x8040810) sendto$inet6(r5, &(0x7f0000001d40)='W', 0x1, 0x0, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000100)={0x1000f4, 0x100032, 0x100000, {r7}}, 0x20) ioctl$TIOCCBRK(r7, 0x5428) 3.083155211s ago: executing program 1 (id=9192): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) write(r1, &(0x7f0000000080)="0e9d075b3d0d6b312c587d0df198d3f45f04d62ac12e", 0x16) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000) 2.677546683s ago: executing program 1 (id=9195): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$bpf(0x0, 0x0, 0x0, 0x5085040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) 2.553812984s ago: executing program 1 (id=9198): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, 0x0, 0x13) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000080)={0x3, {0x0, 0x6, 0xfffffffffffffeff, 0x6, 0xddb6}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102100708"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.068843627s ago: executing program 4 (id=9190): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2c0902, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0xa, 0xffff, 0xfe, 0x6, 0x7f, 0x8, 0x7, 0x10, 0x9, 0x0, 0x5, 0x1, 0x5, 0x7, [0x1, 0x4]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)='system_u:object_r:netlabel_mgmt_exec_t:s0\x00', 0x2a, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.979570788s ago: executing program 4 (id=9207): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xb99}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1c) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0xb99}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) 1.858232998s ago: executing program 4 (id=9208): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1f, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x300) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0x0) syz_clone3(&(0x7f0000000200)={0x2000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x5a) syz_usb_control_io$hid(r3, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "cec4d921"}]}}, 0x0}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 1.208318312s ago: executing program 7 (id=9216): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') rt_sigaction(0x19, &(0x7f0000000000)={&(0x7f0000000340)="dfd3bf2e36c07fff7066440f1ed20000d3a41039000000f344aa643e3ef08104dc19b4000041d8d041de7dd3c4e2f9db8179d90000f3410f5d4efe", 0x5c000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) socket$inet6(0xa, 0x3, 0x8) prlimit64(0x0, 0x3, 0x0, 0x0) getpriority(0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) socket$nl_route(0x10, 0x3, 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x7) lseek(r2, 0x0, 0x1) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x38}}, @GTPA_FAMILY={0x5, 0xd, 0x1d}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x400c051) 1.113668843s ago: executing program 1 (id=9217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0x1, 0x0, 0x38}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"}) r1 = socket$xdp(0x2c, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000001800)='./file0\x00', 0x100, 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x122) read(r0, &(0x7f0000000200)=""/67, 0x43) 1.001819254s ago: executing program 7 (id=9219): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14, 0x3eb}}, 0x3c}, 0x1, 0x0, 0x0, 0x240208d1}, 0x40000) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x810000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2a00cda2, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80642, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80642, 0x0) (async) copy_file_range(r7, &(0x7f0000000140)=0x8, r6, 0x0, 0x7, 0x0) write$FUSE_INIT(r3, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) 793.634765ms ago: executing program 6 (id=9221): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x48e80, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x80004, 0x6) process_madvise(r0, 0x0, 0x0, 0x17, 0x0) (async) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) (async, rerun: 32) setpgid(0x0, r1) (async, rerun: 32) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x2c, 0xa7f084dd5657bbbf, 0x14}) (async) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) (async) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x2000c8c0) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)) close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_open_dev$evdev(0x0, 0x0, 0x882) (rerun: 32) 745.833495ms ago: executing program 7 (id=9222): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x103, 0x6}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x103, 0x6}) r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xf0, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @free_buffer={0x40086303, r2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0}}, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0}}, @free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0}) 638.561586ms ago: executing program 6 (id=9223): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000340)='lowerdir', &(0x7f0000000400)="6bfc9d13126d", 0x6) 521.767097ms ago: executing program 7 (id=9224): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f0198cbcb263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x52}], 0x1, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f0198cbcb263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x52}], 0x1, 0x1, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @mcast2, 0x8}, 0x1c) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, 0x0) (async) 441.258267ms ago: executing program 6 (id=9225): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x2, @private=0xa010101}}, 0x1e) (async) setsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f00000002c0)="ed8e8b2aa4f8453d13a006c249d74bf29d079eff2c7d23c9de301b38c3ed11b2f20b3c2e354cc872c3a30b3b54d3cbd0cc8c3af7445fde08e3488f3cc7523915f5c70e760f6811b53e7ccf73b52231895fac13f36c9037fec926889c73ba95b67c0bbc7d0c00", 0x66) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r1, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1}, 0x2}], 0x1, 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) write(r4, &(0x7f0000000400)="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", 0x1f000) 350.745028ms ago: executing program 6 (id=9226): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f00000006c0)=""/112, 0x70, 0x42) syz_usb_connect(0x2, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) (async) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) (async) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, 0x0) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x7}) (async) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) fcntl$setlease(r1, 0x400, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) (async) pread64(r4, &(0x7f00000006c0)=""/112, 0x70, 0x42) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 267.864388ms ago: executing program 1 (id=9227): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000420000014000100ff010006000000000000000000000001150002"], 0x44}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x8) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000420000014000100ff010006000000000000000000000001150002"], 0x44}}, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x100000000000) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 266.668339ms ago: executing program 7 (id=9228): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = socket(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r5, r4, 0x0, 0xffffffff) 252.815049ms ago: executing program 4 (id=9229): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x40) mkdir(&(0x7f00000001c0)='./bus\x00', 0x1ac) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000003240)=""/4106, 0x100a}, {&(0x7f0000000780)=""/164, 0xa4}, {0x0}, {&(0x7f0000000680)=""/148, 0x94}], 0x4}, 0x81}], 0x1, 0x2100, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000)={0x3}) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, 0x0) 203.912509ms ago: executing program 7 (id=9230): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x56, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272df9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @register_looper, @acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={@fd, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/171, 0x0, 0x2, 0x34}, @fd}, &(0x7f0000000100)}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={@fd, @flat=@handle={0x73682a85, 0xb}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000380)}, 0x40}], 0x0, 0x0, 0x0}) sendto(r0, &(0x7f0000000580)="b54da6180b5f3da42c1f3b205ac026c63dc6dad15f91c40ce9bc3be95dd4f3e3073aca5f871e573cd7da2c6d148285fcf49fce5895ecb5caba129d9de1339dbb502e71c0af2e2b3e4cf2541f84db1a36e727b94a0b3970ebceaae59414a8b8f0b7c114c6109eb14ce62231014f4980141dbcb1b1f8b6b8e9ddb4be8dc01eee7da222b4e30b0d8f50e8471cdb58cbb0b1d9975092afd00dd6d0944b0128aea48c50a95a63363bc01aa31cf69f5cd8cc61b2553c20770b", 0xb6, 0x0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, 0x4}, 0x80) 203.323469ms ago: executing program 6 (id=9231): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) r1 = dup3(r0, r0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 109.63258ms ago: executing program 1 (id=9232): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000440)="fbbcdd8a319aa98b70de93324a005dc2f9e67f1a837f1e5c3bb7d67928a9df8500cf60d25a07895f9695de0c776ece734cf1224e27414e010689aa43e077c91593b53fa73b0a642b2e05095b865557766928a2a60c5541472b8875963ab1d7caf0c2c0dc6da7e80bfb23a7c7318c9141e8afffe437f878d9a33b006cdc85d56e558a651001f124a28241e0313ee5a34344ba0f357d36c3e820ae5000e02bacbe62d7b14e5a712008a7e8ff8523c2f0d756a10c3ef9ec1a9c014b63", 0xbb}, {&(0x7f0000000500)="9601cda0c24eebd4a9526f166b9dc59e544a64756d241ad5825be4c9fda1e3cc5ee911e396ffb30d95fff906f9956f9c95ea0e9c8f0b235c8d2aa0b32ff5ade716892373fd4524968c3c130ea5e54fbda140d9d24329629ffd834c7ded2064ed97983e9d8086ad31a2330c83f81c0cf4f72ab79110bcd0d02a7d63c6c88de0af4ab2f8f57fe2def3448295778e5043e18ddeeb7075f10b1750471a7dca6d6db2b8d63acdf644aa55e96cb4f8f344d6b8cd64fa", 0xb3}, {&(0x7f0000000900)="6c8eafdbfd82ba62c9437b7b0df4e14ce73459cab575037b23f60ef4bfa04d1315828fe8ab776e235ae47027bb6447d0f25db5e3446f719d06c5ce134ee74e370160ca627cd1de10aa6b80c78f669cc461470b1b862f305ec92f8344c7bc2ab621f0fa084277aaa93866bce82039b954cb5b3d7d98322244337e82cb7cd154c7278e6659e89003fa7e450fe0defc269707bb6a7524e2f4f79f9e737d7c3499a0af0b50c8b9cbf14b934c9666f863f82366236c4cd4936901527b15a7cb11c921c849d453728cf7648cfc00141a887d7bb5485fb68cb855c4568bcf70effca492718e69e6d57f9740dd2bedb2f1facb3c970b88204c83d9388418cf1c29f4b9d2a41688a7cbcd78ae5a0804129b0111065da36875905b18dc3940a9c5ee78395c6506359c83960f6e3006216c91e3c848ff21938ec3614621620765c10dc67d06432fe877eccd8e0c1de5464f8fc0667d5933c4e44a7bec91a3eb78e53a21ad2538d33545d67356f909df25eab16169683e76fa37dd3df4ab0f953d5ec0a55e5d9df51bf2c729d954c4703d27953920de41d248d61958fdc99a90ad440a7cc730367730ef6f3ea7ac3b09f36c77893d946536fdca8585074995caf49deb08ecab1f880e9dd63d7e4de7e2f9b6800cec40841600fbd7667eabe775738ed3657e31e4bbb82efd863f566ad280614d441eb283e7f4414228616ac35dbcf9718984a3587afe65d71fe0d4a49e1baba108c276c9d4b274d6a4f9ffea7c1d43d5bdd97def49814afcd638bcdc33a07982f755d98234326bcc7917dae08cc88cd27a9a4bbdfcb044aa988adf6fae45557144b99c11fcda5f3c200a4ddde7da03747607a85d4f1346cd1f6631d4140854f23ebf819b6625e6373592f93d3faeadf35ce2909875c0f7d3cfe60f71bdd984adb4f80d04173bfc821c6061ee67f500bc18e48065d6ade2d500", 0x2a6}, {&(0x7f0000000180)="0eebefaa489470763cc5b77d812ce623438d3abf825ddbc3", 0x18}, {&(0x7f00000006c0)="239d889a02000000b4a2c126adb0146dcb75b2bdb9e779c3c8b124238b711c05003ece345aa652d2f5ed4571db8e32000000006d2f4b098d36355f545fb9e3f2ec0ca2aaff47891e7aaebeedb4d3f479b15bda505d0a532633a4e06bb905ab4fde90bfd50fc3bbdfe96cc58623980f9c3bac69768f4ad4bcda21ae56879b0ce39f9ed9ce2dcd6bc8677391e382a745937c4923a9e98f", 0x96}, {&(0x7f0000000780)="435d2be833026fe03ce5a32e20af3847960d42e81626bd6e1c5881eb3a208322576bc0881cb7aa36a0401e3f83847559b9687964c02cc1c1963909d6256d519803b0dbc7c3ac16333c836f8e64400a9513138e761024e5f5a09b39462332487cd5e9489f6beaadce07a49fe3686823c6fb956c81a93cd23764765bdef35d468937ef3e14ce14020463b44f3d4094ab", 0x8f}, {&(0x7f0000000840)="a71ca77e10e6dff65f45177623fc72510b39696ee21a4aafbdec1229fdd2b8cbd7e3b0fdc57f8895a746a2b5a80fa059d85ffdc7641d438a93ceda2f4a8ec469474086615318b7ba6658dc320816a5d7245a02bf03f2935e791c40e3ee372e3ef4b74603ceff046665e9016194407288cd9c863ac83ef48bccf165211002aa13de20f8c0913e36acbe1eaf9c678e3ddd9af0e6e6e72e7a67fd88f6a5756f61fcdf240ef9927daab773c22bf1c800"/189, 0xbd}], 0x7) fcntl$lock(r2, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x7}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x8f}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x2, 0x6}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)=0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$incfs(r2, &(0x7f0000000140)='.log\x00', 0x80, 0x3d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x24, 0xb0, 0x9e, 0x20, 0x54d5, 0x953f, 0x8282, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd, 0x7, 0x2, 0x8, 0x2, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 107.89384ms ago: executing program 6 (id=9233): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf908"], 0x65) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x40101288, 0x3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x508, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240), 0x0, 0x4000800) r4 = epoll_create(0x10000e9) epoll_pwait2(r4, &(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) munmap(&(0x7f0000434000/0x3000)=nil, 0x3000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2101, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) fsopen(&(0x7f0000000080)='ntfs3\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000003840)={[0x100]}, 0x8) write(r5, &(0x7f0000000400)="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", 0x1f000) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$cgroup(r6, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) 0s ago: executing program 4 (id=9234): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x41624800ab113287, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x12c) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0xfffffffffffffffc}, {}, 0x0, 0x3, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x5e, 0x14, {{'cmac(aes)\x00'}, 0x90, 0x0, "0a55b0ca9cce75f5c9b871603e40f7ec06b2"}}]}, 0x198}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28801, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) kernel console output (not intermixed with test programs): : 0000000000000004 [ 523.652658][T22563] RBP: 00007f5908811f91 R08: 0000000000000004 R09: 0000000000000000 [ 523.652673][T22563] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.652688][T22563] R13: 00007f59089e6038 R14: 00007f59089e5fa0 R15: 00007ffd67e6feb8 [ 523.652707][T22563] [ 523.947447][T22563] Mem-Info: [ 523.950565][T22563] active_anon:6903 inactive_anon:23 isolated_anon:0 [ 523.950565][T22563] active_file:9665 inactive_file:14741 isolated_file:0 [ 523.950565][T22563] unevictable:16445 dirty:61 writeback:0 [ 523.950565][T22563] slab_reclaimable:7105 slab_unreclaimable:75910 [ 523.950565][T22563] mapped:23945 shmem:312 pagetables:1143 [ 523.950565][T22563] sec_pagetables:0 bounce:0 [ 523.950565][T22563] kernel_misc_reclaimable:0 [ 523.950565][T22563] free:1498667 free_pcp:2791 free_cma:0 [ 523.995809][T22563] Node 0 active_anon:27612kB inactive_anon:92kB active_file:38660kB inactive_file:58964kB unevictable:65780kB isolated(anon):0kB isolated(file):0kB mapped:95780kB dirty:244kB writeback:0kB shmem:1248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7296kB pagetables:4572kB sec_pagetables:0kB all_unreclaimable? no [ 524.028028][T22563] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB [ 524.058014][T22563] lowmem_reserve[]: 0 3921 3921 [ 524.066248][T22563] Normal free:3034128kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27412kB inactive_anon:92kB active_file:38660kB inactive_file:58964kB unevictable:65780kB writepending:244kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5868kB local_pcp:4552kB free_cma:0kB [ 524.070927][T22571] netlink: 'syz.4.7375': attribute type 58 has an invalid length. [ 524.098077][T22563] lowmem_reserve[]: 0 0 0 [ 524.098108][T22563] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) [ 524.107068][T22571] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 524.110408][T22563] = 2960212kB [ 524.110422][T22563] Normal: 671*4kB (ME) 1052*8kB (UME) 1376*16kB (UME) 1794*32kB (UME) 736*64kB (UME) 842*128kB (UME) 460*256kB (UME) 170*512kB (UME) 97*1024kB (UME) 39*2048kB (UM) 587*4096kB (UM) = 3033756kB [ 524.162298][T22563] 42288 total pagecache pages [ 524.166990][T22563] 1129 pages in swap cache [ 524.171403][T22563] Free swap = 119968kB [ 524.175763][T22563] Total swap = 124996kB [ 524.179925][T22563] 2097051 pages RAM [ 524.183831][T22563] 0 pages HighMem/MovableOnly [ 524.188550][T22563] 351537 pages reserved [ 524.193004][T22563] 0 pages cma reserved [ 524.199233][T22563] Memory allocations: [ 524.203260][T22563] 0 B 0 init/main.c:1370 func:do_initcalls [ 524.210525][T22563] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 524.218682][T22563] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 524.226425][T22563] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 524.234372][T22563] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 524.242332][T22563] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 524.251010][T22563] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 524.258962][T22563] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 524.266904][T22563] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 524.275018][T22563] 0 B 0 init/initramfs.c:101 func:find_link [ 524.811279][T22585] netlink: 'syz.2.7379': attribute type 3 has an invalid length. [ 524.841057][T22578] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.848176][T22578] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.855506][T22578] bridge_slave_0: entered allmulticast mode [ 524.861977][T22578] bridge_slave_0: entered promiscuous mode [ 524.870104][T22578] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.877193][T22578] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.884443][T22578] bridge_slave_1: entered allmulticast mode [ 524.890765][T22578] bridge_slave_1: entered promiscuous mode [ 524.955124][T22578] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.962192][T22578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.969474][T22578] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.976537][T22578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.003338][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.010783][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.020561][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.027621][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.036373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.043441][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.052790][T22619] overlayfs: failed to clone lowerpath [ 525.080775][T22578] veth0_vlan: entered promiscuous mode [ 525.094600][T22578] veth1_macvtap: entered promiscuous mode [ 525.141089][T22630] netlink: 'syz.4.7377': attribute type 15 has an invalid length. [ 525.149576][T22630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7377'. [ 525.159179][T22630] netlink: 'syz.4.7377': attribute type 1 has an invalid length. [ 525.166979][T22630] netlink: 'syz.4.7377': attribute type 2 has an invalid length. [ 525.441517][ T9] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 525.592614][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 525.600755][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.611074][ T9] usb 5-1: config 0 has no interface number 0 [ 525.618655][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 525.627741][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.635809][ T9] usb 5-1: Product: syz [ 525.639986][ T9] usb 5-1: Manufacturer: syz [ 525.644620][ T9] usb 5-1: SerialNumber: syz [ 525.650146][ T9] usb 5-1: config 0 descriptor?? [ 525.858339][T22639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.866933][T22639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.875758][T22639] /dev/rnullb0: Can't lookup blockdev [ 525.882690][ T9] usb 5-1: USB disconnect, device number 80 [ 526.314554][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7419'. [ 526.404920][T22717] veth0_virt_wifi: entered allmulticast mode [ 526.411128][T22717] veth0_virt_wifi: left allmulticast mode [ 526.494516][T22730] rust_binder: Write failure EFAULT in pid:12 [ 526.494604][T22730] rust_binder: Write failure EFAULT in pid:12 [ 526.533865][T22742] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.577100][T22757] binder: Bad value for 'max' [ 526.596164][T22761] bridge0: port 3(veth0_to_team) entered blocking state [ 526.603228][T22761] bridge0: port 3(veth0_to_team) entered disabled state [ 526.610222][T22761] veth0_to_team: entered allmulticast mode [ 526.616539][T22761] veth0_to_team: entered promiscuous mode [ 526.622541][T22763] netlink: 'syz.2.7441': attribute type 11 has an invalid length. [ 526.630439][T22763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7441'. [ 526.678744][T22777] overlayfs: failed to clone upperpath [ 526.685439][T22777] overlayfs: failed to clone lowerpath [ 527.098026][T22784] 9pnet: Could not find request transport: f [ 527.170757][T22798] netlink: 188 bytes leftover after parsing attributes in process `syz.6.7452'. [ 527.224122][T22808] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46 sclass=netlink_xfrm_socket pid=22808 comm=syz.6.7456 [ 527.281621][T22812] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 527.290599][T22812] overlayfs: missing 'lowerdir' [ 527.316916][T22817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7460'. [ 527.547250][T22827] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7463'. [ 527.772372][ T1257] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 527.941513][ T1257] usb 5-1: Using ep0 maxpacket: 16 [ 527.947866][ T1257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.959292][ T1257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.969311][ T1257] usb 5-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 527.978708][ T1257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.987774][ T1257] usb 5-1: config 0 descriptor?? [ 528.260592][T22861] 9pnet_fd: p9_fd_create_tcp (22861): problem connecting socket to 127.0.0.1 [ 528.294475][T22867] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7473'. [ 528.304702][T22867] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7473'. [ 528.314696][T22867] overlayfs: failed to resolve './file0': -2 [ 528.332710][ T36] kauditd_printk_skb: 73 callbacks suppressed [ 528.332726][ T36] audit: type=1326 audit(2016777900.654:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.362947][ T36] audit: type=1326 audit(2016777900.654:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.374536][T22874] tipc: Enabling of bearer rejected, failed to enable media [ 528.386934][ T36] audit: type=1326 audit(2016777900.654:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.427732][ T1257] holtek_mouse 0003:04D9:A081.0020: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.4-1/input0 [ 528.447683][ T36] audit: type=1326 audit(2016777900.654:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.472993][ T36] audit: type=1326 audit(2016777900.654:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.496686][ T36] audit: type=1326 audit(2016777900.654:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.520553][ T36] audit: type=1326 audit(2016777900.654:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.544213][ T36] audit: type=1326 audit(2016777900.654:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.568306][ T36] audit: type=1326 audit(2016777900.654:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.594566][ T36] audit: type=1326 audit(2016777900.654:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.2.7474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590878f6c9 code=0x7ffc0000 [ 528.620193][T22887] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 528.620272][T22829] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 528.629798][ T7211] usb 5-1: USB disconnect, device number 81 [ 528.726494][T22906] overlayfs: failed to clone lowerpath [ 528.973967][T22944] overlayfs: failed to clone upperpath [ 529.059303][T22962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7503'. [ 529.100862][T22966] netlink: 'syz.1.7505': attribute type 2 has an invalid length. [ 529.184706][T22984] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 529.194803][T22984] netlink: 'syz.4.7509': attribute type 5 has an invalid length. [ 529.202561][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7509'. [ 529.250974][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.259683][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.267223][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.274834][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.282325][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.290023][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.297636][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.305139][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.312645][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.320224][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.327762][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.335346][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.342818][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.350313][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.357897][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.365383][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.372863][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.380344][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.387823][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.395386][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.403006][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.410553][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.418287][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.426006][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.433655][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.441344][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.449284][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.456933][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.464472][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.471948][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.479751][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.487423][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.495155][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.502959][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.510878][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.518626][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.526334][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.533820][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.541345][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.548905][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.556416][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.563897][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.571406][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.579199][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.586877][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.594593][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.602213][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.609742][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.617339][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.624891][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.634010][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.641504][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.652295][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.660335][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.662364][T23033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7527'. [ 529.668079][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.684228][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.691769][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.699291][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.706837][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.714394][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.721868][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.729362][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.736889][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.744606][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.752081][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.759574][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.767092][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.774581][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.782058][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.789560][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.797581][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.805081][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.812574][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.820117][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.827607][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.835132][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.842627][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.850120][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.857641][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.865146][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.872620][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.880144][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.887711][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.895303][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.902785][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.910280][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.917766][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.925268][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.932747][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.940275][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.947973][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.955626][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.963095][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.970593][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.978121][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.985643][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 529.993132][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.000620][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.008109][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.015592][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.023411][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.030908][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.038397][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.045887][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.053370][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.060961][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.068445][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.075924][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.083400][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.090886][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.098387][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.105891][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.113388][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.120931][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.128495][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.136019][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.143584][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.151106][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.158620][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.166153][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.173631][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.181158][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.188658][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.196455][T23036] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 530.196549][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.206330][T23036] overlayfs: failed to clone lowerpath [ 530.214126][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.226311][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.234219][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.241814][ T583] hid-generic 0000:10000:0007.0021: unknown main item tag 0x0 [ 530.254062][ T583] hid-generic 0000:10000:0007.0021: hidraw0: HID v9.40 Device [syz1] on syz1 [ 530.296757][T23037] fido_id[23037]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 530.484654][T23051] /dev/nullb0: Can't lookup blockdev [ 530.511246][T23056] netlink: 'syz.1.7535': attribute type 27 has an invalid length. [ 530.571568][T23066] fuse: Bad value for 'fd' [ 530.591727][T23069] rust_binder: Got transaction with invalid offset. [ 530.591801][T23069] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 530.598812][T23069] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66 [ 530.668866][T23088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:68 [ 530.754459][T23088] netlink: 'syz.4.7546': attribute type 1 has an invalid length. [ 530.861513][T23113] 9pnet_fd: Insufficient options for proto=fd [ 531.681547][T23138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.691007][T23138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.839649][T23160] __nla_validate_parse: 1 callbacks suppressed [ 531.839675][T23160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7573'. [ 531.855845][T23160] netlink: 'syz.2.7573': attribute type 27 has an invalid length. [ 531.865487][T23160] netlink: 9 bytes leftover after parsing attributes in process `syz.2.7573'. [ 531.874775][T23160] gretap0: entered promiscuous mode [ 531.901733][T23166] 9pnet_fd: Insufficient options for proto=fd [ 531.914051][ T583] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 531.981392][T23185] cgroup: Unknown subsys name 'smackfsfloor' [ 532.064012][ T583] usb 5-1: Using ep0 maxpacket: 8 [ 532.070156][ T583] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 160, changing to 11 [ 532.084006][ T583] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 16 [ 532.093882][ T583] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 64 [ 532.103657][ T583] usb 5-1: config 1 interface 0 has no altsetting 0 [ 532.111707][ T583] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.120885][ T583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.128917][ T583] usb 5-1: Product: â° [ 532.133090][ T583] usb 5-1: Manufacturer: 娱‾ꬾè´ç­™îƒ†é¿ƒáªžå¨— [ 532.140302][ T583] usb 5-1: SerialNumber: à°„ [ 532.146376][T23139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 532.153666][T23139] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 532.561839][T23138] rust_binder: Write failure EFAULT in pid:78 [ 532.564675][ T583] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 532.585560][ T583] usb 5-1: USB disconnect, device number 82 [ 532.687641][T23205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7588'. [ 532.697178][T23205] overlayfs: failed to resolve './bus': -2 [ 532.718465][T23207] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7589'. [ 532.899726][T23230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2070 sclass=netlink_route_socket pid=23230 comm=syz.2.7598 [ 533.091608][T23238] netlink: 8224 bytes leftover after parsing attributes in process `syz.4.7601'. [ 533.130959][T23242] rust_binder: Error while translating object. [ 533.131020][T23242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 533.137288][T23242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:85 [ 533.159257][T23244] rust_binder: Write failure EFAULT in pid:87 [ 533.349414][T23251] overlayfs: failed to clone lowerpath [ 533.454244][T23249] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 533.454269][T23249] rust_binder: Read failure Err(EFAULT) in pid:92 [ 533.462724][T23249] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 533.717293][T23272] rust_binder: Got transaction with invalid offset. [ 533.717381][T23272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 533.724198][T23272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:100 [ 533.766011][T23274] binder: Unknown parameter 'fowner>00000000000000000000' [ 533.853495][T23284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 533.853522][T23284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:112 [ 533.880241][T23286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:114 [ 533.911281][T23289] kvm: kvm [23288]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xeb [ 534.348668][T23299] overlayfs: failed to clone lowerpath [ 534.498517][T23301] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 534.506846][T23301] binder: Unknown parameter 'stats7ZÜ}UŒÝ [ 534.506846][T23301] ª?4¯qö(æžm_¿DiÔ7Ž†¢u~FCœã˜‡˜÷¢µŒvä_‘¨G!mm Ïû[ÕQfþÈ0­ªé' [ 534.531664][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 534.531679][ T36] audit: type=1400 audit(2016777906.848:4197): avc: denied { listen } for pid=23302 comm="syz.4.7628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 534.536269][T23303] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 534.565536][T23303] rust_binder: Write failure EINVAL in pid:121 [ 534.747378][T23320] 9pnet_fd: Insufficient options for proto=fd [ 534.808454][T23322] netlink: 679 bytes leftover after parsing attributes in process `syz.4.7635'. [ 534.897755][T23333] overlayfs: failed to clone upperpath [ 535.469177][T23374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7652'. [ 535.632572][ T36] audit: type=1400 audit(2016777907.948:4198): avc: denied { getattr } for pid=23417 comm="syz.2.7666" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=98741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 535.855220][T23450] 9pnet_fd: Insufficient options for proto=fd [ 535.885938][T23420] overlay: ./bus is not a directory [ 535.891215][ T36] audit: type=1400 audit(2016777908.208:4199): avc: denied { mounton } for pid=23419 comm="syz.2.7667" path="/bus" dev="rootfs" ino=92057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 536.469555][ T36] audit: type=1400 audit(2016777908.788:4200): avc: denied { map } for pid=23478 comm="syz.6.7687" path="socket:[98285]" dev="sockfs" ino=98285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 536.495928][T23481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23481 comm=syz.6.7687 [ 536.513063][T23481] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23481 comm=syz.6.7687 [ 536.966259][ T36] audit: type=1326 audit(2016777909.288:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23469 comm="syz.4.7684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4a398f6c9 code=0x7fc00000 [ 537.243229][T23568] overlayfs: failed to clone upperpath [ 537.329379][ T36] audit: type=1400 audit(2016777909.648:4202): avc: denied { listen } for pid=23569 comm="syz.1.7719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 537.386797][T23586] netlink: 196 bytes leftover after parsing attributes in process `syz.4.7724'. [ 537.493938][T23591] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7726'. [ 537.884918][T23624] 9pnet_fd: Insufficient options for proto=fd [ 538.682054][T23665] overlayfs: failed to clone lowerpath [ 538.745720][T23687] netlink: 'syz.4.7754': attribute type 16 has an invalid length. [ 538.754657][T23687] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.7754'. [ 538.779793][T23692] tmpfs: Unknown parameter 'no' [ 538.807244][T23699] tipc: Enabling of bearer rejected, failed to enable media [ 539.069789][T23722] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7765'. [ 539.864033][T23793] netlink: 'syz.2.7789': attribute type 1 has an invalid length. [ 539.872018][T23793] netlink: 'syz.2.7789': attribute type 3 has an invalid length. [ 539.882791][T23793] netlink: 296 bytes leftover after parsing attributes in process `syz.2.7789'. [ 539.887142][T23796] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 539.958660][T23825] overlay: filesystem on ./bus is read-only [ 540.430671][T23865] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7813'. [ 540.434242][T23866] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7813'. [ 540.608100][T23877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7816'. [ 540.751375][T23883] 9pnet_fd: Insufficient options for proto=fd [ 540.976103][T23902] 9pnet: Could not find request transport: f&00000000000000000000' [ 547.094162][T24345] fuse: Unknown parameter 'euid>00000000000000000000' [ 547.927660][T24435] overlayfs: failed to clone upperpath [ 547.995850][ T36] audit: type=1107 audit(2016777920.259:4204): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 548.295422][T24475] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8034'. [ 548.476713][T24488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8038'. [ 548.495560][T24488] overlayfs: failed to clone lowerpath [ 548.515174][T24495] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 548.525601][ T36] audit: type=1400 audit(2016777920.766:4205): avc: denied { relabelto } for pid=24493 comm="syz.1.8041" name="file0" dev="tmpfs" ino=3033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0" [ 548.552781][ T36] audit: type=1400 audit(2016777920.766:4206): avc: denied { associate } for pid=24493 comm="syz.1.8041" name="file0" dev="tmpfs" ino=3033 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pinentry_exec_t:s0" [ 548.580065][T24494] bridge0: port 3(syz_tun) entered blocking state [ 548.587043][T24494] bridge0: port 3(syz_tun) entered disabled state [ 548.593929][T24494] syz_tun: entered allmulticast mode [ 548.600084][T24494] syz_tun: entered promiscuous mode [ 548.605717][T24494] bridge0: port 3(syz_tun) entered blocking state [ 548.612179][T24494] bridge0: port 3(syz_tun) entered forwarding state [ 548.678674][T24505] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8044'. [ 548.787636][T24525] overlayfs: failed to clone upperpath [ 548.915499][T24546] /dev/loop0: Can't lookup blockdev [ 549.078459][T24580] 9pnet_fd: Insufficient options for proto=fd [ 549.086553][T24580] overlay: ./bus is not a directory [ 550.196056][T24684] IPv6: NLM_F_CREATE should be specified when creating new route [ 550.320143][ T36] audit: type=1400 audit(2016777922.445:4207): avc: denied { lock } for pid=24691 comm="syz.6.8112" path="socket:[101910]" dev="sockfs" ino=101910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 551.981853][T24800] validate_nla: 28 callbacks suppressed [ 551.981870][T24800] netlink: 'syz.4.8146': attribute type 46 has an invalid length. [ 552.029377][T24796] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.043989][T24796] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.051090][T24796] bridge_slave_0: entered allmulticast mode [ 552.057766][T24796] bridge_slave_0: entered promiscuous mode [ 552.064491][T24796] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.071541][T24796] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.079778][T24796] bridge_slave_1: entered allmulticast mode [ 552.086248][T24796] bridge_slave_1: entered promiscuous mode [ 552.155126][T24796] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.162214][T24796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.169469][T24796] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.176538][T24796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.198969][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.206404][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.218275][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.225338][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.232906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.239971][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.265761][T24796] veth0_vlan: entered promiscuous mode [ 552.276612][T24796] veth1_macvtap: entered promiscuous mode [ 552.310188][T24838] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 552.317684][T24838] rust_binder: Write failure EINVAL in pid:2 [ 552.607875][ T331] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 552.785956][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 133, changing to 11 [ 552.810277][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49441, setting to 1024 [ 552.821469][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.834443][ T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.843537][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.852285][ T331] usb 3-1: config 0 descriptor?? [ 553.287272][ T331] usbhid 3-1:0.0: can't add hid device: -71 [ 553.293331][ T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 553.302292][ T331] usb 3-1: USB disconnect, device number 118 [ 554.089104][ T7211] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 554.250129][ T7211] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 554.258777][ T7211] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.268929][ T7211] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 554.277932][ T7211] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.289972][ T7211] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 554.299143][ T7211] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 554.307345][ T7211] usb 3-1: Product: syz [ 554.311518][ T7211] usb 3-1: Manufacturer: syz [ 554.318643][ T7211] cdc_wdm 3-1:1.0: skipping garbage [ 554.323883][ T7211] cdc_wdm 3-1:1.0: skipping garbage [ 554.329555][ T7211] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 554.335501][ T7211] cdc_wdm 3-1:1.0: Unknown control protocol [ 554.533532][T24888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.542227][T24888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.764278][ T9] usb 3-1: USB disconnect, device number 119 [ 555.229463][ T9] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 555.367962][ T9] usb 3-1: device descriptor read/64, error -71 [ 555.623742][ T9] usb 3-1: device descriptor read/64, error -71 [ 555.879530][ T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 556.018180][ T9] usb 3-1: device descriptor read/64, error -71 [ 556.273860][ T9] usb 3-1: device descriptor read/64, error -71 [ 556.391159][ T9] usb usb3-port1: attempt power cycle [ 556.753409][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 556.775697][ T9] usb 3-1: device descriptor read/8, error -71 [ 556.914344][ T9] usb 3-1: device descriptor read/8, error -71 [ 557.392855][ T9] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 557.416730][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 557.425851][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.433827][ T9] usb 3-1: Product: syz [ 557.438023][ T9] usb 3-1: Manufacturer: syz [ 557.442633][ T9] usb 3-1: SerialNumber: syz [ 557.447867][ T9] usb 3-1: config 0 descriptor?? [ 560.247801][ T9] usb 3-1: USB disconnect, device number 123 [ 560.327501][T24960] incfs: mount failed -22 [ 560.568721][ T9] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 560.753975][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.774202][ T9] usb 3-1: New USB device found, idVendor=187f, idProduct=0202, bcdDevice=39.91 [ 560.792516][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.813815][ T9] usb 3-1: Product: syz [ 560.818024][ T9] usb 3-1: Manufacturer: syz [ 560.822630][ T9] usb 3-1: SerialNumber: syz [ 560.839872][ T9] usb 3-1: config 0 descriptor?? [ 560.840713][T21537] bridge0: port 3(syz_tun) entered disabled state [ 560.869120][T24987] overlayfs: failed to clone upperpath [ 560.876933][T21537] syz_tun (unregistering): left allmulticast mode [ 560.892855][T21537] syz_tun (unregistering): left promiscuous mode [ 560.899874][T21537] bridge0: port 3(syz_tun) entered disabled state [ 560.919055][ T36] audit: type=1326 audit(2016777932.382:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24991 comm="syz.4.8217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4a398f6c9 code=0x0 [ 560.951516][T24988] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.958585][T24988] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.965864][T24988] bridge_slave_0: entered allmulticast mode [ 560.972139][T24988] bridge_slave_0: entered promiscuous mode [ 560.978718][T24988] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.985807][T24988] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.992856][T24988] bridge_slave_1: entered allmulticast mode [ 560.999268][T24988] bridge_slave_1: entered promiscuous mode [ 561.008766][ T2984] bridge_slave_1: left allmulticast mode [ 561.014519][ T2984] bridge_slave_1: left promiscuous mode [ 561.020339][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.028010][ T2984] bridge_slave_0: left allmulticast mode [ 561.033783][ T2984] bridge_slave_0: left promiscuous mode [ 561.039894][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.047781][ T2984] tipc: Resetting bearer [ 561.066096][ T2984] tipc: Disabling bearer [ 561.072505][ T7211] usb 3-1: USB disconnect, device number 124 [ 561.159430][T24988] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.166537][T24988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.173830][T24988] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.180903][T24988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.200447][ T2984] tipc: Left network mode [ 561.205866][ T2987] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.214410][ T2984] veth1_macvtap: left promiscuous mode [ 561.220024][ T2984] veth0_vlan: left promiscuous mode [ 561.261823][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.268931][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.298188][T24988] veth0_vlan: entered promiscuous mode [ 561.314189][T24988] veth1_macvtap: entered promiscuous mode [ 561.344664][T25015] incfs: Can't find or create .index dir in ./file0 [ 561.351517][T25015] incfs: mount failed -1 [ 561.433078][T25020] netlink: 'syz.1.8221': attribute type 11 has an invalid length. [ 561.442317][T25020] rust_binder: Error while translating object. [ 561.442376][T25020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 561.448812][T25020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7 [ 561.890239][ T7211] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 561.975685][ T331] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 562.013642][T25040] cannot load conntrack support for proto=3 [ 562.061793][ T7211] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.071759][ T7211] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.084936][ T7211] usb 3-1: config 0 interface 0 has no altsetting 0 [ 562.091557][ T7211] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 562.100704][ T7211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.111827][ T7211] usb 3-1: config 0 descriptor?? [ 562.147050][ T331] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 562.159695][ T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.169852][ T331] usb 2-1: config 0 has no interfaces? [ 562.175440][ T331] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 562.184492][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.193238][ T331] usb 2-1: config 0 descriptor?? [ 562.414062][T25027] /dev/rnullb0: Can't lookup blockdev [ 562.419967][ T331] usb 2-1: USB disconnect, device number 22 [ 562.553185][ T7211] wacom 0003:056A:00C5.0022: hidraw0: USB HID v0.00 Device [HID 056a:00c5] on usb-dummy_hcd.2-1/input0 [ 562.760263][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.768855][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.829729][ T31] usb 3-1: USB disconnect, device number 125 [ 562.998644][T25075] netlink: 'syz.6.8242': attribute type 11 has an invalid length. [ 563.194533][T25107] netlink: 'syz.4.8252': attribute type 1 has an invalid length. [ 563.202383][T25107] netlink: 'syz.4.8252': attribute type 3 has an invalid length. [ 563.210122][T25107] netlink: 296 bytes leftover after parsing attributes in process `syz.4.8252'. [ 563.233244][ T7211] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 563.395267][ T7211] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 563.404380][ T7211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.412365][ T7211] usb 2-1: Product: syz [ 563.416742][ T7211] usb 2-1: Manufacturer: syz [ 563.421359][ T7211] usb 2-1: SerialNumber: syz [ 563.536292][T25138] fuse: Unknown parameter 'grou‰ [ 563.536292][T25138] ' [ 563.674898][T25142] input: syz0 as /devices/virtual/input/input40 [ 563.745162][T25158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 563.961607][T25174] netlink: 'syz.6.8273': attribute type 58 has an invalid length. [ 564.053905][ T31] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 564.235879][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.246866][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.256677][ T31] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 564.265752][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.274479][ T31] usb 3-1: config 0 descriptor?? [ 564.495102][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 564.501307][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 564.518004][ T31] usb 3-1: USB disconnect, device number 126 [ 564.661205][ T7211] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:e5:f5:e7:75:e7 [ 564.673042][ T7211] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 564.885046][ T31] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 565.056760][ T31] usb 3-1: config 0 interface 0 altsetting 247 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 565.068102][ T31] usb 3-1: config 0 interface 0 altsetting 247 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 565.081380][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 565.088110][ T31] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 565.097321][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.109027][ T31] usb 3-1: config 0 descriptor?? [ 565.116022][T25194] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 565.130102][ C1] usb 2-1: eth1: intr status -71 [ 565.135106][ C1] usb 2-1: Rx status -71 [ 565.139849][ C1] usb 2-1: eth1: intr status -71 [ 565.144854][ C1] usb 2-1: Rx status -71 [ 565.149841][ C1] usb 2-1: eth1: intr status -71 [ 565.154854][ C1] usb 2-1: Rx status -71 [ 565.159187][ T7211] usb 2-1: USB disconnect, device number 23 [ 565.165181][ C1] usb 2-1: eth1: intr status -71 [ 565.167190][ T149] usb 2-1: device reset failed [ 565.287220][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8289'. [ 565.376056][T25264] fuse: Bad value for 'group_id' [ 565.381093][T25264] fuse: Bad value for 'group_id' [ 565.498518][T25275] overlayfs: failed to clone lowerpath [ 565.525681][T25281] netlink: 37 bytes leftover after parsing attributes in process `syz.4.8301'. [ 565.608681][ T31] itetech 0003:06CB:73F5.0023: hidraw0: USB HID vff.ed Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 565.823513][ T31] usb 3-1: USB disconnect, device number 127 [ 565.950695][ T331] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 565.995567][T25302] bridge0: port 3(veth1_macvtap) entered blocking state [ 566.002583][T25302] bridge0: port 3(veth1_macvtap) entered disabled state [ 566.009613][T25302] veth1_macvtap: entered allmulticast mode [ 566.015842][T25302] veth1_macvtap: left allmulticast mode [ 566.111621][ T331] usb 2-1: config 66 has an invalid interface number: 105 but max is 0 [ 566.127990][ T331] usb 2-1: config 66 has no interface number 0 [ 566.138717][ T331] usb 2-1: config 66 interface 105 has no altsetting 0 [ 566.149393][ T331] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d [ 566.163786][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.175529][ T331] usb 2-1: Product: syz [ 566.179721][ T331] usb 2-1: Manufacturer: syz [ 566.195258][ T331] usb 2-1: SerialNumber: syz [ 566.485597][T25293] __vm_enough_memory: 1 callbacks suppressed [ 566.485617][T25293] __vm_enough_memory: pid: 25293, comm: syz.1.8304, bytes: 18014402804453376 not enough memory for the allocation [ 566.632773][ T583] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 566.686117][ T331] usb 2-1: USB disconnect, device number 24 [ 566.794416][ T36] audit: type=1400 audit(2016777937.899:4209): avc: denied { write } for pid=25365 comm="syz.6.8327" name="/" dev="configfs" ino=1535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 566.795345][ T583] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 566.825350][ T36] audit: type=1400 audit(2016777937.937:4210): avc: denied { add_name } for pid=25365 comm="syz.6.8327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 566.825793][ T583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.848280][ T36] audit: type=1400 audit(2016777937.937:4211): avc: denied { create } for pid=25365 comm="syz.6.8327" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 566.855322][ T583] usb 3-1: Product: syz [ 566.879715][ T583] usb 3-1: Manufacturer: syz [ 566.884349][ T583] usb 3-1: SerialNumber: syz [ 567.093005][T25397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8337'. [ 567.266519][T25419] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8344'. [ 567.873384][T25429] netlink: 'syz.4.8348': attribute type 6 has an invalid length. [ 567.915442][T25437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25437 comm=syz.6.8351 [ 567.932156][T25439] 9pnet: Could not find request transport: xen [ 567.964801][T25446] overlayfs: failed to clone lowerpath [ 567.964992][T25448] overlayfs: failed to clone lowerpath [ 568.001897][T25453] 9pnet_fd: Insufficient options for proto=fd [ 568.116853][T25470] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 568.119912][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.125985][ T583] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:19:2c:2b:d8:2e [ 568.128201][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.137120][ T583] rtl8150 3-1:1.0: eth1: rtl8150 is detected [ 568.144246][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.156039][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.165211][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.179343][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.185727][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.193366][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.199702][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.205937][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.212552][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.218764][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.225151][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.233905][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.240097][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.246435][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.252827][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.260116][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.266266][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.272431][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.278653][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.284809][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.290937][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.297080][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.303177][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.309349][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.315444][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.321611][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.327756][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.333900][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.340052][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.346165][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.352324][T25471] rust_binder: Write failure EINVAL in pid:30 [ 568.577413][ C1] usb 3-1: eth1: intr status -71 [ 568.588525][ C1] usb 3-1: Rx status -71 [ 568.592929][ C1] usb 3-1: eth1: intr status -71 [ 568.597932][ C1] usb 3-1: Rx status -71 [ 568.602306][ C1] usb 3-1: eth1: intr status -71 [ 568.607286][ C1] usb 3-1: Rx status -71 [ 568.611601][ T7211] usb 3-1: USB disconnect, device number 2 [ 568.617468][ C1] usb 3-1: eth1: intr status -71 [ 568.619704][ T149] usb 3-1: device reset failed [ 569.144478][T25539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.144508][T25539] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 569.209531][T25556] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8379'. [ 569.460921][T25561] __vm_enough_memory: pid: 25561, comm: syz.2.8380, bytes: 18014402804453376 not enough memory for the allocation [ 569.541225][T25564] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507) [ 569.541246][T25564] rust_binder: Error while translating object. [ 569.553355][T25564] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 569.559534][T25564] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 569.605377][T25566] Invalid logical block size (14) [ 570.108436][T25569] fuse: Unknown parameter 'rootmo0000040000' [ 570.419120][ T12] bridge_slave_1: left allmulticast mode [ 570.425402][ T12] bridge_slave_1: left promiscuous mode [ 570.431258][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.439508][ T12] bridge_slave_0: left allmulticast mode [ 570.445164][ T12] bridge_slave_0: left promiscuous mode [ 570.451181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.576849][T25582] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.583891][T25582] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.590990][T25582] bridge_slave_0: entered allmulticast mode [ 570.597379][T25582] bridge_slave_0: entered promiscuous mode [ 570.604543][ T12] veth1_macvtap: left promiscuous mode [ 570.610265][ T12] veth0_vlan: left promiscuous mode [ 570.654522][T25582] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.661600][T25582] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.668691][T25582] bridge_slave_1: entered allmulticast mode [ 570.675062][T25582] bridge_slave_1: entered promiscuous mode [ 570.732378][T25582] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.739473][T25582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.746793][T25582] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.753840][T25582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.777180][ T2988] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.784622][ T2988] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.798769][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.805858][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.813647][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.820694][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.861262][T25606] netlink: 116 bytes leftover after parsing attributes in process `syz.6.8395'. [ 570.867344][T25582] veth0_vlan: entered promiscuous mode [ 570.878943][T25606] tmpfs: Unknown parameter '' [ 570.886717][T25582] veth1_macvtap: entered promiscuous mode [ 570.964064][T25617] rust_binder: Write failure EFAULT in pid:4 [ 571.055960][ T36] audit: type=1326 audit(2016777941.906:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25618 comm="syz.7.8402" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabe638f6c9 code=0x0 [ 571.090676][T25630] rust_binder: Write failure EFAULT in pid:58 [ 571.121217][T25636] rust_binder: Error while translating object. [ 571.127369][T25636] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 571.138927][T25636] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 571.160021][T25636] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 571.646020][T25686] /dev/loop0: Can't lookup blockdev [ 571.909054][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8427'. [ 572.117524][ T36] audit: type=1400 audit(2016777942.889:4213): avc: granted { setsecparam } for pid=25714 comm="syz.1.8431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 572.136881][ T36] audit: type=1400 audit(2016777942.889:4214): avc: granted { setsecparam } for pid=25714 comm="syz.1.8431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 572.164879][ T36] audit: type=1326 audit(2016777942.908:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25717 comm="syz.4.8432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4a398f6c9 code=0x0 [ 572.227910][ T583] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 572.385458][ T36] audit: type=1326 audit(2016777943.143:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.6.8438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f4f8f6c9 code=0x0 [ 572.408676][ T36] audit: type=1326 audit(2016777943.143:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25738 comm="syz.6.8438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61f4f8f6c9 code=0x0 [ 572.410559][ T583] usb 8-1: Using ep0 maxpacket: 32 [ 572.437844][ T583] usb 8-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 572.448137][ T583] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 572.461151][ T583] usb 8-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 0.08 [ 572.470233][ T583] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.479994][ T583] usb 8-1: config 0 descriptor?? [ 572.485868][ T583] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 572.493620][ T583] usb 8-1: Detected SIO [ 572.498394][ T583] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 572.611689][ T551] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 572.724345][T25711] rust_binder: Write failure EINVAL in pid:20 [ 572.771519][ T551] usb 2-1: Using ep0 maxpacket: 32 [ 572.783923][ T551] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.794093][ T551] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 572.794436][ T9] usb 8-1: USB disconnect, device number 2 [ 572.803053][ T551] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 572.818617][ T551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.820942][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 572.827712][ T551] usb 2-1: config 0 descriptor?? [ 572.841342][ T9] ftdi_sio 8-1:0.0: device disconnected [ 573.024192][T25749] /dev/loop0: Can't lookup blockdev [ 575.565448][ T551] usb 2-1: USB disconnect, device number 25 [ 590.384012][ T36] audit: type=1107 audit(2016777960.030:4218): pid=25760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='80¦û§A\| *½:°jG7çk³eFx[=`‰‚À;Áuh(_!_l´e‰ŠNÇ)Œ‘º¨"¢› ò_a½8–6üÌ~c£1\ÖTæN²Á˜Y0 [ 590.384012][ T36] ?³;óËW©Üça–)4@z L†]Y,è€ÁÞ²z§¥Ý*ä1ë§ÓºV3”A›#¿N• ãÛÌV|ˆ.îðDÁ­?b„ó³àO"Çs°ØüþÊŸˆ“ÿš§šX’Ô€<,vüªÕ® f¢úÒ [ 590.384012][ T36] jŠ' [ 590.410083][T25767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8448'. [ 591.755529][ T583] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 591.914527][ T583] usb 2-1: Using ep0 maxpacket: 8 [ 591.920624][ T583] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 591.929033][ T583] usb 2-1: config 179 has no interface number 0 [ 591.935299][ T583] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 591.946350][ T583] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 591.957585][ T583] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 591.968832][ T583] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 591.980243][ T583] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 591.993475][ T583] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 592.002570][ T583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.014852][T25803] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 592.238317][T25803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.246943][T25803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.256594][ T583] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input41 [ 592.701634][T25803] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 592.701668][T25803] rust_binder: Error in use_page_slow: EBUSY [ 592.712091][T25803] rust_binder: use_range failure EBUSY [ 592.718222][T25803] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 592.723707][T25803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 592.731518][T25803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:100 [ 592.742450][ T9] usb 2-1: USB disconnect, device number 26 [ 592.742489][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 592.765674][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 592.774810][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 593.060154][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8472'. [ 593.659952][T25859] 9pnet_fd: Insufficient options for proto=fd [ 593.812719][T25874] netlink: 236 bytes leftover after parsing attributes in process `syz.4.8486'. [ 594.408163][ T36] audit: type=1326 audit(2016777963.802:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25905 comm="syz.6.8497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61f4f8f6c9 code=0x0 [ 595.182545][T25940] netlink: 37 bytes leftover after parsing attributes in process `syz.1.8509'. [ 595.463865][ T7211] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 595.623742][ T7211] usb 2-1: Using ep0 maxpacket: 16 [ 595.630011][ T7211] usb 2-1: config 1 interface 0 has no altsetting 0 [ 595.638295][ T7211] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 595.647401][ T7211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.655425][ T7211] usb 2-1: Product: á  [ 595.659619][ T7211] usb 2-1: Manufacturer: ì’ꇹ肒䟲á–宪ï¹áž…悳ï à·´ä®¥ë…½áŸƒà¬¶í’­ë“¹å‚‘ ꔳ쌅鼽哉滥䰛橆啹ⴾᱳ뢩ê²ê¡›á³³ä€šë¼–ìŒâ±ºê½ªë‚§îœå»éˆ«é¾±ë¸µå’ï¬á³œî“˜ã ‡éžé¡ª [ 595.678099][ T7211] usb 2-1: SerialNumber: à ‰ [ 595.900503][T25944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.909157][T25944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.925980][ T7211] usbhid 2-1:1.0: can't add hid device: -71 [ 595.932974][T25963] __vm_enough_memory: pid: 25963, comm: syz.1.8516, bytes: 18014402804453376 not enough memory for the allocation [ 595.939879][ T7211] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 595.963932][ T7211] usb 2-1: USB disconnect, device number 27 [ 596.236205][T25985] overlayfs: failed to clone upperpath [ 596.245538][T25970] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 596.253014][T25970] rust_binder: Write failure EINVAL in pid:132 [ 596.743680][T26012] overlayfs: failed to clone lowerpath [ 596.858361][T26031] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 2 [ 596.865975][T26031] rust_binder: Write failure EINVAL in pid:141 [ 596.866138][T26034] rust_binder: Write failure EFAULT in pid:31 [ 597.270791][T26059] netlink: 'syz.1.8548': attribute type 16 has an invalid length. [ 597.284805][T26059] netlink: 'syz.1.8548': attribute type 2 has an invalid length. [ 597.293030][T26059] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.8548'. [ 597.322994][T26061] rust_binder: Write failure EFAULT in pid:149 [ 597.340976][ T36] audit: type=1400 audit(2016777966.560:4220): avc: denied { read } for pid=95 comm="acpid" name="mouse0" dev="devtmpfs" ino=995 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 597.368761][ T36] audit: type=1400 audit(2016777966.560:4221): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=995 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 597.391360][ T36] audit: type=1400 audit(2016777966.560:4222): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=995 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 597.494048][ T36] audit: type=1400 audit(2016777966.701:4223): avc: denied { read } for pid=26066 comm="syz.1.8551" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 597.532689][ T36] audit: type=1400 audit(2016777966.701:4224): avc: denied { open } for pid=26066 comm="syz.1.8551" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 597.556515][ T36] audit: type=1400 audit(2016777966.720:4225): avc: denied { ioctl } for pid=26066 comm="syz.1.8551" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 597.575053][T26069] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.8547'. [ 597.582378][ T36] audit: type=1400 audit(2016777966.738:4226): avc: denied { ioctl } for pid=26066 comm="syz.1.8551" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae9d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 597.615071][ T36] audit: type=1400 audit(2016777966.767:4227): avc: denied { read write } for pid=24988 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.642948][ T36] audit: type=1400 audit(2016777966.767:4228): avc: denied { read write open } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.669719][ T36] audit: type=1400 audit(2016777966.767:4229): avc: denied { ioctl } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 597.926037][ T9] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 597.954540][T26073] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8553'. [ 598.111439][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 598.122465][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 598.132553][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.143567][ T9] usb 2-1: config 0 descriptor?? [ 598.156182][T26071] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 598.229515][T26097] fuse: Bad value for 'fd' [ 598.365812][T26108] 9pnet_fd: Insufficient options for proto=fd [ 598.501592][T26116] tipc: Started in network mode [ 598.506575][T26116] tipc: Node identity 4, cluster identity 4711 [ 598.512773][T26116] tipc: Node number set to 4 [ 598.519288][ T2984] tipc: Subscription rejected, illegal request [ 598.609433][ T9] hid-generic 0003:04F3:0755.0024: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 598.946184][ T7211] usb 2-1: USB disconnect, device number 28 [ 599.649234][T26148] rust_binder: Write failure EFAULT in pid:161 [ 599.853839][T26168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8586'. [ 600.318098][T26197] rust_binder: Error while translating object. [ 600.318141][T26197] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 600.325152][T26197] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 600.498655][T26208] rust_binder: Error while translating object. [ 600.507981][T26208] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 600.514187][T26208] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:190 [ 600.586982][T26210] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 601.495045][T26244] fuse: Unknown parameter 'Ë[À¹ù+—fd' [ 601.727211][T26258] rust_binder: Error while translating object. [ 601.727252][T26258] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 601.739839][T26258] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:197 [ 602.030038][T26285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8628'. [ 602.200178][ T330] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 602.362541][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.373908][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.383712][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 602.396675][ T330] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 602.405942][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.415808][ T330] usb 2-1: config 0 descriptor?? [ 602.491126][T26302] 9pnet_fd: Insufficient options for proto=fd [ 602.583229][T26308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26308 comm=syz.4.8638 [ 602.692615][ T36] kauditd_printk_skb: 888 callbacks suppressed [ 602.692649][ T36] audit: type=1400 audit(2016777971.579:5118): avc: denied { read } for pid=26277 comm="syz.1.8626" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.722888][ T36] audit: type=1400 audit(2016777971.579:5119): avc: denied { read open } for pid=26277 comm="syz.1.8626" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.747211][ T36] audit: type=1400 audit(2016777971.579:5120): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 602.771910][ T36] audit: type=1400 audit(2016777971.636:5121): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.797637][ T36] audit: type=1400 audit(2016777971.636:5122): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.963438][ T36] audit: type=1400 audit(2016777971.833:5123): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 602.988559][ T36] audit: type=1400 audit(2016777971.833:5124): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.015675][ T36] audit: type=1400 audit(2016777971.833:5125): avc: denied { ioctl } for pid=26277 comm="syz.1.8626" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 603.034489][T26280] audit: audit_backlog=65 > audit_backlog_limit=64 [ 603.046476][ T36] audit: type=1400 audit(2016777971.833:5126): avc: denied { read } for pid=26277 comm="syz.1.8626" dev="nsfs" ino=4026533133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 603.074886][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 603.080939][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 603.089865][ T330] usb 2-1: USB disconnect, device number 29 [ 603.198862][T26317] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 603.200427][T26317] rust_binder: Write failure EINVAL in pid:210 [ 603.309358][T26320] rust_binder: Error while translating object. [ 603.315728][T26320] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 603.322052][T26320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:212 [ 604.357767][T26344] /dev/rnullb0: Can't lookup blockdev [ 605.518289][T26372] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 605.677425][T26375] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26375 comm=syz.1.8659 [ 605.690598][T26374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26374 comm=syz.1.8659 [ 605.997319][T26393] rust_binder: Error while translating object. [ 605.997355][T26393] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 606.003543][T26393] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:244 [ 606.107746][T26395] No source specified [ 606.137501][T26395] rust_binder: Error while translating object. [ 606.137536][T26395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 606.143821][T26395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:246 [ 606.353813][T26402] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 606.366459][T26402] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:253 [ 606.514274][T26411] rust_binder: Write failure EFAULT in pid:256 [ 606.707624][T26422] netlink: 'syz.4.8676': attribute type 10 has an invalid length. [ 606.723035][T26422] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8676'. [ 607.200917][T26435] can0: slcan on ttyS3. [ 607.252559][T26429] can0 (unregistered): slcan off ttyS3. [ 607.258207][T26429] Falling back ldisc for ttyS3. [ 607.492543][T26453] binder: Bad value for 'stats' [ 608.059154][ T36] kauditd_printk_skb: 623 callbacks suppressed [ 608.059173][ T36] audit: type=1400 audit(2016777976.618:5748): avc: denied { create } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 608.103260][ T36] audit: type=1400 audit(2016777976.646:5749): avc: denied { sqpoll } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 608.129659][ T36] audit: type=1400 audit(2016777976.646:5750): avc: denied { create } for pid=26509 comm="syz.4.8705" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 608.151967][ T36] audit: type=1400 audit(2016777976.646:5751): avc: denied { map } for pid=26509 comm="syz.4.8705" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 608.177381][ T36] audit: type=1400 audit(2016777976.646:5752): avc: denied { read write } for pid=26509 comm="syz.4.8705" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=109214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 608.203251][ T36] audit: type=1400 audit(2016777976.646:5753): avc: denied { create } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 608.224873][ T36] audit: type=1400 audit(2016777976.646:5754): avc: denied { create } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.245483][ T36] audit: type=1400 audit(2016777976.655:5755): avc: denied { setopt } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.266159][ T36] audit: type=1400 audit(2016777976.655:5756): avc: denied { bind } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.286792][ T36] audit: type=1400 audit(2016777976.655:5757): avc: denied { write } for pid=26509 comm="syz.4.8705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 608.339184][T26495] rust_binder: Write failure EINVAL in pid:277 [ 608.557169][T26526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26526 comm=syz.6.8711 [ 608.633100][T26531] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8713'. [ 609.359506][T26553] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8720'. [ 609.368700][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8720'. [ 610.066288][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 610.204853][ T9] usb 2-1: device descriptor read/64, error -71 [ 610.460670][ T9] usb 2-1: device descriptor read/64, error -71 [ 610.716472][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 610.844355][T26612] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 610.865678][ T9] usb 2-1: device descriptor read/64, error -71 [ 611.124365][ T9] usb 2-1: device descriptor read/64, error -71 [ 611.238814][ T9] usb usb2-port1: attempt power cycle [ 611.331261][T26629] rust_binder: inc_ref_done called when no active inc_refs [ 611.416987][T26641] fuse: Unknown parameter 'allow_o0mŒ' [ 611.611794][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 611.646785][ T9] usb 2-1: device descriptor read/8, error -71 [ 611.785011][ T9] usb 2-1: device descriptor read/8, error -71 [ 612.051723][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 612.092238][ T9] usb 2-1: device descriptor read/8, error -71 [ 612.242613][ T9] usb 2-1: device descriptor read/8, error -71 [ 612.358014][ T9] usb usb2-port1: unable to enumerate USB device [ 612.437964][T26681] 9pnet_fd: Insufficient options for proto=fd [ 612.438030][T26682] 9pnet_fd: Insufficient options for proto=fd [ 613.140868][T26689] netlink: 'syz.4.8772': attribute type 4 has an invalid length. [ 613.283626][T26713] 9pnet_fd: Insufficient options for proto=fd [ 613.520654][ T36] kauditd_printk_skb: 383 callbacks suppressed [ 613.520674][ T36] audit: type=1400 audit(2016777981.740:6141): avc: denied { create } for pid=26737 comm="syz.6.8789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.547849][ T36] audit: type=1400 audit(2016777981.740:6142): avc: denied { write } for pid=26737 comm="syz.6.8789" path="socket:[109676]" dev="sockfs" ino=109676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.572119][ T36] audit: type=1400 audit(2016777981.740:6143): avc: denied { write } for pid=26737 comm="syz.6.8789" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.596060][ T36] audit: type=1400 audit(2016777981.740:6144): avc: denied { write } for pid=26737 comm="syz.6.8789" path="socket:[109676]" dev="sockfs" ino=109676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.624487][ T36] audit: type=1400 audit(2016777981.740:6145): avc: denied { write } for pid=26737 comm="syz.6.8789" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.644809][ T36] audit: type=1400 audit(2016777981.740:6146): avc: denied { write } for pid=26737 comm="syz.6.8789" path="socket:[109676]" dev="sockfs" ino=109676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.668650][ T36] audit: type=1400 audit(2016777981.740:6147): avc: denied { write } for pid=26737 comm="syz.6.8789" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 613.689470][ T36] audit: type=1400 audit(2016777981.796:6148): avc: denied { create } for pid=26742 comm="syz.6.8790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.711101][ T36] audit: type=1400 audit(2016777981.796:6149): avc: denied { write } for pid=26742 comm="syz.6.8790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.733089][ T36] audit: type=1400 audit(2016777981.796:6150): avc: denied { create } for pid=26742 comm="syz.6.8790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 613.787161][T26760] overlayfs: failed to resolve './file1': -2 [ 613.831215][T26762] netlink: 4432 bytes leftover after parsing attributes in process `syz.6.8796'. [ 614.106244][T26778] netlink: 'syz.1.8801': attribute type 1 has an invalid length. [ 614.114083][T26778] netlink: 'syz.1.8801': attribute type 3 has an invalid length. [ 614.122939][T26778] netlink: 296 bytes leftover after parsing attributes in process `syz.1.8801'. [ 614.233194][T26784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26784 comm=syz.4.8804 [ 614.437316][T26797] rust_binder: Error while translating object. [ 614.437348][T26797] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 614.454467][T26797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:302 [ 614.830756][ T331] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 614.870931][T26804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=26804 comm=syz.6.8813 [ 614.911302][T26806] IPv6: syztnl0: Disabled Multicast RS [ 615.003966][ T331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.023975][ T331] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 615.035395][ T331] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 615.050600][ T331] usb 2-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 615.060681][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.069326][ T331] usb 2-1: Product: syz [ 615.073515][ T331] usb 2-1: Manufacturer: syz [ 615.079283][ T331] usb 2-1: SerialNumber: syz [ 615.202032][T26837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26837 comm=syz.4.8825 [ 615.216867][T26839] tipc: Enabling of bearer rejected, failed to enable media [ 615.252364][T26841] netlink: 'syz.4.8827': attribute type 2 has an invalid length. [ 615.534747][T26802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.543321][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.244043][T26902] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.8844'. [ 616.448181][T26802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.463299][T26802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.481235][ T331] cdc_ncm 2-1:1.0: bind() failure [ 616.496252][ T331] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 616.508635][ T331] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 616.520497][ T331] usb 2-1: USB disconnect, device number 34 [ 616.661553][T26919] /dev/rnullb0: Can't lookup blockdev [ 616.770396][T26924] rust_binder: Write failure EFAULT in pid:94 [ 616.834441][T26929] rust_binder: 98: no such ref 0 [ 616.845789][T26929] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 616.852875][T26929] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 616.860035][T26929] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 616.867501][T26929] rust_binder: 98: no such ref 0 [ 616.922000][T26934] binder: Unknown parameter 'uid' [ 617.330231][T26950] sit0: entered promiscuous mode [ 617.370931][T26950] netlink: 'syz.6.8861': attribute type 1 has an invalid length. [ 617.421817][T26950] netlink: 1 bytes leftover after parsing attributes in process `syz.6.8861'. [ 617.570478][T26971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=26971 comm=syz.6.8866 [ 617.570821][T26969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 617.696345][T26976] netlink: 188 bytes leftover after parsing attributes in process `syz.7.8867'. [ 617.857795][ T31] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 618.028346][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 618.360804][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.380492][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.860785][ T36] kauditd_printk_skb: 2783 callbacks suppressed [ 618.860802][ T36] audit: type=1326 audit(2016777986.750:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 618.923649][ T36] audit: type=1326 audit(2016777986.750:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 618.976939][ T36] audit: type=1326 audit(2016777986.750:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 618.995096][T27038] audit: audit_backlog=65 > audit_backlog_limit=64 [ 619.014661][T27038] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 619.022013][ T36] audit: type=1326 audit(2016777986.750:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 619.031630][T27038] audit: backlog limit exceeded [ 619.047695][ T36] audit: type=1326 audit(2016777986.750:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 619.074459][ T36] audit: type=1326 audit(2016777986.750:8939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 619.098067][ T36] audit: type=1326 audit(2016777986.750:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26903 comm="syz.4.8845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb4a39c1f85 code=0x7ffc0000 [ 619.288787][T27044] rust_binder: Error while translating object. [ 619.288848][T27044] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 619.295192][T27044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:160 [ 619.546029][T27058] SELinux: Context system_u:object_r:policy_src_t:s0 is not valid (left unmapped). [ 619.941033][ T7212] hid (null): unknown global tag 0xd [ 619.949954][ T7212] hid (null): global environment stack underflow [ 619.957066][ T7212] hid (null): global environment stack underflow [ 619.965231][ T7212] hid (null): unknown global tag 0xc [ 619.971484][ T7212] hid (null): unknown global tag 0xc [ 619.976885][ T7212] hid (null): invalid report_size 2130121649 [ 619.987611][ T7212] hid (null): unknown global tag 0xd [ 619.997174][ T7212] hid (null): unknown global tag 0xc [ 620.003343][ T7212] hid (null): global environment stack underflow [ 620.009779][ T7212] hid (null): unknown global tag 0xd [ 620.016404][ T7212] hid (null): invalid report_size 14449 [ 620.022887][ T7212] hid (null): unknown global tag 0xc [ 620.028261][ T7212] hid (null): invalid report_size -339168976 [ 620.035489][ T7212] hid (null): invalid report_count 1067845627 [ 620.043597][ T7212] hid (null): unknown global tag 0xe [ 620.056855][ T7212] hid (null): usage index exceeded [ 620.071219][ T7212] hid-generic 0009:04F3:0004.0025: unknown global tag 0xd [ 620.086430][ T7212] hid-generic 0009:04F3:0004.0025: item 0 1 1 13 parsing failed [ 620.097864][ T7212] hid-generic 0009:04F3:0004.0025: probe with driver hid-generic failed with error -22 [ 620.659656][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.669913][ T31] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 620.685033][ T31] usb 2-1: can't read configurations, error -71 [ 620.753351][T27119] input: syz0 as /devices/virtual/input/input42 [ 620.944637][T27133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:332 [ 620.951633][T27134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8914'. [ 621.364501][ T31] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 621.386558][T27145] netlink: 'syz.6.8920': attribute type 27 has an invalid length. [ 621.396350][T27145] sit0: left promiscuous mode [ 621.524385][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 621.533317][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 621.544868][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.557826][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.566947][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.576434][ T31] usb 2-1: config 0 descriptor?? [ 622.134125][T27133] rust_binder: 332: no such ref 3 [ 622.139260][T27133] rust_binder: inc_ref_done called when no active inc_refs [ 622.139282][T27133] rust_binder: 332: no such ref 0 [ 622.151587][T27133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:332 [ 622.904684][T27215] netlink: 'syz.4.8939': attribute type 1 has an invalid length. [ 623.599227][T27240] incfs: Backing dir is not set, filesystem can't be mounted. [ 623.618130][T27240] incfs: mount failed -2 [ 624.162226][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 624.192650][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 624.208937][ T36] kauditd_printk_skb: 845 callbacks suppressed [ 624.208958][ T36] audit: type=1400 audit(2016777991.760:9786): avc: denied { read write open } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.257927][ T31] usb 2-1: USB disconnect, device number 36 [ 624.280966][ T36] audit: type=1400 audit(2016777991.760:9787): avc: denied { ioctl } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.329682][ T36] audit: type=1400 audit(2016777991.807:9788): avc: denied { create } for pid=27275 comm="syz.4.8960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 624.351833][ T36] audit: type=1400 audit(2016777991.807:9789): avc: denied { write } for pid=27275 comm="syz.4.8960" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 624.373594][ T36] audit: type=1400 audit(2016777991.807:9790): avc: denied { create } for pid=27275 comm="syz.4.8960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 624.416605][ T36] audit: type=1400 audit(2016777991.807:9791): avc: denied { write } for pid=27275 comm="syz.4.8960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 624.466174][ T36] audit: type=1400 audit(2016777991.854:9792): avc: denied { create } for pid=27280 comm="syz.1.8961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 624.525137][ T36] audit: type=1400 audit(2016777991.854:9793): avc: denied { map } for pid=27280 comm="syz.1.8961" path="socket:[111275]" dev="sockfs" ino=111275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 624.560994][ T36] audit: type=1400 audit(2016777991.854:9794): avc: denied { read } for pid=27280 comm="syz.1.8961" path="socket:[111275]" dev="sockfs" ino=111275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 624.629260][ T36] audit: type=1400 audit(2016777991.929:9795): avc: denied { read write } for pid=24988 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 624.793761][T27313] veth1: entered allmulticast mode [ 624.813328][T27312] veth1: left allmulticast mode [ 625.190988][ T330] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 625.353020][ T330] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 625.362249][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.374402][ T330] usb 2-1: config 0 descriptor?? [ 625.601639][T27321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27321 comm=syz.1.8974 [ 625.611756][T27335] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8978'. [ 625.792490][T27342] Invalid ELF header magic: != ELF [ 626.044393][ T330] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 626.054574][ T330] asix 2-1:0.0: probe with driver asix failed with error -61 [ 626.685853][ T551] usb 2-1: USB disconnect, device number 37 [ 626.927437][ T2988] Bluetooth: hci0: Frame reassembly failed (-84) [ 627.196055][T27361] netlink: 'syz.7.8986': attribute type 1 has an invalid length. [ 627.203880][T27361] netlink: 'syz.7.8986': attribute type 3 has an invalid length. [ 627.211965][T27361] netlink: 296 bytes leftover after parsing attributes in process `syz.7.8986'. [ 627.304777][T27363] netlink: 96 bytes leftover after parsing attributes in process `syz.7.8987'. [ 628.194197][T27390] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=13992 sclass=netlink_xfrm_socket pid=27390 comm=syz.4.8995 [ 629.092100][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 629.092231][T17356] Bluetooth: hci0: command 0x1003 tx timeout [ 629.144912][T27409] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9001'. [ 629.443804][ T331] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 629.579248][ T36] kauditd_printk_skb: 299 callbacks suppressed [ 629.579269][ T36] audit: type=1400 audit(2016777996.808:10095): avc: denied { create } for pid=27412 comm="syz.4.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.582375][ T331] usb 2-1: device descriptor read/64, error -71 [ 629.593999][ T36] audit: type=1400 audit(2016777996.808:10096): avc: denied { setopt } for pid=27412 comm="syz.4.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 629.633686][ T36] audit: type=1400 audit(2016777996.836:10097): avc: denied { create } for pid=27412 comm="syz.4.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 629.678274][ T36] audit: type=1400 audit(2016777996.836:10098): avc: denied { setopt } for pid=27412 comm="syz.4.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 629.699740][ T36] audit: type=1400 audit(2016777996.892:10099): avc: denied { execmem } for pid=27417 comm="syz.4.9005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 629.724299][ T36] audit: type=1400 audit(2016777996.892:10100): avc: denied { execute } for pid=27417 comm="syz.4.9005" path="/dev/rnullb0" dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 629.748193][ T36] audit: type=1400 audit(2016777996.892:10101): avc: denied { create } for pid=27417 comm="syz.4.9005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.770391][ T36] audit: type=1400 audit(2016777996.892:10102): avc: denied { create } for pid=27417 comm="syz.4.9005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.796485][ T36] audit: type=1400 audit(2016777996.939:10103): avc: denied { ioctl } for pid=27410 comm="syz.1.9002" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.823123][ T36] audit: type=1400 audit(2016777996.939:10104): avc: denied { ioctl } for pid=27410 comm="syz.1.9002" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.859540][ T331] usb 2-1: device descriptor read/64, error -71 [ 630.115306][ T331] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 630.264547][ T331] usb 2-1: device descriptor read/64, error -71 [ 630.530990][ T331] usb 2-1: device descriptor read/64, error -71 [ 630.639310][T27467] fuse: Bad value for 'fd' [ 630.650094][ T331] usb usb2-port1: attempt power cycle [ 630.748431][T27474] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 630.750020][T27474] rust_binder: Write failure EINVAL in pid:222 [ 630.965383][T27476] rust_binder: Read failure Err(EAGAIN) in pid:224 [ 631.011796][ T331] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 631.044394][ T331] usb 2-1: device descriptor read/8, error -71 [ 631.185884][ T331] usb 2-1: device descriptor read/8, error -71 [ 631.447670][ T331] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 631.471340][ T331] usb 2-1: device descriptor read/8, error -71 [ 631.609581][ T331] usb 2-1: device descriptor read/8, error -71 [ 631.724842][ T331] usb usb2-port1: unable to enumerate USB device [ 631.848398][T27505] 9pnet_fd: Insufficient options for proto=fd [ 632.610296][T27537] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:243 [ 632.902525][T27551] syz.7.9051: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 632.927181][T27551] CPU: 1 UID: 0 PID: 27551 Comm: syz.7.9051 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 632.927213][T27551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.927229][T27551] Call Trace: [ 632.927238][T27551] [ 632.927248][T27551] __dump_stack+0x21/0x30 [ 632.927296][T27551] dump_stack_lvl+0x10c/0x190 [ 632.927326][T27551] ? __cfi_dump_stack_lvl+0x10/0x10 [ 632.927356][T27551] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 632.927388][T27551] dump_stack+0x19/0x20 [ 632.927416][T27551] warn_alloc+0x1bc/0x2a0 [ 632.927446][T27551] ? __cfi_warn_alloc+0x10/0x10 [ 632.927474][T27551] ? kasan_save_track+0x4f/0x80 [ 632.927497][T27551] ? __kasan_kmalloc+0x96/0xb0 [ 632.927521][T27551] ? __kmalloc_cache_noprof+0x24c/0x490 [ 632.927542][T27551] ? do_sock_setsockopt+0x26d/0x400 [ 632.927573][T27551] ? __x64_sys_setsockopt+0x1b8/0x250 [ 632.927648][T27551] ? x64_sys_call+0x2adc/0x2ee0 [ 632.927680][T27551] ? do_syscall_64+0x58/0xf0 [ 632.927708][T27551] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 632.927734][T27551] __vmalloc_node_range_noprof+0x135/0x1420 [ 632.927771][T27551] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 632.927802][T27551] ? kasan_save_alloc_info+0x40/0x50 [ 632.927833][T27551] ? __kasan_kmalloc+0x96/0xb0 [ 632.927857][T27551] ? __kmalloc_cache_noprof+0x24c/0x490 [ 632.927879][T27551] vmalloc_user_noprof+0x77/0x90 [ 632.927908][T27551] ? xskq_create+0xdb/0x2a0 [ 632.927938][T27551] xskq_create+0xdb/0x2a0 [ 632.927970][T27551] xsk_init_queue+0xb6/0x120 [ 632.928001][T27551] xsk_setsockopt+0x43f/0x6f0 [ 632.928031][T27551] ? __cfi_xsk_setsockopt+0x10/0x10 [ 632.928061][T27551] ? do_futex+0x356/0x500 [ 632.928084][T27551] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 632.928110][T27551] ? security_socket_setsockopt+0x33/0xd0 [ 632.928132][T27551] ? __cfi_xsk_setsockopt+0x10/0x10 [ 632.928162][T27551] do_sock_setsockopt+0x26d/0x400 [ 632.928193][T27551] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 632.928225][T27551] __x64_sys_setsockopt+0x1b8/0x250 [ 632.928256][T27551] x64_sys_call+0x2adc/0x2ee0 [ 632.928295][T27551] do_syscall_64+0x58/0xf0 [ 632.928322][T27551] ? clear_bhb_loop+0x50/0xa0 [ 632.928347][T27551] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 632.928369][T27551] RIP: 0033:0x7fabe638f6c9 [ 632.928387][T27551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.928406][T27551] RSP: 002b:00007fabe71fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 632.928432][T27551] RAX: ffffffffffffffda RBX: 00007fabe65e5fa0 RCX: 00007fabe638f6c9 [ 632.928450][T27551] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 632.928464][T27551] RBP: 00007fabe6411f91 R08: 0000000000000004 R09: 0000000000000000 [ 632.928479][T27551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.928494][T27551] R13: 00007fabe65e6038 R14: 00007fabe65e5fa0 R15: 00007ffe141fb3f8 [ 632.928514][T27551] [ 632.928720][T27551] Mem-Info: [ 633.121102][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 633.232368][T27559] SELinux: policydb string length 138122104 does not match expected length 8 [ 633.243820][T27559] SELinux: failed to load policy [ 633.248869][T27551] active_anon:56673 inactive_anon:33 isolated_anon:0 [ 633.248869][T27551] active_file:7796 inactive_file:16839 isolated_file:0 [ 633.248869][T27551] unevictable:16443 dirty:31 writeback:0 [ 633.248869][T27551] slab_reclaimable:6138 slab_unreclaimable:81919 [ 633.248869][T27551] mapped:30238 shmem:47938 pagetables:1163 [ 633.248869][T27551] sec_pagetables:0 bounce:0 [ 633.248869][T27551] kernel_misc_reclaimable:0 [ 633.248869][T27551] free:1430814 free_pcp:15439 free_cma:0 [ 633.328667][T27551] Node 0 active_anon:191092kB inactive_anon:132kB active_file:31184kB inactive_file:67356kB unevictable:65772kB isolated(anon):0kB isolated(file):0kB mapped:121152kB dirty:124kB writeback:0kB shmem:156252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:7952kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no [ 633.387814][T27551] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB [ 633.424283][T27551] lowmem_reserve[]: 0 3921 3921 [ 633.429461][T27551] Normal free:2772132kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:205792kB inactive_anon:132kB active_file:31184kB inactive_file:67356kB unevictable:65772kB writepending:124kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:68364kB local_pcp:1160kB free_cma:0kB [ 633.463967][T27551] lowmem_reserve[]: 0 0 0 [ 633.468394][T27551] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 633.500745][T27551] Normal: 191*4kB (UE) 146*8kB (UME) 810*16kB (UME) 268*32kB (UME) 56*64kB (UME) 571*128kB (UME) 305*256kB (UME) 70*512kB (UE) 88*1024kB (UME) 27*2048kB (UM) 588*4096kB (UM) = 2767916kB [ 633.523300][T27551] 87983 total pagecache pages [ 633.528122][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.539856][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.551732][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 633.569882][T27551] 1171 pages in swap cache [ 633.574378][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.584525][T27551] Free swap = 119716kB [ 633.588705][T27551] Total swap = 124996kB [ 633.592941][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.611462][ T9] usb 2-1: config 0 descriptor?? [ 633.622055][T27551] 2097051 pages RAM [ 633.643329][T27551] 0 pages HighMem/MovableOnly [ 633.648045][T27551] 351537 pages reserved [ 633.674325][T27551] 0 pages cma reserved [ 633.682718][T27551] Memory allocations: [ 633.687516][T27551] 0 B 0 init/main.c:1370 func:do_initcalls [ 633.701251][T27551] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 633.711448][T27551] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 633.723621][T27551] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 633.732682][T27551] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 633.741538][T27551] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 633.751269][T27551] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 633.759371][T27551] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 633.770835][T27551] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 633.779740][T27551] 0 B 0 init/initramfs.c:101 func:find_link [ 633.877638][T27578] netlink: 'syz.4.9059': attribute type 5 has an invalid length. [ 633.885464][T27578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9059'. [ 634.054663][T27589] rust_binder: Error while translating object. [ 634.054706][T27589] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 634.080355][T27589] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:254 [ 634.437842][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 634.468926][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 634.487554][ T9] usb 2-1: USB disconnect, device number 42 [ 634.776270][T27623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9078'. [ 634.788596][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9078'. [ 634.954776][T27641] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 634.984944][ T36] kauditd_printk_skb: 513 callbacks suppressed [ 634.984962][ T36] audit: type=1400 audit(2016778001.874:10618): avc: denied { read write } for pid=24988 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.015785][ T36] audit: type=1400 audit(2016778001.874:10619): avc: denied { read write open } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.058081][ T36] audit: type=1400 audit(2016778001.874:10620): avc: denied { ioctl } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.084925][ T36] audit: type=1400 audit(2016778001.912:10621): avc: denied { create } for pid=27642 comm="syz.4.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 635.109527][ T36] audit: type=1400 audit(2016778001.912:10622): avc: denied { setopt } for pid=27642 comm="syz.4.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 635.129488][ T36] audit: type=1400 audit(2016778001.912:10623): avc: denied { ioctl } for pid=27642 comm="syz.4.9085" path="socket:[112134]" dev="sockfs" ino=112134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 635.154872][ T36] audit: type=1400 audit(2016778001.930:10624): avc: denied { write } for pid=27642 comm="syz.4.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 635.175263][ T36] audit: type=1400 audit(2016778001.930:10625): avc: denied { create } for pid=27642 comm="syz.4.9085" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 635.206575][ T36] audit: type=1400 audit(2016778001.930:10626): avc: denied { map } for pid=27642 comm="syz.4.9085" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=112136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 635.232317][ T36] audit: type=1400 audit(2016778001.930:10627): avc: denied { read } for pid=27642 comm="syz.4.9085" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=112136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 635.392773][T27660] netlink: 'syz.6.9091': attribute type 1 has an invalid length. [ 635.640853][T27667] overlayfs: missing 'lowerdir' [ 635.654283][T27667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 635.654316][T27667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:382 [ 635.979130][T27675] rust_binder: Error while translating object. [ 635.988374][T27675] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 635.994576][T27675] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:390 [ 636.427300][T27698] incfs: mount failed -22 [ 636.591861][T27716] random: crng reseeded on system resumption [ 636.650339][T27720] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9110'. [ 636.659387][T27720] netlink: 35 bytes leftover after parsing attributes in process `syz.6.9110'. [ 636.670739][T27720] netlink: 'syz.6.9110': attribute type 6 has an invalid length. [ 636.684096][T27720] netlink: 35 bytes leftover after parsing attributes in process `syz.6.9110'. [ 636.698126][T27720] fuse: Bad value for 'rootmode' [ 637.280589][T27748] SELinux: policydb version 2134819135 does not match my version range 15-33 [ 637.296140][T27748] SELinux: failed to load policy [ 637.307042][T27748] rust_binder: inc_ref_done called when no active inc_refs [ 637.427414][T27759] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9124'. [ 637.443994][T27759] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9124'. [ 637.457050][T27759] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 637.613745][T27766] netlink: 'syz.6.9126': attribute type 1 has an invalid length. [ 637.661639][T27766] netlink: 'syz.6.9126': attribute type 3 has an invalid length. [ 637.671010][T27767] binder: Unknown parameter 'ÿ' [ 637.683697][T27766] netlink: 296 bytes leftover after parsing attributes in process `syz.6.9126'. [ 637.700019][T27770] netlink: 'syz.4.9128': attribute type 27 has an invalid length. [ 637.773951][ T12] bridge0: port 3(veth0_to_team) entered blocking state [ 637.780965][ T12] bridge0: port 3(veth0_to_team) entered forwarding state [ 637.942175][T27795] overlayfs: failed to clone upperpath [ 638.639715][T27821] futex_wake_op: syz.7.9145 tries to shift op by 144; fix this program [ 638.649893][T27822] tc_dump_action: action bad kind [ 638.658293][T27821] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 638.668182][T27822] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 639.469086][T27878] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 639.525381][T27879] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 640.057105][T27924] new mount options do not match the existing superblock, will be ignored [ 640.326381][ T36] kauditd_printk_skb: 759 callbacks suppressed [ 640.326399][ T36] audit: type=1400 audit(2016778006.893:11387): avc: denied { mount } for pid=27952 comm="syz.4.9187" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 640.386359][ T36] audit: type=1400 audit(2016778006.893:11388): avc: denied { create } for pid=27952 comm="syz.4.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.422258][ T36] audit: type=1400 audit(2016778006.893:11389): avc: denied { create } for pid=27952 comm="syz.4.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 640.479858][ T36] audit: type=1400 audit(2016778006.893:11390): avc: denied { create } for pid=27952 comm="syz.4.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.547370][ T36] audit: type=1400 audit(2016778006.893:11391): avc: denied { setopt } for pid=27952 comm="syz.4.9187" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.600319][ T36] audit: type=1400 audit(2016778006.893:11392): avc: denied { write } for pid=27952 comm="syz.4.9187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.656753][ T36] audit: type=1400 audit(2016778006.893:11393): avc: denied { write } for pid=27952 comm="syz.4.9187" lport=33799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.711121][ T36] audit: type=1400 audit(2016778006.940:11394): avc: denied { read write } for pid=24988 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.755559][ T12] veth0_to_team: left allmulticast mode [ 640.766671][ T12] veth0_to_team: left promiscuous mode [ 640.774205][ T36] audit: type=1400 audit(2016778006.940:11395): avc: denied { read write open } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.786493][ T12] bridge0: port 3(veth0_to_team) entered disabled state [ 640.816655][ T36] audit: type=1400 audit(2016778006.940:11396): avc: denied { ioctl } for pid=24988 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=50 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 640.845835][ T12] bridge_slave_1: left allmulticast mode [ 640.864035][ T12] bridge_slave_1: left promiscuous mode [ 640.876711][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.894664][ T12] bridge_slave_0: left allmulticast mode [ 640.909488][ T12] bridge_slave_0: left promiscuous mode [ 640.926819][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.095822][T27971] netlink: 'syz.6.9193': attribute type 39 has an invalid length. [ 641.123786][ T12] veth1_macvtap: left promiscuous mode [ 641.130049][ T12] veth0_vlan: left promiscuous mode [ 641.202331][T27965] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.209517][T27965] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.216663][T27965] bridge_slave_0: entered allmulticast mode [ 641.223703][T27965] bridge_slave_0: entered promiscuous mode [ 641.231665][T27965] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.239163][T27965] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.248155][T27965] bridge_slave_1: entered allmulticast mode [ 641.254695][T27965] bridge_slave_1: entered promiscuous mode [ 641.443420][T27965] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.450516][T27965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.457851][T27965] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.464895][T27965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.540333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.549583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.566747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.573867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.591076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.598191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.704688][T27965] veth0_vlan: entered promiscuous mode [ 641.750599][T27965] veth1_macvtap: entered promiscuous mode [ 641.765285][ T331] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 641.911466][T28014] SELinux: Context system_u:object_r:netlabel_mgmt_exec_t:s0 is not valid (left unmapped). [ 641.925145][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 641.934992][ T331] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.951991][ T331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 641.963898][ T331] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 641.980697][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.001890][ T331] usb 2-1: config 0 descriptor?? [ 642.238602][T27986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.247994][T27986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.258627][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 642.269779][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 642.280606][ T331] usb 2-1: USB disconnect, device number 43 [ 642.338854][T28028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 642.338887][T28028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:281 [ 642.394123][ T31] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 642.562088][T28037] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 642.562107][T28037] rust_binder: Error while translating object. [ 642.571081][T28037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 642.577337][T28037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292 [ 642.589332][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8 [ 642.592084][T28037] binder: Unknown parameter '' [ 642.598623][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.624402][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 642.651600][ T31] usb 5-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 642.671257][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.685369][ T31] usb 5-1: config 0 descriptor?? [ 642.848457][T28051] overlay: ./file0 is not a directory [ 642.896425][T28054] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 642.897337][T28054] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 643.334773][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 643.359904][T28072] rust_binder: Write failure EFAULT in pid:305 [ 643.360317][T28073] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305 [ 643.370353][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 643.387727][T28072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:305 [ 643.422640][ T31] usb 5-1: USB disconnect, device number 83 [ 643.737776][T28094] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 643.737804][T28094] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 643.757537][T28094] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:459 [ 643.891684][T28106] 9pnet_fd: Insufficient options for proto=fd [ 643.960166][T28108] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9230'. [ 643.984840][T27965] ------------[ cut here ]------------ [ 643.990357][T27965] WARNING: CPU: 0 PID: 27965 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 643.999933][T27965] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 644.003866][T27965] CPU: 0 UID: 0 PID: 27965 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.015775][T27965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.025948][T27965] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 644.031626][T27965] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 644.051302][T27965] RSP: 0018:ffffc9000f68fb68 EFLAGS: 00010293 [ 644.057610][T27965] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888101b4a600 [ 644.065611][T27965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.073646][T27965] RBP: ffffc9000f68fb90 R08: ffff888110e6445f R09: 1ffff110221cc88b [ 644.081706][T27965] R10: dffffc0000000000 R11: ffffed10221cc88c R12: 0000000000000000 [ 644.089735][T27965] R13: dffffc0000000000 R14: ffff888110e643c0 R15: ffff8881107c3770 [ 644.097726][T27965] FS: 000055556737c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 644.106717][T27965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.113363][T27965] CR2: 000000110c2ec406 CR3: 000000015e16c000 CR4: 00000000003526b0 [ 644.121396][T27965] Call Trace: [ 644.124720][T27965] [ 644.127661][T27965] ovl_do_remove+0x7b8/0xcf0 [ 644.132318][T27965] ? ovl_set_redirect+0x780/0x780 [ 644.137473][T27965] ? down_write+0xe9/0x2a0 [ 644.141923][T27965] ? __cfi_down_write+0x10/0x10 [ 644.146833][T27965] ovl_rmdir+0x1e/0x30 [ 644.150938][T27965] vfs_rmdir+0x3dd/0x560 [ 644.155235][T27965] incfs_kill_sb+0x109/0x230 [ 644.159948][T27965] deactivate_locked_super+0xd5/0x2a0 [ 644.165426][T27965] deactivate_super+0xb8/0xe0 [ 644.170131][T27965] cleanup_mnt+0x3f1/0x480 [ 644.174693][T27965] __cleanup_mnt+0x1d/0x40 [ 644.179133][T27965] task_work_run+0x1e0/0x250 [ 644.183752][T27965] ? __cfi_task_work_run+0x10/0x10 [ 644.188930][T27965] ? __x64_sys_umount+0x126/0x170 [ 644.194037][T27965] ? __cfi___x64_sys_umount+0x10/0x10 [ 644.199463][T27965] ? __kasan_check_read+0x15/0x20 [ 644.204536][T27965] resume_user_mode_work+0x36/0x50 [ 644.209697][T27965] syscall_exit_to_user_mode+0x64/0xb0 [ 644.215198][T27965] do_syscall_64+0x64/0xf0 [ 644.219690][T27965] ? clear_bhb_loop+0x50/0xa0 [ 644.224397][T27965] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 644.230343][T27965] RIP: 0033:0x7fb663b909f7 [ 644.234776][T27965] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 644.254438][T27965] RSP: 002b:00007ffce086e8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 644.262968][T27965] RAX: 0000000000000000 RBX: 00007fb663c11d7d RCX: 00007fb663b909f7 [ 644.271013][T27965] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce086e960 [ 644.279002][T27965] RBP: 00007ffce086e960 R08: 0000000000000000 R09: 0000000000000000 [ 644.287003][T27965] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce086fa50 [ 644.295052][T27965] R13: 00007fb663c11d7d R14: 000000000009baaa R15: 00007ffce0871c10 [ 644.303073][T27965] [ 644.306095][T27965] ---[ end trace 0000000000000000 ]--- [ 644.313911][T27965] ------------[ cut here ]------------ [ 644.319390][T27965] WARNING: CPU: 0 PID: 27965 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190 [ 644.329023][T27965] Modules linked in: [ 644.332937][T27965] CPU: 0 UID: 0 PID: 27965 Comm: syz-executor Tainted: G W syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.346264][T27965] Tainted: [W]=WARN [ 644.350071][T27965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.360184][T27965] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 644.365862][T27965] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 644.385527][T27965] RSP: 0018:ffffc9000f68fb68 EFLAGS: 00010293 [ 644.391646][T27965] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff888101b4a600 [ 644.399652][T27965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 644.407643][T27965] RBP: ffffc9000f68fb90 R08: ffff888110e6445f R09: 1ffff110221cc88b [ 644.415670][T27965] R10: dffffc0000000000 R11: ffffed10221cc88c R12: 0000000000000000 [ 644.423683][T27965] R13: dffffc0000000000 R14: ffff888110e643c0 R15: ffff8881107c3770 [ 644.431705][T27965] FS: 000055556737c500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 644.440758][T27965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.447353][T27965] CR2: 000000110c2ec406 CR3: 000000015e16c000 CR4: 00000000003526b0 [ 644.455385][T27965] Call Trace: [ 644.458681][T27965] [ 644.461611][T27965] ovl_do_remove+0x7b8/0xcf0 [ 644.466225][T27965] ? ovl_set_redirect+0x780/0x780 [ 644.471266][T27965] ? down_write+0xe9/0x2a0 [ 644.475708][T27965] ? __cfi_down_write+0x10/0x10 [ 644.480580][T27965] ovl_rmdir+0x1e/0x30 [ 644.484679][T27965] vfs_rmdir+0x3dd/0x560 [ 644.488942][T27965] incfs_kill_sb+0x1a0/0x230 [ 644.493544][T27965] deactivate_locked_super+0xd5/0x2a0 [ 644.498998][T27965] deactivate_super+0xb8/0xe0 [ 644.503698][T27965] cleanup_mnt+0x3f1/0x480 [ 644.508179][T27965] __cleanup_mnt+0x1d/0x40 [ 644.512705][T27965] task_work_run+0x1e0/0x250 [ 644.517325][T27965] ? __cfi_task_work_run+0x10/0x10 [ 644.522460][T27965] ? __x64_sys_umount+0x126/0x170 [ 644.527540][T27965] ? __cfi___x64_sys_umount+0x10/0x10 [ 644.532946][T27965] ? __kasan_check_read+0x15/0x20 [ 644.538013][T27965] resume_user_mode_work+0x36/0x50 [ 644.543146][T27965] syscall_exit_to_user_mode+0x64/0xb0 [ 644.548640][T27965] do_syscall_64+0x64/0xf0 [ 644.553074][T27965] ? clear_bhb_loop+0x50/0xa0 [ 644.557764][T27965] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 644.563704][T27965] RIP: 0033:0x7fb663b909f7 [ 644.568118][T27965] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 644.587758][T27965] RSP: 002b:00007ffce086e8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 644.596211][T27965] RAX: 0000000000000000 RBX: 00007fb663c11d7d RCX: 00007fb663b909f7 [ 644.604221][T27965] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce086e960 [ 644.612235][T27965] RBP: 00007ffce086e960 R08: 0000000000000000 R09: 0000000000000000 [ 644.620210][T27965] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce086fa50 [ 644.628212][T27965] R13: 00007fb663c11d7d R14: 000000000009baaa R15: 00007ffce0871c10 [ 644.636260][T27965] [ 644.639307][T27965] ---[ end trace 0000000000000000 ]--- [ 644.771658][ T12] bridge_slave_1: left allmulticast mode [ 644.777472][ T12] bridge_slave_1: left promiscuous mode [ 644.792350][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.800063][ T12] bridge_slave_0: left allmulticast mode [ 644.806802][ T12] bridge_slave_0: left promiscuous mode [ 644.812442][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.978238][ T12] veth1_macvtap: left promiscuous mode [ 644.983840][ T12] veth0_vlan: left promiscuous mode [ 645.274476][ T12] bridge_slave_1: left allmulticast mode [ 645.280141][ T12] bridge_slave_1: left promiscuous mode [ 645.285791][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.293690][ T12] bridge_slave_0: left allmulticast mode [ 645.299335][ T12] bridge_slave_0: left promiscuous mode [ 645.305097][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.312781][ T12] bridge_slave_1: left allmulticast mode [ 645.318487][ T12] bridge_slave_1: left promiscuous mode [ 645.324091][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.332272][ T12] bridge_slave_0: left allmulticast mode [ 645.337945][ T12] bridge_slave_0: left promiscuous mode [ 645.343541][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.351531][ T12] bridge_slave_1: left allmulticast mode [ 645.357250][ T12] bridge_slave_1: left promiscuous mode [ 645.362858][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.370653][ T12] bridge_slave_0: left allmulticast mode [ 645.376312][ T12] bridge_slave_0: left promiscuous mode [ 645.381988][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.670258][ T12] tipc: Left network mode [ 645.676429][ T12] veth1_macvtap: left promiscuous mode [ 645.681986][ T12] veth0_vlan: left promiscuous mode [ 645.687481][ T12] veth1_macvtap: left promiscuous mode [ 645.693017][ T12] veth0_vlan: left promiscuous mode [ 645.698595][ T12] veth1_macvtap: left promiscuous mode [ 645.704062][ T12] veth0_vlan: left promiscuous mode [ 645.807975][ T12] veth0_to_batadv (unregistering): left allmulticast mode