last executing test programs: 5m40.975733399s ago: executing program 2 (id=288): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, r2}, 0x10) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) 5m40.960100188s ago: executing program 2 (id=289): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) write(r0, &(0x7f0000000400)="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", 0x1f000) 5m40.898439989s ago: executing program 2 (id=290): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e999ffffff8000000000fc0000000000000000000000000003"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) listen(r0, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 5m40.897740159s ago: executing program 2 (id=291): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x2010004, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='.\x00') r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000) 5m40.73380683s ago: executing program 2 (id=294): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 5m40.501531481s ago: executing program 2 (id=296): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2102c0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x2, 0x4e21, 0xfffc, 0xa, 0x20, 0x0, 0x88}, {0x0, 0xfffffffffffffffd, 0x8000000, 0x0, 0xf, 0x0, 0xa, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @rand_addr, 0x2000}, 0x1c) mkdir(&(0x7f0000004240)='./file0\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r1, @ANYBLOB='(\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,allow_other,allow_other,default_permissions,blksize=0x0000000000001400,allow_other,allow_other,allow_other,max_read=0x0000000000000711,allow_other,allow_other,default_permissions,default_permissions,max_read=0x0000000000000004,max_read=0x0000000000000005,\x00', @ANYRESHEX=r3, @ANYRESOCT=r6]) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) 5m40.442376502s ago: executing program 32 (id=296): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2102c0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x2, 0x4e21, 0xfffc, 0xa, 0x20, 0x0, 0x88}, {0x0, 0xfffffffffffffffd, 0x8000000, 0x0, 0xf, 0x0, 0xa, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2000000, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3, 0x3}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xffff, 0x0, @rand_addr, 0x2000}, 0x1c) mkdir(&(0x7f0000004240)='./file0\x00', 0x2) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r1, @ANYBLOB='(\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,allow_other,allow_other,default_permissions,blksize=0x0000000000001400,allow_other,allow_other,allow_other,max_read=0x0000000000000711,allow_other,allow_other,default_permissions,default_permissions,max_read=0x0000000000000004,max_read=0x0000000000000005,\x00', @ANYRESHEX=r3, @ANYRESOCT=r6]) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=within_size']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r8, &(0x7f00000005c0)={0x2020}, 0x2020) 2m30.126371809s ago: executing program 1 (id=3670): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x73, 0xf9, 0x3f, 0x8, 0x5a9, 0x2643, 0x4945, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x5, 0x90, 0x1, [{{0x9, 0x4, 0x1d, 0x3, 0x1, 0xe, 0x1, 0x0, 0x42, [], [{{0x9, 0x5, 0xf, 0xede9da985a30f683, 0x200, 0x9, 0xb3, 0x5}}]}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x27, 0x0, &(0x7f0000000300)) fchdir(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x8000002}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000040)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000000}}}, 0x10, 0x0}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, 0x15, 0xa, 0x804, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x85, 0x8, "da2ff1d7548e92da117d7721b0ca99bcf9fffda0d4f72f50bd187ddfda630c6affff25423069b525f3d656092e4434ddf7d19d939dcf653ccd9f24ccd04d67e5352d6d94298b25b25cf6633803aa90d3c9cb31fed3a3555d982bfbd74cdbeea315e42fc83e3003c45bb1bb629a9117c0cb13f321c75f880c677c66d88ab40005d7"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004801}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) umount2(&(0x7f0000000040)='.\x00', 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m29.649929903s ago: executing program 1 (id=3692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000440)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) (async) 2m29.637261512s ago: executing program 1 (id=3693): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) (async) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f00000043c0)=""/4088, 0xff8}], 0x4}, 0x5f}], 0x1, 0x2, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x401870c8, 0x3) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) (async) sendto$inet(r4, &(0x7f0000000140)='H', 0x1, 0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x2, 0x1}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r6, 0x210, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc39}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000140)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4, 0x0, 0x0, 0x18, 0x40, 0x15, 0x4d}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x9c, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0x65, 0x3, "84f5b7c3e0100f50adc90f4d5efd9312636b5a15ba129594676ea536ee20cd8c11770e01c8c2160eea8390c709fbd281a1f9da08b82d6d9518114960bdee252c77996c39738e92a6030214a5cc800e9788295ae43d80f07d84e475b857c692b42d"}, @ETHTOOL_A_WOL_SOPASS={0x1e, 0x3, "aff9509bda806105d2db8759109f49a3f814f82932aefda7250b"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x4c050) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r7, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x32f, 0x72}}}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5af02104e2955f58ffa1b912bd8f7304cac51fd97ff92a11bf0f2984de7cfd38"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e5bc332d23707d1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6a78deb537d1cd1d"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="02bb6c51a82dc8a8fc1042ab5d541fd535a2927c97ca4b9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x50001) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) 2m29.578345913s ago: executing program 1 (id=3694): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="b0b70f91aa3c18adf48c728edc3cd81b4c06ba5f895b8b51af2a4e28bf0fb5c3675b8f09d4affe269eef880aec6e277892e8623bd3d83c28f49c3a3c9c211c33a5d22107b8826fa94fce18d55ae10a3815c6", 0x52}], 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r4 = dup(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xa, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}}) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_pid(r8, 0x0, 0x2d) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r7, 0x0, 0xffffffff) 2m29.494180593s ago: executing program 1 (id=3696): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) iopl(0x3) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0xfa}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0) (async) iopl(0x3) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0xfa}) (async) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r0, 0xffffa000) (async) 2m29.422387394s ago: executing program 1 (id=3697): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x65) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff001040000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$FUSE_INIT(r2, &(0x7f0000000280)={0xab, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000340)={0xa4, 0x0, 0x1}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='oom_adj\x00') r5 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x84000, 0x60) read$FUSE(r5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40841, 0x0) 2m19.1512463s ago: executing program 3 (id=3963): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x797) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) listen(r1, 0x5) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) r5 = syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) fcntl$lock(r2, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x401, 0x9, r5}) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x984995b43da11a7a, 0x4}) (async) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/110, 0x6e}], 0x1, 0x2, 0x3e) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r9, &(0x7f00000000c0)=""/105, 0x69, 0xfff) (async) read$FUSE(r9, &(0x7f0000002240)={0x2020}, 0xffffffffffffff22) 2m19.09435536s ago: executing program 3 (id=3964): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) r1 = getpgrp(0x0) sched_setattr(r1, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x1000005, 0xfffffffffffffffc, 0x2, 0x9, 0x10}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000480)) syz_clone(0x4000, &(0x7f0000000280)="f107396c5014328a247f4bfe477e80904e1de4ff74a41843bd0abced23268c641938683222f4cb05a2bc9068d57e5795149eb96c6194590221004ef0518b177fb8677904a6604c5ce1155c22f55487a9cccf50345fbbadce3daa7dd543e3a83221c31fc688000d4f9c8025575a5a78a4f29f30b34e787c5e1b906c3ce58d9e4beb2d1db94d05ffc79b1876a079a3403c8003e9bfd4d0fdd357fddd9bef43d4ab6c53347c0557a4f3c82b08832122f69ad9", 0xb1, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="5c375a2b25e1fa5196bbaebc678485260402bdf293b155a01c0a06e903515124905671014851625b33e82d3eba3e07c1258c89013c293e8252c4be9f2036baff7b515e98465725c06365afca1bd82a0a886f567e2edeba917a59ed3b084896ba2e3ad8d4f07b1e9fe83c32ef716a7ac1") ioprio_set$pid(0x1, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x640001, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r8, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r8, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/146, 0x92}, 0x6}], 0x1, 0x40012140, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) get_robust_list(r3, &(0x7f0000000200)=&(0x7f00000001c0)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) sendfile(r0, r0, 0x0, 0x4) readv(r0, 0x0, 0x1f) 2m18.962603441s ago: executing program 3 (id=3965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd700000ffffff81"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0}) 2m18.946078061s ago: executing program 3 (id=3966): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2074) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) setuid(0xee00) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@private, @in=@initdev}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) (async) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) (async) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2074) (async) 2m18.890402581s ago: executing program 3 (id=3967): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x448c4) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x28802}, 0x80) r2 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x81) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/image_size', 0x141a82, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000), 0xa) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x50, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/264, 0x108, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000100)={0x0, 0x18, 0xf3c5526e37f85f3}}}], 0x0, 0x0, 0x0}) 2m18.853608812s ago: executing program 3 (id=3968): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) setregid(0xffffffffffffffff, r1) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) sched_setattr(r6, &(0x7f0000000000)={0x35, 0x5, 0x1000002d, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x800000}, 0x0) (async) ioprio_set$pid(0x0, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x4) (async) readv(r0, 0x0, 0x0) 2m13.491672656s ago: executing program 33 (id=3697): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x65) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff001040000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$FUSE_INIT(r2, &(0x7f0000000280)={0xab, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000340)={0xa4, 0x0, 0x1}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000140)='oom_adj\x00') r5 = syz_open_procfs(0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x84000, 0x60) read$FUSE(r5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x40841, 0x0) 2m13.109568208s ago: executing program 5 (id=4016): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000300)=""/225) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x440, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000001440)) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="ef0d7c4302899f9b640bf35c5474fc2622e4cf655ce49be81c08cb5c86afd2cde35dee937af769a8ce80b5f85d3bb415307d4e77cfcef0d1e2f0cba39d3a5376", 0x40}, {&(0x7f0000000200)="8c2f704ed63145f8c96e7eef33da46222485aba7efde5dc25881535c3307896f500614f20471f399e400a8caf2dec35d51a73e3e2c3458e3bf1f297fbf42649140af145d3522b03e0a5dca352ae38ab3f14a54d6e8bd2d27e9eb93e6b793581cf19e928dd4776aca72707e2cbd6e325f32462d033b5cbceaed395b8e85b8e0cbe2605551a7c3122a60b6b350862917f4e7df3f03ab2829e7dd01ed2603ab0d649890a8004f132bcd3c8a9ad0b9", 0xad}, {&(0x7f0000000400)="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", 0x1000}], 0x3, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup3(r4, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@binder={0x73622a85, 0x1100, 0x1}, @flat=@binder={0x73622a85, 0x10b, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x18}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2m13.076465379s ago: executing program 5 (id=4018): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={0x20, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x7}]}, 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x200) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x11) r4 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000140)) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x86, 0xfffffffe, 0x0, 0x2000000}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x89727a31546dcc40, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1d0, 0x5, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x81b5706db958b54, 0x10, 0x0, 0x7}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 2m11.885230666s ago: executing program 5 (id=4032): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) 2m11.830391426s ago: executing program 5 (id=4033): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x8, r2, &(0x7f0000000140), 0x0, 0x9, 0x0, 0x2}]) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x4e24, 0x20006de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2, 0x80000}}}, 0x108) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000001600)={0xd0, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5a0ad7a856cabdcffc063f7f4a740bf0b9cf8cfc7d16d6d3b25c1b46228905c4"}]}, @NL802154_ATTR_SEC_KEY={0x4c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d644ba73589a818d604ccacd5ecc085f24f58a349669552b1fe7d99acad729ff"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "827cb0b8f88a1e23c046da6af5288d80e4e5c5d572a1bd93b372517b2e86f327"}]}, @NL802154_ATTR_SEC_KEY={0x0, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x0, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0xffffffffffffff6e}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x0, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x0, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0x0, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID]}, @NL802154_KEY_ID_ATTR_INDEX={0x0, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x100}]}, @NL802154_KEY_ATTR_ID={0x0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0x0, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x0, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED, @NL802154_DEV_ADDR_ATTR_SHORT={0x0, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x8002}, @NL802154_KEY_ID_ATTR_INDEX, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x6}]}, @NL802154_KEY_ATTR_BYTES={0x0, 0x4, "c6d47bb24d738980ebd622a456c96122"}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0x55, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x0, 0x4, "49e2c2879a5ef16515de7f0bcf4247e1"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000659000/0x4000)=nil, 0x4000, 0x64) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000000000000000000a0000000400000014000100ff01000000000000000000000000000114000280bf74a7dffdd8f8331b9dd3f2f9834b7f000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408000000ff"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e84132acb9e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) write(r7, &(0x7f0000000400)="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", 0x1000) 2m11.687043367s ago: executing program 5 (id=4037): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r3, 0x0, 0x58) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x11020, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x4000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x1f1481, 0x0) writev(r7, &(0x7f0000000380)=[{&(0x7f0000000400)="dafe3aba7de2cb0de8fdf8d391680056a413bbcff8a9df6d985a7eac489b7f13223b15b66b19858545d88798f73fb29556cbcf15f7fc734869c1665a161617638bd0c6a896a8821d53875a5e2bcde43eb314364c268727296fb04491519a8cfd02eacd3dc5b89526c1dc826aeddb35c6a333a04d98ece7ac226c56daed20fa089b96d12643ea0088af59f5651d893a32af0827937e8f50cb15e834b75b", 0x9d}, {&(0x7f00000004c0)="16e7723b8d0aefc50edd02767e5b077ce9017d55e864d867410e4310f50ef818e62223e00786676e9eb95a95709cf1d99b05af815de36d55a993b59ef858b6bbe546aeeb472dff2966937839561026ad1d251f173c25e313cb1b381dda0d4c2414d94e2d726ccd3090f11b5ca82b956d9ca06abb6e56ab5405cd5f6f33c7a96d9424c9e4a31c37f145e1b0c251294b5a88448f", 0x93}, {&(0x7f00000005c0)="48de33e5263cf0d7378f409fc9c03440a0525d4219ba08915ac5c97a3d2dfc914dab0093d7ad3cf6e7a4904f6b7072368982a745626a233fd29f173f04308b24b9299de4bf832c58f76a31bf0a2f7377fb1e88c54d012eef", 0x58}], 0x3) rt_sigtimedwait(&(0x7f0000000640)={[0x10]}, &(0x7f0000000680), &(0x7f0000000700), 0x8) clock_gettime(0x1, &(0x7f0000000780)={0x0, 0x0}) write$evdev(r4, &(0x7f0000000180)=[{{0x77359400}, 0x1f, 0x8, 0x824}, {{r5, r6/1000+10000}, 0x12, 0x8, 0xb}, {{r8, r9/1000+60000}, 0x17, 0x7, 0x6}, {{0x77359400}, 0x15, 0x4, 0xa5}], 0x60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x700, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x6, 0x4, 0x0, @empty, @multicast2}}}}) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="01460000040000000000000a0000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77099059af3d", @ANYRESHEX=r2, @ANYBLOB="2c756e616d653d696770fecb3a7176359102a8a9212c6e6f78617474722c76657273696f6e3d3970323030302e4c2c6b"]) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r15 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r15, r14, 0x0, 0xffffffff) 2m11.598462148s ago: executing program 5 (id=4041): lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000019c0)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e22, 0x8, @private2, 0x2}}, 0x0, 0x0, 0xc, 0x0, "9a6bca6ec083563fc0d0c04ec8f7a60d19cbc64fe597ec2cdd858fa9984fd3026b0796ce552d1132c8f96fdc2f4325b64e575cb84891cf7914dd245d38b3d9ec5ec2d6a6427bb4145fbb89289d7ea4b0"}, 0xd8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) faccessat(r7, &(0x7f0000000180)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendfile(r6, r6, 0x0, 0x7ffff000) 2m11.534198128s ago: executing program 34 (id=4041): lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x4046014}, 0x400c0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000440)}, 0x65}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/126, 0x7e}, {&(0x7f00000008c0)=""/124, 0x7c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/120, 0x78}, {&(0x7f00000019c0)=""/139, 0x8b}], 0x6}, 0x9}], 0x3, 0x12040, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e22, 0x8, @private2, 0x2}}, 0x0, 0x0, 0xc, 0x0, "9a6bca6ec083563fc0d0c04ec8f7a60d19cbc64fe597ec2cdd858fa9984fd3026b0796ce552d1132c8f96fdc2f4325b64e575cb84891cf7914dd245d38b3d9ec5ec2d6a6427bb4145fbb89289d7ea4b0"}, 0xd8) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) (async) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) faccessat(r7, &(0x7f0000000180)='./file0\x00', 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async) sendfile(r6, r6, 0x0, 0x7ffff000) 2m2.872572754s ago: executing program 35 (id=3968): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff]) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) setregid(0xffffffffffffffff, r1) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) sched_setattr(r6, &(0x7f0000000000)={0x35, 0x5, 0x1000002d, 0x0, 0x5, 0x3, 0x0, 0x4, 0x0, 0x800000}, 0x0) (async) ioprio_set$pid(0x0, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x4) (async) readv(r0, 0x0, 0x0) 1m9.199527468s ago: executing program 0 (id=4911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x8) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="05002cbd70000000000022000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x2000c094) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) prctl$PR_SET_MM_EXE_FILE(0x22, 0xd, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfff, 0x3a, '^-%-\\xc$})\'!&}*', 0x3a, '', 0x3a, './file0'}, 0x36) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffea8, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 1m9.161465058s ago: executing program 0 (id=4912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0xf000, 0x3000, 0x1000], 0x5, 0x88, 0x6fa5bfdb}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x8, 0x0, 0x1}) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e1d, @broadcast}, 0xe) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000021c0)=ANY=[@ANYBLOB="3d8879"]) 1m9.056296938s ago: executing program 0 (id=4913): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0), 0x12) sendfile(r2, r2, 0x0, 0x8000002) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) 1m8.970436929s ago: executing program 0 (id=4914): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x0, 0x0) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001}) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000200)={0x100020, 0x1000f3, 0x40000}, 0x20) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x7ff, 0x0, 0x7, 0xa, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x6, 0x5, 0x7fffffff, 0x4, r1}) setpriority(0x0, r2, 0x80000000) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0xa, 0x3, 0x3a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.966591519s ago: executing program 0 (id=4916): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='ceph\x00', 0x200000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) 1m8.951430069s ago: executing program 0 (id=4917): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000bc0)=0x800, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) pipe2$9p(&(0x7f00000000c0), 0x1e90c9425fbf3851) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x1c, 0x34, 0x184, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8000, 0x8, 0x8, 0x400}}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0xc9, 0x6, @multicast}, 0x14) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x61) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000a00011000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200d0"], 0x104}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000002780)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 53.939074825s ago: executing program 36 (id=4917): mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000bc0)=0x800, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xa) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noxattr,access=', @ANYBLOB="03"]) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) ioctl$BLKFRASET(r3, 0x1264, 0x0) pipe2$9p(&(0x7f00000000c0), 0x1e90c9425fbf3851) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x1c, 0x34, 0x184, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x8000, 0x8, 0x8, 0x400}}) bind$packet(r5, &(0x7f0000000300)={0x11, 0x1c, r6, 0x1, 0xc9, 0x6, @multicast}, 0x14) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x61) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000a00011000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb000000002b000000fe8000000000000000000000000000aa00000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200d0"], 0x104}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000002780)={0x84, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000026c0)={0x40, 0x1c, 0x1, 0x5}, 0x0, 0x0}) ioctl$HIDIOCGUSAGES(r9, 0xd01c4813, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 5.070399588s ago: executing program 4 (id=5969): openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x0, @loopback}}) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = userfaultfd(0x800) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fed000/0x10000)=nil, 0x10000}, 0x4}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto(r4, &(0x7f0000000200)="3996", 0x2, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) recvfrom(r2, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9, 0x4}, 0x10) write(r5, &(0x7f0000000280)="240000001e005f0214ffffffffff08001f000000000000000800"/36, 0x24) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) 5.069794668s ago: executing program 4 (id=5970): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000100)={[0x7, 0xa, 0x9, 0x40d6, 0xfe5b, 0x4, 0x6, 0x800, 0x10001, 0x6, 0x401, 0x9, 0x434f99e5, 0x0, 0xfffffffd, 0x2, 0x5, 0x86d7, 0xa, 0x3ff, 0x6, 0x1000, 0x7, 0x3, 0x1, 0x8, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1, 0x6, 0x7, 0x6, 0x1, 0x7, 0xd27e, 0x80, 0xff, 0x6, 0x7ff, 0x1, 0x8, 0x0, 0x1, 0x400, 0x96, 0x8, 0x5f34, 0x10000, 0x80, 0x2, 0x7fffffff, 0x9, 0x3, 0x37, 0x1ff, 0x9, 0x8, 0x6, 0xfffffff9, 0xfffffffb, 0xaba1, 0xd, 0xfffffff3, 0x3, 0x85a0, 0x5, 0xa8, 0x1000, 0xfffffffb, 0x7, 0x800, 0x8000, 0x2, 0x4, 0x1, 0x9, 0x9, 0x3, 0x0, 0x0, 0x7, 0x8000, 0x7, 0x2, 0xc, 0x190c, 0x6, 0xa, 0x1, 0x4, 0x9, 0x9a, 0x3, 0x100, 0xfa, 0x7, 0xe5eb, 0x6, 0x8, 0x2, 0x4, 0x0, 0x9, 0xffff7fff, 0x7, 0x7, 0xffff5988, 0x4, 0xfffffff7, 0x98, 0x3782, 0x9, 0x1, 0x5, 0x5, 0x3, 0x2, 0x7ff, 0x1000, 0x2, 0x2, 0x8, 0xfffffffe, 0x6, 0x9, 0x40, 0x7, 0x7, 0x1, 0x8, 0x0, 0x8001, 0x1, 0x200, 0x3b4, 0x10, 0x6, 0xd2f3, 0x3, 0xe46, 0x6, 0x9, 0x101, 0x4606, 0x9968, 0x9, 0x6, 0x5, 0x400, 0x4, 0x3, 0x4, 0x2, 0x1, 0x4, 0x2, 0x8, 0x7, 0x7, 0x6, 0x2, 0x4, 0x0, 0x51f8c8fa, 0x8, 0x1ff, 0x1, 0x2, 0x81, 0x2f8, 0x0, 0xfffffe00, 0xd, 0x6, 0x7, 0x7, 0x2, 0x4, 0x4, 0x5, 0x9, 0xfffffc01, 0x87, 0x6, 0x8, 0x401, 0x1, 0x1, 0x1000, 0x3, 0x7, 0x3, 0x8001, 0x2, 0x8, 0x88, 0x8001, 0xffff, 0x7, 0x97d, 0x8, 0x461, 0x7, 0x80000000, 0x6, 0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0xfffffffe, 0x7, 0x2, 0x6, 0x7, 0x12000000, 0x400, 0x40, 0x1, 0x7, 0x7, 0xfffffffc, 0xa110, 0x4, 0x10001, 0x4, 0x8d, 0x9, 0x8000, 0x8, 0x3, 0xd2, 0x9, 0x5, 0x0, 0x4, 0x6, 0x7, 0x9, 0x818, 0x5, 0x7, 0x4, 0x4, 0x10001, 0x1, 0x1, 0x6, 0x4, 0x3, 0x79f7, 0x9, 0x28, 0x2, 0x8, 0x401, 0xe4, 0x6, 0x133, 0xc, 0x80000000, 0x9, 0x4, 0x7, 0x9, 0x4, 0x4, 0xd, 0x20000000, 0x0, 0xc1a, 0x2, 0x9, 0x7, 0xfff, 0x2, 0x5, 0x93, 0xc32, 0x80000000, 0x10006, 0x9, 0xfffffffa, 0x8, 0x8, 0x8, 0x6, 0x9a, 0xb0c4, 0x40, 0x0, 0x8, 0x3, 0x3, 0x170, 0x80000000, 0x9, 0x7fffffff, 0x5, 0x1000, 0x8, 0xff, 0x6, 0x2, 0xfef2, 0x7, 0xdd, 0xe, 0xe000, 0x2, 0x8, 0x3, 0x0, 0x7fffffff, 0x6884, 0x1ff, 0x400, 0x6, 0x2, 0x8000, 0x6, 0x5, 0x6, 0x800, 0xfffffff9, 0x8, 0x3, 0x8001, 0x80000000, 0xfffffff8, 0x3, 0x8, 0xfffffffc, 0x5, 0x2, 0x4, 0x1, 0x180, 0x3, 0x6, 0x4, 0x1, 0x80000000, 0x58, 0x200, 0x3, 0x7, 0x4, 0x8, 0x3, 0x1, 0x5, 0x3, 0xf17, 0x6, 0x2, 0x223f049, 0x5, 0x10, 0xbd16, 0x7, 0x6, 0x200, 0x3, 0x5, 0x8, 0x7, 0x9, 0xd, 0x6, 0x4, 0x839, 0x2e1a, 0x101, 0x1f, 0x6, 0x8, 0x3, 0x8919, 0x7, 0x7, 0x8, 0x6, 0x101, 0x401, 0x400, 0x26, 0x2, 0x781, 0x2, 0x2, 0x7, 0x1, 0x51ca, 0xa25, 0x1, 0xc, 0x0, 0x636, 0xfffffff7, 0x2, 0x4000000, 0xc631, 0x85ef, 0x5, 0x9, 0x0, 0xd8d, 0x96ef, 0xf, 0x7ff, 0x3, 0x2, 0x4, 0x0, 0x8, 0x59, 0xffffffff, 0x6, 0x1, 0xe6b, 0x5, 0xa, 0x9, 0x0, 0xd36, 0x6, 0xffff, 0xff, 0x9, 0x485a, 0x80, 0x8, 0x5, 0x6, 0x10000, 0xc764, 0x401, 0xfffffff2, 0x4, 0x401, 0x3, 0x80000000, 0x9, 0x8, 0x1, 0x6, 0x9, 0x3, 0x2, 0x101, 0x7, 0x3, 0x7, 0x7, 0x4, 0x8, 0x80, 0x5, 0x1, 0x3, 0x9, 0xffffffc0, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0x8, 0xee, 0xe52, 0xfffffff9, 0xc, 0x1, 0x1, 0x0, 0x6, 0x2, 0x10, 0x40, 0x7, 0xffffffff, 0x9, 0x0, 0x2, 0x7, 0x1ff, 0xfffffeff, 0x7f, 0xc, 0x3, 0x3ff, 0xa, 0x0, 0x5, 0x4, 0x3, 0x5, 0x1, 0x7, 0x5, 0x8062, 0x1, 0x3, 0x10, 0xe, 0x8001, 0x5, 0x0, 0xa, 0xfffffff9, 0x8, 0x3, 0x0, 0x8, 0x7, 0xd4, 0xf, 0x2, 0xcb, 0x401, 0x10, 0x2, 0x259, 0x7fff, 0x3, 0x68, 0x8, 0x8000, 0x2, 0x9, 0x5dbd2e38, 0xdbb, 0x20000007, 0x200, 0xbe7, 0x1, 0x9, 0x401, 0x5, 0x4, 0x9, 0x200, 0x0, 0x1216, 0x5, 0x9b, 0xfffffffc, 0x7f, 0x1, 0xffffffff, 0x2, 0x0, 0x400, 0xf1c, 0xd2f, 0x2, 0x10000, 0xb, 0x4, 0x4, 0x7, 0x208, 0x1, 0xfff, 0xf, 0x9, 0x80000000, 0x5, 0x5f, 0x7, 0x8000, 0x800, 0x4, 0xfffffffb, 0xaa3d, 0x4, 0x99, 0x6, 0x1, 0x3, 0x59, 0x8, 0x4e, 0x0, 0x2, 0xffff, 0xfffffffb, 0x31, 0xd0, 0x2d, 0x8001, 0x1, 0x11a, 0x34, 0x4, 0xffffffff, 0x3, 0x0, 0x5ef, 0x7, 0x6, 0x5, 0x7fffffff, 0x5, 0x8, 0x8000, 0x100, 0x0, 0x3, 0x5, 0x800, 0xfffffff9, 0x7, 0x2, 0x334d, 0x38e640, 0x1, 0x100, 0x1, 0xfffffffe, 0x1000, 0x9, 0x102308ed, 0x8, 0x4, 0x9, 0x9, 0x2, 0xfffffff9, 0x1, 0x708, 0x1c0, 0xd, 0x2, 0x3, 0x80, 0x298b, 0x2, 0x9, 0x7, 0x8, 0xfffffe00, 0x1ff, 0x7, 0x0, 0xed, 0x9, 0x4, 0x5, 0xfffffffd, 0x3, 0xe, 0x80000001, 0x2, 0x1ff, 0x9, 0x2, 0x7, 0x8, 0x1, 0x8, 0x264, 0x10000, 0x8, 0x4, 0x7, 0x8, 0x6, 0x1000, 0x2, 0x4, 0x9, 0x80, 0x7, 0x6, 0x5, 0x81, 0x47, 0x7e, 0x7, 0x3, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x1, 0x3, 0x1, 0xffffff00, 0x8, 0x2e, 0x3, 0x1, 0x80000001, 0xa45, 0x4, 0x8001, 0x0, 0x250, 0xfff, 0x2a7c, 0xffffffff, 0xc, 0x51b1070d, 0xfffffffd, 0xfff, 0x477b, 0x1ff, 0xffffbfdb, 0x9, 0x0, 0x5, 0xab68, 0x9, 0x8001, 0x3c, 0x4, 0x1526, 0x10001, 0x2, 0x1, 0x4, 0x1000, 0x40, 0x1, 0x7fffffff, 0x3, 0x3, 0x1, 0x6, 0xc, 0xca, 0xb6, 0x80000000, 0x5, 0x9, 0xd, 0xc, 0x8bb, 0x8, 0x2, 0x7, 0x3, 0x9, 0x3, 0x9, 0x4, 0x9, 0xccde, 0xfffffff9, 0x800, 0x4, 0x7, 0x3ff, 0x8000000, 0x3, 0x4, 0x6, 0x0, 0x80000001, 0xff, 0x7, 0x5, 0x2, 0x9, 0x5, 0x2, 0x20000, 0xe, 0x8001, 0xfffffffb, 0x4, 0x1d18, 0x8, 0x7, 0x5, 0x5, 0x5, 0xf, 0x0, 0x0, 0x9, 0x4, 0x5, 0xff, 0x7, 0x702, 0x1ef, 0x65, 0x3, 0x6, 0x9, 0x9, 0x200, 0x2, 0x5, 0x370, 0xfffffffd, 0x8, 0x100, 0x7, 0x5, 0x100, 0x6, 0x0, 0x4, 0x6, 0x0, 0x7, 0x7, 0xb, 0x7, 0x8, 0x80000000, 0xb, 0x237a, 0x99, 0x3, 0x800, 0x7, 0x84b8, 0x5, 0x5, 0x85, 0x6, 0xfff, 0x2, 0xd0, 0xfffffffd, 0xfe000000, 0x5, 0x9, 0x5, 0x1, 0x6, 0x10000, 0x7ff, 0x9, 0x9, 0x5, 0x4, 0x4, 0x5, 0x2, 0xffffffff, 0x2, 0xea2, 0x7ff, 0x6, 0x2, 0x0, 0x80000001, 0x2, 0x2, 0xaf, 0x9, 0x4, 0x8, 0x5af6, 0x22df4e, 0x8, 0x2, 0xe8, 0xe, 0x6, 0x8, 0x3ff, 0xd, 0x0, 0x3, 0x4, 0xf, 0x3, 0x9, 0x738101a9, 0x9, 0xa3, 0x6, 0x71d, 0x766a, 0xfffffffd, 0x7fffffff, 0x401, 0x5, 0x90, 0x5, 0x9, 0xffffffff, 0x2, 0x0, 0x7, 0x7, 0x1, 0x7, 0x9, 0x4, 0x5c, 0x3, 0x6, 0x166cba4, 0x200, 0x3b8a85c1, 0x10, 0x5, 0x3, 0x80000001, 0xfffffff9, 0x7, 0x98e, 0x9, 0x30, 0x759, 0x8, 0x45, 0x200, 0x1, 0x9, 0x8, 0x9, 0x200, 0x721ca50d, 0x3, 0x0, 0xc, 0x4, 0xffffffff, 0x2, 0xffffffff, 0x80, 0x5, 0xfffffe00, 0x4c3, 0x3, 0x6, 0xfffffff7, 0x4, 0xfffffffa, 0x200, 0x5, 0xd, 0xb7, 0x3800, 0x7, 0x5, 0x4, 0xbf, 0x3, 0x9, 0x10000, 0xb, 0x7a, 0x7, 0x2, 0x342b, 0x4, 0x400, 0x401, 0x5, 0x0, 0x4, 0x3, 0x1, 0x6, 0x20de988b, 0x7ff, 0x8, 0x5, 0x6, 0x7, 0x5, 0x7fffffff, 0xaf, 0x2, 0xfffffffc, 0x3, 0x5, 0xa, 0x6db, 0x10000, 0x4, 0x8, 0x3, 0x401, 0xffff8001, 0xfff, 0x6, 0xfffffffd, 0x300000, 0x8, 0x5, 0x6, 0x1000, 0x6, 0x5, 0x9, 0xfff, 0x1, 0x3, 0x80000000, 0x3, 0x9, 0x5, 0x10000, 0x0, 0x5, 0x10001, 0x9, 0x8000, 0xffff, 0x2, 0x2, 0x77a, 0x8, 0x4, 0xf, 0x2, 0x2]}) tgkill(0x0, 0x0, 0x22) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x0, 0x0, 0x20000010}, 0x40804) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020) 5.069499248s ago: executing program 4 (id=5971): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, 0x0, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x68000}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 4.492975031s ago: executing program 6 (id=5978): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) prlimit64(0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0xfffd, 0x0) 4.321904372s ago: executing program 6 (id=5979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000001c0)={r0}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x10000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x40000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000200)={0x1, 'vxcan1\x00', {}, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x2, 0xaa6c, r2, 0x0}]) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x1f, 0xb, 0x2, 0x10, 0xf8, 0x2, &(0x7f0000000040)="82ab2cae4cfb4f2ad64f5cce5552aa4420865f7aac166aacecc5b1edb73cf786a1903aecbaffe9eaf330ddab67ebf1252688557e4a726f26bdf2237859b6ca198cca2dfdbab183ac767a83f25f232ccfea5f01fe9cb0abcaaa32dc69b66e86a0b54b47e0223cff482071f980f4f2a64df66a95ff416be7af884570bd0637ca19831ed674c2aebd8c5e7d39c5fca0a9deff617a8f3dcb74e5eb8c11815a8c89f96ecd34e31a96783442b08eed05e39ec120b5218fd47a930109bc152645987d40d6cc7c8f94099b71dc9cdaa477854f24405b51a86896a5ab163935085d17b1fa9f4b29ec2943b06d319fc907cd81c9137c06fecd6992fa93"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 4.193387053s ago: executing program 4 (id=5980): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="e8881b94288c6d2fc0575de69413065b4e3041e5d1750748c0d3eb6dfedc4bb0daa0e221d0f5c61e9b0e48085c9ec5b23b20e52a9bb51e2fa746835e50d7d79b6cd8aac70677a159a3c5ea020e459a3071cb10ec3835723bcb0ed6", 0x5b}], 0x1) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000ec0)=""/236, 0xec}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x7d08}, {{0x0, 0x0, 0x0}, 0x229}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x83}, {{0x0, 0x0, 0x0}, 0x2}], 0x9, 0x40000020, 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, 0x0) open(&(0x7f0000000440)='./file0\x00', 0x2100, 0x18) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) (async) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/118, 0x76}], 0x1, 0x8, 0xb50) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x804c0d0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) 4.186664244s ago: executing program 4 (id=5981): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004"], 0xfc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r5, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) ioctl$sock_inet_SIOCSARP(r8, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x13c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}, @transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}, 0x1000}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x101}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/197, 0xc5, 0x0, 0x2a}, @fd}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}, @release, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000000c0)) (async) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000000c0)) socket$inet(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r10, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, r10, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000054cdee40fd070400bfb9010203090902120001000000000904000000ff"], 0x0) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 4.178150493s ago: executing program 6 (id=5982): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x4, 0xa, 0x3, 0x0, 0x7f, 0xb2e, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0x7fffffff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x1, 0x3, 0x1000, 0x7, 0x4, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0xb, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x7, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 3.344300149s ago: executing program 8 (id=5990): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/96) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) (async) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000000)=""/96) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfdf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) (async) 3.344009749s ago: executing program 8 (id=5991): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd9f, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade76f1a03b79e9546a58de45a57545563322ee20bc43f7fe47218a02ff8ba942478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14, 0x800) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000140)="290b2e7654bd4cf554e72e551c3fc42c82eb13d53ebf6d521d228edbc986d091ad99db3b3125cea4608470ec2e1a34fb0e985b76089b091132364f13559a5cd3346340bd863179f436e6cc40abc8fff10e580450c809590698412b33fa3e63f52913f9d39e639771808debf57e9035428d8ba9c93e7a757b31c388d3908c87db2259a0752e4c51f3d805bdaf38cbf97cf8b33fc6b836a459d20bc1b24fb65c2ed6698a6d711260d1536a55dbc364ecc7002d3740036f5df696302ac4b2beaabcd29ddb52739b3007da", 0xc9}, {&(0x7f0000000240)="dd5eefcdda03f4a1cc779372b711e312e3e9c8c0169061defbbd44100709633dc9bd9de36e37b5dae0ebbe8c6c97678a36bf74d6e2ecbb6b66e3dc527f82e6b2e3b7a57f", 0x44}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="3086c14258ac45ce0b9eff7e1df88097207163c76ec14554a26261d8b42291a0766ed347a67583264c08016c3ce43152aee798b9b5c0cb6c2bd77893d8ec1f72353a11f6d806717b8386e60916faa127ecd0b9f6625052df3df2a85b06651484a836cdc848d56164bad9e4302b0e67a539f9522b563d9a2dacef0ee8e58b4cbbc4a963b04191628c5b6abf007622bc35fb7d37ce2cceb8c5b62a4376b17ba4227d1086022ffa59c9e3b9afbf33b07496c67c25ef8b130182f87fdd04fe37ae9221b33dd20fa6f9a864ee82cc4133deaf1c31c4d739e5e9ec3d7713eb98", 0xdd}, {&(0x7f0000001440)="b597a283429c2a17938715b603377965c8c275b3cd04fabeb87236f0471ad89f6a6cbffeb930b03a915f1e6968abb134b274b6ae2b5b41c2d219ce413efc3043cf4b8ed0c3fb16e6e3890c492a76c6f91b7c9a8e630b375d3b67a2433f438ea8e04844177593a2213d931ae954ba5d79d8a8aae128fe158a0c93a119611805bcc8f68c393aaeeca60ecc3ed5ba6277ae1ec16bea35368005861409c0e13e1cd41af15a8642", 0xa5}, {&(0x7f00000003c0)="e34de2d98e3efee52aba3939ff77588ab8e9553b55bc", 0x16}, {&(0x7f0000001500)="fc1713b445069a8cfc4132ee3e56f3bce9bd919c0b42443625ddc3518064936a5d19dc54cc20cbe0d31b41c2e9c1175ac02877e978ca8dcede0b9841516f38bbe498fad9eb2ace38e53fab9fa54ee948f4e5e1929fc51f5f928208e613c1f56b49cd01764a2a996a91b6510d4fee94c0067ebe0afa50d27965b4710e42d0faeabfed495604861499b75ef22826e464340071bb8cf46258efecb5093f7310ffa6bedd9bbdd63d26e000ab81b10b13d6482e23240669d18245a177a283b9978eff99eb028e6dcd20290c11bf11e1b0262e2cbdfbfb7f028e086fa4f3f84b02ee1df109115fb95dcc0e878045a41290cabcb3", 0xf1}, {&(0x7f0000001600)="0e7e29ed5be0bbc6adb1341f3cb0113f71f2dc119ff26c36f6e49e33aaf37a640624438d3557479702c2fe2a89b20666fe70fc1d1a5508d1b8259e8cbc887019effaccbaeebb01", 0x47}, {&(0x7f0000001680)="85c0bd706a094b0526f88ddf81bbfd866ab5f2b2c5c992b0e1f97c5cf12743c7cbfacef715dceb68a9d90e52b6b85baa88719139591477cc23184796b589bbe20f47fdd98d6404a3b5c1fb32f5a5ecf2ec2caf97262f3ff0c48cada3f6d3a0cc9afcd783b358b70bf6df04a3b841b8d8d8c21c72ab9fb795f69916f1f29b89ab7e42072ddd54b7a363e2630adf4d34ed4903b547165ecf30a03af84e50bb42257f71bcfd81", 0xa5}], 0x9, &(0x7f0000001800)=[{0x30, 0x104, 0x271a9aa3, "96169833b0cbbf8833bb711300ca20a3e92fbcbd08453575242689dcc9"}], 0x30}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001840)}], 0x1, &(0x7f00000018c0)=[{0xc0, 0x101, 0xc, "330fcb0b12aa0eb1e0bf9573e73ce603f61027db3747ee8d408fe643ca831705de1a9dc8493fccf3d03ff9f670e262d5bd0f4ec9353e6e607867cd06660bd02c3ddd3aae4a2f7d3683b5b76094211e2f9fceb6d1a3361cee14e58b6e8e263543adf73389589f4ad23ccf7075c2062e927193cd9373461425add1c4aa7111590e29a9cb58429b228a148fe2b915531ed76a88620c89cc03ad4422901de8f5ca50ff874f68fe428a1d6b84c1c6"}, {0xe8, 0x117, 0x0, "09f0ff9e1be4e4c95798ea7677a0a75980e2788a75596a54d2ce1ff8427abeebdd48533d435abdf799de327ccb9c0903a03624d18a746c755d34aac8ee0db22523c8ccab46de75250b8272ca363562e1d952bbdfac2cdfb5a3b4bf035dadfcced1c8a7d2a199b3127e916d7f49d7b949f33af68bd80140f239fb598ef7f101130cf00b35e1d53ee65c02baff2c230c94235a486a6c2f14b9723482464df17c600d67bdc792911b4dba24bfa35b5bba7ad06dfb877d2001fe9bb334566644d093f940db7e0e0c558bfe734e4f70cd7fda9f83897303c23a"}], 0x1a8}}, {{&(0x7f0000001a80)=@nl=@unspec, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001b00)="e386f79501bcc7b078da18c5e4768b1fd65ce93260c2ee69471d04f2b9249a64695e4e2a3c7b594c18fa8b7a05140a5b86a0162edd0ba87076fa8ebe16443ba3310396d041814f4959758760b11b5380074ff3f3f5d850560e8ad1ce05761a4c0bcd1479892dd74ed86713f8fddc56b5db6ade2b7b767eb01d5ad22d0c5bb5d39dd7d3b2", 0x84}, {&(0x7f0000001bc0)="f8ca5c8329c2a3cc67865135c469b732e7c3", 0x12}, {&(0x7f0000001c00)="b30449cc4abe5b9a7408befefa7f31cfb31d7bdddd2ac81c8bdcd4ae9915573f3bdfd0a254078871ba196323857d472d54fed13bf6804ffaae96872c74955b0691e89b4a6114387e9e82fe1c9c63fd74235a15108df0b0bde0e4c965d9c8a88dbdd146e6a8a6ea94442fff17425450ecfdbce6a33c441b18b4315b96674a7e4ee2d38a70aa44ea1067a36fe59dd075a43c8c6069d5df205559cfeced19ac6dd28f2ac1db2030112887eb35523ccf3d2ae0a159ca86ea19eaee19ebd8ab66ff54635e5f76112438e9be46d8d8a57688135822e29e0dd105ec1e134a9fe4ae8035162db360a5da09f90f5f40d54807d04aceb3b535b615", 0xf6}, {&(0x7f0000001d00)="cdd0bacdc4989029808ea9af", 0xc}, {&(0x7f0000001d40)="1f27aecbc6f5c51c92bc08e9036f8fe60ee17d1b32a5481fdc65429ea5a9d60ffa0102e0300bdf8d759dc0aaf410e6349e9acf06d84481a5da51cca2049d53f09461a805bde215a5dd4a328f85589f1180df753818f5f2f492921fca266793c7d4b0ca656941f11057c458e9724cc49a9ddd00000000000000", 0x79}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="00f6abd6a5a267d0bf84ed58844d4053bb57d7d07fcb53ef55b8514749aa4efd7c98416b39ce91adc5b8833b3e6e6436160547e1ff4944ec30322153b4290d5d7657c5317731fcd13da1bee1347a9f4ebebdd50dac5f5efc9ab3aae467766395fc6f7e9c696fef0f812231787c119c66c1295bf79412df4b10f7bc221ff99ad9fa1de60b04c1327554c77537a1c0616e9eb5b2b1e5d6ba728cc8bde64804adc2154579be86f523b0dab5c82704271f740444d72f23b77322e303", 0xba}, {&(0x7f0000002e80)="566a9bcfd4ee55087d9781941b57b60102d783ed1fbba7eaa97a5c7973ba040299052023f56c5cf71e86b4f4d810b68c44e97ffa5110c0304e5ce3b98998d529b80702c60c26626158315a3e78b44a9a6ab1b6e911bd1b7379e98c281f5f72592a07910796018d2e6ff159a87e7e82a786ade7891dceaad2577b8018895515ee7d9f42b9bbf88730d154cd587aea6afaf6662935b45c2461e9466e16bd8619f85523e1285924c4ac64c1ee164f64885546e0eed5522184d39299ce3123d0af48b34205e1aa55e4cb862a749d87d4dcdc4792df79fa823d503bed99ef47a916e5e09abda23db2c72d1f8b2f764885db224b9a14030b6de2a5", 0xf8}], 0x8, &(0x7f0000003180)=ANY=[@ANYBLOB="900000000000000019010000949800000a1da2b42519fbc51e97ac3dc0b4365314fe67285674ed62b3ed7126900f168c1696024573530d18b19acaca7384ace733cc6f850c0ea2058f1093845ecc4609fb15546755948184787d844e39e11c4f3e3e387772407b6a2c2d1f6965f3094b9d10c20388d7b17e7c2e07bc30901a9e75a3486a78690000000000000008000001c6c9ba06f304160b6639a9de39ff29a490ff5316a66796ae33a4445c8616bd5b52643f5f87b45f0e1eadea590a298b552e10735ba6bfdb8905eaa509373f2bfa6f4d0c2b3aad29de90852f597b"], 0x90}}], 0x3, 0x4000040) 3.294457409s ago: executing program 8 (id=5992): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001100)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}, {@version_L}, {@directio}, {@aname}, {@privport}, {@nodevmap}, {@mmap}, {@afid={'afid', 0x3d, 0x1000}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x62, 0x30, 0x64, 0x63, 0x63, 0x64, 0x31], 0x2d, [0x34, 0x37, 0x51, 0x36], 0x2d, [0xff270e34fff92366, 0x54, 0x30, 0x30], 0x2d, [0x61, 0x31, 0x34, 0x31], 0x2d, [0x62, 0x32, 0x39, 0x62, 0x66, 0x35, 0x62]}}}]}}) 3.293690919s ago: executing program 8 (id=5993): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) inotify_init1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 2.471474955s ago: executing program 8 (id=6012): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) r1 = userfaultfd(0x801) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2d667fc4af"], 0x15) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='dummy0\x00', 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x400}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 2.409401645s ago: executing program 8 (id=6013): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2000, 0x15) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x20) pread64(r1, &(0x7f00000006c0)=""/112, 0x70, 0x42) fsetxattr$trusted_overlay_nlink(r2, 0x0, 0x0, 0x0, 0x2) memfd_secret(0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r3, 0x540a, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(r3, 0x540a, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1004, 0x0) socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_open_procfs(r4, &(0x7f0000000040)='mountinfo\x00') ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) eventfd(0x8) 1.864144988s ago: executing program 7 (id=6017): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ptrace(0x10, r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r5 = dup(r4) (async) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r6, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) (async) mknodat(r5, &(0x7f0000000080)='./file1\x00', 0x8000, 0x9b86) (async) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_INIT(r5, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50) syz_pidfd_open(r3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfe, 0x52, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000000), 0x1814800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) (async) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async) r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) (async) write$cgroup_pressure(r5, &(0x7f0000000180)={'full', 0x20, 0x4, 0x20, 0x7}, 0x2f) 1.798392669s ago: executing program 7 (id=6018): socketpair(0x27, 0x0, 0x6, &(0x7f00000000c0)) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x141b42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040000000000000000020000002440018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c000f80080001400000000008000240000000000800034000000004"], 0x80}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100), 0x4e8, 0xc8680) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r2, 0x1) write(0xffffffffffffffff, &(0x7f0000000000)='&\x00\x00', 0x3) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r3, 0x0, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0xffff8000) 1.797881769s ago: executing program 7 (id=6019): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prctl$PR_MCE_KILL_GET(0x3d) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x7, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x23}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1.797551979s ago: executing program 7 (id=6020): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x400007, 0x3, 0x10000, 0x3, 0x0, 0x400, 0x6}, 0x1c) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r5) inotify_init1(0x80000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) 1.158959923s ago: executing program 6 (id=6021): r0 = getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, 0x0, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) recvfrom$packet(r4, &(0x7f00000001c0)=""/28, 0x1c, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) 1.087583053s ago: executing program 4 (id=6022): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) eventfd(0x9) close_range(r1, 0xffffffffffffffff, 0x0) 910.388564ms ago: executing program 7 (id=6023): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x6, 0x800) io_getevents(r1, 0x1, 0x1, &(0x7f0000000180)=[{}], 0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) io_cancel(r1, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x8, 0xffff, r3, &(0x7f0000001040)="64da0bddfe40972e8a97a625659c76d7b906a0ccd7b1f84beb1480b32fb6801a6567bf25d7fd8b2342486478a01d0cf9ac1b97fccad5f87e3cb206c445ebc4c92cde8dadac555fbeecfe8cc8fefdc1e95894581666a3b2cb3c24329e947306091341ada1c955dcdcaea1b39bdb9fbe49f94e411e2276c024e7dabb8b4ba4f0edc1571e2069bb2c747a2fa72db7539f2b8065", 0x92, 0x1, 0x0, 0x1}, &(0x7f0000001180)) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x4a40, 0x0) preadv2(r5, &(0x7f0000001000)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x9, 0xf) r6 = socket(0x1e, 0x1, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x5}}, 0x80, r9}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r9}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r10 = syz_open_dev$usbmon(&(0x7f00000011c0), 0x6, 0x442003) fcntl$F_GET_FILE_RW_HINT(r10, 0x40d, &(0x7f0000001200)) 894.866924ms ago: executing program 6 (id=6024): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0xe, {0x2a00, 0x80010000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab75fc179fd1f8a0e91ddaaca7bd6447a4bde00d9683dda1af1ea09de2b7fb4af956000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5523406c7f0000000000000000000000000000000000000900", [0x4, 0x40000000000000]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000040)) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) write(r3, &(0x7f0000000400)="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", 0x1f000) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) (async, rerun: 32) sigaltstack(0x0, 0x0) (rerun: 32) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r6 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r6, 0x80284504, &(0x7f0000000000)=""/52) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000537000/0x18000)=nil, &(0x7f0000001440)=[@textreal={0x8, &(0x7f0000001400)="f30f1efffb670f01c50f79c10f20d86635080000000f22d80f20e06635000002000f22e02e0f79e8f30f019f0b9e0fd5167000f0085d00", 0x37}], 0x1, 0x1, &(0x7f0000001480)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, @dstype0={0x6, 0xf}], 0x2) epoll_pwait2(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, &(0x7f0000000380)={r4, r5+60000000}, &(0x7f00000003c0)={[0x100000001]}, 0x8) (async) request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0xfffffffffffffffc) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001800090200000000000000000200000008eaff01"], 0x2c}}, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0xdddd1000, 0x3, 0xf, 0x4956, 0x0, [{0x80, 0x4b, 0x1e, '\x00', 0x7}, {0xc6, 0xe, 0x0, '\x00', 0x81}, {0x10, 0xea, 0xc, '\x00', 0x2}, {0x1, 0x6, 0x9, '\x00', 0x80}, {0x1, 0x3, 0xfa, '\x00', 0x4}, {0xe4, 0xfc, 0x6, '\x00', 0x1}, {0x4, 0x8, 0xd5, '\x00', 0x5}, {0x9, 0x4, 0x9, '\x00', 0xa}, {0x2, 0x5, 0x4, '\x00', 0x9}, {0x8, 0x8d, 0x6, '\x00', 0x9}, {0x8, 0x40, 0x63, '\x00', 0x1}, {0x8, 0x8, 0x1, '\x00', 0x3}, {0x40, 0x0, 0x2, '\x00', 0x20}, {0x6, 0xff, 0x33}, {0x7, 0x6, 0x83, '\x00', 0x3}, {0x0, 0x4, 0x3, '\x00', 0xb3}, {0x40, 0x7, 0x5, '\x00', 0x4b}, {0xa, 0x7, 0x3f, '\x00', 0x2}, {0x2, 0x3, 0xa, '\x00', 0x8}, {0x9, 0x6, 0x6, '\x00', 0x6}, {0x8, 0x9, 0x4, '\x00', 0x1}, {0x8, 0x2, 0x90, '\x00', 0x40}, {0x3, 0x7f, 0x4, '\x00', 0x5}, {0x8, 0x7f, 0xc, '\x00', 0xa}]}}) (async) ftruncate(r3, 0x6) (async) write(r6, &(0x7f00000014c0)="64f26c74a212400238cf5f9b805f4dcf1739ee4fe224c6031a56c07eeceff2e1425ca9543afc6058dc12586aecfaeec30666e42224609aae5a512b3d35ba1d4b8ce03154c1c967804de279b96fd7d61aa3e83d6b23cbbfd3e9a4ebdebbe9a6e18867cb0b7dd98f10472f2b447c964545499981e6c8db32e27f04f6f841b68d573b8a3bf6499a59adfdd13ec9d84312b724134ab36b2d10c5e28708db0013e039bfb9ac9bccf761d149c66af7d1956c0c4bb4de089384016375f9f4e995e8476031e42a81ba38b2082dfcaf905264b6cef8cba6b57055dd175d00445768c1b69a9554e51195b4f26a50c3e93662a8b6e56af0627a195048", 0xf7) 873.565495ms ago: executing program 6 (id=6025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x60, 0x3, 0x16, {0x16, 0x3e, "3d91419d0946052dcdcf01956ccce47b47d1aab0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x5084, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x140, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x60, 0x3, 0x16, {0x16, 0x3e, "3d91419d0946052dcdcf01956ccce47b47d1aab0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x5084, &(0x7f0000000100)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext=']) (async) 0s ago: executing program 7 (id=6026): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x4, 0x0, @broadcast, @multicast1}}}}) prlimit64(0x0, 0xd, 0x0, &(0x7f00000000c0)) r3 = syz_usb_connect$hid(0x0, 0x8e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) accept4$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x400) syz_usb_control_io$hid(r3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x193000, 0x0) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0x8, {0x8, 0x23, "0a0999df8055"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002800010023bd700000000000100000000c00000000000001000000000c002300040001"], 0x2c}], 0x1}, 0x0) readv(r0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3) kernel console output (not intermixed with test programs): ange as write [ 301.299348][T14709] loop5: detected capacity change from 0 to 7 [ 301.388048][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 301.397884][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 301.406912][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 301.416720][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 301.426787][T14709] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 301.434180][T14709] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:52 [ 301.785574][ T45] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 301.950352][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.964202][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.975425][T14715] binder: Unknown parameter 'context[7' [ 301.983365][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.992818][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.001430][ T45] usb 1-1: Product: syz [ 302.013320][ T45] usb 1-1: Manufacturer: syz [ 302.020612][T14717] netlink: 'syz.4.4702': attribute type 58 has an invalid length. [ 302.029261][ T45] usb 1-1: SerialNumber: syz [ 302.038187][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 302.044317][T14717] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 302.084947][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4703'. [ 302.242862][T14713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.337617][ T449] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 302.492159][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.503391][ T449] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.514156][ T449] usb 5-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 302.523772][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.533984][ T449] usb 5-1: config 0 descriptor?? [ 302.864968][T14713] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 302.872404][ T45] cdc_mbim 1-1:1.0: setting tx_max = 16384 [ 302.878870][ T45] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 302.886102][ T45] wwan wwan0: port wwan0mbim0 attached [ 302.893584][ T45] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 6e:e7:e0:cf:19:65 [ 302.954111][ T449] chicony 0003:04F2:1421.001E: item fetching failed at offset 3/5 [ 302.962353][ T449] chicony 0003:04F2:1421.001E: Chicony hid parse failed: -22 [ 302.969991][ T449] chicony 0003:04F2:1421.001E: probe with driver chicony failed with error -22 [ 303.035757][ T149] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 303.085838][T14713] /dev/nullb0: Can't lookup blockdev [ 303.091923][ T547] usb 1-1: USB disconnect, device number 43 [ 303.098281][ T547] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 303.160865][ T547] wwan wwan0: port wwan0mbim0 disconnected [ 303.160876][T14720] rust_binder: 18: no such ref 0 [ 303.160895][T14720] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 303.179143][T14720] rust_binder: 18: no such ref 2 [ 303.184161][T14720] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 303.186548][ T45] usb 5-1: USB disconnect, device number 52 [ 303.367053][T14759] bridge0: entered allmulticast mode [ 303.748389][T14804] overlay: Unknown parameter 'euid' [ 303.762141][T14809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 303.771628][T14809] rust_binder: 60: no such ref 3 [ 303.776759][T14809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 303.784032][T14809] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 303.798095][T14822] bridge0: left allmulticast mode [ 304.022047][ T547] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 304.115981][T14862] rust_binder: Write failure EINVAL in pid:107 [ 304.144985][ T36] audit: type=1400 audit(1762393060.080:958): avc: denied { append } for pid=14864 comm="syz.7.4737" name="pfkey" dev="proc" ino=4026533379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 304.197078][ T547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.209584][ T547] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.221079][ T547] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 304.230457][ T547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.242606][ T547] usb 5-1: config 0 descriptor?? [ 304.457572][ T547] usbhid 5-1:0.0: can't add hid device: -71 [ 304.466645][ T547] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 304.482961][ T547] usb 5-1: USB disconnect, device number 53 [ 304.756225][T14876] can: request_module (can-proto-3) failed. [ 304.778922][T14880] __vm_enough_memory: pid: 14880, comm: syz.0.4741, bytes: 18014402804453376 not enough memory for the allocation [ 304.809820][ T36] audit: type=1400 audit(1762393060.728:959): avc: denied { write } for pid=14883 comm="syz.0.4743" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 304.834134][T14884] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.4743'. [ 304.843416][T14884] netlink: 280 bytes leftover after parsing attributes in process `syz.0.4743'. [ 304.853060][T14884] 9pnet_fd: Insufficient options for proto=fd [ 304.927487][ T36] audit: type=1400 audit(1762393060.846:960): avc: denied { map } for pid=14892 comm="syz.0.4746" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 311.781007][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 313.327879][T14912] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4753'. [ 313.388897][T14915] rust_binder: 116: no such ref 3 [ 313.399844][T14914] rust_binder: 116: no such ref 3 [ 313.408263][T14915] rust_binder: 116: no such ref 1 [ 313.418333][T14914] rust_binder: 116: no such ref 1 [ 313.423560][T14915] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 313.423633][T14914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:116 [ 313.435498][T14924] rust_binder: Write failure EINVAL in pid:38 [ 313.463425][T14929] overlay: Bad value for 'redirect_dir' [ 313.499747][T14929] overlayfs: failed to clone lowerpath [ 313.521560][T14936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 313.521599][T14936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:124 [ 313.532791][T14933] rust_binder: Write failure EINVAL in pid:40 [ 313.554569][T14933] rust_binder: Write failure EINVAL in pid:40 [ 313.612333][T14945] netlink: 57 bytes leftover after parsing attributes in process `syz.0.4765'. [ 313.667707][T14957] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 313.684782][ T36] audit: type=1326 audit(1762393069.483:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14961 comm="syz.6.4771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7024f8f6c9 code=0x0 [ 313.717534][T14965] /dev/rnullb0: Can't lookup blockdev [ 313.766519][T14976] rust_binder: 118: no such ref 1 [ 313.772115][T14976] rust_binder: validate_parent_fixup: new_min_offset=53, sg_entry.length=0 [ 313.772137][T14976] rust_binder: Error while translating object. [ 313.781878][T14976] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 313.788112][T14976] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118 [ 313.809465][T14978] binder: Bad value for 'stats' [ 314.156513][ T561] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 314.308056][ T561] usb 1-1: Using ep0 maxpacket: 32 [ 314.314399][ T561] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.326103][ T561] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 314.335244][ T561] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.343269][ T561] usb 1-1: Product: syz [ 314.347455][ T561] usb 1-1: Manufacturer: syz [ 314.352109][ T561] usb 1-1: SerialNumber: syz [ 314.357321][ T561] usb 1-1: config 0 descriptor?? [ 314.363238][ T561] cdc_ether 1-1:0.0: skipping garbage [ 314.369813][ T561] usb 1-1: bad CDC descriptors [ 314.375973][ T561] usb 1-1: unsupported MDLM descriptors [ 314.381589][ T547] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 314.540301][ T547] usb 5-1: Using ep0 maxpacket: 32 [ 314.546512][ T547] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 314.557810][ T547] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.567669][ T547] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 314.569588][T14988] rust_binder: 125: no such ref 2 [ 314.578811][ T547] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 314.583911][T14988] rust_binder: 125: no such ref 0 [ 314.596903][ T547] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.608434][ T547] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 314.617530][ T547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.626942][ T547] usb 5-1: config 0 descriptor?? [ 314.672919][ T45] usb 1-1: USB disconnect, device number 44 [ 315.038065][ T547] kye 0003:0458:501A.001F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 315.049582][ T547] kye 0003:0458:501A.001F: unknown main item tag 0x0 [ 315.056514][ T547] kye 0003:0458:501A.001F: unknown main item tag 0x0 [ 315.063566][ T547] kye 0003:0458:501A.001F: unknown main item tag 0x0 [ 315.070556][ T547] kye 0003:0458:501A.001F: unknown main item tag 0x0 [ 315.077493][ T547] kye 0003:0458:501A.001F: unknown main item tag 0x0 [ 315.095844][ T547] kye 0003:0458:501A.001F: hidraw0: USB HID v0.03 Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 315.115916][ T547] kye 0003:0458:501A.001F: tablet-enabling feature report not found [ 315.124076][ T547] kye 0003:0458:501A.001F: tablet enabling failed [ 315.304190][ T36] audit: type=1400 audit(1762393071.087:962): avc: denied { remount } for pid=15015 comm="syz.0.4790" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 315.309831][T15016] rust_binder: Failed to allocate buffer. len:208, is_oneway:false [ 315.352082][T15020] SELinux: security_context_str_to_sid () failed with errno=-22 [ 315.595759][T15025] rust_binder: Write failure EINVAL in pid:44 [ 315.721588][ T547] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 315.884039][ T547] usb 1-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 315.893177][ T547] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 315.902290][ T547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.220984][T15057] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4805'. [ 316.258192][ T36] audit: type=1326 audit(1762393072.028:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.6.4807" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7024f8f6c9 code=0x0 [ 317.029260][T15066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15066 comm=syz.7.4808 [ 317.042367][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4808'. [ 317.176198][ T45] usb 5-1: USB disconnect, device number 54 [ 317.408347][T15104] overlayfs: workdir and upperdir must be separate subtrees [ 317.517924][T15116] rust_binder: Write failure EFAULT in pid:163 [ 317.606692][T15147] rust_binder: Write failure EFAULT in pid:102 [ 317.629581][T15149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 317.636042][T15149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:104 [ 318.413935][ T449] usb 1-1: USB disconnect, device number 45 [ 318.464716][ T45] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 318.562149][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4834'. [ 318.572901][T15159] /dev/rnullb0: Can't lookup blockdev [ 318.616939][ T45] usb 5-1: unable to get BOS descriptor or descriptor too short [ 318.625382][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.635553][ T45] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.644771][ T45] usb 5-1: config 1 has no interface number 1 [ 318.650969][ T45] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.663245][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.672547][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.680585][ T45] usb 5-1: Product: syz [ 318.684814][ T45] usb 5-1: Manufacturer: syz [ 318.689453][ T45] usb 5-1: SerialNumber: syz [ 318.762092][T15168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 318.762119][T15168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:158 [ 318.898545][T15151] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 318.911967][T15151] input: syz1 as /devices/virtual/input/input44 [ 319.019312][ T45] usb 5-1: 2:1 : invalid UAC_AS_GENERAL desc [ 319.029191][ T45] usb 5-1: USB disconnect, device number 55 [ 319.037893][T14909] udevd[14909]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 319.065487][ T449] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 319.216618][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.227620][ T449] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 319.236688][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.245363][ T449] usb 1-1: config 0 descriptor?? [ 319.342091][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4843'. [ 319.351076][T15199] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4843'. [ 319.360121][T15199] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 319.654216][ T449] kovaplus 0003:1E7D:2D50.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 319.855095][T15184] rust_binder: Write failure EINVAL in pid:160 [ 319.855544][ T449] usb 1-1: USB disconnect, device number 46 [ 320.156139][T15239] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4857'. [ 320.484429][T15254] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:115 [ 320.497857][T15259] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.514816][T15259] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.515172][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4864'. [ 320.531273][T15259] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 320.531291][T15259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 320.539506][T15259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:120 [ 320.552105][T15259] can0: slcan on ptm0. [ 320.607912][T15258] can0 (unregistered): slcan off ptm0. [ 320.625533][ T449] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 320.746831][T15292] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.796713][T15303] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.805493][ T449] usb 1-1: Using ep0 maxpacket: 32 [ 320.818589][T15304] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:128 [ 320.820112][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.863233][ T449] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 320.874757][T15312] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 320.884591][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.916253][ T449] usb 1-1: config 0 descriptor?? [ 321.047658][T15325] input: syz0 as /devices/virtual/input/input46 [ 321.103816][T15329] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 321.112178][T15329] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 321.116147][T15330] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.337520][T15252] rust_binder: Error while translating object. [ 321.344054][T15252] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 321.355652][T15252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 321.372041][ T449] usbhid 1-1:0.0: can't add hid device: -71 [ 321.391841][ T449] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 321.400774][ T449] usb 1-1: USB disconnect, device number 47 [ 321.412204][T15350] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 321.412228][T15350] rust_binder: Read failure Err(EFAULT) in pid:196 [ 321.501895][T15367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 321.509060][T15367] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false [ 321.620322][T15385] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 321.637277][T15384] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 321.688481][T15390] rust_binder: Error while translating object. [ 321.688540][T15390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 321.694874][T15390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:178 [ 321.753696][T15394] rust_binder: Error while translating object. [ 321.763398][T15394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 321.769725][T15394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:180 [ 321.802574][T15396] rust_binder: Error while translating object. [ 321.812417][T15398] /dev/rnullb0: Can't lookup blockdev [ 321.820421][T15396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 321.824047][T15396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:203 [ 321.850461][T15403] rust_binder: Read failure Err(EAGAIN) in pid:205 [ 321.894439][ T36] audit: type=1400 audit(1762397436.638:964): avc: denied { nlmsg_read } for pid=15409 comm="syz.7.4906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 321.975973][T15418] fuse: Bad value for 'fd' [ 321.980791][T15418] fuse: Bad value for 'fd' [ 321.985326][T15418] fuse: Bad value for 'fd' [ 322.234184][T15436] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4915'. [ 322.252095][T15436] IPv6: NLM_F_CREATE should be specified when creating new route [ 322.325753][T15443] netlink: 'syz.6.4918': attribute type 16 has an invalid length. [ 322.345505][T15443] netlink: 'syz.6.4918': attribute type 3 has an invalid length. [ 322.361002][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4917'. [ 322.364660][T15443] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.4918'. [ 322.655602][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 322.805827][T15467] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 322.805858][T15467] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:193 [ 322.816675][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.860271][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.861880][T15472] binder: Bad value for 'max' [ 322.878589][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.897011][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.906496][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.915930][ T10] usb 1-1: config 0 descriptor?? [ 323.175525][ T547] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 323.325522][ T547] usb 5-1: Using ep0 maxpacket: 32 [ 323.331728][ T547] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.339957][ T547] usb 5-1: config 0 has no interface number 0 [ 323.347389][ T10] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 323.355478][ T547] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.367455][ T547] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.372698][T15489] netlink: 393 bytes leftover after parsing attributes in process `syz.6.4932'. [ 323.377893][ T547] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 323.395610][ T10] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 323.409189][ T547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.418334][ T547] usb 5-1: config 0 descriptor?? [ 324.025521][T15483] bridge0: port 3(syz_tun) entered blocking state [ 324.032027][T15483] bridge0: port 3(syz_tun) entered disabled state [ 324.038702][T15483] syz_tun: entered allmulticast mode [ 324.044433][T15483] syz_tun: entered promiscuous mode [ 324.049973][T15483] bridge0: port 3(syz_tun) entered blocking state [ 324.056429][T15483] bridge0: port 3(syz_tun) entered forwarding state [ 324.063390][T15523] netlink: 'syz.6.4942': attribute type 12 has an invalid length. [ 324.134447][ T547] usbhid 5-1:0.1: can't add hid device: -71 [ 324.140459][ T547] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 324.149316][ T547] usb 5-1: USB disconnect, device number 56 [ 324.780151][ T45] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [ 324.820983][T15554] overlayfs: failed to clone lowerpath [ 325.225525][ T449] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 325.376473][ T449] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 325.385548][ T449] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 325.396056][ T449] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 325.399370][T15570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=15570 comm=syz.6.4961 [ 325.405746][ T449] usb 5-1: New USB device found, idVendor=046d, idProduct=ff22, bcdDevice= 0.ff [ 325.427063][ T449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.435881][T15573] overlay: Bad value for 'verity' [ 325.447729][T15574] overlay: Unknown parameter 'smackfsroot' [ 325.454053][T15573] overlay: Unknown parameter 'smackfsroot' [ 326.046380][ T36] audit: type=1400 audit(1762397440.798:965): avc: denied { mounton } for pid=15591 comm="syz.7.4969" path="/83/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 326.116913][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4971'. [ 326.126791][T15596] fuse: Bad value for 'rootmode' [ 326.127599][T15592] fuseblk: Unknown parameter 'x5_d<0x000000000000000a' [ 326.215646][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.215697][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.222228][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.228707][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.235232][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.241780][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.248315][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.254774][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.261288][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.267794][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.274280][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.280874][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.287457][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.293936][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.300444][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.306962][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.313434][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.319885][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.326340][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.332779][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.339269][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.345736][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.352178][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.358662][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.365107][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.371560][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.378034][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.384459][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.390911][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.397362][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.403822][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.410463][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.417127][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.423571][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.430080][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.436569][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.443060][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.449520][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.456038][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.462535][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.469064][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.475526][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.481963][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.488448][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.494890][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.505586][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.512171][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.518653][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.525106][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.531777][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.538249][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.544682][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.551183][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.557658][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.564101][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.570942][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.577662][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.584151][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.590696][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.597168][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.603614][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.610116][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.616585][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.623023][T15601] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 326.709540][T15607] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:239 [ 326.911245][T15655] netlink: 'syz.6.4987': attribute type 4 has an invalid length. [ 326.928226][T15655] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.4987'. [ 327.496752][T15683] /dev/rnullb0: Can't lookup blockdev [ 327.502245][ T36] audit: type=1400 audit(1762397442.248:966): avc: denied { write } for pid=561 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62024 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 327.538031][T15686] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 327.559750][T15691] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 327.559781][T15691] rust_binder: Error while translating object. [ 327.568663][T15691] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 327.574848][T15691] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:266 [ 327.603492][T15693] overlayfs: statfs failed on './file0' [ 327.812908][T15708] __vm_enough_memory: pid: 15708, comm: syz.7.5003, bytes: 18014402804453376 not enough memory for the allocation [ 327.844923][T15710] rust_binder: Write failure EFAULT in pid:273 [ 327.998345][ T561] usb 5-1: USB disconnect, device number 57 [ 328.037741][T15723] rust_binder: 15720 RLIMIT_NICE not set [ 328.037770][T15723] rust_binder: inc_ref_done called when no active inc_refs [ 328.043520][T15723] rust_binder: inc_ref_done called when no active inc_refs [ 328.335538][ T561] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 328.363788][T15757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5021'. [ 328.505597][ T561] usb 5-1: Using ep0 maxpacket: 32 [ 328.512335][ T561] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 328.520643][ T561] usb 5-1: config 0 has no interface number 0 [ 328.526800][ T561] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 328.536892][ T561] usb 5-1: config 0 interface 196 has no altsetting 0 [ 328.545183][ T561] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 328.554361][ T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.562402][ T561] usb 5-1: Product: syz [ 328.566661][ T561] usb 5-1: Manufacturer: syz [ 328.571283][ T561] usb 5-1: SerialNumber: syz [ 328.577491][ T561] usb 5-1: config 0 descriptor?? [ 328.583379][T15722] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.622876][T15781] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=15781 comm=syz.6.5029 [ 328.713215][T15792] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.5033'. [ 328.723056][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5033'. [ 328.785269][T15798] 8021q: VLANs not supported on ip_vti0 [ 329.193958][ T561] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 329.203228][ T561] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 329.395722][ C0] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 329.597317][ T561] usb 5-1: USB disconnect, device number 58 [ 329.669921][ T561] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 329.933994][T15852] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5044'. [ 329.983338][ T45] usb 1-1: device descriptor read/64, error -110 [ 330.074630][T15864] veth1: entered allmulticast mode [ 330.084945][T15864] veth1: left allmulticast mode [ 330.096376][T15869] overlay: Unknown parameter 'func' [ 330.203114][T15901] overlayfs: failed to clone lowerpath [ 330.225498][ T45] usb 1-1: device descriptor read/64, error -32 [ 330.275927][T15909] overlayfs: failed to clone upperpath [ 330.278850][T15911] rust_binder: Failed to allocate buffer. len:104, is_oneway:true [ 330.475505][ T45] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [ 330.615534][ T45] usb 1-1: device descriptor read/64, error -32 [ 330.665546][ T330] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 330.816523][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.826368][ T330] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 330.835410][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.844077][ T330] usb 5-1: config 0 descriptor?? [ 330.855479][ T45] usb 1-1: device descriptor read/64, error -32 [ 331.035522][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 331.095485][ T45] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [ 331.115620][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.122869][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.130150][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.137275][ T45] usb 1-1: device descriptor read/8, error -32 [ 331.249665][T15950] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5078'. [ 331.258914][T15950] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5078'. [ 331.267962][T15950] tipc: Invalid UDP bearer configuration [ 331.267985][T15950] tipc: Enabling of bearer rejected, failed to enable media [ 331.273742][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.289392][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.296892][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.304014][ T45] usb 1-1: device descriptor read/8, error -32 [ 331.336215][T15963] /dev/rnullb0: Can't lookup blockdev [ 331.378491][T15973] 9pnet_virtio: no channels available for device ./file0 [ 331.415505][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 331.422506][ T45] raw-gadget.0 gadget.0: failed to queue reset event [ 331.461175][ T330] usbhid 5-1:0.0: can't add hid device: -71 [ 331.467198][ T330] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 331.475908][ T330] usb 5-1: USB disconnect, device number 59 [ 331.495531][ T45] raw-gadget.0 gadget.0: failed to queue resume event [ 331.565587][ T45] usb 1-1: reset high-speed USB device number 48 using dummy_hcd [ 331.585649][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.592904][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.600164][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.607454][ T45] usb 1-1: device descriptor read/8, error -32 [ 331.736370][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.743888][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.751360][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 331.758680][ T45] usb 1-1: device descriptor read/8, error -32 [ 331.871236][ T45] raw-gadget.0 gadget.0: failed to queue suspend event [ 331.884665][ T411] usb 1-1: USB disconnect, device number 48 [ 331.896668][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 331.965539][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 331.991198][T15996] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 331.999520][T15996] rust_binder: Write failure EINVAL in pid:252 [ 332.025516][ T411] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 332.039567][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.046855][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.054150][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.061383][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 332.135517][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 332.195513][ T411] usb 1-1: device descriptor read/64, error -32 [ 332.305678][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.312954][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.320244][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.327653][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 332.395518][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 332.428408][T16011] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5099'. [ 332.437601][T16011] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5099'. [ 332.446591][T16011] netlink: 'syz.7.5099': attribute type 5 has an invalid length. [ 332.454504][T16011] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5099'. [ 332.455514][ T411] usb 1-1: device descriptor read/64, error -32 [ 332.545607][T16020] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5103'. [ 332.569424][T16023] overlayfs: failed to clone lowerpath [ 332.595492][ T411] raw-gadget.0 gadget.0: failed to queue suspend event [ 332.602509][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 332.675504][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 332.735511][ T411] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 332.743372][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.750667][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.757970][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 332.765097][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 332.835522][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 332.869361][T16042] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 332.895544][ T411] usb 1-1: device descriptor read/64, error -32 [ 332.913311][T16041] rust_binder: Error in use_page_slow: ESRCH [ 332.913332][T16041] rust_binder: use_range failure ESRCH [ 332.919382][T16041] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 332.924847][T16041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 332.932511][T16041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:265 [ 333.015661][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.031940][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.039241][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.046407][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 333.080351][ T36] audit: type=1400 audit(1762397447.828:967): avc: granted { setsecparam } for pid=16054 comm="syz.4.5115" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 333.115513][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 333.123410][T16061] netlink: 92 bytes leftover after parsing attributes in process ` [ 333.123410][T16061]  !'. [ 333.170524][T16067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 333.170559][T16067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:279 [ 333.180288][ T411] usb 1-1: device descriptor read/64, error -32 [ 333.305524][ T411] raw-gadget.0 gadget.0: failed to queue suspend event [ 333.312539][ T411] usb usb1-port1: attempt power cycle [ 333.318279][ T411] raw-gadget.0 gadget.0: failed to queue disconnect event [ 333.325864][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 333.395503][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 333.402454][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 333.484085][T16099] overlayfs: conflicting options: userxattr,redirect_dir=on [ 333.615515][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 333.675544][ T411] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 333.695682][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.702930][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.710143][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.717220][ T411] usb 1-1: device descriptor read/8, error -32 [ 333.845727][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.853005][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.860271][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 333.867430][ T411] usb 1-1: device descriptor read/8, error -32 [ 333.895947][T16104] fuse: Bad value for 'fd' [ 333.975525][ T411] raw-gadget.0 gadget.0: failed to queue suspend event [ 333.982608][ T411] raw-gadget.0 gadget.0: failed to queue reset event [ 334.065558][ T411] raw-gadget.0 gadget.0: failed to queue resume event [ 334.111826][T16145] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5146'. [ 334.125649][ T411] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 334.149368][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.156660][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.163918][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.171158][ T411] usb 1-1: device descriptor read/8, error -32 [ 334.315667][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.323089][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.330443][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 334.337612][ T411] usb 1-1: device descriptor read/8, error -32 [ 334.405540][ T547] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 334.445513][ T411] raw-gadget.0 gadget.0: failed to queue suspend event [ 334.452466][ T411] usb usb1-port1: unable to enumerate USB device [ 334.550372][T16153] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5149'. [ 334.559435][T16154] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5149'. [ 334.560950][ T547] usb 5-1: unable to get BOS descriptor or descriptor too short [ 334.576833][ T547] usb 5-1: config 192 has an invalid interface number: 56 but max is 0 [ 334.585095][ T547] usb 5-1: config 192 has no interface number 0 [ 334.591398][ T547] usb 5-1: config 192 interface 56 altsetting 144 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 334.602792][ T547] usb 5-1: config 192 interface 56 has no altsetting 0 [ 334.611352][ T547] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=7a.87 [ 334.620441][ T547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.628512][ T547] usb 5-1: Product: syz [ 334.632700][ T547] usb 5-1: Manufacturer: syz [ 334.637485][ T547] usb 5-1: SerialNumber: syz [ 334.724809][T16164] netlink: 'syz.6.5153': attribute type 27 has an invalid length. [ 334.743909][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.751199][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.786557][ T36] audit: type=1326 audit(1762397449.538:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16162 comm="syz.6.5153" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7024f8f6c9 code=0x0 [ 334.849024][ T547] snd-usb-audio 5-1:192.56: probe with driver snd-usb-audio failed with error -2 [ 334.859689][ T547] usb 5-1: USB disconnect, device number 60 [ 334.868331][T14909] udevd[14909]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:192.56/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 335.376905][T16184] binder: Unknown parameter 'ma000000000000000001' [ 335.635511][ T45] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 335.785519][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 335.791767][ T45] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.802801][ T45] usb 5-1: config 0 interface 0 has no altsetting 0 [ 335.809502][ T45] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 335.818580][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.827274][ T45] usb 5-1: config 0 descriptor?? [ 335.996024][T16197] cannot load conntrack support for proto=3 [ 336.040126][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 336.046701][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 336.055695][ T45] usb 5-1: USB disconnect, device number 61 [ 336.570850][T16236] __nla_validate_parse: 2 callbacks suppressed [ 336.570873][T16236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5182'. [ 336.587505][T16236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 336.587538][T16236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:305 [ 336.634954][T16241] overlayfs: overlapping lowerdir path [ 337.592404][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.612988][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.623715][T16272] bridge_slave_0: entered allmulticast mode [ 337.630348][T16272] bridge_slave_0: entered promiscuous mode [ 337.637241][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.644578][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.651949][T16272] bridge_slave_1: entered allmulticast mode [ 337.658523][T16272] bridge_slave_1: entered promiscuous mode [ 337.660844][T16278] rust_binder: Error while translating object. [ 337.664399][T16278] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 337.681537][T16278] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:320 [ 337.768364][T16280] tmpfs: Bad value for 'nr_inodes' [ 337.800135][ T36] audit: type=1400 audit(1762397452.548:969): avc: denied { create } for pid=16279 comm="syz.4.5196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 337.845989][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.853086][T16272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.860409][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.867469][T16272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.894839][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.902395][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.918968][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.926068][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.936266][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.943371][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.999930][T16272] veth0_vlan: entered promiscuous mode [ 338.036159][T16272] veth1_macvtap: entered promiscuous mode [ 338.176517][T16314] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 338.184886][T16314] rust_binder: Write failure EINVAL in pid:9 [ 338.195607][T16300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=16300 comm=syz.4.5201 [ 338.228272][T16320] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 338.244632][T16319] rust_binder: Error while translating object. [ 338.251883][T16319] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 338.258604][T16319] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:11 [ 338.316537][T16328] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5210'. [ 338.351565][T16335] netlink: 'syz.6.5212': attribute type 1 has an invalid length. [ 338.359358][T16335] netlink: 'syz.6.5212': attribute type 3 has an invalid length. [ 338.360623][ T36] audit: type=1400 audit(1762397453.118:970): avc: denied { execute } for pid=16336 comm="syz.8.5213" path="pipe:[64136]" dev="pipefs" ino=64136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 338.367468][T16335] netlink: 296 bytes leftover after parsing attributes in process `syz.6.5212'. [ 338.675552][ T547] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 338.825494][ T547] usb 9-1: Using ep0 maxpacket: 16 [ 338.833081][ T547] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 338.842386][ T547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.850437][ T547] usb 9-1: Product: syz [ 338.854721][ T547] usb 9-1: Manufacturer: syz [ 338.859474][ T547] usb 9-1: SerialNumber: syz [ 338.866277][ T547] r8152-cfgselector 9-1: Unknown version 0x0000 [ 338.871863][T16359] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 338.872568][T16359] rust_binder: Read failure Err(EFAULT) in pid:343 [ 338.872586][ T547] r8152-cfgselector 9-1: config 0 descriptor?? [ 338.998744][T16364] netlink: 'syz.6.5221': attribute type 11 has an invalid length. [ 339.051914][T16369] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5222'. [ 339.089058][T16374] netlink: 25 bytes leftover after parsing attributes in process `syz.6.5224'. [ 339.099091][ T547] r8152-cfgselector 9-1: Needed 1 retries to read version [ 339.312161][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.322881][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.333542][T16345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.342086][T16345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.396446][ T1036] r8152-cfgselector 9-1: USB disconnect, device number 2 [ 339.657072][T16435] binder: Bad value for 'max' [ 339.685188][T16439] rust_binder: Write failure EFAULT in pid:357 [ 339.697086][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5248'. [ 339.730383][T16446] tipc: Trying to set illegal importance in message [ 339.767519][T16451] sit0: entered promiscuous mode [ 339.773631][T16451] netlink: 'syz.4.5251': attribute type 1 has an invalid length. [ 339.781481][T16451] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5251'. [ 339.918407][T16457] cannot load conntrack support for proto=3 [ 339.943874][T16459] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.952424][T16459] overlay: ./bus is not a directory [ 339.987233][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.987261][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 339.993910][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.000486][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.000485][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.000511][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.019574][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.026140][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.026310][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.038770][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.045264][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.045274][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.045295][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.064265][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.064270][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.079376][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.086233][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.089248][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.100905][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.100925][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.113492][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.120601][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.120625][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.133143][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.139660][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.139701][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.152244][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.158847][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.159757][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.171542][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.171541][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.171566][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.190619][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.197113][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.203552][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.209685][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.215862][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.222306][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.228446][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.234580][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.241081][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.244526][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.254197][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.261059][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.267614][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.269289][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.275388][T16477] x_tables: duplicate underflow at hook 1 [ 340.279874][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.292339][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.298811][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.298817][T16465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 340.311393][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.317874][ T1036] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 340.318141][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.331653][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.337918][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.344096][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.350196][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.356310][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.362478][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.368586][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.374700][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.380815][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.386978][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.393189][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.399326][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.405454][T16466] rust_binder: Write failure EINVAL in pid:35 [ 340.466725][ T1036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.482604][ T1036] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 340.491782][ T1036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.500538][ T1036] usb 5-1: config 0 descriptor?? [ 340.909498][ T1036] greenasia 0003:0E8F:0012.0022: hidraw0: USB HID v0.07 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 340.920990][ T1036] greenasia 0003:0E8F:0012.0022: no inputs found [ 341.110340][T16468] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293 [ 341.118347][T16468] rust_binder: Write failure EINVAL in pid:372 [ 341.119383][ T411] usb 5-1: USB disconnect, device number 62 [ 346.439472][T16486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 346.439505][T16486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:374 [ 346.471434][T16495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5267'. [ 346.497851][ T1036] hid (null): global environment stack underflow [ 346.506067][ T1036] hid (null): unknown global tag 0xe [ 346.512232][ T1036] hid-generic 0009:0000:0007.0023: global environment stack underflow [ 346.525699][ T1036] hid-generic 0009:0000:0007.0023: item 0 2 1 11 parsing failed [ 346.533554][ T1036] hid-generic 0009:0000:0007.0023: probe with driver hid-generic failed with error -22 [ 346.745493][ T411] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 346.905872][ T411] usb 9-1: too many configurations: 72, using maximum allowed: 8 [ 346.919406][ T411] usb 9-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 346.928536][ T411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.937192][ T411] usb 9-1: config 0 descriptor?? [ 346.955487][ T1036] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 347.105487][ T1036] usb 5-1: Using ep0 maxpacket: 16 [ 347.111656][ T1036] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 347.119921][ T1036] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 347.128172][ T1036] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 347.137089][ T1036] usb 5-1: config 0 has no interface number 0 [ 347.143178][ T1036] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 347.145355][T16507] __vm_enough_memory: pid: 16507, comm: syz.8.5271, bytes: 8590000128 not enough memory for the allocation [ 347.153042][ T1036] usb 5-1: config 0 interface 104 has no altsetting 1 [ 347.154856][ T1036] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 347.168533][ T45] usb 9-1: USB disconnect, device number 3 [ 347.171292][ T1036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.197126][ T1036] usb 5-1: Product: syz [ 347.203188][ T1036] usb 5-1: Manufacturer: syz [ 347.207912][ T1036] usb 5-1: SerialNumber: syz [ 347.215674][ T1036] usb 5-1: config 0 descriptor?? [ 347.393640][T16549] veth0_to_batadv: entered allmulticast mode [ 347.399849][T16549] veth0_to_batadv: left allmulticast mode [ 347.533448][T16568] fuse: blksize only supported for fuseblk [ 347.730416][ T36] audit: type=1400 audit(1762397462.478:971): avc: denied { execute } for pid=16575 comm="syz.8.5291" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 347.871474][T16584] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5293'. [ 347.880476][T16584] tipc: Invalid UDP bearer configuration [ 347.880496][T16584] tipc: Enabling of bearer rejected, failed to enable media [ 347.957989][T16597] tmpfs: Bad value for 'nr_inodes' [ 347.965411][T16588] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.075485][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 348.091588][T16606] overlayfs: failed to clone lowerpath [ 348.226697][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.237651][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34303, setting to 1024 [ 348.248837][ T10] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 348.257947][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.267015][ T10] usb 9-1: config 0 descriptor?? [ 348.272344][T16582] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 348.487636][ T10] usb 9-1: string descriptor 0 read error: -71 [ 348.496019][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 348.502489][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 348.512054][ T10] usb 9-1: USB disconnect, device number 4 [ 349.064749][T16633] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 349.560704][T16645] batadv_slave_1: entered promiscuous mode [ 349.568210][T16644] batadv_slave_1: left promiscuous mode [ 349.769789][ T36] audit: type=1326 audit(1762397464.518:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16655 comm="syz.6.5321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7024f8f6c9 code=0x0 [ 349.799569][ T1036] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 349.821099][ T1036] asix 5-1:0.104: probe with driver asix failed with error -71 [ 349.838005][ T1036] usb 5-1: USB disconnect, device number 63 [ 349.982495][T16668] SELinux: security_context_str_to_sid () failed with errno=-22 [ 350.048048][T16678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16678 comm=syz.8.5328 [ 350.072923][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.072954][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.079484][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.090493][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.106355][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.106622][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.113304][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.123285][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.133369][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.143474][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.153596][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.156431][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.162876][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.176727][T16682] SELinux: policydb string length 1836477231 does not match expected length 8 [ 350.185920][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.185948][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.192385][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.205466][T16682] SELinux: failed to load policy [ 350.212016][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.221700][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.235535][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.235563][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.245916][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.260477][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.260506][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.270701][T16682] rust_binder: Error while translating object. [ 350.274118][T16682] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 350.280415][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.295521][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.305463][T16682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 350.312007][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.329993][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.333071][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.345538][ T1036] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 350.363674][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.363702][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.375501][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.393533][T16685] sock: sock_timestamping_bind_phc: sock not bind to device [ 350.393991][T16678] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 350.407104][T16685] rust_binder: Write failure EINVAL in pid:406 [ 350.539084][ T1036] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.557205][ T1036] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 350.568543][ T1036] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 350.577766][ T1036] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.591932][ T1036] usb 9-1: Product: syz [ 350.596584][ T1036] usb 9-1: Manufacturer: syz [ 350.601311][ T1036] usb 9-1: SerialNumber: syz [ 350.685472][ T45] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 350.780426][T16701] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 350.790242][ T36] audit: type=1400 audit(7049589864.540:973): avc: denied { relabelto } for pid=16700 comm="syz.6.5334" name="rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 350.790559][T16705] overlayfs: failed to clone upperpath [ 350.843045][T16707] overlayfs: failed to clone upperpath [ 350.862686][ T36] audit: type=1400 audit(7049589864.570:974): avc: denied { associate } for pid=16700 comm="syz.6.5334" name="rnullb0" dev="tmpfs" ino=445 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 350.872002][ T1036] usb 9-1: USB disconnect, device number 5 [ 350.905493][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.917527][T16709] tc_dump_action: action bad kind [ 350.924617][T16711] input: syz0 as /devices/virtual/input/input49 [ 350.931232][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.959899][ T45] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 351.000401][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.031802][ T45] usb 5-1: config 0 descriptor?? [ 351.075192][T16727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=16727 comm=syz.8.5344 [ 351.101379][T16727] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5344'. [ 351.222168][T16743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=16743 comm=syz.6.5349 [ 351.247011][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 351.253194][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 351.276930][ T45] usb 5-1: USB disconnect, device number 64 [ 351.321445][ T36] audit: type=1326 audit(7049589865.070:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.368264][ T36] audit: type=1326 audit(7049589865.100:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.392716][ T36] audit: type=1326 audit(7049589865.100:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.416527][ T36] audit: type=1326 audit(7049589865.100:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.440005][ T36] audit: type=1326 audit(7049589865.100:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.463788][ T36] audit: type=1326 audit(7049589865.100:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.4.5354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21a018f6c9 code=0x7ffc0000 [ 351.468605][T16766] rust_binder: Error while translating object. [ 351.487418][T16766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 351.493603][T16766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:418 [ 351.517058][T16769] binder: Unknown parameter 'context[7' [ 351.555585][ T1036] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 351.580639][T16779] fuse: Unknown parameter ' <X*4bjCi$(wa1vYzbi'v bZܛ7#ݺL' [ 351.700941][T16792] can: request_module (can-proto-4) failed. [ 351.726605][ T1036] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 351.738157][ T1036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 351.749303][ T1036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 351.760467][ T1036] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.773427][ T1036] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.782618][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.791418][ T1036] usb 9-1: config 0 descriptor?? [ 351.796658][T16757] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 351.855484][ T330] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 351.985518][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.209539][ T1036] usbhid 9-1:0.0: can't add hid device: -71 [ 352.215641][ T1036] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 352.225480][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.225903][ T1036] usb 9-1: USB disconnect, device number 6 [ 352.467747][ T330] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 352.476411][T16800] vlan1: entered promiscuous mode [ 352.481683][T16800] vlan1: entered allmulticast mode [ 352.486840][T16800] veth0_vlan: entered allmulticast mode [ 352.502276][T16800] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 352.509389][T16800] overlayfs: failed to set xattr on upper [ 352.515117][T16800] overlayfs: ...falling back to redirect_dir=nofollow. [ 352.522183][T16800] overlayfs: ...falling back to index=off. [ 352.528058][T16800] overlayfs: ...falling back to uuid=null. [ 352.533867][T16800] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 352.605522][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.845507][ T330] usb 5-1: device descriptor read/64, error -71 [ 352.955618][ T330] usb usb5-port1: attempt power cycle [ 353.005501][ T45] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 353.156700][ T45] usb 9-1: config 0 has an invalid interface number: 189 but max is 0 [ 353.164921][ T45] usb 9-1: config 0 has no interface number 0 [ 353.171053][ T45] usb 9-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 353.181959][ T45] usb 9-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 353.193628][ T45] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 353.204803][ T45] usb 9-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 353.214660][ T45] usb 9-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.229053][ T45] usb 9-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 353.238153][ T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.246511][ T45] usb 9-1: Product: syz [ 353.250693][ T45] usb 9-1: Manufacturer: syz [ 353.255341][ T45] usb 9-1: SerialNumber: syz [ 353.260630][ T45] usb 9-1: config 0 descriptor?? [ 353.265921][T16819] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 353.305513][ T330] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 353.326469][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.456558][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.695485][ T330] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 353.716586][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.846556][ T330] usb 5-1: device descriptor read/8, error -71 [ 353.955579][ T330] usb usb5-port1: unable to enumerate USB device [ 354.140644][T16837] overlayfs: failed to clone lowerpath [ 354.146633][T16837] overlayfs: failed to clone lowerpath [ 354.152594][T16837] overlayfs: failed to clone lowerpath [ 354.158687][T16837] overlayfs: failed to clone lowerpath [ 354.164700][T16837] overlayfs: failed to clone lowerpath [ 354.170599][T16837] overlayfs: failed to clone lowerpath [ 354.176443][T16837] overlayfs: failed to clone lowerpath [ 354.182243][T16837] overlayfs: failed to clone lowerpath [ 354.188069][T16837] overlayfs: failed to clone lowerpath [ 354.193873][T16837] overlayfs: failed to clone lowerpath [ 354.199721][T16837] overlayfs: failed to clone lowerpath [ 354.205604][T16837] overlayfs: failed to clone lowerpath [ 354.211362][T16837] overlayfs: failed to clone lowerpath [ 354.217171][T16837] overlayfs: failed to clone lowerpath [ 354.222955][T16837] overlayfs: failed to clone lowerpath [ 354.228772][T16837] overlayfs: failed to clone lowerpath [ 354.234550][T16837] overlayfs: failed to clone lowerpath [ 354.240358][T16837] overlayfs: failed to clone lowerpath [ 354.246213][T16837] overlayfs: failed to clone lowerpath [ 354.251947][T16837] overlayfs: failed to clone lowerpath [ 354.257762][T16837] overlayfs: failed to clone lowerpath [ 354.263566][T16837] overlayfs: failed to clone lowerpath [ 354.269479][T16837] overlayfs: failed to clone lowerpath [ 354.275293][T16837] overlayfs: failed to clone lowerpath [ 354.281401][T16837] overlayfs: failed to clone lowerpath [ 354.287409][T16837] overlayfs: failed to clone lowerpath [ 354.297866][T16837] overlayfs: failed to clone lowerpath [ 354.303799][T16837] overlayfs: failed to clone lowerpath [ 354.309815][T16837] overlayfs: failed to clone lowerpath [ 354.315742][T16837] overlayfs: failed to clone lowerpath [ 354.317119][T16842] overlayfs: failed to clone upperpath [ 354.327040][T16837] overlayfs: failed to clone lowerpath [ 354.332998][T16837] overlayfs: failed to clone lowerpath [ 354.339246][T16837] overlayfs: failed to clone lowerpath [ 354.345375][T16837] overlayfs: failed to clone lowerpath [ 354.351397][T16837] overlayfs: failed to clone lowerpath [ 354.357501][T16837] overlayfs: failed to clone lowerpath [ 354.365669][ T45] ums-alauda 9-1:0.189: USB Mass Storage device detected [ 354.373119][T16837] overlayfs: failed to clone lowerpath [ 354.379080][T16837] overlayfs: failed to clone lowerpath [ 354.391335][T16837] overlayfs: failed to clone lowerpath [ 354.393244][ T45] scsi host1: usb-storage 9-1:0.189 [ 354.404391][T16837] overlayfs: failed to clone lowerpath [ 354.413252][ T45] usb 9-1: USB disconnect, device number 7 [ 354.419489][T16837] overlayfs: failed to clone lowerpath [ 354.426589][T16837] overlayfs: failed to clone lowerpath [ 354.433393][T16837] overlayfs: failed to clone lowerpath [ 354.441695][T16837] overlayfs: failed to clone lowerpath [ 354.450255][T16837] overlayfs: failed to clone lowerpath [ 354.459069][T16837] overlayfs: failed to clone lowerpath [ 354.471068][T16837] overlayfs: failed to clone lowerpath [ 354.477839][T16837] overlayfs: failed to clone lowerpath [ 354.483683][T16837] overlayfs: failed to clone lowerpath [ 354.493924][T16837] overlayfs: failed to clone lowerpath [ 354.500116][T16837] overlayfs: failed to clone lowerpath [ 354.508823][T16837] overlayfs: failed to clone lowerpath [ 354.514685][T16837] overlayfs: failed to clone lowerpath [ 354.521009][T16837] overlayfs: failed to clone lowerpath [ 354.528243][T16837] overlayfs: failed to clone lowerpath [ 354.534164][T16837] overlayfs: failed to clone lowerpath [ 354.540209][T16837] overlayfs: failed to clone lowerpath [ 354.546163][T16837] overlayfs: failed to clone lowerpath [ 354.552038][T16837] overlayfs: failed to clone lowerpath [ 354.559780][T16837] overlayfs: failed to clone lowerpath [ 354.565778][T16837] overlayfs: failed to clone lowerpath [ 354.571638][T16837] overlayfs: failed to clone lowerpath [ 354.579943][T16837] overlayfs: failed to clone lowerpath [ 354.587073][T16837] overlayfs: failed to clone lowerpath [ 354.598054][T16859] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 354.607167][T16837] overlayfs: failed to clone lowerpath [ 354.703202][T16872] tipc: Started in network mode [ 354.708233][T16872] tipc: Node identity ac14140f, cluster identity 4711 [ 354.715167][T16872] tipc: New replicast peer: 255.255.255.255 [ 354.718812][T16877] rust_binder: Write failure EFAULT in pid:442 [ 354.721518][T16872] tipc: Enabled bearer , priority 10 [ 354.734215][T16874] tipc: Enabling of bearer rejected, already enabled [ 354.985490][ T330] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 355.115501][ T330] usb 5-1: device descriptor read/64, error -71 [ 355.305733][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 355.305754][ T36] audit: type=1400 audit(7049589869.060:983): avc: denied { read write } for pid=16880 comm="syz.6.5393" name="rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 355.338134][ T36] audit: type=1400 audit(7049589869.060:984): avc: denied { open } for pid=16880 comm="syz.6.5393" path="/dev/rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 355.364269][ T36] audit: type=1400 audit(7049589869.070:985): avc: denied { ioctl } for pid=16880 comm="syz.6.5393" path="/dev/rnullb0" dev="tmpfs" ino=445 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 355.391870][ T330] usb 5-1: device descriptor read/64, error -71 [ 355.549256][T16891] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 355.549285][T16891] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:90 [ 355.574889][T16894] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:93 [ 355.635477][ T330] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 355.775504][ T330] usb 5-1: device descriptor read/64, error -71 [ 355.845557][ T45] tipc: Node number set to 2886997007 [ 355.921028][ T36] audit: type=1400 audit(7049589869.680:986): avc: denied { append } for pid=16911 comm="syz.6.5404" name="rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 355.946942][ T36] audit: type=1400 audit(7049589869.680:987): avc: denied { map } for pid=16911 comm="syz.6.5404" path="/dev/rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 356.030337][ T330] usb 5-1: device descriptor read/64, error -71 [ 356.145634][ T330] usb usb5-port1: attempt power cycle [ 356.196839][T16921] rust_binder: Error in use_page_slow: ESRCH [ 356.196860][T16921] rust_binder: use_range failure ESRCH [ 356.202955][T16921] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 356.208454][T16921] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 356.216482][T16921] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:109 [ 356.258616][T16924] overlayfs: failed to clone upperpath [ 356.330747][T16934] 9pnet_fd: Insufficient options for proto=fd [ 356.389731][T16945] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5417'. [ 356.495494][ T330] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 356.516525][ T330] usb 5-1: device descriptor read/8, error -71 [ 356.646736][ T330] usb 5-1: device descriptor read/8, error -71 [ 356.885515][ T330] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 356.906517][ T330] usb 5-1: device descriptor read/8, error -71 [ 357.040409][ T330] usb 5-1: device descriptor read/8, error -71 [ 357.155589][ T330] usb usb5-port1: unable to enumerate USB device [ 357.254584][T16971] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.5426'. [ 357.263868][T16971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5426'. [ 357.272783][T16971] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5426'. [ 357.928076][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.121684][T17023] overlayfs: failed to clone upperpath [ 358.247161][T17036] overlayfs: failed to clone upperpath [ 358.564652][ T36] audit: type=1326 audit(7049589872.310:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17059 comm="syz.7.5455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x0 [ 358.656507][T17070] netlink: 'syz.4.5458': attribute type 1 has an invalid length. [ 358.664508][T17070] netlink: 'syz.4.5458': attribute type 3 has an invalid length. [ 358.672272][T17070] netlink: 296 bytes leftover after parsing attributes in process `syz.4.5458'. [ 358.743341][T17077] netlink: 'syz.6.5460': attribute type 14 has an invalid length. [ 358.847891][T17088] 9pnet_fd: Insufficient options for proto=fd [ 358.912004][T17083] veth0_virt_wifi: entered allmulticast mode [ 359.407562][T17098] overlayfs: failed to clone upperpath [ 359.548832][T17074] veth0_virt_wifi: left allmulticast mode [ 359.784338][T17139] rust_binder: Write failure EFAULT in pid:474 [ 359.810756][T17141] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5481'. [ 359.980748][ T36] audit: type=1400 audit(7049589873.730:989): avc: granted { setsecparam } for pid=17152 comm="syz.4.5484" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 359.985761][T17153] veth0_to_batadv: entered allmulticast mode [ 360.172409][T17173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17173 comm=syz.6.5492 [ 360.184307][T17180] SELinux: policydb table sizes (8,9) do not match mine (8,7) [ 360.195119][T17180] SELinux: failed to load policy [ 360.226674][T17193] 9p filesystem being mounted at /154/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 360.284889][T17200] rust_binder: 121: no such ref 1 [ 360.378466][T17215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5506'. [ 360.417454][T17222] netlink: 680 bytes leftover after parsing attributes in process `syz.4.5508'. [ 360.447743][T17221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128 [ 360.519689][T17226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17226 comm=syz.4.5510 [ 360.541998][T17226] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5510'. [ 360.551300][T17226] /dev/rnullb0: Can't lookup blockdev [ 360.580226][T17231] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5511'. [ 360.595880][T17233] 9pnet_fd: Insufficient options for proto=fd [ 360.718634][T17239] /dev/rnullb0: Can't lookup blockdev [ 360.796113][T17244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:522 [ 360.875584][ T1036] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 361.037597][ T1036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.048888][ T1036] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.058448][ T411] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 361.064951][ T1036] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.082228][ T1036] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.091606][ T1036] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.100729][ T1036] usb 9-1: config 0 descriptor?? [ 361.215489][ T411] usb 5-1: Using ep0 maxpacket: 8 [ 361.221681][ T411] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 361.230255][ T411] usb 5-1: config 179 has no interface number 0 [ 361.236661][ T411] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 361.247762][ T411] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 361.259210][ T411] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.270387][ T411] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 361.281817][ T411] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 361.295295][ T411] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 361.304392][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.313802][T17247] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 361.316630][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.330788][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.338441][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.345960][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.353399][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.360914][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.368365][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.375854][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.383279][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.390781][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.398230][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.405685][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.413103][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.420565][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.428032][ T1036] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 361.435660][ T1036] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 361.444718][ T1036] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 361.524000][ T411] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input50 [ 361.566622][ T411] usb 9-1: USB disconnect, device number 8 [ 361.667151][T17288] netlink: 'syz.6.5531': attribute type 1 has an invalid length. [ 361.675017][T17288] netlink: 'syz.6.5531': attribute type 3 has an invalid length. [ 361.682929][T17288] __nla_validate_parse: 3 callbacks suppressed [ 361.682946][T17288] netlink: 296 bytes leftover after parsing attributes in process `syz.6.5531'. [ 361.713754][ T36] audit: type=1400 audit(7049589875.460:990): avc: denied { execute } for pid=17289 comm="syz.6.5532" path="/dev/rnullb0" dev="tmpfs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 361.858284][T17316] overlayfs: failed to clone upperpath [ 361.945308][ T10] usb 5-1: USB disconnect, device number 73 [ 361.945396][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 361.959959][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 362.026247][T17328] overlayfs: failed to clone upperpath [ 362.094860][T17332] 9p filesystem being mounted at /44/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 362.096270][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5545'. [ 362.128315][T17336] 9p filesystem being mounted at /276/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 362.191041][T17341] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 362.230656][T17346] rust_binder: Error while translating object. [ 362.230699][T17346] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 362.237217][T17346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:145 [ 362.495484][ T10] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 362.656666][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.666940][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 362.678023][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 362.687926][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.700792][ T10] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 362.709872][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.718586][ T10] usb 9-1: config 0 descriptor?? [ 362.724818][ T10] usb 9-1: MIDIStreaming interface descriptor not found [ 362.763367][T17361] overlayfs: failed to clone upperpath [ 362.765495][ T411] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 362.925572][ T411] usb 5-1: Using ep0 maxpacket: 32 [ 362.925933][T17349] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:147 [ 362.931842][ T45] usb 9-1: USB disconnect, device number 9 [ 362.947296][ T411] usb 5-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00 [ 362.956383][ T411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.965538][ T411] usb 5-1: config 0 descriptor?? [ 363.376348][ T411] wacom 0003:056A:00B2.0025: Unknown device_type for 'HID 056a:00b2'. Assuming pen. [ 363.386552][ T411] wacom 0003:056A:00B2.0025: hidraw0: USB HID v1.05 Device [HID 056a:00b2] on usb-dummy_hcd.4-1/input0 [ 363.398502][ T411] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B2.0025/input/input51 [ 363.452534][T17376] /dev/nbd8: Can't lookup blockdev [ 363.479317][T17378] cannot load conntrack support for proto=3 [ 363.488976][T17378] netlink: 'syz.8.5564': attribute type 4 has an invalid length. [ 363.499401][T17379] netlink: 'syz.8.5564': attribute type 4 has an invalid length. [ 363.580607][ T411] usb 5-1: USB disconnect, device number 74 [ 363.817198][T17394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 363.826544][T17394] incfs: Error accessing: ./file0. [ 363.831826][T17394] incfs: mount failed -20 [ 363.837848][ T36] audit: type=1326 audit(7049589877.590:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17393 comm="syz.8.5568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f491e78f6c9 code=0x0 [ 363.920881][T17408] overlay: Unknown parameter 'fowner<00000000000000000000' [ 363.940682][T17412] /dev/rnullb0: Can't lookup blockdev [ 363.989785][T17418] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5577'. [ 364.113728][T17427] rust_binder: Got transaction with invalid offset. [ 364.113823][T17427] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 364.120638][T17427] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531 [ 364.145930][T17429] rust_binder: Write failure EFAULT in pid:533 [ 364.416146][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 364.578242][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 364.587776][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.595955][ T9] usb 5-1: Product: syz [ 364.601150][ T9] usb 5-1: Manufacturer: syz [ 364.605772][ T9] usb 5-1: SerialNumber: syz [ 364.690493][T17442] 9pnet_fd: p9_fd_create_tcp (17442): problem binding to privport [ 364.815104][T17451] netlink: 'syz.8.5590': attribute type 4 has an invalid length. [ 364.822977][T17451] netlink: 3581 bytes leftover after parsing attributes in process `syz.8.5590'. [ 364.935077][T17451] __vm_enough_memory: pid: 17451, comm: syz.8.5590, bytes: 18014402804453376 not enough memory for the allocation [ 365.265762][T17464] netlink: 'syz.8.5595': attribute type 1 has an invalid length. [ 365.266360][T17465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.273571][T17465] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.273704][T17464] netlink: 'syz.8.5595': attribute type 3 has an invalid length. [ 365.294474][T17464] netlink: 296 bytes leftover after parsing attributes in process `syz.8.5595'. [ 365.349419][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5597'. [ 365.375810][T17474] /dev/rnullb0: Can't lookup blockdev [ 365.502668][T17502] binder: Unknown parameter 'x' [ 365.653567][T17516] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 365.653687][T17516] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false [ 366.273848][T17537] overlayfs: failed to clone upperpath [ 366.452423][T17564] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 366.452591][T17563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 366.459183][T17563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:221 [ 366.469097][T17563] rust_binder: 221: no such ref 0 [ 366.483308][T17563] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 366.490388][T17563] rust_binder: 221: no such ref 2 [ 366.495507][T17563] rust_binder: Failed to allocate buffer. len:1152, is_oneway:false [ 366.857841][T17592] overlayfs: failed to clone upperpath [ 366.963744][ T36] audit: type=1326 audit(7049589880.710:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 366.987361][ T36] audit: type=1326 audit(7049589880.710:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.011068][ T36] audit: type=1326 audit(7049589880.720:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.035556][ T36] audit: type=1326 audit(7049589880.720:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.059131][ T36] audit: type=1326 audit(7049589880.720:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.082462][ T36] audit: type=1326 audit(7049589880.720:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.106514][ T36] audit: type=1326 audit(7049589880.720:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.129926][ T36] audit: type=1326 audit(7049589880.720:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.153646][ T36] audit: type=1326 audit(7049589880.730:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.177231][ T36] audit: type=1326 audit(7049589880.730:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.7.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7ffc0000 [ 367.180713][T17608] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5646'. [ 367.209406][ T9] usb 5-1: USB disconnect, device number 75 [ 367.260427][T17613] rust_binder: 544: no such ref 0 [ 367.289748][T17620] overlayfs: failed to clone upperpath [ 367.334827][T17631] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 367.362328][T17631] rust_binder: 556: no such ref 0 [ 367.363080][T17638] overlayfs: failed to clone upperpath [ 367.367622][T17631] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 367.380350][T17631] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 367.389100][T17640] rust_binder: 556: no such ref 0 [ 367.389138][T17631] 9p: Unknown Cache mode or invalid value mbinderfs/binder1 [ 367.456563][T17653] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5661'. [ 367.490954][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5664'. [ 367.534257][T17683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=17683 comm=syz.8.5666 [ 367.624324][T17696] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=49 sclass=netlink_xfrm_socket pid=17696 comm=syz.8.5671 [ 367.759171][T17704] kvm: pic: non byte write [ 367.764385][T17704] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns [ 367.792765][T17709] overlayfs: failed to clone upperpath [ 368.534163][T17759] __vm_enough_memory: pid: 17759, comm: syz.4.5693, bytes: 18014402804453376 not enough memory for the allocation [ 368.632059][T17784] incfs: Backing dir is not set, filesystem can't be mounted. [ 368.639676][T17784] incfs: mount failed -2 [ 368.688909][T17785] fuse: Bad value for 'fd' [ 368.695862][T17785] overlayfs: failed to clone lowerpath [ 368.736173][ T565] Bluetooth: hci0: Frame reassembly failed (-84) [ 369.524974][T17807] 9pnet_fd: Insufficient options for proto=fd [ 369.604786][T17820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5716'. [ 369.616077][T17820] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 369.986773][T17832] 9p filesystem being mounted at /297/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 370.805480][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 370.805480][ T864] Bluetooth: hci0: command 0x1003 tx timeout [ 371.379007][T17868] kernel profiling enabled (shift: 63) [ 371.383843][T17869] 9pnet_fd: Insufficient options for proto=fd [ 371.384593][T17868] profiling shift: 63 too large [ 371.669347][ T31] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 371.774220][T17878] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.781403][T17878] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.788694][T17878] bridge_slave_0: entered allmulticast mode [ 371.795022][T17878] bridge_slave_0: entered promiscuous mode [ 371.801793][T17878] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.808964][T17878] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.816308][T17878] bridge_slave_1: entered allmulticast mode [ 371.822568][T17878] bridge_slave_1: entered promiscuous mode [ 371.829557][ T31] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 371.839991][ T31] usb 5-1: config 1 has no interface number 0 [ 371.846156][ T31] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 12352, setting to 64 [ 371.857471][ T31] usb 5-1: config 1 interface 105 has no altsetting 0 [ 371.869025][ T31] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 371.878153][ T31] usb 5-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 371.886957][ T31] usb 5-1: Product: syz [ 371.891179][ T31] usb 5-1: Manufacturer: syz [ 371.895982][ T31] usb 5-1: SerialNumber: syz [ 371.975055][ T3074] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.982186][ T3074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.992497][ T565] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.999619][ T565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.042040][T17878] veth0_vlan: entered promiscuous mode [ 372.058068][T17878] veth1_macvtap: entered promiscuous mode [ 372.088018][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 372.088037][ T36] audit: type=1400 audit(7049589885.840:1017): avc: denied { mounton } for pid=17878 comm="syz-executor" path="/root/syzkaller.DlmU4k/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=70465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 372.090203][T17909] 9p filesystem being mounted at /116/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 372.254847][T17931] 9pnet: Could not find request transport: f [ 372.311758][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 372.330715][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 372.349657][ T31] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 372.362854][ T31] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 42:6a:8e:77:44:f6 [ 372.388291][ T31] usb 5-1: USB disconnect, device number 76 [ 372.411447][ T31] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 372.455942][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 372.465505][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 372.474948][ T31] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 372.526128][T17951] 9pnet_fd: Insufficient options for proto=fd [ 372.532654][T17951] 9pnet_fd: Insufficient options for proto=fd [ 372.579268][T17959] Unsupported ieee802154 address type: 0 [ 372.585841][T17959] rust_binder: Error while translating object. [ 372.585889][T17959] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 372.592126][T17959] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:636 [ 372.602847][T17961] Unsupported ieee802154 address type: 0 [ 372.634906][T17964] rust_binder: Write failure EFAULT in pid:641 [ 372.651776][T17966] rust_binder: 643: no such ref 1 [ 372.711480][T17972] 9p filesystem being mounted at /124/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 372.836305][T17989] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5770'. [ 372.935478][ T561] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 373.097987][ T561] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 373.107254][ T561] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.115341][ T561] usb 5-1: Product: syz [ 373.119830][ T561] usb 5-1: Manufacturer: syz [ 373.124489][ T561] usb 5-1: SerialNumber: syz [ 373.131765][ T561] usb 5-1: config 0 descriptor?? [ 373.739193][T17969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.748104][T17969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.756774][T17969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 373.756882][T17969] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 373.763415][T17969] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 373.774425][ T561] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 373.793623][ T561] asix 5-1:0.0: probe with driver asix failed with error -71 [ 373.802414][ T561] usb 5-1: USB disconnect, device number 77 [ 373.838265][T18000] overlayfs: failed to clone upperpath [ 373.865931][ T36] audit: type=1326 audit(7049589887.620:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f491e78f6c9 code=0x7ffc0000 [ 373.889632][ T36] audit: type=1326 audit(7049589887.620:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f491e786567 code=0x7ffc0000 [ 373.913129][ T36] audit: type=1326 audit(7049589887.620:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f491e72b779 code=0x7ffc0000 [ 373.936661][ T36] audit: type=1326 audit(7049589887.620:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f491e786567 code=0x7ffc0000 [ 373.960189][ T36] audit: type=1326 audit(7049589887.620:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f491e72b779 code=0x7ffc0000 [ 373.983642][ T36] audit: type=1326 audit(7049589887.620:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f491e786567 code=0x7ffc0000 [ 374.007328][ T36] audit: type=1326 audit(7049589887.620:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f491e72b779 code=0x7ffc0000 [ 374.031042][ T36] audit: type=1326 audit(7049589887.620:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f491e786567 code=0x7ffc0000 [ 374.054646][ T36] audit: type=1326 audit(7049589887.620:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18001 comm="syz.8.5774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f491e72b779 code=0x7ffc0000 [ 374.184455][T18002] >: renamed from veth0_vlan (while UP) [ 374.212783][T18008] 9pnet_fd: Insufficient options for proto=fd [ 374.501582][T18023] __vm_enough_memory: pid: 18023, comm: syz.4.5781, bytes: 18014402804453376 not enough memory for the allocation [ 374.645865][T18033] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 374.645890][T18033] rust_binder: Read failure Err(EFAULT) in pid:666 [ 374.692471][T18035] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5785'. [ 374.750582][T18035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5785'. [ 375.015461][ T45] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 375.166530][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 28281, setting to 64 [ 375.183919][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 375.193293][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.205620][ T45] usb 5-1: Product: syz [ 375.209843][ T45] usb 5-1: Manufacturer: syz [ 375.224774][ T45] usb 5-1: SerialNumber: syz [ 375.230367][ T45] usb 5-1: config 0 descriptor?? [ 375.292516][T18044] 9pnet_fd: Insufficient options for proto=fd [ 375.309435][T18044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:14 [ 375.448964][ T45] usb 5-1: USB disconnect, device number 78 [ 376.011376][T18065] overlayfs: failed to clone upperpath [ 376.070361][T18067] rust_binder: Write failure EFAULT in pid:675 [ 376.575061][T18103] can: request_module (can-proto-0) failed. [ 376.666062][T18106] rust_binder: Write failure EINVAL in pid:699 [ 376.762121][T18109] 9p filesystem being mounted at /223/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 377.054134][T18123] fuse: Bad value for 'fd' [ 377.119703][T18115] SELinux: security_context_str_to_sid ( H H) failed with errno=-22 [ 377.263519][T18150] overlayfs: failed to clone upperpath [ 377.834356][T18169] sit0: entered promiscuous mode [ 377.840359][T18169] netlink: 'syz.8.5828': attribute type 1 has an invalid length. [ 377.848186][T18169] netlink: 1 bytes leftover after parsing attributes in process `syz.8.5828'. [ 378.051336][T18179] netlink: ' [ 378.051336][T18179]  !': attribute type 4 has an invalid length. [ 378.061700][T18179] netlink: 17 bytes leftover after parsing attributes in process ` [ 378.061700][T18179]  !'. [ 378.073693][T18179] netlink: ' [ 378.073693][T18179]  !': attribute type 1 has an invalid length. [ 378.083991][T18179] netlink: ' [ 378.083991][T18179]  !': attribute type 2 has an invalid length. [ 378.388847][T18186] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true [ 378.645702][ T45] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 378.723691][T18192] 9p filesystem being mounted at /324/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 378.776699][T18197] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 378.786789][ T36] kauditd_printk_skb: 32405 callbacks suppressed [ 378.786807][ T36] audit: type=1400 audit(7049589892.540:33432): avc: denied { relabelto } for pid=18196 comm="syz.7.5838" name="326" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 378.820034][ T36] audit: type=1400 audit(7049589892.540:33433): avc: denied { associate } for pid=18196 comm="syz.7.5838" name="326" dev="tmpfs" ino=1781 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 378.848935][ T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.859081][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.869525][ T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.878626][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.886707][ T45] usb 5-1: Product: syz [ 378.890898][ T45] usb 5-1: Manufacturer: syz [ 378.895522][ T45] usb 5-1: SerialNumber: syz [ 378.978782][T18206] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 378.978787][ T36] audit: type=1400 audit(7049589892.730:33434): avc: denied { relabelfrom } for pid=18205 comm="syz.8.5842" name="CAN_RAW" dev="sockfs" ino=70978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.012091][ T36] audit: type=1400 audit(7049589892.760:33435): avc: denied { relabelto } for pid=18205 comm="syz.8.5842" name="CAN_RAW" dev="sockfs" ino=70978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=can_socket permissive=1 trawcon="system_u:object_r:hwclock_exec_t:s0" [ 379.040324][ T36] audit: type=1400 audit(7049589892.760:33436): avc: denied { setattr } for pid=18205 comm="syz.8.5842" path="socket:[70977]" dev="sockfs" ino=70977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 379.043457][T18208] netlink: 'syz.8.5843': attribute type 6 has an invalid length. [ 379.087733][T18213] overlayfs: failed to resolve './file0': -2 [ 379.107742][T18188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.116448][T18188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.124771][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5834'. [ 379.182328][T18188] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 379.238713][ T45] usb 5-1: cannot find UAC_HEADER [ 379.253849][ T45] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 379.266153][ T45] usb 5-1: USB disconnect, device number 79 [ 379.275471][T17936] udevd[17936]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 379.319588][ T36] audit: type=1400 audit(7049589893.070:33437): avc: denied { write } for pid=12994 comm="syz-executor" name="326" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 379.360046][ T36] audit: type=1400 audit(7049589893.070:33438): avc: denied { remove_name } for pid=12994 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 379.365334][T18232] 9pnet_fd: Insufficient options for proto=fd [ 379.421505][ T36] audit: type=1400 audit(7049589893.070:33439): avc: denied { rmdir } for pid=12994 comm="syz-executor" name="326" dev="tmpfs" ino=1781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 379.484666][T18239] overlayfs: failed to clone upperpath [ 379.500945][T18241] overlayfs: failed to resolve './file0': -2 [ 379.632957][T18264] fuse: Unknown parameter 'subj_user' [ 379.640094][ T36] audit: type=1400 audit(7049589893.390:33440): avc: denied { write } for pid=18263 comm="syz.7.5860" name="file0" dev="tmpfs" ino=1822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 379.667442][ T36] audit: type=1400 audit(7049589893.390:33441): avc: denied { ioctl } for pid=18263 comm="syz.7.5860" path="/332/file0" dev="tmpfs" ino=1822 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 379.787519][T18275] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.787551][T18275] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 379.910373][T18287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=18287 comm=syz.4.5868 [ 379.947638][T18289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5869'. [ 380.031035][T18301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:747 [ 380.031366][T18303] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false [ 380.602677][T18317] overlayfs: failed to clone upperpath [ 380.651794][T18322] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5882'. [ 380.825499][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 380.976739][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 380.985143][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 380.994479][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 381.005267][ T10] usb 5-1: config 220 has no interface number 2 [ 381.011995][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 381.025646][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 381.032505][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 381.039474][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 381.047625][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.056741][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.064747][ T10] usb 5-1: Product: syz [ 381.068957][ T10] usb 5-1: Manufacturer: syz [ 381.073568][ T10] usb 5-1: SerialNumber: syz [ 381.279760][T18313] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 381.290027][T18313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 381.290067][T18313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:753 [ 381.300275][T18356] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 381.327712][ T10] usb 5-1: selecting invalid altsetting 0 [ 381.335595][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 381.342470][ T10] usb 5-1: No valid video chain found. [ 381.352846][ T10] usb 5-1: USB disconnect, device number 80 [ 381.855508][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 382.015495][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 382.021807][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 382.030051][ T10] usb 5-1: config 0 has no interface number 0 [ 382.036191][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 382.044224][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 382.053322][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.061348][ T10] usb 5-1: Product: syz [ 382.065615][ T10] usb 5-1: Manufacturer: syz [ 382.070247][ T10] usb 5-1: SerialNumber: syz [ 382.075916][ T10] usb 5-1: config 0 descriptor?? [ 382.081677][ T10] smsc75xx v1.0.0 [ 382.703424][T18409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28 [ 383.284545][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 383.305130][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 383.315523][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 383.326357][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 383.336131][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 383.346409][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 383.355903][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 383.365311][ T10] usb 5-1: USB disconnect, device number 81 [ 383.552055][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5925'. [ 383.584624][T18444] overlayfs: failed to clone upperpath [ 383.957926][T18456] /dev/nullb0: Can't lookup blockdev [ 384.083673][T18464] rust_binder: 18463 RLIMIT_NICE not set [ 384.083715][T18464] rust_binder: inc_ref_done called when no active inc_refs [ 384.089710][T18464] rust_binder: inc_ref_done called when no active inc_refs [ 384.125491][T18470] overlayfs: failed to clone upperpath [ 384.143530][T18472] input: syz0 as /devices/virtual/input/input54 [ 384.171306][T18472] kvm: kvm [18471]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 384.180556][T18472] kvm: kvm [18471]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 384.180606][T18478] netlink: 'syz.8.5939': attribute type 25 has an invalid length. [ 384.230545][T18483] netlink: 4432 bytes leftover after parsing attributes in process `syz.8.5941'. [ 384.278268][T18490] rust_binder: Write failure EFAULT in pid:787 [ 384.406373][T18505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:796 [ 384.665489][ T10] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 384.825916][ T10] usb 5-1: too many configurations: 19, using maximum allowed: 8 [ 384.834466][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.846241][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.857883][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.870071][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.881657][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.893427][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.905159][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.916809][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 384.927762][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.20 [ 384.936868][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.945675][ T10] usb 5-1: config 0 descriptor?? [ 384.950966][T18507] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 385.160886][T18521] netlink: 92 bytes leftover after parsing attributes in process `syz.8.5955'. [ 385.168837][ T10] hid-generic 0003:04F3:0755.0026: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 385.205357][ T10] usb 5-1: USB disconnect, device number 82 [ 385.782823][T18541] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 386.068813][T18557] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 386.076223][T18557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:806 [ 386.256152][T18571] rust_binder: 818: no such ref 0 [ 386.270692][T18571] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 386.277982][T18571] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 386.687089][T18576] /dev/rnullb0: Can't lookup blockdev [ 386.693161][T18578] /dev/rnullb0: Can't lookup blockdev [ 386.745771][T18584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.753035][T18584] IPv6: NLM_F_CREATE should be set when creating new route [ 386.760310][T18584] IPv6: NLM_F_CREATE should be set when creating new route [ 386.938239][T18590] rust_binder: Error in use_page_slow: ESRCH [ 386.938267][T18590] rust_binder: use_range failure ESRCH [ 386.944344][T18590] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 386.949921][T18590] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 386.958049][T18590] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:54 [ 387.011551][T18597] tipc: Started in network mode [ 387.025494][T18597] tipc: Node identity fe80000000000000000000000000001d, cluster identity 4711 [ 387.034533][T18597] tipc: Enabling of bearer rejected, failed to enable media [ 387.056222][T18602] /dev/rnullb0: Can't lookup blockdev [ 387.098770][T18598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.107635][T18598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.309878][T18609] overlayfs: failed to resolve './file0': -2 [ 387.317648][T18609] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5985'. [ 387.335493][ T45] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 387.485857][ T45] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 387.500566][ T45] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 387.509728][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.517771][ T45] usb 5-1: Product: syz [ 387.522082][ T45] usb 5-1: Manufacturer: syz [ 387.526773][ T45] usb 5-1: SerialNumber: syz [ 387.532166][ T45] usb 5-1: config 0 descriptor?? [ 387.538313][ T45] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 387.545198][ T45] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 387.553411][ T45] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 387.657326][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 387.657346][ T36] audit: type=1326 audit(7049589901.410:33448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18517 comm="syz.7.5954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3054d8f6c9 code=0x7fc00000 [ 387.676852][T18611] new mount options do not match the existing superblock, will be ignored [ 388.213730][T18635] overlayfs: failed to resolve './file1': -2 [ 388.358600][T18659] overlayfs: failed to resolve './file1': -2 [ 389.350999][T18696] 9pnet_fd: Insufficient options for proto=fd [ 389.371733][ T36] audit: type=1326 audit(7049589903.120:33449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18697 comm="syz.7.6017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3054d8f6c9 code=0x0 [ 389.392782][T18704] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6018'. [ 390.126782][ T45] usb 5-1: USB disconnect, device number 83 [ 390.339795][T18722] Invalid logical block size (14) [ 390.465477][ T45] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 390.616647][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.627632][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.637406][ T45] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 390.646548][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.655196][ T45] usb 5-1: config 0 descriptor?? [ 390.863269][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 390.869305][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 390.878690][ T45] usb 5-1: USB disconnect, device number 84 [ 391.205587][ T37] INFO: task syz.3.3968:12553 blocked for more than 122 seconds. [ 391.213440][ T37] Not tainted syzkaller #0 [ 391.218612][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.227470][ T37] task:syz.3.3968 state:D stack:0 pid:12553 tgid:12552 ppid:5610 flags:0x00004004 [ 391.238004][ T37] Call Trace: [ 391.241316][ T37] [ 391.244250][ T37] __schedule+0x1322/0x1df0 [ 391.248813][ T37] ? __sched_text_start+0x10/0x10 [ 391.253869][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 391.259502][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 391.265375][ T37] schedule+0xc6/0x240 [ 391.269588][ T37] super_lock+0x150/0x300 [ 391.273943][ T37] ? user_get_super+0x350/0x350 [ 391.278843][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 391.284324][ T37] ? __kasan_check_write+0x18/0x20 [ 391.289483][ T37] iterate_supers+0x8a/0x560 [ 391.294124][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 391.299380][ T37] ? security_quotactl+0x3b/0xf0 [ 391.304346][ T37] __se_sys_quotactl+0x308/0x7d0 [ 391.309390][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 391.314477][ T37] ? __kasan_check_write+0x18/0x20 [ 391.319718][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 391.325395][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 391.330312][ T37] x64_sys_call+0x2818/0x2ee0 [ 391.335000][ T37] do_syscall_64+0x58/0xf0 [ 391.339458][ T37] ? clear_bhb_loop+0x50/0xa0 [ 391.344168][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 391.350111][ T37] RIP: 0033:0x7f67ce98f6c9 [ 391.354546][ T37] RSP: 002b:00007f67cf845038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 391.363016][ T37] RAX: ffffffffffffffda RBX: 00007f67cebe5fa0 RCX: 00007f67ce98f6c9 [ 391.371044][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 391.379112][ T37] RBP: 00007f67cea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.387243][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.395353][ T37] R13: 00007f67cebe6038 R14: 00007f67cebe5fa0 R15: 00007ffc29129bb8 [ 391.403478][ T37] [ 391.406556][ T37] INFO: task syz.3.3968:12554 blocked for more than 123 seconds. [ 391.414339][ T37] Not tainted syzkaller #0 [ 391.419307][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.427998][ T37] task:syz.3.3968 state:D stack:0 pid:12554 tgid:12552 ppid:5610 flags:0x00004004 [ 391.438195][ T37] Call Trace: [ 391.441497][ T37] [ 391.444441][ T37] __schedule+0x1322/0x1df0 [ 391.448988][ T37] ? __sched_text_start+0x10/0x10 [ 391.454047][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 391.459548][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 391.465380][ T37] schedule+0xc6/0x240 [ 391.469504][ T37] super_lock+0x150/0x300 [ 391.473840][ T37] ? user_get_super+0x350/0x350 [ 391.478730][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 391.484216][ T37] ? __kasan_check_write+0x18/0x20 [ 391.489381][ T37] iterate_supers+0x8a/0x560 [ 391.493999][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 391.499226][ T37] ? security_quotactl+0x3b/0xf0 [ 391.504209][ T37] __se_sys_quotactl+0x308/0x7d0 [ 391.509194][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 391.514244][ T37] ? __kasan_check_write+0x18/0x20 [ 391.519393][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 391.525062][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 391.529962][ T37] x64_sys_call+0x2818/0x2ee0 [ 391.534675][ T37] do_syscall_64+0x58/0xf0 [ 391.539147][ T37] ? clear_bhb_loop+0x50/0xa0 [ 391.543852][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 391.549772][ T37] RIP: 0033:0x7f67ce98f6c9 [ 391.554205][ T37] RSP: 002b:00007f67cf824038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 391.562646][ T37] RAX: ffffffffffffffda RBX: 00007f67cebe6090 RCX: 00007f67ce98f6c9 [ 391.570664][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101 [ 391.578668][ T37] RBP: 00007f67cea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 391.586677][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.594654][ T37] R13: 00007f67cebe6128 R14: 00007f67cebe6090 R15: 00007ffc29129bb8 [ 391.602662][ T37] [ 391.605805][ T37] NMI backtrace for cpu 0 [ 391.605820][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 391.605846][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.605860][ T37] Call Trace: [ 391.605868][ T37] [ 391.605876][ T37] __dump_stack+0x21/0x30 [ 391.605911][ T37] dump_stack_lvl+0x10c/0x190 [ 391.605941][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 391.605974][ T37] dump_stack+0x19/0x20 [ 391.606002][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 391.606032][ T37] ? rcu_read_unlock_special+0xab/0x410 [ 391.606060][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 391.606084][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 391.606103][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.606124][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.606145][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 391.606178][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 391.606208][ T37] watchdog+0xd8f/0xed0 [ 391.606241][ T37] ? __cfi_watchdog+0x10/0x10 [ 391.606267][ T37] ? __kasan_check_read+0x15/0x20 [ 391.606292][ T37] ? __kthread_parkme+0x138/0x180 [ 391.606307][ T37] ? schedule+0xc6/0x240 [ 391.606342][ T37] kthread+0x2ca/0x370 [ 391.606366][ T37] ? __cfi_watchdog+0x10/0x10 [ 391.606394][ T37] ? __cfi_kthread+0x10/0x10 [ 391.606418][ T37] ret_from_fork+0x67/0xa0 [ 391.606441][ T37] ? __cfi_kthread+0x10/0x10 [ 391.606458][ T37] ret_from_fork_asm+0x1a/0x30 [ 391.606491][ T37] [ 391.606497][ T37] Sending NMI from CPU 0 to CPUs 1: [ 391.760094][ C1] NMI backtrace for cpu 1 [ 391.760110][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 391.760134][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.760146][ C1] RIP: 0010:update_rq_clock+0x2c9/0x7c0 [ 391.760179][ C1] Code: 4d 01 2e c7 84 24 80 00 00 00 00 00 00 00 0f 1f 44 00 00 83 bc 24 80 00 00 00 00 0f 85 ec 00 00 00 48 8b 44 24 48 80 3c 18 00 <4c> 8b 7c 24 50 74 08 4c 89 ff e8 08 a3 81 00 4d 8b 3f 49 83 c7 2c [ 391.760194][ C1] RSP: 0018:ffffc90000230d00 EFLAGS: 00000046 [ 391.760210][ C1] RAX: 1ffff1103edea0b1 RBX: dffffc0000000000 RCX: 0000000000000000 [ 391.760224][ C1] RDX: ffff8881f6f5075c RSI: dffffc0000000000 RDI: ffff8881f6f50750 [ 391.760237][ C1] RBP: ffffc90000230df0 R08: 0000000000000003 R09: 0000000000000004 [ 391.760254][ C1] R10: dffffc0000000000 R11: fffff520000461b0 R12: 1ffff1103edea0c1 [ 391.760267][ C1] R13: 000000000007434b R14: ffff8881f6f50608 R15: ffffc90000230d80 [ 391.760280][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 391.760296][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.760309][ C1] CR2: 000000110c32f0b0 CR3: 000000010fa40000 CR4: 00000000003526b0 [ 391.760327][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 391.760337][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 391.760349][ C1] Call Trace: [ 391.760356][ C1] [ 391.760364][ C1] ? wake_up_process+0x14/0x20 [ 391.760397][ C1] ? __cfi_update_rq_clock+0x10/0x10 [ 391.760423][ C1] _nohz_idle_balance+0x3bd/0x5a0 [ 391.760451][ C1] ? lapic_next_event+0x15/0x20 [ 391.760483][ C1] ? nohz_run_idle_balance+0x160/0x160 [ 391.760507][ C1] ? sched_clock+0x44/0x60 [ 391.760528][ C1] ? sched_clock_cpu+0x75/0x400 [ 391.760551][ C1] sched_balance_softirq+0x8a/0x170 [ 391.760568][ C1] handle_softirqs+0x1ab/0x630 [ 391.760584][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 391.760607][ C1] __irq_exit_rcu+0x48/0xc0 [ 391.760622][ C1] irq_exit_rcu+0xd/0x30 [ 391.760636][ C1] sysvec_call_function_single+0x7f/0x90 [ 391.760654][ C1] [ 391.760660][ C1] [ 391.760666][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 391.760687][ C1] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 391.760706][ C1] Code: cc cc cc b8 73 9c 63 20 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 e2 39 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> e9 d3 54 02 00 cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 391.760721][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 391.760735][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff858d70be [ 391.760748][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000698024 [ 391.760759][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6 [ 391.760773][ C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cdbe0 [ 391.760786][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87cb2128 [ 391.760799][ C1] ? ct_kernel_exit+0x7e/0xb0 [ 391.760819][ C1] default_idle+0x17/0x30 [ 391.760837][ C1] arch_cpu_idle+0xd/0x20 [ 391.760856][ C1] default_idle_call+0x3f/0x80 [ 391.760875][ C1] do_idle+0x1a0/0x470 [ 391.760892][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 391.760915][ C1] ? do_idle+0x44c/0x470 [ 391.760932][ C1] cpu_startup_entry+0x48/0x70 [ 391.760950][ C1] start_secondary+0x12e/0x140 [ 391.760971][ C1] common_startup_64+0x13b/0x157 [ 391.760997][ C1]