last executing test programs: 1m50.55528292s ago: executing program 0 (id=300): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c826664ffb1aeadc36e6f3d", @ANYRESHEX=r3, @ANYBLOB=',aname=!%()-\\)*,debug=0x0000000000000004,\x00']) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) getsockopt$inet6_int(r5, 0x29, 0x50, 0x0, &(0x7f0000000180)) read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 1m50.507942111s ago: executing program 0 (id=303): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1, 0x0, 0x0, 0x2000000}, 0x40002001) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x400, 0x7fffffff) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800050002"], 0x40}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$FUSE_IOCTL(r6, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x0, {0x4, 0x4, 0x98d, 0x3}}, 0x20) splice(r4, &(0x7f0000000680)=0xffffffffffffff76, r6, &(0x7f0000000700)=0xffffffff, 0x3ff, 0x4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x98, 0x0, &(0x7f0000000b80)=[@increfs, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0xb, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/54, 0x36, 0x0, 0x10}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/71, 0x47, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000980)=""/179, 0xb3, 0x1, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/173, 0xad, 0x1, 0x28}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x5c, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @clear_death={0x400c630f, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000580)={@flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3c}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x84, 0x0, &(0x7f0000000840)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c8e6698"}) 1m49.660170937s ago: executing program 0 (id=323): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000006c0)=0x7) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x58, 0x0, &(0x7f0000000340)=[@enter_looper, @acquire, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x7d, 0x0, &(0x7f0000000000)="f606128427e5d4f41695030000002a799160e6ea7a645ec870c5388600ed4149bb6063469cc4afecec3caa10ece907d6406d6bedb46552f243d8513dd835062160f198f2914b4d4e96d761bda5bc53d3344a578aef2a94469ddde14a9d0ea9d670c04e58237fe2ef16add4817d3fa3bd1b3615e723e5f99aa0af185231"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x341, 0x0, &(0x7f0000000800)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0}) 1m48.811975734s ago: executing program 0 (id=338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="040000000000000085040000"]) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x8100, 0x60) linkat(r0, &(0x7f00000006c0)='./file1\x00', r7, &(0x7f0000000000)='./file7\x00', 0x400) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc697f000000000000004d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x0, 0x3a, '::}', 0x3a, '}*.', 0x3a, './file7', 0x3a, [0x46, 0x43]}, 0x2f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 1m48.725380455s ago: executing program 0 (id=341): socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) (rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000003584"], 0xffdd) (async) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="0f01c4642e65670f01cbba2100b85656ef0f350fc14f00f1baa100ed26dc2e295dbad104edba210066ed", 0x2a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) (rerun: 64) 1m48.671777436s ago: executing program 0 (id=342): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x120b, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0x9}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0xe71}) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x20009, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000380)=0x14) sendmsg$inet6(r3, &(0x7f0000001d80)={&(0x7f0000000080)={0xa, 0x4e24, 0x100, @local, 0x7}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000880)="f25309cd8912a88aa637862a647fd37b39fec2320fb608ea0482c8fc60bd1f41a81847a8b419389cc56c2a6b1bdeb8b0b07a4f7ad9f6d9efd86d810cc9bbf010690d6e827083e7e210a70f3111786a677e3a86b1c575dcda73c7c74450a2d027352ab9e8e643ace260df9271a2fa688d0eacfb61fe2fb9f4038f2ecef82ea7c431b1f438ece445ee493648057f668cd9bef44148be7a13ba122eafaf2adad958cb6c5d5dc1", 0xa5}, {&(0x7f0000000940)="c4dac9b83c232327284c83c5340f3b5ab9ec892c1a59817e98579a59407f5f7d0277e14afefd47e617a0b5cd484bcf0b0bd7ef5779ff9787bdcd7638fa3a9a4873f1873fde25789d36f99b18bfd35495b21b41b3ec94b68086e7ade3e81f1e44f5ed51fde904b79f740fe548a579befa", 0x70}, {&(0x7f00000009c0)="c1522ae941500ebcb654349ed760f9d3c472be1cc58fe096c3eccfdb3d72d53e71365f8c8eb7f60f5f1c4cc0d4dc34ddcdde71d82bcd1fd91483f2b02e58777c9e81a1ff60b07fab1d24409230b257303e44eff0f029125f9415662334f68234a1f96363587fa09194fea33eb8123ad7e2f44215ac47c9ea416d9bdc5b13c4f69aaf868e8c1a", 0x86}, {&(0x7f0000000a80)="68f159707c62b3f7ffc426e350f9848c9431572a1ceefb7f0cdbad8bceee2639e31005afde7fd066cab337dd2d7fcd9082af65a10f4b405d56fce2267b6a61c7679b63366365a767299e3970beb8eb07b70f5e618e57b5eb5e30479840e582780fa3ed659787c459bbb494882da27f7fa5c515ddd4ef08c977d756f0599624b859d6e953db7efa5aa99d39c3176e202bf303ce55436a0b8fb8e9302e", 0x9c}, {&(0x7f0000000b40)="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", 0x1000}], 0x5, &(0x7f0000001bc0)=[@rthdr={{0x38, 0x29, 0x39, {0x2, 0x4, 0x0, 0xff, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}, @hopopts={{0x48, 0x29, 0x36, {0x1, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x18, {0x0, 0x4, 0xd4, 0x8, [0xfffffffffffffffd, 0x7]}}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x73, 0xa, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0xe7, 0x4, [0x8, 0x9, 0x101, 0x6, 0x4, 0xfa, 0x3458, 0x9]}}, @pad1, @pad1, @ra={0x5, 0x2, 0x5}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x16, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x8, [0xe, 0x7, 0x2, 0x9, 0x0]}}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}], 0x1a0}, 0x4004010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000002bbbbbbbbbbbbaaaaaaaaaabb08004515002c006400000f069078640101027f0000014e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="610180019078000201001d00"], 0x3e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffe}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8a661, 0xb, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x0, 0x7ff, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x6, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x10000, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x101, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x800004e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x205, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x3fff, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x7ffffffc, 0x5, 0x4, 0xc8, 0x3, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x100006, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb21, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 1m48.568653788s ago: executing program 32 (id=342): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x120b, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f00000001c0)={0x0, 0x1, 0xa, 0x9}) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0xe71}) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x20009, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000002c0)={@dev, 0x0}, &(0x7f0000000380)=0x14) sendmsg$inet6(r3, &(0x7f0000001d80)={&(0x7f0000000080)={0xa, 0x4e24, 0x100, @local, 0x7}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000000880)="f25309cd8912a88aa637862a647fd37b39fec2320fb608ea0482c8fc60bd1f41a81847a8b419389cc56c2a6b1bdeb8b0b07a4f7ad9f6d9efd86d810cc9bbf010690d6e827083e7e210a70f3111786a677e3a86b1c575dcda73c7c74450a2d027352ab9e8e643ace260df9271a2fa688d0eacfb61fe2fb9f4038f2ecef82ea7c431b1f438ece445ee493648057f668cd9bef44148be7a13ba122eafaf2adad958cb6c5d5dc1", 0xa5}, {&(0x7f0000000940)="c4dac9b83c232327284c83c5340f3b5ab9ec892c1a59817e98579a59407f5f7d0277e14afefd47e617a0b5cd484bcf0b0bd7ef5779ff9787bdcd7638fa3a9a4873f1873fde25789d36f99b18bfd35495b21b41b3ec94b68086e7ade3e81f1e44f5ed51fde904b79f740fe548a579befa", 0x70}, {&(0x7f00000009c0)="c1522ae941500ebcb654349ed760f9d3c472be1cc58fe096c3eccfdb3d72d53e71365f8c8eb7f60f5f1c4cc0d4dc34ddcdde71d82bcd1fd91483f2b02e58777c9e81a1ff60b07fab1d24409230b257303e44eff0f029125f9415662334f68234a1f96363587fa09194fea33eb8123ad7e2f44215ac47c9ea416d9bdc5b13c4f69aaf868e8c1a", 0x86}, {&(0x7f0000000a80)="68f159707c62b3f7ffc426e350f9848c9431572a1ceefb7f0cdbad8bceee2639e31005afde7fd066cab337dd2d7fcd9082af65a10f4b405d56fce2267b6a61c7679b63366365a767299e3970beb8eb07b70f5e618e57b5eb5e30479840e582780fa3ed659787c459bbb494882da27f7fa5c515ddd4ef08c977d756f0599624b859d6e953db7efa5aa99d39c3176e202bf303ce55436a0b8fb8e9302e", 0x9c}, {&(0x7f0000000b40)="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", 0x1000}], 0x5, &(0x7f0000001bc0)=[@rthdr={{0x38, 0x29, 0x39, {0x2, 0x4, 0x0, 0xff, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x101}}, @hopopts={{0x48, 0x29, 0x36, {0x1, 0x5, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x18, {0x0, 0x4, 0xd4, 0x8, [0xfffffffffffffffd, 0x7]}}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x73, 0xa, '\x00', [@calipso={0x7, 0x48, {0x2, 0x10, 0xe7, 0x4, [0x8, 0x9, 0x101, 0x6, 0x4, 0xfa, 0x3458, 0x9]}}, @pad1, @pad1, @ra={0x5, 0x2, 0x5}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x16, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xfb}, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x8, [0xe, 0x7, 0x2, 0x9, 0x0]}}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}], 0x1a0}, 0x4004010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000002bbbbbbbbbbbbaaaaaaaaaabb08004515002c006400000f069078640101027f0000014e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="610180019078000201001d00"], 0x3e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffe}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8a661, 0xb, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x0, 0x7ff, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x6, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x10000, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x101, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x800004e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x205, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x3fff, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x7ffffffc, 0x5, 0x4, 0xc8, 0x3, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x100006, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb21, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 1m26.926345722s ago: executing program 2 (id=658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000180)=0x8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x528, &(0x7f0000000200)=""/108, 0x6c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0xb0}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) 1m26.884233593s ago: executing program 2 (id=659): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x1}]}]}, 0x23c}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) (async) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) sendfile(r7, r7, 0x0, 0x3) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 1m26.603337728s ago: executing program 2 (id=662): prctl$PR_SVE_SET_VL(0x32, 0x100000000001c3ba) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x15489) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) prctl$PR_SVE_SET_VL(0x32, 0x100000000001c3ba) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async) prctl$PR_SVE_SET_VL(0x32, 0x15489) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) (async) 1m26.569408248s ago: executing program 2 (id=663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x200) syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0x10, 0x3, 0x0) r1 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x541b, 0x5) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) 1m26.437039491s ago: executing program 2 (id=665): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) r4 = getpgrp(0x0) (async) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0xb, &(0x7f00000000c0)={0x1a, 0xe, 0x3}) (async) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r6, &(0x7f0000002bc0)={0x2020}, 0x2020) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) ptrace(0x10, r8) ptrace$peeksig(0x4209, r8, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 1m26.322349223s ago: executing program 2 (id=668): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4802c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000000030203"], 0x24}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x40800) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m26.307121924s ago: executing program 33 (id=668): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x44da1000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4802c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="24000000030203"], 0x24}, 0x1, 0x0, 0x0, 0x2400c0c0}, 0x40800) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.097120541s ago: executing program 4 (id=1425): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) 3.042312122s ago: executing program 4 (id=1426): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @multicast1, 0x1}, 0x10) 3.041214222s ago: executing program 4 (id=1427): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x460cc1, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'btrfs.', '}}%\x00'}, &(0x7f0000000080)='\'-!\x00', 0x4, 0x5) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x100000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000000c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={r1, 0x101, 0x0, [0x19a, 0x14, 0x401, 0x4, 0xd], [0x1, 0x8001, 0x7, 0x10001, 0xffff, 0x3, 0x5, 0x1000, 0x10, 0x482, 0x2, 0x10, 0x474b, 0x40, 0xc, 0x9, 0x3ff, 0x9, 0x7, 0x8001, 0x2, 0x1, 0x0, 0x6, 0x464, 0x800, 0x7, 0x5f6b, 0x1, 0x7, 0x2, 0x5, 0xa, 0x2, 0x3, 0x2, 0x2, 0x80000000, 0xff, 0x6, 0x3, 0x1f4000, 0x4, 0xa, 0x0, 0x6e9, 0x7f, 0x9, 0x2, 0x4, 0x10001, 0x6, 0xfffffffffffffff7, 0xe8ed, 0x80000001, 0x9, 0x2, 0xff, 0x6, 0x3, 0x9, 0xc, 0x2, 0x7eb30076, 0x9, 0x1881a67a, 0x20000000000, 0x0, 0x365, 0x1, 0x2, 0x80000001, 0x1, 0x47, 0x10001, 0x5, 0x3ff, 0x4, 0xc48, 0x1ff, 0x10000, 0x3, 0xc1a, 0x7fffffffffffffff, 0x10001, 0x0, 0xf5, 0x6, 0x9, 0x74a11dfa, 0xf70, 0x7ff, 0x0, 0x7, 0x3, 0x8, 0x378, 0x8, 0x8, 0xd657, 0xfffffffffffffffa, 0x2d, 0x4, 0x3, 0x180000000000, 0xc, 0x0, 0x10000, 0x7, 0x7d9, 0x80, 0x5, 0x7, 0x9, 0xfffffffffffffff7, 0xf9, 0x9, 0xba, 0x8d7e, 0x8, 0xfff]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$KDDISABIO(r2, 0x4b37) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = syz_open_dev$MSR(&(0x7f0000000940), 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000000980)=""/138, 0x8a) r4 = timerfd_create(0x8, 0x800) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000e40)={0x3f, 0xe, &(0x7f0000000a40)="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"}) readv(r4, &(0x7f0000002440)=[{&(0x7f0000000e80)=""/80, 0x50}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/165, 0xa5}, {&(0x7f0000001080)=""/226, 0xe2}, {&(0x7f0000001180)=""/170, 0xaa}, {&(0x7f0000001240)=""/58, 0x3a}, {&(0x7f0000001280)=""/183, 0xb7}, {&(0x7f0000001340)=""/199, 0xc7}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1e, &(0x7f0000002500)=0x3, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000002540)=0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000002580), 0x141081, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000025c0)={0xa, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f0000002640)=@attr_other={0x0, 0x4, 0xfffffffffffffff8, &(0x7f0000002600)=0xbf}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000002680)) r7 = epoll_create1(0x80000) accept4$bt_l2cap(r3, &(0x7f00000026c0), &(0x7f0000002700)=0xe, 0x800) ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000002740)=0x2) lstat(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0x2, r8, &(0x7f0000002840)) recvfrom$inet_nvme(r6, &(0x7f00000028c0)=""/148, 0x94, 0x825e925583d5ff54, &(0x7f0000002980)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000002a00)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000002a40)='system_u:object_r:dpkg_exec_t:s0\x00', 0x21) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002a80)={{{@in=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4e21, 0x81, 0x4e20, 0xff, 0xa, 0xa0, 0xa0, 0x2b, 0x0, r8}, {0x8, 0x7, 0xffffffff, 0x1, 0x3, 0x6, 0x8, 0x1742}, {0x0, 0x0, 0x1, 0x8}, 0x6, 0x6e6bbc, 0x1, 0x1, 0x2, 0x3}, {{@in6=@private2, 0x4d4, 0x32}, 0xa, @in6=@local, 0x3502, 0x1, 0x2, 0x1, 0xfff, 0x8, 0x401}}, 0xe8) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x10) 3.040946992s ago: executing program 1 (id=1428): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) write(r1, &(0x7f0000000400)="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", 0x1f000) 3.036669552s ago: executing program 4 (id=1429): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000200)={0x4, 0x4, 0x120000}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0x4000, 0xa, 0x0, 0xa, 0xfc, 0x0, 0x0, 0xfc, 0xfe, 0x0, 0x1}, {0x0, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0xeeef0000, 0x13, 0x5, 0x0, 0x0, 0xb, 0xf, 0x4, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x2, 0x0, 0x1a}, {0x100000, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x8080000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0xf, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x40}, {0x2000, 0x2}, {0x8080000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x200000, 0xb, 0x4001, 0x900, [0x5, 0x0, 0x0, 0x3fffffffffff]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000500)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020303000000002000000000000000100800010009000000af7d04bf46d3e900305e0ed918c8e5708420af853b88374170068c7b25c412fd68d33abbfd45266da013f48b15b713340025c4299002cc835545ca36ba7c7b212bb0c3a3a3297cce968a6a015c9815c90cc00a706f7a418d4158783380b8782d1be99cfef1be4105596afdd7071c232e9519c233bb833115404896c34e5a649a95c023b88833ca553d464d5d9a24837ea6bb"], 0x1c}}, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r8, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0xffffffffc1902008, 0xfff8, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x20, 0x4}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x5, 0x7, 0x8000}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@nodevmap}], [], 0x6b}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r9, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x71, 0x69}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) 2.982345233s ago: executing program 1 (id=1430): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB="0000004e2a00004e6ad27d20901b415bffffff7f13728da80bc2fedd5d883a5769e00926163ab17b4f9b874a0fff3ebad8b600000000004e"]) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r3, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@dead_binder_done], 0x6, 0x0, 0x0}) 2.430404003s ago: executing program 4 (id=1433): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d07, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) write$tcp_mem(r0, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d7bb30000000000003d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 2.426713934s ago: executing program 4 (id=1435): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020bce80dd09ee7298038d0f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 1.810496035s ago: executing program 5 (id=1440): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x63d0465ba3e2a851}, "3d8b00", "eb8e7ba12faf3700", "ff00"}, 0x38) (async, rerun: 64) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0xb1, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8844}, 0x4040000) (async) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r5) (async, rerun: 32) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) (rerun: 32) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 1.754261337s ago: executing program 5 (id=1441): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = fsmount(0xffffffffffffffff, 0x1, 0xf6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1]) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0xffffffff80408040}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3ffff, {0x5, 0x0, 0x0, 0x4000000008, 0x460e, 0x5, {0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r4, 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r5, 0xffffffffffffffff, 0x2) 1.753769516s ago: executing program 5 (id=1442): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7db, 0x9, 0x4, 0x2004c8, 0x8000000, 0xfffffffffffffffd, 0x0, 0x7, 0x100400000004a, 0x40, 0x0, 0xe, 0x4], 0x0, 0x200}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000380)={0x60, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5, 0x0, 0x0, 0x0, 0x74, 0x2, 0xa, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f08001400000002000000fedbdf2505000500320000000a004e200000000e00000000000000000000ffffac14141909000000000000000800120000000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001fe80000000000000000002000000000000000600002000000a004e2100000e28200100000000000000000000000000020900000000000000"], 0xa0}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x2, 0x4002, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x3346c4e8, 0x0, 0xffffffffffffffff, 0x4, 0x967], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000500)=[@request_death={0x400c630e, 0x1}], 0x89, 0x0, &(0x7f00000002c0)="c6547e22bade76f1a03b79e92900000000000000ab42478a7b6946e9a6000055002cc15e854564e7137252587ab1794808000000000000000e647c2e7056ccbcd5b055190dfa7e17570be81a8c82b76a9f10d95934d24bf493907ad512bd6e6e30270099dafeb0e2773f318088408134a83d8a4a9672b0dc75335e6e3004b58dc8e2343d39a00c2008"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = accept(r6, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000000)="95", 0x1, 0x4895, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000280)=[@clear_death={0x400c630f, 0x3}], 0xfffffffffffffd71, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b8982fd15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb009024bd9fa592aa15f767d650fb5bad4248"}) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x80, 0x6, 0x303, 0x0, 0x0, 0x0, 0x0}) 1.278735905s ago: executing program 3 (id=1445): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x1, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x20000) lseek(r2, 0x40000000000003, 0x0) r3 = dup(r1) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4097, 0x1001}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x4}], 0x3, 0x2100, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x51}, {r1, 0x2000}, {0xffffffffffffffff, 0x8000}, {r4, 0x1000}, {0xffffffffffffffff, 0x2008}, {0xffffffffffffffff, 0x3}, {0xffffffffffffffff, 0x50}, {r5, 0x4000}, {r6, 0x400}, {r7, 0x2038}], 0xa, &(0x7f0000000180), &(0x7f0000000380), 0x8) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0xfffffef5, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480), &(0x7f0000000540), &(0x7f0000000640)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f0000000700)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_user={'obj_user', 0x3d, '\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}, {@measure}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}) 1.274160056s ago: executing program 3 (id=1446): add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1.273106336s ago: executing program 3 (id=1447): syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x9, 0x70, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x6, 0x8, 0x7, 0x5, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x7, 0x7, "b87e27a6"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x0, 0x1}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0x21, 0x0, "9cd7"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0x3, "78ae8dfdccd75b"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0xbf36, 0xf, "a8"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x40, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x218, 0x7, 0x3, 0x3, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x2, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xb, 0x1, 0x8, 0x5, "c73118"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x80, 0xa, {0x7, 0x25, 0x1, 0x3, 0x6, 0x89}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x7, 0x13, 0x9, 0x20, 0x6}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x100c}}, {0x84, &(0x7f00000001c0)=@string={0x84, 0x3, "2d62d6e245999a8a78340f8423a07a684baae224fde3aab30b6fafbf0b15a780f569ba561556d2728100c3c0a1c09d6ade5cb863ed49f3c28b2cdcd400fb809c071c9d040cc35d79ddbfaf76984500710e6220788ab750c6775ed25155e8f2fe461304eab9a4122b2ddb8c649bc22b0ba1c0429d1b594a403d546e153ab5838ca02a"}}]}) r0 = syz_usb_connect$cdc_ncm(0x5, 0x136, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x124, 0x2, 0x1, 0xd, 0x20, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "98c25e8bbe53"}, {0x5, 0x24, 0x0, 0x4001}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0xffff, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x28}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0xae, 0x1, 0x1}, @mdlm_detail={0x94, 0x24, 0x13, 0xa, "b8a093d6a9ac59fe8d881c95307d6dceaa757917392a90f27f90ae4224f3bce865668bee9e74a5fc36d671a7cf45db6a56f931206882068f180ceccbde631bf8c12f0b4eb6f637ce30456097237623a92b8a6750cb77fbaf636aa19aeba07e2364e0172d8571eb77a9960b7594df4a43337628e6824dfc14ea8e82871ad7725558bb016a97ca62acf2b085d79954dbe4"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xf8d, 0xe, 0x1, 0xde00, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0x12, 0x24, 0x7, 0x40, 0x40, [0x5, 0xfff, 0x5, 0xffff, 0x3, 0x1]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x81, 0x7, 0x5}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x0, 0x3, 0x6, 0x5, 0x0, 0x1}, 0x10, &(0x7f0000000440)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x5, 0x1, 0x6}]}, 0x5, [{0xdb, &(0x7f0000000480)=@string={0xdb, 0x3, "0c9135586cc4aa99972e9bccdc10aed0573d094c626fb25245750333379d76b6410f79b9145ea85de77b8c86dfd2c8a4d9501c1279cf3c3d366f121da0703994898cd4ac9ead1cfb3b9cd6879ec7f5a11754eef860f9c2533895e9fe52d87b91f8c159de1649af8e92dc8386369ea3133698e8c33fe1dd94d9af24ece2594caa1408410c7812def8261edf291fe8413d7ebc6bfe1bbd543ff4096b493a14430d207e581a248fe02767f7fe07b01e3f8f34d01aaed2626e22240ec6e9110f66d5813cae24bdd6aaac55e30f7e838e824884bd29785391c4e1d8"}}, {0x39, &(0x7f0000000580)=@string={0x39, 0x3, "8eeb3478272ec109b9f84a50157c0a7c36165e03f288d07b7c49217e49f532478436c5266e0b20f6f8d589f1cb6781ee5879db8e97c470"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x436}}, {0xc0, &(0x7f0000000600)=@string={0xc0, 0x3, "874e75d87ca8d04976bb98ac5ec205c682b90b291c7e00434888f9afebc0eaf6294b3b93bc0fdbb2d115ba555117992016d689e8972c30a316120f2be059c95f38e1b69aeb117f9aec8d71ce101bd1984826a9dbb37435aa7e109fb74bceb495b56c520788e4d24c34e9ed74adec2b89b849481dd61e6688d068a9a233075c83004941d85cd333be1e519b0127b0b3ba25c14032b5786b3a1e4e03af91e9ea986da3c5af548ab13321a247106cf78c7d8c9e4e44c8f915728daf503eeee5"}}, {0xd7, &(0x7f00000006c0)=@string={0xd7, 0x3, "287950fae684126959f314d239e82ce84de4a6bf4da2c3825663c98bd9b5eb43383e4a6627858ab81197b16017604ba7a1b51e0ba449145fb60d618a7e8abad8a1672f5955d1256dba8fa396e7cbb682f575dfc1a3f2241b9f685de6de28180af6f8237b8ad05656dba932e69cbe38365c1ae9c987a2ce41af7ca98aa5b14c2ef6ac41c6c7d2b1dfec3b8f2a209d422e190a9e63c410f0c0a86b87d112a7c2dfbd3a5cd21d250a977f8a13738ee5d27ecbd7c52209bc47068ee5e781b4168cf5e6cbf31aa125a6f0476a28a874d7ee42a1d21f276c"}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x468080, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x1d34, 0xa, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x7, 0x81, 0x1, {0x22, 0xa49}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x2c, 0x3}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x9, 0x5, 0xb, 0x8}, 0x19, &(0x7f0000000900)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "d423653448119f6e5db73ec31c446df8"}]}, 0x3, [{0xf4, &(0x7f0000000940)=@string={0xf4, 0x3, "aac1dbe8d97fa89d1f6b704d54cbb3ecfc3b3aa01aa51fba823f750a9cd921653bdbb377f31e769d57a57e07988aa0758c13fb9630b435d2d0a13388e1558d892db251ba14fac5d66009ab3b8ad1245a53ccb110840eb659200802cab28d835defe9637d5474d0ba3c1795415aeacdeb81e6bc30c1a43b0e0c7783b2228aa3357e3c1a8cae408cf1835421f247b4f873fc8548ffed7547515d1c5f3bc6626f7feea14be08e2d7d5de0c2ad7b1380a252385e8ed25810d89781c806359b3289ddac7b2d1395440c7a26ad9d5777f74840c9ebbe7b7bd0765e04efa777282f2553de25d89cf327c12ae33a8345c9f76acefa75"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x104e}}, {0xd5, &(0x7f0000000a80)=@string={0xd5, 0x3, "5767f1088f8a837edafd9b47067c514e756cd5aae41fb7c57070fbfb63b52611c8d50f7d7f24a53a19c2602619012f23b8e4b99621cedac369e194210e5fcc54262384a794cc1616ca04ba6e42e8dbbee34cb1e195af9ece368fa536e3347b91b0840b4f35b40b6c399b7a5ea023984a58e6dfb3b774005e5668958279351ff78a11cc44089e6386e1b6907acb2696cc6dc6544fef628b45168e4a819f9219806c1bc874101fc0d6c3d4bca8c799644e00e12c69a8df50ca63c5e947beb0ea4797f853f2c37a0b1c0485a0b0e85dce900fb83e"}}]}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000bc0), &(0x7f0000000c00)={'U+', 0x9e21}, 0x16, 0x2) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6f, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x6, 0x9, {0x9, 0x21, 0xf9, 0x0, 0x1, {0x22, 0x539}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x5, 0xf3}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x200, 0x3, 0x9, 0xff, 0xff, 0x8}, 0x5, &(0x7f0000000cc0)={0x5, 0xf, 0x5}}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000d40)={'\x00', 0x8, 0x8000, 0x2, 0x6, 0x0, 0xffffffffffffffff}) sched_setaffinity(r2, 0x8, &(0x7f0000000dc0)=0xff) writev(r1, &(0x7f0000002240)=[{&(0x7f0000000e00)="3a2dd22fdd07ba5d91762404094f1644072b3bdb658da75b076ef9c532e40ec89179b7dd3a6c20904f9c7b4ef85cd4e63b299f2ed52b9acf16f87b847007696a183f00b34ab9773e6224bc763e491751e78a1520c639de60e840a3b00a1c18c455e4ebd5f5f6807c8fb49fbfa2d7e8c83ec414dc2e48ec5f8bab3c48ee40d2b663eb6f29cc330f7cb85cf912a9a442e5b441cdb9eded8eed31baa8562b01ab9b5f411dcdd494c0297051adde9b6a07ed7a506a6bd02245c2ebd651d33342e3158e8e7d3aa1767412a7ad48c5f001e423d1", 0xd1}, {&(0x7f0000000f00)="0d6f237c3b16cfd95f35456e4f73b657b970a89ffa03cb9f04330c50193ead6b69e0d7b0c5f32f1d58a732a61881852250c4667a04214d2cde3aed1e9d7f35709364e970ed0c414b9bd6bddd98571b9e67aba335a6890d8bdeb25029910689d79d1130f44df76414b3475cb612a5d27f7fa08f5fb85eb72c6eb79f61be0b037abf67befcde120c1a45ce58cf903da7a3daabfafbfc92134cf8703e128e91d2776859c8bf181c00817f0871c02f0e0b6d1eec874d5a47140e1626cf34099b08150ac688b91381", 0xc6}, {&(0x7f0000001000)="02438d32ea488b1c7d5f708cf21e4d45c0323ca8105d775a29624ae6f4703ffd6d3efc08e120fc4fc9d6ccbb0f9a3ff8c899e40ce893fdc0b9fdfa38a9c7adb16ec41d6100289f7afd05961e15f0820f8ebfdca7fd9186a772e5ffe9227824dd1c9ede3a606a9697696c87e898f64d48897c2b028548382e81d7f1b46a46faebdf8805b998768fc80be490fddf90b8adbd744ffe4073bd1077ff701d1112b0e7aac040a24964fe74b25cc58446b7c2ef7280", 0xb2}, {&(0x7f00000010c0)="f5388f920f2e34af1dfa8f7c88d98e903ae08279c44f72031716695b1260fbcb190c3082070269f55746300639d08b456e0de489ea185c936af8dd54efadeacf3de199b8bc9e46d5cb84167f91e874094e53cf8105eaddcff83b34c9542a17470b0ec5fadd48b130a3286a5e85872093e6536edba6f2ff86b31217e6367dc11cbd4e453c296278f7578980cb7efdd07c116030cf36b55631bb7051f454795e2eb9158d09ea3751c66b1b84ba2a1e1dc5ca661b689c55509601148ee40a192ea5", 0xc0}, {&(0x7f0000001180)="dd2b585d3a6c2a8f2c9f0bb97fbfe9aea3937e9ffc2f37fccf035ac4e95e84ffeb8720a7ccb9f0eef32bc4c3b5982d2eb916f973e9b017e4f4fad97f50b5cede4b6322b8b3630f6a221899ab09e346fcf50c145081dbfb357c9a2659c400ce456be9b25cb44eb3ec2638abb8176a80b7d4b7ad8b778036f88030cbd6151d0c1e157e370fc1a81d3f3a0a0252bd4ebd81291874fcfe013a3cb6e04ff377840dba8d7ee4fdeaea3d0a8d99e468bfebe6babff5dadbc47c9b99a9701418f30b4eac369bbe0eff07331b89a6668bcd8adc3bcc8983a98d066daf50008899d8911c26b9884936531d6d7394818663a7bad693ed7a76296f14b0dcb6f6d22e7b3c25907eb2834ac0d6fe81cde112fa4fa11b048faae667f87a64f22911abf34c7d80a3ab9ecb2767aae1a6c1ed645aed88d9810481a635974ec87fadd0d2c1543c40a013b8ff1ceb0d8e3382d33539e9e64c374bd24bbaaf00ac98e64d1a1ef44112c7d3e7c17e967cc7dabd8253becf53c9d92afce691ec6dfb70607637ec2cd47bf8b744d5be9d2768e0b8c0d3143b1391bf7bda027ec784978fc0648ec348f5dd4f90574c2419f991b6c4906fe02e5807877eddf0e7140053991dee94b082cc1c68c1c15fcf320aaca2d379fb5a8600efd7974ef85279f8e4880a369035c9ae2494f76ad05975121ded40397591e72b619e2ba466192f8f5137c7bf98ce6fb680d071352ba7cc987e0f623d176615cfab003671b209fdd3eee4b84aa22fb89de7572df122debf81fb307127e12705acad4fda60f4fde3d7fbd5fa3a4b93140315e36c3bd26da0b3d283a9cbed978cba58a83d6809961d009c723d9c02da05249f2a62a32f8626d990d838f1069adedeefb65a5286bdaece7896de18463d1c5453b5614aa3b34add5bef9b2539ed855a03340fb0b7be6fb50c5cdb913f24c909f2dc229d93b5e2d6eebaa8590f97a68ef2d35ba5a7ce00142e0d51ebe934e1fc9d73713039a535c7ec7ad2c8a6ac1a0383f0206f4dd65069032dd39f501177921e0555ce5eb9fa96381e920c884d84862f4dad6c67cf5ab04ed3ce902cec16f5e6ef1c0fa150046d99dfd0ab2758ba557140c64b10f0236832277f76560a71637ce29bf57fb21031ef778a1ed570b994d9b4e1b19bb0e42d304c30f9c0b9b921d367d82497481a514b9056819ef34eeb96025de3654281518f887a7cfa69d4b24bd65bc0b2ca6d1b8269545096517c20282fd4490b28018bccb9e9e3e553175e819b54267aed688f743983427333c5f6d6573707803b01135c08bf6ee78d29c5fa16ed0fcda3ccfde88f2f11cb290a16403daf6e5742b58e6fd507c27703d8b955c6ba1c243e4bc7efec90a5a9b888aad6c76f58c2261331374df10ab5d38095fb3b34f52eebfeb84abceda6b38c24085199df574d263e9226f88320cfd04362d5c0a5fa9080c8ec6713633e705b451d7d64cc0df7b6505706b7cd645baa24d6bd3301251b43fbcf0a05a17bd0dc0a613a13319348f9aaf5baf9ad1b549f1ede29d01fb20a11c2011a7185a58ba8e51ac0ff0c3e3ec6d76c88134fef500daacebc0738898a32daff61f1c691e20f3980b381480ec9b09e5b003ab3f77f4fef64785520f727caa9fcbb3de0ca0aea00c5ae5cfb48245ec563656e74cfd68837dbd943930a7420eed49706d4ad067348826e387ff7a5eaa36870262b31ebd04daa40a3e0dff47e1c4666a7c70e5c55e2c76fb01841dad20cc45ece05d6e2c60ddb5f3712130b0d036e20d3722af73a2d84ca0aececb49da00a14264e2dca7d9516e57437730c2ffc2c4cce5192b8765f353531654cc99195f7fab8fe4c725158e390ee9506b32c7d3dd2d980741076ada8c6dda24ffc6badfefcdea4f28c476f296690e18f4d428fe2144c063669d8254d2bd73c868265c111d5e901b292a19dcb0add0fad8e4234714c58be77470a621b0e82534979ae9a0c27e0671c9c5473b5624f77c8c0dae28dd38b59896739e3c8185a07bca70cf7da48ec37a184c40cd32d868093903faf10f4bbf013c32573cdde3726f94cf6727d5c1182cf16db269358caf832c1130626d1c476c28368f175da15ecec07f509e9ff508bac6274b46362c3d7932e426280fee210780aa7bce333963e924e0c206077df4159b82100289ab71ab98f809b899944371956d593d65494e28fb6c2bd6c025491c9969030b4fbf04e898b155885e48a5da705fafc2eab0046572cc65db58bc3e33548910ba8e3fbd2d03afa23f8bbea84587eb04fc1c346e72eb58bd5b6da976dd607ac3afb0dd1d1cd074b5128243927720dd7bf1b30d6eb0664df9a3a281abd1a216be01f4e10a86e8d757da512c95c37f9a6b5aec893e3bfc16ad09c8781a6ad2885170d99380d11cd6a0e124bcd92c34969dfcdd239c5bf5a68ac372343aa40206df42fd517c0b12b27f6d36f23a365df4f5bda15a0d8c2e25f6f076085bcf61172cc6acbfb0c14b6b0f2c526e01a9697623a62c05e0cfbf1f4a6c7ef72b1e70041839526c6a1b3b33de0b8664c8c48cd01a36f601aafbfa433e90cafc57523e9a380d4793573d60dd2082414c963ed1f7858a0651431295c97d9b653e9603f6d12d65b65bd14516430357d88feeedb707515d5b3cfe7876eda04381e09184fd514c73535fab9f45eb2b822852c2a254d66e2702d731d9b5e9c424be0228599c465bb5009c5dc9e32e11d6d14a98fcd90cf13a7fdf160a4d93b737a83b7bbe87f69d01c3eaa233102514ce4e98eb810864ed343e4d6be8f768e7be3fb4d802464e735e9aae1e754018edaf88fe2bbf24b838903b128613a5fc6341db4d74040ba5205bd298d69989cc5ed4292ba0f232ff43be5c5d2b7b420ae8a3ab15e829f5aa43567e841f29d3ba0059b83df86750c730f61cd4dbfeda926bb3dc9e91ba323f494fc39584c70d3ab59bad12687f98bdb195ae966217bcc16bb0874a076c662d3dcbb643ca7606cbe18d79864626be72af609f2a450635e8590ac5dca58a6fc719db08dcd8877070a639e7c55226f2569ea1cca178970b61b1fba7616f5c1b57e1bde607bfca9b0b72227d63dca8b94c09466504f1c09659097a831f7ded75f9c77f6a3d0c29a9efd332e65080f3a99cf2a936226d9d9bcd707277c5664bfbcc04ae114b6a3c5dac8b79f1c22c08dfc240265bf95e74b339cc903134dfddd5e2ca3d7145a97efafdd6c46e7100e39e66f00cd510c4c2a026c6174c4396737a94601d41dd2e3851e2ec0d6084321cb09397108a0ad004c05e7d828de2e20a6e200a2e4798dfeeb14a0fa2a616d4ffaf27fceaa9d111a2ed042b2ba408d1c986b5845e456f67ad72bbfdce2e98f360d289c359d19703799541386074a4a4c62ad6abf1dcf935703a03f3df7f8e91225a7a0e0fdca3c8d2dabf0161363f2780c13a63e64523eee9742bf403484da04143a0d1e80f291a55940896e7511367d389e6a1cf92365a180399a0e20a71fd34f4c75712bc68a573175a33652387e58e54f6104608d1c1a378b75f98c54a77bb2269f307754325102621d1397c2a2bc84f3b7740b2a9c341a2d5109ddaca21a8eac71d3a0c974fe712a2358f0fea3f88ea3b78c3e78743d4e7b4f514a027c49ee867c8ae6aadc625a139912bc24886886b23e231ce9870202dbe0e0680b9a206b296b03540ddac75eb248beae01a1ad094cf83df73706a9b7f4bd8445744fb04b8ca63e0ab70daa9b86b6f98d416b2f91b15e031ede0b0e723959ae09e7d0c059d5bccc8c6a8f81012a5b7c07e1148c361a3c9c195617ac60d804abe73aebeb04e82c0127cb73b9bbaefec7b5d4faa066e717c882bc9af11117596107da74a2646295730f9d74c8ff06ca476beaffc6d0c0ea26fef94f025f3bd842b2a75bed7e4f3a7dce77178cd153ab3070a349693130417d90f351db01b98445e9d58d2e5044881ec55b46a599abc4fa3ad58b797a2a246876708b0e9d6f5e51bdf90edd925dcd4aee65514dfa268377cea1673c06aed15d9f9c4ea23c22cb392fdfe41665aab4a3e3b2d1d3359ea4e3f3b509777e98cc4317aea5c9773b1e8fa5bf10db94794dc58e048430ac245532497edc8759928e7b5bdd9b92c8c9468d02d1623638cb2366a4ccde58145a12828d370877a35978a1451a697b96a12486de74300e7fb5e8e7392b71457da28bbeec745683575d2d11571e454be47a8ae1b1450a08c8021db4e2f3f43345259e60ac5126d64fcf22b243a3f578683f43c14055fd256d70a1e8f13a877cad4f51eca5a5206800258d9ecf0c66aecf9093dfb44aa75ea33f4fc1702299aa1c8b28fa572053c5ccbb6081412afdc7df34b9e5a159a8dac6f09b4f2f01c8bd8340a5b08a3b52f42cf3612dd70b7f88d9701f10cb751c1a62a5df49b2d1ed51045a3663fcd19b690a1d1fc0cd7fe6ec0087a7828f96d09723f06b6d0d8cad16f49a930e8e48b79e7e4b058c3d0342d3acfb76a035c5c7ca0ed61d7426373ff5a662dc02b18a3ae9e976ee3f502bcee033f43a7a8e275874a10f5dcdae20e2c72ddf5fd3877f22395b77f2e01e40d428393b27d0333b25a210fe9b38c865c8e1d19b7417221c749bba27063b92ee01676d9fd3a7487d127fac0b9caf1dd324f6a2c4bb4aa254e2333faa0cba3e08e7e855b1fb3826919125502d27b56943c5215cce5849b3afeb0d46bb08d17d0a13abc275ed2fd4cbc3b828612e6f1fb5f2fdcda97b25cfa01f789bb0169a497e0427f85c825758e529d14367712fa5ef9750dc85a090b315de4e4ba323703c04adef0b89a01f398affecad923be51c14258097c582e1571b0f4ac24759e2de999a4a8553ec51089c264afb4c95f4f18f503cf92f7344419c01cd79df34bc1075da7c17729c0be196a1a0949e19d1f121ff047ed8d72e2f979ed70c6e52757b54ea59034c6e0492975ab7b2a93d81e5a371814d8f6d704f0fc27f359f7af61663f891ab182876e98553ac66dd8daa08714715c17f2160df51f5b5d925ace2c9864eba97c74a9abfd36362e9289246e5b04e658be070e7ad7c14e8827e3e7ed3af8faa9ce6b0098ebeb8b4106370eac5723e59d060d69a81faa112874a137213142e5b3c116bbb7acdc58de93c9907d5d1fbb177494828fd794d29f6d005413c0c9d67e1706455da5a73828d9a659393d6aec97b3384f7408c50cca70e137d1019dc04b450aa233a00f6d63b5e9788e4a6561e8a2a04768c5a90533e5d796dff71172aad19403eb95eb664735928e68efec6ded74dd598dc7dffabbeb35fe751d80eff8c255b67c4ff2fc2c778db6001296adff4975bfc4c4a36d902b8357b8427761d7dc330a23616dad1555213a02e55599ff3871ada01236e3d22551dddd6d6527b09fbfaaf8837c596c436f25b02ac4e7b99f79ad119e10dbed9dc09b187bad888a0b2b1a423d21f25e71db607e49c91604611fed326025a72db169f02d9c6d9acf9a3081f17937a4e1d24f93145370bd020f75b0d0f5d010538f6f7d80fbcb9506373826fb98e9f9d571d856f84022df93539b91805c667b93d966ce39ea781713f686258c20344782ed67e33330316a9ad2f767ac45a79918751f8e107e8ce4e7a0d825c5cb62bd3baaf8d1f5d97c1f4af4ea9f35398ad010896ca65ea3bedd168776d0e22dc69ad3dfa997bfb7658a5c40e07b283d44af20a215bbaf99c73f032e0e863997394322598ac260ad5646f4df007723f38e453b08a0e241508d270118f92fc71a3c402db3c260effd5dbd053e12a2947260ed20417ac6eafec05", 0x1000}, {&(0x7f0000002180)="fb2c697498c06717", 0x8}, {&(0x7f00000021c0)="f83b25170e2300b4e65154c46114cd6bdc2d3c786f88e7587aaec05068c1a87420dc9a2b1a04e7700d485373ca06c3b893f2a3976a921be173bfeb2eca3cdd885e224431d45b2fecce77211c959c591f14adcae0", 0x54}], 0x7) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f00000022c0), 0x4003) r3 = creat(&(0x7f0000002300)='./file0\x00', 0x40) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) symlink(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='./file0/file0\x00') syz_usb_control_io$cdc_ncm(r0, &(0x7f00000025c0)={0x14, &(0x7f00000024c0)={0x0, 0xe, 0x9f, {0x9f, 0x5, "77e9d64be077ae971accfae923054876a04d9b789d92e216ca15b8e848b15a178eb7a6a6d8014223c47b21c39349890bc7b7d1156d46977ec69be69626ca8c1e36a30d8a6526086f060f8c9a323cabfcee3199c7377bc39760e6c2f7e3787e010bf35e3ed39d80f5b074f3dbdeb86a4a312f558ebdb05af82e89f9f6d9351b76cdb233f0bc738ec953327e4b1626fb4d498f2059c5f8698a6b53fdb91a"}}, &(0x7f0000002580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002840)={0x44, &(0x7f0000002600)={0x40, 0x30, 0x66, "dc1d2da949b58058d10850c904bd0a44d1674531b1dfebd7e83a85abacac81273c6ce9f59c2d0a32d74883b1282f9e350c9e93b32be9fd80821cbe63425916af60318082597ef8a4ef773d5bd811ad50212bf44b4be31e8c7c4fb61fed3fb39975fd61ccc374"}, &(0x7f0000002680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002700)={0x20, 0x80, 0x1c, {0x4, 0x2, 0x7, 0xffff, 0x2, 0x0, 0x8000, 0x6, 0x1, 0x4, 0x2, 0x1}}, &(0x7f0000002740)={0x20, 0x85, 0x4, 0x239}, &(0x7f0000002780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000027c0)={0x20, 0x87, 0x2}, &(0x7f0000002800)={0x20, 0x89, 0x2, 0x1}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002940)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000029c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002a00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x40, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000002b80)=[@textreal={0x8, &(0x7f0000002b00)="b800008ec0f265f40fc7190f20d86635200000000f22d8b8190d8ee866b9800000c00f326635000100000f300fc726d5db0f20c06635000000200f22c0d9f166b97809000066b8ba00000066ba000000000f30", 0x53}], 0x1, 0x20, &(0x7f0000002bc0)=[@cr4={0x1, 0x210002}], 0x1) faccessat(r3, &(0x7f0000002c00)='./file0/file0\x00', 0x20) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002c40)='./binderfs/custom0\x00', 0x803, 0x0) sendmmsg$sock(r3, &(0x7f0000007f40)=[{{&(0x7f0000002c80)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002d00)="4a536623ab7a0fa5e99e4c99a0a007bf2f512b322cdfa5414acb6fe9b1435275d898f2acff83cacd8b9d63e3d83600214c1983c28a6fa9ccdc16629fa5f979908916f29cdd4250a1d20218530e2b5f3a15c4c8e6712dc502607dd09e12b6d467edf4715a0b0be0d443067efd2a31a183c11e682510ed4b08cdd08451a1a306db368b00de73eef390fcfa", 0x8a}, {&(0x7f0000002dc0)="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", 0x1000}, {&(0x7f0000003dc0)="d4e52111486e5f832f7bb6e8dbacebea10e9b047e829469bfa7a0cd384a9f3eb05a7cabc38be60bc873dcf8de6a071b81b04e6ec59898845ed9d0ca907bbe748209a532f532a6f5bad90813e4956df66d707f8a52240be6bfec4718d6f2a2f24c626486b", 0x64}, {&(0x7f0000003e40)="fb2635300319ba05e0fa7a368a3ed40b061debcb86a5fc4c04a5f930a40cfafc8aa9b920e301a2d74218a9d9cc77ec1867fa5e78765acb7c8afc2e24a9cacb622c0046651594fa1bc21be3102edb29e7bd22fa1ff58a566f9ae7f92e2ef0bd", 0x5f}, {&(0x7f0000003ec0)="18baa2f74297fe95", 0x8}, {&(0x7f0000003f00)="ab33606d047fbbdc681f2d4039472d3b046118ebeb3a4e7da81fe03fb1d03c3e98c270dc04d4025a148b3140b3f163f5ff9769819d7036ba10649b93ea219ef581d79d74e6f9e55b79c89de804d20e6104cc84e50b8640ff8f24e80996b76ddf371ea1123a1d89ba97429fc8373709eb399b919fb45bcbddf266ebb3b7262959cdec7c649613c375b8302925e40e3e2be8e4d70765e44ae54fd601ab070f1f779100d90d9395de4592aa4acf590c9611c96d6ea02674e5f9736f72543932d7f421", 0xc1}, {&(0x7f0000004000)="5bbc7cf99dc941e9a70ba08cc1003717c83c35a400db387c332e", 0x1a}, {&(0x7f0000004040)="d28535f05e0e469dede2a282858dab005e4aa48ac40ed5d11c90d22883c925b6b19165", 0x23}], 0x8, &(0x7f0000004100)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}, @txtime={{0x18, 0x1, 0x3d, 0xd7f5}}, @mark={{0x14, 0x1, 0x24, 0x4e0}}], 0x78}}, {{&(0x7f0000004180)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004200)="45a8dbf17bb678e21e6fd25ee108c3f257dbcb1969b0e50c74a46e55b6edf53ba1854f81c0da68c8cf353433b349d0dff64176e09f7e3b545d12cdcacdcc8e9d600e18909354669550503496861ce4861b319252cbbf99d93771c82d70abe04cfc9f22a41a390f955527542e7fd18172b7ce8e43c20753d1cc5836f2bd614b6322c5e5036365d33ff8ef9a52b25b3d331eecb55bb892ef8d622b1e903f", 0x9d}, {&(0x7f00000042c0)="fbc5507d2f19f09fb0c3cc7f6c36dc3acaa4cf30fffea37b99e4b083cdac6a21612801a2cedc1db90fcb7f0c64678f564bb4d11d2036cb5928d61fb33c3a1eefe3bbb342fc7fbe8f4fc8b8957ff215a6c72a2cc8a3cc7d16aa146afcd7a58a02d4f5f5581193d6b8171e48966e62605892cfff4a8b63b0a7100f2c4494e9217d954f1d6318ff06f5cd20d8cfc2bb6cb0180aa57cc1f9229504d3974c1e9e831e5d9e60561f504e7892f5d43ea6d2a191f8759949d14645c98a4fe89d17238c1a412c952de6b5e137cfb94965a156a4c6a87667bf8c1f0c1df75af3d914", 0xdd}], 0x2, &(0x7f0000004400)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xf27a}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff4}}, @timestamping={{0x14, 0x1, 0x25, 0x47df}}], 0x78}}, {{&(0x7f0000004480)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80, &(0x7f0000005840)=[{&(0x7f0000004500)="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", 0x1000}, {&(0x7f0000005500)="774fa9b7", 0x4}, {&(0x7f0000005540)="cc0b7fc589d66750d91bd9577df7c8c4eafaf287f11836e58bf42d8b1687f0daef1450c518b272f026dbe646401316cabd84c722bbe2f9c8df1d31170cb72890e5b549ff589a6d6658215fb9be5df39352adbdf1cb3d7f50a7a0e3028dad8b9c0308d2632f493315171fa1f7d13d8686da74a8803ab167b1e413bc64c6cbdef25a4487539c86cee1a397f7b2ddf46a58c6fd360571f5e3e891df7e0c9e83674db8f377631a292309fa1cf73fdb118745e4a5b8addc814eb2d026432b46471c6f9c1925ccc5213c86667fedd452b91570c616cff2816aceaad752edd3da0688f722eab437aabe19270fc9", 0xea}, {&(0x7f0000005640)="f8e3ca7eea1a1e4aa787a1341313f716110ae42d7b863a7a0c9ec7a049177c849e7e2d5f6b3b681705072c86463f608711748bd5725dac82c60a4862b0c7de93f5aae2c57a14b67aea21aaea4b04bc88d2825614e9180f26c2bec694e5ff31035fb44bb1c6b904b582f7defaef89b7d81eb32d343b251c49ce376a3a32de7b3b2fe00b728ae7e4956ce27b1edb29", 0x8e}, {&(0x7f0000005700)="66993bc6210979447fe26a2391117131e88032d3e11bb9f99dbd64d83056c1fd8597a5b09eebe30da3c39e26c0da89fe1fb44a4ef5bc6157d250c97ba51196ae7ae11deeb63410dd3749e4707a20c71756b4929cb56739300a5ac84e56ca272d2190958dfd80374cfc9a8f529e09e07f164e7c58bd1a0903d321ece88aacfbc6d017503ad1fa15e6328515bd72b072df4f0f7d9e2bf12e24", 0x98}, {&(0x7f00000057c0)="fb99a70fa7763840c603818e47a672a64c973bf3079180f0da95beb7bcc72ee376c8233a1a1e14076abd46a01a7528c52c7461a59be817f22bf29d7965f2c23de38fb642b2498157308b43db1cd3d1fad44707afa1e39e2827c2163480b4c35e67bdf4032b09d020c34fff96085c09560522", 0x72}], 0x6, &(0x7f00000058c0)=[@txtime={{0x18, 0x1, 0x3d, 0x10002000}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x9973}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x90}}, {{&(0x7f0000005980)=@ll={0x11, 0x17, 0x0, 0x1, 0x6, 0x6, @random="8f1b5da0d540"}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000005a00)="ef51ee0712aef1bf0134be9185e88dcb926e761a348e7a0e5e", 0x19}, {&(0x7f0000005a40)="cdcf41f4bcd7432d0cce3ee42766be830bb5bd09e7ad7c639902ac58e9b9f78e4eec29a26bf0136bab0e7a60cfeb6125173d4e0fb884eb5cf17ec4932072427bfeb46aa512407cd0", 0x48}, {&(0x7f0000005ac0)="3cc6561c1de49cfe218908ee28bba93cd8238a72af7f159278666caa182c920b555f1355c0e0a8ed9298a348e34859183a34cf18232cb91085d345dd3fc81773264550eaad0dcf4a347acaeab8b247545bc1aa3da0b7760d36110f9faa38a144ffcd3efc7de47394ef8188bcad0659e5687c6a0e68e2c5126a7feb3760cd987d41fd647c68200dada4014891e9108ac59976bd0eb5b6701b78cfe835655bfa3feeb14672d5263d84db35a94b8bc577862216c23143292b982bb7767c19ddd3b43ae8e83aacfd181e36b11d2f157ed64ae3f5bd14386528a3743df88bb3ad7d732779b0d14d43e088de0aa5211dc5745dd12af61982b5ac", 0xf7}, {&(0x7f0000005bc0)="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", 0x1000}, {&(0x7f0000006bc0)="d8308e96789f00c76879fb06da3a39bcc6fcd07884fde82306cc9f858be40b222873d5d26c2472f0b91f1e3f03422cb2817a18a5a828ecc9b78f029a795500f0cd1a12a5a836ebed1d304f69e637110e", 0x50}, {&(0x7f0000006c40)="cc49a59669555b25b2383445f8232e82ebc42b1eb59abfe13f8161c991dd32479d2f76577b7f5760a3da462e918de719e3666ac4beda653931a120c2cd28eb9d380467eb33e9bf9cbee6e933133a9be30018f29944026c939c60dd8d212ef3d8911df37571d33eb3123f504c4365a676", 0x70}, {&(0x7f0000006cc0)="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", 0x1000}, {&(0x7f0000007cc0)="526ebcfafd6efd50bcc72d52cf40ae358d6664b791a457b8d0de15cbc1b7478d8cc04a8d7dd103ee14df2a4494", 0x2d}, {&(0x7f0000007d00)="706bce0eb47c465ff8a983e9b2e1f9561898c1a1bd4a649d8a0ad9e757b123df1ad9b99d3b9b17ebfa37bb90e589ade46d794a3084f2bf52e5f2cc38ba30f3fbce6b168f4e47f39047d7a3fba1a52e6745dc85958af041a048a7bba910614826de228127bb65259e92501fb1d9bafa6e0f0427f9c6bd0f0edc21267bb90f43d7", 0x80}, {&(0x7f0000007d80)="cba6fde40faaeb2ff20945ee2ce4026ed4493b6dd2b9f62ca4b7403ce4995ade6c47ec6cfe71f395a7f2d740d78973711adff8b2a6ff3c8e014fb0485705d564573d0f63b2e76b35c1842def539b276a7e7996739daf45eb459b6c748fbb4b2541e07bd73546f103815557986e623c8e86d6ff57cd5f", 0x76}], 0xa, &(0x7f0000007ec0)=[@mark={{0x14, 0x1, 0x24, 0xcdd}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x60}}], 0x4, 0x44010) stat(&(0x7f0000008080)='./file0/file0\x00', &(0x7f00000080c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000008140)=0x0, &(0x7f0000008180), &(0x7f00000081c0)=0x0) lchown(&(0x7f0000008040)='./file0\x00', r10, r11) mount$9p_rdma(&(0x7f0000008200), &(0x7f0000008240)='./file0/file0\x00', &(0x7f0000008280), 0x808, &(0x7f00000082c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}, {@rq}, {@timeout={'timeout', 0x3d, 0x1ff}}, {@rq={'rq', 0x3d, 0x2}}, {@rq={'rq', 0x3d, 0x80000000}}, {@common=@nodevmap}, {@sq={'sq', 0x3d, 0x4}}], [{@obj_role}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}, {@flag='nomand'}, {@dont_measure}]}}) fsetxattr$security_evm(r9, &(0x7f0000008400), &(0x7f0000008440)=@ng={0x4, 0x17, "a648e825f4f5c217"}, 0xa, 0x6) setgid(r12) 850.423464ms ago: executing program 5 (id=1448): open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80982, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100)={0x200040, 0x10, 0xc}, 0x18) mkdirat(r2, &(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x182) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 764.362166ms ago: executing program 3 (id=1449): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x38, 0x3d, 0x13, 0x40, 0x411, 0x12, 0x552b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x8d, 0x8a, 0x32, 0x40}}]}}]}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 239.832876ms ago: executing program 3 (id=1450): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd523b, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2c1fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x9]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0x1, 0x4, "6a4a42aba98b2f07359d3272d6e8ce294686c732c24a39cc509c79ad4bf6de70b02c91ffbe04916d065f1681d04be078c2e4c1014ec966a8158d76d7aa63c0d9", "ce5862f532d5bff5ff013807abc3406dfe731e87f50cd5bb091fff519936869fd5295ddc045503fe0b01150b5b5ebf1561daa3dc633d717f3f7a3d1f1edac2f2", "c0c045fd3dfd710ca2562c2d8e828bb61dea84761cff87e28f9c8a246fa4f376", [0x8, 0xa]}) 182.161917ms ago: executing program 3 (id=1451): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x40020, &(0x7f0000000280)=ANY=[]) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000ff3000/0x1000)=nil, 0x1000, 0x1000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14100000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) (async) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="14100000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x400c800) r6 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000180)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00104fc08ca9fb88bb477a9a46b6ac0f90edea564232e7ba762ec2d41030e248f33f52b901b1e7858a91dd3e36029fbb8d381d5fb078d1c481004dd037381748ed9229d921d07512bcf04b103def6477863b9812706af9200d3f30995b3619fd7f35caf86027256f860c213bfde331fdc7453688486eca76d7f009fe914f60cda584d322ef775ca954dd1d257d9eea9ba8b1906b4d4a70d88a6a36dd2e16908f3f93"], 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x10, 0x6, 0x5, 0xd9, 0x3, 0x1ff}}}, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, 0xffffffffffffffff, 0xa0e4f000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, 0xffffffffffffffff, 0xa0e4f000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000072f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0x0, &(0x7f0000000100)=""/95, 0x5f}, &(0x7f00000001c0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f000072f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/114, 0x72, 0x0, &(0x7f0000000100)=""/95, 0x5f}, &(0x7f00000001c0)=0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 152.434947ms ago: executing program 1 (id=1452): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = socket$can_raw(0x1d, 0x3, 0x1) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) dup(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646f6f3dd05388028654516da8b1e47c83efe2f5b1da0c735555440774ce5f66a2d41a3576c0f18d1411050c640228b15f01e75efa5afa25f4469dcc180fad225140396daa6be997aa4a3aa7d6977de689a644e68a0364e1145d3a69cf42b6a1766531a131f447db4c5e82b8e62da443d88a0f4101fd457ea32cc412f3cecfc73d67e582b593fa22ba31922a04a4469875d06ca51f61ca0936d4b1cb734515276b3ba2038c42472d412a4d23b0d41590e647409763e7794e426d9c85e2c4acbef6a6439721fe593ed087f74aa9", @ANYRESHEX=r3, @ANYBLOB=',aname=!%()-\\)*,debug=0x0000000000000004,\x00']) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x3d0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x58b9808bbcfa107b, 0x12, r5, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x90000, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) ppoll(&(0x7f0000000180)=[{r6, 0x2000}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r7, &(0x7f0000000000)=""/78, 0x4e) ioctl$TIOCSBRK(r7, 0x5427) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000003c0)={0x1, &(0x7f0000000180)=[{0x7ff, 0x968e}]}) pipe(0x0) r8 = syz_open_dev$usbfs(0x0, 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f00000001c0)={0x3, 0x3, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x24000840) 78.403528ms ago: executing program 1 (id=1453): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) r1 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) splice(r2, 0x0, r1, &(0x7f0000000600)=0x8008, 0xc, 0x0) mlock2(&(0x7f0000389000/0x3000)=nil, 0x3000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x800000000) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x7, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r7, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r9 = dup(r8) ioctl$KVM_SET_DEVICE_ATTR_vm(r9, 0x4018aee1, &(0x7f0000002580)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@aname}, {@dfltuid}, {@access_client}], [], 0x6b}}) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x3}, {0x5}, 0x184, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)="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", 0x189, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="020000004a010000010000000c8200000081719ded45e3d1de107f2497d0feed3853a196e8f8f28cb2ff9985e213dc399ab398f1c2e9ea8a6a11a24b8bd287a62f1ccfb3b15e91d4a3c771d343bcb60ee6b19bc5ab2366962e09d37ef52da823c85ff9ce52e60592a41ffdde3a1fd188cd0814ae9b8bf930088bd2d2709c47c2f727782fa7111d2b3c62bf1e6c4819f767b279bb000000b74c30bf791e74ede238d4466a5be2910722cecde73ebbc4d06c9760bd8734808d92da7f76e1a487600bbff7675e3532caa3d257c196adde891f530d06ac3106ad9512b8cfd4bbe60de1be6e64074ef94699f01e99181d44d1d63a3f89e16bcc98dac08b0a3d9c93e8967d0cc7029d6a3803070acb9bf318ead6a1db8f02c6d9a3c7d2b11743601c57a2c88f6b49ad9c28e4601a0e975168c8de21d020b7e0462cf291beef887043b4f4588d5942b5cfb90de86babde70d2f0a72d9a0000004240006873e56c67c2aaa621f9f84e764e2b108d6780c639be7114555c9af6f8880783ff297315c0db6a97a7560b0751fbc2e44b3aee50f08f194ccca2bbeae66ec2ce01fcca872bc0ed545426beb359d587be50b85c63ba35bdc9cdecf4134b620ac0707fbe45cd38419a1d5b9b7c29a25d4271316ff42b1d11a303a91514072ad29c508fcb00a2a9dc0913d13a731221b04371de7f260fb64badeeb9c61e32d6df207b5a1051f5d2584a454381e1a3fdc5b4fd122af431e856ef7fc35a9dac4a0937bfac9390d443512e899746e262fd3579cf6347434c9589766796f7052df8cd8a8242f908e229cd9ad474c456f28feb6a8a57eceb4848545e302999837900983a5e63bf36a7eeb47c7abf133c70f45f4690455d5641134394ed978e7000768cdc72ae46be7e74e1f1bf9f43bdacced6a4fff33b1becd472d2d8ba9a2e9a717905"], 0x1f0}) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) 22.30675ms ago: executing program 1 (id=1454): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x48400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setreuid(0xee01, 0xee01) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001500add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r4 = eventfd2(0x6, 0x80800) dup(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x100, r4}) close_range(r0, 0xffffffffffffffff, 0x0) 21.85513ms ago: executing program 5 (id=1455): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30}) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000000000009eced6ada836e750b9a1d470201388e22b406ca6acb002b3460f4a247eea670fe549db21e9ca62883c7cea170effc4801da1d20539655917fc347db6c006cdaf45"], 0x8) setsockopt$inet6_udp_int(r7, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) r8 = getpgrp(0xffffffffffffffff) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r9, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x0, r9}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x4048881) close_range(r0, 0xffffffffffffffff, 0x0) 19.51261ms ago: executing program 1 (id=1456): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000b700000000000000000000000000000000c116ad67360100000001"], 0x110) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x2000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=1457): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xe, 0x80000001, 0x6, 0x2, 0x1041, 0xfffffffffffffff6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x2006a], 0x2, 0x1000d6}) (async) setuid(0xee00) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'tunl0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x8080) syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x6, 0x10001, 0x2, @private1, @rand_addr=' \x01\x00', 0x40, 0x8, 0x3800000, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x43}, @ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x20007, 0x180862) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r5, 0x4c01) (async) setitimer(0x2, &(0x7f0000000b40)={{}, {0x0, 0x2710}}, &(0x7f0000000b80)) (async) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r6, &(0x7f0000000040)={0x10}) kernel console output (not intermixed with test programs): 22' launched './file0' with NULL argv: empty string added [ 96.612870][ T3352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.624495][ T3352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.645551][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 96.658721][ T3125] CPU: 0 UID: 0 PID: 3125 Comm: syz.3.856 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 96.658757][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.658771][ T3125] Call Trace: [ 96.658778][ T3125] [ 96.658787][ T3125] __dump_stack+0x21/0x30 [ 96.658820][ T3125] dump_stack_lvl+0x10c/0x190 [ 96.658847][ T3125] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.658875][ T3125] ? ___ratelimit+0x3f7/0x5a0 [ 96.658899][ T3125] dump_stack+0x19/0x20 [ 96.658925][ T3125] dump_header+0xd7/0x490 [ 96.658946][ T3125] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 96.658975][ T3125] oom_kill_process+0x4c0/0x7e0 [ 96.658999][ T3125] ? sched_clock_cpu+0x75/0x400 [ 96.659027][ T3125] out_of_memory+0x7ee/0xbd0 [ 96.659052][ T3125] ? __cfi_out_of_memory+0x10/0x10 [ 96.659076][ T3125] ? mutex_lock_killable+0x92/0x1c0 [ 96.659100][ T3125] ? __cfi_mutex_lock_killable+0x10/0x10 [ 96.659128][ T3125] mem_cgroup_out_of_memory+0x279/0x350 [ 96.659150][ T3125] ? drain_obj_stock+0xed0/0xed0 [ 96.659169][ T3125] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 96.659189][ T3125] try_charge_memcg+0x8f7/0xde0 [ 96.659218][ T3125] ? __cfi_try_charge_memcg+0x10/0x10 [ 96.659247][ T3125] ? __alloc_pages_noprof+0x31f/0x7b0 [ 96.659275][ T3125] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 96.659302][ T3125] ? __folio_batch_add_and_move+0x2ab/0x370 [ 96.659326][ T3125] __mem_cgroup_charge+0xf6/0x410 [ 96.659354][ T3125] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 96.659383][ T3125] ? kvm_sched_clock_read+0x15/0x30 [ 96.659417][ T3125] ? sched_clock_noinstr+0xd/0x30 [ 96.659441][ T3125] ? sched_clock+0x44/0x60 [ 96.659468][ T3125] shmem_alloc_and_add_folio+0x86d/0x1050 [ 96.659495][ T3125] ? put_swap_device+0x130/0x130 [ 96.659521][ T3125] ? shmem_huge_global_enabled+0x2da/0x360 [ 96.659544][ T3125] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 96.659566][ T3125] ? __kasan_check_write+0x18/0x20 [ 96.659596][ T3125] ? _raw_spin_lock+0x8c/0x120 [ 96.659627][ T3125] shmem_get_folio_gfp+0x5f0/0x1380 [ 96.659653][ T3125] ? shmem_get_folio+0xc0/0xc0 [ 96.659673][ T3125] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 96.659703][ T3125] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 96.659739][ T3125] ? inode_to_bdi+0x6d/0x100 [ 96.659769][ T3125] shmem_write_begin+0xf4/0x270 [ 96.659794][ T3125] generic_perform_write+0x32d/0x960 [ 96.659827][ T3125] ? __cfi_generic_perform_write+0x10/0x10 [ 96.659856][ T3125] ? down_write+0xe9/0x2a0 [ 96.659881][ T3125] ? mnt_get_write_access_file+0x1af/0x3b0 [ 96.659908][ T3125] ? mnt_put_write_access_file+0xc2/0x100 [ 96.659936][ T3125] ? file_update_time+0x1ef/0x220 [ 96.659962][ T3125] shmem_file_write_iter+0x105/0x130 [ 96.659989][ T3125] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 96.660017][ T3125] __kernel_write_iter+0x395/0x830 [ 96.660037][ T3125] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 96.660064][ T3125] ? __cfi___kernel_write_iter+0x10/0x10 [ 96.660082][ T3125] ? get_dump_page+0x160/0x220 [ 96.660107][ T3125] ? __asan_memset+0x39/0x50 [ 96.660135][ T3125] ? iov_iter_bvec+0xc0/0x180 [ 96.660160][ T3125] dump_user_range+0xb06/0xdf0 [ 96.660180][ T3125] ? __cfi_dump_emit+0x10/0x10 [ 96.660210][ T3125] ? __cfi_dump_user_range+0x10/0x10 [ 96.660231][ T3125] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 96.660264][ T3125] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 96.660296][ T3125] elf_core_dump+0x2cd9/0x3810 [ 96.660326][ T3125] ? __cfi_elf_core_dump+0x10/0x10 [ 96.660359][ T3125] ? dump_interrupted+0xf0/0xf0 [ 96.660388][ T3125] ? filp_open+0x182/0x1d0 [ 96.660424][ T3125] ? 0xffffffffff600000 [ 96.660443][ T3125] do_coredump+0x1bfa/0x2bd0 [ 96.660477][ T3125] ? __cfi_do_coredump+0x10/0x10 [ 96.660507][ T3125] ? asm_exc_page_fault+0x2b/0x30 [ 96.660542][ T3125] ? __kasan_slab_free+0x6a/0x80 [ 96.660563][ T3125] ? kmem_cache_free+0x1c1/0x510 [ 96.660597][ T3125] ? get_signal+0xa75/0x14f0 [ 96.660623][ T3125] get_signal+0x11fd/0x14f0 [ 96.660652][ T3125] arch_do_signal_or_restart+0x96/0x720 [ 96.660685][ T3125] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 96.660719][ T3125] irqentry_exit_to_user_mode+0x4e/0xb0 [ 96.660745][ T3125] irqentry_exit+0x16/0x60 [ 96.660769][ T3125] exc_page_fault+0x66/0xc0 [ 96.660796][ T3125] asm_exc_page_fault+0x2b/0x30 [ 96.660819][ T3125] RIP: 0033:0x7f986e64f927 [ 96.660836][ T3125] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 96.660854][ T3125] RSP: 002b:00007f986f619120 EFLAGS: 00010202 [ 96.660874][ T3125] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f986e78ebe9 [ 96.660889][ T3125] RDX: 00007f986f619140 RSI: 00007f986f619270 RDI: 000000000000000b [ 96.660902][ T3125] RBP: 00007f986e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 96.660916][ T3125] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.660929][ T3125] R13: 00007f986e9c6128 R14: 00007f986e9c6090 R15: 00007ffc6aabf198 [ 96.660946][ T3125] [ 96.660997][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.663054][ T3365] syz.4.929 (3365): attempted to duplicate a private mapping with mremap. This is not supported. [ 96.688233][ T31] usb 5-1: USB disconnect, device number 22 [ 96.763981][ T3125] memory: usage 303920kB, limit 307200kB, failcnt 34761 [ 97.214710][ T3125] memory+swap: usage 409744kB, limit 9007199254740988kB, failcnt 0 [ 97.223504][ T3125] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 97.233109][ T3125] Memory cgroup stats for /syz3: [ 97.233306][ T3125] cache 290521088 [ 97.242021][ T3125] rss 397312 [ 97.242283][ T36] audit: type=1400 audit(2000000008.391:402): avc: denied { read } for pid=3368 comm="syz.1.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.245449][ T3125] rss_huge 0 [ 97.269551][ T3369] netlink: 'syz.1.930': attribute type 11 has an invalid length. [ 97.328901][ T36] audit: type=1400 audit(2000000008.481:403): avc: denied { write } for pid=3370 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.351155][ T3375] fuse: Bad value for 'group_id' [ 97.359078][ T3375] fuse: Bad value for 'group_id' [ 97.407496][ T36] audit: type=1400 audit(2000000008.561:404): avc: denied { mounton } for pid=3377 comm="syz.4.934" path="/proc/305/task" dev="proc" ino=20115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 97.424453][ T3125] shmem 286130176 [ 97.459584][ T36] audit: type=1400 audit(2000000008.611:405): avc: denied { write } for pid=3377 comm="syz.4.934" name="/" dev="configfs" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 97.493892][ T3125] mapped_file 4771840 [ 97.528382][ T3125] dirty 0 [ 97.531385][ T3125] writeback 0 [ 97.589024][ T3125] workingset_refault_anon 34 [ 97.593669][ T3125] workingset_refault_file 5599 [ 97.669960][ T3125] swap 127787008 [ 97.673587][ T3125] swapcached 57344 [ 97.724254][ T3125] pgpgin 262453 [ 97.727774][ T3125] pgpgout 191930 [ 97.774320][ T3125] pgfault 113685 [ 97.777925][ T3125] pgmajfault 36 [ 97.781414][ T3125] inactive_anon 124416000 [ 97.834278][ T3125] active_anon 159776768 [ 97.841035][ T3125] inactive_file 0 [ 97.845185][ T3125] active_file 4390912 [ 97.849477][ T3125] unevictable 0 [ 97.853582][ T3125] hierarchical_memory_limit 314572800 [ 97.859287][ T3125] hierarchical_memsw_limit 9223372036854771712 [ 97.866178][ T3125] total_cache 290521088 [ 97.870657][ T3125] total_rss 397312 [ 97.877378][ T3125] total_rss_huge 0 [ 97.881234][ T3125] total_shmem 286130176 [ 97.885704][ T3125] total_mapped_file 4771840 [ 97.890599][ T3125] total_dirty 0 [ 97.895765][ T3125] total_writeback 0 [ 97.899770][ T3125] total_workingset_refault_anon 34 [ 97.905001][ T3125] total_workingset_refault_file 5599 [ 97.910456][ T3125] total_swap 127787008 [ 97.914771][ T3125] total_swapcached 57344 [ 97.919043][ T3125] total_pgpgin 262453 [ 97.923100][ T3125] total_pgpgout 191930 [ 97.927309][ T3125] total_pgfault 113685 [ 97.931416][ T3125] total_pgmajfault 36 [ 97.935542][ T3125] total_inactive_anon 124416000 [ 97.940464][ T3125] total_active_anon 159776768 [ 97.945340][ T3125] total_inactive_file 0 [ 97.949605][ T3125] total_active_file 4390912 [ 97.954421][ T3125] total_unevictable 0 [ 97.958478][ T3125] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.856,pid=3129,uid=0 [ 97.973505][ T3125] Memory cgroup out of memory: Killed process 3129 (syz.3.856) total-vm:90168kB, anon-rss:1160kB, file-rss:53796kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 98.058976][ T3357] syz.5.927 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 98.071392][ T3357] CPU: 0 UID: 0 PID: 3357 Comm: syz.5.927 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 98.071429][ T3357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.071443][ T3357] Call Trace: [ 98.071451][ T3357] [ 98.071459][ T3357] __dump_stack+0x21/0x30 [ 98.071493][ T3357] dump_stack_lvl+0x10c/0x190 [ 98.071523][ T3357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.071550][ T3357] ? ___ratelimit+0x3f7/0x5a0 [ 98.071573][ T3357] dump_stack+0x19/0x20 [ 98.071600][ T3357] dump_header+0xd7/0x490 [ 98.071622][ T3357] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 98.071651][ T3357] oom_kill_process+0x4c0/0x7e0 [ 98.071677][ T3357] ? sched_clock_cpu+0x75/0x400 [ 98.071706][ T3357] out_of_memory+0x7ee/0xbd0 [ 98.071731][ T3357] ? __cfi_out_of_memory+0x10/0x10 [ 98.071755][ T3357] ? mutex_lock_killable+0x104/0x1c0 [ 98.071781][ T3357] ? __cfi_mutex_lock_killable+0x10/0x10 [ 98.071809][ T3357] mem_cgroup_out_of_memory+0x279/0x350 [ 98.071832][ T3357] ? drain_obj_stock+0xed0/0xed0 [ 98.071854][ T3357] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 98.071875][ T3357] try_charge_memcg+0x8f7/0xde0 [ 98.071905][ T3357] ? __cfi_try_charge_memcg+0x10/0x10 [ 98.071932][ T3357] ? xas_load+0x3a2/0x3d0 [ 98.071956][ T3357] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 98.071990][ T3357] __read_swap_cache_async+0x34a/0x690 [ 98.072014][ T3357] swap_cluster_readahead+0x2f7/0x530 [ 98.072039][ T3357] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 98.072063][ T3357] ? xas_nomem+0x71/0x2d0 [ 98.072083][ T3357] ? xas_get_order+0x172/0x1d0 [ 98.072107][ T3357] shmem_swapin_folio+0x9c1/0x1150 [ 98.072132][ T3357] ? xfd_validate_state+0x68/0x150 [ 98.072168][ T3357] ? trace_android_vh_shmem_mod_swapped+0x130/0x130 [ 98.072192][ T3357] ? filemap_get_entry+0x3fb/0x460 [ 98.072223][ T3357] shmem_get_folio_gfp+0x3da/0x1380 [ 98.072249][ T3357] ? shmem_get_folio+0xc0/0xc0 [ 98.072270][ T3357] ? __sched_text_start+0x10/0x10 [ 98.072293][ T3357] shmem_fault+0x17d/0x350 [ 98.072321][ T3357] do_pte_missing+0xfd8/0x4240 [ 98.072346][ T3357] ? schedule+0xc6/0x240 [ 98.072367][ T3357] ? futex_unqueue+0x136/0x160 [ 98.072389][ T3357] ? __kasan_check_write+0x18/0x20 [ 98.072419][ T3357] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 98.072451][ T3357] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 98.072485][ T3357] ? pte_marker_clear+0x1b0/0x1b0 [ 98.072511][ T3357] ? timerqueue_del+0xd7/0x130 [ 98.072539][ T3357] ? hrtimer_try_to_cancel+0x38c/0x6b0 [ 98.072563][ T3357] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 98.072596][ T3357] ? __pte_offset_map+0x1b0/0x230 [ 98.072625][ T3357] ? pte_offset_map_rw_nolock+0xba/0x110 [ 98.072657][ T3357] handle_mm_fault+0x1166/0x1b90 [ 98.072683][ T3357] ? __cfi_handle_mm_fault+0x10/0x10 [ 98.072706][ T3357] ? lock_vma_under_rcu+0x49d/0x530 [ 98.072732][ T3357] ? __se_sys_futex+0x28f/0x300 [ 98.072757][ T3357] do_user_addr_fault+0x96c/0x1200 [ 98.072791][ T3357] exc_page_fault+0x59/0xc0 [ 98.072817][ T3357] asm_exc_page_fault+0x2b/0x30 [ 98.072842][ T3357] RIP: 0033:0x7fc95075693c [ 98.072862][ T3357] Code: 7c 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b [ 98.072881][ T3357] RSP: 002b:00007ffe747af118 EFLAGS: 00010206 [ 98.072901][ T3357] RAX: 00002000000010c0 RBX: 0000000000000004 RCX: ffffffffffffffe5 [ 98.072917][ T3357] RDX: 000000000000001a RSI: 0000001b32320187 RDI: 00002000000010c0 [ 98.072932][ T3357] RBP: 00007ffe747af1e8 R08: 0000001b32720000 R09: 0000000000000034 [ 98.072946][ T3357] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fc9509c5fac [ 98.072961][ T3357] R13: 00007fc9509c5fa0 R14: fffffffffffffffe R15: 00007ffe747af230 [ 98.072980][ T3357] [ 98.073340][ T3357] memory: usage 307200kB, limit 307200kB, failcnt 36641 [ 98.448195][ T3357] memory+swap: usage 394612kB, limit 9007199254740988kB, failcnt 0 [ 98.456240][ T3357] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 98.463150][ T3357] Memory cgroup stats for /syz3: [ 98.463324][ T3357] cache 275939328 [ 98.484371][ T3357] rss 323584 [ 98.487981][ T3357] rss_huge 0 [ 98.491522][ T3357] shmem 275939328 [ 98.495379][ T3357] mapped_file 0 [ 98.498955][ T3357] dirty 0 [ 98.503496][ T3357] writeback 0 [ 98.519045][ T3357] workingset_refault_anon 44 [ 98.523695][ T3357] workingset_refault_file 6135 [ 98.525071][ T3390] fuse: Bad value for 'group_id' [ 98.528556][ T3357] swap 127811584 [ 98.537153][ T3357] swapcached 32768 [ 98.540952][ T3357] pgpgin 272094 [ 98.543601][ T3390] fuse: Bad value for 'group_id' [ 98.544464][ T3357] pgpgout 205156 [ 98.544474][ T3357] pgfault 114213 [ 98.544481][ T3357] pgmajfault 56 [ 98.544488][ T3357] inactive_anon 78372864 [ 98.555381][ T36] audit: type=1400 audit(2000000009.711:406): avc: denied { write } for pid=3389 comm="syz.1.938" path="socket:[20136]" dev="sockfs" ino=20136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.556623][ T3357] active_anon 197636096 [ 98.591621][ T3357] inactive_file 0 [ 98.595422][ T3357] active_file 0 [ 98.598894][ T3357] unevictable 0 [ 98.602449][ T3357] hierarchical_memory_limit 314572800 [ 98.608024][ T3357] hierarchical_memsw_limit 9223372036854771712 [ 98.614558][ T3391] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 98.614588][ T3391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 98.622661][ T3391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:615 [ 98.632181][ T3357] total_cache 275939328 [ 98.645612][ T3357] total_rss 323584 [ 98.649487][ T3357] total_rss_huge 0 [ 98.653230][ T3357] total_shmem 275939328 [ 98.663461][ T3357] total_mapped_file 0 [ 98.682687][ T3357] total_dirty 0 [ 98.690054][ T3357] total_writeback 0 [ 98.694196][ T3357] total_workingset_refault_anon 44 [ 98.699596][ T3357] total_workingset_refault_file 6135 [ 98.705035][ T3357] total_swap 127811584 [ 98.709354][ T3357] total_swapcached 32768 [ 98.713814][ T3357] total_pgpgin 272094 [ 98.719580][ T3357] total_pgpgout 205156 [ 98.723875][ T3357] total_pgfault 114213 [ 98.728066][ T3357] total_pgmajfault 56 [ 98.732241][ T3357] total_inactive_anon 78372864 [ 98.734297][ T31] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 98.737192][ T3357] total_active_anon 197636096 [ 98.749457][ T3357] total_inactive_file 0 [ 98.753834][ T3357] total_active_file 0 [ 98.758050][ T3357] total_unevictable 0 [ 98.774712][ T3395] syzkaller0: entered promiscuous mode [ 98.780243][ T3395] syzkaller0: entered allmulticast mode [ 98.785893][ T3357] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.856,pid=3117,uid=0 [ 98.801542][ T3357] Memory cgroup out of memory: Killed process 3117 (syz.3.856) total-vm:90168kB, anon-rss:1032kB, file-rss:53788kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 98.894307][ T3109] syz.3.856 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 98.911600][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 98.918245][ T31] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 16 [ 98.918316][ T3399] rust_binder: Write failure EINVAL in pid:622 [ 98.928675][ T31] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 367 [ 98.960412][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 98.974361][ T3109] CPU: 1 UID: 0 PID: 3109 Comm: syz.3.856 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 98.974395][ T3109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.974408][ T3109] Call Trace: [ 98.974415][ T3109] [ 98.974424][ T3109] __dump_stack+0x21/0x30 [ 98.974462][ T3109] dump_stack_lvl+0x10c/0x190 [ 98.974489][ T3109] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.974516][ T3109] ? ___ratelimit+0x3f7/0x5a0 [ 98.974540][ T3109] dump_stack+0x19/0x20 [ 98.974566][ T3109] dump_header+0xd7/0x490 [ 98.974587][ T3109] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 98.974615][ T3109] oom_kill_process+0x4c0/0x7e0 [ 98.974640][ T3109] ? sched_clock_cpu+0x75/0x400 [ 98.974669][ T3109] out_of_memory+0x7ee/0xbd0 [ 98.974694][ T3109] ? __cfi_out_of_memory+0x10/0x10 [ 98.974718][ T3109] ? mutex_lock_killable+0x104/0x1c0 [ 98.974743][ T3109] ? __cfi_mutex_lock_killable+0x10/0x10 [ 98.974769][ T3109] mem_cgroup_out_of_memory+0x279/0x350 [ 98.974791][ T3109] ? drain_obj_stock+0xed0/0xed0 [ 98.974813][ T3109] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 98.974834][ T3109] try_charge_memcg+0x8f7/0xde0 [ 98.974863][ T3109] ? __cfi_try_charge_memcg+0x10/0x10 [ 98.974891][ T3109] ? __alloc_pages_noprof+0x31f/0x7b0 [ 98.974917][ T3109] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 98.974944][ T3109] ? __folio_batch_add_and_move+0x2ab/0x370 [ 98.974987][ T3109] __mem_cgroup_charge+0xf6/0x410 [ 98.975017][ T3109] ? _raw_spin_lock+0x8c/0x120 [ 98.975048][ T3109] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 98.975081][ T3109] shmem_alloc_and_add_folio+0x86d/0x1050 [ 98.975106][ T3109] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 98.975135][ T3109] ? put_swap_device+0x130/0x130 [ 98.975159][ T3109] ? shmem_huge_global_enabled+0x2da/0x360 [ 98.975181][ T3109] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 98.975203][ T3109] ? __kasan_check_write+0x18/0x20 [ 98.975232][ T3109] ? _raw_spin_lock+0x8c/0x120 [ 98.975262][ T3109] shmem_get_folio_gfp+0x5f0/0x1380 [ 98.975288][ T3109] ? shmem_get_folio+0xc0/0xc0 [ 98.975307][ T3109] ? follow_page_pte+0xa5c/0xb90 [ 98.975332][ T3109] ? inode_to_bdi+0x6d/0x100 [ 98.975356][ T3109] shmem_write_begin+0xf4/0x270 [ 98.975378][ T3109] generic_perform_write+0x32d/0x960 [ 98.975409][ T3109] ? __cfi_generic_perform_write+0x10/0x10 [ 98.975436][ T3109] ? down_write+0xe9/0x2a0 [ 98.975460][ T3109] ? file_update_time+0xa3/0x220 [ 98.975488][ T3109] shmem_file_write_iter+0x105/0x130 [ 98.975514][ T3109] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 98.975539][ T3109] __kernel_write_iter+0x395/0x830 [ 98.975558][ T3109] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 98.975583][ T3109] ? __cfi___kernel_write_iter+0x10/0x10 [ 98.975600][ T3109] ? get_dump_page+0x160/0x220 [ 98.975623][ T3109] ? __asan_memset+0x39/0x50 [ 98.975651][ T3109] ? iov_iter_bvec+0xc0/0x180 [ 98.975676][ T3109] dump_user_range+0xb06/0xdf0 [ 98.975697][ T3109] ? __cfi_dump_emit+0x10/0x10 [ 98.975728][ T3109] ? __cfi_dump_user_range+0x10/0x10 [ 98.975746][ T3109] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 98.975777][ T3109] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 98.975808][ T3109] elf_core_dump+0x2cd9/0x3810 [ 98.975835][ T3109] ? __cfi_elf_core_dump+0x10/0x10 [ 98.975867][ T3109] ? dump_interrupted+0xf0/0xf0 [ 98.975897][ T3109] ? filp_open+0x182/0x1d0 [ 98.975923][ T3109] ? 0xffffffffff600000 [ 98.975941][ T3109] do_coredump+0x1bfa/0x2bd0 [ 98.975985][ T3109] ? __cfi_do_coredump+0x10/0x10 [ 98.976015][ T3109] ? asm_exc_page_fault+0x2b/0x30 [ 98.976051][ T3109] ? __kasan_slab_free+0x6a/0x80 [ 98.976073][ T3109] ? kmem_cache_free+0x1c1/0x510 [ 98.976104][ T3109] ? get_signal+0xa75/0x14f0 [ 98.976132][ T3109] get_signal+0x11fd/0x14f0 [ 98.976161][ T3109] arch_do_signal_or_restart+0x96/0x720 [ 98.976193][ T3109] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 98.976230][ T3109] irqentry_exit_to_user_mode+0x4e/0xb0 [ 98.976257][ T3109] irqentry_exit+0x16/0x60 [ 98.976282][ T3109] exc_page_fault+0x66/0xc0 [ 98.976307][ T3109] asm_exc_page_fault+0x2b/0x30 [ 98.976330][ T3109] RIP: 0033:0x7f986e64f927 [ 98.976347][ T3109] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 98.976364][ T3109] RSP: 002b:00007f986f619120 EFLAGS: 00010202 [ 98.976385][ T3109] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f986e78ebe9 [ 98.976400][ T3109] RDX: 00007f986f619140 RSI: 00007f986f619270 RDI: 000000000000000b [ 98.976414][ T3109] RBP: 00007f986e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 98.976427][ T3109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 98.976439][ T3109] R13: 00007f986e9c6128 R14: 00007f986e9c6090 R15: 00007ffc6aabf198 [ 98.976457][ T3109] [ 99.049847][ T3109] memory: usage 306956kB, limit 307200kB, failcnt 37147 [ 99.049897][ T3109] memory+swap: usage 427892kB, limit 9007199254740988kB, failcnt 0 [ 99.214491][ T3406] rust_binder: Error while translating object. [ 99.218261][ T3409] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 99.223092][ T3406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 99.228478][ T3409] rust_binder: Write failure EINVAL in pid:144 [ 99.229117][ T3109] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 99.234485][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.239506][ T3109] Memory cgroup stats for [ 99.245437][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.249930][ T3109] /syz3 [ 99.257605][ T31] usb 5-1: Product: syz [ 99.259412][ T3406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:624 [ 99.265830][ T31] usb 5-1: Manufacturer: syz [ 99.486797][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.490251][ T36] audit: type=1400 audit(2000000010.621:407): avc: denied { map } for pid=3423 comm="syz.1.947" path="socket:[21028]" dev="sockfs" ino=21028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.520255][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.524409][ T36] audit: type=1400 audit(2000000010.621:408): avc: denied { read } for pid=3423 comm="syz.1.947" path="socket:[21028]" dev="sockfs" ino=21028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.540425][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.584298][ T31] usb 5-1: SerialNumber: syz [ 99.633913][ T3109] : [ 99.634046][ T3109] cache 309551104 [ 99.638035][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.655151][ T3388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.662406][ T3388] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 99.669979][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.678512][ T3109] rss 348160 [ 99.681746][ T3109] rss_huge 0 [ 99.685057][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.692507][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.710189][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.717702][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.729647][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.739165][ T3109] shmem 308748288 [ 99.742933][ T3109] mapped_file 667648 [ 99.746920][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.764303][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.772222][ T3428] input: syz1 as /devices/virtual/input/input13 [ 99.774689][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.805514][ T3109] dirty 0 [ 99.808515][ T3109] writeback 200704 [ 99.812699][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 99.824295][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.831751][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.872446][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.882918][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 99.884290][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.902339][ T31] usb 5-1: USB disconnect, device number 23 [ 99.944299][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.951864][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 99.990626][ T3109] workingset_refault_anon 51 [ 99.996918][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.017253][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.042998][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.053105][ T3428] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 100.054282][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.070938][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.077425][ T3109] workingset_refault_file 7671 [ 100.085089][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.090401][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.100133][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.102136][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.122743][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.129435][ T3109] swap 127758336 [ 100.133160][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.144278][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.151721][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.153253][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.177412][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.187659][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.194292][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.197774][ T3109] swapcached 237568 [ 100.201766][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.212969][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.214277][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.226789][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.238302][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.244268][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.253029][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.261049][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.274287][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.281742][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.292512][ T3109] pgpgin 286270 [ 100.294422][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.307741][ T3428] Bluetooth: hci0: Frame reassembly failed (-84) [ 100.318940][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.326415][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.333876][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.334513][ T3109] pgpgout 211071 [ 100.345645][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.353091][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.360539][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.367236][ T3109] pgfault 114867 [ 100.369447][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.371872][ T3109] pgmajfault 69 [ 100.379239][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.383636][ T3109] inactive_anon 13950976 [ 100.391669][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.394737][ T3109] active_anon 294858752 [ 100.402744][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.407040][ T3109] inactive_file 458752 [ 100.419224][ T3109] active_file 344064 [ 100.423145][ T3109] unevictable 0 [ 100.426879][ T3109] hierarchical_memory_limit 314572800 [ 100.435571][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.443232][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.445323][ T3109] hierarchical_memsw_limit 9223372036854771712 [ 100.452956][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.457735][ T3109] total_cache 309551104 [ 100.464523][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.468832][ T3109] total_rss 348160 [ 100.476132][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.480408][ T3109] total_rss_huge 0 [ 100.487485][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.493043][ T3109] total_shmem 308748288 [ 100.498866][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.506045][ T3109] total_mapped_file 667648 [ 100.512813][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.515739][ T3109] total_dirty 0 [ 100.522593][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.533693][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.541228][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.541567][ T3109] total_writeback 200704 [ 100.548887][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.553195][ T3109] total_workingset_refault_anon 51 [ 100.566141][ T3109] total_workingset_refault_file 7671 [ 100.566328][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.574533][ T3109] total_swap 127758336 [ 100.579099][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.583622][ T3109] total_swapcached 237568 [ 100.591646][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.601528][ T3109] total_pgpgin 286270 [ 100.602485][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.606657][ T3109] total_pgpgout 211071 [ 100.613934][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.618127][ T3109] total_pgfault 114867 [ 100.629510][ T3109] total_pgmajfault 69 [ 100.633502][ T3109] total_inactive_anon 13950976 [ 100.634008][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.638568][ T3109] total_active_anon 294858752 [ 100.648502][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.657882][ T3109] total_inactive_file 458752 [ 100.657962][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.662504][ T3109] total_active_file 344064 [ 100.662515][ T3109] total_unevictable 0 [ 100.662524][ T3109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 100.670111][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.693602][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.694280][ T3109] syz3,mems_allowed=0 [ 100.701186][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.701489][ T3109] ,oom_memcg= [ 100.705379][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.712795][ T3109] /syz3 [ 100.716107][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.734635][ T3109] ,task_memcg=/syz3,task=syz.3.856,pid=3130,uid=0 [ 100.741597][ T3109] Memory cgroup out of memory: Killed process 3130 (syz.3.856) total-vm:90168kB, anon-rss:1160kB, file-rss:53836kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 100.742500][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.760416][ T3441] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 100.766356][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.782606][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.790073][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.797534][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.804995][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.812411][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.819864][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.826561][ T3119] syz.3.856 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 100.827415][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.844403][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.851832][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.859275][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.866721][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.874171][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.880793][ T3119] CPU: 1 UID: 0 PID: 3119 Comm: syz.3.856 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 100.880835][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.880850][ T3119] Call Trace: [ 100.880894][ T3119] [ 100.880906][ T3119] __dump_stack+0x21/0x30 [ 100.880944][ T3119] dump_stack_lvl+0x10c/0x190 [ 100.880977][ T3119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.881009][ T3119] ? ___ratelimit+0x3f7/0x5a0 [ 100.881036][ T3119] dump_stack+0x19/0x20 [ 100.881066][ T3119] dump_header+0xd7/0x490 [ 100.881091][ T3119] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 100.881128][ T3119] oom_kill_process+0x4c0/0x7e0 [ 100.881156][ T3119] ? sched_clock_cpu+0x75/0x400 [ 100.881190][ T3119] out_of_memory+0x7ee/0xbd0 [ 100.881220][ T3119] ? __cfi_out_of_memory+0x10/0x10 [ 100.881248][ T3119] ? mutex_lock_killable+0x104/0x1c0 [ 100.881276][ T3119] ? __cfi_mutex_lock_killable+0x10/0x10 [ 100.881309][ T3119] mem_cgroup_out_of_memory+0x279/0x350 [ 100.881332][ T3119] ? drain_obj_stock+0xed0/0xed0 [ 100.881357][ T3119] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 100.881380][ T3119] try_charge_memcg+0x8f7/0xde0 [ 100.881414][ T3119] ? __cfi_try_charge_memcg+0x10/0x10 [ 100.881445][ T3119] ? __alloc_pages_noprof+0x31f/0x7b0 [ 100.881478][ T3119] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 100.881508][ T3119] ? __folio_batch_add_and_move+0x2ab/0x370 [ 100.881539][ T3119] __mem_cgroup_charge+0xf6/0x410 [ 100.881571][ T3119] ? _raw_spin_lock+0x8c/0x120 [ 100.881600][ T3119] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 100.881634][ T3119] shmem_alloc_and_add_folio+0x86d/0x1050 [ 100.881675][ T3119] ? put_swap_device+0x130/0x130 [ 100.881704][ T3119] ? shmem_huge_global_enabled+0x2da/0x360 [ 100.881731][ T3119] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 100.881757][ T3119] ? __kasan_check_write+0x18/0x20 [ 100.881793][ T3119] ? _raw_spin_lock+0x8c/0x120 [ 100.881828][ T3119] shmem_get_folio_gfp+0x5f0/0x1380 [ 100.881856][ T3119] ? shmem_get_folio+0xc0/0xc0 [ 100.881879][ T3119] ? follow_page_pte+0xa5c/0xb90 [ 100.881909][ T3119] ? inode_to_bdi+0x6d/0x100 [ 100.881943][ T3119] shmem_write_begin+0xf4/0x270 [ 100.881970][ T3119] generic_perform_write+0x32d/0x960 [ 100.882007][ T3119] ? __cfi_generic_perform_write+0x10/0x10 [ 100.882041][ T3119] ? down_write+0xe9/0x2a0 [ 100.882070][ T3119] ? file_update_time+0xa3/0x220 [ 100.882102][ T3119] shmem_file_write_iter+0x105/0x130 [ 100.882132][ T3119] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 100.882162][ T3119] __kernel_write_iter+0x395/0x830 [ 100.882184][ T3119] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 100.882215][ T3119] ? __cfi___kernel_write_iter+0x10/0x10 [ 100.882237][ T3119] ? get_dump_page+0x160/0x220 [ 100.882266][ T3119] ? __asan_memset+0x39/0x50 [ 100.882299][ T3119] ? iov_iter_bvec+0xc0/0x180 [ 100.882328][ T3119] dump_user_range+0xb06/0xdf0 [ 100.882352][ T3119] ? __cfi_dump_emit+0x10/0x10 [ 100.882386][ T3119] ? __cfi_dump_user_range+0x10/0x10 [ 100.882409][ T3119] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 100.882445][ T3119] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 100.882481][ T3119] elf_core_dump+0x2cd9/0x3810 [ 100.882514][ T3119] ? __cfi_elf_core_dump+0x10/0x10 [ 100.882548][ T3119] ? dump_interrupted+0xf0/0xf0 [ 100.882582][ T3119] ? filp_open+0x182/0x1d0 [ 100.882614][ T3119] ? 0xffffffffff600000 [ 100.882633][ T3119] do_coredump+0x1bfa/0x2bd0 [ 100.882679][ T3119] ? __cfi_do_coredump+0x10/0x10 [ 100.882713][ T3119] ? asm_exc_page_fault+0x2b/0x30 [ 100.882751][ T3119] ? __kasan_slab_free+0x6a/0x80 [ 100.882775][ T3119] ? kmem_cache_free+0x1c1/0x510 [ 100.882811][ T3119] ? get_signal+0xa75/0x14f0 [ 100.882840][ T3119] get_signal+0x11fd/0x14f0 [ 100.882874][ T3119] arch_do_signal_or_restart+0x96/0x720 [ 100.882912][ T3119] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 100.882951][ T3119] irqentry_exit_to_user_mode+0x4e/0xb0 [ 100.882982][ T3119] irqentry_exit+0x16/0x60 [ 100.883012][ T3119] exc_page_fault+0x66/0xc0 [ 100.883040][ T3119] asm_exc_page_fault+0x2b/0x30 [ 100.883068][ T3119] RIP: 0033:0x7f986e64f927 [ 100.883089][ T3119] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 100.883112][ T3119] RSP: 002b:00007f986f619120 EFLAGS: 00010202 [ 100.883135][ T3119] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f986e78ebe9 [ 100.883152][ T3119] RDX: 00007f986f619140 RSI: 00007f986f619270 RDI: 000000000000000b [ 100.883170][ T3119] RBP: 00007f986e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 100.883186][ T3119] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 100.883202][ T3119] R13: 00007f986e9c6128 R14: 00007f986e9c6090 R15: 00007ffc6aabf198 [ 100.883225][ T3119] [ 100.902311][ T3119] memory: usage 303952kB, limit 307200kB, failcnt 38855 [ 100.903894][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.931616][ T3119] memory+swap: usage 425912kB, limit 9007199254740988kB, failcnt 0 [ 100.933453][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 100.956515][ T3119] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 100.964288][ T10] hid-generic 0003:0008:000F.0009: unknown main item tag 0x0 [ 101.274275][ T3119] Memory cgroup stats for [ 101.373240][ T10] hid-generic 0003:0008:000F.0009: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 101.380218][ T3119] /syz3 [ 101.425853][ T3443] fido_id[3443]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 101.459580][ T3119] : [ 101.459728][ T3119] cache 307826688 [ 101.467025][ T3119] rss 417792 [ 101.470378][ T3119] rss_huge 0 [ 101.473593][ T3119] shmem 304463872 [ 101.479345][ T3119] mapped_file 3166208 [ 101.483484][ T3119] dirty 0 [ 101.486683][ T3119] writeback 0 [ 101.489984][ T3119] workingset_refault_anon 63 [ 101.495623][ T3119] workingset_refault_file 10656 [ 101.500513][ T3119] swap 127102976 [ 101.504071][ T3119] swapcached 696320 [ 101.508271][ T3119] pgpgin 301776 [ 101.511748][ T3119] pgpgout 226851 [ 101.524294][ T3119] pgfault 115535 [ 101.528238][ T3119] pgmajfault 100 [ 101.531816][ T3119] inactive_anon 280068096 [ 101.541102][ T3119] active_anon 25546752 [ 101.545666][ T3119] inactive_file 1769472 [ 101.549957][ T3119] active_file 1339392 [ 101.554501][ T3119] unevictable 0 [ 101.558309][ T3119] hierarchical_memory_limit 314572800 [ 101.563847][ T3119] hierarchical_memsw_limit 9223372036854771712 [ 101.594307][ T3119] total_cache 307826688 [ 101.598545][ T3119] total_rss 417792 [ 101.602352][ T3119] total_rss_huge 0 [ 101.606573][ T3119] total_shmem 304463872 [ 101.610767][ T3119] total_mapped_file 3166208 [ 101.615594][ T3119] total_dirty 0 [ 101.619352][ T3119] total_writeback 0 [ 101.623240][ T3119] total_workingset_refault_anon 63 [ 101.634554][ T3119] total_workingset_refault_file 10656 [ 101.640577][ T3119] total_swap 127102976 [ 101.653362][ T3119] total_swapcached 696320 [ 101.654312][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 101.658845][ T3119] total_pgpgin 301776 [ 101.670595][ T3119] total_pgpgout 226851 [ 101.674901][ T3119] total_pgfault 115535 [ 101.679170][ T3119] total_pgmajfault 100 [ 101.683610][ T3119] total_inactive_anon 280068096 [ 101.688803][ T3119] total_active_anon 25546752 [ 101.693421][ T3119] total_inactive_file 1769472 [ 101.698439][ T3119] total_active_file 1339392 [ 101.702964][ T3119] total_unevictable 0 [ 101.707214][ T3119] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.856,pid=3118,uid=0 [ 101.722358][ T3119] Memory cgroup out of memory: Killed process 3118 (syz.3.856) total-vm:90168kB, anon-rss:1160kB, file-rss:53692kB, shmem-rss:0kB, UID:0 pgtables:188kB oom_score_adj:0 [ 101.814273][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 101.825096][ T31] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 101.835979][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.847913][ T3432] Bluetooth: hci0: command 0x1003 tx timeout [ 101.854040][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 101.868218][ T31] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.887557][ T31] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 101.924315][ T31] usb 2-1: config 7 interface 0 has no altsetting 0 [ 101.931233][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 101.950398][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.154292][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 102.169770][ T3447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.192071][ T3447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.213474][ T3445] 9pnet_fd: Insufficient options for proto=fd [ 102.214333][ T3461] 9pnet_fd: Insufficient options for proto=fd [ 102.284304][ T9] usb 6-1: device descriptor read/64, error -71 [ 102.369487][ T31] usbhid 2-1:7.0: can't add hid device: -71 [ 102.376020][ T31] usbhid 2-1:7.0: probe with driver usbhid failed with error -71 [ 102.405332][ T31] usb 2-1: USB disconnect, device number 27 [ 102.534278][ T9] usb 6-1: device descriptor read/64, error -71 [ 102.617898][ T36] audit: type=1400 audit(2000000013.771:409): avc: denied { mounton } for pid=3467 comm="syz.4.958" path="/106/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 102.640335][ T3468] incfs: Error accessing: ./file0. [ 102.648098][ T3468] incfs: mount failed -20 [ 102.784307][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 102.925764][ T9] usb 6-1: device descriptor read/64, error -71 [ 102.942271][ T3478] netlink: 80 bytes leftover after parsing attributes in process `syz.1.962'. [ 102.958835][ T3478] rust_binder: Write failure EINVAL in pid:647 [ 102.998262][ T3480] tipc: Enabling of bearer rejected, failed to enable media [ 103.016098][ T3480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=52 sclass=netlink_tcpdiag_socket pid=3480 comm=syz.1.963 [ 103.034922][ T36] audit: type=1326 audit(2000000014.191:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.1.963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc458ebe9 code=0x0 [ 103.184272][ T9] usb 6-1: device descriptor read/64, error -71 [ 103.196073][ T3482] rust_binder: Write failure EFAULT in pid:649 [ 103.205041][ T3122] syz.3.856 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 103.226368][ T3122] CPU: 0 UID: 0 PID: 3122 Comm: syz.3.856 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 103.226402][ T3122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.226414][ T3122] Call Trace: [ 103.226420][ T3122] [ 103.226428][ T3122] __dump_stack+0x21/0x30 [ 103.226459][ T3122] dump_stack_lvl+0x10c/0x190 [ 103.226483][ T3122] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.226510][ T3122] ? ___ratelimit+0x3f7/0x5a0 [ 103.226531][ T3122] dump_stack+0x19/0x20 [ 103.226554][ T3122] dump_header+0xd7/0x490 [ 103.226573][ T3122] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 103.226598][ T3122] oom_kill_process+0x4c0/0x7e0 [ 103.226620][ T3122] ? sched_clock_cpu+0x75/0x400 [ 103.226646][ T3122] out_of_memory+0x7ee/0xbd0 [ 103.226667][ T3122] ? __cfi_out_of_memory+0x10/0x10 [ 103.226688][ T3122] ? mutex_lock_killable+0x92/0x1c0 [ 103.226711][ T3122] ? __cfi_mutex_lock_killable+0x10/0x10 [ 103.226735][ T3122] mem_cgroup_out_of_memory+0x279/0x350 [ 103.226763][ T3122] ? drain_obj_stock+0xed0/0xed0 [ 103.226783][ T3122] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 103.226800][ T3122] try_charge_memcg+0x8f7/0xde0 [ 103.226827][ T3122] ? __cfi_try_charge_memcg+0x10/0x10 [ 103.226851][ T3122] ? __alloc_pages_noprof+0x31f/0x7b0 [ 103.226876][ T3122] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 103.226900][ T3122] ? __folio_batch_add_and_move+0x2ab/0x370 [ 103.226923][ T3122] __mem_cgroup_charge+0xf6/0x410 [ 103.226951][ T3122] ? _raw_spin_lock+0x8c/0x120 [ 103.226978][ T3122] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 103.227007][ T3122] shmem_alloc_and_add_folio+0x86d/0x1050 [ 103.227030][ T3122] ? put_swap_device+0x130/0x130 [ 103.227052][ T3122] ? shmem_huge_global_enabled+0x2da/0x360 [ 103.227072][ T3122] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 103.227090][ T3122] ? __kasan_check_write+0x18/0x20 [ 103.227118][ T3122] ? _raw_spin_lock+0x8c/0x120 [ 103.227146][ T3122] shmem_get_folio_gfp+0x5f0/0x1380 [ 103.227167][ T3122] ? shmem_get_folio+0xc0/0xc0 [ 103.227185][ T3122] ? follow_page_pte+0xa5c/0xb90 [ 103.227209][ T3122] ? inode_to_bdi+0x6d/0x100 [ 103.227234][ T3122] shmem_write_begin+0xf4/0x270 [ 103.227260][ T3122] generic_perform_write+0x32d/0x960 [ 103.227289][ T3122] ? __cfi_generic_perform_write+0x10/0x10 [ 103.227314][ T3122] ? down_write+0xe9/0x2a0 [ 103.227338][ T3122] ? file_update_time+0xa3/0x220 [ 103.227363][ T3122] shmem_file_write_iter+0x105/0x130 [ 103.227387][ T3122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 103.227412][ T3122] __kernel_write_iter+0x395/0x830 [ 103.227429][ T3122] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 103.227452][ T3122] ? __cfi___kernel_write_iter+0x10/0x10 [ 103.227469][ T3122] ? get_dump_page+0x160/0x220 [ 103.227492][ T3122] ? __asan_memset+0x39/0x50 [ 103.227518][ T3122] ? iov_iter_bvec+0xc0/0x180 [ 103.227541][ T3122] dump_user_range+0xb06/0xdf0 [ 103.227559][ T3122] ? __cfi_dump_emit+0x10/0x10 [ 103.227587][ T3122] ? __cfi_dump_user_range+0x10/0x10 [ 103.227605][ T3122] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 103.227633][ T3122] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 103.227661][ T3122] elf_core_dump+0x2cd9/0x3810 [ 103.227687][ T3122] ? __cfi_elf_core_dump+0x10/0x10 [ 103.227715][ T3122] ? dump_interrupted+0xf0/0xf0 [ 103.227741][ T3122] ? filp_open+0x182/0x1d0 [ 103.227771][ T3122] ? 0xffffffffff600000 [ 103.227786][ T3122] do_coredump+0x1bfa/0x2bd0 [ 103.227817][ T3122] ? __cfi_do_coredump+0x10/0x10 [ 103.227844][ T3122] ? asm_exc_page_fault+0x2b/0x30 [ 103.227874][ T3122] ? __kasan_slab_free+0x6a/0x80 [ 103.227894][ T3122] ? kmem_cache_free+0x1c1/0x510 [ 103.227921][ T3122] ? get_signal+0xa75/0x14f0 [ 103.227946][ T3122] get_signal+0x11fd/0x14f0 [ 103.227971][ T3122] arch_do_signal_or_restart+0x96/0x720 [ 103.228000][ T3122] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 103.228032][ T3122] irqentry_exit_to_user_mode+0x4e/0xb0 [ 103.228056][ T3122] irqentry_exit+0x16/0x60 [ 103.228079][ T3122] exc_page_fault+0x66/0xc0 [ 103.228100][ T3122] asm_exc_page_fault+0x2b/0x30 [ 103.228123][ T3122] RIP: 0033:0x7f986e64f927 [ 103.228138][ T3122] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 103.228154][ T3122] RSP: 002b:00007f986f619120 EFLAGS: 00010202 [ 103.228171][ T3122] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f986e78ebe9 [ 103.228184][ T3122] RDX: 00007f986f619140 RSI: 00007f986f619270 RDI: 000000000000000b [ 103.228197][ T3122] RBP: 00007f986e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 103.228209][ T3122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.228221][ T3122] R13: 00007f986e9c6128 R14: 00007f986e9c6090 R15: 00007ffc6aabf198 [ 103.228236][ T3122] [ 103.228275][ T3122] memory: usage 307200kB, limit 307200kB, failcnt 46830 [ 103.693869][ T3122] memory+swap: usage 431900kB, limit 9007199254740988kB, failcnt 0 [ 103.697391][ T9] usb usb6-port1: attempt power cycle [ 103.703194][ T3122] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 103.716357][ T3122] Memory cgroup stats for /syz3: [ 103.716505][ T3122] cache 313884672 [ 103.729060][ T3122] rss 417792 [ 103.732337][ T3122] rss_huge 0 [ 103.735775][ T3122] shmem 313884672 [ 103.739444][ T3122] mapped_file 3313664 [ 103.743435][ T3122] dirty 0 [ 103.746749][ T3122] writeback 0 [ 103.748084][ T3485] overlayfs: missing 'lowerdir' [ 103.750099][ T3122] workingset_refault_anon 204 [ 103.759803][ T3122] workingset_refault_file 11307 [ 103.764784][ T3122] swap 127692800 [ 103.765415][ T3485] rust_binder: 3485 RLIMIT_NICE not set [ 103.768369][ T3122] swapcached 303104 [ 103.777806][ T3122] pgpgin 348918 [ 103.782049][ T3122] pgpgout 272629 [ 103.785674][ T3122] pgfault 118214 [ 103.789230][ T3122] pgmajfault 167 [ 103.792790][ T3122] inactive_anon 185819136 [ 103.797185][ T3122] active_anon 128753664 [ 103.801359][ T3122] inactive_file 0 [ 103.805086][ T3122] active_file 0 [ 103.808567][ T3122] unevictable 0 [ 103.812052][ T3122] hierarchical_memory_limit 314572800 [ 103.817664][ T3122] hierarchical_memsw_limit 9223372036854771712 [ 103.823838][ T3122] total_cache 313884672 [ 103.828060][ T3122] total_rss 417792 [ 103.831880][ T3122] total_rss_huge 0 [ 103.844890][ T3122] total_shmem 313884672 [ 103.849099][ T3122] total_mapped_file 3313664 [ 103.853710][ T3122] total_dirty 0 [ 103.857280][ T3122] total_writeback 0 [ 103.861091][ T3122] total_workingset_refault_anon 204 [ 103.881273][ T3122] total_workingset_refault_file 11307 [ 103.888798][ T3122] total_swap 127692800 [ 103.892904][ T3122] total_swapcached 303104 [ 103.906424][ T3122] total_pgpgin 348918 [ 103.910468][ T3122] total_pgpgout 272629 [ 103.914610][ T3122] total_pgfault 118214 [ 103.918740][ T3122] total_pgmajfault 167 [ 103.919758][ T1500] rust_binder: 0: removing orphan mapping 0:1168 [ 103.924760][ T3122] total_inactive_anon 185819136 [ 103.934101][ T3122] total_active_anon 128753664 [ 103.938895][ T3122] total_inactive_file 0 [ 103.943116][ T3122] total_active_file 0 [ 103.947213][ T3122] total_unevictable 0 [ 103.951214][ T3122] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.856,pid=3113,uid=0 [ 103.967740][ T3122] Memory cgroup out of memory: Killed process 3113 (syz.3.856) total-vm:90168kB, anon-rss:1032kB, file-rss:55196kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 104.044280][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 104.078468][ T9] usb 6-1: device descriptor read/8, error -71 [ 104.117462][ T3500] rust_binder: Error while translating object. [ 104.117528][ T3500] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 104.123756][ T3500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:337 [ 104.128365][ T3474] syz.3.960 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 104.170672][ T36] audit: type=1326 audit(2000000015.321:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.4.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c96b8ebe9 code=0x0 [ 104.171263][ T3474] CPU: 0 UID: 0 PID: 3474 Comm: syz.3.960 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 104.171300][ T3474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.171317][ T3474] Call Trace: [ 104.171326][ T3474] [ 104.171338][ T3474] __dump_stack+0x21/0x30 [ 104.171388][ T3474] dump_stack_lvl+0x10c/0x190 [ 104.171423][ T3474] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.171457][ T3474] ? ___ratelimit+0x3f7/0x5a0 [ 104.171485][ T3474] dump_stack+0x19/0x20 [ 104.171516][ T3474] dump_header+0xd7/0x490 [ 104.171543][ T3474] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 104.171577][ T3474] oom_kill_process+0x4c0/0x7e0 [ 104.171609][ T3474] ? sched_clock_cpu+0x75/0x400 [ 104.171641][ T3474] out_of_memory+0x7ee/0xbd0 [ 104.171672][ T3474] ? __cfi_out_of_memory+0x10/0x10 [ 104.171700][ T3474] ? mutex_lock_killable+0x92/0x1c0 [ 104.171731][ T3474] ? __cfi_mutex_lock_killable+0x10/0x10 [ 104.171764][ T3474] mem_cgroup_out_of_memory+0x279/0x350 [ 104.171789][ T3474] ? drain_obj_stock+0xed0/0xed0 [ 104.171816][ T3474] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 104.171841][ T3474] try_charge_memcg+0x8f7/0xde0 [ 104.171876][ T3474] ? __cfi_try_charge_memcg+0x10/0x10 [ 104.171911][ T3474] ? __alloc_pages_noprof+0x31f/0x7b0 [ 104.171944][ T3474] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 104.171977][ T3474] ? __folio_batch_add_and_move+0x2ab/0x370 [ 104.172011][ T3474] __mem_cgroup_charge+0xf6/0x410 [ 104.172048][ T3474] ? _raw_spin_lock+0x8c/0x120 [ 104.172085][ T3474] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 104.172126][ T3474] shmem_alloc_and_add_folio+0x86d/0x1050 [ 104.172157][ T3474] ? put_swap_device+0x130/0x130 [ 104.172187][ T3474] ? shmem_huge_global_enabled+0x2da/0x360 [ 104.172215][ T3474] ? shmem_allowable_huge_orders+0x405/0x430 [ 104.172246][ T3474] shmem_get_folio_gfp+0x5f0/0x1380 [ 104.172276][ T3474] ? shmem_get_folio+0xc0/0xc0 [ 104.172303][ T3474] ? __cfi_filemap_map_pages+0x10/0x10 [ 104.172337][ T3474] ? folio_unlock+0x12f/0x1a0 [ 104.172368][ T3474] shmem_fault+0x17d/0x350 [ 104.172399][ T3474] do_pte_missing+0x298c/0x4240 [ 104.172431][ T3474] ? rcu_preempt_deferred_qs_irqrestore+0x66a/0x980 [ 104.172466][ T3474] ? cgroup_rstat_updated+0x132/0x7f0 [ 104.172502][ T3474] ? pte_marker_clear+0x1b0/0x1b0 [ 104.172530][ T3474] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 104.172564][ T3474] ? rcu_read_unlock_special+0xab/0x480 [ 104.172594][ T3474] ? sysvec_apic_timer_interrupt+0x21/0x90 [ 104.172625][ T3474] ? __rcu_read_unlock+0xc0/0xc0 [ 104.172656][ T3474] ? __pte_offset_map+0x1b0/0x230 [ 104.172691][ T3474] ? pte_offset_map_rw_nolock+0xba/0x110 [ 104.172725][ T3474] handle_mm_fault+0x1166/0x1b90 [ 104.172751][ T3474] ? __kasan_check_write+0x18/0x20 [ 104.172792][ T3474] ? __cfi_handle_mm_fault+0x10/0x10 [ 104.172819][ T3474] ? follow_page_pte+0x4a3/0xb90 [ 104.172852][ T3474] ? gup_must_unshare+0x1e0/0x1e0 [ 104.172885][ T3474] __get_user_pages+0x1169/0x22d0 [ 104.172916][ T3474] ? __cfi_mt_find+0x10/0x10 [ 104.172953][ T3474] ? populate_vma_page_range+0x230/0x230 [ 104.172982][ T3474] ? down_read+0x79/0xe0 [ 104.173013][ T3474] ? __cfi_down_read+0x10/0x10 [ 104.173044][ T3474] __mm_populate+0x2f9/0x440 [ 104.173076][ T3474] vm_mmap_pgoff+0x454/0x4e0 [ 104.173113][ T3474] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 104.173151][ T3474] ? xfd_validate_state+0x68/0x150 [ 104.173186][ T3474] ksys_mmap_pgoff+0xfb/0x1e0 [ 104.173224][ T3474] ? __kasan_check_write+0x18/0x20 [ 104.173260][ T3474] __x64_sys_mmap+0x121/0x140 [ 104.173298][ T3474] x64_sys_call+0x13bf/0x2ee0 [ 104.173338][ T3474] do_syscall_64+0x58/0xf0 [ 104.173381][ T3474] ? clear_bhb_loop+0x50/0xa0 [ 104.173414][ T3474] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.173447][ T3474] RIP: 0033:0x7f986e78ebe9 [ 104.173467][ T3474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.173490][ T3474] RSP: 002b:00007f986f659038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 104.173519][ T3474] RAX: ffffffffffffffda RBX: 00007f986e9c5fa0 RCX: 00007f986e78ebe9 [ 104.173538][ T3474] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 104.173557][ T3474] RBP: 00007f986e811e19 R08: ffffffffffffffff R09: 0000000000000000 [ 104.173581][ T3474] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 104.173599][ T3474] R13: 00007f986e9c6038 R14: 00007f986e9c5fa0 R15: 00007ffc6aabf198 [ 104.173624][ T3474] [ 104.173699][ T3474] memory: usage 306532kB, limit 307200kB, failcnt 48195 [ 104.203580][ T1500] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 104.209329][ T3474] memory+swap: usage 423376kB, limit 9007199254740988kB, failcnt 0 [ 104.384275][ T1500] usb 2-1: Using ep0 maxpacket: 8 [ 104.386565][ T3474] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 104.391948][ T1500] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.395731][ T3474] Memory cgroup stats for [ 104.402734][ T1500] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.407761][ T3474] /syz3 [ 104.413157][ T1500] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.418514][ T3474] : [ 104.424494][ T1500] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 104.429950][ T9] usb 6-1: device descriptor read/8, error -71 [ 104.435350][ T1500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.440015][ T3474] cache 275599360 [ 104.446882][ T1500] usb 2-1: config 0 descriptor?? [ 104.450476][ T3474] rss 413696 [ 104.450488][ T3474] rss_huge 0 [ 104.734751][ T3474] shmem 275599360 [ 104.738528][ T3474] mapped_file 3313664 [ 104.742613][ T3474] dirty 0 [ 104.745612][ T3474] writeback 0 [ 104.748916][ T3474] workingset_refault_anon 204 [ 104.753598][ T3474] workingset_refault_file 11307 [ 104.758517][ T3474] swap 105074688 [ 104.762087][ T3474] swapcached 290816 [ 104.765942][ T3474] pgpgin 348920 [ 104.769858][ T3474] pgpgout 281982 [ 104.773486][ T3474] pgfault 118214 [ 104.777134][ T3474] pgmajfault 167 [ 104.780703][ T3474] inactive_anon 161480704 [ 104.785071][ T3474] active_anon 114790400 [ 104.789294][ T3474] inactive_file 0 [ 104.792943][ T3474] active_file 0 [ 104.796451][ T3474] unevictable 0 [ 104.799927][ T3474] hierarchical_memory_limit 314572800 [ 104.805627][ T3474] hierarchical_memsw_limit 9223372036854771712 [ 104.811806][ T3474] total_cache 275599360 [ 104.816042][ T3474] total_rss 413696 [ 104.819826][ T3474] total_rss_huge 0 [ 104.823564][ T3474] total_shmem 275599360 [ 104.827770][ T3474] total_mapped_file 3313664 [ 104.832283][ T3474] total_dirty 0 [ 104.835790][ T3474] total_writeback 0 [ 104.839640][ T3474] total_workingset_refault_anon 204 [ 104.844906][ T3474] total_workingset_refault_file 11307 [ 104.850293][ T3474] total_swap 105074688 [ 104.854416][ T3474] total_swapcached 290816 [ 104.858793][ T3474] total_pgpgin 348920 [ 104.862786][ T3474] total_pgpgout 281982 [ 104.866945][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 104.869105][ T1500] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max [ 104.874653][ T3474] total_pgfault 118214 [ 104.886538][ T3474] total_pgmajfault 167 [ 104.889617][ T1500] smartjoyplus 0003:0B43:0003.000A: unknown main item tag 0x0 [ 104.890628][ T3474] total_inactive_anon 161480704 [ 104.890640][ T3474] total_active_anon 114790400 [ 104.907850][ T3474] total_inactive_file 0 [ 104.912109][ T3474] total_active_file 0 [ 104.915688][ T1500] smartjoyplus 0003:0B43:0003.000A: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.1-1/input0 [ 104.916228][ T3474] total_unevictable 0 [ 104.931769][ T9] usb 6-1: device descriptor read/8, error -71 [ 104.942213][ T1500] smartjoyplus 0003:0B43:0003.000A: no output reports found [ 104.944266][ T3474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.856,pid=3131,uid=0 [ 104.976312][ T3474] Memory cgroup out of memory: Killed process 3131 (syz.3.856) total-vm:90168kB, anon-rss:1160kB, file-rss:53836kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 105.084898][ T3495] /dev/rnullb0: Can't open blockdev [ 105.094824][ T9] usb 6-1: device descriptor read/8, error -71 [ 105.107148][ T1500] usb 2-1: USB disconnect, device number 28 [ 105.204415][ T9] usb usb6-port1: unable to enumerate USB device [ 105.245317][ T3514] rust_binder: Failed to allocate buffer. len:4256, is_oneway:true [ 105.245349][ T3514] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 105.253357][ T3514] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:347 [ 105.386430][ T36] audit: type=1400 audit(2000000016.541:412): avc: denied { remount } for pid=3522 comm="syz.5.978" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 105.387097][ T3523] option changes via remount are deprecated (pid=3522 comm=syz.5.978) [ 105.439252][ T3523] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 105.635878][ T3529] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 105.635931][ T3528] rust_binder: Error while translating object. [ 105.653315][ T3528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 105.653395][ T3529] rust_binder: Write failure EINVAL in pid:658 [ 105.664276][ T3528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:658 [ 105.684272][ T1500] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 105.845025][ T1500] usb 6-1: Using ep0 maxpacket: 8 [ 105.853691][ T1500] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 105.863109][ T1500] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 105.871550][ T1500] usb 6-1: Product: syz [ 105.876115][ T1500] usb 6-1: Manufacturer: syz [ 105.880795][ T1500] usb 6-1: SerialNumber: syz [ 105.890430][ T1500] usb 6-1: config 0 descriptor?? [ 106.100241][ T3523] rust_binder: Failed copying remainder into alloc: EFAULT [ 106.100271][ T3523] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 106.110988][ T3523] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 106.134324][ T3523] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:165 [ 106.194942][ T1500] usb 6-1: USB disconnect, device number 20 [ 106.303771][ T3533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.982'. [ 106.692743][ T3571] mmap: syz.5.993 (3571): VmData 29077504 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 106.764283][ T1500] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 106.906206][ T3576] rust_binder: Error in use_page_slow: ESRCH [ 106.906228][ T3576] rust_binder: use_range failure ESRCH [ 106.912399][ T3576] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 106.918089][ T3576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 106.918267][ T1500] usb 2-1: Using ep0 maxpacket: 8 [ 106.926143][ T3576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:177 [ 106.937388][ T1500] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.958150][ T1500] usb 2-1: config 6 has an invalid interface number: 248 but max is 0 [ 106.966425][ T1500] usb 2-1: config 6 has no interface number 0 [ 106.972572][ T1500] usb 2-1: config 6 interface 248 has no altsetting 0 [ 106.980924][ T1500] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 106.990119][ T1500] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.998169][ T1500] usb 2-1: Product: syz [ 107.002344][ T1500] usb 2-1: Manufacturer: syz [ 107.006990][ T1500] usb 2-1: SerialNumber: syz [ 107.129265][ T3581] tmpfs: Unknown parameter '' [ 107.220691][ T1500] ums-karma 2-1:6.248: USB Mass Storage device detected [ 107.247807][ T1500] usb 2-1: USB disconnect, device number 29 [ 107.674571][ T3603] pim6reg1: entered promiscuous mode [ 107.680012][ T3603] pim6reg1: entered allmulticast mode [ 107.695494][ T3605] tipc: Enabling of bearer rejected, failed to enable media [ 107.704321][ T1500] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 107.855469][ T1500] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 107.866746][ T1500] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.878072][ T1500] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 107.891779][ T1500] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 107.909527][ T1500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.923274][ T1500] usb 2-1: config 0 descriptor?? [ 107.928879][ T36] audit: type=1326 audit(2000000019.071:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3614 comm="syz.5.1008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x0 [ 108.205442][ T3629] 9pnet_fd: Insufficient options for proto=fd [ 108.355992][ T1500] holtek_kbd 0003:04D9:A055.000B: item fetching failed at offset 5/7 [ 108.364515][ T1500] holtek_kbd 0003:04D9:A055.000B: probe with driver holtek_kbd failed with error -22 [ 108.556905][ T1500] usb 2-1: USB disconnect, device number 30 [ 108.777748][ T3641] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 108.777781][ T3641] rust_binder: Error while translating object. [ 108.790014][ T3641] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 108.796235][ T3641] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:195 [ 109.076774][ T36] audit: type=1400 audit(2000000020.231:414): avc: denied { mounton } for pid=3653 comm="syz.4.1022" path="/file0" dev="ramfs" ino=23097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 109.116558][ T36] audit: type=1400 audit(2000000020.271:415): avc: denied { map } for pid=3655 comm="syz.1.1021" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.117911][ T3659] rust_binder: Failed copying remainder into alloc: EFAULT [ 109.140710][ T3659] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 109.148107][ T3659] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 109.156469][ T3659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:674 [ 109.324267][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 109.325063][ T36] audit: type=1400 audit(2000000020.481:416): avc: denied { ioctl } for pid=3663 comm="syz.5.1025" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 109.384828][ T3669] netlink: 'syz.3.1027': attribute type 64 has an invalid length. [ 109.384918][ T36] audit: type=1400 audit(2000000020.541:417): avc: denied { ioctl } for pid=3660 comm="syz.1.1024" path="net:[4026532311]" dev="nsfs" ino=4026532311 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.404724][ T3661] netlink: 'syz.1.1024': attribute type 15 has an invalid length. [ 109.426230][ T3661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1024'. [ 109.437524][ T3661] /dev/rnullb0: Can't open blockdev [ 109.464289][ T9] usb 5-1: device descriptor read/64, error -71 [ 109.584286][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 109.704287][ T9] usb 5-1: device descriptor read/64, error -71 [ 109.735299][ T10] usb 6-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config [ 109.745753][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.755390][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.764894][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.772921][ T10] usb 6-1: SerialNumber: syz [ 109.949104][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 110.094273][ T9] usb 5-1: device descriptor read/64, error -71 [ 110.334293][ T9] usb 5-1: device descriptor read/64, error -71 [ 110.444372][ T9] usb usb5-port1: attempt power cycle [ 110.784294][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 110.815297][ T9] usb 5-1: device descriptor read/8, error -71 [ 110.926764][ T3704] overlay: Unknown parameter 'pcr' [ 110.945455][ T9] usb 5-1: device descriptor read/8, error -71 [ 111.044298][ T1500] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 111.194275][ T1500] usb 2-1: Using ep0 maxpacket: 16 [ 111.194301][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 111.200790][ T1500] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 111.216260][ T1500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.225128][ T1500] usb 2-1: config 0 descriptor?? [ 111.226611][ T9] usb 5-1: device descriptor read/8, error -71 [ 111.231835][ T1500] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 111.365288][ T9] usb 5-1: device descriptor read/8, error -71 [ 111.474400][ T9] usb usb5-port1: unable to enumerate USB device [ 111.789853][ T1500] usb 2-1: USB disconnect, device number 31 [ 111.864091][ T36] audit: type=1400 audit(2000000023.011:418): avc: denied { read write } for pid=3717 comm="syz.1.1043" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.888955][ T36] audit: type=1400 audit(2000000023.011:419): avc: denied { open } for pid=3717 comm="syz.1.1043" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.913744][ T36] audit: type=1326 audit(2000000023.021:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3717 comm="syz.1.1043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadc458ebe9 code=0x0 [ 111.989196][ T3720] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1043'. [ 112.224305][ T3735] rust_binder: Write failure EFAULT in pid:383 [ 112.329947][ T10] usb 6-1: 0:2 : does not exist [ 112.341131][ T10] usb 6-1: unit 5 not found! [ 112.349115][ T10] usb 6-1: USB disconnect, device number 21 [ 112.361258][ T3740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 112.366850][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 112.714362][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 112.875371][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 112.886702][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.896662][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 112.909806][ T10] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 112.918900][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.928039][ T10] usb 6-1: config 0 descriptor?? [ 112.958202][ T3754] 9pnet_fd: Insufficient options for proto=fd [ 113.019232][ T3761] 9pnet_fd: Insufficient options for proto=fd [ 113.027321][ T3763] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 113.036720][ T3763] netlink: 'syz.3.1057': attribute type 4 has an invalid length. [ 113.060308][ T3765] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 113.089868][ T36] audit: type=1400 audit(2000000024.241:421): avc: denied { associate } for pid=3768 comm="syz.3.1059" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 113.116417][ T36] audit: type=1400 audit(2000000024.271:422): avc: denied { remount } for pid=3766 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 113.170524][ T3772] fuse: Unknown parameter 'use00000000000000000000' [ 113.178580][ T3772] 9pnet_fd: Insufficient options for proto=fd [ 113.185308][ T3772] fuse: Unknown parameter '0x000000000000000b' [ 113.361369][ T10] holtek_kbd 0003:04D9:A055.000C: item fetching failed at offset 5/7 [ 113.369822][ T10] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22 [ 113.560060][ T10] usb 6-1: USB disconnect, device number 22 [ 113.924302][ T1500] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 114.077626][ T1500] usb 2-1: config 0 has no interfaces? [ 114.084610][ T1500] usb 2-1: New USB device found, idVendor=06b1, idProduct=0037, bcdDevice= 0.00 [ 114.094070][ T1500] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.108566][ T3802] syz.5.1071 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 114.124592][ T1500] usb 2-1: config 0 descriptor?? [ 114.149452][ T3807] rust_binder: validate_parent_fixup: new_min_offset=72, sg_entry.length=0 [ 114.149492][ T3807] rust_binder: Error while translating object. [ 114.158580][ T3807] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 114.165333][ T3807] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:207 [ 114.271206][ T3831] rust_binder: 3824 RLIMIT_NICE not set [ 114.281159][ T3831] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 114.286974][ T3831] rust_binder: Read failure Err(EFAULT) in pid:209 [ 114.295357][ T3824] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 114.309063][ T3824] rust_binder: 209: no such ref 2 [ 114.342556][ T1500] usb 2-1: string descriptor 0 read error: -71 [ 114.351398][ T1500] usb 2-1: USB disconnect, device number 32 [ 114.352023][ T3831] 9pnet_fd: Insufficient options for proto=fd [ 114.474322][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 114.625637][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 114.636573][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.646394][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 114.660048][ T10] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 114.669151][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.678009][ T10] usb 5-1: config 0 descriptor?? [ 115.058764][ T1500] rust_binder: 3823: removing orphan mapping 0:4248 [ 115.087108][ T10] holtek_kbd 0003:04D9:A055.000D: item fetching failed at offset 5/7 [ 115.096091][ T10] holtek_kbd 0003:04D9:A055.000D: probe with driver holtek_kbd failed with error -22 [ 115.266196][ T3844] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1084'. [ 115.286840][ T10] usb 5-1: USB disconnect, device number 29 [ 115.299173][ T3844] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1084'. [ 115.496942][ T3859] rust_binder: 238: no such ref 3 [ 115.662951][ T3862] fuse: Invalid gid '00000000000037777777777' [ 115.770310][ T3865] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.770339][ T3865] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 115.780013][ T3865] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:244 [ 115.813848][ T3870] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.855292][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.873307][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.006425][ T3879] netlink: 'syz.4.1095': attribute type 4 has an invalid length. [ 116.084493][ T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 116.108450][ T3890] binder: Bad value for 'max' [ 116.149727][ T3894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.235375][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.245669][ T31] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 116.256295][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.265584][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.273659][ T31] usb 6-1: Product: syz [ 116.277899][ T31] usb 6-1: Manufacturer: syz [ 116.282528][ T31] usb 6-1: SerialNumber: syz [ 116.287809][ T31] usb 6-1: config 0 descriptor?? [ 116.402413][ T3909] rust_binder: Failed copying into alloc: EFAULT [ 116.402434][ T3909] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 116.408980][ T3909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 116.417441][ T3909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:438 [ 116.496843][ T31] usb 6-1: USB disconnect, device number 23 [ 116.647457][ T36] audit: type=1400 audit(2000000027.801:423): avc: denied { execute } for pid=3913 comm="syz.1.1106" path="/memory.events.local" dev="ramfs" ino=23850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 116.748379][ T3922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 116.758374][ T3922] rust_binder: Error while translating object. [ 116.758410][ T3922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 116.764677][ T3922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:724 [ 116.787907][ T36] audit: type=1400 audit(2000000027.941:424): avc: denied { getopt } for pid=3923 comm="syz.1.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.033462][ T3928] rust_binder: 255: no such ref 0 [ 117.055187][ T3934] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 117.130293][ T3939] rust_binder: 264: no such ref 1 [ 117.143370][ T3939] rust_binder: Write failure EFAULT in pid:264 [ 118.249679][ T4009] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 118.662304][ T4043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 118.677517][ T4043] overlayfs: failed to set xattr on upper [ 118.683264][ T4043] overlayfs: ...falling back to redirect_dir=nofollow. [ 118.690251][ T4043] overlayfs: ...falling back to uuid=null. [ 118.779083][ T4057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4057 comm=syz.3.1132 [ 118.874282][ T31] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 119.035391][ T31] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.063635][ T31] usb 6-1: config 1 interface 0 has no altsetting 0 [ 119.071383][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.080928][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.093219][ T31] usb 6-1: SerialNumber: syz [ 119.100525][ T4041] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 119.309571][ T4041] /dev/rnullb0: Can't open blockdev [ 119.321247][ T31] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 119.333968][ T31] usb 6-1: USB disconnect, device number 24 [ 119.335877][ T36] audit: type=1400 audit(2000000030.491:425): avc: denied { read } for pid=4069 comm="syz.1.1136" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.355808][ T4070] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 119.366850][ T36] audit: type=1400 audit(2000000030.491:426): avc: denied { open } for pid=4069 comm="syz.1.1136" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.402924][ T36] audit: type=1400 audit(2000000030.491:427): avc: denied { ioctl } for pid=4069 comm="syz.1.1136" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 119.457248][ T4079] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1139'. [ 119.554052][ T4085] rust_binder: Error while translating object. [ 119.554102][ T4085] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.560712][ T4085] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:763 [ 119.653486][ T4094] 9pnet_fd: Insufficient options for proto=fd [ 119.777328][ T4120] 9pnet_fd: Insufficient options for proto=fd [ 119.913184][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.913215][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.928522][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.928564][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.942576][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.942609][ T4138] rust_binder: Write failure EFAULT in pid:277 [ 119.971836][ T4142] rust_binder: Error while translating object. [ 119.971905][ T4142] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 119.978393][ T4142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:282 [ 119.994285][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 120.071028][ T4155] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1163'. [ 120.080131][ T4155] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1163'. [ 120.089535][ T4155] netlink: 'syz.3.1163': attribute type 6 has an invalid length. [ 120.097393][ T4155] netlink: 'syz.3.1163': attribute type 5 has an invalid length. [ 120.105276][ T4155] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1163'. [ 120.166049][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.176204][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.188638][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.198192][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.206682][ T31] usb 2-1: Product: 䰊 [ 120.215248][ T31] usb 2-1: Manufacturer: Ж [ 120.219859][ T31] usb 2-1: SerialNumber: 麙㐵줬ᱼⱀ畹걞᭒倫랟連郭ꈖ䳥팭㛖멕퓘٣鬹뮾뾾ⴾ⾛햒ኺ [ 120.453600][ T31] usb 2-1: 0:2 : does not exist [ 120.466708][ T31] usb 2-1: USB disconnect, device number 34 [ 120.484979][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 120.565986][ T4188] rust_binder: Error while translating object. [ 120.566014][ T4188] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 120.572299][ T4188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:303 [ 120.625699][ T4191] kvm: kvm [4190]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 120.643297][ T4191] kvm: kvm [4190]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 120.663494][ T4191] rust_binder: Error in use_page_slow: ESRCH [ 120.663518][ T4191] rust_binder: use_range failure ESRCH [ 120.669666][ T4191] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 120.675208][ T4191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 120.683218][ T4191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:455 [ 120.963016][ T4199] rust_binder: Error while translating object. [ 120.972642][ T4199] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 120.979003][ T4199] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:462 [ 121.161698][ T4217] rust_binder: Write failure EINVAL in pid:791 [ 121.224302][ T4217] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:791 [ 121.386766][ T4228] rust_binder: Error while translating object. [ 121.396011][ T4228] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 121.402291][ T4228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:308 [ 121.509805][ T36] audit: type=1400 audit(2000000032.661:428): avc: denied { read } for pid=4243 comm="syz.3.1191" laddr=fe80::1857:5fff:fee6:3eee lport=5 faddr=ff02::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.530759][ T4244] No source specified [ 121.617432][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1196'. [ 121.649151][ T4266] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1198'. [ 121.792996][ T4273] kvm: pic: level sensitive irq not supported [ 121.793049][ T4273] kvm: pic: non byte read [ 121.803754][ T4273] kvm: pic: level sensitive irq not supported [ 121.803814][ T4273] kvm: pic: non byte read [ 121.814773][ T4273] kvm: pic: level sensitive irq not supported [ 121.814824][ T4273] kvm: pic: non byte read [ 121.825500][ T4273] kvm: pic: level sensitive irq not supported [ 121.825568][ T4273] kvm: pic: non byte read [ 121.836241][ T4273] kvm: pic: level sensitive irq not supported [ 121.836305][ T4273] kvm: pic: non byte read [ 121.860597][ T36] audit: type=1326 audit(2000000033.011:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 121.884805][ T36] audit: type=1326 audit(2000000033.011:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 121.908193][ T36] audit: type=1326 audit(2000000033.011:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 121.931578][ T36] audit: type=1326 audit(2000000033.011:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 121.955285][ T36] audit: type=1326 audit(2000000033.011:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 121.955828][ T4284] overlayfs: overlapping lowerdir path [ 121.978658][ T36] audit: type=1326 audit(2000000033.011:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.5.1200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc95078ebe9 code=0x7fc00000 [ 122.103235][ T4297] usb usb8: usbfs: process 4297 (syz.5.1208) did not claim interface 0 before use [ 122.217415][ T4302] /dev/rnullb0: Can't open blockdev [ 122.251867][ T4305] GUP no longer grows the stack in syz.5.1208 (4305): 200000001000-200000c01000 (200000000000) [ 122.266766][ T4305] CPU: 1 UID: 0 PID: 4305 Comm: syz.5.1208 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 122.266812][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.266827][ T4305] Call Trace: [ 122.266835][ T4305] [ 122.266845][ T4305] __dump_stack+0x21/0x30 [ 122.266882][ T4305] dump_stack_lvl+0x10c/0x190 [ 122.266910][ T4305] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.266939][ T4305] ? find_vma+0xcd/0x110 [ 122.266960][ T4305] dump_stack+0x19/0x20 [ 122.266988][ T4305] __get_user_pages+0x1e34/0x22d0 [ 122.267015][ T4305] ? __kasan_check_write+0x18/0x20 [ 122.267048][ T4305] ? down_read_killable+0x79/0xf0 [ 122.267073][ T4305] ? populate_vma_page_range+0x230/0x230 [ 122.267101][ T4305] ? kernel_text_address+0xa9/0xe0 [ 122.267132][ T4305] __gup_longterm_locked+0xcb1/0x1580 [ 122.267159][ T4305] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 122.267193][ T4305] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 122.267226][ T4305] gup_fast_fallback+0x12ae/0x14a0 [ 122.267255][ T4305] ? kasan_save_track+0x4f/0x80 [ 122.267274][ T4305] ? kasan_save_track+0x3e/0x80 [ 122.267296][ T4305] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.267346][ T4305] ? get_user_pages_fast_only+0xc0/0xc0 [ 122.267380][ T4305] get_user_pages_fast+0x73/0xb0 [ 122.267407][ T4305] get_futex_key+0x24d/0x930 [ 122.267430][ T4305] ? __cfi_get_futex_key+0x10/0x10 [ 122.267452][ T4305] ? futex_setup_timer+0xb4/0xd0 [ 122.267473][ T4305] futex_lock_pi+0x1c0/0xa10 [ 122.267500][ T4305] ? __cfi_futex_lock_pi+0x10/0x10 [ 122.267528][ T4305] ? __kasan_check_write+0x18/0x20 [ 122.267559][ T4305] ? wake_up_q+0x10f/0x1c0 [ 122.267594][ T4305] ? __cfi_futex_wake_mark+0x10/0x10 [ 122.267620][ T4305] ? down_read+0x79/0xe0 [ 122.267645][ T4305] ? __kasan_check_write+0x18/0x20 [ 122.267684][ T4305] ? up_read+0x26/0x1d0 [ 122.267712][ T4305] do_futex+0x2de/0x500 [ 122.267731][ T4305] ? __cfi_do_futex+0x10/0x10 [ 122.267752][ T4305] ? vm_mmap_pgoff+0x145/0x4e0 [ 122.267784][ T4305] __se_sys_futex+0x28f/0x300 [ 122.267808][ T4305] ? __x64_sys_futex+0x110/0x110 [ 122.267831][ T4305] ? __kasan_check_write+0x18/0x20 [ 122.267863][ T4305] __x64_sys_futex+0xe9/0x110 [ 122.267886][ T4305] x64_sys_call+0x227f/0x2ee0 [ 122.267918][ T4305] do_syscall_64+0x58/0xf0 [ 122.267950][ T4305] ? clear_bhb_loop+0x50/0xa0 [ 122.267978][ T4305] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.268005][ T4305] RIP: 0033:0x7fc95078ebe9 [ 122.268024][ T4305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.268044][ T4305] RSP: 002b:00007fc951699038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.268070][ T4305] RAX: ffffffffffffffda RBX: 00007fc9509c6180 RCX: 00007fc95078ebe9 [ 122.268088][ T4305] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000200000000b00 [ 122.268105][ T4305] RBP: 00007fc950811e19 R08: 0000000000000000 R09: 0000000000000002 [ 122.268120][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.268134][ T4305] R13: 00007fc9509c6218 R14: 00007fc9509c6180 R15: 00007ffe747aefb8 [ 122.268155][ T4305] [ 122.961024][ T4333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1218'. [ 123.051567][ T4337] syzkaller0: entered promiscuous mode [ 123.057175][ T4337] syzkaller0: entered allmulticast mode [ 123.176630][ T4347] loop2: detected capacity change from 0 to 7 [ 123.183841][ T4348] overlayfs: failed to resolve './bus': -2 [ 123.188700][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.198887][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.207953][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.217157][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.225088][ T4347] loop2: unable to read partition table [ 123.231212][ T4347] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 123.245955][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.255141][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.263691][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.272884][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.283154][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.292363][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.302046][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.311248][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.324249][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.333427][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.336896][ T4356] x_tables: unsorted underflow at hook 4 [ 123.342927][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.356093][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.364496][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 123.373691][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 123.381594][ T4350] loop2: unable to read partition table [ 123.461380][ T4376] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 192, limit: 232, size: 83) [ 123.461431][ T4376] rust_binder: Error while translating object. [ 123.472111][ T4376] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 123.478590][ T4376] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:836 [ 123.518289][ T4390] overlayfs: failed to clone upperpath [ 123.674278][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 123.804279][ T45] usb 5-1: device descriptor read/64, error -71 [ 124.044296][ T45] usb 5-1: device descriptor read/64, error -71 [ 124.061775][ T4408] overlayfs: failed to resolve './file1/file0': -2 [ 124.069244][ T4408] 9pnet_fd: Insufficient options for proto=fd [ 124.103048][ T4417] rust_binder: Error while translating object. [ 124.103099][ T4417] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 124.111322][ T4417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:842 [ 124.137831][ T4424] binder: Bad value for 'defcontext' [ 124.138120][ T4425] binder: Bad value for 'defcontext' [ 124.284310][ T45] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 124.362009][ T4440] rust_binder: 4439 RLIMIT_NICE not set [ 124.362306][ T4439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.368002][ T4439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:852 [ 124.382387][ T31] rust_binder: 4438: removing orphan mapping 0:4248 [ 124.414696][ T45] usb 5-1: device descriptor read/64, error -71 [ 124.654318][ T45] usb 5-1: device descriptor read/64, error -71 [ 124.764434][ T45] usb usb5-port1: attempt power cycle [ 125.104277][ T45] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 125.125327][ T45] usb 5-1: device descriptor read/8, error -71 [ 125.255597][ T45] usb 5-1: device descriptor read/8, error -71 [ 125.494347][ T45] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 125.515623][ T45] usb 5-1: device descriptor read/8, error -71 [ 125.645898][ T45] usb 5-1: device descriptor read/8, error -71 [ 125.754433][ T45] usb usb5-port1: unable to enumerate USB device [ 144.379229][ T4448] can0: slcan on ttyS3. [ 144.444370][ T331] syzkaller0: tun_net_xmit 76 [ 144.449250][ T331] syzkaller0: tun_net_xmit 48 [ 144.465151][ T4448] can0 (unregistered): slcan off ttyS3. [ 144.474288][ T31] syzkaller0: tun_net_xmit 76 [ 144.481815][ T4450] syzkaller0: create flow: hash 2788136767 index 1 [ 144.554964][ T4446] syzkaller0: delete flow: hash 2788136767 index 1 [ 144.592297][ T4458] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 144.601467][ T4458] overlayfs: missing 'lowerdir' [ 144.682021][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 144.682041][ T36] audit: type=1400 audit(2000000055.829:498): avc: denied { ioctl } for pid=4492 comm="syz.5.1265" path="socket:[27239]" dev="sockfs" ino=27239 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 144.774264][ T31] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 144.894350][ T45] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 144.926455][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 144.937501][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.947838][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 144.960980][ T31] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 144.970266][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.979754][ T31] usb 5-1: config 0 descriptor?? [ 145.065320][ T45] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 145.076218][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.086111][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 145.099147][ T45] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 145.108234][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.117055][ T45] usb 2-1: config 0 descriptor?? [ 145.184265][ T359] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 145.314281][ T359] usb 6-1: device descriptor read/64, error -71 [ 145.388322][ T31] usbhid 5-1:0.0: can't add hid device: -71 [ 145.394403][ T31] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 145.403297][ T31] usb 5-1: USB disconnect, device number 35 [ 145.525524][ T45] holtek_kbd 0003:04D9:A055.000E: item fetching failed at offset 5/7 [ 145.533859][ T45] holtek_kbd 0003:04D9:A055.000E: probe with driver holtek_kbd failed with error -22 [ 145.554273][ T359] usb 6-1: device descriptor read/64, error -71 [ 145.725740][ T10] usb 2-1: USB disconnect, device number 35 [ 145.794268][ T359] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 145.906420][ T4533] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 145.925132][ T359] usb 6-1: device descriptor read/64, error -71 [ 146.015752][ T4543] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 146.015930][ T4543] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 146.024092][ T4544] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 146.070087][ T4554] /dev/rnullb0: Can't open blockdev [ 146.123271][ T36] audit: type=1400 audit(2000000057.269:499): avc: denied { ioctl } for pid=4555 comm="syz.4.1282" path="socket:[27382]" dev="sockfs" ino=27382 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.179986][ T359] usb 6-1: device descriptor read/64, error -71 [ 146.207811][ T4562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4562 comm=syz.3.1284 [ 146.294486][ T359] usb usb6-port1: attempt power cycle [ 146.494329][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 146.634284][ T359] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 146.645546][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.656570][ T10] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 146.665729][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.675540][ T10] usb 2-1: config 0 descriptor?? [ 146.680762][ T359] usb 6-1: device descriptor read/8, error -71 [ 146.816085][ T359] usb 6-1: device descriptor read/8, error -71 [ 146.854286][ T45] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 147.005549][ T45] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.018833][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 147.026920][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.036676][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 147.045041][ T45] usb 5-1: SerialNumber: syz [ 147.051096][ T4578] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 147.058618][ T359] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 147.085328][ T359] usb 6-1: device descriptor read/8, error -71 [ 147.092649][ T10] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 147.099894][ T10] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 147.107617][ T10] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 147.116128][ T10] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 147.124291][ T10] holtek 0003:1241:5015.000F: unknown main item tag 0x0 [ 147.132862][ T10] holtek 0003:1241:5015.000F: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 147.146734][ T10] holtek 0003:1241:5015.000F: no inputs found [ 147.225394][ T359] usb 6-1: device descriptor read/8, error -71 [ 147.260295][ T4578] /dev/rnullb0: Can't open blockdev [ 147.267883][ T45] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 147.277112][ T45] usb 5-1: USB disconnect, device number 36 [ 147.294915][ T10] usb 2-1: USB disconnect, device number 36 [ 147.334403][ T359] usb usb6-port1: unable to enumerate USB device [ 147.781855][ T4588] rust_binder: 537: no such ref 3 [ 147.812874][ T331] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.819587][ T4590] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.826232][ T292] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.891263][ T4592] rust_binder: Write failure EINVAL in pid:537 [ 147.943331][ T36] audit: type=1400 audit(2000000059.089:500): avc: denied { read } for pid=4593 comm="syz.5.1296" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.950612][ T4594] overlay: Unknown parameter 'smackfstransmute' [ 147.973131][ T36] audit: type=1400 audit(2000000059.089:501): avc: denied { ioctl } for pid=4593 comm="syz.5.1296" path="/119/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.874277][ T45] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 149.025344][ T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 149.036316][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.046269][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 149.059532][ T45] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 149.068807][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.080902][ T45] usb 5-1: config 0 descriptor?? [ 149.417938][ T36] audit: type=1400 audit(2000000060.569:502): avc: denied { create } for pid=4609 comm="syz.5.1301" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 149.438228][ T4610] rust_binder: Error while translating object. [ 149.438277][ T4610] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 149.444908][ T4610] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:386 [ 149.489466][ T45] holtek_kbd 0003:04D9:A055.0010: item fetching failed at offset 5/7 [ 149.507252][ T45] holtek_kbd 0003:04D9:A055.0010: probe with driver holtek_kbd failed with error -22 [ 149.578384][ T4621] loop2: detected capacity change from 0 to 7 [ 149.584899][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.594107][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.602134][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.611397][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.619547][ T4621] loop2: unable to read partition table [ 149.625293][ T4621] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 149.626853][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.648005][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.656222][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.665417][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.673386][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.682571][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.690574][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.694173][ T359] usb 5-1: USB disconnect, device number 37 [ 149.699807][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.714311][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.723473][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.731372][ T4622] loop2: unable to read partition table [ 149.731805][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.746205][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.754460][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.763640][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 149.844375][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.845258][ T3432] Bluetooth: hci0: command 0x1003 tx timeout [ 149.883263][ T36] audit: type=1400 audit(2000000061.029:503): avc: denied { mounton } for pid=4632 comm="syz.1.1306" path="/278/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 149.905612][ T4633] overlayfs: failed to resolve 'redirect_dir=on': -2 [ 149.921071][ T4633] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.1306'. [ 150.164312][ T359] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 150.214247][ T10] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 150.365243][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 150.373575][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.383907][ T10] usb 6-1: config 220 has no interface number 2 [ 150.390272][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.403446][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 150.410322][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 150.417384][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 150.425634][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.434762][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.442760][ T10] usb 6-1: Product: syz [ 150.446956][ T10] usb 6-1: Manufacturer: syz [ 150.451459][ T4644] rust_binder: 543: no such ref 5 [ 150.451593][ T10] usb 6-1: SerialNumber: syz [ 150.456759][ T4644] rust_binder: Write failure EINVAL in pid:543 [ 150.606058][ T36] audit: type=1400 audit(2000000061.759:504): avc: denied { execmem } for pid=4645 comm="syz.3.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 150.666921][ T10] usb 6-1: selecting invalid altsetting 0 [ 150.672842][ T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 150.679594][ T10] usb 6-1: No valid video chain found. [ 150.691254][ T10] usb 6-1: USB disconnect, device number 29 [ 151.085700][ T4673] fuseblk: Bad value for 'source' [ 151.105670][ T4676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 151.236034][ T4686] veth1_to_batadv: mtu less than device minimum [ 151.239706][ T4687] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 151.258938][ T36] audit: type=1400 audit(2000000062.419:505): avc: denied { relabelto } for pid=4683 comm="syz.5.1322" name="cgroup" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 151.260435][ T4687] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415 [ 151.286792][ T36] audit: type=1400 audit(2000000062.419:506): avc: denied { associate } for pid=4683 comm="syz.5.1322" name="cgroup" dev="tmpfs" ino=713 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 151.344619][ T4689] overlayfs: failed to resolve './file0': -2 [ 151.351693][ T4689] netlink: 57 bytes leftover after parsing attributes in process `syz.3.1324'. [ 151.374352][ T4691] fuse: Bad value for 'fd' [ 151.894279][ T359] usb 2-1: device descriptor read/64, error -71 [ 152.027759][ T36] audit: type=1400 audit(2000000063.179:507): avc: denied { unlink } for pid=2536 comm="syz-executor" name="cgroup" dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 152.155564][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.165506][ T359] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 152.174673][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.183466][ T359] usb 2-1: config 0 descriptor?? [ 152.314266][ T64] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 152.454264][ T64] usb 6-1: device descriptor read/64, error -71 [ 152.594470][ T4704] rust_binder: Error while translating object. [ 152.594531][ T4704] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 152.600827][ T4704] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:886 [ 152.694321][ T64] usb 6-1: device descriptor read/64, error -71 [ 152.749511][ T359] usbhid 2-1:0.0: can't add hid device: -71 [ 152.761009][ T359] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 152.769828][ T359] usb 2-1: USB disconnect, device number 37 [ 152.778978][ T36] audit: type=1400 audit(2000000063.929:508): avc: denied { create } for pid=4734 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.799315][ T36] audit: type=1400 audit(2000000063.929:509): avc: denied { write } for pid=4734 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.819512][ T36] audit: type=1400 audit(2000000063.929:510): avc: denied { nlmsg_write } for pid=4734 comm="syz.4.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 152.964486][ T64] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 152.985443][ T4741] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1339'. [ 153.094320][ T64] usb 6-1: device descriptor read/64, error -71 [ 153.171953][ T36] audit: type=1400 audit(2000000064.319:511): avc: denied { bind } for pid=4757 comm="syz.1.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 153.334281][ T64] usb 6-1: device descriptor read/64, error -71 [ 153.444394][ T64] usb usb6-port1: attempt power cycle [ 153.784276][ T64] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 153.805338][ T64] usb 6-1: device descriptor read/8, error -71 [ 153.935384][ T64] usb 6-1: device descriptor read/8, error -71 [ 154.095392][ T4775] overlayfs: failed to clone upperpath [ 154.115535][ T36] audit: type=1326 audit(2000000065.269:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4776 comm="syz.3.1351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f986e78ebe9 code=0x0 [ 154.151177][ T4779] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 154.152207][ T4779] rust_binder: Error while translating object. [ 154.159022][ T4779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.165358][ T4779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:906 [ 154.174311][ T64] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 154.205327][ T64] usb 6-1: device descriptor read/8, error -71 [ 154.335371][ T64] usb 6-1: device descriptor read/8, error -71 [ 154.434274][ T359] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 154.444338][ T64] usb usb6-port1: unable to enumerate USB device [ 154.585435][ T359] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 154.596441][ T359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.606222][ T359] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 154.619398][ T359] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 154.628482][ T359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.637274][ T359] usb 2-1: config 0 descriptor?? [ 154.723738][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.732657][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.741622][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.750371][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.759280][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.768132][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.778126][ T4787] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.899257][ T4796] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 155.046599][ T359] holtek_kbd 0003:04D9:A055.0011: item fetching failed at offset 5/7 [ 155.059823][ T359] holtek_kbd 0003:04D9:A055.0011: probe with driver holtek_kbd failed with error -22 [ 155.106792][ T4825] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:425 [ 155.106831][ T4825] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 155.116153][ T4825] rust_binder: Read failure Err(EFAULT) in pid:425 [ 155.211239][ T4827] rust_binder: Failed to allocate buffer. len:4168, is_oneway:true [ 155.217947][ T4827] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 155.225966][ T4827] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:427 [ 155.245794][ T359] usb 2-1: USB disconnect, device number 38 [ 155.289679][ T64] rust_binder: 4826: removing orphan mapping 0:24 [ 155.404749][ T4840] IPv4: Oversized IP packet from 127.202.26.0 [ 155.585315][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 155.585334][ T36] audit: type=1400 audit(2000000066.739:514): avc: denied { lock } for pid=4844 comm="syz.3.1371" path="socket:[29756]" dev="sockfs" ino=29756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 155.585890][ T4845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1371'. [ 155.625376][ T36] audit: type=1400 audit(2000000066.779:515): avc: denied { accept } for pid=4844 comm="syz.3.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.781429][ T36] audit: type=1400 audit(2000000066.929:516): avc: denied { nlmsg_read } for pid=4869 comm="syz.3.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 155.809147][ T4872] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 155.818477][ T4872] overlayfs: failed to clone upperpath [ 155.865414][ T64] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 155.878265][ T64] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.915113][ T4873] /dev/rnullb0: Can't open blockdev [ 155.985510][ T4878] $: renamed from bridge_slave_0 (while UP) [ 156.192466][ T36] audit: type=1400 audit(2000000067.339:517): avc: denied { link } for pid=4880 comm="syz.1.1382" name="#21" dev="tmpfs" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.214664][ T36] audit: type=1400 audit(2000000067.339:518): avc: denied { rename } for pid=4880 comm="syz.1.1382" name="#22" dev="tmpfs" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.261769][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.261799][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.268421][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.275026][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.281705][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.288259][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.294829][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.301330][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.307878][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.314432][ T4888] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 156.839242][ T36] audit: type=1400 audit(2000000067.989:519): avc: denied { create } for pid=4921 comm="syz.1.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 157.311341][ T36] audit: type=1400 audit(2000000068.459:520): avc: denied { getopt } for pid=4948 comm="syz.3.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 157.331082][ T36] audit: type=1400 audit(2000000068.459:521): avc: denied { lock } for pid=4948 comm="syz.3.1403" path="socket:[30954]" dev="sockfs" ino=30954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 157.369931][ T4955] overlayfs: failed to clone upperpath [ 157.403375][ T4960] rust_binder: Error in use_page_slow: ESRCH [ 157.403397][ T4960] rust_binder: use_range failure ESRCH [ 157.410011][ T4960] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 157.416115][ T4960] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 157.424546][ T4960] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:938 [ 158.211051][ T4982] 9pnet_fd: Insufficient options for proto=fd [ 158.249235][ T4985] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 158.258757][ T36] audit: type=1400 audit(2000000069.409:522): avc: denied { read } for pid=4983 comm="syz.4.1415" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.311477][ T4993] overlayfs: failed to resolve './file0': -2 [ 158.438106][ T5008] pim6reg1: entered promiscuous mode [ 158.443524][ T5008] pim6reg1: entered allmulticast mode [ 158.456167][ T5010] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1424'. [ 158.794275][ T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 158.944252][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 158.950618][ T45] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 158.959150][ T45] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 158.967982][ T45] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 158.977391][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 158.987081][ T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 158.996790][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.010085][ T45] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.019201][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.028223][ T45] usb 2-1: config 0 descriptor?? [ 159.105798][ T5033] 9pnet: Could not find request transport: { [ 159.235114][ T45] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.247372][ T45] usb 2-1: USB disconnect, device number 39 [ 159.254093][ T45] usblp0: removed [ 159.364951][ T31] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 159.514273][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 159.519870][ T31] usb 5-1: too many configurations: 208, using maximum allowed: 8 [ 159.528856][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.536503][ T31] usb 5-1: can't read configurations, error -61 [ 159.638639][ T5040] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 159.649412][ T5040] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 159.667347][ T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 159.686744][ T64] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 159.738375][ T5048] rust_binder: Error while translating object. [ 159.738418][ T5048] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 159.744662][ T5048] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:466 [ 159.796277][ T5057] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 159.824306][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 159.829896][ T31] usb 5-1: too many configurations: 208, using maximum allowed: 8 [ 159.838872][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.846547][ T31] usb 5-1: can't read configurations, error -61 [ 159.852916][ T31] usb usb5-port1: attempt power cycle [ 159.854259][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 159.864743][ T64] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.873129][ T64] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.881990][ T64] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.891002][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.901079][ T64] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.901254][ T5060] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 159.911150][ T64] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.931285][ T64] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.940373][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.949407][ T64] usb 2-1: config 0 descriptor?? [ 160.155808][ T64] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 160.194300][ T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 160.214745][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 160.220673][ T31] usb 5-1: too many configurations: 208, using maximum allowed: 8 [ 160.229903][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.238111][ T31] usb 5-1: can't read configurations, error -61 [ 160.280399][ T5069] overlayfs: failed to clone upperpath [ 160.374284][ T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 160.394647][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 160.400196][ T31] usb 5-1: too many configurations: 208, using maximum allowed: 8 [ 160.409961][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.417632][ T31] usb 5-1: can't read configurations, error -61 [ 160.424038][ T31] usb usb5-port1: unable to enumerate USB device [ 160.708246][ T5074] rust_binder: Write failure EFAULT in pid:967 [ 160.812479][ T5076] devpts: called with bogus options [ 160.909521][ T31] usb 2-1: USB disconnect, device number 40 [ 160.916375][ T31] usblp0: removed [ 161.336403][ T5078] overlayfs: failed to clone upperpath [ 161.354478][ T36] audit: type=1400 audit(2000000072.509:523): avc: denied { mount } for pid=5079 comm="syz.3.1451" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 161.542648][ T5091] syzkaller0: entered promiscuous mode [ 161.548559][ T5091] syzkaller0: entered allmulticast mode [ 161.595134][ T5093] ------------[ cut here ]------------ [ 161.600799][ T5093] WARNING: CPU: 0 PID: 5093 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 161.610696][ T5093] Modules linked in: [ 161.614688][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz.1.1456 Not tainted syzkaller #0 7fe4e484688c438396c810d5bd2610fd3644ee8a [ 161.626283][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.636401][ T5093] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 161.642326][ T5093] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 d0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 161.662168][ T5093] RSP: 0018:ffffc900017c7c88 EFLAGS: 00010202 [ 161.668318][ T5093] RAX: 1ffffd1ffff8b2a2 RBX: ffffc900050a48e8 RCX: ffffffff816dc9a9 [ 161.676401][ T5093] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc59510 [ 161.684441][ T5093] RBP: ffffc900017c7cf0 R08: ffffe8ffffc59517 R09: 1ffffd1ffff8b2a2 [ 161.692961][ T5093] R10: dffffc0000000000 R11: fffff91ffff8b2a3 R12: dffffc0000000000 [ 161.700980][ T5093] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc59510 [ 161.709030][ T5093] FS: 00007fadc54666c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 161.718051][ T5093] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 161.724685][ T5093] CR2: 000000110c2c0150 CR3: 00000001176bc000 CR4: 00000000003526b0 [ 161.732774][ T5093] Call Trace: [ 161.736106][ T5093] [ 161.739061][ T5093] kvm_put_kvm+0x1100/0x12b0 [ 161.743682][ T5093] ? __cfi_kvm_vm_release+0x10/0x10 [ 161.748941][ T5093] kvm_vm_release+0x47/0x70 [ 161.753486][ T5093] __fput+0x1fe/0xa00 [ 161.757520][ T5093] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 161.763363][ T5093] ____fput+0x20/0x30 [ 161.767417][ T5093] task_work_run+0x1e3/0x250 [ 161.772049][ T5093] ? __cfi_task_work_run+0x10/0x10 [ 161.777244][ T5093] ? __kasan_check_write+0x18/0x20 [ 161.782406][ T5093] resume_user_mode_work+0x36/0x50 [ 161.787591][ T5093] syscall_exit_to_user_mode+0x64/0xb0 [ 161.793105][ T5093] do_syscall_64+0x64/0xf0 [ 161.797588][ T5093] ? clear_bhb_loop+0x50/0xa0 [ 161.802295][ T5093] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 161.808244][ T5093] RIP: 0033:0x7fadc458ebe9 [ 161.812699][ T5093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.832393][ T5093] RSP: 002b:00007fadc5466038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 161.840882][ T5093] RAX: 0000000000000000 RBX: 00007fadc47c5fa0 RCX: 00007fadc458ebe9 [ 161.848919][ T5093] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 161.857005][ T5093] RBP: 00007fadc4611e19 R08: 0000000000000000 R09: 0000000000000000 [ 161.865119][ T5093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.873129][ T5093] R13: 00007fadc47c6038 R14: 00007fadc47c5fa0 R15: 00007ffe3c18a968 [ 161.881191][ T5093] [ 161.884273][ T5093] ---[ end trace 0000000000000000 ]---