last executing test programs: 7m57.731923331s ago: executing program 32 (id=502): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m36.085499552s ago: executing program 33 (id=708): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8993, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008081, 0x0, 0x0) 7m15.117510599s ago: executing program 34 (id=941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x1, 0x0, 0x80, {0x6000, 0x8000000, 0x2}}, "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", "53a4c3702d9e74ffd9448559d4442ffd047fb3e5e81ebd61fe980dceb95e531d5566e8df4f2249124cb433e7e11021a0154d87c933bb735e9bae199234b8d00eb9d13c031925de8da0dd36710eaaec0ebc8ce98c181089dd177cb849d4fa7cc6ab80572af97d949239dffaa28fab8fcc9ba49a9477e08713cf9a520ff26f32f123f71774046487996160221eb430dab0150d979f957ca1aab6a65a8d1c5d1e4434307907a4b625e46404883d3b45e0b6076d1e2ab1a3f5cb76c6cd45ef4a2ec235a032f4ebb26cce91060ec21831bf68462030950ddfa011b663e6672d6c3eb4eac6ee54753dd8047ddfe8c07156cc775af50336126ef31dd7a601ba7d7932a9df5df3d96d50c8d48930b248de66074aba79202996f1ed18c881c26750c1ebb74e10d648be3fe581e7fb631bd854284b8ff35384d0e5ae4e9f963ffce67f3ce99a4abe4e48af5c4624e9f8b50d1738783f546c01b1f7a24996f07fe54a53c65066ba51bacd53085f652058e422fe210cf67306b4efac292743c96e61cb1c1b33000fd1aa4c46e943a4040a2bce2a327b9e67ae7b65ed05c2fa3dac08b6c903c2a551422e6782d1004dc17c7736b43465fa1fd77d2a13eaee5a2281381edea35e51379e72c8b8a62ecb8808d107923f7e94e21b10feb5f7b91121dd76aba8fba6d76a4bb67862a77d5ff7e6b5a34d33fdf241a17ca311299e7c0163b749e4efb8ffaecf5ea253a455f1de55880a8647cba55284f2c5c77b80b86cf1c8f7ec94693112976e40b31b4427904b65c0b4e0afc2d5dc7e24ef9f8da0a82db8fe141f0ad59f0782e143496dd68f69f65bebecb4cc9b413d0a21940e872fb7eaa7d3828b1d03c59aa026f77b8e1b4a532a7951cbcf199f3ad88bb507f872ef1242761c7672de5255d639bf75db77b05071edbd308188d80565c0a585f2bd973ee39e39ec4cda6ac7a0447ba6a030aebbb2a2d7bf4e8edd5b3ef15fe87c060b5171b27be0e6514ad1fabfa624cd54c410e3aeaa3e03eccb15534fcb75c91d98fb413a846276ab572074854f5819334092a7865811b36e09e133190d5e23b9840313c191682d6b494533c8f68da2043f9efc299af7251dd98001981e1a1bbe2344d238497d6bd74670a431950d87c72e0af9b755da8a62a8a44ee1c4d1a70ef778d2ff68ca75b02a51bbfdf31c6c88699e0ecb8c7a00d9d519f1d5602113d849e6708d95cc11bf75af8ed2f51d3f3a779551ae1e3c043e2d5b8b8e3fc0fd50839b1515319fdba6615e7abe0d9c035b8ec8666ac1ac69c663223b85885e0c1b7396cfaed7587a40d620b4c206ca6eea72a5561b177841b8dc1cbf438d12971f16f90e79f23d79a049abaf4751c509d5eb2d4f93bf7153ed063a7e23e6e9ed3cb6902dffe2aa4dd496185c3d93707ad449662674b523ca2426bc0e7a484996c63cf65baa48fd62f69d7164041a5b1fa030bbb748278c8805e974581db650b0243d5d7c9f88eb2fc490a138a8c7eaa224902ad712b7dd5f87e744259ceaa62f653ddab2f55d2c45d5182007f65e24c98ec39bc506fc5b0c162dcd63e59b701dcf3fb382fe838b29d037786c952a52ff6960546cb7593a1e96b23a760953ae8930026f81e518504f9bad6d0ea7d3675048b6444ff5c4f474b725864d194bad4530138cdd8675974b7148446585f25eee7512ce82bc62a3f3bc7de04148d18ef926d51a78d9a7347c06527c43b7be1b2de27340735f44c25719da2237644f4938f9e72da36b093150a643dd733d99c2609e8d277dea2f633226d9fcd801c2852d12122d045f6101fd35ecc7008a21e87a4581ef99336a978c4052dc63c3ed96622af1a26e32280eded2d6e333fe4284a57535210b26de8bd7fbdae3f1041e90083a1fd1645b742e88b6a85cca74f504da6ff7e5600b06119a4eb74c3a145481de4e92d75d576e29c6555b609659723e755d6d3cdc1cf6a9a9035139118bb0451122ad338db535c5116506576b0b16da75b83bfc26d7c0a2b2f840fb4ed3797b7548c18843b8bf3aa59e08e1834135b835aece225769017671218a3a19c6a60637375b825c17887463686b0cb2376610c870bb26c89616ab72aa62de0b8277bb6bb17d8856a5fe1f69b87754e1440152a4c6c14d98651773f7b3c87e62fb9ba5ded3355cd55542aaa308468ebedfcb316fa0b769491cd8a2bada51ac0a8e9cb908903e8f688c71e337d5ec0123b489f76b4d5841352da47cfbe40c54071ae830c15b056220edd12c606e1336208474996451a045461a7f3f52af73b6d712be8bca17665390a909690837c01b50546f74220f0a491f84e4f62fb0c9b47e4ca92363b2baeadb6508256e39a489e2d8755369a14d85454492954cf9aa2cf356b24640b392eef184030678ca1947f1adf8420939e3878f3f13cb50d26c6bc61fb1538775625120dbf52a46a99af7d04318a56f988cc73ab551a70b15a3e11506e5ef41cae03d0ce0e665471f187085dee9c80321f5cd7d1b9973d68e3fc56e2cf14682b8529fd40efd63e540f82d03545a8a1bf0a2b71838f8356621e988d7906dc45745ba2f42f05054a80d579563c9a9ca9b7bd1b2eead4ec8fc11f7236673fec1f0537afcac3f5ff4223fc17f92a0dc48cf4e82834c4f5004523a6aec38e309a2ab777fa5a4a71c7c743f777440f9fa38d04b06ff86fa4095aa5a1423df3eebd19e13b2787c4893c2c90593fdb3c1d14f9898d3c611baf0e021481d958e00697e8d8973b2e1ba721b4cf45674a1e85b8cb53798f3f9f8959d542f16535b452ed6919b1040dffe69da21ac3302c5385d27b1f5b13e6e17849e2d97e3ab83808929c71ccb197d6f7a630c116d0eed2ce15aa77cc60714cd83985e871b6744fe595f10c5aa38853d553e12df6fc207a4e527f551daaa08d5846f856f7a11f4a95a92c17672fecea1ad5c9ed12d9cbf3da03535136b83c6589cc3ff0aeb6218db84157b19042857edcdb8817466d86867c5a387b2a11362c4b357a8ebbd237b2e46ba1c04ab58d88ef9f40c99c829cb0314784362e0c8c17c49d657c6eb8102ddb202c90fdb6f8cf8de776b965c38d76835561ef754e7a620c48fa6d55a9b179bf293aa9efbf3b3e2e6514e347f3d190399cdcf2ecfb9cc60f9c5cabfab2e865f7425a41b8b299c02629ed5154a67a8cbb951e69be530c5c3f5988aeb61b24f6f5cc0d96be08da4763df2d8d221c584f9d3f3cb14a2105e1004c75cb63e60659f72210d396ab88b17d3fb6378cf0c143d416399f44c39789909a6117e4b35e1b9f86c9c57a2fb85fe00cb181f674a550c4fca2a4e3eadb31f48b87241b343a2a52ce1ff15517864adbee4e3177b704101a3883670e68243f060a446c03ad40559ae485bda5175215f289897a018c178d6b861abbebbc491d1c46016f6229fb938c86bbdfe9222b912d1f1e3ae5b4e4baca74d7e9bc1c91cdbc0db8962bac2abd62925aa99f401270515e7ce6855ec3bf4e4c1e12d21484304e7398bb920b72022a645454fd47360e8dc6e044134ec2781984571aa1b1123dc980cf9e93829a5939c5865981461785885be9e1ee8147321bef459ad32f14795565e3bf567b0c5ed77617c3ec683cbd12b50bcb32adf49c02c2859a62c64b121b5282a7acc2a524314d2ffaa342b38e2732a524480106e3fe0a9624e961012099d2e63fbcbeacbde3616e7f567bc1c2e8254c9df50a06f83ffd35ec61d6645e7461c6bfe7ec06f9a61b34de1a96bbf992f7283b6824179ea81a39935855a4aa6cfae0812b20c6bd3687ad81ebc8a653e2e62314392e2dd5a6dfd7e2981597b55d6d1fbcf11732acfc1226683c318b7ea93424ff03b222a7179b1d84bac56c6da5cbdd38c8cd11a82ae00c58d86fad73df9f4d354e3ecbb359beaa7261896f0aabf3434f0c337c9d98462554c1aa709015403a355221091dbeabb50b97fba823de72c93f8b900b065b4689255a1e5d42de6a592ba3381b45fbb47904bf893e3c597f51067e1b13fbde6d044e4cfc96613bf8b3d75e274f50c94fa6ee4daf9ef2d7afe16b4f7d07fca00b91542db3a874ffc750085c14fe39ed1012b8906c6cc20f6df0a0840b540e2a40d0dc97fa87e19e3aa943b0b92fdb0fefaa79a1b2204c93f40f1cfec64fa71571efb3b300a584a72e7ce6f5d0719ba9d92c817cb70aaadf6a0a3e5863487093c6d13d0a2e6063939b9e8773f5275cd58f8924c050609178eda0289c5417cd8b9d48c29c0ceb6ef73f45deb4d04a7d3e45abe815117cc9b9d0feaf5f39d2484a059e83a49d1a9c29ba3e2903e0ee3702703fd16163782cadcdd665d18cde6bb01945444bba7c09725b594e9e5f5f494269696b49de5eabb67715fb37254a45aa4009664bf597cc0339b3644540933d703577b5ff5f3a5ff1fb875759f88079265f9928246535275ec191cfec96bf13dbf5a67473423cfddad376b6835873c5aff4e40f10cd197f771b29335e789766d0bfeb43a2d30ca33410e2560655dd51183fda5dcc6530478f3928571df5ba3da1ab96c914c4314f579d5e3995928e64fd1848830d4e79f2d02c080f486f6b887dd9a343136e8cd4c55a5b76637aeedd781a6d93cb8c59f388a129085cb3e2cfe7c520a11830b74859d7b070ff8b9d8104dbc787b0bb656fafecf537cd7d0f792821f836a93c4277f939772f40469dea5938d86c02fcd21160d2ccda180423e5f6dd9df009b82821d54f84121ba0077a394ec231caf7422e4af3ac5429f2d8940454c26aefbb0033bf4678bfa7c1de3b83958a39507fff5f902c30e97863163f24db5b3123dc8903aa18011d5ff79d0a5a652af082c0951b58340f29ee9eae6f7a18f993885ef972eec811a75e727475c3e4fe2840494448abf7e8307d55b696a0bf1e27fd6b5817f7609467c415e26a4942ffc48ccd393106b795aa5e93dc7b751fc0d8ef6a008950c0cc8c0aac6d95d95eb63b4d9b401b0f7eae1c2f9345febd22940f45ebd8edf797be17deac5af831c778e3a1bdc56e66d6beb6517127476a316d443ebb5634c9ba2b5d9b05fda33ff96ef255099fd61387c0eb2467936369e25da8bc739e5aff00fb692e2fd1af834f9029fcf5271f511b2e48f2662d35bfd536d74347c10c0f39a2fb9e0c4b12a992d866f7fa4739fdfd7f8ca08608e0abb376fbacc8acad1d7682026646cec6486a1fa6fb9fd60b5ef3669f6caf30ef73b3c064ded17c5b827e3f464f28e458bf837f4599201afcaca23c66e7e1bfe4ab3b9afd877a993644334f4228fddedce639e7429d2292a6d9893080fe7339ce5fefb76306b9cb14048d6e2902c2697c60691ee1a608e977948a042b0492034e45b492691e4a4e742be1c4b4620cf45e2e97706074762368271feedc0d88e9fc93d8909da7e2fd2cfbc5105458dfd6245fb2b46a82b8be2650d1b963bd069e6b8ce34c7250e1de65207f0e246613450b7dc7762925067726fc1819581d10ffb974b3e0a86ab43d80f7119c2dd49fe72201875ce792a8a770e904616078ad75634491d971a34a724063651cbfc33e605219742f79e87eea0d7fea50aa169a3cc593d65a296f13c1ab4ae315724f64296a3e45e59b6c210fb75f2ed2594917bce8ad81fe6f009953ca432561e428c61d338a3574fb6d86ca3952751cb7a54f2cf3b8417b0b1f26363ccedaa680788b8d84337ad03a339bc5234813a74cc7a131e3956a0ca7309f7bd84fb62152ad7917c72333dce2a25292ea7c1422320a2893951d4cbf7dcbcc9e1ac8cb77b2f1ffe3234f939d1d6ae11403e4916"}) 4m1.602778135s ago: executing program 35 (id=5180): mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x110404, 0x0) 2m35.317634664s ago: executing program 1 (id=6721): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000002500), 0x8100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = fsopen(&(0x7f0000000300)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) read(r0, &(0x7f0000002600)=""/4096, 0x1000) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m35.278976875s ago: executing program 1 (id=6722): writev(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000009c0), 0x44580, 0x0) sendto$inet6(r0, &(0x7f0000000a00)="c3c63081938da2ce7d6fe661840fe6c864a6dd857c0d00c92f573e6556bf6843a41411dc23b13af2447f43f55358de6f5da8b7e13291fcfe383ab2b86b2c25ae228610a5b1bb51d8f28bc39a53200d44f8a6692407610a917ee1cb44b41ce4423481b769182e6b91ef17ba8d5f59538baac5fe53c1c96bfda959b0ed6df72ab43486a8d2", 0x84, 0x400, 0x0, 0x0) r1 = memfd_create(0x0, 0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000006c0)={0x6, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000940)=@attr_other={0x0, 0x4, 0xd, &(0x7f0000000900)=0x7ffffffffffffffd}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x390) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0xc, 0x4, 0x48}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xd, 0x9) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x1000, 0x4, 0x0, r5, 0xf}) ioprio_set$uid(0x3, 0x0, 0x0) r9 = memfd_create(&(0x7f0000000f80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%o\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aOg\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x01\x80\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3Wt`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\bx\xd2x\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb0\xbd\xd8,\xea\xeaT\xa6\x12\x1d\x1b6\xcf\xd3\x84-Z\xb4\xc1hh\x81*\x00\x00\x00\x00\x00\x00', 0x0) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000980)=0x80a0000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x11, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xd0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB]) preadv2(r1, &(0x7f0000000840)=[{&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000b80)=""/186, 0xba}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/164, 0xa4}, {&(0x7f0000000ac0)=""/154, 0x9a}, {&(0x7f0000000c40)=""/259, 0x103}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f0000000580)=""/35, 0x23}], 0xa, 0x100, 0x75, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_flowlabel\x00') r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)=0x20) ftruncate(r11, 0xf09) read$FUSE(r10, &(0x7f0000002400)={0x2020}, 0x2020) 2m35.201619976s ago: executing program 1 (id=6724): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000040)=0x63ad1e68, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4b0f, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 2m35.182544127s ago: executing program 1 (id=6726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m35.145740128s ago: executing program 1 (id=6728): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x10001}) 2m35.144755398s ago: executing program 1 (id=6730): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) copy_file_range(r1, &(0x7f0000000140)=0xfffffffffffffffe, r1, 0x0, 0x7f, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES8=r3], 0x138) r4 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) stat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m26.75352034s ago: executing program 0 (id=6819): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x1c) 2m26.74331365s ago: executing program 0 (id=6820): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x4000080000000000, 0x0) 2m26.692036901s ago: executing program 0 (id=6821): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x200000001494) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0xb9, 0x2, 0xfffffffffffffb1c, 0x3, 0xe8, 0x4}) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0x200000001494) (async) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0xb9, 0x2, 0xfffffffffffffb1c, 0x3, 0xe8, 0x4}) (async) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 2m26.691868781s ago: executing program 0 (id=6822): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085488, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xa000000, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$security_evm(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000200)=ANY=[], 0x2, 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200), &(0x7f0000000440)={'L+', 0x8}, 0x16, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000400)='ns\x00') setresgid(0xee00, 0xee01, 0x0) readlinkat(r5, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x128, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xa}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x16, 0x0, 0x0, @u32=0x3}]}]}, 0x28}], 0x1}, 0x0) getxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f00000002c0)=""/196, 0xc4) 2m26.668580642s ago: executing program 0 (id=6823): openat$dir(0xffffffffffffff9c, 0x0, 0x40801, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x40a82, 0x40) write$cgroup_pressure(r0, 0x0, 0x0) 2m26.624982742s ago: executing program 0 (id=6824): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r2 = socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000440)='(', 0x1}], 0x1) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) ioctl$LOOP_CLR_FD(r0, 0x4c01) timer_create(0x4, &(0x7f0000000040)={0x0, 0x3, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) shutdown(r2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000280)={{r5, r6+60000000}, {0x77359400}}, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001580)) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f0000001500)=""/115, 0x73}], 0x4, 0x4, 0x4) 2m26.593122333s ago: executing program 36 (id=6824): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r2 = socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000440)='(', 0x1}], 0x1) close(r2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) ioctl$LOOP_CLR_FD(r0, 0x4c01) timer_create(0x4, &(0x7f0000000040)={0x0, 0x3, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) shutdown(r2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000280)={{r5, r6+60000000}, {0x77359400}}, &(0x7f00000002c0)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001580)) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f0000001500)=""/115, 0x73}], 0x4, 0x4, 0x4) 2m20.125063488s ago: executing program 37 (id=6730): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) copy_file_range(r1, &(0x7f0000000140)=0xfffffffffffffffe, r1, 0x0, 0x7f, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES8=r3], 0x138) r4 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) stat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m14.012039777s ago: executing program 8 (id=6986): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x300, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) 2m14.011870066s ago: executing program 8 (id=6987): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r1 = add_key(0x0, 0x0, &(0x7f0000000080)="47caab47e582926f17aa32d516228fdafb0458717d16f5258f32b0ef73518850e08ece42d653c050cc9b00a4a89a5069974666839d9d7af3b63ea17510c86a9d3636d07a7df7327a69a631be249288e9e8b829d7def567faa3416b3e07babcc09f6f94fd49eb76793348da59", 0x6c, 0xfffffffffffffffb) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') r3 = gettid() ioprio_get$pid(0x3, r3) syz_open_procfs(r3, &(0x7f0000000000)='net/psched\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB="010027bd7000fbdbdf25080000001800048013000100"], 0x2c}}, 0x26008890) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.81772151s ago: executing program 8 (id=6990): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000400)="2fe19f", 0x3}], 0x1, 0x0, 0x0, 0x8011}}], 0x1, 0x20048000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000206010000000006"], 0x48}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m12.781123881s ago: executing program 8 (id=7001): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x36) 2m12.757835191s ago: executing program 8 (id=7003): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x302) r5 = dup(r4) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) r6 = socket$pptp(0x18, 0x1, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000028c0)={@private0, 0x0}, &(0x7f0000002900)=0x14) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000029c0)={'erspan0\x00', &(0x7f0000002940)={'erspan0\x00', 0x0, 0x0, 0x7, 0x200, 0x7fff, {{0xe, 0x4, 0x0, 0x7, 0x38, 0x68, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty, {[@noop, @generic={0x86, 0x11, "6cb2d0c139d1b31a96275d078f9e5b"}, @lsrr={0x83, 0xf, 0xe9, [@rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x31}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002a00)={'batadv_slave_0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000080)="398bf42a96528cbd0317fb8b6facd5ce4c9dc157f402484a3a1a799c0eee118f8beff999eb0564f94a9e57714f6d5567655024e0", 0x34}, {&(0x7f0000000100)="adef7b7c3adfc69caaa99556b8821493fa43851db6f55ee1b7c523ed3af149b9bf4d1a394f6d79186363f268bb785b70b7a982f34077dc5b48e67e897136aefc876bd13096438e612c3189064829dc16379be0e020c2f44545458f3d0a50aad8d2ffb964bec39d70da25cc120a18cbb279c56e5c74", 0x75}, {&(0x7f00000001c0)="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", 0x1000}], 0x3, &(0x7f0000001240)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0xc6, [@multicast2, @loopback]}]}}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010101, @multicast1}}}], 0x88}}, {{&(0x7f0000001300)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002800)=[{&(0x7f0000001340)="619402475732f36f41f4ef21964394ae725b1d50726068eb578630739c6dcd5d", 0x20}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f0000002380)="cda2ca02effd1f71bc67fc0a01e0924d23e407e6a077434f2007266972aecb9f019707e4e86311ddf31a2315332c829dfed9b5c492b69e01d4ba80b80bf055ea7665af5e20e726d1fe2e6e4ed8509947b740313ddc5135e00200a90a1885d49485108ef634172bfb1e1d6590c6ee3296009e3c79ed50e05fb8bf80234426d2985e223604aacf13a54c0e3d12c85a22e5cb8277a8a09c93ed0b9021", 0x9b}, {&(0x7f0000002440)="df496364bdca60a5fda3c1c54c3b8392c6d359f9596b0029c48e217fc310793dc1d5e5763de90afc081457e179871ed1aec9074be386e357f82c37bd33856a869b29f10587cf3246d67eb12d5c6f228e9c8391615e4469ff52f87c6751e0b9033aa9372296a25766a695cbe187a60ff242bbb362da05755c96a7aca1b4b5d8c8a5cae6b036fbb68a928a3ce496c2a8c296dab65d617b3c88b786", 0x9a}, {&(0x7f0000002500)="0d68f1b7c8bc7da6ec8c4369d2ed89e2774e7c7a97b3be17398b9112fa2fccc290d4cad5d04cfe1ab83d77368c18f1a557edcf0e8411a9bc4063bae5485562bfb02eca31f3c275d45b8be059aa4915a782d4b9974ddc040baf33c5116b84a5b7c9feaf10fb38656f9b7ff462", 0x6c}, {&(0x7f0000002580)="92dfc841075e6270bf06770816e617fa164fb3d66935a87ad959cf206523ff2a170a670b1143a5a6f2946a967049cec6691de6394cd038e2a642825cf30e1a3bfa4283830d", 0x45}, {&(0x7f0000002600)="e106e0995b3d5b6ae3fef50bfd802ba8eac31e25ebf3f0a7dc83607ca3de1469b04dd0559655d813149551bf4ee08d1057dc56bf1de7e58f89dfa9cc0e5068064251ef832e1cf30c5dbd493f48a653704ffe072d15d4528149afd9df72732654e9f63a5873991706784f02be18473a7ec00737ab02cf62", 0x77}, {&(0x7f0000002680)="706618f8b453e5ba3080c657933e5b1706b96f101c198ea5a47598d8627878f3dcb0682fcc773a671129e12e64c9cdb2732aa30db38c622b965a960f9af3f4901998f6c73b69a34bedb4d464e7e250aa649cd68d6ff066f41ea30335037d8add3de56d6ad4e5f4c6a9af801ee27f4d5b313aa37065dcab9d637e3cbc570bd83177081e1753af8b47de1649fe9f3b7183dd62cc7015734142abde3c1c03a7a56791bbde57798513ebece3b40c72b4b855c1215188555252bb4ad86aee37519a3266ff88", 0xc3}, {&(0x7f0000002780)="973a344fec54a41815f36545f60055efd67498c501e0494f7b7f4ce5c3da07b2b4b8fd5a25923ba36202b21488a996bcf7405ce0ee3e7b9eac87424479cba915843663cd52af7016e1af8c1631ffa9eb4f9b45c20a033c2a0103da9d93256d7d94ca2e5bfcc48fcf86e0e4937924ad7364", 0x71}], 0x9, &(0x7f0000002a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xce0}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x37, 0x3, 0x2, [{@multicast2, 0x8}, {@multicast1, 0x80}]}, @end, @rr={0x7, 0x17, 0x3e, [@multicast1, @multicast2, @remote, @remote, @private=0xa010101]}, @end, @cipso={0x86, 0x35, 0x1, [{0x0, 0x9, "1d96ab10526089"}, {0x2, 0x2}, {0x6, 0xf, "3e47db4ed110b60a690f9fa6a8"}, {0x7, 0xb, "92003c754cb8d53a0c"}, {0x5, 0xa, "b5579fef6fd74f3f"}]}, @end, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000001}, {@rand_addr=0x64010100, 0xca}, {@rand_addr=0x64010101, 0x8}, {@local, 0xbc}]}, @timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x3, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffff000}, {@broadcast, 0x4}, {@broadcast, 0x7}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @remote}}}], 0x1b8}}], 0x2, 0x800) 2m12.558217505s ago: executing program 8 (id=7006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4b0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.33330901s ago: executing program 38 (id=7006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4b0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000027c0), r1) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002800)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.161849953s ago: executing program 6 (id=7234): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x18, 0x28, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}]}, 0x18}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000006a"], 0x1c}], 0x1}, 0x4000080) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, 0x0) 1m57.133506283s ago: executing program 6 (id=7235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="8c9c"], 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)={0x2c, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x7, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x388, r2, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x60}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f3}, @NL80211_ATTR_FRAME={0x360, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xd}, @device_b, @broadcast, @random="2942867a1a11", {0x4, 0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x0, 0x1a, @default, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0xffffffff, 0x1, 0x0, 0x1dc, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x2, 0x10}}, [{0xdd, 0xfd, "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"}, {0xdd, 0xd1, "fd50a54731397bb7d4e31a6fa6b007343223d5d9f0bd163938b987b1a7081356f6aa61644528627b84d512ab012b74320351367ceeea3d346f2c7401a55ea88bf5fe58386c526a724beb3fdfd92c5a8e6a72993c47b6ad7d84c8c833e168fa654fd2d2a7dbbefbcafd8bd60cff0cbcda9d397d1661bee917d5d499012c616d9ad254013424fb75908d55350f08847d200fb56664190853599a244ebc869da07bdfecb7a55bdd49db62972ec01473b8249dc7b4d11937403037818d9318538263c054a6d99e836ab477509b5b608ec02354"}, {0xdd, 0x2e, "00c15f934a3a992bff634f1cf0d6de5a8022ced1be9fbb1b800ffb3f610c1e14a0e9425d7c75c1afd78d0418f3a0"}, {0xdd, 0x3b, "454ea256a941d775dab75db474a38e0e5d7e9df96aa6db915d0778f4b76ff4225bcc7bcbad128209abd8f7617b37deaa6620166d1b3845e9f838fe"}, {0xdd, 0xdd, "18ef2ee1c55d89b01b6d419a6eedaa5c08801fcc2a7bc7d2c97ce3fbfc2b8ee6e6f34f3e5e50ca7fcd25cf3f2d0a70b705762a9cf147924154e57455050252b38f10cd291089ea05e8c9ec6eb83711e8e877ebd4cf5c9fd9d2f6f3a4a8486c466d904d89ec0f58090ce49e34eab0e109d210aac6efc48d13c05239996e524dfdd223deabf3fb64a3bfa58c3161f1161739f13bcf7f237be18ea6e8eeae55dd546acf12e31042d07b8432ce3181fb78d96c6e368236fc186beb352e14683d2fd65709abc11a31380065929fd215e5275e104630644c6784ee04251d3138"}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4040001}, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) chmod(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_buf(r5, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) mkdir(&(0x7f0000000040)='./bus\x00', 0x34) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000300)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m57.058525625s ago: executing program 6 (id=7236): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f00000000c0)={0x0, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(r1, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x3) sendmsg$inet(r4, 0x0, 0x810) dup2(r4, r3) signalfd(r0, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x37}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/24, 0x18, 0x0, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2b}}, &(0x7f0000000380)={0x0, 0x20, 0x48}}, 0x40}], 0x0, 0x0, 0x0}) 1m57.010840625s ago: executing program 6 (id=7237): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)={0x897, 0x0, [{0x0, 0x8, 0x6, 0x1, 0x6, 0x9ecb, 0x8}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r2, 0x1c0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x90000, 0x0) unshare(0x22020600) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 1m56.982633206s ago: executing program 6 (id=7238): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000018c0)=""/197, 0xc5}, {&(0x7f0000000180)=""/21, 0x15}, {&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x6}, 0xffffffff}, {{0x0, 0xc3, 0x0}, 0x8}], 0x4, 0x2100, 0x0) 1m56.611900683s ago: executing program 6 (id=7253): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0xb, 0xf4, 0x40000}, 0x20) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x1) 1m56.594444674s ago: executing program 39 (id=7253): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0xb, 0xf4, 0x40000}, 0x20) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000440)=0x1) 27.411248979s ago: executing program 4 (id=9134): syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0xffbeff9b, 0x4) flock(r2, 0x1) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000001000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="11000000000000000000000001000000100000000000000070000000000000000000000007000000440c11f0"], 0x88}}], 0x1, 0x80) fchdir(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0x200) ioctl$MON_IOCQ_RING_SIZE(r5, 0x9205) getdents(0xffffffffffffffff, &(0x7f0000000480)=""/200, 0xdb) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000740)='smaps_rollup\x00') r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905"], 0x0) syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 25.968721687s ago: executing program 7 (id=9159): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5411, 0x0) readv(r0, &(0x7f0000001e80)=[{&(0x7f00000019c0)=""/115, 0x73}, {&(0x7f0000001a40)=""/228, 0xe4}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/255, 0xff}, {&(0x7f0000001c40)=""/106, 0x6a}, {&(0x7f0000001cc0)=""/228, 0xe4}, {&(0x7f0000001dc0)=""/190, 0xbe}], 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x5, @loopback, 0x7}, 0x1c) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f0000000600)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000edff00039815fa2c1ec28656aaa7a70a4b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d6f0f350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB="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", @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRES8=r2]) setuid(0xee00) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4c24, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x187, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2ff, 0x45, 0xd6}) recvmmsg(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000340)=""/171, 0xab}], 0x5, &(0x7f0000001700)=""/192, 0xc0}, 0xb}, {{&(0x7f00000017c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001840)=""/136, 0x88}, 0x8}], 0x2, 0x0, &(0x7f0000001980)) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f00000004c0)=0x80000000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="6d61783d300f0000000000000030303030303030303130303030303300"]) 25.938215518s ago: executing program 7 (id=9160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) 25.884185909s ago: executing program 7 (id=9161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00000000010104000000fffc0000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000100000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400ff"], 0xac}}, 0x0) 25.883825919s ago: executing program 7 (id=9162): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x400800, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x400800, 0x0) write$tcp_mem(r1, &(0x7f00000007c0)={0xfffffffffffffffc, 0x20, 0x3, 0x20, 0xa}, 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181100, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x181100, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x800001, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000340)={[0xa, 0x800000000000000, 0x10, 0x1, 0xf4, 0x1, 0x0, 0x3, 0x7f, 0x4000000000000004, 0x8000, 0x7ff, 0x8396, 0x200, 0x80, 0xf], 0x80a0000, 0xd7c6}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x6000, 0x6, 0xf69, 0xfffffffb, 0x0, [{0x69, 0xb, 0x0, '\x00', 0x57}, {0x35, 0x3, 0xfb, '\x00', 0x5}, {0x1, 0x7, 0x3, '\x00', 0x3}, {0xdd, 0x8, 0x1, '\x00', 0x7}, {0x5, 0x6, 0x0, '\x00', 0x4}, {0x10, 0x4f, 0x1, '\x00', 0x3}, {0x0, 0x31, 0xff}, {0x40, 0xff, 0x0, '\x00', 0x10}, {0x9, 0x2, 0x82, '\x00', 0x7}, {0x2, 0x0, 0x6, '\x00', 0x5}, {0xac, 0x5, 0x9, '\x00', 0x9}, {0x0, 0x0, 0x8, '\x00', 0xc5}, {0x8, 0x7f, 0x4, '\x00', 0xfe}, {0x6, 0x2, 0xc, '\x00', 0xff}, {0x2, 0x6, 0x2, '\x00', 0xbf}, {0x1, 0x2, 0x1, '\x00', 0x7}, {0x6, 0x5, 0x2}, {0x9, 0x8f, 0x2, '\x00', 0x3}, {0x29, 0x8, 0xf7, '\x00', 0x1}, {0x3, 0x1, 0x2, '\x00', 0x8}, {0x7, 0x5, 0x50, '\x00', 0x7f}, {0x8, 0x1, 0x2, '\x00', 0x20}, {0x4, 0x2, 0xb0, '\x00', 0x8}, {0x40, 0x8, 0x9, '\x00', 0x2}]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) (async) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='gid_map\x00') read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0xffffff85) close_range(r0, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000}) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r8, 0x4010ae68, &(0x7f0000000180)={0x10000, 0x8000, 0x2000000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0x9}) (async) fcntl$lock(r9, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0x9}) r10 = getpid() ptrace$peeksig(0x4209, r10, &(0x7f0000000140)={0xe, 0x0, 0x3}, &(0x7f0000000600)=[{}, {}, {}]) fcntl$lock(r9, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) (async) fcntl$lock(r9, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x7fff, 0x9}) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f0000000200)) 23.700944581s ago: executing program 4 (id=9177): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) munmap(&(0x7f0000ff0000/0xf000)=nil, 0xf000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0x0, 0x8, 0x0, 0x100, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 23.685754241s ago: executing program 4 (id=9180): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149004006040800", 0x58}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23.608099543s ago: executing program 4 (id=9181): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000400d0000000500070012000000050018007f00000005001a0005000000050017000000000006000a00ffff0000050019000400e7ff05001b00080000000200080000000000614f07a809cedef1c08069a0e2b904458e309d4ee287bacd54ef9a54f4f475d7bf"], 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000440000/0x4000)=nil, 0x4000, 0x1000000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40881) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d0f, &(0x7f0000000000)={0x1, 0xc}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 23.603640753s ago: executing program 4 (id=9184): timerfd_create(0x0, 0x80800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x29a}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000180)={0x0, 'veth1_virt_wifi\x00', {0x3}, 0x3ff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 23.540917715s ago: executing program 7 (id=9189): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000005c0)=0x49f, 0x4) ftruncate(r1, 0xc17a) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r1, 0x2000, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540), 0x480, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000580)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}]}, 0x2c}}, 0x40) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r4, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xb}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20028040}, 0x840) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000000)=""/249, 0xf9}, {&(0x7f0000000140)=""/72, 0x48}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4002000) 23.540028075s ago: executing program 4 (id=9190): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="09268a", 0x3, 0x4000080, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="5d076d5cab024f3afc438a7771d63199d46fc19a4d357817c446222987440998c8e7d76ee4c086cb", 0x28}, {&(0x7f0000000180)="20ac6b18c792688cdb9708ad037e5d4a8fad01735cfa0b0103420a96201a31a0bd08a96b920d8d291a34d1124ff0286361589117db6d42bbfe57391f3d97a5d001fb4cfe08acff4338891b65eecba703e05fb193117583ac76dedc4623765ad5cae30ed18a947d4f0ceecfe06d44c8d8f1e8de80731707da6e84ed33aceb", 0x7e}, {&(0x7f00000000c0)="a29a", 0x2}, {&(0x7f0000000200)="064fdee719262d837b933b49a106cba60c5b25f1c2fbecca0e324bf4001134e0d376729eb03d597a01392ec7f0725809137b1c3c2bf45836d748ab6bbebb677d6e", 0x41}, {&(0x7f0000000580)="6314f157e5376fac1c4f959fed0b790cbf83003cd8c04dbf236f1314b49782a551fc071c9103016283743c00ac363157d8d1068fcbf00e4b541efd65d649f0b82ff0ac5b444646028f2775d69983e182cb2e5235b1987d8d841584d5ee1c55c85d5515a63c2a23ff5b19682e03b9134507e2c219a2750bed1bf8b12ab1ade7260abac98bb237795f110bc92a07ddab66540b67e57547d906f362c6e7890e1ab5d7566a6705e063538f3de3a2b361713adff7cf8edca93daf41d49b25b3ce72fdcb919fc1597996abec518e55feb08e9182f071f1f7418482fd754d194bc617c4c33b9af6bae669c26073dd8f415d50658438794a6196677f3a", 0xf9}], 0x5, 0x2) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000007d40)={{0x12, 0x1, 0x310, 0x6c, 0xee, 0x5, 0x8, 0xa40d, 0x548e, 0x5bb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x6, 0x90, 0x7, [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0x8, 0x1, 0x50, 0xfc, [], [{{0x9, 0x5, 0xa, 0x0, 0x440, 0xb, 0x8, 0x6}}]}}]}}]}}, &(0x7f00000084c0)={0x0, 0x0, 0x8f, &(0x7f0000007fc0)={0x5, 0xf, 0x8f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0xd, 0xd424}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7}, @generic={0x7c, 0x10, 0xa, "abdbbb180671fd4da86b0b8a0649238530e23123d7eb42fd51187b8bdffcf6ab341f0c5b5a28613c894f2eab90d3e0fcfccd655e6feb5e9ad6ee72dbaee5c8a05c574a4d168a85b8e853c8ab33be6daff921753f629e50b181e68d37c602151e14a05496183288614d6a5f084b72e1528c00d795a4afa62020"}]}}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23.504406345s ago: executing program 40 (id=9190): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000300)="09268a", 0x3, 0x4000080, 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) (async) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000080)="5d076d5cab024f3afc438a7771d63199d46fc19a4d357817c446222987440998c8e7d76ee4c086cb", 0x28}, {&(0x7f0000000180)="20ac6b18c792688cdb9708ad037e5d4a8fad01735cfa0b0103420a96201a31a0bd08a96b920d8d291a34d1124ff0286361589117db6d42bbfe57391f3d97a5d001fb4cfe08acff4338891b65eecba703e05fb193117583ac76dedc4623765ad5cae30ed18a947d4f0ceecfe06d44c8d8f1e8de80731707da6e84ed33aceb", 0x7e}, {&(0x7f00000000c0)="a29a", 0x2}, {&(0x7f0000000200)="064fdee719262d837b933b49a106cba60c5b25f1c2fbecca0e324bf4001134e0d376729eb03d597a01392ec7f0725809137b1c3c2bf45836d748ab6bbebb677d6e", 0x41}, {&(0x7f0000000580)="6314f157e5376fac1c4f959fed0b790cbf83003cd8c04dbf236f1314b49782a551fc071c9103016283743c00ac363157d8d1068fcbf00e4b541efd65d649f0b82ff0ac5b444646028f2775d69983e182cb2e5235b1987d8d841584d5ee1c55c85d5515a63c2a23ff5b19682e03b9134507e2c219a2750bed1bf8b12ab1ade7260abac98bb237795f110bc92a07ddab66540b67e57547d906f362c6e7890e1ab5d7566a6705e063538f3de3a2b361713adff7cf8edca93daf41d49b25b3ce72fdcb919fc1597996abec518e55feb08e9182f071f1f7418482fd754d194bc617c4c33b9af6bae669c26073dd8f415d50658438794a6196677f3a", 0xf9}], 0x5, 0x2) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, &(0x7f0000007d40)={{0x12, 0x1, 0x310, 0x6c, 0xee, 0x5, 0x8, 0xa40d, 0x548e, 0x5bb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x6, 0x90, 0x7, [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0x8, 0x1, 0x50, 0xfc, [], [{{0x9, 0x5, 0xa, 0x0, 0x440, 0xb, 0x8, 0x6}}]}}]}}]}}, &(0x7f00000084c0)={0x0, 0x0, 0x8f, &(0x7f0000007fc0)={0x5, 0xf, 0x8f, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0xd, 0xd424}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7}, @generic={0x7c, 0x10, 0xa, "abdbbb180671fd4da86b0b8a0649238530e23123d7eb42fd51187b8bdffcf6ab341f0c5b5a28613c894f2eab90d3e0fcfccd655e6feb5e9ad6ee72dbaee5c8a05c574a4d168a85b8e853c8ab33be6daff921753f629e50b181e68d37c602151e14a05496183288614d6a5f084b72e1528c00d795a4afa62020"}]}}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000900)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23.460036646s ago: executing program 7 (id=9192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) sync() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 8.948037167s ago: executing program 3 (id=9336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r6, 0x70505) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r6) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x10001) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x2000) mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r7, 0xd3c59000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000100)=0xbbeb) ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) syz_usb_disconnect(0xffffffffffffffff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r9, 0x4188aec6, &(0x7f0000003e00)={0x2000000, [{0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x400, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x672, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.184574182s ago: executing program 3 (id=9339): r0 = socket(0x1e, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000400000014003800ff010000000000000000000000000001150002"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_xfrm(r2, 0x0, 0x810) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000480)="49f9d9291c50d5ba88fd48adfab3897844b87c7fb2ad425a1b015f065f9e6d9b6a185edac7853afc265e9a0d71be2ebe50c3e3ee2f21947c31f3af0ce54922cd65882c97901344b1caf107620f44721e8d51f54e683b5ea1ffbb2f50ae4d729c68915dfb23bab121") syz_usb_control_io$hid(r6, &(0x7f0000000300)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="400e97000000970c86c80f89ca3da2380dee57e060a254018b2a44dce36ace0a2630ae63570e5fa8e2d91732ab3dd4d4c1f43f3cdc1d09a115baeb2dadc1ce205cad4f264fae48d32c368d1e0541058532d605b67d9daa338a7fb6b9e86adb9e25732271d9abbdf0321c877dde71471a8ab712cc6bd5303bf0a5d30ca994c9e32eede730070c37b27cb9154eee40331402658a13b957bd5aa9225d4e74298a267906a81f8ebd13a5ad"], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x6f3}}}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x40844) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2}, {0x4eb, 0x109003ff}, 0x9, 0x6}) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="01002cbd7000fbd9df2501000000100002800c000180080001000000000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 8.177315611s ago: executing program 41 (id=9192): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000200)={[{@inode32}]}) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0) sync() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"}) 6.408893086s ago: executing program 3 (id=9360): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 6.369674217s ago: executing program 3 (id=9362): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001e000503000000000000000000000000080000ff", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x4a841}, 0x0) 6.272138308s ago: executing program 3 (id=9363): r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000005440)=""/4097, 0x1001}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000000500)=""/69, 0x45}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f00000005c0)=""/282, 0x11a}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000400)=""/45, 0x2d}], 0xa}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0) 6.271928388s ago: executing program 3 (id=9364): r0 = socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) recvmmsg$unix(r0, &(0x7f00000058c0), 0x0, 0x22, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000210828bd700a5aa6602d55e92e5100fddbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x40000) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6e74657874c0"]) 2.215297937s ago: executing program 5 (id=9414): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0xd}], 0x2, 0x2, 0x0) 2.169368118s ago: executing program 5 (id=9416): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x18d802, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x1000007fd) 1.747551916s ago: executing program 2 (id=9426): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) 1.327375944s ago: executing program 5 (id=9427): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x0, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 1.327092044s ago: executing program 5 (id=9428): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0xa, 0x8, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0d680f985881a7beda9d69098c8b534464c516bdd8a0f77f7db3e3d1e9ca200", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffff7fffffce8, 0xe]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r2, 0x16, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0xa, 0x200, 0x0, 0x3}, 0x10) 1.200156146s ago: executing program 5 (id=9429): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0140, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000001c0)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0xc2802, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x1, &(0x7f0000001640)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000280)='a', 0x1, 0x5}]) 1.06802626s ago: executing program 5 (id=9430): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'bridge_slave_0\x00', &(0x7f0000000500)=@ethtool_link_settings={0x4c, 0x1, 0x3, 0x6, 0x73, 0x8, 0x2, 0x1, 0x9, 0x4, [0xffffffff, 0x7fff, 0xa1f, 0x7, 0x7, 0x10, 0xe9, 0xffffffff]}}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x7, 0x0, 0x20040001, 0x0, 0xfffffffe}}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000280)={0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="000e0baf96ccf9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/10, 0xa}, {0x0}], 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000140)=0x963) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000000004058048700000000000001090224000100002036090400b9594c000000092100080501220500090581030000070900"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205000000a38106eeae406b87022276c66815b9d616d82cda81000eefbd106c54132e4bd63bd72dd4897707c1d2d678851e38c7a7a64a4ea63945f3ab04000000468e27b6ee5402bf449ad0c1a226728ff14c1ff5002ed20f5c4886953c46f3795cc33b5ef7a0b518a816134d1011b78faecedac846d03805d95dc074025779fe7835b634d69dfb3e74358b67cc2b8f7619007e92a6fddb5ea6c8c2e90f56e6e26f70000000a526c6324efd25902754b9a6ceeec94c51082ac37f96933cbcb1da16ebf0de6d7d936749fc60140f358a2fb1074ea236cd7432c58155f6512773f08d34f23c527141affe496d0517d6ec81e98cefb5e5ed75561b4c"], 0x0}, 0x0) 896.118612ms ago: executing program 2 (id=9431): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x3b) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xde, 0x8, 0xc4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000300)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb9", 0xa5}, {&(0x7f0000000500)="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", 0x32d}, {&(0x7f0000000180)="edb294be", 0x4}], 0x3}}, {{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002100)=[{&(0x7f00000003c0)="e93fa38ec4c6757c02a61e51fbc2a5602bfd80edcb2f64cbc7e20804637740b37deb811e453d4a803d83aab9334fa2dd44e35635df12a91504a323977965cf9c07c51bb3071208560f3eb7e50a9245a5c31eb6faf4f8c7c412398c690bdcb9f54a479243310e54b2db6d8e989c076b14f1fa8e4ddb5f8d2e891cb8", 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000440)="f94ee0b77eb5cf5dbdd91b467e817b0a6530fa6c02ef21bc0d4586c4973a6c2338ca2c3faa33cd91064731c89a99d2d312d7f29bbad173d0e70ec3485fa95291", 0x40}, {&(0x7f0000000840)="1f98ceec00b72d8c6da60462c5d7fa74a235398821e2fc25f731178f433d6006e08284c707b2f52ec2e58258e38cdff80dad114deb581fbb62766f5ce7a3b05d1dcfed4bb40c2410380d8b19e1a469d10551768975e4", 0x56}, {&(0x7f00000008c0)="710d2c48015f178b1ce3aed79357743d8b4ff295d4c7b21705f50df4e4ab57e14e7841db296c7d7f72f0d1d9788d89a2cc8df26fb65fe3fddf6eaa8fc4770f06cfe22cd2dd28436311a3dbcc7a7ca1ce5b10eaa20798554ae507c2d31cd2f1edebaf79c34cb70cb3", 0x68}, {&(0x7f0000000940)="21989d494f32f39506c31f9c76349ecaaa3d7c022bd4f3fdf4887a10ff51eb488e96d6bb802cf7f699e435f5025796986e115372d1a80ff7ca8a3db32a1cbb8490f334fa9564f84f2816a46378797a0706d7eefc294bf12fdf241a9672f2d71ec9be380e5aea87a5b346fd5ac274a7a003586680248c259b2585db24d582335ae40831b48274ce3963ef3ac7c3d4f0ead0138ee5be6049003e80c540aedb79bed015963ed49d0d9773d1981a8c6bd0596c1ea696acdc98476fc09cac2b7ddf2dd97e90bd90cd678d348c6c34", 0xcc}, {&(0x7f0000000480)="794e652986", 0x5}, {&(0x7f0000000a40)="cd96fe7a255879e114c8e0bf3ab466fae0acbfa858a72fd886e3d0ddf4e182d9fb6bc04dd5a0ca238a6d8c502194cb2f93d0f92cc9b5c89564f0b9120219eb39b9b0b9cb32", 0x45}, {0x0}], 0x7}}], 0x4, 0x4) 880.455023ms ago: executing program 2 (id=9432): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdir(&(0x7f0000000200)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46100) close(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x48408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000200)=""/210, &(0x7f0000000180)=0xd2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r2, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x40000142, 0x0, 0xfffffffffffffed0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9cc80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x4}, {r4, 0x182}], 0x2, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0xeeee0000, 0x5000}) 714.523396ms ago: executing program 9 (id=9434): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 714.401736ms ago: executing program 9 (id=9435): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) 714.232126ms ago: executing program 9 (id=9436): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400302, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) socket$inet(0x2, 0x5, 0x6) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400c050}, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x88000, 0x0) pidfd_send_signal(r3, 0x1e, &(0x7f0000000480)={0x8, 0x1, 0x436}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0xfd}]}, 0x10) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) (async) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x88}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) (async) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) 660.173387ms ago: executing program 9 (id=9437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000020000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000100000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400ff"], 0xac}}, 0x0) 660.058097ms ago: executing program 9 (id=9438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="355b409b35c1dc9d9a1ee0bd4bf6a273cf2bfb3fcf9403f8957033750767992dac0d658a2cdddb8d44bd14ec6950d4fd569ac43cdac30ca5381d877d7a03ef68583026a07a8a546ff591fa628c8a3370ef2f1345af0b6a41bb8efca050578c2b662fa8f10d773f72dfc14de822c4401fcb90b4c379e2c0c529e397da583744f0153c78fbce3882e01f") ptrace$cont(0x20, r1, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000180)={'bridge_slave_1\x00', 0x120}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 596.946648ms ago: executing program 9 (id=9439): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) 33.932359ms ago: executing program 2 (id=9440): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0xe2b79f9dbe516a4c, 0xad, 0x3, r2}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7fbb, 0xff, 0xfb, 0x911, 0x3, r2}) process_vm_writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/129, 0x81}], 0x2, &(0x7f0000000240), 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0xc040) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x1f}, 0x1ff, 0x1, 0xff, 0x4, 0x2, 0x3}, &(0x7f0000000400)=0x20) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0xc, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4008005) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = signalfd(r0, &(0x7f00000006c0)={[0x6]}, 0x8) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000700)=0x1, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000740)) pipe2(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r9, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x65}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x80) sendmsg$nl_netfilter(r0, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000940)={0x268, 0x2, 0xb, 0x101, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x2}, [@nested={0xc, 0xd2, 0x0, 0x1, [@generic, @typed={0x8, 0x76, 0x0, 0x0, @fd=r1}]}, @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x146, 0xcf, 0x0, 0x1, [@nested={0x4, 0xd6}, @nested={0x4, 0x2b}, @generic="27b8733638efae9fca79e636b4c02d4470de4854f8106aaa2256ca1866944599e408c00206229dcd", @typed={0x56, 0xc3, 0x0, 0x0, @binary="0c4e8cfb4e8f5d54c66796cd32827c91ee36b50c4a3278605866da0ffaa7ca928b7141a56de88464fcddf78be7cc07c32de8c4f3cfcc36c4577ea5fbfa6f24743275b008604567ae3d19dd612d2af1cf6896"}, @typed={0x4, 0x119}, @nested={0x4, 0x29}, @generic="fc4a9e85c8e5be263415f971721e6beddf370b825a299a5eaec3e3ff", @generic="9190817165cbeb33b0c79037c0e0581169dd764c7b0d0ed714436bb8cc243c0dacb5a4368b23281a48a7e57a8c10bee4906f9e190b0452c7f0405b472ba55dd1a95c4d0c1e49a75bb7bb17d6c690e972fb810728e3c3068b8b5fe3ee3cc00ad306d80af8689d514cc5d5da3aa321f0e793dc26c7208c61b0f34b3587f7661f67d4b305fc5e139ee0395487f28e5a310c7b", @generic="4aecdf9da3"]}, @generic="86cfc4da6da415", @generic="3b3ae60523bfc31c10f447fbbda686e22d4d1f9c497757ddf5161c56988a8f8124df8061726cec688ebd4512af37e1b3b959cc668f1badcee6a1388b3032136ad13994e2f54fd1832c5cf6de706258e80ce1815af6c4fb801ce51f1c86d8bff52fdefaca5e81c825d61939cc908f9bac5e68cc8a3b8a5e2b27ab9751b161c09b01605b800adc438d6ee657baeec18c4f4aca434d2d4a4a0a3effdf721fc5aaff85cf47386633dfdec495fb287da0b6e05829fbf7218f338d0d49eccb637ff5f5304b1f32308d401529a16bbd2617768faf60890a4d79e1da9478a325bdf37556ba0e9bb7"]}, 0x268}, 0x1, 0x0, 0x0, 0x40800}, 0x840) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000c40)) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r6) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40004) timerfd_gettime(r6, &(0x7f0000000dc0)) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f0000000e00)={0xa, 0x4e24, 0x8, @mcast2, 0xfffffffb}, 0x1c) tee(r1, r1, 0x2, 0x0) fchmodat(r0, &(0x7f0000000e40)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) 1.13512ms ago: executing program 2 (id=9441): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x3b) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xde, 0x8, 0xc4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000300)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb9", 0xa5}, {&(0x7f0000000500)="d288ece27db8dbe595c041fbb89e68c030f69795324feda8c04348a54e3ac159d19b9883cb87eebfa6162af44518cd5f4ac0bc548676e49d5fe868604950273ee973b1be70a967f6226f15130b4bd572ff3fd3bb4aa6b45e69a4661546a95b399a35775086eceafcefcaaf4d2f6a901a664034192c7680ee62f7a742849b59a6033bdf770892525093b09299aa03bda581425acb9847515ac47229280fc6e0d3427e170bab29a2d040d75b1ae57dbb3dd8651c85bd38ce8b7cbf62ff9f92e600e4975f141dbc077528b715a12ec343a13d3d08652bc95c0e4933bc040dae3da88337b3262c1cda650e52536fa094988c10db6a64e35d93455f7545892e49c0eb13b813d8ab7fc7587fcbe86ef05c98d70fc24a5747efac05e15c79df4e264dbf8d560998d9f21a3b417a81f21f5603246374f1947d19bc384b64624f1b0a375aa7f89eee5ae9b164d23590dde8a43a99386156e3adca4142a34ea30e5008434df9b44134e8bb1dec1cd7c1700276ba5a97a014f6c55fea4fdd6e5019218c62c774c514f6e8ce025349f95a30461a4000000000000000e474a4ef78853a665aaf17e5f0f753d9f8c62fe8d9609df8b25e70eb6f0440c5c5a7787423bee44a155c75c107432d545e38f84c23ab3decd03f10fd3b5bda49704578897b7944ce4315f9a76c73a8b13901e712d11b1bf3e073788cd01b20f5791b93d85bb653589647a1b22517e1db88b74d751318ce7faff821171acc4ba69d2c6ebfc7077d588ff3950b35ae85ae9e6feea1fa27f51f28b558227bdad86ee9e767cce7fd130a765cd0c523fdb200ea8f7d4f9adbecf7fc64256a03c095264df341a4d19c46c92a4d1a5ef523fd0086f2048ad6882198887c0276b48ba88342ee4bd80030debe8a424e0ea59a0b2fdcee00c30838e6abb2a15eabf5e7a518b0a87f216353129f10886574fdb64ef12273b4362dba90c672380cf1cba676aaf1dbd2cccc57016fe825740ee14e03e43d779e392e417a43b5367f9ae3beb4cd25431449f36cc46196b64b7b6266d0c308b699473f241a3747e550eebcac49d428cf33219fcb8c81e27033fb56f30594b7757415c828df77fc2b13f458975ca3fb9467883f27d29fb3fd1fe77360f3a49fe147757fb0eb", 0x32d}, {&(0x7f0000000180)="edb294be", 0x4}], 0x3}}, {{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002100)=[{&(0x7f00000003c0)="e93fa38ec4c6757c02a61e51fbc2a5602bfd80edcb2f64cbc7e20804637740b37deb811e453d4a803d83aab9334fa2dd44e35635df12a91504a323977965cf9c07c51bb3071208560f3eb7e50a9245a5c31eb6faf4f8c7c412398c690bdcb9f54a479243310e54b2db6d8e989c076b14f1fa8e4ddb5f8d2e891cb8", 0x7b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000440)="f94ee0b77eb5cf5dbdd91b467e817b0a6530fa6c02ef21bc0d4586c4973a6c2338ca2c3faa33cd91064731c89a99d2d312d7f29bbad173d0e70ec3485fa95291", 0x40}, {&(0x7f0000000840)="1f98ceec00b72d8c6da60462c5d7fa74a235398821e2fc25f731178f433d6006e08284c707b2f52ec2e58258e38cdff80dad114deb581fbb62766f5ce7a3b05d1dcfed4bb40c2410380d8b19e1a469d10551768975e4", 0x56}, {&(0x7f00000008c0)="710d2c48015f178b1ce3aed79357743d8b4ff295d4c7b21705f50df4e4ab57e14e7841db296c7d7f72f0d1d9788d89a2cc8df26fb65fe3fddf6eaa8fc4770f06cfe22cd2dd28436311a3dbcc7a7ca1ce5b10eaa20798554ae507c2d31cd2f1edebaf79c34cb70cb3", 0x68}, {&(0x7f0000000940)="21989d494f32f39506c31f9c76349ecaaa3d7c022bd4f3fdf4887a10ff51eb488e96d6bb802cf7f699e435f5025796986e115372d1a80ff7ca8a3db32a1cbb8490f334fa9564f84f2816a46378797a0706d7eefc294bf12fdf241a9672f2d71ec9be380e5aea87a5b346fd5ac274a7a003586680248c259b2585db24d582335ae40831b48274ce3963ef3ac7c3d4f0ead0138ee5be6049003e80c540aedb79bed015963ed49d0d9773d1981a8c6bd0596c1ea696acdc98476fc09cac2b7ddf2dd97e90bd90cd678d348c6c34", 0xcc}, {&(0x7f0000000480)="794e652986", 0x5}, {&(0x7f0000000a40)="cd96fe7a255879e114c8e0bf3ab466fae0acbfa858a72fd886e3d0ddf4e182d9fb6bc04dd5a0ca238a6d8c502194cb2f93d0f92cc9b5c89564f0b9120219eb39b9b0b9cb32", 0x45}, {0x0}], 0x7}}], 0x4, 0x4) 0s ago: executing program 2 (id=9442): r0 = socket(0x1e, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000400000014003800ff010000000000000000000000000001150002"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_xfrm(r2, 0x0, 0x810) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d7, &(0x7f0000000480)="49f9d9291c50d5ba88fd48adfab3897844b87c7fb2ad425a1b015f065f9e6d9b6a185edac7853afc265e9a0d71be2ebe50c3e3ee2f21947c31f3af0ce54922cd65882c97901344b1caf107620f44721e8d51f54e683b5ea1ffbb2f50ae4d729c68915dfb23bab121") syz_usb_control_io$hid(r6, &(0x7f0000000300)={0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="400e97000000970c86c80f89ca3da2380dee57e060a254018b2a44dce36ace0a2630ae63570e5fa8e2d91732ab3dd4d4c1f43f3cdc1d09a115baeb2dadc1ce205cad4f264fae48d32c368d1e0541058532d605b67d9daa338a7fb6b9e86adb9e25732271d9abbdf0321c877dde71471a8ab712cc6bd5303bf0a5d30ca994c9e32eede730070c37b27cb9154eee40331402658a13b957bd5aa9225d4e74298a267906a81f8ebd13a5ad"], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x6f3}}}}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x40844) kernel console output (not intermixed with test programs): 7][T22990] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 497.001974][T22990] rust_binder: Read failure Err(EFAULT) in pid:193 [ 497.011198][T22990] overlayfs: lower data-only dirs require metacopy support. [ 497.054265][T23042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8553'. [ 497.063553][T23042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8553'. [ 497.072576][T23042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8553'. [ 497.104509][T23046] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8555'. [ 497.182126][T23061] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8561'. [ 497.312042][T23075] netlink: 'syz.3.8569': attribute type 30 has an invalid length. [ 497.353400][T23082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=23082 comm=syz.3.8571 [ 497.367181][T23082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=23082 comm=syz.3.8571 [ 497.528259][T23108] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:136 [ 497.547945][T23112] /dev/rnullb0: Can't open blockdev [ 497.587677][T23118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2074 sclass=netlink_route_socket pid=23118 comm=syz.7.8584 [ 498.134232][T23129] overlayfs: failed to clone upperpath [ 498.150914][ T36] audit: type=1401 audit(1757464710.555:1807): op=setxattr invalid_context="" [ 498.634027][T17572] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 498.763996][T17572] usb 10-1: device descriptor read/64, error -71 [ 499.003982][T17572] usb 10-1: device descriptor read/64, error -71 [ 499.049050][T23166] fuse: Bad value for 'group_id' [ 499.054208][T23166] fuse: Bad value for 'group_id' [ 499.110684][T23167] /dev/loop0: Can't lookup blockdev [ 499.243991][T17572] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 499.317749][T23174] overlayfs: failed to clone upperpath [ 499.374003][T17572] usb 10-1: device descriptor read/64, error -71 [ 499.614011][T17572] usb 10-1: device descriptor read/64, error -71 [ 499.724108][T17572] usb usb10-port1: attempt power cycle [ 500.064020][T17572] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 500.084988][T17572] usb 10-1: device descriptor read/8, error -71 [ 500.214995][T17572] usb 10-1: device descriptor read/8, error -71 [ 500.453974][T17572] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 500.475386][T17572] usb 10-1: device descriptor read/8, error -71 [ 500.553982][T19810] Bluetooth: hci0: command 0x1003 tx timeout [ 500.560040][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 500.593632][T23198] 9pnet_fd: Insufficient options for proto=fd [ 500.607468][T17572] usb 10-1: device descriptor read/8, error -71 [ 500.717259][T17572] usb usb10-port1: unable to enumerate USB device [ 501.527561][T23235] __nla_validate_parse: 5 callbacks suppressed [ 501.527583][T23235] netlink: 220 bytes leftover after parsing attributes in process `syz.7.8632'. [ 502.194010][T17572] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 502.263991][ T442] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 502.355163][T17572] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 502.363453][T17572] usb 4-1: config 0 has no interface number 0 [ 502.369730][T17572] usb 4-1: config 0 interface 229 has no altsetting 0 [ 502.376620][T17572] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 502.385956][T17572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.395768][T17572] usb 4-1: config 0 descriptor?? [ 502.414109][ T442] usb 10-1: Using ep0 maxpacket: 8 [ 502.420395][ T442] usb 10-1: config 0 has an invalid interface number: 198 but max is 0 [ 502.429019][ T442] usb 10-1: config 0 has no interface number 0 [ 502.435741][ T442] usb 10-1: config 0 interface 198 has no altsetting 0 [ 502.442686][ T442] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=c2.4d [ 502.452103][ T442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.464214][ T442] usb 10-1: config 0 descriptor?? [ 502.671747][ T36] audit: type=1326 audit(1757464715.075:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.695616][ T36] audit: type=1326 audit(1757464715.085:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.719171][ T36] audit: type=1326 audit(1757464715.085:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.737335][T23293] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8649'. [ 502.750726][T23271] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 502.762016][ T36] audit: type=1326 audit(1757464715.085:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.789627][ T36] audit: type=1326 audit(1757464715.085:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.814795][ T36] audit: type=1326 audit(1757464715.145:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.838478][ T36] audit: type=1326 audit(1757464715.145:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.862169][ T36] audit: type=1326 audit(1757464715.145:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.886060][ T36] audit: type=1326 audit(1757464715.145:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 502.909838][ T36] audit: type=1326 audit(1757464715.145:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23270 comm="syz.9.8642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7c7d58eba9 code=0x7ffc0000 [ 503.384383][ T442] usb 10-1: USB disconnect, device number 14 [ 503.702809][ T10] rust_binder: 23316: removing orphan mapping 0:24 [ 503.771130][T23324] overlayfs: failed to clone lowerpath [ 503.775333][T23322] rust_binder: Error while translating object. [ 503.776661][T23322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 503.782924][T23322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:181 [ 503.792989][T23325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 503.802162][T23325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 503.887348][T17572] usb 4-1: Cannot set autoneg [ 503.901248][T17572] MOSCHIP usb-ethernet driver 4-1:0.229: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 503.913697][T17572] usb 4-1: USB disconnect, device number 27 [ 504.491511][T23347] overlayfs: failed to resolve './file1': -2 [ 504.509044][T23351] 9pnet_fd: Insufficient options for proto=fd [ 504.530823][T23353] /dev/rnullb0: Can't open blockdev [ 504.594057][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.594096][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.600291][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.606609][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.612792][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.619021][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.625220][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.631502][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.637859][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.644123][ T442] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 504.644137][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.644158][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.664080][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.670270][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.676463][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.682640][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.688823][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.695021][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.701189][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.707361][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.713533][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.719725][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.725911][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.732059][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.738232][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.744429][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.750616][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.756819][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.762992][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.769169][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.775362][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.781519][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.783982][ T442] usb 4-1: device descriptor read/64, error -71 [ 504.787718][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.800106][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.806346][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.812516][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.813974][ T31] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 504.818712][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.832520][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.838702][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.844907][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.851090][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.857266][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.863437][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.869622][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.875901][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.882067][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.888246][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.894478][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.900711][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.906930][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.913083][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.919285][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.925467][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.931649][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.937894][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.944121][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.950303][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.955352][T23362] : renamed from bond_slave_0 [ 504.956729][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.967605][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.973787][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.980146][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.986561][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.992742][T23360] rust_binder: Write failure EFAULT in pid:250 [ 504.995083][ T31] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 504.999262][T23360] rust_binder: Write failure EFAULT in pid:250 [ 505.005187][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.014448][T23360] rust_binder: Write failure EFAULT in pid:250 [ 505.028724][T23360] rust_binder: Write failure EFAULT in pid:250 [ 505.030912][ T31] usb 10-1: config 0 descriptor?? [ 505.046224][ T442] usb 4-1: device descriptor read/64, error -71 [ 505.202223][T23390] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 505.211402][T23390] overlayfs: missing 'lowerdir' [ 505.283987][ T442] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 505.293298][T23392] netlink: 'syz.7.8687': attribute type 3 has an invalid length. [ 505.301075][T23392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8687'. [ 505.413996][ T442] usb 4-1: device descriptor read/64, error -71 [ 505.586273][T23411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23411 comm=syz.7.8694 [ 505.599468][T23411] overlayfs: missing 'lowerdir' [ 505.621197][T23416] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8695'. [ 505.630639][T23416] netlink: 'syz.7.8695': attribute type 21 has an invalid length. [ 505.674000][ T442] usb 4-1: device descriptor read/64, error -71 [ 505.796686][ T442] usb usb4-port1: attempt power cycle [ 506.015320][T23441] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8705'. [ 506.163985][ T442] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 506.194952][ T442] usb 4-1: device descriptor read/8, error -71 [ 506.259810][T23357] cgroup: Bad value for 'name' [ 506.274689][ T31] usb 10-1: Cannot set autoneg [ 506.280045][ T31] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 506.304074][ T31] usb 10-1: USB disconnect, device number 15 [ 506.324953][ T442] usb 4-1: device descriptor read/8, error -71 [ 506.564718][ T442] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 506.572891][T23453] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 506.582288][T23453] overlayfs: missing 'lowerdir' [ 506.605073][ T442] usb 4-1: device descriptor read/8, error -71 [ 506.614816][T23457] netlink: 220 bytes leftover after parsing attributes in process `syz.7.8712'. [ 506.647903][T23461] /dev/rnullb0: Can't open blockdev [ 506.667772][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8715'. [ 506.677411][T23464] overlayfs: failed to resolve './file1': -2 [ 506.738501][ T442] usb 4-1: device descriptor read/8, error -71 [ 506.815810][T23473] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 506.825037][T23473] overlayfs: missing 'lowerdir' [ 506.854093][ T442] usb usb4-port1: unable to enumerate USB device [ 506.876547][T23479] netlink: 220 bytes leftover after parsing attributes in process `syz.9.8722'. [ 506.898201][T23481] overlayfs: failed to resolve './bus': -2 [ 506.949598][T23492] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8727'. [ 506.958896][T23492] netlink: 'syz.9.8727': attribute type 21 has an invalid length. [ 506.979235][T23494] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 506.988435][T23494] overlayfs: missing 'lowerdir' [ 507.854983][T23504] /dev/rnullb0: Can't open blockdev [ 507.872020][T23506] netlink: 220 bytes leftover after parsing attributes in process `syz.9.8733'. [ 507.894244][T23508] veth1: entered allmulticast mode [ 508.046468][T23514] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 508.055669][T23514] overlayfs: missing 'lowerdir' [ 508.073433][T23516] can0: slcan on ttyS3. [ 508.118667][T23516] can0 (unregistered): slcan off ttyS3. [ 508.133996][ T31] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 508.158771][T23532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8740'. [ 508.168064][T23532] netlink: 'syz.3.8740': attribute type 26 has an invalid length. [ 508.177528][T23534] overlayfs: failed to clone upperpath [ 508.183701][T23535] overlayfs: failed to clone upperpath [ 508.201666][T23538] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8742'. [ 508.230836][T23544] rust_binder: Error while translating object. [ 508.230881][T23544] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 508.243974][T23544] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:654 [ 508.270656][T23551] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 508.292004][T23551] overlayfs: missing 'lowerdir' [ 508.298535][ T31] usb 10-1: descriptor type invalid, skip [ 508.307431][ T31] usb 10-1: not running at top speed; connect to a high speed hub [ 508.321301][ T31] usb 10-1: config index 0 descriptor too short (expected 25959, got 36) [ 508.331025][ T31] usb 10-1: config 105 has too many interfaces: 95, using maximum allowed: 32 [ 508.348983][ T31] usb 10-1: config 105 has an invalid descriptor of length 121, skipping remainder of the config [ 508.368866][ T31] usb 10-1: config 105 has 0 interfaces, different from the descriptor's value: 95 [ 508.388417][ T31] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.411646][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.415151][T23577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8751'. [ 508.420104][ T31] usb 10-1: Product: syz [ 508.433226][ T31] usb 10-1: Manufacturer: syz [ 508.438097][ T31] usb 10-1: SerialNumber: syz [ 508.460704][T23581] rust_binder: Write failure EFAULT in pid:659 [ 508.477056][T23585] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8754'. [ 508.507818][T23591] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 508.517008][T23591] overlayfs: missing 'lowerdir' [ 508.631284][T23601] netlink: 'syz.4.8760': attribute type 16 has an invalid length. [ 508.717478][T23606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8762'. [ 508.734689][T23508] veth1: left allmulticast mode [ 508.736691][ T31] usb 10-1: USB disconnect, device number 16 [ 509.225201][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 509.225220][ T36] audit: type=1400 audit(1757464721.635:1849): avc: denied { setattr } for pid=23614 comm="syz.3.8765" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 509.272679][T23620] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 509.282441][T23620] overlayfs: missing 'lowerdir' [ 509.303349][T23625] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 509.303375][T23625] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224 [ 509.330722][T23627] 9pnet_fd: Insufficient options for proto=fd [ 509.395584][T23642] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 509.410245][ T442] rust_binder: 23630: removing orphan mapping 0:24 [ 509.416884][T23642] rust_binder: 232: no such ref 1 [ 509.424408][T23642] rust_binder: 232: no such ref 2 [ 509.431684][T23642] rust_binder: 232: no such ref 1 [ 509.437172][T23642] rust_binder: Write failure EFAULT in pid:232 [ 509.441856][T23650] pim6reg1: entered promiscuous mode [ 509.457992][T23650] pim6reg1: entered allmulticast mode [ 509.491662][T23656] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 509.651533][T23673] rust_binder: 683: no such ref 3 [ 509.714135][T23683] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 509.714169][T23683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:692 [ 509.724062][T23682] rust_binder: 692: no such ref 2 [ 509.738258][T23682] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:692 [ 509.756487][T23685] kvm: kvm [23677]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 509.756836][T23687] netlink: 'syz.3.8793': attribute type 4 has an invalid length. [ 509.765854][T23685] kvm: kvm [23677]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 510.154001][ T31] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 510.303974][ T31] usb 4-1: Invalid ep0 maxpacket: 64 [ 510.345262][T23704] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 510.354493][T23704] overlayfs: missing 'lowerdir' [ 510.433996][ T31] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 510.583980][ T31] usb 4-1: Invalid ep0 maxpacket: 64 [ 510.594492][ T31] usb usb4-port1: attempt power cycle [ 510.602439][T23749] netlink: 'syz.4.8819': attribute type 11 has an invalid length. [ 510.629485][T23756] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 510.629522][T23756] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 510.654040][T23761] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 510.657102][T23761] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 510.663552][T23761] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 510.725643][T23775] fuse: blksize only supported for fuseblk [ 510.784156][T20410] Bluetooth: hci0: Frame reassembly failed (-84) [ 510.793766][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.801279][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.808931][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.816601][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.824104][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.831517][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.838948][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.846777][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.854689][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.862199][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.870418][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.878845][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.886552][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.894036][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.901474][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.908964][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.916405][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.923872][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.931329][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.938778][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.946278][ T31] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 510.953800][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.953954][T20410] bridge_slave_1: left allmulticast mode [ 510.961284][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.967198][T20410] bridge_slave_1: left promiscuous mode [ 510.974421][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 510.980202][T20410] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.987295][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.001774][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.001926][T20410] bridge_slave_0: left allmulticast mode [ 511.009271][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.015159][T20410] bridge_slave_0: left promiscuous mode [ 511.022265][ T31] usb 4-1: Invalid ep0 maxpacket: 64 [ 511.028188][T20410] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.033193][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.047862][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.055312][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.062734][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.070173][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.078818][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.086264][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.093660][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.101113][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.108519][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.116125][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.123502][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.131377][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.138790][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.146197][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.153581][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.160984][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.168388][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.175829][ T31] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 511.183374][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.193318][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.200996][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.208709][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.216339][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.224139][ T31] usb 4-1: Invalid ep0 maxpacket: 64 [ 511.229497][T20410] tipc: Disabling bearer [ 511.229605][ T31] usb usb4-port1: unable to enumerate USB device [ 511.237031][T20410] tipc: Left network mode [ 511.241729][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.252871][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.260359][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.267831][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.275324][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.282910][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.282968][T20410] veth1_macvtap: left promiscuous mode [ 511.290550][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.298731][T20410] veth0_vlan: left promiscuous mode [ 511.308433][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.316014][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x3 [ 511.323454][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.330978][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x3 [ 511.338421][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.345961][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.353408][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.361047][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.368697][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.376232][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.383644][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.391190][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.398619][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.406109][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.413514][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.420966][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.428425][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.435925][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.443320][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.450771][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.458224][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.465668][ T45] hid-generic 0003:0008:000F.003F: unknown main item tag 0x0 [ 511.473969][ T45] hid-generic 0003:0008:000F.003F: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 511.657255][T23805] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 511.846718][T23822] rust_binder: Error while translating object. [ 511.846753][T23822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 511.853035][T23822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:292 [ 512.075159][T23827] syzkaller0: entered promiscuous mode [ 512.089809][T23827] syzkaller0: entered allmulticast mode [ 512.196219][T23841] __nla_validate_parse: 7 callbacks suppressed [ 512.196235][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8853'. [ 512.326586][T23847] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 512.326789][T23847] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 512.794049][T19810] Bluetooth: hci0: command 0x1003 tx timeout [ 512.794823][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 513.074528][T23854] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 513.094078][T23854] overlayfs: missing 'lowerdir' [ 513.338436][T23875] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8865'. [ 513.345610][T23877] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 513.347925][T23875] netlink: 'syz.7.8865': attribute type 3 has an invalid length. [ 513.356824][T23877] overlayfs: missing 'lowerdir' [ 513.380021][T23879] netlink: 'syz.7.8867': attribute type 1 has an invalid length. [ 513.392670][T23881] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8868'. [ 513.465959][T23898] rust_binder: Error while translating object. [ 513.465995][T23898] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 513.468472][T23896] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 513.477512][T23898] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:324 [ 513.529622][T23900] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8875'. [ 513.638099][T23913] binder: Unknown parameter 'contextÀ' [ 513.863980][ T610] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 513.914061][T23935] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8889'. [ 513.923904][T23937] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:343 [ 513.955633][T23941] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8891'. [ 514.024595][ T610] usb 4-1: Using ep0 maxpacket: 32 [ 514.033980][ T610] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 514.037168][T23943] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 336, limit: 1176, size: 18446744073709551401) [ 514.042170][T23943] rust_binder: Error while translating object. [ 514.042301][ T610] usb 4-1: config 0 has an invalid descriptor of length 201, skipping remainder of the config [ 514.054890][T23943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 514.070918][T23943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:351 [ 514.073954][ T610] usb 4-1: config 0 has no interface number 0 [ 514.095621][ T610] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 514.108727][ T610] usb 4-1: config 0 interface 184 has no altsetting 0 [ 514.117016][ T610] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 514.126241][ T610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.136156][ T610] usb 4-1: Product: syz [ 514.141166][ T610] usb 4-1: Manufacturer: syz [ 514.145917][ T610] usb 4-1: SerialNumber: syz [ 514.151464][ T610] usb 4-1: config 0 descriptor?? [ 514.163368][T23949] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8895'. [ 514.192686][T23955] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8898'. [ 514.352069][T23963] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 514.352109][T23963] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:363 [ 514.381124][T23907] syzkaller0: entered promiscuous mode [ 514.405212][T23907] syzkaller0: entered allmulticast mode [ 514.412074][T23970] IPv6: NLM_F_CREATE should be specified when creating new route [ 514.419977][T23970] IPv6: NLM_F_REPLACE set, but no existing node found! [ 514.425406][ T610] smsc75xx v1.0.0 [ 514.430843][ T610] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 514.442630][ T610] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 514.465896][ T610] usb 4-1: USB disconnect, device number 36 [ 514.550415][T23981] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8907'. [ 514.588842][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8910'. [ 515.010170][T23995] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 515.178644][T24013] netlink: 'syz.4.8921': attribute type 13 has an invalid length. [ 515.393986][ T45] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 515.565057][ T45] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 515.574266][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.583331][ T45] usb 4-1: config 0 descriptor?? [ 515.793966][ T442] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 515.943953][ T442] usb 10-1: Using ep0 maxpacket: 8 [ 515.950154][ T442] usb 10-1: config 162 has an invalid interface number: 79 but max is 1 [ 515.958582][ T442] usb 10-1: config 162 has an invalid interface number: 183 but max is 1 [ 515.967057][ T442] usb 10-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 515.977423][ T442] usb 10-1: config 162 has no interface number 0 [ 515.983788][ T442] usb 10-1: config 162 has no interface number 1 [ 515.990196][ T442] usb 10-1: config 162 interface 79 altsetting 4 endpoint 0x9 has invalid maxpacket 17928, setting to 1024 [ 516.002706][ T442] usb 10-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 516.015986][ T442] usb 10-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 516.027038][ T442] usb 10-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 516.039051][ T442] usb 10-1: config 162 interface 183 altsetting 1 endpoint 0x8F has an invalid bInterval 247, changing to 7 [ 516.050620][ T442] usb 10-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 516.062587][ T442] usb 10-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 516.063288][T20414] bridge_slave_1: left allmulticast mode [ 516.072786][ T442] usb 10-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 516.078714][T20414] bridge_slave_1: left promiscuous mode [ 516.088694][ T442] usb 10-1: config 162 interface 79 has no altsetting 0 [ 516.094565][T20414] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.101175][ T442] usb 10-1: config 162 interface 183 has no altsetting 0 [ 516.115441][T20414] bridge_slave_0: left allmulticast mode [ 516.116708][ T442] usb 10-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 516.121203][T20414] bridge_slave_0: left promiscuous mode [ 516.130274][ T442] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.136243][T20414] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.143907][ T442] usb 10-1: Product: syz [ 516.155221][ T442] usb 10-1: Manufacturer: syz [ 516.159960][ T442] usb 10-1: SerialNumber: syz [ 516.166442][T24059] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 516.256961][T20414] tipc: Disabling bearer [ 516.317121][T20414] tipc: Left network mode [ 516.322468][T20414] veth1_macvtap: left promiscuous mode [ 516.328107][T20414] veth0_vlan: left promiscuous mode [ 516.378553][ T442] pl2303 10-1:162.79: required endpoints missing [ 516.386701][ T442] pl2303 10-1:162.183: required endpoints missing [ 516.395927][ T442] usb 10-1: USB disconnect, device number 17 [ 517.151534][T24070] fuseblk: Bad value for 'fd' [ 517.195496][T24004] rust_binder: 733: no such ref 2 [ 517.200806][T24004] rust_binder: Write failure EINVAL in pid:733 [ 517.303398][T24081] __nla_validate_parse: 6 callbacks suppressed [ 517.303485][T24081] netlink: 220 bytes leftover after parsing attributes in process `syz.4.8947'. [ 517.344090][T24083] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 517.353247][T24083] overlayfs: missing 'lowerdir' [ 517.639344][T24096] 9pnet_fd: Insufficient options for proto=fd [ 517.709061][T24108] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 517.718262][T24108] overlayfs: missing 'lowerdir' [ 517.926634][T24123] overlayfs: failed to clone upperpath [ 517.978252][T24134] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 120, size: 53) [ 517.978280][T24134] rust_binder: Error while translating object. [ 517.979654][T24136] /dev/loop0: Can't lookup blockdev [ 518.014167][T24134] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 518.014198][T24134] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370 [ 518.129587][T24146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 518.138888][T24146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:394 [ 518.184316][T24151] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4271108834 (34168870672 ns) > initial count (24354098064 ns). Using initial count to start timer. [ 518.219908][ T45] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 518.230257][ T45] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 518.240892][ T45] asix 4-1:0.0: probe with driver asix failed with error -71 [ 518.249220][ T45] usb 4-1: USB disconnect, device number 37 [ 518.543980][ T45] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 518.695074][ T45] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00 [ 518.704176][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.712787][ T45] usb 4-1: config 0 descriptor?? [ 518.782714][T24161] netlink: 152 bytes leftover after parsing attributes in process `syz.7.8977'. [ 518.830959][T24163] netlink: 1363 bytes leftover after parsing attributes in process `syz.7.8978'. [ 518.961946][ T36] audit: type=1400 audit(2000000000.890:1850): avc: denied { name_bind } for pid=24178 comm="syz.4.8983" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 518.962063][T24179] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8983'. [ 519.103142][T24185] rust_binder: Error while translating object. [ 519.103191][T24185] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 519.109753][T24185] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:403 [ 519.123243][ T45] wacom 0003:056A:0044.0040: Unknown device_type for 'HID 056a:0044'. Assuming pen. [ 519.157372][ T45] wacom 0003:056A:0044.0040: hidraw1: USB HID v1.01 Device [HID 056a:0044] on usb-dummy_hcd.3-1/input0 [ 519.179631][ T45] input: Wacom Intuos2 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0044.0040/input/input40 [ 520.105120][ T36] audit: type=1400 audit(2000000002.040:1851): avc: denied { validate_trans } for pid=24210 comm="syz.9.8993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 520.127279][T24212] x_tables: duplicate entry at hook 1 [ 520.132879][T24212] rust_binder: Error in use_page_slow: ESRCH [ 520.139004][T24212] rust_binder: use_range failure ESRCH [ 520.139029][T24212] rust_binder: Failed to allocate buffer. len:160, is_oneway:false [ 520.144529][T24212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 520.152488][T24212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:417 [ 520.385229][T24241] rust_binder: Error while translating object. [ 520.385284][T24241] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 520.391517][T24241] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:425 [ 520.423853][T24243] syzkaller0: entered promiscuous mode [ 520.438456][T24243] syzkaller0: entered allmulticast mode [ 520.744000][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 520.828738][T24253] netlink: 'syz.4.9009': attribute type 4 has an invalid length. [ 520.894021][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 520.900634][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 520.909132][ T10] usb 10-1: config 9 has an invalid interface number: 63 but max is 1 [ 520.917345][ T10] usb 10-1: config 9 has an invalid interface number: 159 but max is 1 [ 520.925620][ T10] usb 10-1: config 9 has no interface number 0 [ 520.931790][ T10] usb 10-1: config 9 has no interface number 1 [ 520.937977][ T10] usb 10-1: config 9 interface 63 has no altsetting 0 [ 520.946150][ T10] usb 10-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=5c.87 [ 520.956132][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.964246][ T10] usb 10-1: Product: syz [ 520.968505][ T10] usb 10-1: Manufacturer: syz [ 520.973171][ T10] usb 10-1: SerialNumber: syz [ 521.193647][T24249] syzkaller0: entered promiscuous mode [ 521.199225][T24249] syzkaller0: entered allmulticast mode [ 521.237701][ T45] usb 4-1: USB disconnect, device number 38 [ 521.259594][ T10] usb 10-1: USB disconnect, device number 18 [ 521.290191][T14097] udevd[14097]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:9.63/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 521.471734][T24267] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9015'. [ 521.501096][T24271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9017'. [ 521.773498][T24275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9018'. [ 521.891579][T24283] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 521.899958][T24283] rust_binder: Write failure EINVAL in pid:747 [ 521.900438][ T36] audit: type=1400 audit(2000000003.830:1852): avc: denied { search } for pid=24282 comm="syz.3.9022" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 522.006955][T24294] binder: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 522.036051][T24293] binder: Bad value for 'max' [ 522.066755][T24299] /dev/sg0: Can't lookup blockdev [ 522.286597][T24309] rust_binder: Write failure EFAULT in pid:453 [ 522.310272][T24313] rust_binder: Write failure EFAULT in pid:457 [ 522.324105][ T45] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 522.504077][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 522.510321][ T45] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 522.518861][ T45] usb 4-1: config 179 has no interface number 0 [ 522.525278][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 522.536766][ T45] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 522.548155][ T45] usb 4-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 522.559358][ T45] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 522.572685][ T45] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 522.581736][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.590898][T24301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.799930][T24301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.808550][T24301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.817910][ T10] usb 4-1: USB disconnect, device number 39 [ 523.510921][ T36] audit: type=1400 audit(2000000005.440:1853): avc: denied { ioctl } for pid=24356 comm="syz.3.9049" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 523.537708][T24361] binder: Bad value for 'max' [ 523.616961][T24371] 9pnet_fd: Insufficient options for proto=fd [ 523.935056][T24382] Invalid ELF header len 1 [ 524.055981][T24388] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 524.067170][T24390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9063'. [ 524.246733][T24407] rust_binder: Write failure EFAULT in pid:823 [ 524.297706][T24411] 9pnet_fd: Insufficient options for proto=fd [ 524.355082][T24420] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9074'. [ 524.427156][T24422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9075'. [ 524.580399][T24436] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9080'. [ 524.622493][T24444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9083'. [ 525.219728][T24449] rust_binder: Error while translating object. [ 525.219781][T24449] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 525.226075][T24449] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:840 [ 525.531620][ T31] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 525.575121][T24486] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9099'. [ 525.713948][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 525.721062][ T31] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 525.733461][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.751516][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 525.767226][ T31] usb 4-1: config 1 has no interface number 1 [ 525.778897][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 525.802960][ T31] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.831808][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.842086][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.859110][ T31] usb 4-1: Product: syz [ 525.867765][ T31] usb 4-1: Manufacturer: syz [ 525.876901][ T31] usb 4-1: SerialNumber: syz [ 526.178771][T24500] syzkaller0: entered promiscuous mode [ 526.191975][T24500] syzkaller0: entered allmulticast mode [ 526.522300][T24508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9105'. [ 526.531718][T24508] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9105'. [ 526.707048][T24511] rust_binder: 412: no such ref 0 [ 527.507515][T24524] netlink: 220 bytes leftover after parsing attributes in process `syz.4.9109'. [ 527.589580][T24537] /dev/loop0: Can't lookup blockdev [ 527.610620][T24539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9115'. [ 528.314394][ T31] usb 4-1: USB disconnect, device number 40 [ 528.334157][T14097] udevd[14097]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 528.422132][T24560] rust_binder: Error while translating object. [ 528.422166][T24560] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 528.428410][T24560] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 528.437839][T24560] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:861 [ 528.455960][T24567] rust_binder: Failed to allocate buffer. len:192, is_oneway:false [ 528.457533][ T45] rust_binder: 24559: removing orphan mapping 0:24 [ 528.464294][T24567] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 528.479743][T24567] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 528.495646][ T10] rust_binder: 24566: removing orphan mapping 0:24 [ 528.553978][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 528.580809][ T36] audit: type=1400 audit(2000000010.510:1854): avc: denied { relabelfrom } for pid=24579 comm="syz.3.9130" name="NETLINK" dev="sockfs" ino=127159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 529.098562][T24596] __nla_validate_parse: 3 callbacks suppressed [ 529.098578][T24596] netlink: 220 bytes leftover after parsing attributes in process `syz.9.9136'. [ 529.162667][T24604] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9140'. [ 529.227953][T24611] netlink: 428 bytes leftover after parsing attributes in process `syz.9.9143'. [ 529.401170][T24617] netlink: 220 bytes leftover after parsing attributes in process `syz.7.9146'. [ 529.473953][ T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 529.558515][T24632] rust_binder: 457: no such ref 2 [ 529.623993][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 529.631522][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.634666][T24642] pim6reg1: entered promiscuous mode [ 529.641862][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.647348][T24642] pim6reg1: entered allmulticast mode [ 529.657712][ T10] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.670804][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.678941][ T10] usb 10-1: Product: syz [ 529.683252][ T10] usb 10-1: Manufacturer: syz [ 529.688141][ T10] usb 10-1: SerialNumber: syz [ 529.738426][T24644] /dev/rnullb0: Can't open blockdev [ 529.744004][T24644] /dev/rnullb0: Can't open blockdev [ 529.749491][T24644] /dev/rnullb0: Can't open blockdev [ 529.755016][T24644] /dev/rnullb0: Can't open blockdev [ 529.760506][T24644] /dev/rnullb0: Can't open blockdev [ 529.766072][T24644] /dev/rnullb0: Can't open blockdev [ 529.771479][T24644] /dev/rnullb0: Can't open blockdev [ 529.777035][T24644] /dev/rnullb0: Can't open blockdev [ 529.782435][T24644] /dev/rnullb0: Can't open blockdev [ 529.787889][T24644] /dev/rnullb0: Can't open blockdev [ 529.793262][T24644] /dev/rnullb0: Can't open blockdev [ 529.798734][T24644] /dev/rnullb0: Can't open blockdev [ 529.804134][T24644] /dev/rnullb0: Can't open blockdev [ 529.809556][T24644] /dev/rnullb0: Can't open blockdev [ 529.814967][T24644] /dev/rnullb0: Can't open blockdev [ 529.820371][T24644] /dev/rnullb0: Can't open blockdev [ 529.825793][T24644] /dev/rnullb0: Can't open blockdev [ 529.831173][T24644] /dev/rnullb0: Can't open blockdev [ 529.836696][T24644] /dev/rnullb0: Can't open blockdev [ 529.842090][T24644] /dev/rnullb0: Can't open blockdev [ 529.847522][T24644] /dev/rnullb0: Can't open blockdev [ 529.852908][T24644] /dev/rnullb0: Can't open blockdev [ 529.858384][T24644] /dev/rnullb0: Can't open blockdev [ 529.863759][T24644] /dev/rnullb0: Can't open blockdev [ 529.869177][T24644] /dev/rnullb0: Can't open blockdev [ 529.874632][T24644] /dev/rnullb0: Can't open blockdev [ 529.880022][T24644] /dev/rnullb0: Can't open blockdev [ 529.885439][T24644] /dev/rnullb0: Can't open blockdev [ 529.890835][T24644] /dev/rnullb0: Can't open blockdev [ 529.894692][T24611] binder: Unknown parameter 'defcontext01777777777777777777777' [ 529.896276][T24644] /dev/rnullb0: Can't open blockdev [ 529.905554][ T10] usb 10-1: 0:2 : does not exist [ 529.909172][T24644] /dev/rnullb0: Can't open blockdev [ 529.919419][T24644] /dev/rnullb0: Can't open blockdev [ 529.919574][ T10] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 529.924871][T24644] /dev/rnullb0: Can't open blockdev [ 529.937990][ T10] usb 10-1: USB disconnect, device number 19 [ 529.948764][T14097] udevd[14097]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 529.959758][T24647] netlink: 220 bytes leftover after parsing attributes in process `syz.7.9157'. [ 530.247599][T24653] netlink: 'syz.7.9159': attribute type 3 has an invalid length. [ 530.255815][T24653] fuse: Bad value for 'user_id' [ 530.260736][T24653] fuse: Bad value for 'user_id' [ 530.277248][T24655] rust_binder: Read failure Err(EAGAIN) in pid:480 [ 530.287344][T24657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9161'. [ 530.335797][T24659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.346904][T20410] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.675556][T24676] rust_binder: 524: no such ref 0 [ 530.680706][T24676] rust_binder: 524: no such ref 0 [ 530.816222][ T36] audit: type=1326 audit(2000000012.750:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24679 comm="syz.9.9168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c7d58eba9 code=0x0 [ 531.673547][T24686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9170'. [ 531.701670][T24690] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9171'. [ 531.729133][T24695] netlink: 220 bytes leftover after parsing attributes in process `syz.9.9174'. [ 531.761591][ T36] audit: type=1400 audit(2000000013.690:1856): avc: denied { setattr } for pid=24697 comm="syz.9.9176" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 531.966150][T24701] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.973264][T24701] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.980395][T24701] bridge_slave_0: entered allmulticast mode [ 531.987895][T24701] bridge_slave_0: entered promiscuous mode [ 531.995115][T24701] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.002669][T24701] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.009975][T24701] bridge_slave_1: entered allmulticast mode [ 532.016505][T24701] bridge_slave_1: entered promiscuous mode [ 532.036504][T20414] bridge_slave_1: left allmulticast mode [ 532.042186][T20414] bridge_slave_1: left promiscuous mode [ 532.047972][T20414] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.057749][T24707] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 132) [ 532.057773][T24707] rust_binder: Error while translating object. [ 532.068573][T24707] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 532.074986][T24707] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:541 [ 532.075035][T20414] bridge_slave_0: left allmulticast mode [ 532.099329][T20414] bridge_slave_0: left promiscuous mode [ 532.105431][T20414] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.112490][ T10] rust_binder: 24702: removing orphan mapping 0:24 [ 532.231003][T20414] veth1_macvtap: left promiscuous mode [ 532.236644][T20414] veth0_vlan: left promiscuous mode [ 532.321494][T24701] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.328611][T24701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.335941][T24701] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.342986][T24701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.369660][T20410] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.378085][T20410] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.390631][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.397804][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.403968][T19810] Bluetooth: hci0: command 0x1003 tx timeout [ 532.411114][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.418111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.425213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.467842][T24701] veth0_vlan: entered promiscuous mode [ 532.480362][T24701] veth1_macvtap: entered promiscuous mode [ 532.575492][T24723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9181'. [ 532.705485][T20414] bridge_slave_1: left allmulticast mode [ 532.718763][T20414] bridge_slave_1: left promiscuous mode [ 532.729295][T20414] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.743856][T20414] bridge_slave_0: left allmulticast mode [ 532.757903][T20414] bridge_slave_0: left promiscuous mode [ 532.772824][T20414] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.828400][T24748] rust_binder: Read failure Err(EAGAIN) in pid:492 [ 532.889590][T24747] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.903264][T24747] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.910691][T24747] bridge_slave_0: entered allmulticast mode [ 532.917093][T24747] bridge_slave_0: entered promiscuous mode [ 532.923558][T24747] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.930661][T24747] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.937793][T24747] bridge_slave_1: entered allmulticast mode [ 532.944384][T24747] bridge_slave_1: entered promiscuous mode [ 532.951241][T20414] veth1_macvtap: left promiscuous mode [ 532.956799][T20414] veth0_vlan: left promiscuous mode [ 533.015983][T24753] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370 [ 533.047833][ T31] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 533.071775][T24747] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.078871][T24747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.086200][T24747] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.093273][T24747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.120375][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.126399][T20410] Bluetooth: hci0: Frame reassembly failed (-84) [ 533.134592][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.143700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.150777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.159720][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.166829][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.193415][T24747] veth0_vlan: entered promiscuous mode [ 533.204573][T24747] veth1_macvtap: entered promiscuous mode [ 533.224026][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 533.230606][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.240964][ T31] usb 4-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 533.251804][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.261637][ T31] usb 4-1: config 0 descriptor?? [ 533.653974][ T442] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 533.669976][ T31] wacom 0003:056A:0064.0041: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 533.680463][ T31] wacom 0003:056A:0064.0041: hidraw1: USB HID v0.00 Device [HID 056a:0064] on usb-dummy_hcd.3-1/input0 [ 533.692443][ T31] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0064.0041/input/input43 [ 533.814143][ T442] usb 6-1: Using ep0 maxpacket: 32 [ 533.820704][ T442] usb 6-1: config 1 has an invalid interface number: 152 but max is 0 [ 533.829082][ T442] usb 6-1: config 1 has no interface number 0 [ 533.835705][ T442] usb 6-1: config 1 interface 152 altsetting 3 endpoint 0xD has an invalid bInterval 64, changing to 7 [ 533.846993][ T442] usb 6-1: config 1 interface 152 has no altsetting 0 [ 533.855193][ T442] usb 6-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=d4.ef [ 533.864271][ T442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.872313][ T442] usb 6-1: Product: syz [ 533.876528][ T442] usb 6-1: Manufacturer: syz [ 533.881162][ T442] usb 6-1: SerialNumber: syz [ 533.915339][ T31] usb 4-1: USB disconnect, device number 41 [ 533.928968][T24775] 0ªö»ôM: renamed from gretap0 (while UP) [ 533.935685][T24775] 0ªö»ôM: entered allmulticast mode [ 533.941206][T24775] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 533.958507][T24775] rust_binder: Failed to allocate buffer. len:8815263377109862656, is_oneway:false [ 533.958531][T24775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 533.968050][T24775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:899 [ 534.059219][T24786] rust_binder: 24784 RLIMIT_NICE not set [ 534.073492][ T45] rust_binder: 0: removing orphan mapping 0:4248 [ 534.081653][T24789] fuse: Bad value for 'user_id' [ 534.090683][T24789] fuse: Bad value for 'user_id' [ 534.101712][T24789] overlayfs: missing 'lowerdir' [ 534.184296][T24771] rust_binder: Write failure EINVAL in pid:10 [ 534.246915][ T442] usbhid 6-1:1.152: couldn't find an input interrupt endpoint [ 534.261851][ T442] usb 6-1: USB disconnect, device number 7 [ 534.654037][T24796] __nla_validate_parse: 6 callbacks suppressed [ 534.654052][T24796] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9207'. [ 535.194043][T19810] Bluetooth: hci0: command 0x1003 tx timeout [ 535.200133][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 535.655688][ T36] audit: type=1400 audit(2000000017.590:1857): avc: denied { setattr } for pid=24820 comm="syz.5.9213" name="" dev="pipefs" ino=127781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 535.721364][T24821] rust_binder: Write failure EINVAL in pid:17 [ 535.802489][T24837] binder: Unknown parameter '0x0000000000000003' [ 535.910519][T24843] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9218'. [ 535.973997][T17572] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 536.133948][T17572] usb 10-1: Using ep0 maxpacket: 32 [ 536.144604][T17572] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 536.156683][T17572] usb 10-1: config 0 has no interface number 0 [ 536.167368][T17572] usb 10-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 536.184039][T17572] usb 10-1: config 0 interface 214 has no altsetting 0 [ 536.215329][T17572] usb 10-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 536.224573][T17572] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.232667][T17572] usb 10-1: Product: syz [ 536.237300][T17572] usb 10-1: Manufacturer: syz [ 536.242014][T17572] usb 10-1: SerialNumber: syz [ 536.254706][T17572] usb 10-1: config 0 descriptor?? [ 536.261833][T24835] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 536.364021][ T610] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 536.450658][ T36] audit: type=1400 audit(2000000018.380:1858): avc: denied { create } for pid=24852 comm="syz.5.9222" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 536.470155][T24834] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 536.491703][ T36] audit: type=1400 audit(2000000018.380:1859): avc: denied { associate } for pid=24852 comm="syz.5.9222" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 536.524983][ T610] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 536.544730][ T610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.564189][ T610] usb 4-1: config 0 descriptor?? [ 536.734571][T24860] FAULT_INJECTION: forcing a failure. [ 536.734571][T24860] name failslab, interval 1, probability 0, space 0, times 0 [ 536.758081][T24860] CPU: 1 UID: 0 PID: 24860 Comm: syz.9.9224 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 536.758115][T24860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.758130][T24860] Call Trace: [ 536.758138][T24860] [ 536.758146][T24860] __dump_stack+0x21/0x30 [ 536.758179][T24860] dump_stack_lvl+0x10c/0x190 [ 536.758205][T24860] ? __cfi_dump_stack_lvl+0x10/0x10 [ 536.758230][T24860] ? kstrtouint_from_user+0xfb/0x150 [ 536.758249][T24860] ? x64_sys_call+0xe69/0x2ee0 [ 536.758295][T24860] dump_stack+0x19/0x20 [ 536.758322][T24860] should_fail_ex+0x3d9/0x530 [ 536.758343][T24860] should_failslab+0xac/0x100 [ 536.758365][T24860] __kmalloc_noprof+0x69/0x450 [ 536.758394][T24860] ? __kasan_check_write+0x18/0x20 [ 536.758425][T24860] ? kernfs_fop_write_iter+0x16f/0x4d0 [ 536.758451][T24860] ? proc_fail_nth_write+0x17e/0x210 [ 536.758479][T24860] kernfs_fop_write_iter+0x16f/0x4d0 [ 536.758505][T24860] vfs_write+0x694/0xe80 [ 536.758523][T24860] ? __cfi_kernfs_fop_write_iter+0x10/0x10 [ 536.758549][T24860] ? __cfi_vfs_write+0x10/0x10 [ 536.758568][T24860] ? __cfi_mutex_lock+0x10/0x10 [ 536.758593][T24860] ksys_write+0x141/0x250 [ 536.758612][T24860] ? __cfi_ksys_write+0x10/0x10 [ 536.758631][T24860] ? __kasan_check_read+0x15/0x20 [ 536.758660][T24860] __x64_sys_write+0x7f/0x90 [ 536.758679][T24860] x64_sys_call+0x271c/0x2ee0 [ 536.758721][T24860] do_syscall_64+0x58/0xf0 [ 536.758749][T24860] ? clear_bhb_loop+0x50/0xa0 [ 536.758783][T24860] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 536.758807][T24860] RIP: 0033:0x7f7c7d58eba9 [ 536.758824][T24860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.758842][T24860] RSP: 002b:00007f7c7e370038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.758864][T24860] RAX: ffffffffffffffda RBX: 00007f7c7d7d5fa0 RCX: 00007f7c7d58eba9 [ 536.758879][T24860] RDX: 0000000000000012 RSI: 0000200000000180 RDI: 0000000000000006 [ 536.758893][T24860] RBP: 00007f7c7e370090 R08: 0000000000000000 R09: 0000000000000000 [ 536.758906][T24860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.758918][T24860] R13: 00007f7c7d7d6038 R14: 00007f7c7d7d5fa0 R15: 00007ffd4e406d98 [ 536.758935][T24860] [ 536.984400][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.054885][T24869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9228'. [ 537.232426][T24879] netlink: 'syz.5.9232': attribute type 11 has an invalid length. [ 537.245922][T24879] rust_binder: Error while translating object. [ 537.245961][T24879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 537.252315][T24879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:44 [ 537.262121][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 537.291226][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 537.302622][T24881] rust_binder: Write failure EFAULT in pid:46 [ 537.303116][ T36] audit: type=1400 audit(2000000019.230:1860): avc: denied { append } for pid=24880 comm="syz.5.9233" name="event1" dev="devtmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 537.314030][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 537.363415][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 537.401001][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 537.420004][T24889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9236'. [ 537.434181][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.454214][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.477775][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.489200][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.500506][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 537.514651][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.531068][T24896] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9239'. [ 537.534201][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 537.564164][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 537.584187][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 537.595764][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 537.609449][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 537.624192][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 537.639898][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 537.664247][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 537.688682][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 537.700272][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 537.714963][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 537.727300][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 537.738697][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 537.750162][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 537.761785][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 537.775431][T17572] ax88179_178a 10-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 537.779692][T24908] 9pnet: Could not find request transport: xen [ 537.791708][T17572] ax88179_178a 10-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 2e:17:a1:bd:f6:0e [ 537.827041][T17572] usb 10-1: USB disconnect, device number 20 [ 537.839068][T17572] ax88179_178a 10-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.9-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 538.040688][T24925] rust_binder: 67: no such ref 3 [ 538.291932][T24949] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9249'. [ 538.311992][ T610] usb 4-1: Cannot set autoneg [ 538.316848][ T610] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 538.341565][ T610] usb 4-1: USB disconnect, device number 42 [ 538.511959][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9255'. [ 538.609243][T24971] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9258'. [ 538.644198][T20410] Bluetooth: hci0: Frame reassembly failed (-84) [ 538.678970][T24973] fuse: Invalid rootmode [ 539.081997][T24981] fuseblk: Bad value for 'blksize' [ 539.197574][T24985] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß) failed with errno=-22 [ 539.346354][T24824] syz.3.9212 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 539.357831][T24824] CPU: 0 UID: 0 PID: 24824 Comm: syz.3.9212 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 539.357865][T24824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 539.357898][T24824] Call Trace: [ 539.357906][T24824] [ 539.357921][T24824] __dump_stack+0x21/0x30 [ 539.357957][T24824] dump_stack_lvl+0x10c/0x190 [ 539.357993][T24824] ? __cfi_dump_stack_lvl+0x10/0x10 [ 539.358022][T24824] ? ___ratelimit+0x3f7/0x5a0 [ 539.358047][T24824] dump_stack+0x19/0x20 [ 539.358087][T24824] dump_header+0xd7/0x490 [ 539.358110][T24824] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 539.358139][T24824] oom_kill_process+0x4c0/0x7e0 [ 539.358165][T24824] ? sched_clock_cpu+0x75/0x400 [ 539.358193][T24824] out_of_memory+0x7ee/0xbd0 [ 539.358217][T24824] ? __cfi_out_of_memory+0x10/0x10 [ 539.358241][T24824] ? mutex_lock_killable+0x92/0x1c0 [ 539.358266][T24824] ? __cfi_mutex_lock_killable+0x10/0x10 [ 539.358292][T24824] mem_cgroup_out_of_memory+0x279/0x350 [ 539.358313][T24824] ? drain_obj_stock+0xed0/0xed0 [ 539.358336][T24824] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 539.358357][T24824] try_charge_memcg+0x8f7/0xde0 [ 539.358386][T24824] ? __cfi_try_charge_memcg+0x10/0x10 [ 539.358414][T24824] ? __alloc_pages_noprof+0x31f/0x7b0 [ 539.358442][T24824] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 539.358466][T24824] ? __folio_batch_add_and_move+0x2ab/0x370 [ 539.358489][T24824] __mem_cgroup_charge+0xf6/0x410 [ 539.358518][T24824] ? _raw_spin_lock+0x8c/0x120 [ 539.358545][T24824] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 539.358573][T24824] shmem_alloc_and_add_folio+0x86d/0x1050 [ 539.358599][T24824] ? put_swap_device+0x130/0x130 [ 539.358621][T24824] ? shmem_huge_global_enabled+0x2da/0x360 [ 539.358642][T24824] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 539.358664][T24824] ? __kasan_check_write+0x18/0x20 [ 539.358686][T24824] ? _raw_spin_lock+0x8c/0x120 [ 539.358708][T24824] shmem_get_folio_gfp+0x5f0/0x1380 [ 539.358726][T24824] ? shmem_get_folio+0xc0/0xc0 [ 539.358740][T24824] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 539.358768][T24824] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 539.358790][T24824] ? inode_to_bdi+0x6d/0x100 [ 539.358811][T24824] shmem_write_begin+0xf4/0x270 [ 539.358829][T24824] generic_perform_write+0x32d/0x960 [ 539.358852][T24824] ? __cfi_generic_perform_write+0x10/0x10 [ 539.358873][T24824] ? down_write+0xe9/0x2a0 [ 539.358892][T24824] ? mnt_get_write_access_file+0x1af/0x3b0 [ 539.358912][T24824] ? mnt_put_write_access_file+0xc2/0x100 [ 539.358932][T24824] ? file_update_time+0x1ef/0x220 [ 539.358952][T24824] shmem_file_write_iter+0x105/0x130 [ 539.358972][T24824] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 539.358991][T24824] __kernel_write_iter+0x395/0x830 [ 539.359006][T24824] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 539.359026][T24824] ? __cfi___kernel_write_iter+0x10/0x10 [ 539.359039][T24824] ? get_dump_page+0x160/0x220 [ 539.359058][T24824] ? __asan_memset+0x39/0x50 [ 539.359079][T24824] ? iov_iter_bvec+0xc0/0x180 [ 539.359098][T24824] dump_user_range+0xb06/0xdf0 [ 539.359113][T24824] ? __cfi_dump_emit+0x10/0x10 [ 539.359136][T24824] ? __cfi_dump_user_range+0x10/0x10 [ 539.359150][T24824] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 539.359173][T24824] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 539.359197][T24824] elf_core_dump+0x2cd9/0x3810 [ 539.359218][T24824] ? __cfi_elf_core_dump+0x10/0x10 [ 539.359241][T24824] ? dump_interrupted+0xf0/0xf0 [ 539.359263][T24824] ? filp_open+0x182/0x1d0 [ 539.359283][T24824] ? 0xffffffffff600000 [ 539.359296][T24824] do_coredump+0x1bfa/0x2bd0 [ 539.359322][T24824] ? __cfi_do_coredump+0x10/0x10 [ 539.359344][T24824] ? asm_exc_page_fault+0x2b/0x30 [ 539.359369][T24824] ? __kasan_slab_free+0x6a/0x80 [ 539.359396][T24824] ? kmem_cache_free+0x1c1/0x510 [ 539.359418][T24824] ? get_signal+0xa75/0x14f0 [ 539.359436][T24824] get_signal+0x11fd/0x14f0 [ 539.359475][T24824] arch_do_signal_or_restart+0x96/0x720 [ 539.359498][T24824] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 539.359529][T24824] irqentry_exit_to_user_mode+0x4e/0xb0 [ 539.359550][T24824] irqentry_exit+0x16/0x60 [ 539.359586][T24824] exc_page_fault+0x66/0xc0 [ 539.359605][T24824] asm_exc_page_fault+0x2b/0x30 [ 539.359622][T24824] RIP: 0033:0x7f1f9e04f927 [ 539.359635][T24824] Code: 88 15 d2 5d eb 00 88 05 cf 5d eb 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 539.359649][T24824] RSP: 002b:00007f1f9ef84120 EFLAGS: 00010202 [ 539.359671][T24824] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1f9e18eba9 [ 539.359687][T24824] RDX: 00007f1f9ef84140 RSI: 00007f1f9ef84270 RDI: 000000000000000b [ 539.359703][T24824] RBP: 00007f1f9e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 539.359717][T24824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 539.359730][T24824] R13: 00007f1f9e3d6128 R14: 00007f1f9e3d6090 R15: 00007fff3ca737e8 [ 539.359753][T24824] [ 539.359767][T24824] memory: usage 307200kB, limit 307200kB, failcnt 19834 [ 539.843795][T24824] memory+swap: usage 432108kB, limit 9007199254740988kB, failcnt 0 [ 539.854240][T24824] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 539.861125][T24824] Memory cgroup stats for /syz3: [ 539.861256][T24824] cache 314216448 [ 539.869989][T24824] rss 303104 [ 539.873203][T24824] rss_huge 0 [ 539.876457][T24824] shmem 314216448 [ 539.880109][T24824] mapped_file 0 [ 539.883577][T24824] dirty 0 [ 539.886656][T24824] writeback 0 [ 539.889947][T24824] workingset_refault_anon 4591 [ 539.894790][T24824] workingset_refault_file 0 [ 539.899300][T24824] swap 127905792 [ 539.902853][T24824] swapcached 90112 [ 539.906616][T24824] pgpgin 319938 [ 539.910095][T24824] pgpgout 243138 [ 539.913658][T24824] pgfault 141802 [ 539.917252][T24824] pgmajfault 609 [ 539.920809][T24824] inactive_anon 142295040 [ 539.925183][T24824] active_anon 172277760 [ 539.929343][T24824] inactive_file 0 [ 539.932981][T24824] active_file 0 [ 539.936483][T24824] unevictable 0 [ 539.939958][T24824] hierarchical_memory_limit 314572800 [ 539.945371][T24824] hierarchical_memsw_limit 9223372036854771712 [ 539.951526][T24824] total_cache 314216448 [ 539.955725][T24824] total_rss 303104 [ 539.959494][T24824] total_rss_huge 0 [ 539.963227][T24824] total_shmem 314216448 [ 539.967423][T24824] total_mapped_file 0 [ 539.971421][T24824] total_dirty 0 [ 539.974933][T24824] total_writeback 0 [ 539.978746][T24824] total_workingset_refault_anon 4591 [ 539.984082][T24824] total_workingset_refault_file 0 [ 539.989111][T24824] total_swap 127905792 [ 539.993187][T24824] total_swapcached 90112 [ 539.998589][T24824] total_pgpgin 319938 [ 540.002603][T24824] total_pgpgout 243138 [ 540.006704][T24824] total_pgfault 141802 [ 540.010787][T24824] total_pgmajfault 609 [ 540.014901][T24824] total_inactive_anon 142295040 [ 540.019757][T24824] total_active_anon 172277760 [ 540.024489][T24824] total_inactive_file 0 [ 540.028650][T24824] total_active_file 0 [ 540.032639][T24824] total_unevictable 0 [ 540.036669][T24824] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9212,pid=24828,uid=0 [ 540.051685][T24824] Memory cgroup out of memory: Killed process 24828 (syz.3.9212) total-vm:90232kB, anon-rss:1080kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 540.082956][T25010] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 540.082995][T25010] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 540.207161][T24818] syz.3.9212 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 540.293961][T24818] CPU: 0 UID: 0 PID: 24818 Comm: syz.3.9212 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 540.294025][T24818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.294038][T24818] Call Trace: [ 540.294045][T24818] [ 540.294054][T24818] __dump_stack+0x21/0x30 [ 540.294084][T24818] dump_stack_lvl+0x10c/0x190 [ 540.294110][T24818] ? __cfi_dump_stack_lvl+0x10/0x10 [ 540.294135][T24818] ? ___ratelimit+0x3f7/0x5a0 [ 540.294155][T24818] dump_stack+0x19/0x20 [ 540.294183][T24818] dump_header+0xd7/0x490 [ 540.294203][T24818] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 540.294229][T24818] oom_kill_process+0x4c0/0x7e0 [ 540.294251][T24818] ? sched_clock_cpu+0x75/0x400 [ 540.294277][T24818] out_of_memory+0x7ee/0xbd0 [ 540.294298][T24818] ? __cfi_out_of_memory+0x10/0x10 [ 540.294319][T24818] ? mutex_lock_killable+0x92/0x1c0 [ 540.294340][T24818] ? __cfi_mutex_lock_killable+0x10/0x10 [ 540.294364][T24818] mem_cgroup_out_of_memory+0x279/0x350 [ 540.294383][T24818] ? drain_obj_stock+0xed0/0xed0 [ 540.294402][T24818] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 540.294420][T24818] try_charge_memcg+0x8f7/0xde0 [ 540.294446][T24818] ? __cfi_try_charge_memcg+0x10/0x10 [ 540.294470][T24818] ? __alloc_pages_noprof+0x31f/0x7b0 [ 540.294494][T24818] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 540.294517][T24818] ? __folio_batch_add_and_move+0x2ab/0x370 [ 540.294541][T24818] __mem_cgroup_charge+0xf6/0x410 [ 540.294568][T24818] ? _raw_spin_lock+0x8c/0x120 [ 540.294595][T24818] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 540.294623][T24818] shmem_alloc_and_add_folio+0x86d/0x1050 [ 540.294648][T24818] ? put_swap_device+0x130/0x130 [ 540.294669][T24818] ? shmem_huge_global_enabled+0x2da/0x360 [ 540.294696][T24818] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 540.294718][T24818] ? __kasan_check_write+0x18/0x20 [ 540.294747][T24818] ? _raw_spin_lock+0x8c/0x120 [ 540.294775][T24818] shmem_get_folio_gfp+0x5f0/0x1380 [ 540.294798][T24818] ? shmem_get_folio+0xc0/0xc0 [ 540.294816][T24818] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 540.294843][T24818] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 540.294869][T24818] ? inode_to_bdi+0x6d/0x100 [ 540.294894][T24818] shmem_write_begin+0xf4/0x270 [ 540.294917][T24818] generic_perform_write+0x32d/0x960 [ 540.294945][T24818] ? __cfi_generic_perform_write+0x10/0x10 [ 540.294971][T24818] ? down_write+0xe9/0x2a0 [ 540.294994][T24818] ? mnt_get_write_access_file+0x1af/0x3b0 [ 540.295018][T24818] ? mnt_put_write_access_file+0xc2/0x100 [ 540.295042][T24818] ? file_update_time+0x1ef/0x220 [ 540.295067][T24818] shmem_file_write_iter+0x105/0x130 [ 540.295092][T24818] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.295116][T24818] __kernel_write_iter+0x395/0x830 [ 540.295134][T24818] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 540.295168][T24818] ? __cfi___kernel_write_iter+0x10/0x10 [ 540.295192][T24818] ? get_dump_page+0x160/0x220 [ 540.295218][T24818] ? __asan_memset+0x39/0x50 [ 540.295246][T24818] ? iov_iter_bvec+0xc0/0x180 [ 540.295270][T24818] dump_user_range+0xb06/0xdf0 [ 540.295290][T24818] ? __cfi_dump_emit+0x10/0x10 [ 540.295321][T24818] ? __cfi_dump_user_range+0x10/0x10 [ 540.295340][T24818] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 540.295370][T24818] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 540.295400][T24818] elf_core_dump+0x2cd9/0x3810 [ 540.295426][T24818] ? __cfi_elf_core_dump+0x10/0x10 [ 540.295475][T24818] ? dump_interrupted+0xf0/0xf0 [ 540.295504][T24818] ? filp_open+0x182/0x1d0 [ 540.295530][T24818] ? 0xffffffffff600000 [ 540.295548][T24818] do_coredump+0x1bfa/0x2bd0 [ 540.295580][T24818] ? __cfi_do_coredump+0x10/0x10 [ 540.295611][T24818] ? asm_exc_page_fault+0x2b/0x30 [ 540.295642][T24818] ? __kasan_slab_free+0x6a/0x80 [ 540.295663][T24818] ? kmem_cache_free+0x1c1/0x510 [ 540.295700][T24818] ? get_signal+0xa75/0x14f0 [ 540.295727][T24818] get_signal+0x11fd/0x14f0 [ 540.295756][T24818] arch_do_signal_or_restart+0x96/0x720 [ 540.295789][T24818] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 540.295826][T24818] irqentry_exit_to_user_mode+0x4e/0xb0 [ 540.295854][T24818] irqentry_exit+0x16/0x60 [ 540.295877][T24818] exc_page_fault+0x66/0xc0 [ 540.295902][T24818] asm_exc_page_fault+0x2b/0x30 [ 540.295925][T24818] RIP: 0033:0x7f1f9e04f927 [ 540.295942][T24818] Code: 88 15 d2 5d eb 00 88 05 cf 5d eb 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 540.295960][T24818] RSP: 002b:00007f1f9ef84120 EFLAGS: 00010202 [ 540.295980][T24818] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1f9e18eba9 [ 540.295995][T24818] RDX: 00007f1f9ef84140 RSI: 00007f1f9ef84270 RDI: 000000000000000b [ 540.296009][T24818] RBP: 00007f1f9e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 540.296021][T24818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.296033][T24818] R13: 00007f1f9e3d6128 R14: 00007f1f9e3d6090 R15: 00007fff3ca737e8 [ 540.296051][T24818] [ 540.296060][T24818] memory: usage 278172kB, limit 307200kB, failcnt 21141 [ 540.724014][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 540.737208][T24818] memory+swap: usage 417652kB, limit 9007199254740988kB, failcnt 0 [ 540.747794][T19810] Bluetooth: hci0: command 0x1003 tx timeout [ 540.758667][T24818] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 540.806022][T25015] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 540.833769][T24818] Memory cgroup stats for /syz3: [ 540.840398][T24818] cache 314359808 [ 540.849056][T24818] rss 69632 [ 540.852181][T24818] rss_huge 0 [ 540.855395][T24818] shmem 314359808 [ 540.859036][T24818] mapped_file 0 [ 540.862480][T24818] dirty 0 [ 540.865479][T24818] writeback 0 [ 540.868780][T24818] workingset_refault_anon 4597 [ 540.873578][T24818] workingset_refault_file 0 [ 540.878158][T24818] swap 127823872 [ 540.881789][T24818] swapcached 163840 [ 540.885633][T24818] pgpgin 331155 [ 540.889097][T24818] pgpgout 254355 [ 540.892665][T24818] pgfault 142004 [ 540.896230][T24818] pgmajfault 611 [ 540.899872][T24818] inactive_anon 42647552 [ 540.904136][T24818] active_anon 271925248 [ 540.908289][T24818] inactive_file 0 [ 540.911910][T24818] active_file 0 [ 540.915576][T24818] unevictable 0 [ 540.919052][T24818] hierarchical_memory_limit 314572800 [ 540.924487][T24818] hierarchical_memsw_limit 9223372036854771712 [ 540.930650][T24818] total_cache 314359808 [ 540.934852][T24818] total_rss 69632 [ 540.938491][T24818] total_rss_huge 0 [ 540.942197][T24818] total_shmem 314359808 [ 540.946389][T24818] total_mapped_file 0 [ 540.950372][T24818] total_dirty 0 [ 540.953818][T24818] total_writeback 0 [ 540.957684][T24818] total_workingset_refault_anon 4597 [ 540.962976][T24818] total_workingset_refault_file 0 [ 540.968072][T24818] total_swap 127823872 [ 540.972147][T24818] total_swapcached 163840 [ 540.976509][T24818] total_pgpgin 331155 [ 540.980508][T24818] total_pgpgout 254355 [ 540.984735][T24818] total_pgfault 142004 [ 540.988830][T24818] total_pgmajfault 611 [ 540.992913][T24818] total_inactive_anon 42647552 [ 540.997712][T24818] total_active_anon 271925248 [ 541.002395][T24818] total_inactive_file 0 [ 541.006586][T24818] total_active_file 0 [ 541.010579][T24818] total_unevictable 0 [ 541.014593][T24818] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9212,pid=24825,uid=0 [ 541.029561][T24818] Memory cgroup out of memory: Killed process 24825 (syz.3.9212) total-vm:90232kB, anon-rss:1080kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 541.055024][T17572] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 541.069768][T24827] syz.3.9212 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 541.123960][T24827] CPU: 1 UID: 0 PID: 24827 Comm: syz.3.9212 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 541.123994][T24827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 541.124007][T24827] Call Trace: [ 541.124014][T24827] [ 541.124022][T24827] __dump_stack+0x21/0x30 [ 541.124054][T24827] dump_stack_lvl+0x10c/0x190 [ 541.124079][T24827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 541.124105][T24827] ? ___ratelimit+0x3f7/0x5a0 [ 541.124127][T24827] dump_stack+0x19/0x20 [ 541.124153][T24827] dump_header+0xd7/0x490 [ 541.124173][T24827] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 541.124199][T24827] oom_kill_process+0x4c0/0x7e0 [ 541.124222][T24827] ? sched_clock_cpu+0x75/0x400 [ 541.124249][T24827] out_of_memory+0x7ee/0xbd0 [ 541.124272][T24827] ? __cfi_out_of_memory+0x10/0x10 [ 541.124294][T24827] ? mutex_lock_killable+0x104/0x1c0 [ 541.124318][T24827] ? __cfi_mutex_lock_killable+0x10/0x10 [ 541.124352][T24827] mem_cgroup_out_of_memory+0x279/0x350 [ 541.124391][T24827] ? drain_obj_stock+0xed0/0xed0 [ 541.124413][T24827] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 541.124432][T24827] try_charge_memcg+0x8f7/0xde0 [ 541.124460][T24827] ? __cfi_try_charge_memcg+0x10/0x10 [ 541.124489][T24827] ? __alloc_pages_noprof+0x31f/0x7b0 [ 541.124517][T24827] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 541.124545][T24827] ? __folio_batch_add_and_move+0x2ab/0x370 [ 541.124571][T24827] __mem_cgroup_charge+0xf6/0x410 [ 541.124600][T24827] ? _raw_spin_lock+0x8c/0x120 [ 541.124630][T24827] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 541.124662][T24827] shmem_alloc_and_add_folio+0x86d/0x1050 [ 541.124688][T24827] ? put_swap_device+0x130/0x130 [ 541.124711][T24827] ? shmem_huge_global_enabled+0x2da/0x360 [ 541.124733][T24827] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 541.124756][T24827] ? __kasan_check_write+0x18/0x20 [ 541.124784][T24827] ? _raw_spin_lock+0x8c/0x120 [ 541.124813][T24827] shmem_get_folio_gfp+0x5f0/0x1380 [ 541.124848][T24827] ? shmem_get_folio+0xc0/0xc0 [ 541.124867][T24827] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 541.124893][T24827] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 541.124919][T24827] ? inode_to_bdi+0x6d/0x100 [ 541.124944][T24827] shmem_write_begin+0xf4/0x270 [ 541.124966][T24827] generic_perform_write+0x32d/0x960 [ 541.124997][T24827] ? __cfi_generic_perform_write+0x10/0x10 [ 541.125023][T24827] ? down_write+0xe9/0x2a0 [ 541.125045][T24827] ? mnt_get_write_access_file+0x1af/0x3b0 [ 541.125069][T24827] ? mnt_put_write_access_file+0xc2/0x100 [ 541.125093][T24827] ? file_update_time+0x1ef/0x220 [ 541.125117][T24827] shmem_file_write_iter+0x105/0x130 [ 541.125142][T24827] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 541.125167][T24827] __kernel_write_iter+0x395/0x830 [ 541.125185][T24827] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 541.125210][T24827] ? __cfi___kernel_write_iter+0x10/0x10 [ 541.125227][T24827] ? get_dump_page+0x160/0x220 [ 541.125250][T24827] ? __asan_memset+0x39/0x50 [ 541.125276][T24827] ? iov_iter_bvec+0xc0/0x180 [ 541.125299][T24827] dump_user_range+0xb06/0xdf0 [ 541.125319][T24827] ? __cfi_dump_emit+0x10/0x10 [ 541.125388][T24827] ? __cfi_dump_user_range+0x10/0x10 [ 541.125412][T24827] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 541.125442][T24827] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 541.125472][T24827] elf_core_dump+0x2cd9/0x3810 [ 541.125499][T24827] ? __cfi_elf_core_dump+0x10/0x10 [ 541.125528][T24827] ? dump_interrupted+0xf0/0xf0 [ 541.125556][T24827] ? filp_open+0x182/0x1d0 [ 541.125581][T24827] ? 0xffffffffff600000 [ 541.125598][T24827] do_coredump+0x1bfa/0x2bd0 [ 541.125630][T24827] ? __cfi_do_coredump+0x10/0x10 [ 541.125659][T24827] ? asm_exc_page_fault+0x2b/0x30 [ 541.125691][T24827] ? __kasan_slab_free+0x6a/0x80 [ 541.125712][T24827] ? kmem_cache_free+0x1c1/0x510 [ 541.125742][T24827] ? get_signal+0xa75/0x14f0 [ 541.125767][T24827] get_signal+0x11fd/0x14f0 [ 541.125794][T24827] arch_do_signal_or_restart+0x96/0x720 [ 541.125825][T24827] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 541.125858][T24827] irqentry_exit_to_user_mode+0x4e/0xb0 [ 541.125884][T24827] irqentry_exit+0x16/0x60 [ 541.125908][T24827] exc_page_fault+0x66/0xc0 [ 541.125931][T24827] asm_exc_page_fault+0x2b/0x30 [ 541.125954][T24827] RIP: 0033:0x7f1f9e04f927 [ 541.125971][T24827] Code: 88 15 d2 5d eb 00 88 05 cf 5d eb 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 541.125990][T24827] RSP: 002b:00007f1f9ef84120 EFLAGS: 00010202 [ 541.126008][T24827] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1f9e18eba9 [ 541.126023][T24827] RDX: 00007f1f9ef84140 RSI: 00007f1f9ef84270 RDI: 000000000000000b [ 541.126037][T24827] RBP: 00007f1f9e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 541.126051][T24827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.126064][T24827] R13: 00007f1f9e3d6128 R14: 00007f1f9e3d6090 R15: 00007fff3ca737e8 [ 541.126082][T24827] [ 541.126091][T24827] memory: usage 300168kB, limit 307200kB, failcnt 21539 [ 541.215099][T17572] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.283838][T24827] memory+swap: usage 412400kB, limit 9007199254740988kB, failcnt 0 [ 541.313953][T17572] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 541.470597][T25023] binder: Unknown parameter 'contextÀ' [ 541.481249][T24827] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 541.656866][T17572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.665485][T24827] Memory cgroup stats for /syz3: [ 541.665633][T24827] cache 286269440 [ 541.680090][T17572] usb 6-1: config 0 descriptor?? [ 541.703374][T24827] rss 335872 [ 541.706778][T24827] rss_huge 0 [ 541.710012][T24827] shmem 286269440 [ 541.713719][T24827] mapped_file 0 [ 541.717393][T24827] dirty 0 [ 541.720356][T24827] writeback 0 [ 541.723780][T24827] workingset_refault_anon 4667 [ 541.728964][T24827] workingset_refault_file 0 [ 541.733489][T24827] swap 127819776 [ 541.739905][T24827] swapcached 176128 [ 541.743741][T24827] pgpgin 337443 [ 541.750402][T24827] pgpgout 267452 [ 541.755898][T24827] pgfault 142198 [ 541.759502][T24827] pgmajfault 634 [ 541.768496][T24827] inactive_anon 243474432 [ 541.793995][T24827] active_anon 43208704 [ 541.800255][T24827] inactive_file 0 [ 541.804036][T24827] active_file 0 [ 541.807627][T24827] unevictable 0 [ 541.810390][ T36] audit: type=1400 audit(2000000023.740:1861): avc: denied { read write } for pid=22496 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.811114][T24827] hierarchical_memory_limit 314572800 [ 541.852317][T24827] hierarchical_memsw_limit 9223372036854771712 [ 541.868164][T24827] total_cache 286269440 [ 541.872835][T24827] total_rss 335872 [ 541.872832][ T36] audit: type=1400 audit(2000000023.770:1862): avc: denied { open } for pid=22496 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.872863][ T36] audit: type=1400 audit(2000000023.770:1863): avc: denied { ioctl } for pid=22496 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 541.883964][T24827] total_rss_huge 0 [ 541.944412][T17572] sony 0003:054C:024B.0042: hiddev96,hidraw1: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.5-1/input0 [ 541.947513][ T36] audit: type=1400 audit(2000000023.860:1864): avc: denied { ioctl } for pid=25013 comm="syz.5.9273" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 541.958509][T17572] sony 0003:054C:024B.0042: failed to claim input [ 541.990918][T25043] kernel profiling enabled (shift: 11) [ 542.008599][ T36] audit: type=1400 audit(2000000023.920:1865): avc: denied { read } for pid=25041 comm="syz.9.9282" name="binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 542.023944][T24827] total_shmem 286269440 [ 542.036769][ T36] audit: type=1400 audit(2000000023.920:1866): avc: denied { open } for pid=25041 comm="syz.9.9282" path="/dev/binderfs/binder1" dev="binder" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 542.054374][T24827] total_mapped_file 0 [ 542.065656][T25044] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:600 [ 542.066073][T24827] total_dirty 0 [ 542.071113][ T36] audit: type=1400 audit(2000000024.000:1867): avc: denied { ioctl } for pid=25041 comm="syz.9.9282" path="/dev/binderfs/binder1" dev="binder" ino=32 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 542.101203][T24827] total_writeback 0 [ 542.112419][T24827] total_workingset_refault_anon 4667 [ 542.118429][ T36] audit: type=1400 audit(2000000024.050:1868): avc: denied { read write } for pid=25045 comm="syz.9.9283" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.119156][T24827] total_workingset_refault_file 0 [ 542.152074][ T36] audit: type=1400 audit(2000000024.050:1869): avc: denied { open } for pid=25045 comm="syz.9.9283" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.173940][T24827] total_swap 127819776 [ 542.183959][ T36] audit: type=1400 audit(2000000024.080:1870): avc: denied { ioctl } for pid=25045 comm="syz.9.9283" path="/dev/usbmon8" dev="devtmpfs" ino=115 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.213689][T24827] total_swapcached 176128 [ 542.218427][T24827] total_pgpgin 337443 [ 542.226889][T24827] total_pgpgout 267452 [ 542.231038][T24827] total_pgfault 142198 [ 542.235453][T24827] total_pgmajfault 634 [ 542.239652][T24827] total_inactive_anon 243474432 [ 542.244711][T24827] total_active_anon 43208704 [ 542.249350][T24827] total_inactive_file 0 [ 542.254253][T24827] total_active_file 0 [ 542.258256][T24827] total_unevictable 0 [ 542.262245][T24827] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.9212,pid=24819,uid=0 [ 542.278000][T24827] Memory cgroup out of memory: Killed process 24819 (syz.3.9212) total-vm:90100kB, anon-rss:1076kB, file-rss:58524kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 542.283057][T25014] rust_binder: 25014 RLIMIT_NICE not set [ 542.307592][T25046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27622 sclass=netlink_route_socket pid=25046 comm=syz.9.9283 [ 542.334343][T25046] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9283'. [ 542.430029][T25056] netlink: 220 bytes leftover after parsing attributes in process `syz.9.9287'. [ 542.484883][T25060] overlayfs: missing 'lowerdir' [ 542.783955][ T31] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 542.839651][T25065] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 542.883938][T25065] overlayfs: missing 'lowerdir' [ 542.935058][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.946294][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.959640][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.983982][ T31] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.993335][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.006122][ T31] usb 10-1: config 0 descriptor?? [ 543.012315][ T31] hub 10-1:0.0: USB hub found [ 543.213042][ T31] hub 10-1:0.0: 14 ports detected [ 543.218387][ T31] hub 10-1:0.0: insufficient power available to use all downstream ports [ 543.283967][ T442] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 543.414264][ T31] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 543.426353][ T31] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 543.436760][ T442] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.456671][ T442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.469033][ T31] usb 10-1: USB disconnect, device number 21 [ 543.485945][ T442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.495830][ T442] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.508897][ T442] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.518393][ T442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.530536][ T442] usb 4-1: config 0 descriptor?? [ 543.772923][ T31] usb 6-1: USB disconnect, device number 8 [ 543.773700][T17572] rust_binder: 25013: removing orphan mapping 0:1192 [ 543.850398][T25072] rust_binder: Error in use_page_slow: ESRCH [ 543.850425][T25072] rust_binder: use_range failure ESRCH [ 543.856549][T25072] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 543.862032][T25072] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 543.870032][T25072] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:131 [ 543.879546][T25072] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 543.922443][T25075] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 543.922463][T25075] rust_binder: Read failure Err(EFAULT) in pid:135 [ 543.931323][T25075] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 543.938215][T25075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:135 [ 543.942481][ T442] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 543.964603][ T442] plantronics 0003:047F:FFFF.0043: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 543.988966][T25079] rust_binder: Error while translating object. [ 543.989016][T25079] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 543.998912][T25079] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:138 [ 544.096992][T25089] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9298'. [ 544.144258][T25091] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 544.153541][T25091] overlayfs: missing 'lowerdir' [ 544.225204][T25095] rust_binder: 149: no such ref 4 [ 544.230287][T25095] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:149 [ 544.596820][T25102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.624139][T25102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.826013][T25104] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 544.890657][T25105] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 545.128729][T25110] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 545.248624][T25116] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9307'. [ 545.683797][T25129] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9313'. [ 545.713992][ T610] usb 4-1: reset high-speed USB device number 43 using dummy_hcd [ 545.725827][T25129] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 545.725958][T25129] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161 [ 545.789773][T25132] rust_binder: 164: no such ref 3 [ 545.804487][T25132] rust_binder: 164: no such ref 2 [ 545.809556][T25132] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164 [ 545.823091][T25136] random: crng reseeded on system resumption [ 545.938008][T25148] binder: Bad value for 'defcontext' [ 545.975547][T25153] netlink: 'syz.5.9321': attribute type 27 has an invalid length. [ 545.977311][T25155] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 545.993425][T25157] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 546.028062][T25160] tipc: Started in network mode [ 546.053513][T25160] tipc: Node identity ac14140f, cluster identity 4711 [ 546.054162][T25163] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 546.060927][T25160] tipc: New replicast peer: 255.255.255.255 [ 546.074994][T25160] tipc: Enabled bearer , priority 10 [ 546.095447][T25166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=25166 comm=syz.3.9324 [ 546.152371][T25174] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 546.153215][T25172] /dev/rnullb0: Can't open blockdev [ 546.165949][T25175] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 546.186157][T25175] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 546.214780][T25179] can0: slcan on ptm0. [ 546.215112][T25174] netlink: 'syz.3.9327': attribute type 4 has an invalid length. [ 546.227235][T25174] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.9327'. [ 546.424805][ T603] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 546.456374][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 546.585050][ T603] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.595353][ T603] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 546.614713][ T603] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 546.623860][ T603] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.644051][ T603] usb 10-1: SerialNumber: syz [ 546.650701][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 546.674624][ T9] usb 6-1: can't read configurations, error -71 [ 546.684610][T25178] can0 (unregistered): slcan off ptm0. [ 546.817473][T17572] usb 4-1: USB disconnect, device number 43 [ 546.929111][T25212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.937656][T25213] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 546.945000][T25212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.961523][ T36] kauditd_printk_skb: 105 callbacks suppressed [ 546.961539][ T36] audit: type=1400 audit(2000000028.890:1976): avc: denied { remount } for pid=25218 comm="syz.3.9332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 546.974020][T25219] SELinux: security_context_str_to_sid (sytem_uÝGй ‰:ÿß_recursive) failed with errno=-22 [ 547.038874][ T36] audit: type=1400 audit(2000000028.970:1977): avc: denied { connect } for pid=25222 comm="syz.3.9333" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.076432][ T36] audit: type=1400 audit(2000000028.970:1978): avc: denied { write } for pid=25222 comm="syz.3.9333" laddr=fe80::13 lport=60 faddr=fe80::bb fport=19970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.110015][ T36] audit: type=1400 audit(2000000029.040:1979): avc: denied { map } for pid=25228 comm="syz.3.9334" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.157216][ T36] audit: type=1400 audit(2000000029.040:1980): avc: denied { execute } for pid=25228 comm="syz.3.9334" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.213949][T17572] tipc: Node number set to 2886997007 [ 547.248449][T25243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.267458][T25243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.345627][ T36] audit: type=1400 audit(2000000029.280:1981): avc: denied { setopt } for pid=25250 comm="syz.5.9338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.368306][ T36] audit: type=1400 audit(2000000029.300:1982): avc: denied { ioctl } for pid=25250 comm="syz.5.9338" path="socket:[131167]" dev="sockfs" ino=131167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.399143][ T36] audit: type=1400 audit(2000000029.300:1983): avc: denied { sys_module } for pid=25250 comm="syz.5.9338" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 547.423482][ T36] audit: type=1400 audit(2000000029.300:1984): avc: denied { getopt } for pid=25250 comm="syz.5.9338" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 547.444044][ T36] audit: type=1400 audit(2000000029.300:1985): avc: denied { read } for pid=25250 comm="syz.5.9338" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 548.196090][T25256] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.214055][T25256] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.221262][T25256] bridge_slave_0: entered allmulticast mode [ 548.234466][T25256] bridge_slave_0: entered promiscuous mode [ 548.251312][T25256] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.263960][T25256] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.281245][T25256] bridge_slave_1: entered allmulticast mode [ 548.288051][T25256] bridge_slave_1: entered promiscuous mode [ 548.303966][ T442] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 548.431089][T25256] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.438209][T25256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.445536][T25256] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.452574][T25256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.494020][ T442] usb 4-1: Using ep0 maxpacket: 16 [ 548.500362][ T442] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 548.526570][ T442] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.538628][T20414] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.547274][ T442] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.557369][T20414] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.571918][ T442] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 548.585120][ T442] usb 4-1: config 7 interface 0 has no altsetting 0 [ 548.591824][ T442] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 548.603844][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.610913][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.618766][ T442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.620609][T20414] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.628654][T20414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.711174][T25256] veth0_vlan: entered promiscuous mode [ 548.739908][T25256] veth1_macvtap: entered promiscuous mode [ 549.159963][ T603] usb 10-1: skipping empty audio interface (v1) [ 549.171281][ T603] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 549.186832][ T603] usb 10-1: USB disconnect, device number 22 [ 549.203484][T14097] udevd[14097]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 549.254354][ T442] usbhid 4-1:7.0: can't add hid device: -71 [ 549.267257][ T442] usbhid 4-1:7.0: probe with driver usbhid failed with error -71 [ 549.288087][T25309] netlink: 'syz.2.9354': attribute type 1 has an invalid length. [ 549.294048][ T442] usb 4-1: USB disconnect, device number 44 [ 549.307953][T25309] netlink: 160 bytes leftover after parsing attributes in process `syz.2.9354'. [ 549.497555][T25315] rust_binder: Write failure EFAULT in pid:16 [ 550.133947][ T442] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 550.226847][T25339] rust_binder: Failed to allocate buffer. len:8815263377109862656, is_oneway:false [ 550.226881][T25339] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 550.238401][ T603] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 550.258474][T25341] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 550.264028][T25339] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:661 [ 550.292027][T25341] overlayfs: missing 'lowerdir' [ 550.324194][ T442] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.345529][ T442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.364107][ T442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 550.371921][T25349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9368'. [ 550.382904][ T442] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 550.408443][ T442] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 550.414196][ T603] usb 4-1: Using ep0 maxpacket: 8 [ 550.433205][ T442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.445662][ T603] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 550.454132][ T603] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 550.454508][ T442] usb 6-1: config 0 descriptor?? [ 550.473074][ T603] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 550.492576][ T603] usb 4-1: config 250 has no interface number 0 [ 550.503966][ T603] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 550.529504][ T603] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 550.540572][T25354] Unsupported ieee802154 address type: 0 [ 550.550367][ T603] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 550.571411][ T603] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 550.593961][ T603] usb 4-1: config 250 interface 228 has no altsetting 0 [ 550.603966][T17572] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 550.613285][ T603] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 550.622638][ T603] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 550.642685][ T603] usb 4-1: Product: syz [ 550.646995][ T603] usb 4-1: SerialNumber: syz [ 550.653384][ T603] hub 4-1:250.228: bad descriptor, ignoring hub [ 550.660060][ T603] hub 4-1:250.228: probe with driver hub failed with error -5 [ 550.753946][T17572] usb 10-1: Using ep0 maxpacket: 16 [ 550.760445][T17572] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 550.771026][T17572] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.792220][T17572] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.812442][T17572] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 550.833932][T17572] usb 10-1: config 7 interface 0 has no altsetting 0 [ 550.840850][T17572] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 550.860413][T17572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.874353][ T603] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 45 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 550.935304][ T442] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 550.958728][ T442] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 551.282586][T25358] rust_binder: Error while translating object. [ 551.282630][T25358] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 551.288902][T25358] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 551.298364][T25358] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:29 [ 551.316205][ T45] rust_binder: 25357: removing orphan mapping 0:24 [ 551.513701][T17572] usbhid 10-1:7.0: can't add hid device: -71 [ 551.519909][T17572] usbhid 10-1:7.0: probe with driver usbhid failed with error -71 [ 551.531502][T17572] usb 10-1: USB disconnect, device number 23 [ 551.600480][T25365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.612150][T25365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.754218][T25336] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 551.883970][T25336] usb 4-1: device descriptor read/64, error -71 [ 552.123971][T25336] usb 4-1: device descriptor read/64, error -71 [ 552.225664][T25376] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 552.240228][T25376] overlayfs: missing 'lowerdir' [ 552.279725][ T36] kauditd_printk_skb: 36 callbacks suppressed [ 552.279745][ T36] audit: type=1400 audit(2000000034.210:2022): avc: denied { write } for pid=25383 comm="syz.2.9380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 552.280050][T25384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:43 [ 552.338141][ T36] audit: type=1400 audit(2000000034.270:2023): avc: denied { map } for pid=25385 comm="syz.2.9381" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 552.370497][T25336] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 552.378444][ T36] audit: type=1400 audit(2000000034.270:2024): avc: denied { execute } for pid=25385 comm="syz.2.9381" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 552.474324][T17572] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 552.564010][T25336] usb 4-1: device descriptor read/64, error -71 [ 552.633985][T17572] usb 10-1: Using ep0 maxpacket: 8 [ 552.641500][T17572] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 552.650125][T17572] usb 10-1: config 179 has no interface number 0 [ 552.656663][T17572] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 552.673923][T17572] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 552.692963][T17572] usb 10-1: config 179 interface 65 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.711712][T17572] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 552.713981][ T31] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 552.733065][T17572] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 552.753945][T17572] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.763038][T25378] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 552.824135][T25336] usb 4-1: device descriptor read/64, error -71 [ 552.964114][ T36] audit: type=1400 audit(2000000034.890:2025): avc: denied { unmount } for pid=24747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 552.982115][T17572] usb 10-1: USB disconnect, device number 24 [ 553.073454][ T36] audit: type=1400 audit(2000000035.000:2026): avc: denied { write } for pid=25398 comm="syz.5.9386" name="/" dev="configfs" ino=2456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 553.073723][T25399] /dev/rnullb0: Can't open blockdev [ 553.074037][T25336] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 553.154974][T25401] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 553.164206][T25401] overlayfs: missing 'lowerdir' [ 553.314449][T25412] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9391'. [ 553.351551][T25416] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9393'. [ 553.373760][T25418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9394'. [ 553.521222][ T36] audit: type=1400 audit(2000000035.450:2027): avc: denied { read } for pid=25425 comm="syz.9.9397" name="file0" dev="tmpfs" ino=1443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 553.544802][T25426] rust_binder: Write failure EINVAL in pid:679 [ 553.551483][ T36] audit: type=1400 audit(2000000035.480:2028): avc: denied { ioctl } for pid=25425 comm="syz.9.9397" path="socket:[131734]" dev="sockfs" ino=131734 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 553.593584][ T36] audit: type=1400 audit(2000000035.480:2029): avc: denied { ioctl } for pid=25425 comm="syz.9.9397" path="socket:[131737]" dev="sockfs" ino=131737 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 553.632887][T25435] rust_binder: Error while translating object. [ 553.632920][T25435] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 553.651404][T25435] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:683 [ 553.654372][ T63] usb 6-1: USB disconnect, device number 11 [ 553.714926][T25439] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9402'. [ 553.727373][T25437] syzkaller0: entered promiscuous mode [ 553.732888][T25437] syzkaller0: entered allmulticast mode [ 553.816180][T25445] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 553.826660][T25445] overlayfs: missing 'lowerdir' [ 553.847162][ T36] audit: type=1400 audit(2000000035.780:2030): avc: denied { read } for pid=25446 comm="syz.2.9406" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 553.880985][ T36] audit: type=1400 audit(2000000035.810:2031): avc: denied { getopt } for pid=25451 comm="syz.5.9408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 553.918070][T25454] binder: Bad value for 'stats' [ 553.931828][T25456] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9409'. [ 553.940935][T25456] tipc: Invalid UDP bearer configuration [ 553.940960][T25456] tipc: Enabling of bearer rejected, failed to enable media [ 553.983177][T25462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9412'. [ 554.023964][ T31] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 554.055948][T25471] /dev/rnullb0: Can't open blockdev [ 554.064854][T25471] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 554.148216][T25475] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 554.185832][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 554.198391][ T31] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 554.210871][ T31] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.236492][ T31] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.256513][ T31] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 554.282719][ T31] usb 10-1: config 7 interface 0 has no altsetting 0 [ 554.297436][ T31] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 554.314439][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.379060][T25489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9424'. [ 554.937150][ T31] usbhid 10-1:7.0: can't add hid device: -71 [ 554.943355][ T31] usbhid 10-1:7.0: probe with driver usbhid failed with error -71 [ 554.952180][ T31] usb 10-1: USB disconnect, device number 25 [ 555.512609][T25520] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9437'. [ 556.314013][ T37] INFO: task syz.8.7006:18760 blocked for more than 122 seconds. [ 556.321796][ T37] Not tainted syzkaller #0 [ 556.326799][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.335592][ T37] task:syz.8.7006 state:D stack:0 pid:18760 tgid:18759 ppid:18263 flags:0x00004004 [ 556.345778][ T37] Call Trace: [ 556.349073][ T37] [ 556.352031][ T37] __schedule+0x1322/0x1df0 [ 556.356577][ T37] ? __sched_text_start+0x10/0x10 [ 556.361633][ T37] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 556.367158][ T37] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 556.373016][ T37] schedule+0xc6/0x240 [ 556.377149][ T37] super_lock+0x150/0x300 [ 556.381517][ T37] ? user_get_super+0x350/0x350 [ 556.386397][ T37] ? __cfi_var_wake_function+0x10/0x10 [ 556.391876][ T37] ? __kasan_check_write+0x18/0x20 [ 556.397028][ T37] iterate_supers+0x8a/0x560 [ 556.401646][ T37] ? __cfi_quota_sync_one+0x10/0x10 [ 556.406885][ T37] ? security_quotactl+0x3b/0xf0 [ 556.411855][ T37] __se_sys_quotactl+0x308/0x7d0 [ 556.416872][ T37] ? __x64_sys_quotactl+0xc0/0xc0 [ 556.421929][ T37] ? __kasan_check_write+0x18/0x20 [ 556.427092][ T37] ? fpregs_restore_userregs+0x11d/0x260 [ 556.432804][ T37] __x64_sys_quotactl+0x9f/0xc0 [ 556.437716][ T37] x64_sys_call+0x2818/0x2ee0 [ 556.442444][ T37] do_syscall_64+0x58/0xf0 [ 556.446898][ T37] ? clear_bhb_loop+0x50/0xa0 [ 556.451628][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 556.457581][ T37] RIP: 0033:0x7fc381b8eba9 [ 556.462029][ T37] RSP: 002b:00007fc382acb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 556.470556][ T37] RAX: ffffffffffffffda RBX: 00007fc381dd5fa0 RCX: 00007fc381b8eba9 [ 556.478825][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 556.486927][ T37] RBP: 00007fc381c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.495012][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.503015][ T37] R13: 00007fc381dd6038 R14: 00007fc381dd5fa0 R15: 00007ffd245803e8 [ 556.511026][ T37] [ 556.514178][ T37] NMI backtrace for cpu 1 [ 556.514191][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 556.514222][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.514234][ T37] Call Trace: [ 556.514240][ T37] [ 556.514248][ T37] __dump_stack+0x21/0x30 [ 556.514278][ T37] dump_stack_lvl+0x10c/0x190 [ 556.514308][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 556.514335][ T37] dump_stack+0x19/0x20 [ 556.514359][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 556.514387][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 556.514412][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 556.514438][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 556.514459][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 556.514485][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 556.514508][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 556.514536][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 556.514560][ T37] watchdog+0xd8f/0xed0 [ 556.514586][ T37] ? __cfi_watchdog+0x10/0x10 [ 556.514609][ T37] ? __kasan_check_read+0x15/0x20 [ 556.514636][ T37] ? __kthread_parkme+0x138/0x180 [ 556.514653][ T37] ? schedule+0xc6/0x240 [ 556.514671][ T37] kthread+0x2c7/0x370 [ 556.514710][ T37] ? __cfi_watchdog+0x10/0x10 [ 556.514730][ T37] ? __cfi_kthread+0x10/0x10 [ 556.514747][ T37] ret_from_fork+0x67/0xa0 [ 556.514779][ T37] ? __cfi_kthread+0x10/0x10 [ 556.514801][ T37] ret_from_fork_asm+0x1a/0x30 [ 556.514832][ T37] [ 556.514862][ T37] Sending NMI from CPU 1 to CPUs 0: [ 556.668688][ C0] NMI backtrace for cpu 0 [ 556.668703][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 7889a62797c5970a6d86d60f5314b8c2dceacd81 [ 556.668722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.668732][ C0] RIP: 0010:__update_load_avg_cfs_rq+0x305/0xd70 [ 556.668760][ C0] Code: 00 00 48 89 f8 48 89 54 24 38 4c 8d 24 85 20 a8 c8 85 4c 89 e0 48 c1 e8 03 0f b6 04 30 84 c0 48 89 7c 24 18 0f 85 a2 06 00 00 <41> 8b 04 24 49 f7 e2 49 89 d4 49 0f a4 c4 20 41 80 3c 37 00 74 17 [ 556.668773][ C0] RSP: 0018:ffffc90000007580 EFLAGS: 00000046 [ 556.668787][ C0] RAX: 0000000000000000 RBX: ffff8881f6e4fc00 RCX: 0000000000000325 [ 556.668798][ C0] RDX: 00000000000003a4 RSI: dffffc0000000000 RDI: 0000000000000001 [ 556.668809][ C0] RBP: ffffc90000007680 R08: 00000000000006c9 R09: ffff8881f6e4fc88 [ 556.668820][ C0] R10: 000000000052db38 R11: ffff88812ceb4d9c R12: ffffffff85c8a824 [ 556.668831][ C0] R13: 1ffff92000000ebc R14: 0000000000000000 R15: 1ffff1103edc9f91 [ 556.668843][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 556.668855][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.668866][ C0] CR2: 000000110c2ba0be CR3: 00000001016e8000 CR4: 00000000003526b0 [ 556.668880][ C0] DR0: 0000000000000000 DR1: 000000000000737c DR2: 0000000000000000 [ 556.668889][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 556.668899][ C0] Call Trace: [ 556.668905][ C0] [ 556.668913][ C0] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 556.668934][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 556.668952][ C0] ? sched_clock_noinstr+0xd/0x30 [ 556.668969][ C0] ? sched_clock+0x44/0x60 [ 556.668988][ C0] update_load_avg+0x506/0x19a0 [ 556.669008][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 556.669026][ C0] enqueue_entity+0x72/0xf90 [ 556.669045][ C0] enqueue_task_fair+0x3fb/0x17e0 [ 556.669068][ C0] ? sched_clock_cpu+0x75/0x400 [ 556.669087][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 556.669110][ C0] enqueue_task+0x7dc/0x11f0 [ 556.669132][ C0] ? timerqueue_add+0x212/0x240 [ 556.669153][ C0] ? __cfi_enqueue_task+0x10/0x10 [ 556.669175][ C0] ? update_irq_load_avg+0xcb/0xe60 [ 556.669195][ C0] ? update_rq_clock+0x24b/0x7c0 [ 556.669216][ C0] activate_task+0x38b/0x3d0 [ 556.669234][ C0] ttwu_do_activate+0x154/0x630 [ 556.669250][ C0] ? dummy_timer+0x400d/0x4140 [ 556.669272][ C0] try_to_wake_up+0xd87/0x1b00 [ 556.669288][ C0] ? __kasan_check_write+0x18/0x20 [ 556.669309][ C0] ? resched_curr+0x113/0x430 [ 556.669331][ C0] wake_up_process+0x14/0x20 [ 556.669351][ C0] hrtimer_wakeup+0x52/0x70 [ 556.669372][ C0] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 556.669390][ C0] __hrtimer_run_queues+0x3bd/0x9e0 [ 556.669426][ C0] ? hrtimer_interrupt+0xf00/0xf00 [ 556.669444][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 556.669470][ C0] hrtimer_interrupt+0x37e/0xf00 [ 556.669492][ C0] __sysvec_apic_timer_interrupt+0x8e/0x2b0 [ 556.669532][ C0] sysvec_apic_timer_interrupt+0x3f/0x90 [ 556.669552][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 556.669572][ C0] RIP: 0010:handle_softirqs+0x129/0x630 [ 556.669597][ C0] Code: 49 c1 ef 03 4c 89 7d 90 48 b9 00 00 00 00 00 fc ff df 65 66 89 1d 4f f8 b4 7e 65 44 89 2d 4f 96 b2 7e fb 49 c7 c6 c0 a0 20 87 <44> 89 65 b4 b8 ff ff ff ff 41 0f bc c5 89 c3 ff c3 0f 84 f3 02 00 [ 556.669610][ C0] RSP: 0018:ffffc90000007f38 EFLAGS: 00000a02 [ 556.669624][ C0] RAX: 1ffffffff0e41738 RBX: 0000000000000000 RCX: dffffc0000000000 [ 556.669635][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 556.669645][ C0] RBP: ffffc90000007fc0 R08: ffff8881f6e4fa47 R09: 1ffff1103edc9f48 [ 556.669658][ C0] R10: dffffc0000000000 R11: ffffed103edc9f49 R12: 000000000000000a [ 556.669669][ C0] R13: 0000000000000080 R14: ffffffff8720a0c0 R15: 1ffffffff0e42aa8 [ 556.669683][ C0] ? handle_softirqs+0xe6/0x630 [ 556.669707][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 556.669728][ C0] __irq_exit_rcu+0x48/0xc0 [ 556.669742][ C0] irq_exit_rcu+0xd/0x30 [ 556.669754][ C0] sysvec_call_function_single+0x7f/0x90 [ 556.669773][ C0] [ 556.669779][ C0] [ 556.669785][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 556.669804][ C0] RIP: 0010:pv_native_safe_halt+0x17/0x20 [ 556.669824][ C0] Code: cc cc cc b8 38 53 c6 e9 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 f1 3a 00 f3 0f 1e fa 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 90 90 90 90 [ 556.669837][ C0] RSP: 0018:ffffffff87207da0 EFLAGS: 000002c6 [ 556.669850][ C0] RAX: ffff8881f6e00000 RBX: ffffffff87215540 RCX: ffffffff858c60ae [ 556.669862][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000cf6914 [ 556.669872][ C0] RBP: ffffffff87207da0 R08: ffff8881f6e39733 R09: 1ffff1103edc72e6 [ 556.669884][ C0] R10: dffffc0000000000 R11: ffffed103edc72e7 R12: 1ffffffff0e42aa8 [ 556.669897][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff87cb0be8 [ 556.669908][ C0] ? ct_kernel_exit+0x7e/0xb0 [ 556.669929][ C0] default_idle+0x17/0x30 [ 556.669949][ C0] arch_cpu_idle+0xd/0x20 [ 556.669970][ C0] default_idle_call+0x3f/0x80 [ 556.669992][ C0] do_idle+0x1a0/0x470 [ 556.670007][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 556.670025][ C0] cpu_startup_entry+0x48/0x70 [ 556.670041][ C0] rest_init+0x10b/0x130 [ 556.670062][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 556.670078][ C0] start_kernel+0x46a/0x4bb [ 556.670100][ C0] x86_64_start_reservations+0x2e/0x30 [ 556.670124][ C0] x86_64_start_kernel+0x6a/0x7b [ 556.670147][ C0] common_startup_64+0x13b/0x157 [ 556.670169][ C0] [ 558.154150][T25336] usb 4-1: device descriptor read/8, error -110 [ 558.284582][T25336] usb 4-1: device descriptor read/8, error -32 [ 558.523985][T25336] usb 4-1: reset high-speed USB device number 45 using dummy_hcd [ 558.544534][T25336] usb 4-1: device descriptor read/8, error -32 [ 558.674835][T25336] usb 4-1: device descriptor read/8, error -32 [ 558.784603][ T442] usb 4-1: USB disconnect, device number 45 [ 558.793539][ T442] usblp0: removed