last executing test programs: 4m58.279671449s ago: executing program 2 (id=2897): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0x3, 0x0, 0x7992a57c}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x40}], 0x59, 0x0, 0x0}) 4m58.279086119s ago: executing program 2 (id=2899): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@getae={0x9c, 0x1f, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in=@broadcast, 0x4d6, 0xa, 0x32}, @in6=@private0, 0x2, 0x3507}, [@address_filter={0x28, 0x1a, {@in6=@private0, @in6=@mcast2, 0x2, 0x3, 0x9}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @sec_ctx={0x2a, 0x8, {0x26, 0x8, 0x1, 0x0, 0x1e, "83737adad2316c1bf03339c679647423443ede385bab933d657c3dc39110"}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) 4m58.278785939s ago: executing program 2 (id=2900): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fchdir(r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000012fd2e918b79dba5bd6995685cec700586d762b729fc0e2844daf352aaf53b1c3565b4906c69916d75512e3f895c7a3d4c834b5ba182d145b7b73fcd7aabed2a58f0f716541a92472674571f79b69a46000000000000000000ee6c617b9a8bf1044ab072379c12fba657d477796b"]) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)}, {&(0x7f0000000380)="6a8f591f7465354e07b262c4e3eff2ec43107117b3a9799aed208d161b21f71c3e04c10efd6302b1a14496d9e3a111bb865b54d36731112873883d0a29a649962367beec71a4b2e979f24364352799f4c99a1763fc6314b31916964ec97b86e7b0bf250d01bbaabfd3fea25b4f8e583f882dcc67f70d", 0x76}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f00000001c0)="b6dc94797213dd44b6f3174d91209efc5765d30000000000000000000000001c", 0x20}, {&(0x7f0000000400)="e1b8019a7c85910afca69ac78d531b76a95b9fa9e334a6ce3649930733d2c2106dba833e845eaecb547081fb13c3760ddc1f8e4bf338cc0925b344ef74636a3b4e55226c01dbd43caaa5d540ac695951866f7a44899ee564e222b321ee8b17d8e2e550f1", 0x64}, {&(0x7f00000002c0)="3e7d5c0f9b6cf552f97f51aba60550925cec69ab39d2f27bed76716ab2b3", 0x1e}, {&(0x7f0000000540)="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", 0xff}], 0x7}}], 0x3, 0x4000010) unshare(0x20000400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x108) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) splice(r4, &(0x7f0000000200), r5, 0x0, 0x808, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r7) socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[], 0x0) 4m57.730373078s ago: executing program 2 (id=2920): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2) syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x220500) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000080)={0x3, 0x1, 0x952, 0xb8, 0x3ea4000, 0x5e1a}) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010102000000ff6a05b40000000102030109022d00010181a0000904000701030101010921ff0300341e000009058103005c2533e1e1740f693ed4bbb36c7efac320c5d8c2abff191782c3bfbcf9950c57c28141cc5ac4e7cce4f092b3a47c5d09037e2ebfa988c739fe281acca52f234ca9304183ec86db3bdaef02"], &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xa, 0x31, 0x91, 0x0, 0xf7}, 0x4b, &(0x7f0000000140)={0x5, 0xf, 0x4b, 0x1, [@generic={0x46, 0x10, 0xa, "9b4b757635f7c0fb84538435e3f46f39093cd9bcb3dc126bf103bd06b192479f3ce4e472e46ed2afa240f1476b2cc45d665746e69d93c642185c81ffa53683f7e25d08"}]}, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xe9, &(0x7f0000000200)=@string={0xe9, 0x3, "cc702e81cce4da652a65f5de11eef74fa4f7acff3607ab79c9c1559f2e28fda362cc36894007fb845832fdf08551cee5cf3803b08c215bc09c168402d4128ff86e5a84f2e9d7713ef16224deb7c61196e92fbcced20259168789b1d6703581dde39f71d8d0fcff84c9c306bad2f614535f34a40bb87e5b44de4939acbabb7bd4ba9b2c7b42e1346fc28efec6a05dda0653ae8cc245f3262fdda07296d985d484268fa81cc169fe82bf4b55ec3fdb4ab4d7b344951ed582b60fadfb34360fc693599eeee6cd9e7ee26a5815ff2a4985f97eef4743398d932ffd24b128a2dff3bb2be0c186bc9de6"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x441}}]}) syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000040)=0x7f, 0x4) socket$netlink(0x10, 0x3, 0xa) (async) socket$netlink(0x10, 0x3, 0xa) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x7fffffff) listen(r3, 0x0) (async) listen(r3, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="40140200000033"], 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x31, 0x4, "15bdd5b6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000940)={0x0, 0x5, 0x65, {0x65, 0xe, "4c7bb8a18c29f0caacb2663fdde7ab52925ed635102cdad064943b763754f80165216a7b208cc15080df8a378baf8cc77d40a935073c2fb57453bfb3dcd3f3e5019222019374536e30acaacd3b0d4d3d413e396a272b2fa6e5f532e83a9ab9283267d1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a00)={0x70, 0x0, 0xe5, "90751011603e7bf6e9cebb5185296d8dc7bbd5d3fc37bf46523a498b9c3d0d1760618007121c920a6c4f8ced215ee60879735fe986e708213e32b182038f2062e57ffdeea01c62caf71133c54ecdf33d592d4d83c78fe93f752d2d7acea07ac4e9448ab905fd287ca65b60d2e3d9e058df2a11ce709b2c91218b7816defb65311ceea80ed74f0d2d6e6d96983d08362912875cc0514562ebaca4e53ddfd206fd6e430a5dfb81b9c265b281de0dbc68fb085f981b81db8c9705147f845510f6a3afa0ec9fc9ae12be1f7703f901198d66354a71ad1c4f1e259cf2f57c7151e4b9d3e7b8d015"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x42, {0x40, "33a492d7737ae0db6aab5c90bb45600998dc669f1fae15c5cab151a1306bcbb177b56435bd79b890941780626bea05468fb64a25b5a6faaf76b825de86d3b3bc"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0xae}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x7}}) (async) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000009c0)={0x14, &(0x7f0000000940)={0x0, 0x5, 0x65, {0x65, 0xe, "4c7bb8a18c29f0caacb2663fdde7ab52925ed635102cdad064943b763754f80165216a7b208cc15080df8a378baf8cc77d40a935073c2fb57453bfb3dcd3f3e5019222019374536e30acaacd3b0d4d3d413e396a272b2fa6e5f532e83a9ab9283267d1"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f0000000c80)={0x34, &(0x7f0000000a00)={0x70, 0x0, 0xe5, "90751011603e7bf6e9cebb5185296d8dc7bbd5d3fc37bf46523a498b9c3d0d1760618007121c920a6c4f8ced215ee60879735fe986e708213e32b182038f2062e57ffdeea01c62caf71133c54ecdf33d592d4d83c78fe93f752d2d7acea07ac4e9448ab905fd287ca65b60d2e3d9e058df2a11ce709b2c91218b7816defb65311ceea80ed74f0d2d6e6d96983d08362912875cc0514562ebaca4e53ddfd206fd6e430a5dfb81b9c265b281de0dbc68fb085f981b81db8c9705147f845510f6a3afa0ec9fc9ae12be1f7703f901198d66354a71ad1c4f1e259cf2f57c7151e4b9d3e7b8d015"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b80)={0x20, 0x0, 0x42, {0x40, "33a492d7737ae0db6aab5c90bb45600998dc669f1fae15c5cab151a1306bcbb177b56435bd79b890941780626bea05468fb64a25b5a6faaf76b825de86d3b3bc"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0xae}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$hid(r1, &(0x7f0000000540)={0x24, &(0x7f0000000380)={0x0, 0xf, 0xd0, {0xd0, 0xa, "d6a74e324073fc5b8f33dd054ff9f4589ad115139669d47342578551f4b8c1f507b6bc56e9956dae8dfe279946d3fde72d495f4de93ab03ab52057b6513a29f3e1d40ffdf2ce1d6ffdb06ea08bd333376b65aba67e891cb44b3e582c5f219bb4cbaf83c38ff907a57e34cedc9a13c701f9289f5debdc12a57826472f26591638561b6d2ed2e5b967ce26b91ff91d6441e039de47d1e650412ef3275828f777b29280cee922297167fb17a301c278ed4640a75b2331bfa97a92b62d2514331e580a6852cf5523792155c6c9860c7c"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f00000004c0)={0x0, 0x22, 0x10, {[@main=@item_012={0x2, 0x0, 0xb, "a125"}, @main=@item_4={0x3, 0x0, 0xa, "8e88bf88"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x9, "b6dbce8c"}, @global=@item_012={0x1, 0x1, 0x6, "a6"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6a, 0x9, 0x1, {0x22, 0xc03}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000e3f000000a83a9e5e88cdf9d43ec6920a9d00008608bf06264fd9833615d6937fac012cba4ad5a687bf171719ca169d6974000000000000000023d6c8549608b58f55ea9c4f7e52"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000680)={0x20, 0x1, 0xb3, "bc6f879d0faca231fe6b0b14d2aa3a18fdcb5529b9404be599f64f51fde288f2fb767bc969eab4b806682e25cd64ff2924f6fc7c568788bc193ec4c72fbcaeba40d332248ae107ddec3b7d352ee3a968f6688e1b9966196fb2fe7f7503538ccbffa2b2a8946af39fc16b7b75391d5280968bbc60710a0081c1b2b671dc3724a7940a004e46f18c17570ddc2525aed42d5025c7ed0ef1cdb7fa7944d3250608623c3a6d53419a3ae316f034d9cf9859d587190b"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0xff}}) 4m57.187735436s ago: executing program 2 (id=2926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x3, 0xff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086602, &(0x7f0000000080)={@desc={0xffff8000, 0x0, @desc2}}) setsockopt$inet6_buf(r3, 0x29, 0x20, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008502"]) close_range(r0, 0xffffffffffffffff, 0x0) 4m57.172180687s ago: executing program 2 (id=2927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x300, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000003200)=""/241, &(0x7f0000000140)=0xf1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000003300)={'security\x00', 0x0, [0xffff, 0x9, 0x65d, 0x811, 0xa0]}, &(0x7f0000000180)=0x54) r4 = dup(r3) read$FUSE(r1, &(0x7f00000011c0)={0x2020, 0x0, 0x0}, 0x2020) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4a22, 0x0, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r9, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r8, 0x0, 0x1100000000f336, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000200)=""/179, 0xb3) lseek(r10, 0x3, 0x1) getdents64(r10, 0x0, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x62, 0x0, r5, {0xd}}, 0x18) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 4m40.753910965s ago: executing program 32 (id=2927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x300, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, 0x0}) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000003200)=""/241, &(0x7f0000000140)=0xf1) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000003300)={'security\x00', 0x0, [0xffff, 0x9, 0x65d, 0x811, 0xa0]}, &(0x7f0000000180)=0x54) r4 = dup(r3) read$FUSE(r1, &(0x7f00000011c0)={0x2020, 0x0, 0x0}, 0x2020) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4a22, 0x0, @local, 0xb}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="65f2", 0x2}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r9, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) splice(r6, 0x0, r8, 0x0, 0x1100000000f336, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000200)=""/179, 0xb3) lseek(r10, 0x3, 0x1) getdents64(r10, 0x0, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x62, 0x0, r5, {0xd}}, 0x18) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 3m24.849404125s ago: executing program 0 (id=3961): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f0000000200)=[@cr0={0x0, 0x40000000}], 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f0000000f00)={0x2020}, 0x2020) 3m24.796767166s ago: executing program 0 (id=3962): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$selinux_validatetrans(r2, &(0x7f00000000c0)={'system_u:object_r:hwdata_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x2, 0x20, '/usr/sbin/cupsd\x00'}, 0x53) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x4}) (async) r3 = socket$inet6(0xa, 0x80002, 0x0) (async) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) fchdir(0xffffffffffffffff) ioctl$FITHAW(r1, 0xc0045878) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0x0, 0x6000}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r7 = inotify_init1(0x800) sync_file_range(r7, 0xfffffffffffff800, 0x10004, 0x5) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x12, r0, 0x4d75d000) 3m24.796440256s ago: executing program 0 (id=3963): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) ioctl$FICLONE(r2, 0x40049409, r3) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write(r4, &(0x7f0000000100)="f2b15f9e214c96042f424863df8b12b5f75c8a9f655fd8c5ac533b380a132d0d6280e07e861de32ea3c4ad876d075a7d15b3569042c8c0bb03e8d36f8e995761dd212f426813d7d01d0301dad269bfb1d8f2a509f0db4969e6ea65d0692df6e3364c94f5df348fee1fc4b3593a863f2ad14dea0d1324f0e72be949383d69a4b6f0f6668321fd9d00dc066c61a26175828725c2d925e0111e8c33100a3ebc2b74cc0358cbf734d19519efd1d0b50f6f6742a61f5f97280321b23bb3a60ab5ff71ac8c1ecf7a8b6231e525e6e57427c1351fe92fd3f312ba8246c809f6", 0xdc) 3m24.795526516s ago: executing program 0 (id=3964): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') r2 = socket$packet(0x11, 0x3, 0x300) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x10000a}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x18, r4, 0x1229, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000084}, 0x810) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.793934966s ago: executing program 0 (id=3965): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x464402, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x464402, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) fadvise64(r1, 0x364ccd2, 0x5, 0x5) (async) fadvise64(r1, 0x364ccd2, 0x5, 0x5) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='Jcpu'], 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02}) close(r5) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdc01, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000) (async) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdc01, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000) preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffe) (async) preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0xfffffffe) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', @multicast}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="530000000700004600f5311320"], 0x53) (async) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="530000000700004600f5311320"], 0x53) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB="fe2fe39eb54ce759065fbad2424ad1daea32da68c68e01e95d883affdb765b0f69071628440ae781475c66242d215a5f14da87e0fc8cdcf221a2f0822499f81e33070caf63cd756d54f7f9413a7590617c20d20ccebd3f4ae33ff2e555afac37f07f2336f9a1ea112a015a2e14515e42cab4bc3f6da0370a59f8237db21d81c07d2df9a2700ec17ebb4271275c8dc1b1f0f6556a8962c0e63cfcc25c1a9bfde237bd1494a0575fbe811cc06881161a998b9e846fccad37a32a2025ac57a05b", @ANYRESHEX, @ANYBLOB=',k']) sendfile(r0, r0, 0x0, 0x7ffff000) 3m24.676540528s ago: executing program 0 (id=3966): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) ftruncate(0xffffffffffffffff, 0xc17a) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x1834) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) utimes(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x326d0000) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 3m24.675564378s ago: executing program 33 (id=3966): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c) ftruncate(0xffffffffffffffff, 0xc17a) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x1834) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) utimes(0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700b4502fd8ca1f05bf0001080008001d000000", 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x326d0000) getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) 36.527924387s ago: executing program 5 (id=7066): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000080)=r1) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000100)={0x14}, 0x14) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x5, 0x6, 0x401, 0x7}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040ac059f0200000000000109022400010000d005090400b9010300010009210008050122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8013, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x400408, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, 0x0) r8 = signalfd(r3, &(0x7f0000000180)={[0x2]}, 0x8) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xd90, 0x0, 0x319}]}) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x8000, 0x0) 34.764350025s ago: executing program 5 (id=7093): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x909, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xdf, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x20, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = fsopen(&(0x7f0000000300)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r5, &(0x7f0000000c40)={0x2020}, 0x2020) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f00000000c0)='*\x00\f\xdb\x0ej\xc5\xca\x80\x0eQ*\x86\xce\xc3\xf8V\xee\xda\x02\xd6\xcc\xac') 33.103814791s ago: executing program 5 (id=7102): openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x242040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x104) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='gfs2\x00', 0x200805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000940)='\xa8\xabo\x82L\xe4\x920\vA\xfd\xe5\xcaxd\xd4\xf3\x8e\xe9y\x9a\f$p\xe6\xd0I_\xd7s`\xa6\xa4\xff\xbc@d>\xf1l\xc7}\xde8\xf1\xcb.G\x1dj\x03\xb9p\xc6!`\xd5\x15\xe1\xb9\xd3R\xa7\xeb\xbeD\xdb\xddk_\x8a\x00\xd1\xa8rH\x14\xb4\x90P\"\x7f\xed\xc6\xac-3`unuE\x8fv6V\x04\x8e', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000800)=[{&(0x7f0000001780)="12df", 0x2}], 0x1, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f0000000340)={0xa4008400, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm(0xa, 0x5, 0x4) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) 33.048403322s ago: executing program 5 (id=7103): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000)) (async) r1 = open(&(0x7f0000000380)='./bus\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800b3000040"]) (async) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000023e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="b8010000000f01c1d82266b80b008ec8c4e3850c280f0fc71ca30f20dc0f0866baf80cb870f8d48aef66bafc0ced660f3882681966baf80cb8aa545c8fef66bafc0c66b8f10066ef", 0x48}], 0x1, 0x0, &(0x7f0000000140)=[@cstype3={0x5, 0x4}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r5, &(0x7f0000000480)=""/14, 0xd, 0x8000) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) sendto(r5, &(0x7f00000004c0)="1ed1dffca5d5e14d2bf3b8e1e9baa162d272984ea1bc83eb4d1e94dc83aba6631723d27a1a732febc5ac0be959299333e301a1b9146c12a90fa16b6ccd448007f78dc245ac1c9206c14ae2f357ed93fcafa187f02fc2eaca54c19f04e86d48d625bae110ec5e9200ceafa4ed115d629eab7ebfc19b58c7b896fcd6eb5cdf8544f6ee2705ac7039253ae9c79946762fad52b9b33c5f91f972dc715757ce5bc6393a0a4c06e0c5d512400d0481a2072a4548d4bb8533d60c4283e141f472f630594423d6e0f9a3b2d2aea393e167e353a43d7135b021fd60d47ce06e2ef99b5c16738cffd1b3", 0xe5, 0x4000, &(0x7f00000001c0)=@sco, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x100010, r6, 0x6e23f000) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r7 = socket$inet6(0xa, 0x6, 0x2) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{&(0x7f00000002c0)={0xa, 0x0, 0xabb4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bff000/0x400000)=nil) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000bf4000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r11, 0x99b33000) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x8910, &(0x7f00000028c0)={'ip6_vti0\x00', 0x0}) (async) r12 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) (async) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r12) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 33.034601082s ago: executing program 5 (id=7104): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x9a507facb4222330) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0xfff9, 0x3877}, 'syz1\x00', 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000009, 0xffffffff, 0x0, 0x0, 0x2, 0x7fffffff, 0x203, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000300)={0x3}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5414, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x3, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000200)=0x0) sched_setattr(r6, &(0x7f0000000240)={0x38, 0xb72e38098661b4d7, 0x1000002c, 0x5, 0x7, 0xc28, 0xfffffffffffffff8, 0x1, 0x1, 0x8001}, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000001800)=ANY=[], 0x394}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0xd53e3e22487f60ec}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FICLONERANGE(r8, 0x4020940d, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 32.914124564s ago: executing program 5 (id=7105): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d637064040000006573202d726c696d6974202d637075202b6d256d6f7279200000f1ff000000000000000000"], 0x2d) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x11a7) (async, rerun: 64) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (rerun: 64) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x1}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup(r8) 26.072267781s ago: executing program 4 (id=7162): r0 = fsopen(&(0x7f0000004600)='bdev\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000480)=""/255, 0xff, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @random="254752ff7dfc"}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x6) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) ftruncate(r5, 0xffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000140)={0x2, 0x8000, 0x1}) fcntl$addseals(r5, 0x409, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(r6, &(0x7f0000000100)='./file0\x00', 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000340), 0x220800, &(0x7f00000001c0)={[], [{@audit}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_measure}, {@subj_user}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000280), 0x208e24b) 25.173079715s ago: executing program 4 (id=7166): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) unshare(0x62040200) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x80010, r1, 0x45801000) (async, rerun: 64) r2 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 25.026694238s ago: executing program 4 (id=7171): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x58d402, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffc1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480140, 0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@empty, @empty, @mcast1, 0x100001, 0x6, 0x0, 0x100, 0x10003, 0x180107, r4}) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2c, 0x4, r4, 0x15, r5}, 0x10) 24.983985078s ago: executing program 4 (id=7173): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES8=r2], 0x0) 24.431143147s ago: executing program 4 (id=7174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b69a89dec587af36b5ba3a875838bfc09d99f0cb924883444a53142aad14beb10be6053b2098caba7c2c54051f93113b19e5e495f213c665481c979a7f92fe948bda2a8086699b81da66cf33cedadd6399362c83285c0a639584ed1009c2d08690bc9d2f", 0x64}, {&(0x7f0000000240)="2a6c0dc022c985de173a102032954f303d588d0d84eda9c2c720b198d0b996e3cb5320b8ae689f6f63e6c1c4a72e631cb2acff61a16f45b23ed17f91418b27620029602bb926e0c65e723c5f505381469cf8f3f59234b92a", 0x58}], 0x2, 0x2, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x0, 0x100000001}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setresuid(0xee00, 0xee00, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="366667f30f011e0f22640fc77aeb0f06cb673e0f070f57df66b80500000066b9004000000f01c1660f7fdc0f1808", 0x2e}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f0000001140)=0x0) r7 = socket$inet6(0xa, 0x2, 0x0) flistxattr(r7, &(0x7f0000000000)=""/224, 0xe0) io_submit(r6, 0x1, &(0x7f0000001380)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x8, 0x1, r5, 0x0, 0x0, 0x3, 0x0, 0x2}]) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x300, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) 24.341019989s ago: executing program 4 (id=7175): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) (async) 24.24932268s ago: executing program 34 (id=7175): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) socket$nl_audit(0x10, 0x3, 0x9) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='max=\x00']) (async) 16.844784486s ago: executing program 35 (id=7105): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket(0x10, 0x3, 0x0) (async) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) close(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d637064040000006573202d726c696d6974202d637075202b6d256d6f7279200000f1ff000000000000000000"], 0x2d) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 32) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) (async) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x11a7) (async, rerun: 64) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async, rerun: 64) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') (rerun: 64) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x1}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup(r8) 7.225915637s ago: executing program 7 (id=7417): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) 7.191058348s ago: executing program 7 (id=7418): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "0500"}, 0x28) sendto$inet6(r1, &(0x7f0000000400)="83", 0x1, 0x4000, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000028c0)="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", 0x1000}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7e, 0x0, 0x0}, &(0x7f0000000180)=0x40) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x8000, 0x10000, 0x7fffffff, 0x46, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x1, 0x2f, 0x0, @remote, @remote, {[@end, @ssrr={0x89, 0x1b, 0xe8, [@dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101, @remote, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x17, 0x0, 0xf, [0x7f, 0xfff, 0x9, 0x7]}, @end]}}}}}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0xf18, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x840) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x4, 0x288}, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) close(0x3) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES8=r6], 0x0) 4.221205454s ago: executing program 6 (id=7465): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"}) r2 = syz_open_pts(r1, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000940)=0x8f) ioctl$TCSETA(r1, 0x5406, &(0x7f00000000c0)={0xffff, 0x0, 0x4, 0x38f, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902350001080010000904df0003080662ff09050c02200006060309050710003e8fad67020102070824"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x19, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe, 0x0, 0x49, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x8, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x9, 0x3, 0x6, 0xff}, 0xad, &(0x7f0000000340)={0x5, 0xf, 0xad, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x71, 0x5}, @generic={0x93, 0x10, 0xa, "842e8476fed10cb9663dde76239231ee64a3f64f7f0ea1ed8398b354f7bd3612a541f5c87056c358965b30efcac0d0ae3528a90514c1b372e1e064cd9e96baa982133f3d4316e46de6cfe89556f3d294023932ac91443ec6803d9e45b34e5adb465c6ebd325da187d5855f3cc57d1d1c583a8ef7a48081aa0ea44e8a6e445af5552fc175399819b8f4d31735607b99b5"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x9c, 0x9, 0xb, 0x0, 0x2}]}, 0x4, [{0xa6, &(0x7f0000000400)=@string={0xa6, 0x3, "20e8713270e16d9272982924355df8c832d90d4b677d21a0be663f2900a62f4d1ef1fda91717ff367f406d818960d0fda878150b6a17328558ce16cb872ba5531d0f266abe28f1098cfe97aedf6ca789a0fe1c16b746ecd6fa62130cab14530a1fa88b36c8c68a5a2bd04caa5126005b9dc9345fbe159a74cab9c87aa52acd662b564f2f380bf4eeb025e638c11d960d7cf9cbbf6e2caa20d445b1f168312b877e66f259"}}, {0xef, &(0x7f00000004c0)=@string={0xef, 0x3, "6937176d32186e5b859c9c0b94c1122746b1c10be57f9e3a59f541346d845df2250e6ca22bf6fc31c201fe52162a8e34af72e2fbfae154a3999b9554f63dd2c7aab918c1e87f1d0f22d74a2cd7858300ea89b472f6ca1759223b76f3f27dd2f93d2a6fc96d654f41c4e776e50154c38cbecb459de908e37516fe74c6a46b80fa0d66543bec5aac56bb027f2037312ac73d3fdfb75e5cdb1e06404ef61812b63323f42ee48f8badf4993b9b396e4ad1aca52bb6525394f569ae0d4729a325bed2014f536aa9fb43c0933f6121c2544aca1e1762d139f33f45bbbfc77356b4a24b6278cf7f8bd0e023e32af25cb4"}}, {0x2d, &(0x7f0000000240)=@string={0x2d, 0x3, "e12fbfa1c491f2f89ccb2893e7ff4a6943235696ce7dcde600fb79db053afe60f54d7fd85a6424f6f35f63"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44d}}]}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000002a80)={0x1, 0x0, [{0x560, 0x0, 0x800}]}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01002abd7000ffdbdf2525"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000100000/0x4000)=nil, 0x4000, 0x3000009, 0x13, r0, 0x99b31000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3.931133129s ago: executing program 7 (id=7466): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x1, 0x0) write$uinput_user_dev(r3, &(0x7f00000002c0)={'syz0\x00', {0x7ff, 0x6, 0x4, 0x9}, 0x48, [0xf03b, 0x4, 0x6b54ba5b, 0x8, 0x7ff, 0x19, 0x401, 0x6, 0x8, 0x5, 0x7, 0x7, 0x3, 0x8, 0x0, 0x43a, 0x400, 0x1, 0x6, 0x9, 0x9, 0x730, 0xfffff000, 0x61, 0x4, 0x80000000, 0x1, 0x1, 0x9, 0x1, 0x1c0, 0xfff, 0x8, 0x864c, 0x2, 0x5, 0x400, 0x17cbc6a7, 0xfc3, 0x7, 0x1, 0x6, 0x400, 0x80, 0x81, 0xf3, 0x8d, 0x8000, 0x1, 0x9, 0x5, 0x4, 0x100, 0x7f, 0x200, 0x0, 0x6, 0xfffffb81, 0x2, 0xaeb80000, 0x507440df, 0x8, 0x147, 0x1], [0x401, 0x800, 0x5, 0x3ff, 0x2, 0x0, 0x1ff, 0x8, 0x7, 0x80000001, 0x4, 0x200, 0x7ffc, 0x9, 0xfffffffe, 0x0, 0x3, 0x8, 0x1, 0x40, 0x1, 0x5, 0x9, 0x8, 0x4, 0x80000000, 0x1ff, 0x60, 0x1, 0x5, 0x9, 0x10000, 0x1, 0xc, 0x8000, 0x92, 0x10000, 0x101, 0x0, 0x7ff, 0x2cf, 0x8d9, 0x9, 0x3, 0x2, 0x7, 0x1, 0x37, 0xffffffff, 0x6, 0x8cbb2a9, 0xfffffff5, 0x1, 0x40000004, 0x9, 0x2, 0xfffffff7, 0xfff, 0x3, 0x4, 0x7, 0x10, 0x6, 0x7f], [0xff, 0xcd98, 0x2, 0xb2, 0x6, 0x12, 0x45a, 0x6, 0x9, 0xffffffff, 0x50b, 0x8001, 0x9257, 0x80000000, 0x7fff, 0x2, 0xffff0001, 0x1000, 0x5, 0x2, 0x7, 0x1, 0x6, 0x2, 0x8, 0x9, 0x4, 0x7, 0xff, 0x2, 0x284, 0x8, 0x7, 0x1, 0x9, 0x7f, 0xf17, 0x8, 0x6, 0x8000, 0x9, 0x30000, 0x8, 0x8, 0x6, 0x1, 0xdde9, 0x6, 0x401, 0x7fff, 0x0, 0x7, 0x4, 0x0, 0x3, 0x1, 0xc8, 0x0, 0x4, 0x80, 0x8, 0x2, 0x24d4, 0x2], [0xffff4d44, 0x0, 0x8, 0x3, 0x2, 0x9, 0x5, 0xffff, 0x1, 0x1, 0x7, 0x4, 0x6, 0xff, 0x5, 0x40, 0xc0, 0x4, 0x1, 0x0, 0x6, 0x3, 0xfffffffc, 0xb3, 0xfffffff7, 0x101, 0x3, 0x1, 0x4000081, 0x1, 0x400, 0x4, 0xfeb, 0xf3e, 0x4, 0xa, 0x8, 0x400, 0x87e9, 0x6, 0x9a2b, 0x2, 0x6000, 0xddc4, 0x0, 0x40, 0x1, 0x3, 0x4, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x4, 0x9, 0x9, 0x0, 0x6, 0x8, 0x7ff, 0x8d, 0x7, 0x10]}, 0x45c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r4, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x3d, r4}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000003f80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x400, @empty, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, 0x1c, 0x0}}], 0x2, 0x2c00c0c4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') 3.930027759s ago: executing program 7 (id=7468): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) 3.87628486s ago: executing program 7 (id=7469): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000280)={'ipvlan0\x00', 0xf2e0}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)="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", 0x178}], 0x1}, 0x2000c859) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/243, 0xb1, 0x0, 0x0}, &(0x7f00000064c0)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ppoll(&(0x7f0000000140)=[{r1, 0x60}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x6, 0xfffffffffffffc00}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e00106e98c0059dfa4c6335edc90e8882699939a12678f39d8d0e6eeef", @ANYRES16=r5, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f0000000a80)="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") ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x38) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2c011, r0, 0xd0eb4000) 3.053149463s ago: executing program 3 (id=7479): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 2.996490753s ago: executing program 3 (id=7480): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = userfaultfd(0x801) (async, rerun: 64) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async, rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x3a, 0xcf, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0xac506000) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x81, @any, 0x1d2, 0x2}, 0xe) 2.993919933s ago: executing program 3 (id=7481): r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) ioprio_set$uid(0x3, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read(r1, &(0x7f0000000040)=""/141, 0x8d) read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) r3 = getpid() syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r4) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_open_procfs(r3, &(0x7f0000000100)='cmdline\x00') sendfile(r1, r1, 0x0, 0x7ffff000) 2.988132713s ago: executing program 3 (id=7482): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x10000001003, 0x9, 0x5) (async) socketpair$unix(0x1, 0xbac0c15c9d7cea66, 0x0, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') fstat(r1, &(0x7f0000002240)) (async) syz_fuse_handle_req(r2, &(0x7f0000000240)="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", 0x2000, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084503, &(0x7f0000ffcffc)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000400002cc32f7800000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000400100000000000040080300008d416cfa6fc2313e"], 0x48}}, 0x0) (async) bind$unix(r2, &(0x7f00000022c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1e984a11, 0x202812, r0, 0x7dfff000) (async) mmap(&(0x7f0000785000/0x4000)=nil, 0x4000, 0x1000008, 0x11, r0, 0x3d7c3000) 2.965914224s ago: executing program 7 (id=7483): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="c4e178296216670f30ef67660fc71a69b6660f388059e0b805000000b91e4200000f01c10f20c00f30f20f97a2a201cb36263e660f381efc660f7c150c000000b805000000b921000000fa3ec5c4366436363e0f17a30070000029d8", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="c4e178296216670f30ef67660fc71a69b6660f388059e0b805000000b91e4200000f01c10f20c00f30f20f97a2a201cb36263e660f381efc660f7c150c000000b805000000b921000000fa3ec5c4366436363e0f17a30070000029d8", 0x5c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYRES64=r3], 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2100, 0x19) openat$cgroup_ro(r6, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000012c0)={0x7, {{0xa, 0x4e20, 0x1, @private2, 0x7}}, {{0xa, 0x4e24, 0x14, @rand_addr=' \x01\x00', 0x7}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000012c0)={0x7, {{0xa, 0x4e20, 0x1, @private2, 0x7}}, {{0xa, 0x4e24, 0x14, @rand_addr=' \x01\x00', 0x7}}}, 0x108) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000609"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000609"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x82, 0xa000) close_range(r3, 0xffffffffffffffff, 0x0) 2.965454724s ago: executing program 3 (id=7484): lsm_list_modules(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x68, 0x0, &(0x7f0000000300)=[@increfs={0x40046304, 0xffffffff}, @acquire_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x0, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}, 0x400}], 0x50, 0x0, &(0x7f0000000180)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba9420e00000000000000ff55002ce55e854564a7d309f24d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000100)={{r0}, 0x2, &(0x7f0000000000)=[0x9, 0x1], 0xfffffffffffffffe, 0xc, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)=""/53, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='$@!#\x00', 0xfffffffffffffffe) sendto$packet(r2, &(0x7f0000000080)='\b', 0x1, 0x4044004, &(0x7f00000000c0)={0x11, 0x2, r6, 0x1, 0x3, 0x6, @remote}, 0x14) fstat(r0, &(0x7f0000000380)) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000007140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7370, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x4001c80) gettid() getpgid(0x0) 2.860196856s ago: executing program 3 (id=7485): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x523, 0x40, [0x6, 0x8000, 0x3f, 0xb], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r4, @ANYBLOB="05"], 0x0) setreuid(0x0, r2) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x4, 0x20000000, 0xff78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100"], 0x18, 0x81}, 0x4c800) recvmmsg(r8, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x4008010) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, 0x0, 0x4040800) 880.443517ms ago: executing program 6 (id=7497): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) (async, rerun: 32) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000002a00), 0x800, 0x0) (async, rerun: 32) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000006c0)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x7f, 0x40, 0x0, 0xb9ff, 0x0, '\x00\x00@\x00'}) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x12) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xaece, 0x2) (async, rerun: 64) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') (async, rerun: 64) setreuid(0xffffffffffffffff, 0xee01) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x1000000) read(r2, &(0x7f0000000000)=""/22, 0x16) close_range(0xffffffffffffffff, r0, 0x2) read(r1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) symlink(&(0x7f0000000080)='.\x00', 0x0) (async) chmod(0x0, 0x38c) lchown(0x0, 0xee00, 0x0) 880.127637ms ago: executing program 6 (id=7498): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000cfebc7c2395d3b9f0d14fe808006af57791b1f10d62e8208e59727cc9f1767df3b202d0a963e2e9b924a689966ac8ae0d8566795a10f226f9c288d5cec8a4f555b87506a9e4f189b3d64d8980ff98fcd5186aa7c8b9f2d4657"]) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 879.912846ms ago: executing program 6 (id=7499): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000008, 0x12, r0, 0x2b09d000) r1 = mmap$binder(&(0x7f0000268000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0}) 879.721646ms ago: executing program 6 (id=7500): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') exit(0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffe9b) syz_open_procfs(r1, 0x0) 279.242406ms ago: executing program 1 (id=7508): r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000400)=0xfffffff8, 0x4) 278.713146ms ago: executing program 1 (id=7509): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async, rerun: 32) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) (async, rerun: 32) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) 172.885298ms ago: executing program 1 (id=7510): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wake_unlock', 0x80, 0x19) finit_module(r1, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') 165.099928ms ago: executing program 1 (id=7511): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r1, 0x1) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x20481, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000340)={0xdc}) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 112.404948ms ago: executing program 1 (id=7512): r0 = fsopen(&(0x7f0000000680)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) (async) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) (async) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) (async) copy_file_range(r4, &(0x7f00000001c0), r3, 0x0, 0xffffffffa003e45b, 0x700000000000000) ioctl$TCXONC(r1, 0x540a, 0x0) (async) ioctl$TCXONC(r1, 0x540a, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = gettid() rt_tgsigqueueinfo(r6, r6, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f00000024c0)={0x0, 0x6}) (async) r9 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r11 = eventfd(0x7) ioctl$VFAT_IOCTL_READDIR_BOTH(r11, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) lseek(r10, 0x7fa2, 0x0) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r10, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, &(0x7f0000000040)}) (async, rerun: 32) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) (async, rerun: 32) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) 111.907929ms ago: executing program 1 (id=7513): getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540), 0x40001b6, 0x4054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, 0x0) close_range(r0, r0, 0x0) r3 = fsopen(&(0x7f0000000000)='qnx4\x00', 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001680)) r5 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000001c0)={0x0, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000100)={0x9, 0x10001, 0x6, 0x0, 0x0, [{{r2}, 0x2}, {{r1}, 0x6}, {{r1}, 0x4a249b5a}, {{r1}, 0x9}, {{r5}, 0x9}, {{r2}, 0x5}]}) 0s ago: executing program 6 (id=7514): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r0 = dup(0xffffffffffffffff) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x9900, &(0x7f00000000c0)={0x7c, 0x100005, 0x120000}, 0x20) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_targets\x00') mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x10010, r2, 0x22a6c000) (async) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/235, 0xeb}], 0x1, 0xfff, 0xfffffffe) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='maps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000001c0)={0x8000000000000000, 0x3, 0x5, 0xb18, 0x1, 0x0, [{0xd, 0x1, 0x1, '\x00', 0x600}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r5, 0x0) (async, rerun: 64) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) (async, rerun: 64) read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) (rerun: 64) kernel console output (not intermixed with test programs): process `syz.5.5780'. [ 380.806541][T17349] 9pnet_fd: Insufficient options for proto=fd [ 380.847474][T17366] overlayfs: failed to clone upperpath [ 380.855871][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5785'. [ 380.873812][T17368] netlink: 'syz.4.5786': attribute type 4 has an invalid length. [ 380.914681][T17368] netlink: 'syz.4.5786': attribute type 4 has an invalid length. [ 380.922677][T17368] netlink: 'syz.4.5786': attribute type 4 has an invalid length. [ 380.980889][T17379] netlink: 'syz.4.5790': attribute type 4 has an invalid length. [ 381.063643][T17392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:151 [ 381.118015][T17398] netlink: 'syz.1.5797': attribute type 29 has an invalid length. [ 381.135025][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5797'. [ 381.153991][T17398] rust_binder: Error while translating object. [ 381.154016][T17398] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 381.160750][T17398] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:153 [ 381.279142][T17417] overlayfs: failed to resolve './bus': -2 [ 381.457080][T17436] __vm_enough_memory: pid: 17436, comm: syz.1.5808, bytes: 70373039144960 not enough memory for the allocation [ 381.553916][T17438] fuse: Unknown parameter 'ro00000000100000' [ 381.632885][T17452] netlink: 'syz.4.5814': attribute type 10 has an invalid length. [ 381.641168][T17452] veth0_to_bond: mtu greater than device maximum [ 382.228388][ T36] audit: type=1326 audit(2000000400.704:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17469 comm="syz.5.5822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9341b8e929 code=0x0 [ 382.517423][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 382.626862][T17481] bridge0: port 3(erspan0) entered blocking state [ 382.633307][T17481] bridge0: port 3(erspan0) entered disabled state [ 382.639861][T17481] erspan0: entered allmulticast mode [ 382.645607][T17481] erspan0: entered promiscuous mode [ 382.651175][T17481] bridge0: port 3(erspan0) entered blocking state [ 382.657641][T17481] bridge0: port 3(erspan0) entered forwarding state [ 382.677768][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 382.684894][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.696910][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 382.706866][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 382.723849][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 382.735812][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 382.745668][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 382.761038][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.770380][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 382.782095][ T10] usb 2-1: SerialNumber: syz [ 382.788407][T17472] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.806042][ T36] audit: type=1400 audit(2000000401.237:8251): avc: denied { getattr } for pid=17493 comm="syz.4.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 383.034362][ T306] usb 2-1: USB disconnect, device number 81 [ 383.390607][T17506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5836'. [ 383.492977][T17507] @: renamed from veth0_vlan (while UP) [ 383.580333][T17511] input: syz0 as /devices/virtual/input/input25 [ 383.864443][ T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 383.893100][T17521] fuse: Unknown parameter '?m1y+I hG% rejected, failed to enable media [ 406.979467][T19044] No source specified [ 406.997945][T19047] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 407.192874][ T624] usb 2-1: USB disconnect, device number 92 [ 407.316148][T19077] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6373'. [ 407.715241][ T713] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 407.886232][ T713] usb 2-1: Using ep0 maxpacket: 16 [ 407.892548][ T713] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 407.901036][ T713] usb 2-1: config 0 has no interface number 0 [ 407.907311][ T713] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 407.917485][ T713] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 407.927669][ T713] usb 2-1: config 0 interface 41 has no altsetting 0 [ 407.940786][ T713] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 407.949998][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.958101][ T713] usb 2-1: Product: syz [ 407.962396][ T713] usb 2-1: Manufacturer: syz [ 407.967040][ T713] usb 2-1: SerialNumber: syz [ 407.972430][ T713] usb 2-1: config 0 descriptor?? [ 407.978123][T19082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 407.985377][T19082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.207152][T19082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.214418][T19082] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 408.247082][T19094] netlink: 'syz.3.6379': attribute type 27 has an invalid length. [ 408.256328][T19094] netlink: 'syz.3.6379': attribute type 27 has an invalid length. [ 408.273630][T19099] overlayfs: failed to clone upperpath [ 408.864537][ T713] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 409.408496][T19114] fuse: Unknown parameter 'g_id' [ 410.197774][ T713] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 410.199267][T19154] sock: sock_timestamping_bind_phc: sock not bind to device [ 410.211379][ T713] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 410.215766][T19155] sock: sock_timestamping_bind_phc: sock not bind to device [ 410.227542][ T713] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 410.244352][ T713] usb 2-1: USB disconnect, device number 93 [ 410.303779][T19159] overlayfs: failed to clone upperpath [ 410.758252][T19173] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6406'. [ 410.853434][T19179] 9pnet_fd: Insufficient options for proto=fd [ 410.854578][T19180] binder: Unknown parameter 'xҙ uRq_.}\i' [ 411.014436][T19194] 9p: Unknown Cache mode or invalid value 딊 [ 411.162487][T19207] tipc: Enabling of bearer rejected, failed to enable media [ 411.475759][T19221] overlay: ./file0 is not a directory [ 411.642808][T19237] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6430'. [ 411.652101][T19238] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6430'. [ 411.774971][T19256] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6438'. [ 412.002150][ T45] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 412.163628][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.173838][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.184035][ T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.193104][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.201133][ T45] usb 2-1: Product: syz [ 412.205362][ T45] usb 2-1: Manufacturer: syz [ 412.210601][ T45] usb 2-1: SerialNumber: syz [ 412.432083][ T45] usb 2-1: 0:2 : does not exist [ 412.438730][ T45] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 412.449438][ T45] usb 2-1: USB disconnect, device number 94 [ 412.458873][T16786] udevd[16786]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 413.292904][T14507] veth1_macvtap: left promiscuous mode [ 413.298525][T14507] veth0_vlan: left promiscuous mode [ 414.548760][T19428] netlink: 'syz.4.6497': attribute type 7 has an invalid length. [ 414.614246][T19432] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19432 comm=syz.1.6499 [ 414.646020][T19438] fuse: Bad value for 'user_id' [ 414.646030][T19440] /dev/rnullb0: Can't lookup blockdev [ 414.656466][T19438] fuse: Bad value for 'user_id' [ 414.708236][ T36] audit: type=1326 audit(2000000001.674:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19462 comm="syz.4.6507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93e0d8e929 code=0x0 [ 414.919204][T19468] 9pnet_fd: Insufficient options for proto=fd [ 415.359871][T19494] bridge0: port 3(dummy0) entered blocking state [ 415.366384][T19494] bridge0: port 3(dummy0) entered disabled state [ 415.372963][T19494] dummy0: entered allmulticast mode [ 415.378549][T19494] dummy0: entered promiscuous mode [ 415.383800][T19494] bridge0: port 3(dummy0) entered blocking state [ 415.390131][T19494] bridge0: port 3(dummy0) entered forwarding state [ 415.564367][T19519] /dev/nullb0: Can't lookup blockdev [ 415.936300][ T45] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 416.075257][ T45] usb 2-1: device descriptor read/64, error -71 [ 416.331852][ T45] usb 2-1: device descriptor read/64, error -71 [ 416.573752][T19574] overlayfs: failed to clone upperpath [ 416.609809][ T45] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 416.644422][T19587] overlayfs: failed to resolve './bus': -2 [ 416.748782][ T45] usb 2-1: device descriptor read/64, error -71 [ 417.005342][ T45] usb 2-1: device descriptor read/64, error -71 [ 417.019700][ T36] audit: type=1326 audit(2000000003.825:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19540 comm="syz.3.6534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc318e929 code=0x7fc00000 [ 417.050635][T19591] netlink: 'syz.3.6554': attribute type 4 has an invalid length. [ 417.123050][ T45] usb usb2-port1: attempt power cycle [ 417.206381][T19598] fuse: Unknown parameter '0x0000000000000003' [ 417.272261][T19606] overlayfs: failed to clone upperpath [ 417.486427][ T45] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 417.508971][ T45] usb 2-1: device descriptor read/8, error -71 [ 417.620482][T19610] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6562'. [ 417.647831][ T45] usb 2-1: device descriptor read/8, error -71 [ 417.665857][T19623] tipc: Started in network mode [ 417.670750][T19623] tipc: Node identity 7f000001, cluster identity 4711 [ 417.677557][T19623] tipc: Enabling of bearer rejected, failed to enable media [ 417.701880][T19630] overlayfs: failed to clone upperpath [ 417.903344][ T45] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 417.925735][ T45] usb 2-1: device descriptor read/8, error -71 [ 417.953100][T19675] fuse: Unknown parameter 'hT6?{O_s/s}!+` ҒQD*%;+NaLvCUb&ᚭӧgiTE<ĈDײ{u_bֻn^첧yrY [ 417.953100][T19675] #⇹6\'S*On{~Ǜ\4BTtεP1*谘· 17'\jLܔ<t8 [ 417.953100][T19675] gȺoD'hRT-;!F' [ 418.064716][ T45] usb 2-1: device descriptor read/8, error -71 [ 418.181400][ T45] usb usb2-port1: unable to enumerate USB device [ 418.275223][T19682] tipc: Enabling of bearer rejected, failed to enable media [ 418.284857][T19682] netlink: 'syz.3.6589': attribute type 16 has an invalid length. [ 418.292710][T19682] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.6589'. [ 418.572473][T19696] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6596'. [ 418.582159][T19696] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 418.594016][T19703] overlayfs: failed to clone upperpath [ 418.754399][T19728] batadv_slave_1: entered promiscuous mode [ 418.767270][T19727] batadv_slave_1: left promiscuous mode [ 418.781756][T19731] syz.5.6609: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 418.796744][T19731] CPU: 0 UID: 0 PID: 19731 Comm: syz.5.6609 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 418.796773][T19731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.796789][T19731] Call Trace: [ 418.796795][T19731] [ 418.796804][T19731] __dump_stack+0x21/0x30 [ 418.796834][T19731] dump_stack_lvl+0x10c/0x190 [ 418.796852][T19731] ? __cfi_dump_stack_lvl+0x10/0x10 [ 418.796873][T19731] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 418.796894][T19731] dump_stack+0x19/0x20 [ 418.796916][T19731] warn_alloc+0x1bc/0x2a0 [ 418.796936][T19731] ? stack_depot_save_flags+0x38/0x800 [ 418.796969][T19731] ? __cfi_warn_alloc+0x10/0x10 [ 418.796988][T19731] ? kasan_save_track+0x4f/0x80 [ 418.797013][T19731] ? __kmalloc_cache_noprof+0x1a5/0x3c0 [ 418.797037][T19731] ? xskq_create+0x68/0x2a0 [ 418.797057][T19731] ? xsk_init_queue+0xb6/0x120 [ 418.797076][T19731] ? xsk_setsockopt+0x43f/0x6f0 [ 418.797094][T19731] ? do_sock_setsockopt+0x26a/0x400 [ 418.797115][T19731] ? __x64_sys_setsockopt+0x1b8/0x250 [ 418.797134][T19731] ? x64_sys_call+0x2adc/0x2ee0 [ 418.797158][T19731] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 418.797180][T19731] __vmalloc_node_range_noprof+0x135/0x1420 [ 418.797206][T19731] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 418.797227][T19731] ? avc_has_perm+0x144/0x220 [ 418.797247][T19731] ? kasan_save_alloc_info+0x40/0x50 [ 418.797267][T19731] ? __kasan_kmalloc+0x96/0xb0 [ 418.797292][T19731] vmalloc_user_noprof+0x77/0x90 [ 418.797311][T19731] ? xskq_create+0xdb/0x2a0 [ 418.797331][T19731] xskq_create+0xdb/0x2a0 [ 418.797351][T19731] xsk_init_queue+0xb6/0x120 [ 418.797371][T19731] xsk_setsockopt+0x43f/0x6f0 [ 418.797391][T19731] ? __cfi_xsk_setsockopt+0x10/0x10 [ 418.797411][T19731] ? do_futex+0x309/0x500 [ 418.797437][T19731] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 418.797456][T19731] ? security_socket_setsockopt+0x33/0xd0 [ 418.797480][T19731] ? __cfi_xsk_setsockopt+0x10/0x10 [ 418.797500][T19731] do_sock_setsockopt+0x26a/0x400 [ 418.797522][T19731] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 418.797544][T19731] __x64_sys_setsockopt+0x1b8/0x250 [ 418.797565][T19731] x64_sys_call+0x2adc/0x2ee0 [ 418.797587][T19731] do_syscall_64+0x58/0xf0 [ 418.797609][T19731] ? clear_bhb_loop+0x50/0xa0 [ 418.797630][T19731] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 418.797657][T19731] RIP: 0033:0x7f9341b8e929 [ 418.797680][T19731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.797698][T19731] RSP: 002b:00007f9342988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.797720][T19731] RAX: ffffffffffffffda RBX: 00007f9341db5fa0 RCX: 00007f9341b8e929 [ 418.797736][T19731] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 418.797749][T19731] RBP: 00007f9341c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 418.797763][T19731] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 418.797777][T19731] R13: 0000000000000000 R14: 00007f9341db5fa0 R15: 00007fff78a6bf48 [ 418.797794][T19731] [ 418.797824][T19731] Mem-Info: [ 419.103237][T19731] active_anon:10505 inactive_anon:616 isolated_anon:0 [ 419.103237][T19731] active_file:5789 inactive_file:18730 isolated_file:0 [ 419.103237][T19731] unevictable:16398 dirty:60 writeback:0 [ 419.103237][T19731] slab_reclaimable:6903 slab_unreclaimable:80409 [ 419.103237][T19731] mapped:29010 shmem:2275 pagetables:1352 [ 419.103237][T19731] sec_pagetables:0 bounce:0 [ 419.103237][T19731] kernel_misc_reclaimable:0 [ 419.103237][T19731] free:1476839 free_pcp:2744 free_cma:0 [ 419.148853][T19731] Node 0 active_anon:42020kB inactive_anon:2464kB active_file:23156kB inactive_file:74920kB unevictable:65592kB isolated(anon):0kB isolated(file):0kB mapped:116040kB dirty:240kB writeback:0kB shmem:9100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:6720kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no [ 419.182340][T19731] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:0kB free_cma:0kB [ 419.212286][T19731] lowmem_reserve[]: 0 3921 3921 [ 419.217169][T19731] Normal free:2947048kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42020kB inactive_anon:2464kB active_file:23156kB inactive_file:74920kB unevictable:65592kB writepending:240kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:5188kB local_pcp:1372kB free_cma:0kB [ 419.248985][T19731] lowmem_reserve[]: 0 0 0 [ 419.253362][T19731] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 419.268753][T19731] Normal: 1476*4kB (UME) 1663*8kB (UME) 1388*16kB (UME) 1727*32kB (UME) 481*64kB (UME) 86*128kB (UME) 67*256kB (UME) 36*512kB (UME) 42*1024kB (UME) 23*2048kB (UM) 655*4096kB (UM) = 2947048kB [ 419.287604][T19731] 43830 total pagecache pages [ 419.292278][T19731] 642 pages in swap cache [ 419.296622][T19731] Free swap = 121936kB [ 419.300765][T19731] Total swap = 124996kB [ 419.305205][T19731] 2097051 pages RAM [ 419.309017][T19731] 0 pages HighMem/MovableOnly [ 419.313672][T19731] 351521 pages reserved [ 419.317840][T19731] 0 pages cma reserved [ 419.323381][T19731] Memory allocations: [ 419.327393][T19731] 0 B 0 init/main.c:1370 func:do_initcalls [ 419.334585][T19731] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 419.342676][T19731] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 419.350314][T19731] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 419.358221][T19731] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 419.366107][T19731] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 419.374718][T19731] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 419.382640][T19731] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 419.390547][T19731] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 419.398436][T19731] 0 B 0 init/initramfs.c:101 func:find_link [ 419.699359][ T45] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 419.870411][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 419.876758][ T45] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 419.885032][ T45] usb 2-1: config 0 has an invalid descriptor of length 227, skipping remainder of the config [ 419.895302][ T45] usb 2-1: config 0 has no interface number 0 [ 419.901372][ T45] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.914416][ T45] usb 2-1: config 0 interface 85 has no altsetting 0 [ 419.922549][ T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 419.931641][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.939647][ T45] usb 2-1: Product: syz [ 419.943820][ T45] usb 2-1: Manufacturer: syz [ 419.948490][ T45] usb 2-1: SerialNumber: syz [ 419.953614][ T45] usb 2-1: config 0 descriptor?? [ 420.169261][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6620'. [ 420.179439][ T45] usbhid 2-1:0.85: couldn't find an input interrupt endpoint [ 420.192802][T19769] overlayfs: option "workdir=." is useless in a non-upper mount, ignore [ 420.201226][T19769] overlayfs: missing 'lowerdir' [ 420.325672][T19776] /dev/rnullb0: Can't lookup blockdev [ 420.384223][T19794] overlay: Unknown parameter 'mode' [ 420.397014][ T45] usb 2-1: USB disconnect, device number 99 [ 420.928426][T19807] overlayfs: failed to clone upperpath [ 420.984723][T19815] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 420.984746][T19815] rust_binder: Read failure Err(EFAULT) in pid:427 [ 421.039609][T19825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6641'. [ 421.472218][T19842] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.479339][T19842] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.486634][T19842] bridge_slave_0: entered allmulticast mode [ 421.493283][T19842] bridge_slave_0: entered promiscuous mode [ 421.500158][T19842] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.507679][T19842] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.514895][T19842] bridge_slave_1: entered allmulticast mode [ 421.521472][T19842] bridge_slave_1: entered promiscuous mode [ 421.547693][T14507] dummy0: left allmulticast mode [ 421.557763][T14507] dummy0: left promiscuous mode [ 421.562946][T14507] bridge0: port 3(dummy0) entered disabled state [ 421.569904][T14507] bridge_slave_1: left allmulticast mode [ 421.575656][T14507] bridge_slave_1: left promiscuous mode [ 421.581318][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.588805][T14507] bridge_slave_0: left allmulticast mode [ 421.594499][T14507] bridge_slave_0: left promiscuous mode [ 421.600119][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.742336][T14507] veth1_macvtap: left allmulticast mode [ 421.748006][T14507] veth1_macvtap: left promiscuous mode [ 421.754715][T14507] veth0_vlan: left promiscuous mode [ 421.850643][T19895] tipc: Enabling of bearer rejected, failed to enable media [ 421.856659][T19894] overlayfs: failed to clone upperpath [ 421.871109][T19842] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.878187][T19842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.885511][T19842] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.892560][T19842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.947779][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.956654][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.968079][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.975133][T14498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.000327][T14498] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.007394][T14498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.026220][T19842] veth0_vlan: entered promiscuous mode [ 422.049699][T19842] veth1_macvtap: entered promiscuous mode [ 422.131710][T19919] rust_binder: 19919: no such ref 3 [ 422.174199][T19922] rust_binder: Error in use_page_slow: ESRCH [ 422.174225][T19922] rust_binder: use_range failure ESRCH [ 422.187355][T19922] rust_binder: Failed to allocate buffer. len:8, is_oneway:true [ 422.197669][T19922] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 422.214377][T19922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:6 [ 422.311022][T19929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:13 [ 422.371584][T19930] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.388332][T19930] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.395876][T19930] bridge_slave_0: entered allmulticast mode [ 422.402405][T19930] bridge_slave_0: entered promiscuous mode [ 422.409155][T19930] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.416340][T19930] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.423406][T19930] bridge_slave_1: entered allmulticast mode [ 422.430340][T19930] bridge_slave_1: entered promiscuous mode [ 422.562388][T19930] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.569467][T19930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.576763][T19930] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.583799][T19930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.623066][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.630990][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.641665][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.648742][T14498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.661420][T14507] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.668468][T14507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.700027][T19930] veth0_vlan: entered promiscuous mode [ 422.710761][T19930] veth1_macvtap: entered promiscuous mode [ 422.735529][ T62] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 422.736371][T19957] rust_binder: Write failure EFAULT in pid:2 [ 422.754502][T19959] syz.3.6688 (19959) used obsolete PPPIOCDETACH ioctl [ 422.820248][ T36] audit: type=1326 audit(2000000003.797:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19903 comm="syz.4.6670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0d8e929 code=0x7fc00000 [ 422.885846][T19966] rust_binder: Error in use_page_slow: ESRCH [ 422.885870][T19966] rust_binder: use_range failure ESRCH [ 422.892673][T19966] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 422.905337][T19966] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 422.923035][T19966] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:6 [ 422.940188][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.963598][ T62] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.999180][ T62] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 423.013547][ T62] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.035165][ T62] usb 2-1: config 0 descriptor?? [ 423.088038][T19978] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.095208][T19978] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.102749][T19978] bridge_slave_0: entered allmulticast mode [ 423.111803][T19978] bridge_slave_0: entered promiscuous mode [ 423.118504][T19978] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.125832][T19978] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.133221][T19978] bridge_slave_1: entered allmulticast mode [ 423.139710][T19978] bridge_slave_1: entered promiscuous mode [ 423.223669][T19978] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.230769][T19978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.238060][T19978] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.245084][T19978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.279959][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.287846][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.301431][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.308498][T14498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.340115][T14498] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.347195][T14498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.363851][T19978] veth0_vlan: entered promiscuous mode [ 423.379988][T19978] veth1_macvtap: entered promiscuous mode [ 423.421129][T20016] rust_binder: Write failure EFAULT in pid:32 [ 423.583043][T20036] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 423.691343][T20043] netlink: 'syz.5.6712': attribute type 13 has an invalid length. [ 423.697857][ T31] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 423.869995][ T31] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 423.881261][ T31] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 423.892347][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.899115][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 423.908235][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.917210][ T31] usb 4-1: config 0 descriptor?? [ 423.922796][T20018] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.951084][ T36] audit: type=1326 audit(2000000004.864:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20051 comm="syz.1.6715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x0 [ 424.287423][T14498] Bluetooth: hci0: Frame reassembly failed (-84) [ 424.361020][ T31] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 424.369144][ T31] logitech-djreceiver 0003:046D:C71F.0016: unknown main item tag 0x0 [ 424.576248][ T713] usb 4-1: USB disconnect, device number 36 [ 425.051465][T20116] tipc: Enabling of bearer rejected, failed to enable media [ 425.319647][T20139] rust_binder: 20139: no such ref 3 [ 425.325053][T20139] rust_binder: Write failure EINVAL in pid:52 [ 425.440311][T20144] /dev/rnullb0: Can't open blockdev [ 425.473038][T20149] netlink: 'syz.5.6746': attribute type 1 has an invalid length. [ 425.782339][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 425.814415][ T31] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 425.921311][ T10] usb 6-1: device descriptor read/64, error -71 [ 425.975009][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 425.981264][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.991409][ T31] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 426.000471][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 426.011269][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.020937][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.031804][ T31] usb 4-1: config 1 interface 1 has no altsetting 0 [ 426.039825][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.048857][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.056875][ T31] usb 4-1: Product: syz [ 426.061342][ T31] usb 4-1: Manufacturer: syz [ 426.065939][ T31] usb 4-1: SerialNumber: syz [ 426.188563][ T10] usb 6-1: device descriptor read/64, error -71 [ 426.445189][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 426.487927][T17185] Bluetooth: hci0: command 0x1003 tx timeout [ 426.487952][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.516005][T20166] tipc: Started in network mode [ 426.520943][T20166] tipc: Node identity -:, cluster identity 4711 [ 426.527216][T20166] tipc: Enabling of bearer rejected, failed to enable media [ 426.594812][ T10] usb 6-1: device descriptor read/64, error -71 [ 426.736484][T20175] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 426.736528][T20175] rust_binder: Read failure Err(EFAULT) in pid:48 [ 426.764478][T20180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.773229][T20180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.782693][T20180] rust_binder: 20180: no such ref 3 [ 426.788329][T20180] rust_binder: Write failure EINVAL in pid:53 [ 426.851431][ T10] usb 6-1: device descriptor read/64, error -71 [ 426.979786][ T10] usb usb6-port1: attempt power cycle [ 427.023120][T20183] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.032272][T20183] tipc: MTU too low for tipc bearer [ 427.342144][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.350903][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.354210][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 427.387049][ T10] usb 6-1: device descriptor read/8, error -71 [ 427.429693][T20188] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56 [ 427.526347][ T10] usb 6-1: device descriptor read/8, error -71 [ 427.604818][ T36] audit: type=1400 audit(2000000008.278:8266): avc: denied { map } for pid=20191 comm="syz.4.6760" path="socket:[84043]" dev="sockfs" ino=84043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.628039][ T36] audit: type=1400 audit(2000000008.278:8267): avc: denied { accept } for pid=20191 comm="syz.4.6760" path="socket:[84043]" dev="sockfs" ino=84043 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 427.792445][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 427.814703][ T10] usb 6-1: device descriptor read/8, error -71 [ 427.953608][ T10] usb 6-1: device descriptor read/8, error -71 [ 428.070287][ T10] usb usb6-port1: unable to enumerate USB device [ 428.457101][ T62] usbhid 2-1:0.0: can't add hid device: -32 [ 428.463083][ T62] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 428.479524][T20213] netlink: 57 bytes leftover after parsing attributes in process `syz.4.6769'. [ 428.500307][T20217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6770'. [ 428.668865][T20145] overlayfs: statfs failed on './file0' [ 428.683074][ T31] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 428.690952][ T31] usb 4-1: 2:1 : format type 9 is not supported yet [ 428.700656][ T31] usb 4-1: USB disconnect, device number 37 [ 428.711340][T20231] netlink: 'syz.3.6774': attribute type 12 has an invalid length. [ 428.715466][T19744] udevd[19744]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 428.863721][T20249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20249 comm=syz.3.6780 [ 429.160605][ T62] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 429.321983][ T62] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 429.330740][ T62] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.340860][ T62] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.349910][ T62] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 429.358986][ T62] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.367914][ T62] usb 6-1: config 0 descriptor?? [ 429.511055][T20263] tipc: Enabling of bearer rejected, failed to enable media [ 429.632211][T14507] erspan0: left allmulticast mode [ 429.637266][T14507] erspan0: left promiscuous mode [ 429.642394][T14507] bridge0: port 3(erspan0) entered disabled state [ 429.649169][T14507] bridge_slave_1: left allmulticast mode [ 429.655126][T14507] bridge_slave_1: left promiscuous mode [ 429.660951][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.668910][T14507] O3c: left allmulticast mode [ 429.673976][T14507] O3c: left promiscuous mode [ 429.678960][T14507] bridge0: port 1(O3c) entered disabled state [ 429.727087][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6793'. [ 429.788617][T20289] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 429.808861][T14507] tipc: Left network mode [ 429.825653][T14507] veth1_macvtap: left allmulticast mode [ 429.834133][T14507] veth1_macvtap: left promiscuous mode [ 429.839659][T14507] veth0_vlan: left promiscuous mode [ 430.186856][ T306] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 430.347210][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 430.353560][ T306] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 430.362028][ T306] usb 4-1: config 0 has no interface number 0 [ 430.368210][ T306] usb 4-1: config 0 interface 184 has no altsetting 0 [ 430.376686][ T306] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 430.386023][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.394196][ T306] usb 4-1: Product: syz [ 430.398506][ T306] usb 4-1: Manufacturer: syz [ 430.403285][ T306] usb 4-1: SerialNumber: syz [ 430.409356][ T306] usb 4-1: config 0 descriptor?? [ 430.416464][ T306] smsc75xx v1.0.0 [ 430.613505][T20298] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6800'. [ 430.623117][T20298] rust_binder: Error while translating object. [ 430.623147][T20298] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 430.629417][T20298] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:60 [ 430.633605][ T306] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 430.659767][ T306] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 430.677816][ T306] usb 4-1: USB disconnect, device number 38 [ 430.693709][T20300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.702891][T20300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.713745][T20300] macsec0: entered promiscuous mode [ 430.719043][T20300] macsec0: entered allmulticast mode [ 430.724552][T20300] veth1_macvtap: entered allmulticast mode [ 430.774371][T20309] /dev/nullb0: Can't lookup blockdev [ 430.787350][T20311] sock: sock_timestamping_bind_phc: sock not bind to device [ 431.205169][T20322] overlayfs: conflicting options: nfs_export=on,index=off [ 431.212732][T20322] fuseblk: Bad value for 'rootmode' [ 431.785560][T20343] fuse: Bad value for 'user_id' [ 431.790512][T20343] fuse: Bad value for 'user_id' [ 431.966892][T20356] /dev/rnullb0: Can't open blockdev [ 432.001707][ T9] usb 6-1: USB disconnect, device number 27 [ 432.096541][ T36] audit: type=1326 audit(2000000012.478:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20321 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69ecf8e929 code=0x7fc00000 [ 432.538803][ T306] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 432.653543][T20382] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 432.653566][T20382] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:86 [ 432.700249][ T306] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.719434][ T306] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.729034][ T306] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.738150][ T306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.746163][ T306] usb 6-1: SerialNumber: syz [ 432.928888][T20390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 432.928922][T20390] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 432.938480][T20390] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:73 [ 432.962156][T20393] binder: Unknown parameter '18446744073709551615' [ 432.978472][ T306] usb 6-1: 0:2 : does not exist [ 432.985467][ T306] usb 6-1: USB disconnect, device number 28 [ 433.081306][T20398] rust_binder: 20398: no such ref 0 [ 433.092410][T20398] rust_binder: Write failure EFAULT in pid:81 [ 433.108736][T20401] binder: Unknown parameter 'fscontext?}' [ 433.570879][T20410] binder: Unknown parameter '017777777777777777777774' [ 433.602272][ T36] audit: type=1400 audit(2000000013.890:8269): avc: denied { mounton } for pid=20416 comm="syz.5.6842" path="/syzcgroup/unified/syz5" dev="pstore" ino=2569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 433.773250][T20446] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 433.782785][T20445] /dev/rnullb0: Can't open blockdev [ 433.787248][T20448] rust_binder: Write failure EINVAL in pid:104 [ 433.796058][T20444] /dev/rnullb0: Can't open blockdev [ 433.869340][T20451] rust_binder: Write failure EINVAL in pid:106 [ 433.972328][T20462] rust_binder: Error while translating object. [ 433.978703][T20462] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 433.985145][T20462] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122 [ 434.020189][T20464] syz.5.6858: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 434.048927][T20464] CPU: 1 UID: 0 PID: 20464 Comm: syz.5.6858 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 434.048958][T20464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.048970][T20464] Call Trace: [ 434.048976][T20464] [ 434.048985][T20464] __dump_stack+0x21/0x30 [ 434.049010][T20464] dump_stack_lvl+0x10c/0x190 [ 434.049031][T20464] ? __cfi_dump_stack_lvl+0x10/0x10 [ 434.049052][T20464] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 434.049071][T20464] dump_stack+0x19/0x20 [ 434.049090][T20464] warn_alloc+0x1bc/0x2a0 [ 434.049108][T20464] ? do_syscall_64+0x58/0xf0 [ 434.049126][T20464] ? __cfi_warn_alloc+0x10/0x10 [ 434.049144][T20464] ? __get_vm_area_node+0x1dc/0x3a0 [ 434.049164][T20464] ? packet_set_ring+0x735/0x2880 [ 434.049183][T20464] __vmalloc_node_range_noprof+0x68e/0x1420 [ 434.049202][T20464] ? kasan_save_track+0x3e/0x80 [ 434.049226][T20464] ? __kasan_kmalloc+0x96/0xb0 [ 434.049249][T20464] ? __kmalloc_noprof+0x1b1/0x450 [ 434.049273][T20464] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 434.049294][T20464] ? __asan_memset+0x39/0x50 [ 434.049314][T20464] ? __alloc_pages_noprof+0xba/0x6c0 [ 434.049332][T20464] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 434.049351][T20464] ? packet_set_ring+0x735/0x2880 [ 434.049368][T20464] vzalloc_noprof+0xfd/0x1d0 [ 434.049387][T20464] ? packet_set_ring+0x735/0x2880 [ 434.049402][T20464] ? kasan_save_alloc_info+0x40/0x50 [ 434.049419][T20464] ? __cfi_vzalloc_noprof+0x10/0x10 [ 434.049436][T20464] ? packet_set_ring+0x669/0x2880 [ 434.049451][T20464] packet_set_ring+0x735/0x2880 [ 434.049469][T20464] ? _raw_spin_lock_bh+0x90/0x120 [ 434.049485][T20464] ? packet_mmap+0x570/0x570 [ 434.049498][T20464] ? _raw_spin_unlock_bh+0x54/0x60 [ 434.049513][T20464] ? lock_sock_nested+0x1f5/0x290 [ 434.049534][T20464] ? __asan_memcpy+0x5a/0x80 [ 434.049551][T20464] ? check_stack_object+0x12c/0x140 [ 434.049570][T20464] ? __kasan_check_write+0x18/0x20 [ 434.049586][T20464] ? _copy_from_user+0x8b/0xb0 [ 434.049607][T20464] packet_setsockopt+0xc5d/0x12a0 [ 434.049622][T20464] ? __cfi_packet_setsockopt+0x10/0x10 [ 434.049637][T20464] ? selinux_socket_setsockopt+0x2ea/0x390 [ 434.049658][T20464] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 434.049681][T20464] ? do_futex+0x309/0x500 [ 434.049703][T20464] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 434.049720][T20464] ? security_socket_setsockopt+0x33/0xd0 [ 434.049740][T20464] ? __cfi_packet_setsockopt+0x10/0x10 [ 434.049755][T20464] do_sock_setsockopt+0x26a/0x400 [ 434.049773][T20464] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 434.049792][T20464] __x64_sys_setsockopt+0x1b8/0x250 [ 434.049810][T20464] x64_sys_call+0x2adc/0x2ee0 [ 434.049830][T20464] do_syscall_64+0x58/0xf0 [ 434.049853][T20464] ? clear_bhb_loop+0x50/0xa0 [ 434.049872][T20464] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 434.049889][T20464] RIP: 0033:0x7f760838e929 [ 434.049903][T20464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.049917][T20464] RSP: 002b:00007f7609257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 434.049936][T20464] RAX: ffffffffffffffda RBX: 00007f76085b5fa0 RCX: 00007f760838e929 [ 434.049948][T20464] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000004 [ 434.049958][T20464] RBP: 00007f7608410b39 R08: 000000000000001c R09: 0000000000000000 [ 434.049970][T20464] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 434.049980][T20464] R13: 0000000000000000 R14: 00007f76085b5fa0 R15: 00007ffe4e712158 [ 434.049993][T20464] [ 434.050001][T20464] Mem-Info: [ 434.142373][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 434.143528][T20464] active_anon:8216 inactive_anon:616 isolated_anon:0 [ 434.143528][T20464] active_file:6102 inactive_file:29811 isolated_file:0 [ 434.143528][T20464] unevictable:16382 dirty:53 writeback:0 [ 434.143528][T20464] slab_reclaimable:5588 slab_unreclaimable:88305 [ 434.143528][T20464] mapped:29341 shmem:2256 pagetables:966 [ 434.143528][T20464] sec_pagetables:0 bounce:0 [ 434.143528][T20464] kernel_misc_reclaimable:0 [ 434.143528][T20464] free:1461131 free_pcp:3614 free_cma:0 [ 434.324121][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 434.327053][T20464] Node 0 active_anon:32864kB inactive_anon:2464kB active_file:24408kB inactive_file:119244kB unevictable:65528kB isolated(anon):0kB isolated(file):0kB mapped:117364kB dirty:212kB writeback:0kB shmem:9024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:6208kB pagetables:3864kB sec_pagetables:0kB all_unreclaimable? no [ 434.348226][ T9] usb 4-1: config 185 has an invalid interface number: 33 but max is 2 [ 434.355111][T20464] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2966000kB mlocked:0kB bounce:0kB free_pcp:5788kB local_pcp:0kB free_cma:0kB [ 434.364120][ T9] usb 4-1: config 185 has an invalid interface number: 189 but max is 2 [ 434.372020][T20464] lowmem_reserve[]: [ 434.380029][ T9] usb 4-1: config 185 has no interface number 0 [ 434.387296][T20464] 0 [ 434.395685][ T9] usb 4-1: config 185 has no interface number 1 [ 434.398266][T20464] 3921 [ 434.401704][ T9] usb 4-1: config 185 interface 33 altsetting 190 has an invalid descriptor for endpoint zero, skipping [ 434.410423][T20464] 3921 [ 434.455017][ T9] usb 4-1: config 185 interface 189 altsetting 248 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 434.460395][T20464] [ 434.492466][ T9] usb 4-1: config 185 interface 189 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 434.500979][T20464] Normal free:2886036kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32864kB inactive_anon:2464kB active_file:24408kB inactive_file:119244kB unevictable:65528kB writepending:160kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:36kB free_cma:0kB [ 434.530325][ T9] usb 4-1: config 185 interface 33 has no altsetting 0 [ 434.538544][T20464] lowmem_reserve[]: [ 434.542598][ T9] usb 4-1: config 185 interface 2 has no altsetting 0 [ 434.548427][T20464] 0 [ 434.551105][ T9] usb 4-1: config 185 interface 189 has no altsetting 0 [ 434.557201][T20464] 0 [ 434.561644][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice=e2.e0 [ 434.571054][T20464] 0 [ 434.574138][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.584976][T20464] [ 434.587622][ T9] usb 4-1: Product: syz [ 434.598493][T20464] DMA32: [ 434.630202][ T9] usb 4-1: Manufacturer: syz [ 434.638028][T20464] 5*4kB [ 434.640991][ T9] usb 4-1: SerialNumber: syz [ 434.647697][T20464] (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB [ 434.714984][T20464] Normal: 923*4kB (UME) 1259*8kB (UME) 967*16kB (UME) 679*32kB (UME) 369*64kB (ME) 83*128kB (UME) 63*256kB (UME) 31*512kB (ME) 36*1024kB (UME) 24*2048kB (UM) 655*4096kB (UM) = 2886100kB [ 434.733430][T20464] 55189 total pagecache pages [ 434.738117][T20464] 642 pages in swap cache [ 434.742474][T20464] Free swap = 121936kB [ 434.746632][T20464] Total swap = 124996kB [ 434.750805][T20464] 2097051 pages RAM [ 434.754642][T20464] 0 pages HighMem/MovableOnly [ 434.759322][T20464] 351521 pages reserved [ 434.763504][T20464] 0 pages cma reserved [ 434.769491][T20464] Memory allocations: [ 434.775568][T20464] 0 B 0 init/main.c:1370 func:do_initcalls [ 434.782784][T20464] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 434.789437][T20474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.791443][T20464] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 434.800000][T20474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.807338][T20464] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 434.822423][T20464] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 434.830335][T20464] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 434.838950][T20464] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 434.846832][T20464] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 434.854739][T20464] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 434.862653][T20464] 0 B 0 init/initramfs.c:101 func:find_link [ 434.874597][ T9] usb 4-1: USB disconnect, device number 39 [ 434.955225][T20477] rust_binder: 20476 RLIMIT_NICE not set [ 435.379659][T20491] rust_binder: 20491: no such ref 1 [ 435.390619][T20491] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 435.390640][T20491] rust_binder: Read failure Err(EFAULT) in pid:101 [ 435.426959][T20498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.442756][T20498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.647455][T20510] overlayfs: failed to clone lowerpath [ 435.669664][T20517] tmpfs: Bad value for 'huge' [ 435.746402][T20525] tipc: Invalid UDP bearer configuration [ 435.746420][T20525] tipc: Enabling of bearer rejected, failed to enable media [ 435.951203][ T36] audit: type=1326 audit(2000000016.088:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.5.6864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f760838e929 code=0x7fc00000 [ 436.002982][ T36] audit: type=1400 audit(2000000016.135:8271): avc: denied { setattr } for pid=20529 comm="syz.5.6879" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 436.013690][T20530] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 436.108394][T20536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 436.108604][T20536] rust_binder: Error while translating object. [ 436.117872][T20536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 436.124083][T20536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:144 [ 436.131177][T20541] /dev/rnullb0: Can't open blockdev [ 436.157604][T20545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.159439][ T36] audit: type=1400 audit(2000000016.275:8272): avc: denied { ioctl } for pid=20546 comm="syz.3.6885" path="/40/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.172525][T20545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.242397][ T36] audit: type=1400 audit(2000000016.360:8273): avc: denied { remount } for pid=20553 comm="syz.5.6888" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 436.263088][T20547] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 436.278539][T20557] netlink: 'syz.5.6889': attribute type 29 has an invalid length. [ 436.391833][T20570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:167 [ 436.433775][T20580] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6899'. [ 436.454110][T20580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20580 comm=syz.3.6899 [ 436.474206][T14507] Bluetooth: hci0: Frame reassembly failed (-84) [ 437.207171][T20600] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 437.225714][T20603] input: syz0 as /devices/virtual/input/input28 [ 437.399237][T20618] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 437.413792][T20625] netlink: 'syz.3.6914': attribute type 6 has an invalid length. [ 437.428022][T20625] netlink: 'syz.3.6914': attribute type 4 has an invalid length. [ 437.435841][T20625] netlink: 'syz.3.6914': attribute type 6 has an invalid length. [ 437.443684][T20625] netlink: 'syz.3.6914': attribute type 13 has an invalid length. [ 437.451861][T20625] netlink: 'syz.3.6914': attribute type 15 has an invalid length. [ 437.459770][T20625] netlink: 'syz.3.6914': attribute type 19 has an invalid length. [ 437.467665][T20625] netlink: 3684 bytes leftover after parsing attributes in process `syz.3.6914'. [ 437.482575][ T36] audit: type=1400 audit(2000000017.520:8274): avc: denied { append } for pid=20624 comm="syz.3.6914" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.563920][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6916'. [ 437.577098][T20634] fuse: Bad value for 'user_id' [ 437.582105][T20634] fuse: Bad value for 'user_id' [ 437.642374][T20642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6921'. [ 437.671914][T20647] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6923'. [ 437.999824][T20664] rust_binder: Write failure EINVAL in pid:197 [ 438.258285][ T62] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 438.429327][ T62] usb 4-1: Using ep0 maxpacket: 16 [ 438.435578][ T62] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 438.443837][ T62] usb 4-1: config 0 has no interface number 0 [ 438.450121][ T62] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.461317][ T62] usb 4-1: config 0 interface 34 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.473090][ T62] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 438.482120][ T62] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.492713][ T62] usb 4-1: config 0 descriptor?? [ 438.532715][T20673] /dev/rnullb0: Can't lookup blockdev [ 438.533420][T20674] /dev/rnullb0: Can't lookup blockdev [ 438.543968][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6931'. [ 438.632458][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 438.632515][T17185] Bluetooth: hci0: command 0x1003 tx timeout [ 439.142669][T20666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.151836][T20666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.162816][ T306] usb 4-1: USB disconnect, device number 41 [ 439.258097][T20708] fuse: Unknown parameter 'grp_id' [ 439.278866][T20712] binder: Unknown parameter 'm' [ 439.485060][T20738] rust_binder: Write failure EINVAL in pid:137 [ 439.730080][T20746] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 439.791420][T20750] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 439.819514][T20752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6959'. [ 439.828636][T20752] fuseblk: Bad value for 'fd' [ 439.839313][T20752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6959'. [ 439.850193][T20752] fuseblk: Bad value for 'fd' [ 439.865368][T20754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:180 [ 439.865454][T20754] rust_binder: Write failure EINVAL in pid:180 [ 439.888164][T20759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.902919][T20759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.931224][T20768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.940456][T20768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.496109][T20775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163 [ 440.518064][T14507] bridge_slave_1: left allmulticast mode [ 440.533587][T14507] bridge_slave_1: left promiscuous mode [ 440.540522][T14507] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.548734][T14507] bridge_slave_0: left allmulticast mode [ 440.554399][T14507] bridge_slave_0: left promiscuous mode [ 440.560240][ T36] audit: type=1400 audit(2000000020.391:8275): avc: denied { execmod } for pid=20776 comm="syz.5.6969" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 440.588976][T14507] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.596338][T20775] rust_binder: 20775: no such ref 2 [ 440.619517][T20780] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6970'. [ 440.683889][T20782] fuse: Bad value for 'group_id' [ 440.688978][T20782] fuse: Bad value for 'group_id' [ 440.695873][T20778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=20778 comm=syz.1.6968 [ 440.716456][T14507] veth1_macvtap: left promiscuous mode [ 440.724214][T14507] veth0_vlan: left promiscuous mode [ 440.759062][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6968'. [ 440.898203][T20791] rust_binder: Write failure EFAULT in pid:197 [ 441.294404][ T62] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 441.429138][T20831] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 441.429166][T20831] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 441.444140][T20831] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:172 [ 441.957206][ T36] audit: type=1400 audit(2000000021.701:8276): avc: denied { nlmsg_tty_audit } for pid=20854 comm="syz.4.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 442.390352][ T36] audit: type=1400 audit(2000000022.112:8277): avc: denied { setattr } for pid=20879 comm="syz.1.7005" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 442.424788][T20887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7008'. [ 442.451894][T20894] /dev/rnullb0: Can't lookup blockdev [ 443.456103][T20928] cgroup: No subsys list or none specified [ 443.721194][ T713] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 443.881523][ T713] usb 4-1: Using ep0 maxpacket: 8 [ 443.887906][ T713] usb 4-1: unable to get BOS descriptor or descriptor too short [ 443.896316][ T713] usb 4-1: config 143 has an invalid interface number: 213 but max is 1 [ 443.904672][ T713] usb 4-1: config 143 has an invalid interface number: 2 but max is 1 [ 443.912861][ T713] usb 4-1: config 143 has an invalid descriptor of length 53, skipping remainder of the config [ 443.923259][ T713] usb 4-1: config 143 has no interface number 0 [ 443.929623][ T713] usb 4-1: config 143 has no interface number 1 [ 443.935941][ T713] usb 4-1: config 143 interface 213 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.949242][ T713] usb 4-1: config 143 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 443.962319][ T713] usb 4-1: config 143 interface 213 has no altsetting 0 [ 443.969330][ T713] usb 4-1: config 143 interface 2 has no altsetting 0 [ 443.977827][ T713] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 443.986971][ T713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.995029][ T713] usb 4-1: Product: syz [ 443.999227][ T713] usb 4-1: Manufacturer: syz [ 444.003825][ T713] usb 4-1: SerialNumber: syz [ 444.167430][T20938] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7025'. [ 444.226452][ T713] asix 4-1:143.213 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 444.236850][ T713] asix 4-1:143.213: probe with driver asix failed with error -71 [ 444.246055][ T713] asix 4-1:143.2 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 444.256220][ T713] asix 4-1:143.2: probe with driver asix failed with error -71 [ 444.266199][ T713] usb 4-1: USB disconnect, device number 42 [ 444.490911][ T62] usb 6-1: device descriptor read/64, error -71 [ 444.768842][ T62] usb 6-1: Using ep0 maxpacket: 8 [ 444.774885][ T62] usb 6-1: descriptor type invalid, skip [ 444.780553][ T62] usb 6-1: descriptor type invalid, skip [ 444.786840][ T62] usb 6-1: config 165 has an invalid interface number: 174 but max is 3 [ 444.795210][ T62] usb 6-1: config 165 contains an unexpected descriptor of type 0x1, skipping [ 444.804077][ T62] usb 6-1: config 165 has an invalid descriptor of length 1, skipping remainder of the config [ 444.814334][ T62] usb 6-1: config 165 has 1 interface, different from the descriptor's value: 4 [ 444.823377][ T62] usb 6-1: config 165 has no interface number 0 [ 444.829625][ T62] usb 6-1: config 165 interface 174 altsetting 22 has a duplicate endpoint with address 0x3, skipping [ 444.840686][ T62] usb 6-1: config 165 interface 174 altsetting 22 bulk endpoint 0xF has invalid maxpacket 1024 [ 444.851202][ T62] usb 6-1: config 165 interface 174 altsetting 22 endpoint 0xB has an invalid bInterval 255, changing to 7 [ 444.862857][ T62] usb 6-1: config 165 interface 174 altsetting 22 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 444.874240][ T62] usb 6-1: config 165 interface 174 altsetting 22 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 444.887670][ T62] usb 6-1: config 165 interface 174 has no altsetting 0 [ 444.896005][ T62] usb 6-1: New USB device found, idVendor=7392, idProduct=7611, bcdDevice=5c.04 [ 444.905122][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.913176][ T62] usb 6-1: Product: ᐄ [ 444.917327][ T62] usb 6-1: Manufacturer: 㐭潴㬋휑摚䦮㤣➶≊怹礠ᜯよ펅媵果뎧ᅅԚⓓ㶹슚Ⴁ㈪䚆꟒憽횿뗵䌥ְ狡붕첇⭭箭া⼜蚚퍎覆햘幃끰㶇᛫碿뼥ᑓ䲝ꪎ⒏㺷㊊굴뉭㧑㉋長䍉鞰ჾ资풰➶᤿柇罄ガ꺇⃔Ĩ砞五檟낤쯚๞⾶ꎵ쯅胛筏霵韗 [ 444.945230][ T62] usb 6-1: SerialNumber: 椑¯躲異⧇䥖僜ݽ䲐狔蕗⧨訩ɭ彚獏뀼㼧￯⳧଼ꣀ㳋㟡耬⨉㩺羪ﱡ㶠矶룢팱襧赏㵿貂嶺갡氃弮긱䣲啠潪⁌菓驇쐨 [ 444.965560][T20938] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 445.033383][ T36] audit: type=1400 audit(2000000024.582:8278): avc: denied { setattr } for pid=20941 comm="syz.3.7027" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 445.033631][T20942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228 [ 445.110750][T20952] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:238 [ 445.185420][T20956] rust_binder: Error while translating object. [ 445.194621][T20956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 445.200902][T20956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:242 [ 445.215085][ T62] usb 6-1: USB disconnect, device number 29 [ 445.261023][T20976] binder: Bad value for 'max' [ 445.268591][ T36] audit: type=1400 audit(2000000024.797:8279): avc: denied { mounton } for pid=20975 comm="syz.3.7037" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 445.336122][T20978] tipc: Failed to remove unknown binding: 66,1,1/0:2585517518/2585517520 [ 445.344542][T20978] tipc: Failed to remove unknown binding: 66,1,1/0:2585517518/2585517520 [ 445.402886][T20987] binder: Unknown parameter '' [ 445.666878][ T62] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 445.777771][T14507] Bluetooth: hci0: Frame reassembly failed (-84) [ 445.805852][ T62] usb 4-1: device descriptor read/64, error -71 [ 446.062444][ T62] usb 4-1: device descriptor read/64, error -71 [ 446.319007][ T62] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 446.457977][ T62] usb 4-1: device descriptor read/64, error -71 [ 446.714553][ T62] usb 4-1: device descriptor read/64, error -71 [ 446.832248][ T62] usb usb4-port1: attempt power cycle [ 447.185935][ T36] audit: type=1326 audit(2000000026.602:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20935 comm="syz.4.7024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e0d8e929 code=0x7fc00000 [ 447.209577][ T62] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 447.220436][T20998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7045'. [ 447.239187][T21004] netlink: 'syz.4.7046': attribute type 27 has an invalid length. [ 447.248252][ T62] usb 4-1: device descriptor read/8, error -71 [ 447.389167][ T62] usb 4-1: device descriptor read/8, error -71 [ 447.644668][ T62] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 447.667077][ T62] usb 4-1: device descriptor read/8, error -71 [ 447.806065][ T62] usb 4-1: device descriptor read/8, error -71 [ 447.922664][ T62] usb usb4-port1: unable to enumerate USB device [ 447.954653][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 447.954661][T17185] Bluetooth: hci0: command 0x1003 tx timeout [ 448.377540][T21013] /dev/rnullb0: Can't lookup blockdev [ 448.430074][T21029] /dev/rnullb0: Can't lookup blockdev [ 448.442246][T21033] overlayfs: failed to resolve './bus': -2 [ 448.489257][T21046] fuse: blksize only supported for fuseblk [ 448.502402][T21051] tipc: Enabling of bearer rejected, failed to enable media [ 448.541721][T21060] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 448.541758][T21060] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:218 [ 448.820638][ T31] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 448.890771][T21070] rust_binder: 21070: no such ref 0 [ 448.896249][T21070] rust_binder: Write failure EINVAL in pid:282 [ 448.896374][T21070] rust_binder: Read failure Err(EAGAIN) in pid:282 [ 448.992755][ T31] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.010395][ T31] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.020329][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.026983][ T31] usb 6-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 449.030786][T21084] batadv_slave_1: entered promiscuous mode [ 449.036041][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.044289][T21083] batadv_slave_1: left promiscuous mode [ 449.053601][ T31] usb 6-1: config 0 descriptor?? [ 449.072735][T21086] tipc: Started in network mode [ 449.077650][T21086] tipc: Node identity ac14140f, cluster identity 4711 [ 449.084478][T21086] tipc: New replicast peer: 255.255.255.255 [ 449.090646][T21086] tipc: Enabled bearer , priority 10 [ 449.098159][T21086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 449.098184][T21086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:298 [ 449.127032][T21096] fuseblk: Bad value for 'fd' [ 449.397906][ T62] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 449.490153][ T31] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 449.497074][ T31] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 449.503927][ T31] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 449.510822][ T31] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 449.517740][ T31] apple 0003:05AC:029F.0018: unknown main item tag 0x0 [ 449.525136][ T31] apple 0003:05AC:029F.0018: hidraw0: USB HID v8.00 Device [HID 05ac:029f] on usb-dummy_hcd.5-1/input0 [ 449.537075][ T62] usb 4-1: device descriptor read/64, error -71 [ 449.706556][T21065] tmpfs: Unsupported parameter 'mpol' [ 449.718874][T21065] /dev/rnullb0: Can't open blockdev [ 449.793504][ T62] usb 4-1: device descriptor read/64, error -71 [ 449.794409][ T31] usb 6-1: USB disconnect, device number 30 [ 450.050043][ T62] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 450.119735][T21123] incfs: Options parsing error. -22 [ 450.125054][T21123] incfs: mount failed -22 [ 450.189005][ T62] usb 4-1: device descriptor read/64, error -71 [ 450.285214][ T10] tipc: Node number set to 2886997007 [ 450.445575][ T62] usb 4-1: device descriptor read/64, error -71 [ 450.563260][ T62] usb usb4-port1: attempt power cycle [ 450.606049][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 450.767411][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.778651][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.791636][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 450.800723][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.809380][ T10] usb 6-1: config 0 descriptor?? [ 450.926646][ T62] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 450.948970][ T62] usb 4-1: device descriptor read/8, error -71 [ 451.088051][ T62] usb 4-1: device descriptor read/8, error -71 [ 451.245682][ T10] input: HID 28bd:0909 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0019/input/input30 [ 451.262741][ T10] uclogic 0003:28BD:0909.0019: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0 [ 451.343589][ T62] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 451.366087][ T62] usb 4-1: device descriptor read/8, error -71 [ 451.460944][ T10] usb 6-1: USB disconnect, device number 31 [ 451.490345][T21160] input: syz0 as /devices/virtual/input/input31 [ 451.496707][T21160] input: failed to attach handler leds to device input31, error: -6 [ 451.508164][T21160] rust_binder: Write failure EINVAL in pid:215 [ 451.508248][T21160] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 451.515809][ T62] usb 4-1: device descriptor read/8, error -71 [ 451.654106][ T62] usb usb4-port1: unable to enumerate USB device [ 451.685811][T21166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7101'. [ 452.192599][ T36] audit: type=1400 audit(2000000031.279:8281): avc: denied { setattr } for pid=19978 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 452.697496][T21197] 9pnet_fd: Insufficient options for proto=fd [ 452.705272][T21197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.714345][T21197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.744080][ T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 452.905500][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 452.919802][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 452.929127][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.937320][ T31] usb 4-1: Product: syz [ 452.941568][ T31] usb 4-1: Manufacturer: syz [ 452.946214][ T31] usb 4-1: SerialNumber: syz [ 453.175216][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 453.195255][ T31] usb 4-1: USB disconnect, device number 51 [ 453.207248][ T31] usblp0: removed [ 453.362129][T21207] tmpfs: Bad value for 'size' [ 454.049723][ T36] audit: type=1400 audit(2000000033.019:8282): avc: denied { nosuid_transition } for pid=21214 comm="syz.1.7117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 454.107408][ T36] audit: type=1400 audit(2000000033.019:8283): avc: denied { transition } for pid=21214 comm="syz.1.7117" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 454.199230][ T36] audit: type=1400 audit(2000000033.019:8284): avc: denied { entrypoint } for pid=21214 comm="syz.1.7117" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1458 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 454.282857][ T36] audit: type=1400 audit(2000000033.038:8285): avc: denied { noatsecure } for pid=21214 comm="syz.1.7117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 454.416290][T21233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.435414][T21233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.682918][T21243] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.690247][T21243] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.697367][T21243] bridge_slave_0: entered allmulticast mode [ 454.705676][T21243] bridge_slave_0: entered promiscuous mode [ 454.712465][T21243] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.719690][T21243] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.727223][T21243] bridge_slave_1: entered allmulticast mode [ 454.733736][T21243] bridge_slave_1: entered promiscuous mode [ 454.787146][T14497] erspan0: left allmulticast mode [ 454.792226][T14497] erspan0: left promiscuous mode [ 454.797775][T14497] bridge0: port 3(erspan0) entered disabled state [ 454.804781][T14497] bridge_slave_1: left allmulticast mode [ 454.810737][T14497] bridge_slave_1: left promiscuous mode [ 454.816349][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.824130][T14497] bridge_slave_0: left allmulticast mode [ 454.829828][T14497] bridge_slave_0: left promiscuous mode [ 454.835496][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.930333][T21243] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.937441][T21243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.944723][T21243] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.951787][T21243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.971525][T14497] tipc: Left network mode [ 455.016411][T21251] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 455.048792][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.066212][ T36] audit: type=1400 audit(2000000033.945:8286): avc: denied { relabelto } for pid=21253 comm="syz.1.7129" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 455.104958][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.112836][ T36] audit: type=1400 audit(2000000033.964:8287): avc: denied { unlink } for pid=19842 comm="syz-executor" name="file0" dev="tmpfs" ino=471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 455.183059][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.190138][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.216474][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.223545][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.260243][T21243] veth0_vlan: entered promiscuous mode [ 455.270200][T21262] /dev/nullb0: Can't lookup blockdev [ 455.287361][T21243] veth1_macvtap: entered promiscuous mode [ 455.662592][ T306] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 455.673286][ T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 455.833633][ T306] usb 5-1: Using ep0 maxpacket: 32 [ 455.839881][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.850884][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 455.856280][ T306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.866287][ T306] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 455.877530][T21283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.878101][T21283] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 455.884643][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.899729][T21283] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 455.899747][T21283] rust_binder: Read failure Err(EFAULT) in pid:270 [ 455.907855][T21283] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:270 [ 455.907927][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 455.924729][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.941624][ T306] usb 5-1: config 0 descriptor?? [ 455.946838][ T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 455.961725][ T306] hub 5-1:0.0: USB hub found [ 455.966478][ T31] usb 4-1: config 1 has no interface number 1 [ 455.972629][ T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 455.984919][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.994155][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.002417][ T31] usb 4-1: Product: syz [ 456.007605][ T31] usb 4-1: Manufacturer: syz [ 456.012242][ T31] usb 4-1: SerialNumber: syz [ 456.016970][T21290] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 456.174753][ T306] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 456.191830][ T306] usbhid 5-1:0.0: can't add hid device: -71 [ 456.197859][ T306] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 456.240241][ T306] usb 5-1: USB disconnect, device number 4 [ 456.248071][T21278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.261970][T21278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.274255][ T31] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 456.296372][ T31] usb 4-1: USB disconnect, device number 52 [ 456.322763][T19737] udevd[19737]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 456.730713][T21293] overlayfs: disabling nfs_export due to verity=require [ 456.738773][T21293] overlayfs: missing 'lowerdir' [ 457.034820][T14498] bridge_slave_1: left allmulticast mode [ 457.040664][T14498] bridge_slave_1: left promiscuous mode [ 457.046595][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.054505][T14498] bridge_slave_0: left allmulticast mode [ 457.060239][T14498] bridge_slave_0: left promiscuous mode [ 457.066285][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.272510][T14498] veth0_vlan: left promiscuous mode [ 457.485705][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 457.504954][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.626564][T21316] SELinux: failed to load policy [ 458.041094][T21335] /dev/rnullb0: Can't open blockdev [ 458.892888][T21356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7160'. [ 458.902645][T21356] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 458.902670][T21356] rust_binder: Error while translating object. [ 458.915077][T21355] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 458.921253][T21355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 458.929502][T21356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 458.939136][T21355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:23 [ 458.948672][T21356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:23 [ 458.975341][T21358] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 459.002704][ T36] audit: type=1400 audit(2000000037.649:8288): avc: denied { mount } for pid=21359 comm="syz.4.7162" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 459.772068][ T36] audit: type=1400 audit(2000000038.370:8289): avc: denied { map } for pid=21364 comm="syz.1.7164" path="/dev/vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 459.826117][T21370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 459.881078][T21371] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:309 [ 459.992588][T21377] sit0: entered promiscuous mode [ 460.009148][T21377] netlink: 'syz.4.7166': attribute type 1 has an invalid length. [ 460.017413][T21377] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7166'. [ 460.194406][T21394] tipc: Enabling of bearer rejected, failed to enable media [ 460.766594][T14497] bridge_slave_1: left allmulticast mode [ 460.778237][T14497] bridge_slave_1: left promiscuous mode [ 460.792492][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.807793][T14497] bridge_slave_0: left allmulticast mode [ 460.820010][T14497] bridge_slave_0: left promiscuous mode [ 460.836464][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.961316][T14497] veth1_macvtap: left promiscuous mode [ 460.967000][T14497] veth0_vlan: left promiscuous mode [ 461.100540][T21396] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.107873][T21396] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.115179][T21396] bridge_slave_0: entered allmulticast mode [ 461.121561][T21396] bridge_slave_0: entered promiscuous mode [ 461.128449][T21396] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.135656][T21396] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.143136][T21396] bridge_slave_1: entered allmulticast mode [ 461.151301][T21396] bridge_slave_1: entered promiscuous mode [ 461.213711][T21396] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.220770][T21396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.228066][T21396] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.235108][T21396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.260222][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.267669][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.277989][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.285036][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.294027][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.301080][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.335406][T21396] veth0_vlan: entered promiscuous mode [ 461.348226][T21396] veth1_macvtap: entered promiscuous mode [ 461.385607][T21411] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 461.385638][T21411] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:2 [ 461.410553][T21413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:4 [ 461.420688][T21413] rust_binder: Read failure Err(EFAULT) in pid:4 [ 461.709472][T21422] binfmt_misc: register: failed to install interpreter file ./file0 [ 461.863302][T21448] cgroup: fork rejected by pids controller in /syz6 [ 462.191696][ T60] bridge_slave_1: left allmulticast mode [ 462.202754][ T60] bridge_slave_1: left promiscuous mode [ 462.212001][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.221577][ T60] bridge_slave_0: left allmulticast mode [ 462.227378][ T60] bridge_slave_0: left promiscuous mode [ 462.233062][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.351756][T21557] /dev/rnullb0: Can't open blockdev [ 462.410980][ T60] veth1_macvtap: left promiscuous mode [ 462.416513][ T60] veth0_vlan: left promiscuous mode [ 462.489595][T21552] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.496691][T21552] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.522316][T21552] bridge_slave_0: entered allmulticast mode [ 462.533788][T21552] bridge_slave_0: entered promiscuous mode [ 462.550699][T21552] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.557770][T21552] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.567534][T21552] bridge_slave_1: entered allmulticast mode [ 462.587039][T21552] bridge_slave_1: entered promiscuous mode [ 462.615097][T14497] Bluetooth: hci0: Frame reassembly failed (-84) [ 462.671479][T21552] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.678551][T21552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.685845][T21552] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.692891][T21552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.724038][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.731632][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.742336][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.749378][T14498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.768856][T14498] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.775906][T14498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.802021][T21552] veth0_vlan: entered promiscuous mode [ 462.814067][T21552] veth1_macvtap: entered promiscuous mode [ 464.321199][T21624] fuseblk: Bad value for 'fd' [ 464.327268][T21624] fuseblk: Bad value for 'fd' [ 464.344833][T21628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7221'. [ 464.803096][ T52] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.101194][ T36] audit: type=1326 audit(2000000043.346:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.124707][ T36] audit: type=1326 audit(2000000043.346:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.148929][ T36] audit: type=1326 audit(2000000043.346:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.187946][ T36] audit: type=1326 audit(2000000043.346:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.234851][ T36] audit: type=1326 audit(2000000043.346:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21647 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd190fc11e5 code=0x7ffc0000 [ 465.258554][ T36] audit: type=1326 audit(2000000043.346:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.282156][ T36] audit: type=1326 audit(2000000043.346:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.305793][ T36] audit: type=1326 audit(2000000043.346:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21642 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 465.330242][ T36] audit: type=1326 audit(2000000043.505:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21647 comm="syz.1.7226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd190f8e929 code=0x7ffc0000 [ 466.283668][T21685] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7239'. [ 467.189899][T21724] input: syz0 as /devices/virtual/input/input33 [ 467.341757][T21728] overlay: Unknown parameter 'dont_measure' [ 467.362948][T21733] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 467.380514][T21733] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 467.452860][T21744] binder: Bad value for 'stats' [ 467.503098][ T36] audit: type=1400 audit(2000000045.600:8299): avc: denied { setattr } for pid=21752 comm="syz.3.7260" name="PACKET" dev="sockfs" ino=92785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 467.603994][ T624] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 467.765430][ T624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 467.785723][ T624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.795484][ T624] usb 7-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 467.828490][ T624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.837203][ T624] usb 7-1: config 0 descriptor?? [ 467.967862][ T713] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 468.138893][ T713] usb 4-1: Using ep0 maxpacket: 8 [ 468.149955][ T713] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.181303][ T713] usb 4-1: config 0 interface 0 has no altsetting 0 [ 468.188019][ T713] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 468.209541][ T713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.224393][ T713] usb 4-1: config 0 descriptor?? [ 468.283631][ T624] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 468.311120][ T624] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 468.318540][ T624] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 468.335293][ T624] hid-generic 0003:04F3:0754.001B: unknown main item tag 0x0 [ 468.343838][ T624] hid-generic 0003:04F3:0754.001B: failed to start in urb: -90 [ 468.357365][ T624] hid-generic 0003:04F3:0754.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.6-1/input0 [ 468.377245][T21777] overlayfs: failed to clone upperpath [ 468.391132][T14506] bridge_slave_1: left allmulticast mode [ 468.398053][T14506] bridge_slave_1: left promiscuous mode [ 468.405364][T14506] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.413287][T14506] bridge_slave_0: left allmulticast mode [ 468.419078][T14506] bridge_slave_0: left promiscuous mode [ 468.424688][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.464946][T21783] overlayfs: failed to clone upperpath [ 468.471057][T21783] overlayfs: failed to clone upperpath [ 468.531871][T21779] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.538962][T21779] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.546214][T21779] bridge_slave_0: entered allmulticast mode [ 468.552464][T21779] bridge_slave_0: entered promiscuous mode [ 468.559093][T21779] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.566205][T21779] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.573414][T21779] bridge_slave_1: entered allmulticast mode [ 468.580142][T21779] bridge_slave_1: entered promiscuous mode [ 468.587044][T14506] veth1_macvtap: left promiscuous mode [ 468.592762][T14506] veth0_vlan: left promiscuous mode [ 468.597842][T21788] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 468.688710][T21779] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.695772][T21779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.703001][T21779] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.710044][T21779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.735562][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.743172][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.752948][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.760014][T14521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.770058][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.777085][T14513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.803314][T21779] veth0_vlan: entered promiscuous mode [ 468.815649][T21779] veth1_macvtap: entered promiscuous mode [ 468.880587][ T713] usbhid 4-1:0.0: can't add hid device: -71 [ 468.890282][ T713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 468.905787][ T713] usb 4-1: USB disconnect, device number 53 [ 469.178004][T21815] fuseblk: Bad value for 'rootmode' [ 469.222883][T21819] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 469.237011][T21819] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 469.319635][T21828] netlink: 112 bytes leftover after parsing attributes in process `syz.7.7281'. [ 469.328906][T21829] netlink: 112 bytes leftover after parsing attributes in process `syz.7.7281'. [ 469.589198][T21840] binder: Unknown parameter 'ip6_vti0' [ 470.381150][T21849] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 470.391691][T21852] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 470.408667][T21852] overlayfs: missing 'lowerdir' [ 470.479167][ T36] kauditd_printk_skb: 12 callbacks suppressed [ 470.479184][ T36] audit: type=1326 audit(2000000048.378:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.508980][ T36] audit: type=1326 audit(2000000048.378:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.532756][ T36] audit: type=1326 audit(2000000048.378:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.556593][ T713] usb 7-1: USB disconnect, device number 2 [ 470.556698][ T36] audit: type=1326 audit(2000000048.378:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.586128][ T36] audit: type=1326 audit(2000000048.378:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.611155][ T36] audit: type=1326 audit(2000000048.378:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.635866][ T36] audit: type=1326 audit(2000000048.378:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.659513][ T36] audit: type=1326 audit(2000000048.378:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.683338][ T36] audit: type=1326 audit(2000000048.378:8320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.712388][ T36] audit: type=1326 audit(2000000048.378:8321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21854 comm="syz.7.7290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3fb8e929 code=0x7ffc0000 [ 470.758237][T21879] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 136, size: 144) [ 470.758262][T21879] rust_binder: Error while translating object. [ 470.769467][T21879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 470.775635][T21879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50 [ 470.851226][T21885] binder: Unknown parameter 'dj' [ 471.088660][T21902] futex_wake_op: syz.3.7306 tries to shift op by -1; fix this program [ 471.136608][T21912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=57 sclass=netlink_xfrm_socket pid=21912 comm=syz.3.7310 [ 471.180208][T21922] overlay: Unknown parameter 'euid<00000000000000000000' [ 471.197690][T21924] kvm: pic: single mode not supported [ 471.198048][T21924] kvm: pic: single mode not supported [ 471.516784][ T624] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 471.700255][ T624] usb 7-1: config 128 has an invalid interface number: 3 but max is 0 [ 471.708533][ T624] usb 7-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 471.718872][ T624] usb 7-1: config 128 has no interface number 0 [ 471.725291][ T624] usb 7-1: config 128 interface 3 altsetting 137 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 471.738700][ T624] usb 7-1: config 128 interface 3 has no altsetting 0 [ 471.747223][ T624] usb 7-1: New USB device found, idVendor=19d2, idProduct=0178, bcdDevice=16.b1 [ 471.756394][ T624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.764462][ T624] usb 7-1: Product: Ц [ 471.768589][ T624] usb 7-1: Manufacturer: ч [ 471.773122][ T624] usb 7-1: SerialNumber: 㣞粟퟉潸哴‡߉⮭ᓎჂ僧Ƀ轓돷翏ꐳჇ瀞␰⁄㼸ԉ쑹罁ꓲᶟᕿ완ⷖ臏꧳硚ᯒ뇵ꯇᅱ疜摝軱똳ꗳ뺮힐㑱飾Ậ컶蛀陰멪慿ầ斉헅ㆋ)ꕅᔍ鞯쥺䨊췔뙞ᔢ [ 471.847699][T21933] netlink: 600 bytes leftover after parsing attributes in process `syz.3.7317'. [ 472.241833][ T624] usb 7-1: USB disconnect, device number 3 [ 472.247792][T21960] binder: Unknown parameter 'fscontext?}' [ 472.261752][T21962] loop7: detected capacity change from 0 to 16384 [ 472.324567][T21962] I/O error, dev loop7, sector 6912 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 472.334471][T21962] buffer_io_error: 6 callbacks suppressed [ 472.334481][T21962] Buffer I/O error on dev loop7, logical block 864, lost async page write [ 472.348712][T21962] Buffer I/O error on dev loop7, logical block 865, lost async page write [ 472.357251][T21962] Buffer I/O error on dev loop7, logical block 866, lost async page write [ 472.365797][T21962] Buffer I/O error on dev loop7, logical block 867, lost async page write [ 472.374408][T21962] Buffer I/O error on dev loop7, logical block 868, lost async page write [ 472.382940][T21962] Buffer I/O error on dev loop7, logical block 869, lost async page write [ 472.391443][T21962] Buffer I/O error on dev loop7, logical block 870, lost async page write [ 472.399992][T21962] Buffer I/O error on dev loop7, logical block 871, lost async page write [ 472.408513][T21962] Buffer I/O error on dev loop7, logical block 872, lost async page write [ 472.417194][T21962] Buffer I/O error on dev loop7, logical block 873, lost async page write [ 472.456888][T21965] input: syz1 as /devices/virtual/input/input34 [ 472.594233][T21975] 9pnet_fd: Insufficient options for proto=fd [ 472.980501][T21993] netlink: 'syz.6.7337': attribute type 4 has an invalid length. [ 472.988301][T21993] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7337'. [ 473.407377][T22000] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 473.416409][T22000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 473.538500][T22032] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7350'. [ 473.547546][T22032] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7350'. [ 473.556729][T22032] netlink: 'syz.1.7350': attribute type 6 has an invalid length. [ 473.564638][T22032] netlink: 'syz.1.7350': attribute type 5 has an invalid length. [ 473.572512][T22032] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7350'. [ 473.724003][T22040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:88 [ 473.750019][T22045] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 473.766039][T22045] rust_binder: 22045: no such ref 3 [ 473.779897][T22044] rust_binder: 22044: no such ref 3 [ 473.943203][T22048] input: syz0 as /devices/virtual/input/input35 [ 474.159227][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7357'. [ 474.765251][T22093] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 474.822808][T22112] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7378'. [ 474.823022][T22113] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7378'. [ 474.831844][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7378'. [ 474.849987][T22112] netlink: 'syz.1.7378': attribute type 1 has an invalid length. [ 474.857746][T22113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7378'. [ 474.866763][T22113] netlink: 'syz.1.7378': attribute type 1 has an invalid length. [ 474.995818][T22131] overlayfs: failed to clone upperpath [ 475.558297][T22137] incfs: Options parsing error. -22 [ 475.563540][T22137] incfs: mount failed -22 [ 476.241026][T22166] overlayfs: failed to clone lowerpath [ 476.533852][T22186] overlayfs: failed to clone upperpath [ 477.810995][T22210] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 477.885996][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 477.886014][ T36] audit: type=1400 audit(2000000055.310:8328): avc: denied { create } for pid=22218 comm="syz.7.7417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 478.211742][T22226] overlayfs: failed to clone upperpath [ 478.217524][T22226] overlay: Unknown parameter 'fowner>00000000000000016384' [ 478.226146][T22227] overlayfs: failed to clone upperpath [ 478.337782][T22245] veth0_to_bond: mtu greater than device maximum [ 478.354773][T22247] __nla_validate_parse: 1 callbacks suppressed [ 478.354784][T22247] netlink: 1351 bytes leftover after parsing attributes in process `syz.3.7426'. [ 478.432426][T22268] 9pnet_fd: Insufficient options for proto=fd [ 478.827268][T22272] @: renamed from veth0_vlan (while UP) [ 478.855745][T22277] SELinux: security_context_str_to_sid (un6confined_u) failed with errno=-22 [ 478.894256][T22284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16412 sclass=netlink_route_socket pid=22284 comm=syz.6.7438 [ 478.935562][T22287] loop2: detected capacity change from 0 to 7 [ 478.936458][T22288] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.994180][T22297] overlayfs: failed to clone upperpath [ 479.012838][ T36] audit: type=1400 audit(2000000058.365:8329): avc: denied { map } for pid=22299 comm="syz.6.7443" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 479.166132][T22317] __vm_enough_memory: pid: 22317, comm: syz.6.7447, bytes: 70373039144960 not enough memory for the allocation [ 479.438537][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 479.598904][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 479.605129][ T9] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1023 [ 479.615075][ T9] usb 7-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 479.624910][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 479.635946][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 479.642196][T22324] overlayfs: failed to clone upperpath [ 479.645356][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.658508][ T9] usb 7-1: Product: syz [ 479.662699][ T9] usb 7-1: Manufacturer: syz [ 479.667316][ T9] usb 7-1: SerialNumber: syz [ 479.672712][T22322] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 479.679911][T22322] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 480.119492][ T9] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 2 proto 1 vid 0x0525 pid 0xA4A8 [ 480.131831][ T9] usb 7-1: USB disconnect, device number 4 [ 480.139177][ T9] usblp0: removed [ 480.231607][T22332] fuse: Bad value for 'fd' [ 481.150881][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 481.158363][T22363] batadv_slave_1: entered promiscuous mode [ 481.159225][T22362] batadv_slave_1: left promiscuous mode [ 481.246273][T22372] netlink: 'syz.7.7469': attribute type 2 has an invalid length. [ 481.321792][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 481.328125][ T10] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 481.336929][ T10] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 481.347743][ T10] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 481.357959][ T10] usb 7-1: config 8 has no interface number 0 [ 481.364297][ T10] usb 7-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 481.374230][ T10] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 481.385440][ T10] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.400381][ T10] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 481.409501][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.417515][ T10] usb 7-1: Product: syz [ 481.421659][ T10] usb 7-1: Manufacturer: syz [ 481.426229][ T10] usb 7-1: SerialNumber: syz [ 481.431930][T22359] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 481.660811][T22359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.669688][T22359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.152381][T22416] Dead loop on virtual device ip6_vti0, fix it urgently! [ 483.386574][T22435] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7489'. [ 484.148199][ T10] usb 7-1: USB disconnect, device number 5 [ 484.662973][T22473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=22473 comm=syz.1.7502 [ 484.690882][T22476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=22476 comm=syz.1.7503 [ 485.113254][T22503] BUG: unable to handle page fault for address: fffffffffffffff1 [ 485.120990][T22503] #PF: supervisor read access in kernel mode [ 485.126949][T22503] #PF: error_code(0x0000) - not-present page [ 485.132918][T22503] PGD 72ac067 P4D 72ac067 PUD 72ae067 PMD 0 [ 485.138901][T22503] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 485.144966][T22503] CPU: 1 UID: 0 PID: 22503 Comm: syz.6.7514 Not tainted 6.12.30-syzkaller-ge2bf362ee23b #0 e1c904518e9113895a28c59b25a6002cdacb68bf [ 485.158484][T22503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.168530][T22503] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 485.174237][T22503] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba 1f 66 a4 32 <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 41 89 c7 31 ff 44 89 fe [ 485.193826][T22503] RSP: 0018:ffffc9000475f920 EFLAGS: 00010293 [ 485.199875][T22503] RAX: ffffffff81bcb4c9 RBX: 0000000000000000 RCX: ffff88812f9c9300 [ 485.207829][T22503] RDX: 0000000000000000 RSI: ffffea0005320c40 RDI: ffff888142a5e780 [ 485.215781][T22503] RBP: ffffc9000475f9e0 R08: ffffea0005320c47 R09: 1ffffd4000a64188 [ 485.223736][T22503] R10: 0000000032a4661f R11: 0000000000000000 R12: 1ffff920008ebf28 [ 485.231694][T22503] R13: 1ffffd4000a64188 R14: ffffea0005320c40 R15: 0000000000000000 [ 485.239650][T22503] FS: 00007f42297d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 485.248566][T22503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.255133][T22503] CR2: fffffffffffffff1 CR3: 0000000119176000 CR4: 00000000003526b0 [ 485.263090][T22503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.271065][T22503] DR3: 000000000000099e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 485.279033][T22503] Call Trace: [ 485.282297][T22503] [ 485.285215][T22503] ? trace_android_vh_filemap_fault_start+0x130/0x130 [ 485.291957][T22503] ? folio_add_lru+0xc8/0x170 [ 485.296611][T22503] ? filemap_add_folio+0x14d/0x2d0 [ 485.301706][T22503] do_read_cache_folio+0x2b8/0x4d0 [ 485.306801][T22503] ? down_read+0x79/0xe0 [ 485.311036][T22503] read_cache_folio+0x54/0x90 [ 485.315709][T22503] freader_get_folio+0x471/0x700 [ 485.320636][T22503] freader_fetch+0xa4/0x590 [ 485.325145][T22503] __build_id_parse+0x131/0x790 [ 485.329985][T22503] ? build_id_parse_nofault+0x50/0x50 [ 485.335341][T22503] ? futex_wake+0x5fb/0x900 [ 485.339829][T22503] ? find_vma+0xcd/0x110 [ 485.344054][T22503] ? check_stack_object+0x107/0x140 [ 485.349239][T22503] build_id_parse+0x2e/0x40 [ 485.353743][T22503] procfs_procmap_ioctl+0x7f6/0xd10 [ 485.358934][T22503] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 485.364643][T22503] ? __fget_files+0x2c5/0x340 [ 485.369334][T22503] ? bpf_lsm_file_ioctl+0xd/0x20 [ 485.374530][T22503] ? security_file_ioctl+0x34/0xd0 [ 485.379642][T22503] ? __cfi_procfs_procmap_ioctl+0x10/0x10 [ 485.385351][T22503] __se_sys_ioctl+0x132/0x1b0 [ 485.390024][T22503] __x64_sys_ioctl+0x7f/0xa0 [ 485.394602][T22503] x64_sys_call+0x1878/0x2ee0 [ 485.399269][T22503] do_syscall_64+0x58/0xf0 [ 485.403675][T22503] ? clear_bhb_loop+0x50/0xa0 [ 485.408346][T22503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 485.414225][T22503] RIP: 0033:0x7f422b18e929 [ 485.418625][T22503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.438218][T22503] RSP: 002b:00007f42297d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.446621][T22503] RAX: ffffffffffffffda RBX: 00007f422b3b6080 RCX: 00007f422b18e929 [ 485.454582][T22503] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000006 [ 485.462542][T22503] RBP: 00007f422b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 485.470493][T22503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.478448][T22503] R13: 0000000000000000 R14: 00007f422b3b6080 R15: 00007ffef9d8dbf8 [ 485.486412][T22503] [ 485.489415][T22503] Modules linked in: [ 485.493289][T22503] CR2: fffffffffffffff1 [ 485.497427][T22503] ---[ end trace 0000000000000000 ]--- [ 485.502860][T22503] RIP: 0010:filemap_read_folio+0xda/0x2c0 [ 485.508573][T22503] Code: 44 24 40 00 00 00 00 48 81 e3 00 02 00 00 0f 85 86 01 00 00 e8 67 ee c8 ff 48 8b 7c 24 18 4c 89 f6 4d 89 fb 41 ba 1f 66 a4 32 <45> 03 53 f1 74 02 0f 0b 41 ff d3 0f 1f 00 41 89 c7 31 ff 44 89 fe [ 485.528160][T22503] RSP: 0018:ffffc9000475f920 EFLAGS: 00010293 [ 485.534212][T22503] RAX: ffffffff81bcb4c9 RBX: 0000000000000000 RCX: ffff88812f9c9300 [ 485.542167][T22503] RDX: 0000000000000000 RSI: ffffea0005320c40 RDI: ffff888142a5e780 [ 485.550120][T22503] RBP: ffffc9000475f9e0 R08: ffffea0005320c47 R09: 1ffffd4000a64188 [ 485.558111][T22503] R10: 0000000032a4661f R11: 0000000000000000 R12: 1ffff920008ebf28 [ 485.566068][T22503] R13: 1ffffd4000a64188 R14: ffffea0005320c40 R15: 0000000000000000 [ 485.574022][T22503] FS: 00007f42297d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 485.582934][T22503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.589503][T22503] CR2: fffffffffffffff1 CR3: 0000000119176000 CR4: 00000000003526b0 [ 485.597464][T22503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 485.605421][T22503] DR3: 000000000000099e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 485.613377][T22503] Kernel panic - not syncing: Fatal exception [ 485.619729][T22503] Kernel Offset: disabled [ 485.624032][T22503] Rebooting in 86400 seconds..