last executing test programs: 3m46.837975846s ago: executing program 1 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x0, 0x2}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x40000000, 0x8}, {0xc, 0x2}, 0x8, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x84, 0x0, &(0x7f0000000180)=[@dead_binder_done, @release, @clear_death, @decrefs={0x40046307, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x1101}, @flat=@binder={0x73622a85, 0xb}, @fda={0x66646185, 0x6, 0x0, 0x27}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}, @exit_looper, @increfs], 0x8c, 0x0, &(0x7f0000000240)="1f4e60867a6b6e3e2b0fbe3062a1b6df9085567640b5d10804b76398771d9abb2778c1ad087f18ebc1704cf974ce47fda4a7907a8ff2e54a6c7a79a067663690edbcb99e1cf255392a7c3f4fef324fcdf508c9de1d216981ee1cb824df926ca68f50b3945da58a9ec43c699dc92e635dfe04d081660855e27931aa1f03febf3038a198b14796efb44103b42a"}) 3m46.728267967s ago: executing program 1 (id=776): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x40) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x643, 0x9, 0x10, 0xd, 0xf9, 0x7f}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) syz_usb_connect$printer(0x4, 0x0, 0x0, &(0x7f0000001880)={0x0, 0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f0500e7000000df34b3658bbd9af2eded6fffd989f9b46d963014bcc5c4433fb171514b81"], 0x6, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x41d}}, {0x0, 0x0}, {0x35, &(0x7f00000015c0)=@string={0x35, 0x3, "c371b43f4960464a6b963e6032ca6996bbf25c09bddd281f8cd52c550cd56cf19d55d03bfb3fb7d5b038f62a6483cd63a86546"}}, {0xa0, &(0x7f0000001640)=ANY=[]}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x81a}}]}) (async) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x400) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x64542, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x101) (async) prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x8fe69000) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) syz_clone(0x80000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000001c0)="45aaf38e8b38135232e8ac6c9fc5a7cbd0da5fa9e4599fe1e60bff1a25585ee6f73d40c3dbb9e16cbe7ca5c321025e93440b045ea642877874ccf6f92beaa8b8cfc1992d4bb1f1d6a99190970a61c8d648") open(0x0, 0x345002, 0x140) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) (async, rerun: 32) write(r2, &(0x7f0000000400)="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", 0x1f000) (rerun: 32) 3m46.650575358s ago: executing program 1 (id=778): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4001) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a31215eeb27958b6c27e12bf4baa7a34"], 0x10}}, 0x2008090) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4001) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r3, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a31215eeb27958b6c27e12bf4baa7a34"], 0x10}}, 0x2008090) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 3m46.629395088s ago: executing program 1 (id=782): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xb81, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x63, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db151"}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents(r4, &(0x7f0000000180)=""/134, 0x86) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1100, 0x2}) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="380000002e000300000000000000000008000200", @ANYRES32=r3, @ANYBLOB="0b000280976b64086860300014000180747bdb006f816335f431b245dc81dc2b"], 0x38}], 0x1}, 0xcc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>') ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0x4, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x600000000000000) 3m46.524723789s ago: executing program 1 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r1, 0x8000451c, 0x0) (async) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pipe2(&(0x7f00000002c0), 0x80880) (async) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) (async) setxattr$incfs_metadata(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x2) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) (async) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x1, 0x3, 0x7ffffffffffffffe, 0x5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r5, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x0, 0x106}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000000)={[{0x4, 0x4, 0x6, 0x2, 0xff, 0x4, 0x9, 0x8, 0x8e, 0xe, 0x10, 0x1, 0x4}, {0x5, 0x6b, 0xc8, 0x3b, 0x6, 0x0, 0x5, 0x9, 0x4, 0x3, 0xb, 0x1, 0x5}, {0x10001, 0x8, 0x0, 0x3, 0x8, 0x3, 0x5, 0xa, 0x0, 0xff, 0xc, 0xe, 0x2}], 0x40}) (async) r6 = socket(0x10, 0x5, 0x0) write(r6, &(0x7f0000000100)="5352000052004f7fb3e4bf000000000000000008", 0x14) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3}) (async) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r7, 0x82081fc) (async) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r8, 0x800000) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000140)=0x7ff) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xba1cb000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) 3m46.37156342s ago: executing program 1 (id=785): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) (async) write$cgroup_pressure(r0, 0x0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) (async) 3m46.31248521s ago: executing program 32 (id=785): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b9"]) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x35}, {0x6}]}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) (async) write$cgroup_pressure(r0, 0x0, 0x0) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3f) (async) 3m16.18187337s ago: executing program 4 (id=1486): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="67450f2057b9f10b0000b8a6000000ba000000000f3066b8eb000f00d066baf80cb86c4fe785ef66bafc0ced48b81c670000000000000f23c00f21f835020002000f23f82e450f00dc66baf80cb8e4a64980ef66bafc0cedc9d8e8c744240070000000c7442402bd802b9ec7442406000000000f011424", 0x77}], 0x1, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="18000000680015"], 0x1c}], 0x1}, 0x4000080) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f0000002000)={0xc1, 0x0, 0x5}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000000)={0x67, 0x0, 0x4, 0x2000, &(0x7f0000b2c000/0x2000)=nil}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "0000004a650600", "af193cff4810ba5ac120d096eb00000052095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r4) syz_clone(0x4100, &(0x7f0000000bc0)="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", 0x1000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340)="b6dd18579b97bf008099cc87d5fb647bd26338b78275461493c8edbe297e00e39c947288333936febcec655e84b7e37c807ad6f703a3ac73029575a4e2ebef1c616c761063098c03334a3825fc2f6d5b273d0b2d749a4f9cbaf1c86e7dfda44b6d8b08a1846f045d918d27fc55d14945af3dd988cedc35583a43c2824c9d632d2fb0cc457680f5aff02f4d6f7073e7739803d212ad3c5e720fb48cdadca6136ca823cdf13096fe484186293f084802bafc752a32613bcdcd4855baec4e3da7c70e032da3307f7528e2f820defd") r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) syz_open_dev$hidraw(0x0, 0x7077e089, 0x3191c1) syz_usb_connect(0x3, 0xae, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x67, 0xef, 0x5e, 0x10, 0x421, 0x4c9, 0x6e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x2, 0x8, 0x2, 0x10, 0x89, [{{0x9, 0x4, 0x6c, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "cf0c"}, {0x5, 0x24, 0x0, 0x74}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x2, 0x7}, [@acm={0x4, 0x24, 0x2, 0x9}]}]}}, {{0x9, 0x4, 0x28, 0x6, 0x7, 0x58, 0x42, 0x91, 0x98, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x80, 0x3, 0x3, 0x1, "", "df"}]}], [{{0x9, 0x5, 0x4, 0x10, 0x10, 0x2, 0xc, 0x81}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x9, 0xee, 0x99}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x6, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xc, 0x8, 0x2}}, {{0x9, 0x5, 0xf, 0xe, 0x400, 0xf4, 0x2, 0x7}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xe6, 0xe5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xcc, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xfe, 0x800}]}}]}}]}}]}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7470006f000087ca0b8560ddea40b724df146e3da988eb9f95b06c3fe6feb1b780070000000000100000000000", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x6c) 3m13.195706544s ago: executing program 4 (id=1539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 3m13.193033004s ago: executing program 4 (id=1540): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1380, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000010002000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="080029004101"], 0x28}], 0x1}, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) (async, rerun: 32) syz_clone(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)="27a93a6749eaccefa7b18e631dcfe3a097f6668e709d7e261110186384ee1f4de9e743f32d566e273f8de4c9789bf4ec00396dcb0d787ecb193f78eedf914d1cd0052c3bc660bee3210b76a22f332579b835b9066e2cf11412ab521c90e00a85a8827d6e497a7375b461c1ca6d1d35489384be318fbbe1e7b013fb23e255f45139f59c3e65da1e7c2af6e6814a1dbeb331859218207c5c160a433710bef8e67463277c488ddc22df8eb49ebe3b2d4f2a91fc4f8b5740ad0e31245e4fc810a0dbf08102381eb35b7416ac5dee3afe7ec402c767b0c5d85ee219d773e2a51cb71cf0949fadc7d88d8377") (rerun: 32) 3m12.516453999s ago: executing program 4 (id=1547): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xd9ac90, 0x2, 0x10, 0xd, 0x0, 0x0, 0x0, 0x20, 0x5}}, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000040)=0x44903bf5) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000100)=0x20) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x40101283, 0x3) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x4001, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote, @empty, @local, 0x40003, 0x40, 0x5, 0x100, 0x10000000, 0x20010, r7}) socket$can_raw(0x1d, 0x3, 0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000140)={{0xc, 0x1, 0xffc0, 0x62}, 'syz1\x00', 0x27}) close_range(r8, 0xffffffffffffffff, 0x0) 3m11.631871395s ago: executing program 4 (id=1560): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G']) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) r1 = syz_clone(0x200, &(0x7f0000000200)="8f0d80080a51c685ddddff0e7574d1d3dfdc293b450b68ca7cd1aa82a8044749ee5a7ce3030a0ed96b4f8c4a28e1c8726bdd55e1b4a423b757e342143a0792018ef3786ab632ae25f74a950aa700b29baa983e1a75f7772bd4a9d7954aba55e22ca6b51470b4dde374af98928a27b22f421d83918026976c5aa400f7eb0b2d0841eef7e086c315697b204c59ec62bb4cce6f9a79726ffbcee9ad96460930bef6acb8c391b9dcd7a1f5d3e776d91e38470ff134bee7499cbc913cc52f4c507a803324e7a24da3c170452b5ab03b873a3dbe94312105341906714aa4fb2bd0ba478150887aeee70391942258c3f72684b9273e27a5955f2d0cb7", 0xf9, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000300)="459d40c434d296f6a777f887f58e02ff8b91e6432e5042287e6903f21375f0c51aab955ad50e14ca956f01771ade565e1ae8f7d4c89600208e0149b6e19ad5222e64a1a1ee9f2fed9cdf3bf05b6b40f93c3e896861039b648f0701170859a27c2d469039a6c222a4727552b8058d1fe9ec1ad9f512123f7381fd0ff88b5c0d83c3bcdab9c8785c62f1cb3c87ac") r2 = syz_open_procfs(r1, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e) 3m11.471644256s ago: executing program 4 (id=1561): r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000300)="3f45db2a512bfeb44902258b0fb0fcaf58c3b3c7896bcbcf7c9058e7aaff26eb8fc7728259658ee9818246b9b4805905b5573274d8f7a87051253f5d79240f8f66c2386098913032c7d575cde439c81b572d26ebc84d68a9e4766584e1bc6a2486a3fd8a8a8cce40257e39b9328b36bfd1cb39b21399682b2b5682a15351ddf5802c86507cc4aae93eba42faa45e2d73ccd09aabb19bbf80c5ef22392d347d5fb524d35cbc19efa9ade55cd9a816137dd174f731d91d74d1bec0190cc63c56fc2a76ec389a8a2cc4edc835b4812a6903e0e6bf9f676b04cbfb92cdcc4044ad45c6246e1a900efecfa518ea9b8707bf2001d5d402f9e21ba41927", 0xfa, 0x20000081, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000500)=""/179, 0xb3) lseek(r2, 0x1009, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m56.074812461s ago: executing program 33 (id=1561): r0 = socket$unix(0x1, 0x1, 0x0) sendto$unix(r0, &(0x7f0000000300)="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", 0xfa, 0x20000081, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000500)=""/179, 0xb3) lseek(r2, 0x1009, 0x1) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0xfffffffffffffffd, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 5.217007071s ago: executing program 2 (id=4992): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR4\xebh\xe2\xd4') mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x85b83000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x28c}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r2, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) setgroups(0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x12}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, '\x00\x00\b\x00'}]}}, 0x0}, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f00000001c0), &(0x7f0000000240)=0x80) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0xa0240) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000884}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000200)="0b041000e0ff02000200477baa96a13bb100000000008864110071225aac579121ac6f", 0x23, 0x4008000, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x77, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$uinput_user_dev(r11, &(0x7f0000000680)={'syz0\x00', {0x1ff, 0x4, 0x6, 0x7}, 0x10, [0x6, 0xfffffff7, 0x80, 0x4, 0x8, 0x1, 0x81, 0x6, 0x6, 0xb01, 0xb58a, 0x8, 0x400, 0x9, 0xa, 0x1, 0x3, 0x3, 0x8, 0x10000, 0xffffffdb, 0x6, 0x8, 0x6, 0x9, 0x6, 0xffffffff, 0x7, 0x3, 0x80000000, 0x1, 0x2, 0xc, 0x42611a9e, 0xe, 0x200, 0xfa5, 0xd4a, 0x7ff, 0x6, 0xe988, 0x0, 0xffffffff, 0x4, 0xfffffff7, 0x9b, 0x102, 0x81, 0x3, 0x76f2, 0x1, 0x9, 0x2, 0x1, 0x5, 0x3, 0xffffffff, 0xb68b, 0xfffffff9, 0x4, 0x8, 0x6, 0x9, 0x4], [0x9, 0x80000000, 0x2, 0x10001, 0x5, 0x8, 0x4000000, 0x3, 0x7, 0x0, 0x200, 0x7, 0x101, 0x1, 0x8, 0x4, 0x6, 0x0, 0x7f, 0x80, 0x535a, 0x1, 0x8, 0x5, 0x800, 0x3, 0x10001, 0xc9, 0xc, 0x5, 0x3, 0xc3de, 0x6, 0x10000, 0x9, 0x6, 0x0, 0x80, 0x1, 0xe, 0xe, 0x8d56, 0x5a9, 0x10, 0x1, 0x3, 0xc3, 0x9, 0x0, 0x0, 0x5, 0x2b80, 0xeb8, 0x1c, 0x80000000, 0x8, 0x8, 0x10000, 0x6, 0x56913ef7, 0x6, 0x7, 0x3, 0x4], [0x8, 0x83, 0x0, 0x3, 0xa04, 0x3, 0x8, 0xe, 0x1, 0x6, 0x40000, 0x6, 0x2ae6, 0x7f, 0x5, 0x0, 0x4, 0x6, 0x2, 0x1, 0x2, 0x861, 0x6, 0x4, 0x3ff, 0x0, 0x5, 0x2, 0xe34c, 0x0, 0x1, 0x51a1, 0xa14, 0x8, 0x0, 0x800, 0x0, 0x800, 0x0, 0x7, 0xcba, 0x6, 0x94, 0xffff, 0x9c4, 0xd49d, 0x7, 0x1, 0x0, 0x1000, 0x6, 0x7f, 0x3, 0x6, 0x2, 0x6ba3, 0x0, 0x0, 0x9, 0x3, 0x1ff, 0x607, 0x3], [0xa, 0x3, 0x1, 0x658, 0x3, 0x0, 0x6, 0x412, 0x0, 0xccd, 0x4, 0x4, 0xb, 0x9, 0x3, 0x200, 0x6, 0x1, 0x9, 0x2, 0x1ff, 0x5, 0x0, 0x6, 0x5, 0x5, 0x1, 0xcb, 0x5, 0x4, 0xe, 0x6, 0x8, 0x5, 0x80000000, 0x1, 0x1, 0x36, 0x8, 0x1ff, 0x8fd, 0xbf09, 0x7, 0x1, 0x40, 0x3, 0x800, 0x8a0, 0x1, 0x3, 0x3, 0x3, 0x3, 0x0, 0x5974, 0x7f, 0x649, 0x40, 0x80, 0x3, 0xb, 0x55a0]}, 0x45c) rt_sigaction(0x19, &(0x7f0000000000)={&(0x7f0000000340)="dfd3bf2e36c07fff7066440f1ed20000d3a41039000000f344aa643e3ef08104dc19b4000041d8d041de7dd3c4e2f9db8179d90000f3410f5d4efe", 0x5c000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x81\x84\xb8\x92P\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) 4.607149707s ago: executing program 2 (id=5008): socket$inet(0x2, 0x2, 0x1) (async) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x8000) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x6}], 0x1, 0x102, 0x0) (async) recvmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f00000005c0)=@tipc=@name, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x6}], 0x1, 0x102, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000001a80)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000000)=0x40, 0x4) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0209c203090000002dbd7000fbdbdf2502001800000004d5"], 0x48}}, 0x8000040) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mlockall(0x5) (async) mlockall(0x5) syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') (async) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) 4.333366479s ago: executing program 2 (id=5012): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r1 = creat(&(0x7f00000006c0)='./file1\x00', 0x2) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000700)=0x3, 0x4) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) r2 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') stat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000680)={0x8, 0xfffffffffffffffc, 0x0, 0x5}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x210008c, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,cache=none,cache=mmap,access=any,rootcontext=staff_u,dont_measure,euid=', @ANYRESDEC=r3, @ANYBLOB=',uid=', @ANYRESDEC=r4, @ANYBLOB="2c617070726169bb5a40cf82d6d90f696d617369672c6f626a5f745970653ddec72c00"]) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002780)={0x2020}, 0x7d4) 4.27964589s ago: executing program 2 (id=5013): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xae36403566b2b160, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x6, 0xc, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xdb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8a, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x8, 0xaf}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x8, 0x4, 0xff, 0x4}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "1357e44493a78c5493b22887bf921270"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x19, 0x8, 0xd0, 0xb5c}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x8, 0x3, 0x9, 0x2}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0xd0, &(0x7f00000002c0)=@string={0xd0, 0x3, "bb5046b7889cf6a4f92767e7ac2d6b2ec6d827ae86e551da9bebaa056fe90473536684e9f12bf89aba4ecc7820d916bb873ffccd4c54d401a152ed62dd5cb92f260d8b3354c4bdff9f32ad067906e9ace36c58e00d4439f45650c18547e961ec8f20f43ffec6bb29217995560a8c4f1ed71cf18301b12ba6e2ba1f955b40cc54d00d30248173626bab95840b6566666fae2dac3687937e9e609c6d084d0dfcf916e0609f78a39a5356c25ea4468e081ff81b0b17d40010c197ef3920df76364f34d9c615f34b1c1e8c879c8f1941"}}]}) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc6, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x882}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x6, 0x3, 0xff, 0xff, 0x1}, 0xb7, &(0x7f00000004c0)={0x5, 0xf, 0xb7, 0x5, [@generic={0x91, 0x10, 0x1, "b521aaca53b241e2d2be10384145a9e0a292f158acb9b183ff3f1cc6397bcec87f33d873bc7cfdf517bff8f409343ba5e3a171f88847968458a9ce7067662cc211c6de1b0326610638148fc834ba0a4ca943f7a1f2a1bc544c9be435c51492911a853815466a4f123820b86420d2f527fd8c214a9eba981432e6067d0bf83f4155a936f1e43862cffabbb8810500"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x1, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f5a189154dd7915e399ac339ce4cb8b2"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x437}}]}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000840)={0x14, &(0x7f00000006c0)={0x20, 0x2, 0x101, {0x101, 0x2, "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"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000880)={0x20, 0x12, 0xf2, "2c8be3edebd08e6ddde0c93be1abf91efab5354473eb3a9f0ce8d4e9518060f36c013ac5877b4a34a4f94377ba9de2ebf7cc08cafd67b7ca3fa7033aa9944874a2fc1c31affd4e7e5e2ba17b67cdef100f839995e3c3e6a7e07bbd14119a72070019f618bdd35d2f7da747ae2c949448c36f3a294a75f3a71b82eaafbc41b4be6b3e255204a1422165db39f2a3821bf107fc24cd65c4b73b6473e38c827797ef834dea993df326b906a5304cb553aec08d7af1d22dc8861dbe00eaf325bcae1b50700f0c763903fef82fd476df12a1d4cc9d28f83bd5ab8f8dad3bbc208c426eb7858ce3b0535f44a5d4de7d96e48b3c3816"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x10001}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "eada5ecba9aeab3ae358b561ce6db8e2f1f47e2260da177ecf6dfd9fdee4ef20a2755729cb4436edb16bb1d37a15cb"}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xae36403566b2b160, 0x5543, 0x47, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x6, 0xc, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0xdb4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9, 0x8a, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x8, 0xaf}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0x8, 0x4, 0xff, 0x4}, 0x31, &(0x7f0000000100)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "1357e44493a78c5493b22887bf921270"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x19, 0x8, 0xd0, 0xb5c}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x8, 0x3, 0x9, 0x2}]}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x410}}, {0xd0, &(0x7f00000002c0)=@string={0xd0, 0x3, "bb5046b7889cf6a4f92767e7ac2d6b2ec6d827ae86e551da9bebaa056fe90473536684e9f12bf89aba4ecc7820d916bb873ffccd4c54d401a152ed62dd5cb92f260d8b3354c4bdff9f32ad067906e9ace36c58e00d4439f45650c18547e961ec8f20f43ffec6bb29217995560a8c4f1ed71cf18301b12ba6e2ba1f955b40cc54d00d30248173626bab95840b6566666fae2dac3687937e9e609c6d084d0dfcf916e0609f78a39a5356c25ea4468e081ff81b0b17d40010c197ef3920df76364f34d9c615f34b1c1e8c879c8f1941"}}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x222, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc6, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x882}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x5, 0x6, 0x8}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x310, 0x6, 0x3, 0xff, 0xff, 0x1}, 0xb7, &(0x7f00000004c0)={0x5, 0xf, 0xb7, 0x5, [@generic={0x91, 0x10, 0x1, "b521aaca53b241e2d2be10384145a9e0a292f158acb9b183ff3f1cc6397bcec87f33d873bc7cfdf517bff8f409343ba5e3a171f88847968458a9ce7067662cc211c6de1b0326610638148fc834ba0a4ca943f7a1f2a1bc544c9be435c51492911a853815466a4f123820b86420d2f527fd8c214a9eba981432e6067d0bf83f4155a936f1e43862cffabbb8810500"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x1, 0x2}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "f5a189154dd7915e399ac339ce4cb8b2"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x437}}]}) (async) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) (async) syz_usb_control_io$lan78xx(r2, &(0x7f0000000840)={0x14, &(0x7f00000006c0)={0x20, 0x2, 0x101, {0x101, 0x2, "390ffe0c5bbdc21a9bd69647f1cc73050802335bd5b68ad5fac186daf23db01e13e539e398964380eeaa88d2c63db75304dac5d9ae7bcff83ac1209fe855d5240332e96085fc2b2b8ad3e418678ac3566f899988dfc2181c532e3adb42538a39c6ba6f16752ae20583c3f5c3afec78cd0e47a171a9179d80eb9e85f598fc49bfb43702806f632f4a991e44b59af9b3ab89a1d061bb9ee59b383e11dc546de7cfbbc8429deffafc85c665e9dc001a6f79fb78e860b8a89071d653b1d7bb04044afb7e7ae80ee917b85f3d96c043f90b23c8d35ee6a2929fb9aa554a6bc264d4c068b7c5b03c6023c59c7f8084f7e788c268080addc18cc3e3b13b337665315d"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}}, &(0x7f0000000ac0)={0x34, &(0x7f0000000880)={0x20, 0x12, 0xf2, "2c8be3edebd08e6ddde0c93be1abf91efab5354473eb3a9f0ce8d4e9518060f36c013ac5877b4a34a4f94377ba9de2ebf7cc08cafd67b7ca3fa7033aa9944874a2fc1c31affd4e7e5e2ba17b67cdef100f839995e3c3e6a7e07bbd14119a72070019f618bdd35d2f7da747ae2c949448c36f3a294a75f3a71b82eaafbc41b4be6b3e255204a1422165db39f2a3821bf107fc24cd65c4b73b6473e38c827797ef834dea993df326b906a5304cb553aec08d7af1d22dc8861dbe00eaf325bcae1b50700f0c763903fef82fd476df12a1d4cc9d28f83bd5ab8f8dad3bbc208c426eb7858ce3b0535f44a5d4de7d96e48b3c3816"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000a00)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000a40)={0x40, 0xa0, 0x4, 0x10001}, &(0x7f0000000a80)={0xc0, 0xa2, 0x2f, "eada5ecba9aeab3ae358b561ce6db8e2f1f47e2260da177ecf6dfd9fdee4ef20a2755729cb4436edb16bb1d37a15cb"}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) (async) 2.648345975s ago: executing program 2 (id=5043): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000000)=[@register_looper, @decrefs={0x40046307, 0xfffffffd}], 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000081) 2.503735106s ago: executing program 2 (id=5045): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) (async) syz_usb_connect(0x1, 0x45e, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0xc5, 0xfd, 0x3a, 0x10, 0x83a, 0xa704, 0x3b66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44c, 0x1, 0x5, 0x6f, 0x40, 0xe, [{{0x9, 0x4, 0xf7, 0x4, 0xd, 0xb8, 0xd3, 0x18, 0x17, [@generic={0xb3, 0x31, "b36fcddfde0bb8caacd6f704d7a94945f71e8f19ca2fb19e7a6f3a71906450fbf6ecdb7134714488db48bd7d157badf9a8001185816f668ecc475b7f47499a191b9182cd26862c2511e978170d69925f3ff645f4e83a94af075ca0cce3ed3fcd30572343f938339e5cd009ce340d98d0403f76cbfd39c9b072d8a9c679f52c00a420ab26fa64d242e6bb81b46687f7efa4f97f195457b2b8d0b5e02109af3c57a687e4689715f4df525f3db20b7bb89f25"}], [{{0x9, 0x5, 0x0, 0x0, 0x20, 0x4, 0x10, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x6, 0x4, 0x3, [@generic={0x58, 0x31, "db9b67cccb6094a820f4e6b42717757ba4f6338a061472bf570b813a21ef84065e8089e6d6bb59c44ce4435af1c83b94fd43be2e2f46d0516e477c76f260aa06f589241f765dd34021720e8325727a95a47e6b440ccd"}, @generic={0x81, 0x3a, "e7f8dcca3078651ec08f6ba7eb19d64a32a8e0da6c76430ee86a9886fdfc6bee821df0423299b436017b18b102a61fba49d191bcc22cefa0b03a6028cea53161aa1e8cebfcd4e29aa0b63ec15b9a627227997c6505ab418a91d3acde0f40228d34c84a0a0195f4a059551ac31ff9de35337377f4b1298b44908edfe7551b92"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x45ec1926d0bbd5d7, 0x3, 0x3, 0x7f}}, {{0x9, 0x5, 0x9, 0x10, 0x8, 0x2, 0x8, 0x7, [@generic={0xb6, 0x7, "a263c6f35b2d26bd41ab3a2e5858e9eb8140509a3cb8ee823097c158f4b24dc03dc49a5ff83798948d8ca86c7305c12ad769dfe848881b5679e1c89aac1866e4ba0c7ef5d35e0bab59c96048b47d0e75b3eff2bef0e0a1dac1ab15de1e85721bca75c5a1e2526ad1c63f05d5460aba6f40f3cacbda6e58ae47addf018c9d33720dae87912c10030cc708bb42bc2d4e54d157739397a3f9666642d996fb33a9962e1179843a4849f2ea0ebae9f6f0d74873c1e905"}, @generic={0x8e, 0x21, "cce5c058c38ea80c1c3d6da6568be9b03905e2b9eed45d739ebd008939d98c207e058fac27bcafbfe071938602a0071334d906bc0b37c9ae205b1d0005519376e5581e288ae3066869f6d221642ec5e34f9d5e25463972618b33df90240d46f950071a67e42f260b4f785c136633e7dc0ec1d63815423f4aa457c05b8941b48be44ea128f6a2c97391687d02"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x4, 0x40, 0x8}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x9, 0x6f, 0x6}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x2, 0xd, 0x4, [@generic={0xc3, 0x10, "c81c5f8526d1453ee74c80e160b95a5fa6bf8d01d3785370f4ec4336f6deda4704b3f3452e41f949ce8ce0130c5f3ac8df6a5c4606c64ad908aa141b98f3e95e9a91e224da90cbe2da9ff21f4e562b25e51dd4109374b4f2441a2949400014b822f012a05ea7ad3a0452fc5ebe577d5c1a1f5e66f4bca4cba4b8f19cfe567afa8d75ca794a0d3234a67b1e45ee2f7696263ea474f283594bb5d82eb06325e85c29a472c9a30da28b8d71067b7afd54737e56208885faa7d00a2fb1fe34b57c1eda"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x7, 0x80, 0x8, [@generic={0xf, 0xf, "f02513b49d666c496da0992626"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x40, 0x4, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x44}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x784}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x3, 0x7, 0xc4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x46, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x3477}]}}, {{0x9, 0x5, 0x80, 0x0, 0x5cf, 0x0, 0xfc, 0x6a, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x8b, 0x10, 0x8, 0x4, 0x3, 0xf}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0x4, 0x6, 0xff, 0x4}, 0x3d, &(0x7f0000000180)={0x5, 0xf, 0x3d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x0, 0xeb50}, @ptm_cap={0x3}, @generic={0x2b, 0x10, 0x3, "b7861ef642af734b0c512ebdf3323733fcd9db5c1eed5f900dc284ca0e8dd6e1eb764c197a40421e"}, @ptm_cap={0x3}]}, 0x1, [{0x3a, &(0x7f00000001c0)=@string={0x3a, 0x3, "2626077cb0997efe54c17a40b9e4d08fc8dd3b8934d24d65d8b672f1311fd2f405ffbdd4b930f8fc4d7cbc24658ecb68358bca086b0954f8"}}]}) (async) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.645783804s ago: executing program 3 (id=5060): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40b"], 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) madvise(&(0x7f000047d000/0x4000)=nil, 0x4000, 0x9) (async) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) (async) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, 0x0, 0xd2236c07cf4d88cf) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) (async) timer_settime(0x0, 0x1, 0x0, 0x0) (async) madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}}) socket(0x10, 0x803, 0x0) (async) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000600)={0x4, 0x200, 0x45fa}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r5, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1013021, &(0x7f0000000640)=ANY=[@ANYBLOB="66643dec8814e430df2918a016ec5e56c42606993cc1449fa1a9a2cbee7dee2cef0ae3b28fde9391ab6f59650f12261597e331a99a5dd863989696a9b2e05b57b6a3af0ec787d6e766f4e66547b6ee76f67219d4f960f1026be2bc4ef08ce834cb0145a5c244d3b1f9711b937111c44ed2110269aeba39c76434c572f60bfea62cc3b6d5e198b42c13e0670fb70a3a30a25ce995610fb4d5e1c082c26b304bc17e528f74cdb574d04f62a86ab3174f9b184ec6eeacd37183b9f733e3dfd318046b8f5d628ff3db", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r8, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',default_permissions,blksize=0x0000000000000200,allow_other,default_permissions,max_read=0x000000000000650d,max_read=0x00000000000001ff,euid<', @ANYRESDEC=r5, @ANYBLOB=',ro,fowner<', @ANYRESDEC=r5, @ANYBLOB=',smackfstransmute=,euid=', @ANYRESDEC=r5, @ANYBLOB=',dont_hash,fowner=', @ANYRESDEC=r5, @ANYBLOB=',dont_appraise,\x00']) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xc9a480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x20, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0xffffffffffffffff, {0x7, 0x29, 0x4001, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async) syz_clone3(&(0x7f0000000280)={0x100000100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0x0, r7, r7], 0x52}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) 1.05800812s ago: executing program 3 (id=5063): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x1800, 0x0) (async) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0x10000) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) (async, rerun: 64) fcntl$addseals(r1, 0x409, 0x7) (async, rerun: 64) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.05758473s ago: executing program 3 (id=5064): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) (async) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="5400000012000100fdff3f00000000002600000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="010000001100000032b3e8712bb6d6eac5708553e4ca681034209423b456eda081f35013fa85f081401ad08ae10ef485f8423e207ff01771eb92a6b9e0f13b49eab93ad492c97d58757a938519157e4e31d8a114bc2869b2a8ce9640513d0ea468f1793d606b7f514228978e1fd9712e202dc5e7fe61832600a8ca272d8f7c2f902a27088646e643ec98022e64b7971107c6d0b147c688a50af26ecbf41c0478963d8e78a56a6b25f60fba15a5656b861c728946a2cb343e772e1c389e890cc0e3bdd5f0bb7e"], 0x54}}, 0x20000010) (async) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x0, 0x0, 0x80000000000000}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00000524060001"], 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) 1.05633034s ago: executing program 3 (id=5065): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x48801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f0000000000)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) r3 = dup(r1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x82f, @private=0xa010102}, 0x10) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x40000000) socketpair(0xb, 0x6, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c014}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.02238392s ago: executing program 3 (id=5066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x0, 0x7}}) write$uinput_user_dev(r1, &(0x7f0000000380)={'syz1\x00', {0x0, 0x6, 0x7fff, 0x8d5}, 0x27, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x80, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x8, 0x9, 0x3, 0x2000007, 0x40000, 0x1a, 0x26, 0x4, 0x6, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x200, 0x200, 0x1, 0x1, 0x1, 0x7, 0xd, 0x11, 0x7, 0x9, 0x80000000, 0x9, 0x5, 0x0, 0x800, 0x3, 0x8, 0x7, 0xfffffffe, 0x5, 0xc, 0x24, 0x7fff, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x2005, 0x7, 0x8e, 0x7, 0x80000001, 0x9, 0x3, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x7, 0x1fe, 0x7ff, 0x7ff, 0x5, 0x9, 0x4000c00, 0x89, 0x7ff, 0x0, 0x40001, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0xa, 0x0, 0x4, 0x4c, 0xc, 0x8, 0x5, 0xe62, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xd, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0xffffffff, 0x401, 0x80000001, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x1, 0x6, 0xe, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x10000003, 0x6, 0x5, 0x3, 0xc7, 0x2, 0x3, 0x20000, 0x2, 0x8001, 0xc, 0x5, 0xb10, 0x1e, 0x3, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x200, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xfdff, 0x80, 0xa0c787d, 0xffffff4e, 0x9, 0x6, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x16], [0x10000010, 0x7, 0x7, 0x2, 0xa5e, 0xfe, 0x8, 0x8, 0x80000000, 0x0, 0xe, 0x2, 0x7, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x403, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffa, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x1, 0x1, 0x0, 0x7, 0x6, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x4, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x0, 0x0, 0x8, 0xff, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x801, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) creat(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b000000"]) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000000)={0x7, 0x0, &(0x7f0000000300)=[@transaction={0x40086315, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 998.767831ms ago: executing program 3 (id=5067): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa41, 0x23) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000680)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x1814800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}], [], 0x6b}}) pwritev(r3, 0x0, 0x0, 0x43b, 0xf) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xffff, 0x2080000, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x68801, 0x124) pwritev2(r7, &(0x7f00000000c0)=[{&(0x7f00000005c0)="71eaedc63efe", 0xfdef}], 0x1, 0x20048, 0x6, 0x4) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x1b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="f1737118458723aa6fad9674b336ce0f0e4f9a590af9cbc892ffaeebd2c1911812584b169f9691cb3843c1544afa9da08dc0efe3e6714bb529f3285f9633156f21460f0b19504f21e4202650e68b3cd97a3824ce159744f16e07623a38f6077b995bb70ca4e6ee313fbd9937f0a8cd1043a853b5ec18a6add5500124870643635a47134d5f346d2ce498528b289030d689ee4f1933955547d7a1a02c16d1323328f83c6e39efa19b3a4e8e2acb7d446ec70955b9c122a881df65114e309ed9605225a19a07f6df3a52599aa974975a7598fd5d8977a4083422a83d795e95efd11e78201892c1a667576f54faa2b090f363c5c6c58d64e62332e935aeeebdf0a580617d12f4dd957d13d21eafc3987ae43c0bdb0571c290227757115432768af7581cfa8bd90a2f0c85aa43e6e7496a6a1d16636eb153961195e194707bfcced6b31cda93d1d82824bdcba11ce636211e6a2d8fd8b49abcf68e35d4b5b2be9e08570d89896359bbe3fd3fd8df8d37d6f34009635b6f14922e0e13938f591e5dfd3ee64a13d1010109afaba564256699f40d4af9acb29f57cafe956852787e5b1dc0c6dc61314cb51346926eb41a252a2a44066fb7c38772c55f0caff0da346821b1efe13669272b084972ca5eaa678896bbbd2194429e310ce954cf3de048ecf8843b82acb61bf7d1760cda8f0f8d781f207c0b81c655b52c41e8b2070a7ef45a8e1ac0070709f837b2b78ecb7c50332f1ed5c1f9a369548629b0f10457a7ea478168fed1f0c261921e19ac478eb8e9f703fb6096925b3bfa6d3d60bf712220ea5f5a6e9c33ecf653f40849eb4610ed32c7d3ee443aaa6aed33dc590d8133e71391dc45d560d7442ba325aa88eb81cdad58f16794832f214de3ac2aaba11e4fe94b8c2002f101e0ca72cf67de89f6beeabe2eca30841cb62bfcd70b3c973bd6bb3b1d5612fd02c03bea24e54edeb558d656e494f2f9753e241ba8cca7ab22a0c386fb13139db2b8b182f9449f98a745abca05a5ce4f0fd500584a975264eecae3decf0b81c9b0cb16a53be0f7cd101e75e6d355b6410c62ce731739f06141c1a0185dea457167f1f07acf137d854eedbb63e3d4812aaf8bd89dc405be6a55b08555bf6fc8f082a3a6dfc359669bb11c8245def27675f9f7843b5b930bdc7e8a086f2313f35739c29369c1380370021583af2620fc001a0f283d2ab738a936b56d9444e5e321d0277ec0528c1ca6fc17241f6de1b797f0f9bc83b47addff767926ca527d409eb23ba7f8269212f40b886d00affad255871275ac0640e2db57cd710798c29b09ac4074f69df4f172b95941e8caf60aacb9f84f71bfd9980c7dbdb0e3e06ef74bb4593b63f38859de8215e1cdea56832830e1c6c416889dbdf5a58492151876cf501884abfdafbdb8fde2d82dd77cbd20207ac9ab0d8e5976292ede3bc3358703f720a960e1cc53158b6c05a68815aecce32d51fc2abfedb2ed709eaa45193da955b7d44b6722af26f3ec6c437653b267218f8cfbaf013aae88a9a0bec88aa9916cca6e9115eaa299549eaa847ba5d9490c65037c1cc94281645ca39d6f2d2706f952c1e0cbf53389dc66d442553e894c7656512eb157e3c39144988c1e3ed27af98318d630fc0896e96d7d212ae80f9bdaaca8e558e6033414f5e8c86e4b2ebe4cdb077ef6f286f3c98a9545f5dcfd46739a745150ab762459cceb1d2e9f56e2f1e59c741c47c519da2a15a14b75f1266d023ce78e9e29782e6b616deeec488408fa53962bf412937bdf63b25c469c92867b145cb73a46f88fb81df683e979bfe15b65ed905b6c0eceff85c3d0b52efd411b3b512d897775b64ff301ba9cb2618595af4a40c95795f8993aa34f13684d7e56101fe2b9869df1d6ca3c4ef81c62323734c8dba6cf4bccfd9074147ecbb5f43b3e85cb064ce45af5b6086fc016413afce0d38f9a4e916e1fc08772f158d791d1ef86e58a60893962bb93b21e2e0cf01c35158718f395df1489767e94b4cb717dbe73693cd98620f1dda1351e40495e6d166a1d5b56054a97a40ee86b4b48cd751831352e9bbda8361eda2bd9fecd6df15ac7dd6c51723c7eeb58ffe63746dcae6851eef9473b9200f4681f8b14a36215fb6279a19335009c6b1068c042d0977ea75ad60ed06961ede6fc74f84f49d3fb72b251a8acff52d0a1e8ec8e9632b831cd24c62867eacb7ee36532c801e3567d7f2fda8768f98b981ddd583dc4e3424c59c6d2de874d3a7c2b4fbcc6e3b96503020ecea0728480ca04a2b90b183ddcfbe34156341df97aab3953aa9b81c3d69d9b20511e1cd850609b3f1d1e8dfa6e8bf90a927d4d3b010dca06a1b09aad8f661c56a895b15375a6a532e76486509b7c17e516c2c67b3f80d3510127252096df0fd45e0cd62d24cb7658460f674dae61e932335fddba62ee35143c1071459a8f55e42768b777237d797418b5267423bf1f0c1fc130e2b7d40a0997d26030c9f485994df68f30a910221f502f26ee500bfa54487dd6a82ae964da5b967e8eab9ffc9d4d5d0199f4f633dcd9713ec2e4484cc25dc7cd06cc3eeecf874270871854a5e96c8b424214e1202edb23ef6fe692640ece04ff9665ec050bcaa0c1ccdd96e285bae472032d9e2f889559596a357a5fb9481599013d9dc0888c33cbfa9941e9739cc342ecf9ff6f0a08d898c2df11eec9a9c994d227436156dbd07f128f1ed53ad4ea1245d43cb1191a0afd18049f86ff0f2f33a22a40e3f32a04c7b888d044f38be60e9379cff5e7cfcddd195cd465dadaaaf03123dbd3e6195d50a24a8e3479cc82f14cd92375a80594e7031789153a6f88f1f1d9df102c9247c1169159d4a724125710f6404b899e4b9dd1ad8867eed6267db02186b1583d9178845c667617b09f82203fcef74d45a7de4c04c4d131cce81aaacf12d05eb6d83facb43e102a2fae3a0985b896edb6be894c3681a594e3b3c7d543094a3fbaefc75184e1f5deb061390033d0fd6dcb0c70594b85f0b9948a4ed3f1139ba381e5a22c65a72cb061f515ebd2df85ac162266832b6665af9c04ad0e6add65a1d209bcef3f5e41c95011c31f6a4421ba939fb3c15ee9e4a8195b374dc1008c6de0fec3631b06ad559f82b4b36c2fe39cff4341a3b46b119b27a9df883eb3229f835190b3b6f7f4b7f9f7824191bf1af104a658bf2d4499c7f619bdf25aa42917599f42776933dfbdcf20db67987f11f89019985d93a93eeb6aeb8e9690c9924db1c36c34b1bd5cc6fbac54a17b98def767a5de26e64698a9778d59e50e75e3345eb7ec79db59a8f99a84603d274986e913dc4d626bd44b2fec6090f1de8fc22ebf16ef5340bb1af38b72e370e565289a6ee1de185d7f353e5b860963e998aa58044a9b1bf847233e16952342ca24f07415c0a88675b26a89782efbe22ac0af0def87aa7ed8d14fd23bdf46c2f08b0c40c4c179a282a46c0fcd50a8280c7050eb5a546c9158416e9f8c8b5e64ecf18922c73968f8dd7bbff56a3983f2502cb76fd0cb3ddbe59ddfae5e6a95d887adbd2b781b136fc5a5c19e808dc9aa84f315f5c184b9e7dd037e6db1085f922f0bbd442156b84616f033efed03c206a87c733cfc57d1202dd89dcad1787e076686b1621a8fdcc80816973771ebde777c4f7ff755b84728b51bbf652c69da3308841ee8c946ba0302f09318818c763a1d38751930d5f2debc407c7041437087322a1960795de89ddba8aaf11a082305f696be662be7653a7ed397e5dddea74932e1e6f000e2969fdfc979ef263040f3559a83a64c546c5cc585dd9a38b238819ac1ae65cc78d3e0ff7e66328503b489cb3acbc6308c13fd8477831d700650dcf909de1cf8caadb71649fb022adb5e4f7887940a076966cea00a2c21ea802455d1d6d9ce91364f69414b4d7bb30c78ffb5ed4e8f35340b53ce066e11af44ad34efa6ada894754617d0c2ab97c9e9562193bb799e42e4bad44dc445d371a1b62f358b19727f3efb868c3f73c473b000bdba882634b3ab4393c0fdcd902ef42c6f369740839dad77756c4fe2b67ee95c34d7329b77880cbd2437e2ae63385df40eb92e300632c8338688fb2be65bcfd90150c577ca23e591995a386fa59e6faa9e9dd58e250c0a0d4c81177d0e7337c3b6be151644a8ec5c71f888c21373876e673ddb8397839ab7d83111b4c9fac9a416105cef6d7bbbcc149c1a72f1a568739aeff4d43aa70ea4707cbab6dfa37a693a74a462e26693e6a6fe398711984e1d287469fcaacbaff0db800b94a450e6624f1680e3c8553bb4273b901d895aface688bc12e1350aed78df83b153c61586dbaa53f9108fd00069e593f613823284d42121cde40d7aadd98500cbab00cf593075cedfae93ebd19e0246beed22f0988886a77b49e50c71b0838819b4e1ef89eb1634b8c020856955578ebbc94bfde7c8b409576bdce4153d4146bd29b66fb639c8a2c6b2d5d04e9605e25c6fc5edad73f870128915a00ae9ab0f170e0917ce627ee1ccce3de5332c368417ca9784d6acb3adcfddf8b62f05f628ca044a0e9c18ba0b2f5b46c76787418ad81f60c6a50d7402abc68cb6458a8bd460b8cfac86d6a31ad5a00210d49234313a093bd4ac39c1c5a9562c4fc33c66f7729ae41d84273c3f71049fe380cb6615ea5cc578867fc10c4e5b041291cb3a6a1c3a28c0f839aa356875ea064ab5c057c588642b23466c4835b89d3aab81de754428b138278c5caa627e5aa3e797ea27c2da530314b65dd35bb8c1f8d265a2b71e6a1dfa7093d75b907e9d35b1be90fa7934b93cc2d8e5811f421774e6e66182483867d15ff0f47b933b8a18815a099593f443d1d2a9827a49fea6b598b76a0d1ea3aac5e9791c8ad36db3d9d936e977e819fd4beeb1dbe2ea06a9156c99f124bf7fb93d48142fdd65486ec4987284210f0d9a194f87bbad0b8277da0fc016f4393ddc6e66ba19cb8f5df4e5dfeb2e12ceba9fba5670b3fbfd3670b2f59ca3ac02214cb800082b1329f3d4f216e2c4f328b9d35b0407f4e478f93e3b6103dc71527a095fc9f7858ff32616b0e3eb8cd1893690a00a9738e78902e6c44d42816bb5bfb00aceda90b2665c21dba51b6576e66dbda31abec2fc651f2959b1afa8a36217d8c928061e6c1fe11c8d3b561eb48fb419bad1094fea3cd5897abe8142425e3f4a40086d2cee919f1227eecc8a67a5ca6aeca58112c25fa0b637f2066ac53094b3ad1248686228ddda88539afe18ea4194335e601097c4c86a358a6ccf033cca09873704f694b31a8c126ac428acfdfb7d90f5fc1d8749322c73f1d9b9314ab57d4043083a825fe162c66015a273640f1b79d26f3a3c4494fdffdf7aea4510d7d25e2cd55280ca3b2bb3df2c20cb6699a61364c3b5faf122a9f4080d0b9f0772b86f73be13244fbfc095c2a29ea490b340ae6d3dfa31468fdc5c4b6fcffd9a58e32786ada21e978b23bb568173cb74f1846c4480903a0892abf5080c12e811da8b41ca46ee43f0f4f2aa1527b582f037906f48f9025cc71403be4875b03afea87501f48b3eb86016dbc4307ed907dac26a7d8674a552a73ec9cda9cd41de8057028269022b8540ba54adcfec3e3daf83a7d853602bc41aeac6bcee06421c82f83c14c725cbb10661fe1bf41b574837f5f6cc502c8605d6ca8f7308dc4660e565dccd81fa77b0c2c35aadddfb6f5d259e874ff9d5827480f6a70b7dca12c1170ec504e2fefa0d9a087ec736c8f2c26f1e23b11008b84c976350884dd050d03b2fd6ee3784a12b336fe742768c2e0a9c918c07f73f5b2eb6b789c055d9a6d7d27d11b76876f9798f4b65ac4769729eb82a0339a84aa9af45083e19580a2d85ecb1a994747fa3ca3ddd84b2d7cd0f3ba1e5258f59bf3b573d2f3063bdf1a9080d09875a56ce890572ddd4e799d54749619f587f992d72b7bb56eb2906b1ea8eb78add294817271baec90a6ed91f34283c3e0a1d313c0e90947a04164d688fa045884ccfee71cc3ba53767f2030ccad1c09cb31d1e071008869fdcacad466db57782360f398d0b17a4f8e27e3f8333ec3b4042824ea4ccc76178fb5cb438c0aff1e93ba9986237ab426b7efa966be2fd02ab3213750396cec5f44df923f5cc3f9c68955ab606ad7b572375bb4c668d4edba8c0ccea550bea5d5fd3e92c2fcd78c019e1df0021c1bb00198df9d6084d0ad6fde6f426a2b34e1e7d4b352721be93668a88300f0acb63da70bc1d3588c5942f92d50e583a6a94ece7d18cbfe35c06ae6a54a94d6cd37b16fdc4f3065c9639cb5db7f498510fcf855f3a104769c2d19244b6ef2d4b3c0a42ef0241aa8a8d6f804bf711a9d8512fae4abe127aec074602b78fc4642f7fff959714293df2fb8fd7e5e785c8f0de835fa8e5a067b347c98a359ea7985cbf802f62540d2b764e3877e1ffcc73dedfa2567eb68c3b8151b4434dd2bb947a2a0d71c626cb38e266702399c19f09b426528609186d00e87865f53ebff94930c49d20c41032148b3df4259324f5773c1c8435e6968e9792d762a4a87642c75215cebdb80da1d48b8cf3075769dbb482a642b1a714fbc3e8c96419abf2d9e310a04d468d4471fe19f41da18a3b9838c74762d72af909fd965900b3f6811c830955ae04d42a4808edfdf8983a624be8988b8a32a0ce2adcbd2478a6ed05207b91da8f1afb0b7189c9f87b0ba58e5f29d6ea811280f86a4bc8106a2129d07b915da29f0d230d95df7a27a93b2836d973af86bd2ec5fad21ad70af8896f404e5441f6416124908f85befca958e2b537d50b047ad70a8b5acf160505c3450b37e3aafa8e6b50dd8fab7fb98df24d6b13e7930abe7785dc6433c882bbf87069a000d5ffcb99ee0b1b79cbba4902b85bde0069394b2cfd70bd887230b5866ba25e728253b17d2854d601cb7f12b2f72ac4f784298747b904b1eaa52b7edc42f0f23dec2de8ae3091bb57b6e5dc1f4bbf67ed79ef764184867877ca49907646e4f1aee642ae865ce645707ae524b974c36b719ef3b30dd8bd4677d656be027a09727daa538ba3b0aa942329b80b769de13bc32edff90c562022a3385d5ef583d59d59f53ac4f1deae3de3016c300cf62838a60bf29f76debfcd893b80c6138fd17436471a9dbae3b8f12ea110d6464153d89f54117ba0ab44d7f948909efe0fc1e28301155759e94c35e54c758551ca66b51044ca98d92963586ba2c5bc358201cf33578290459baf1a672f486aa1eff62290df694f747f9e72ceb185448ea16fe43acfe958bd810a9c33d6baa8977628163d5224aa2023b49057638fc25095a2cf3f1191ab5d6e744da451255f08add20aa6544eb3f1b69d92a3d02ceb1adf4508a8a217004a51c69af3b5ce7f33ab3c6c2dbb6a78952cdb8dd857dd99dd2fc78acd876da17b1b8a91d1f4c96e156c55bdf513ed0522c8bc7e8cfc8dd1a76977c45c636c168650d82e3ca7560ee9312c1e54a15811fffad89bc44c0210368e12bb320ba9f763a116c8ab7724190075cbba1cc1d15d4e790e95be4329c7c35b61cf6a69e32c66ac2cdea1e1c39c347c5efbb96d9237d85243880df5b696bf2235f802c2d3d7cbd6cf42d2834bf0d47c5b856eca14a166306db9e17217d1c9e22e5a748720da74050f1421cb6ade2733d934ff3f4ac06348ebd9b248dc8dfda2be1bb137d09ffb0da3500000e1820fcba98a5249c0192129d2a806371d2dcf624dd2e0962fd8920cd2176e5e292fa366ad5571d1fd440dbb0f4f1d246b44dad609aeee816cd7a0e9f2dd49476a908107f4bf1ee71ea55a8fcd75470d63a5a1066e83aa230c9b35c484142572c89d2d66d1554e3be9adab0cc94ff88637dc45de22caf4974fee6ee6305906a970bb94f9f9845a25ceb7c020e78e9f0235369309e84954604d751de90d31bf764e9065a48724ee3a62ef8296ced0170f40c9201a09b8e0f4329416868036996a35b39ce75aebf3f5525aa68b94487e53596f70b5e091dc8957cf952f319c6b02485e132dbacdae8602c185c8ecf86cc26a58dde9265c46149694a9bf7ec12627ce2e485457de508bc0b9b96e560ef2d5cd2704118aece1e4ea15b4c04449c75e91bf0dc594eeb249e5a458307fa0d8e3a2a7c1035ad8155b3aaac508574325d7dd02bb02ec4701132b8cfb558a5a30c919cb2633c733c0b0826c13cecd71c66c6c7c43831104e7f8e70e51d36727e4426dd36c726f7a07653c240f71a7bcf5b6f56b77824a50765f1fd50b3a6408a0e4334deb5c84b71bb7c739c35ac2c98358604aa2f8c7ed6d4165704dca679a2e3d47f609dd78d3885a50e9305ac50b776d0e29fa4c286e6a4906328eef1244729b8a6c41afa29ce7adecc5fbcd443fcfa27c59d54c6ffd53ade6a63893b4efdf94ca0bb974ed253781b2697da2979eea306e9ed53ce4efc9d85c7ee6ed378cc6ecce8d508e5c6a9134539c8088a138924ec6a1935f96f9a6f6864056128a35bbef306b913c100965e32459b96754a16c33c1c9eb9a385a17601badf3a0e2098bf255cab5791ead7ee1a3268aaeb59a6b225b1986dfbe297d90d9b395f676d3a8e38a2bde9165f1ab17c1890b23eac5760d62014a19c7e15bf4b939ef1ec0b4e160fbc031813138d1d336c0cefe17bd501b84b455d01ba3ae2a6d21b990c009c6e6fe1151017c721079dcab44c1de8d0cf6ca655cdb32c70f72080be5f99abd81af3954082d072d05aa277528cf4828ede3572f663b23fcc2a655bce6e35bd341f4d91f63cd95c46da122f49f45c564562e252fb03099db6f9a7134f03c82ae9e2af98ea8def5d5d40c7c62f56723d0f6fca05b64bb6a406fe38f0a1824c12f8bebae475773f163830eb61b6f97bee538044d53895bf9ce8f68b4aa12a66fb163d68cafa301f67e6ebdf4c55d627208315a20ae2f0d477f394f9b6c94e0adb86028595f3b11cca00e57b68e73da304e324a9297f17370184b80bc29b98ac4b3b918b5330494e1ed3c96af7e423651e69cce63b6c32dd8324c0d6022165958588669d6aae81d03ec64308680e087029676235341947216646af7783e7eabe9c2df6ada36d7cc453a2c3b96078d9db69064771ab0d6428d8d8c258f32bf9cc7e90d1131328bfae23fa499d02907b9acdf2bb24f8c083baaf305c31160cef6eff3a1ae243f0d29142235b073a19fc547fa0bac54f3dad14d501eea3f0b5207bb966c7168e1fb175841fe4ca98ad75c6480d208458383b771450179a4febf14779e7a021ff6d87681215041d2225caa3549f1c26551ec97e1b056bb2cebb294ff48f4ffd7812c7b77d8a38cec1be54629400736c9ecbec21b639694980ca10e1ffc2d72b633c4117ce5fb7fea75810e2c30f78ae290cd4cef094d5834932f244fdde8e299192fe1db4713ff23ead0cbe3b38ad1836d8aa646818d3de42c77676abb79f05f31d2fa63c17c3c70835269716fd0417c1440afada13ed57575165e42a7f160475c32177b6f50b2e65e20c74a27f481d5871297ae805a11bb99b9c7b373c629c3a08d84adbb6ce26e66329d83ecfa6c03710a3ff013a43dcc69ab3a72c99944f05d20e20e530a465f57ca9a309989c3a0df1d1f041af84409906e333fa685ab17b941297bdef6346e34448478ddbcaf31c0376251e0cbd186d26edf58c364eb511e30d26dc5ccd32e1252d665e645954b4c3c96cbd7cc3296f440b665a53bb57e1160a025ae725ca007945fe347f06ac64f9fcdd00c5eb01a0d1bf0cf9007742a9592c3cb5db7421d9205a13c71281990b82667510496af5bc8db8e7453ebd430be8f474644e943cc6806b7a59d060c8840a54312bf5238562a1e272d3a88857480a9328cea37de53b7bb7844ef6655171a8a1a49c76cb0e50cb7892fc081db3cbda4268402b0e092ac10cc5e39a7297b6812a3e918a2e510ed021c605357c4a2eb3d5f7a1c5f3a4559f761cae740b3f5d6afae6f9a7899791ef492733dbabaf62cca0f4eb8b4d87d015a1b126b58d5371fe4fc1c81a217a53d3b24881a7bd0de3ef94b9487a14f831697a6c9547fc9df2bff8e228caffbde702a0e7cd267be77365394e8ba2475bd6e50a54737bd713901d8d1f53718275b6f1c1bee6d5a00519ec610ff305e20d276b7413ab1527cd6072d84842218d43dd026f4ea31610faacd33ae4ff49172cb410ef4ce8b8ab5b0ef70aabaecd981506d6616b3c30fcc405c5222291e2f3cbde7383a6814b56b1641cd983bda427c6182ebfb462dd20f7e46fc55516db690abc5c8ab4caaa21548c763eaa80140a51d1a037b87c829f65b4e628665655513787346837c3094d3d8e38aeaf0a8f1d4bf6ba84a09bc47980037ee2b0dc05d6ef7a9d63eba77cf803218b4689fa8ca706236d91d8ed8852c75c4a492a77964107dd7cabf1172868f51e87ee96f38c56da92e511a7062997026f01e0dd13cc30f53a90a5aa7f696088d945557afd10e3e062ba1804bcce2c52a8a2b54b0eb7b865b9fe394f9ab0c8bd0890117f1bb01d4f331560014afaca39b16d98b4a40f536f690a69ceb2fc6bc4bd7540f760c3738770c0764a9fa3108c7119fa6492d498988e4bd496eb42dd60bd01a323e77ce4949c9d7f7da7f98dff0b90598e5e32c600e7724287c6e4762b7a4be4d69f80d125987444cff287ed2c3c80eba2f91450d0d13d1b9189dd4b24700917545c7adbb4d86aa63be04c61954821617c53877458c7ad3ed2970116ea28a4237e27a81426baf32f60f4c430c4dd63f387b50996d1c7303374725f2008498688dbb5a6e84fd8fe42b027937296a9f37e8f5be730ac7a0902bf1b1169f56c6ae7d9849c64c1e483b7d9852a19c255793a41064a97b4f5036b3eba49219e51f7647d652f310b386c47bbf758beacac9d4a5afa2fa84fb9ae82f6484698bdf8a950c07fa4cd3a720af136f52de4df29f7c3cb9aa71f4a6c7b14eac577b6a0aaff394ed5144a4f89500abb6b8b48f64c1f119628ca8a0cff11b12b92cec6ed71e3d99bafec75a30357c1e59ed6de22ffb42fe420b6ad863587c02d889de3fc24462c9a70912956a633a857c185a151e9922ca9365045ba275c10278736fdc5b221a41f207a4e8c878761a1afb7f9fa59eefa395a91b2d08344a7fa0a1518bc3a1b0d749bbf5a6772ffe8b0f612c5d4ee72eddf3007dd6f83403606ba74d101cf57a3881f78332666fea99e8394926c734f1bc3de5a8bdf5f486e5e557d2e3a4e9c0334cdad51ba2186dc58c70c117ee99a22dc14a7370e88e45d5ee35f4ddc349b333de6510a3b34ca558920e04808bed886638db09a07ca17b4709f56b6bd247f71c1dc7d888104857fd1b9f2c95f43604b48058e7a044dc3a0a46c344951865e9f2c47451abe215f12fb255d08775b0a977dab035cdfad6c2574e10a9b9c983fac90a7933d1e46acd260d0982a54151faabe6e0829b8a27bc9939a9fe65f538db514261be4e257a7d9b820143608560bb00351e67b35ffc90f288526e373453ec499ba2cb64b44c8149a81f742553d25be0689eb8f2ca48d90728e423636de06c64a5a0bbbb5da2a7c17521c09192230d3f61093d1fbd3a4d1", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001280)={&(0x7f0000000180)={0x50, 0x0, 0xfffffffffffffffd, {0x7, 0x2b, 0xa, 0x212a48, 0x50ad, 0x40, 0x9, 0x4, 0x0, 0x0, 0x40, 0x80000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x235f, &(0x7f0000000fc0)={0x0, 0x2211, 0x0, 0x0, 0x2cc, 0x0, r9}, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000000)={0x98, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 726.610303ms ago: executing program 0 (id=5069): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003}) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffec, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 688.825614ms ago: executing program 0 (id=5070): openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x400, 0x2, 0xb, 0xd6}, 0x3a, [0x8003, 0x5, 0x100f, 0x8, 0x82, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x3, 0x4, 0x3, 0x10008, 0x4874, 0x80000001, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x4eb, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x4, 0x0, 0x5, 0x4, 0x461c3738, 0x400, 0x7d, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x6, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xf, 0x2bf, 0x0, 0x8000009, 0xfffffff8, 0x3, 0x0, 0x800, 0x5, 0x2f, 0xc, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x7c3b, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x2, 0x8, 0x9, 0xb, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x4, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x4, 0x0, 0x1, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x0, 0x6, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0xa, 0x3b, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x5, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x8000005, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x21], [0x9, 0xbb31, 0x7, 0x80b, 0x5, 0x7, 0xed2, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x8001, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x2, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xfffffffb, 0x7, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x25b4, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000200)={"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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0x100000000, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x9, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x4, 0x49, 0x3ff, 0x5, 0x9020, 0x1, 0x8, 0x7, 0xc1, 0x5, 0x7ff, 0x2, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x3, 0x9, 0x888f, 0x1, 0x4, 0x46, 0x6, 0x10000000000003, 0xa3de, 0x3, 0x8, 0x1ff, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0x200e6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0x7, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x8, 0x1, 0xab6, 0x97, 0x8, 0x0, 0x3007, 0x9, 0x0, 0x6, 0x28000000, 0x5, 0x8061f, 0x2, 0x7, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x4, 0x9, 0x2293332f, 0x6, 0x105, 0x1e, 0x0, 0x2, 0x5, 0xfffffffffefffffb, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0xa693, 0xcc, 0x1, 0x3]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(r6, &(0x7f0000000280)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan1\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x40) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r10 = dup(0xffffffffffffffff) write$FUSE_BMAP(r10, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) vmsplice(r9, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x5e, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)=ANY=[]) 586.978444ms ago: executing program 0 (id=5071): r0 = epoll_create1(0x80000) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x4}, 0x1c, 0x0}}], 0x1, 0x24004000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) socket$inet_udp(0x2, 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x3019c0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000600"], 0x48}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2be44525}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 461.881005ms ago: executing program 0 (id=5072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x1000, 0x8, 0xff, 0xfb, 0x64, 0xc0, 0x5, 0x0, 0x2e, 0x8}, {0x8000, 0x2000, 0x4, 0x0, 0x40, 0x4, 0x7d, 0x7e, 0x5, 0x3, 0x3}, {0xeeef0000, 0xeeef0000, 0xe, 0x5, 0x83, 0x7, 0x40, 0x3, 0x1, 0xa7, 0x6, 0x81}, {0x6000, 0x3000, 0xd, 0xc, 0x6, 0x43, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0xeeee4001, 0x8001000, 0xb, 0x1, 0x15, 0x7, 0xab, 0x0, 0x7, 0x83, 0xf6}, {0x1000, 0x4, 0x8, 0x14, 0x4, 0x8, 0x7, 0xa0, 0x80, 0x10, 0x8}, {0x3000, 0x8000000, 0x3, 0x5, 0x7, 0x5, 0x7, 0x6, 0x5, 0x81, 0xff, 0x40}, {0x8080000, 0x5000, 0xf, 0xd, 0xf, 0x7, 0x4, 0x34, 0xda, 0x5, 0xd9, 0x9}, {0x4, 0x30}, {0x1, 0xd}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x7, 0x1003, 0x80a0000, [0x67ffffffffffffff, 0x2, 0x0, 0x10000000ff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffff, 0x2, @local, 0xfffffffe}, 0x1c) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) 345.933337ms ago: executing program 5 (id=5075): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_helper', 0x80, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)={0x38, r4, 0x201, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes256, 0x4, @desc2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x35, 0x0, &(0x7f0000000000)=[@register_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x3}, @clear_death={0x400c630f, 0x1}, @exit_looper, @clear_death, @decrefs], 0x0, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1cb) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0xeeee0000, 0x12d7}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0x401, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff81, 0xb218, 0xfffffffffffffff9, 0x0, 0x8000000000000000, 0x7], 0xd000, 0x200800}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = memfd_secret(0x80000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003500), r11) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f00000035c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r12, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) openat(r10, &(0x7f0000000080)='./file0\x00', 0x44a402, 0x181) 345.449027ms ago: executing program 5 (id=5076): munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x0, 0x9c, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x6, [{@rand_addr=0x64010100, 0x8001}, {@loopback, 0x10000}, {@empty, 0x5}]}, @ssrr={0x89, 0x7, 0x23, [@remote]}]}}, {0xa000, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "ce3461f2d626a93ab79039bb874f90e168fe48d0ceba50170683819ca4d31ccd", "f50c75808e97aed350bd1c4ca02caed3", {"a27adbbf511de87f4de7719003f83088", "e9f0bd4e154bb4444dff98257bdb2645"}}}}}}}}, 0xae) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) clock_gettime(0x0, 0x0) write$evdev(r5, &(0x7f00000003c0)=[{{}, 0x4, 0x9, 0x8}, {{}, 0x12, 0x251, 0x1}], 0x30) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="355b409b35c1dc9d9a1ee0bd4bf6a273cf2bfb3fcf9403f8957033750767992dac0d658a2cdddb8d44bd14ec6950d4fd569ac43cdac30ca5381d877d7a03ef68583026a07a8a546ff591fa628c8a3370ef2f1345af0b6a41bb8efca050578c2b662fa8f10d773f72dfc14de822c4401fcb90b4c379e2c0c529e397da583744f0153c78fbce3882e01f") ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) write$tun(r4, &(0x7f00000008c0)={@val={0x0, 0xa01}, @void, @mpls={[{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x1}, {}, {0x8, 0x0, 0x1}, {0x8}], @ipv6=@tipc_packet={0x7, 0x6, "48dd68", 0xf9, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[@fragment={0x21, 0x0, 0x6c, 0x0, 0x0, 0x6, 0x64}, @hopopts={0x5c, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x9e}, @generic={0xb, 0xa9, "0da457f33455986b23eb0509827dc35b414387e10a78e0e48d277b9b1e22f42c3310ad2483872a59c29207b395ff013184bf20ebc3dc793b837db880fbf38d3808682d00ce94a43639a0b33722f67de38fa2cd81849c0e41ece0e1ad787a0bff42563ad74f2e2bbf254275fea8867f824cc51d4ad188995d87de8b612b5210432f9929ad274c6c37ea4997ab2fe2c7a721bee04eb71b196f517073cb692d74b4cfdf0203c007ba8c53"}]}, @hopopts={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0xb6e4}, @enc_lim={0x4, 0x1, 0x1}]}], @payload_direct={{{{0x29, 0x0, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0xff, 0x0, 0x1, 0x8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x4e21, 0x4e24}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x141) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x128, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x52, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/105, 0x69, 0x2, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/205, 0xcd, 0x1, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/192, 0xc0, 0x1, 0x12}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/235, 0xeb, 0x0, 0x20}, @fd, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r3) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r2, &(0x7f00000001c0)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0xe, 0x4, 0x0, 0x0, 0x9c, 0x67, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x6, [{@rand_addr=0x64010100, 0x8001}, {@loopback, 0x10000}, {@empty, 0x5}]}, @ssrr={0x89, 0x7, 0x23, [@remote]}]}}, {0xa000, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "ce3461f2d626a93ab79039bb874f90e168fe48d0ceba50170683819ca4d31ccd", "f50c75808e97aed350bd1c4ca02caed3", {"a27adbbf511de87f4de7719003f83088", "e9f0bd4e154bb4444dff98257bdb2645"}}}}}}}}, 0xae) (async) syz_open_dev$evdev(&(0x7f00000000c0), 0xfc3c, 0x40402) (async) clock_gettime(0x0, 0x0) (async) write$evdev(r5, &(0x7f00000003c0)=[{{}, 0x4, 0x9, 0x8}, {{}, 0x12, 0x251, 0x1}], 0x30) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000380)="355b409b35c1dc9d9a1ee0bd4bf6a273cf2bfb3fcf9403f8957033750767992dac0d658a2cdddb8d44bd14ec6950d4fd569ac43cdac30ca5381d877d7a03ef68583026a07a8a546ff591fa628c8a3370ef2f1345af0b6a41bb8efca050578c2b662fa8f10d773f72dfc14de822c4401fcb90b4c379e2c0c529e397da583744f0153c78fbce3882e01f") (async) ptrace$cont(0x20, r1, 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) write$tun(r4, &(0x7f00000008c0)={@val={0x0, 0xa01}, @void, @mpls={[{0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x1}, {}, {0x8, 0x0, 0x1}, {0x8}], @ipv6=@tipc_packet={0x7, 0x6, "48dd68", 0xf9, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[@fragment={0x21, 0x0, 0x6c, 0x0, 0x0, 0x6, 0x64}, @hopopts={0x5c, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0x9e}, @generic={0xb, 0xa9, "0da457f33455986b23eb0509827dc35b414387e10a78e0e48d277b9b1e22f42c3310ad2483872a59c29207b395ff013184bf20ebc3dc793b837db880fbf38d3808682d00ce94a43639a0b33722f67de38fa2cd81849c0e41ece0e1ad787a0bff42563ad74f2e2bbf254275fea8867f824cc51d4ad188995d87de8b612b5210432f9929ad274c6c37ea4997ab2fe2c7a721bee04eb71b196f517073cb692d74b4cfdf0203c007ba8c53"}]}, @hopopts={0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0xb6e4}, @enc_lim={0x4, 0x1, 0x1}]}], @payload_direct={{{{0x29, 0x0, 0x1, 0x1, 0x1, 0x8, 0x1, 0x2, 0xff, 0x0, 0x1, 0x8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x4e21, 0x4e24}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x141) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x128, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x52, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}, @release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/105, 0x69, 0x2, 0x9}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/205, 0xcd, 0x1, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/192, 0xc0, 0x1, 0x12}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}, 0x400}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/235, 0xeb, 0x0, 0x20}, @fd, @flat=@weak_binder={0x77622a85, 0x100}}, &(0x7f0000000080)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0}) (async) 332.439827ms ago: executing program 0 (id=5077): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x183281) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000014c0)={0x494, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x49, 0x38}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x46c, 0x111, 0x0, 0x1, {0x468, 0x5, 0x0, 0x1, [{0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6e3e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x66, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a9a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x0, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x0, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x0, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x69, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x46}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x0, 0x4, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe312}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x36b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ce}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x0, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18010000", @ANYRES16=r4, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008010) sched_setscheduler(0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) io_setup(0x100, &(0x7f00000000c0)) (async) io_setup(0x100, &(0x7f00000000c0)=0x0) io_submit(r7, 0x2, &(0x7f0000000a00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfec1, r5, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x81, r6, &(0x7f0000000a80), 0x0, 0xffff, 0x0, 0x58ffe3bd2e84aaf2}]) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = getpid() r9 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xa8083) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000080)={r10, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sched_setscheduler(r8, 0x1, 0x0) (async) sched_setscheduler(r8, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r11) (async) fchdir(r11) mkdir(&(0x7f0000000100)='./control\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r12 = openat$cgroup_freezer_state(r11, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r12, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r12, r12, 0x0, 0x8000002) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) 322.412907ms ago: executing program 5 (id=5078): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9", 0x1}], 0x1}, 0x4004045) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000aeb62f9b0100000000000000000400004a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @mcast1, @private0, 0x7800, 0x1, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080041}, 0x20008090) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x400000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x11) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x68, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4801) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000140)=ANY=[@ANYBLOB="872d5a025f5ecfe669072ed1647223eccf95ea528ce83fc9fc59df1b4fb6505f7d1c504c845afab30eb354f8ec5a88aef637d6f85dafbc87c3a3b82fded5203612eda67be8bb347c406297c571684b5dedfd9b6b93f91d07644b9f7b5c769df418c654a252b81880fafeb75db73fee2aa27a4e1efbe1060b42f8f6616243672ef15922d5c405c59f2512"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='debugfs\x00', 0x209000, 0x0) 133.949309ms ago: executing program 5 (id=5079): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0xa, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/7, 0x7, 0x5, 0x21}, @fda={0x66646185, 0x9, 0x0, 0x29}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x1}], 0x56, 0x0, &(0x7f0000000380)="f22439c47e109c6096ea2bae1f7d03b8c44245ee48a8a255e0db445a21505ddddb4f9e2515db95a1de45d524bb52899f326bab2c88053f7a7475b3ec0373c50a7a4d67df5fde31db1a31325bebcf85b344c0596e65b8"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 133.622489ms ago: executing program 0 (id=5080): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x28, 0x1e, 0x9, 0xfffffffe, 0x25dfdbff, {0x9}, [@typed={0x11, 0x1, 0x0, 0x0, @str='/dev/rnullb0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x6, 0x8, 0xa, 0x7fff, 0x8239, 0x4}) r3 = getpid() fcntl$setown(r1, 0x8, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@cache_readahead}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0xffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) sendfile(r10, r10, 0x0, 0x7a680000) read$FUSE(r10, 0x0, 0xeffd) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 95.978839ms ago: executing program 5 (id=5081): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x66, &(0x7f0000000380)={0x65, 0x0, 0x66, 0x46, "4b0d814e10e14464ab3517e8b7d3513391426bd994796298cff0d3adfca373d0ffbf84012c9d7efad43b6333981f70086f9ab9cdbad06650d7d2b83632f2f94169ae115ddd0a"}, 0x66, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) setfsuid(0xee00) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)=@secondary) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) setresuid(0x0, 0x0, 0xee00) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a8000000000000002900000037000000841100000000000007400e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b0000000000000401c5bb20c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x6, @loopback, 0x8001}, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8cd8015a8764c3ac19186ab180efba7cd1129adecae630f9d8fd47b5da2385eda75a4fdb3c40e34b3d69c9c5ac97023b7cea47c9c4f009249e8d7a8ae0e57b355f2db6473b3fc97ed0ffcef9fdcdb90cf68424327"}]}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="7dfe0927a52fb465479af65feee6b331b86c8e167c4ac89e6dab7825ee9e33dd0374c98477f977ed74a3b4037cfa8eb478615e015933959b146a6ee9c747f73c75a9ddf6ebaf9054d29e540a7d835fb3e0a7e7108d817bb09e933d9feb12df25ef97d9f2569d6b33d423cc536173ba1a15b45c8dc77736aa4d1c8224f18b511b01373b493afe3b9544cdef039bf8404276c83b4663f02de3eb"}, {&(0x7f00000004c0)="80a16c47df08098b59c2296b3a9c12a870ceed3d432c02e244a08b80d201202cc42217f045f0bd4426bb4ad3cb347027c00fcded52bf1f2850919a03bb3b0de1b793415d257cd763dbefe11aeb6134d42c930ad50becfcee628c97ad5374eca5eb23e9a94d8f2605121bce0d0f03581e8ce092a677fb733b84ee2d9e82b9e55adaa96a176029242c0d3ee26cd5cf2bea4c01ab7ce35a30cede31666f775913a0cc4a"}], 0x0, &(0x7f0000000580)=[@dstopts_2292={{0x0, 0x29, 0x4, {0x2b, 0x0, '\x00', [@padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @generic={0x4, 0x0, "11db9176"}]}}}, @hopopts={{0x0, 0x29, 0x36, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xc}, @hao={0xc9, 0x0, @mcast2}, @jumbo={0xc2, 0x4, 0x7}, @pad1]}}}]}}], 0x18, 0x931766f6319eed40) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg$unix(r7, 0x0, 0x0, 0x2041, &(0x7f0000000080)={r8, r9+10000000}) close_range(r0, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(r7, 0x40049409, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000040)=0xe, 0x4) 0s ago: executing program 5 (id=5082): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x13, 0x7, 0x6, 0x6}}) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000580)={'#! ', '', [{0x20, 'blkio.bfq.iecursive\x00'/33}, {0x20, '\x00`\x90\xfd\xfa\xd7$v|\xb4Y#49\xeb\xe7\xa4N]\x96\xed\xb1\xf3\xd7\x1a\x14\xf5\xc7\xd4\xef\xc8e`\xda\xcf\xd3\xac\xc2\x9d]\xb6\x83D\xa5\xcb\xaa\xad\xeca\x02P\xf8\x8b\x9f\xd6IU\x1c\xd8:9}2\x02\xee<\x9c\xf3\x90\xc6]\xd3\xb4\x8do\xc7\x91\x18\x96z*\x95\xe7\xd0\x7f5\xca>\xaf\xd3\xe4\x1bV\xeb\xa0v\x05\x85\x1fe\xb1$R\xecO]1|\xd0\xc9\xc2|n\x90\xc9\x8c\xde\x0e\x12/cC\xba\xfc\xbb\n\xdd\xba$Q{\xf3\xba\xf8\xb3\xa5\xc0PA\xf6\xeex\x968\x81\xb3\x12\xa8q\xad\xc5\\\x1bwu\xb0\xe7\xfa\xee`g\x92X\x00\x92:\xff\xca\xe6\x01\x17#\x9ch\xc8\xf0\xda\xae\xe2\x82[\xa5\x88\x18\xfar\xbda\x8fi\xcf\x0e@\xac\xc7\x8b2\xa8pVr\a\xcfq\x1a\xb4\xc0\x10\x1f;L\xd4\xdf0*g\x96i\xe4\x7f9\xe3\xf6\xd3:m\x1c\xfc\xa1\x04%\xcf\x87\xbf\x8d\xce\a\xce\xcc\xa7p>U'}, {}, {0x20, 'blkio.bfq.io_wait_time_recursive\x00'}, {}], 0xa, "4d1402252d2cc380346eb46e0ae78331339e24e634930d277fd16943b32d38a6924dce53ba6c175820e71efa5d1e20d8bb2f4d01b78c4f10580c2714c3f84f4ea55daba0954c"}, 0x184) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r4], 0x44}}, 0x4000000) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="180000005500010000040000000000000700000002"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r7 = userfaultfd(0x801) read(r7, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1}) (async) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000) (async) fadvise64(r0, 0x81, 0x9, 0x5) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000002740)=ANY=[@ANYBLOB="3c1100007d563c294b391017e6100cbeb4fe635be8ce3aedb24423c9517afb", @ANYRES16=r5, @ANYBLOB="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"], 0x113c}}, 0x48800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) kernel console output (not intermixed with test programs): ed USB device number 61 using dummy_hcd [ 214.760928][T11337] usb 4-1: Using ep0 maxpacket: 8 [ 214.767899][T11337] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.776427][T11337] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 214.784795][T11337] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 214.793772][T11337] usb 4-1: config 4 has no interface number 0 [ 214.801367][T11337] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 214.810725][T11337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.819894][T11337] usb 4-1: Product: syz [ 214.824118][T11337] usb 4-1: Manufacturer: syz [ 214.829088][T11337] usb 4-1: SerialNumber: syz [ 214.984884][ T9] tipc: Node number set to 1862270976 [ 215.037920][T11887] rust_binder: Write failure EINVAL in pid:87 [ 215.058075][ T36] audit: type=1400 audit(2000000121.615:786): avc: denied { compute_member } for pid=11888 comm="syz.2.3849" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.099478][T11892] rust_binder: Error while translating object. [ 215.099523][T11892] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.107165][T11892] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92 [ 215.374382][T11337] usb 4-1: Found UVC 0.02 device syz (04f2:b746) [ 215.390012][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.397625][T11337] usb 4-1: No valid video chain found. [ 215.404163][T11337] usb 4-1: USB disconnect, device number 61 [ 215.555422][ T36] audit: type=1400 audit(2000000122.084:787): avc: denied { map } for pid=11900 comm="syz.0.3853" path="/430/file0/file0" dev="tmpfs" ino=2352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 215.583140][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.593840][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 215.605583][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 96 [ 215.620622][ T9] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.635101][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.641863][T11917] overlayfs: conflicting options: userxattr,verity=require [ 215.644157][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.659727][ T9] usb 3-1: Product: syz [ 215.663995][ T9] usb 3-1: Manufacturer: syz [ 215.668833][ T9] usb 3-1: SerialNumber: syz [ 215.822014][T11924] rust_binder: Error while translating object. [ 215.822056][T11924] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 215.828500][T11924] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:347 [ 215.881726][T11938] rust_binder: Write failure EFAULT in pid:357 [ 215.894976][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.909575][T11894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 215.924844][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.934533][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 215.939935][T11923] bridge_slave_0: entered allmulticast mode [ 215.949987][T11923] bridge_slave_0: entered promiscuous mode [ 215.956970][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.964173][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.971693][T11923] bridge_slave_1: entered allmulticast mode [ 215.978097][T11923] bridge_slave_1: entered promiscuous mode [ 216.042213][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.049289][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.056623][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.063685][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.110006][ T36] audit: type=1400 audit(2000000122.610:788): avc: denied { map } for pid=11959 comm="syz.3.3868" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 216.135490][ T36] audit: type=1400 audit(2000000122.610:789): avc: denied { execute } for pid=11959 comm="syz.3.3868" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 216.164790][T11923] veth0_vlan: entered promiscuous mode [ 216.181400][T11923] veth1_macvtap: entered promiscuous mode [ 216.286053][ T2995] bridge_slave_1: left allmulticast mode [ 216.291794][ T2995] bridge_slave_1: left promiscuous mode [ 216.297541][ T2995] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.305180][ T2995] bridge_slave_0: left allmulticast mode [ 216.316085][ T2995] bridge_slave_0: left promiscuous mode [ 216.322499][ T2995] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.395261][T11982] SELinux: policydb string does not match my string SE Linux [ 216.404509][T11982] SELinux: failed to load policy [ 216.410897][T11982] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 216.527168][ T2995] tipc: Disabling bearer [ 216.552346][ T2995] tipc: Left network mode [ 216.560046][T11894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 216.790125][ T36] audit: type=1400 audit(2000000123.248:790): avc: denied { map } for pid=11893 comm="syz.2.3851" path="/proc/94/comm" dev="proc" ino=54067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 216.822603][ T36] audit: type=1400 audit(2000000123.248:791): avc: denied { execute } for pid=11893 comm="syz.2.3851" path="/proc/94/comm" dev="proc" ino=54067 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 216.902374][ T9] cdc_ncm 3-1:1.0: bind() failure [ 216.912684][ T9] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 216.928739][ T9] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 216.947069][ T9] usb 3-1: USB disconnect, device number 17 [ 216.969185][T12008] rust_binder: 18: no such ref 0 [ 216.974346][T12008] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 216.981535][T12008] rust_binder: 18: no such ref 2 [ 216.986616][T12008] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 217.052803][T12014] rust_binder: Write failure EFAULT in pid:23 [ 217.382851][ T45] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 217.532526][ T45] usb 6-1: device descriptor read/64, error -71 [ 217.627354][T12036] binder: Unknown parameter 'fscontext?}' [ 217.798920][ T45] usb 6-1: device descriptor read/64, error -71 [ 217.926402][ T1579] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 217.937164][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 218.054353][ T45] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 218.087365][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.098365][ T1579] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.108150][ T1579] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 218.117294][ T1579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.126109][ T1579] usb 4-1: config 0 descriptor?? [ 218.131089][ T9] usb 3-1: config 127 has an invalid interface number: 238 but max is 0 [ 218.139430][ T9] usb 3-1: config 127 has no interface number 0 [ 218.147432][ T9] usb 3-1: config 127 interface 238 has no altsetting 0 [ 218.155877][ T9] usb 3-1: New USB device found, idVendor=056c, idProduct=8100, bcdDevice=7a.5a [ 218.164995][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.173068][ T9] usb 3-1: Product: syz [ 218.177243][ T9] usb 3-1: Manufacturer: syz [ 218.181835][ T9] usb 3-1: SerialNumber: syz [ 218.192955][ T45] usb 6-1: device descriptor read/64, error -71 [ 218.404904][ T9] cdc_subset 3-1:127.238: probe with driver cdc_subset failed with error -22 [ 218.414714][ T9] usb 3-1: USB disconnect, device number 18 [ 218.448626][ T45] usb 6-1: device descriptor read/64, error -71 [ 218.566171][ T45] usb usb6-port1: attempt power cycle [ 218.601237][ T1579] arvo 0003:1E7D:30D4.0012: bogus close delimiter [ 218.607729][ T1579] arvo 0003:1E7D:30D4.0012: item 0 0 2 10 parsing failed [ 218.615264][ T1579] arvo 0003:1E7D:30D4.0012: parse failed [ 218.620950][ T1579] arvo 0003:1E7D:30D4.0012: probe with driver arvo failed with error -22 [ 218.886871][ T335] usb 4-1: USB disconnect, device number 62 [ 218.928324][ T45] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 218.950580][ T45] usb 6-1: device descriptor read/8, error -71 [ 219.094859][ T45] usb 6-1: device descriptor read/8, error -71 [ 219.354549][ T45] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 219.383039][T12067] rust_binder: Error while translating object. [ 219.383069][T12067] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 219.389491][T12067] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:113 [ 219.395530][ T45] usb 6-1: device descriptor read/8, error -71 [ 219.540241][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3908'. [ 219.559381][ T45] usb 6-1: device descriptor read/8, error -71 [ 219.674643][ T45] usb usb6-port1: unable to enumerate USB device [ 219.864089][T12163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:406 [ 219.886681][T12170] rust_binder: Error while translating object. [ 219.895979][T12170] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 219.902229][T12170] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:414 [ 219.927706][T12174] binder: Bad value for 'defcontext' [ 219.943207][T12174] binder: Bad value for 'defcontext' [ 219.949152][T12177] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:193 [ 219.949271][T12177] rust_binder: Read failure Err(EFAULT) in pid:193 [ 219.983607][T12184] __vm_enough_memory: pid: 12184, comm: syz.3.3921, bytes: 18014402804453376 not enough memory for the allocation [ 219.985669][T12181] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION freeze notification not active [ 220.010807][T12181] rust_binder: Write failure EINVAL in pid:195 [ 220.070165][T12197] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 220.083486][T12197] rust_binder: Write failure EINVAL in pid:206 [ 220.093000][T12199] tmpfs: Bad value for 'nr_inodes' [ 220.097614][T12200] __vm_enough_memory: pid: 12200, comm: syz.2.3928, bytes: 18014402804453376 not enough memory for the allocation [ 220.280503][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'. [ 220.347091][T12215] netlink: 'syz.5.3935': attribute type 4 has an invalid length. [ 220.377743][ T1579] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 220.537587][ T1579] usb 3-1: Using ep0 maxpacket: 32 [ 220.544242][ T1579] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 220.552497][ T1579] usb 3-1: config 0 has no interface number 0 [ 220.560263][ T1579] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 220.569430][ T1579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.577547][ T1579] usb 3-1: Product: syz [ 220.583426][ T1579] usb 3-1: Manufacturer: syz [ 220.588005][ T1579] usb 3-1: SerialNumber: syz [ 220.593225][ T1579] usb 3-1: config 0 descriptor?? [ 220.599000][ T1579] smsc95xx v2.0.0 [ 220.772134][ T9] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 220.943590][ T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 220.952684][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.961513][ T9] usb 6-1: config 0 descriptor?? [ 221.026710][T12251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 221.027097][T12251] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 221.036437][ T1579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 221.057154][T12251] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:432 [ 221.058415][T12251] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 221.068125][T12252] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:432 [ 221.069046][ T1579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 221.531899][T12290] loop5: detected capacity change from 0 to 7 [ 221.572666][T12291] input: syz0 as /devices/virtual/input/input42 [ 221.587881][ T1579] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 221.600924][ T1579] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 221.611258][ T1579] usb 3-1: USB disconnect, device number 19 [ 221.823307][T12215] incfs: Options parsing error. -22 [ 221.828690][T12215] incfs: mount failed -22 [ 221.833408][T12215] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 221.833723][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.852020][ T9] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 221.882157][ T9] asix 6-1:0.0: probe with driver asix failed with error -71 [ 221.890566][ T9] usb 6-1: USB disconnect, device number 10 [ 222.141774][T12332] /dev/loop0: Can't lookup blockdev [ 222.154478][T12334] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 222.161640][T12334] rust_binder: Error in use_page_slow: ESRCH [ 222.161664][T12334] rust_binder: use_range failure ESRCH [ 222.167730][T12334] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 222.174130][T12334] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 222.182240][T12334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:220 [ 222.386200][T12346] binder: Bad value for 'max' [ 222.402032][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.410694][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.617313][ T36] audit: type=1400 audit(2000000128.718:792): avc: denied { setattr } for pid=12350 comm="syz.5.3979" name="" dev="pipefs" ino=54900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 222.701200][ T45] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 222.839782][ T45] usb 3-1: device descriptor read/64, error -71 [ 223.095553][ T45] usb 3-1: device descriptor read/64, error -71 [ 223.348134][T12383] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 223.354889][ T45] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 223.357311][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.372463][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.511223][ T45] usb 3-1: device descriptor read/64, error -71 [ 223.595208][T12402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3992'. [ 223.607255][ T65] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 223.766974][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 223.774684][ T65] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.784096][ T65] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.788302][ T45] usb 3-1: device descriptor read/64, error -71 [ 223.792366][ T65] usb 6-1: Product: syz [ 223.802732][ T65] usb 6-1: Manufacturer: syz [ 223.807431][ T65] usb 6-1: SerialNumber: syz [ 223.814440][ T65] r8152-cfgselector 6-1: Unknown version 0x0000 [ 223.820914][ T65] r8152-cfgselector 6-1: config 0 descriptor?? [ 223.905649][ T45] usb usb3-port1: attempt power cycle [ 224.267449][T12383] rust_binder: Error in use_page_slow: ESRCH [ 224.267480][T12383] rust_binder: use_range failure ESRCH [ 224.273750][T12383] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false [ 224.279510][ T45] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 224.285906][T12383] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 224.295105][T12383] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:45 [ 224.300964][ T45] usb 3-1: device descriptor read/8, error -71 [ 224.450289][ T45] usb 3-1: device descriptor read/8, error -71 [ 224.705023][ T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 224.727326][ T45] usb 3-1: device descriptor read/8, error -71 [ 224.859881][ T65] r8152-cfgselector 6-1: USB disconnect, device number 11 [ 224.870884][ T45] usb 3-1: device descriptor read/8, error -71 [ 224.880805][T12420] __vm_enough_memory: pid: 12420, comm: syz.5.4001, bytes: 18014402804453376 not enough memory for the allocation [ 224.995858][ T45] usb usb3-port1: unable to enumerate USB device [ 225.464610][T12461] netlink: 328 bytes leftover after parsing attributes in process `syz.0.4017'. [ 225.490056][T12463] overlayfs: failed to clone upperpath [ 225.599443][T12473] rust_binder: 12469 RLIMIT_NICE not set [ 225.632479][T12482] .N: renamed from veth0_to_bond (while UP) [ 225.709938][T12497] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4029'. [ 225.744860][T12502] futex_wake_op: syz.0.4031 tries to shift op by -1; fix this program [ 225.909273][ T65] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 225.945155][T12522] binder: Bad value for 'stats' [ 226.070513][T12528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4040'. [ 226.081747][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.092879][ T65] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.108764][ T65] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 226.121710][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.133757][ T65] usb 6-1: config 0 descriptor?? [ 226.152497][T12528] x_tables: unsorted underflow at hook 4 [ 226.237104][T12551] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.291162][T12552] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 226.298065][T12552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:248 [ 226.306771][T12553] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 226.395996][T12564] 9pnet_fd: Insufficient options for proto=fd [ 226.519740][T12576] random: crng reseeded on system resumption [ 226.775863][T12582] netlink: 'syz.0.4058': attribute type 11 has an invalid length. [ 226.784356][T12582] netlink: 'syz.0.4058': attribute type 11 has an invalid length. [ 226.792697][T12582] netlink: 'syz.0.4058': attribute type 11 has an invalid length. [ 226.803026][ T65] hid-led 0003:27B8:01ED.0013: probe with driver hid-led failed with error -71 [ 226.833019][ T65] usb 6-1: USB disconnect, device number 12 [ 226.863944][T12588] input: syz1 as /devices/virtual/input/input44 [ 226.907045][T12600] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4064'. [ 226.923487][T12600] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4064'. [ 226.937190][T12604] 9pnet_fd: Insufficient options for proto=fd [ 227.037623][T12622] netlink: 'syz.0.4070': attribute type 28 has an invalid length. [ 227.130845][T12625] netlink: 'syz.2.4073': attribute type 29 has an invalid length. [ 227.139131][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 227.155780][ T36] audit: type=1400 audit(2000000645.961:793): avc: denied { execute } for pid=12621 comm="syz.0.4070" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56623 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 227.208141][T12626] __vm_enough_memory: pid: 12626, comm: syz.2.4073, bytes: 18014402804453376 not enough memory for the allocation [ 227.243478][T12634] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4075'. [ 227.337414][T12641] __vm_enough_memory: pid: 12641, comm: syz.2.4076, bytes: 18014402804453376 not enough memory for the allocation [ 227.398784][T12652] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4080'. [ 227.410599][T12656] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 227.410625][T12656] rust_binder: Error while translating object. [ 227.419529][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.422751][T12656] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 227.432970][T12656] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:70 [ 227.464632][T12661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:74 [ 227.763765][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 227.934277][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 227.946015][ T9] usb 3-1: config index 0 descriptor too short (expected 25953, got 27) [ 227.961472][ T9] usb 3-1: config 9 has an invalid interface number: 144 but max is 0 [ 227.969953][ T9] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 227.987923][ T9] usb 3-1: config 9 has no interface number 0 [ 227.994173][ T9] usb 3-1: config 9 interface 144 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.008073][ T9] usb 3-1: config 9 interface 144 has no altsetting 0 [ 228.016572][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0927, bcdDevice=4b.68 [ 228.023140][ T36] audit: type=1400 audit(2000000646.787:794): avc: denied { setattr } for pid=12684 comm="syz.3.4091" name="file2" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.025936][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.072968][ T9] usb 3-1: Product: syz [ 228.077175][ T9] usb 3-1: Manufacturer: syz [ 228.081861][ T9] usb 3-1: SerialNumber: syz [ 228.099453][ T9] r8152-cfgselector 3-1: Unknown version 0x0000 [ 228.247949][T12715] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 228.287699][T12720] 9pnet_fd: Insufficient options for proto=fd [ 228.324624][ T9] r8152 3-1:9.144: Expected endpoints are not found [ 228.339122][ T9] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 228.760455][T12745] overlay: ./file0 is not a directory [ 229.797235][T12804] netlink: 'syz.5.4133': attribute type 1 has an invalid length. [ 229.813184][T12804] netlink: 'syz.5.4133': attribute type 2 has an invalid length. [ 229.818559][T12816] overlayfs: failed to clone upperpath [ 229.838742][T12804] /dev/sg0: Can't lookup blockdev [ 229.882346][T12826] rust_binder: Read failure Err(EAGAIN) in pid:125 [ 229.919220][T12833] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 229.954479][ T36] audit: type=1400 audit(2000000648.598:795): avc: denied { unmount } for pid=11923 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 230.027341][T12846] overlayfs: failed to clone upperpath [ 230.722228][ T36] audit: type=1400 audit(2000000649.320:796): avc: denied { create } for pid=12884 comm="syz.0.4161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 230.823296][ T36] audit: type=1400 audit(2000000649.414:797): avc: denied { setattr } for pid=12898 comm="syz.0.4165" name="PING" dev="sockfs" ino=57889 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 231.259644][ T344] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 231.416496][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4173'. [ 231.425822][ T344] usb 6-1: Using ep0 maxpacket: 16 [ 231.432086][ T344] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 231.442315][ T344] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.454643][ T344] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.465490][ T344] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.477601][ T344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.485915][ T344] usb 6-1: Product: syz [ 231.490248][ T344] usb 6-1: Manufacturer: syz [ 231.495057][ T344] usb 6-1: SerialNumber: syz [ 231.719164][ T344] usb 6-1: 0:2 : does not exist [ 231.726471][ T344] usb 6-1: USB disconnect, device number 13 [ 231.858414][T12942] 9pnet: Unknown protocol version 9 [ 231.952396][ T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 231.973856][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 232.113283][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.123542][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 232.136365][ T65] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 232.145460][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.154126][ T65] usb 3-1: config 0 descriptor?? [ 232.367007][T12967] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4193'. [ 232.540873][ T36] audit: type=1326 audit(2000000651.028:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b598efc9 code=0x7ffc0000 [ 232.564594][ T36] audit: type=1326 audit(2000000651.028:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b598efc9 code=0x7ffc0000 [ 232.588171][ T36] audit: type=1326 audit(2000000651.028:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4b598d810 code=0x7ffc0000 [ 232.611811][ T36] audit: type=1326 audit(2000000651.028:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b598efc9 code=0x7ffc0000 [ 232.612721][ T65] logitech 0003:046D:C294.0014: item fetching failed at offset 2/5 [ 232.635713][ T36] audit: type=1326 audit(2000000651.028:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4b598efc9 code=0x7ffc0000 [ 232.647130][ T65] logitech 0003:046D:C294.0014: parse failed [ 232.667076][ T36] audit: type=1326 audit(2000000651.028:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.3.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b598efc9 code=0x7ffc0000 [ 232.673216][ T65] logitech 0003:046D:C294.0014: probe with driver logitech failed with error -22 [ 232.834402][ T65] usb 3-1: USB disconnect, device number 26 [ 233.390919][T12977] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35 [ 233.390939][T12977] rust_binder: Error while translating object. [ 233.399707][T12977] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 233.406029][T12977] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:331 [ 233.476537][ T344] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 233.648134][ T344] usb 6-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 233.658300][ T344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.668796][ T344] usb 6-1: config 0 descriptor?? [ 233.890667][ T344] usb 6-1: string descriptor 0 read error: -71 [ 233.898543][ T344] usbhid 6-1:0.0: can't add hid device: -71 [ 233.904578][ T344] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 233.913568][ T344] usb 6-1: USB disconnect, device number 14 [ 234.023573][T12992] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4201'. [ 234.033951][T12992] overlayfs: failed to clone upperpath [ 234.040232][T12992] futex_wake_op: syz.3.4201 tries to shift op by 144; fix this program [ 234.439011][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 234.439029][ T36] audit: type=1326 audit(2000000652.810:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12998 comm="syz.5.4204" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b8038efc9 code=0x0 [ 234.787444][ T344] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 234.884328][T13025] netlink: 'syz.0.4214': attribute type 11 has an invalid length. [ 234.892190][T13025] netlink: 'syz.0.4214': attribute type 2 has an invalid length. [ 234.948472][ T344] usb 3-1: config 4 has an invalid interface number: 168 but max is 0 [ 234.957126][ T344] usb 3-1: config 4 has no interface number 0 [ 234.963266][ T344] usb 3-1: config 4 interface 168 has no altsetting 0 [ 234.971485][ T344] usb 3-1: New USB device found, idVendor=059f, idProduct=105f, bcdDevice= f.69 [ 234.980602][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.988587][ T344] usb 3-1: Product: syz [ 234.992765][ T344] usb 3-1: Manufacturer: syz [ 234.997348][ T344] usb 3-1: SerialNumber: syz [ 235.221982][T13037] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 235.222017][T13037] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:350 [ 235.341059][T13043] fuse: Unknown parameter '-Dz9xjgF00000000000000000000' [ 235.387111][ T344] usb-storage 3-1:4.168: USB Mass Storage device detected [ 235.395452][ T344] usb-storage 3-1:4.168: Quirks match for vid 059f pid 105f: 44000000 [ 235.440628][ T344] usb 3-1: USB disconnect, device number 27 [ 235.512323][T13053] SELinux: failed to load policy [ 235.821289][ T65] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 235.941703][T13068] rust_binder: Write failure EFAULT in pid:355 [ 235.960494][ T65] usb 6-1: device descriptor read/64, error -71 [ 236.226289][ T65] usb 6-1: device descriptor read/64, error -71 [ 236.492740][ T65] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 236.632818][ T65] usb 6-1: device descriptor read/64, error -71 [ 236.898182][ T65] usb 6-1: device descriptor read/64, error -71 [ 237.025680][ T65] usb usb6-port1: attempt power cycle [ 237.142862][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 237.313393][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 237.319971][ T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 237.328707][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.339176][ T9] usb 3-1: config 0 has no interface number 0 [ 237.348696][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 237.358215][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.366302][ T9] usb 3-1: Product: syz [ 237.370851][ T9] usb 3-1: Manufacturer: syz [ 237.375546][ T9] usb 3-1: SerialNumber: syz [ 237.381226][ T9] usb 3-1: config 0 descriptor?? [ 237.388275][ T65] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 237.410558][ T65] usb 6-1: device descriptor read/8, error -71 [ 237.549262][ T65] usb 6-1: device descriptor read/8, error -71 [ 237.614540][ T9] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 237.620933][ T9] usb 3-1: No valid video chain found. [ 237.803690][ T65] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 237.826035][ T65] usb 6-1: device descriptor read/8, error -71 [ 237.837598][ T45] usb 3-1: USB disconnect, device number 28 [ 237.964622][ T65] usb 6-1: device descriptor read/8, error -71 [ 238.080887][ T65] usb usb6-port1: unable to enumerate USB device [ 238.837496][ T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 239.018999][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 239.027305][ T45] usb 3-1: config 0 has an invalid interface number: 236 but max is 1 [ 239.036273][ T45] usb 3-1: config 0 has an invalid interface number: 129 but max is 1 [ 239.044495][ T45] usb 3-1: config 0 has no interface number 0 [ 239.050726][ T45] usb 3-1: config 0 has no interface number 1 [ 239.056826][ T45] usb 3-1: config 0 interface 236 has no altsetting 0 [ 239.063714][ T45] usb 3-1: config 0 interface 129 has no altsetting 0 [ 239.072087][ T45] usb 3-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d [ 239.081250][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.092874][ T45] usb 3-1: Product: syz [ 239.097457][ T45] usb 3-1: Manufacturer: syz [ 239.103851][ T45] usb 3-1: SerialNumber: syz [ 239.109259][ T45] usb 3-1: config 0 descriptor?? [ 239.348125][T13089] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 239.348151][T13089] rust_binder: Read failure Err(EFAULT) in pid:373 [ 239.435512][ T45] usb 3-1: selecting invalid altsetting 0 [ 239.451520][ T45] usb 3-1: Found UVC 2.26 device syz (1ace:e9b2) [ 239.458412][ T45] usb 3-1: No valid video chain found. [ 239.462503][ T36] audit: type=1400 audit(2000000657.511:806): avc: denied { setattr } for pid=13113 comm="syz.5.4248" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 239.467165][ T45] usb 3-1: USB disconnect, device number 29 [ 240.047451][T13176] tipc: Started in network mode [ 240.052389][T13176] tipc: Node identity ac14142f, cluster identity 4711 [ 240.059422][T13176] tipc: New replicast peer: 0.0.0.0 [ 240.065009][T13176] tipc: Enabled bearer , priority 10 [ 240.072111][T13176] binder: Bad value for 'stats' [ 240.245355][T13191] skbuff: bad partial csum: csum=65506/2 headroom=130 headlen=65526 [ 240.292968][T13195] 9pnet_fd: Insufficient options for proto=fd [ 240.341089][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 240.500160][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 240.512854][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.523103][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.533444][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.546381][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.554712][ T9] usb 3-1: Product: syz [ 240.563513][ T9] usb 3-1: Manufacturer: syz [ 240.568702][ T9] usb 3-1: SerialNumber: syz [ 240.642173][T13227] netlink: 680 bytes leftover after parsing attributes in process `syz.5.4293'. [ 240.654635][T13227] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 240.677798][T13230] fuse: Bad value for 'fd' [ 240.789365][T13178] binder: Bad value for 'stats' [ 240.795702][ T9] usb 3-1: 0:2 : does not exist [ 240.807613][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4299'. [ 240.810807][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 240.840760][ T9] usb 3-1: USB disconnect, device number 30 [ 240.931078][T13252] overlayfs: failed to resolve './file2': -2 [ 240.947303][T13252] binder: Unknown parameter 'dizsync' [ 240.958561][T13254] binder: Unknown parameter 'dizsync' [ 241.022581][T13295] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4312'. [ 241.036816][T13295] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4312'. [ 241.054738][T13297] rust_binder: Write failure EFAULT in pid:221 [ 241.246620][T13313] netlink: 'syz.3.4318': attribute type 27 has an invalid length. [ 241.267545][ T65] tipc: Node number set to 2886997039 [ 241.384784][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 241.449540][T13334] IPv6: NLM_F_CREATE should be specified when creating new route [ 241.458045][T13335] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 241.475842][T13335] rust_binder: Read failure Err(EAGAIN) in pid:388 [ 241.515090][T13341] 9pnet_fd: Insufficient options for proto=fd [ 241.528381][T13341] rust_binder: Write failure EFAULT in pid:393 [ 241.566351][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 241.580130][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.591163][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.593913][T13346] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 241.601065][ T9] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 241.619000][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.630299][ T9] usb 6-1: config 0 descriptor?? [ 241.654210][T13359] bpf: Bad value for 'mode' [ 241.813675][T13369] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 242.069067][ T9] uclogic 0003:28BD:0074.0015: interface is invalid, ignoring [ 242.378000][T13374] devpts: called with bogus options [ 242.565026][T13404] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4347'. [ 242.680750][T13414] netlink: 'syz.2.4351': attribute type 16 has an invalid length. [ 242.689047][T13414] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4351'. [ 243.290698][T13434] rust_binder: Error while translating object. [ 243.290729][T13434] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 243.297095][T13434] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:427 [ 243.367070][T13442] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4362'. [ 243.580387][ T45] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 243.740245][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 243.746758][ T45] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 243.755002][ T45] usb 3-1: config 0 has no interface number 0 [ 243.761455][ T45] usb 3-1: config 0 interface 148 has no altsetting 0 [ 243.769784][ T45] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=dd.c8 [ 243.778968][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.787013][ T45] usb 3-1: Product: syz [ 243.791174][ T45] usb 3-1: Manufacturer: syz [ 243.795802][ T45] usb 3-1: SerialNumber: syz [ 243.800952][ T45] usb 3-1: config 0 descriptor?? [ 243.806773][ T45] pl2303 3-1:0.148: required interrupt-in endpoint missing [ 244.025672][ T65] usb 3-1: USB disconnect, device number 31 [ 244.125301][T13482] 9pnet_fd: Insufficient options for proto=fd [ 244.249101][T13497] netlink: 'syz.3.4382': attribute type 16 has an invalid length. [ 244.257141][T13497] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4382'. [ 244.334525][ T65] usb 6-1: USB disconnect, device number 19 [ 244.373790][ T36] audit: type=1400 audit(2000000662.127:807): avc: denied { mounton } for pid=13513 comm="syz.5.4387" path="/newroot/80/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 244.615202][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4391'. [ 245.040538][ T65] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 245.200388][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 245.207143][ T65] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 245.215461][ T65] usb 3-1: config 179 has no interface number 0 [ 245.221855][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 245.232900][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 245.244146][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.255422][ T65] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 245.266877][ T65] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 245.280232][ T65] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 245.289304][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.298180][T13542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.739168][ T65] usb 3-1: USB disconnect, device number 32 [ 245.745135][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 245.745172][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 245.947261][T13598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 246.129481][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.136526][T13613] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.144008][T13613] bridge_slave_0: entered allmulticast mode [ 246.150570][T13613] bridge_slave_0: entered promiscuous mode [ 246.157050][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.164239][T13613] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.171367][T13613] bridge_slave_1: entered allmulticast mode [ 246.177845][T13613] bridge_slave_1: entered promiscuous mode [ 246.221466][T13613] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.228554][T13613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.235914][T13613] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.242951][T13613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.262750][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.270132][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.280031][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.287118][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.297041][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.304134][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.325678][ T36] audit: type=1400 audit(2000000663.957:808): avc: denied { map } for pid=13623 comm="syz.2.4422" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.338707][T13613] veth0_vlan: entered promiscuous mode [ 246.375052][T13613] veth1_macvtap: entered promiscuous mode [ 246.381716][T13626] rust_binder: 460: no such ref 0 [ 246.387818][T13626] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 246.395147][T13626] rust_binder: 460: no such ref 2 [ 246.401325][T13626] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 246.491685][T13630] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 246.491706][T13630] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 246.499610][T13630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:4 [ 246.532964][T13636] binder: Bad value for 'stats' [ 246.577078][T13641] rust_binder: Write failure EINVAL in pid:9 [ 246.594002][T13644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=13644 comm=syz.0.4430 [ 246.626814][T13650] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 246.654606][T13655] binder: Unknown parameter 'seclab ' [ 246.939231][T13715] option changes via remount are deprecated (pid=13714 comm=syz.0.4452) [ 246.939305][ T36] audit: type=1400 audit(2000000664.538:809): avc: denied { remount } for pid=13714 comm="syz.0.4452" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 246.948854][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4452'. [ 247.080150][T13740] netlink: 'syz.3.4459': attribute type 4 has an invalid length. [ 247.087949][T13740] netlink: 'syz.3.4459': attribute type 6 has an invalid length. [ 247.095712][T13740] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4459'. [ 247.385836][ T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 247.542987][T13770] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 247.543011][T13770] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:30 [ 247.552489][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 247.572623][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 247.572653][T13772] sit0: entered promiscuous mode [ 247.581066][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 247.581094][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 247.588105][T13772] netlink: 'syz.0.4471': attribute type 1 has an invalid length. [ 247.602327][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.604228][T13772] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4471'. [ 247.612232][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.643384][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 247.656714][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 247.665894][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.677118][ T45] usb 3-1: config 0 descriptor?? [ 247.781186][T13778] SELinux: security_context_str_to_sid () failed with errno=-22 [ 247.792686][T13778] SELinux: security_context_str_to_sid () failed with errno=-22 [ 247.904795][T13789] SELinux: failed to load policy [ 247.914122][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 247.927607][ T45] usb 3-1: USB disconnect, device number 33 [ 247.934593][T13789] rust_binder: Write failure EFAULT in pid:45 [ 247.939644][ T45] usblp0: removed [ 247.962042][ T2995] Bluetooth: hci0: Frame reassembly failed (-84) [ 248.017195][T13798] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 248.025708][T13798] rust_binder: Failed copying into alloc: EFAULT [ 248.025731][T13798] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 248.032235][T13798] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 248.040908][T13798] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 248.376494][ T45] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 248.443537][T13820] fuse: Bad value for 'fd' [ 248.547017][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 248.553199][ T45] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 248.561737][ T45] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 248.570371][ T45] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 248.579772][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 248.589499][ T45] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 248.599173][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 248.612225][ T45] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 248.621314][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.629996][ T45] usb 3-1: config 0 descriptor?? [ 248.806334][T13844] overlay: Unknown parameter '/' [ 248.811764][T13844] overlayfs: failed to clone lowerpath [ 248.850100][ T45] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 34 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 249.149451][T13887] overlayfs: failed to resolve './file0/file0': -2 [ 249.224494][T13742] input: syz0 as /devices/virtual/input/input46 [ 249.664538][T13893] futex_wake_op: syz.5.4512 tries to shift op by 32; fix this program [ 249.681771][T13895] tipc: Started in network mode [ 249.686723][T13895] tipc: Node identity , cluster identity 4711 [ 249.693028][T13895] tipc: Failed to obtain node identity [ 249.698564][T13895] tipc: Enabling of bearer rejected, failed to enable media [ 249.717560][T13897] 9pnet_fd: Insufficient options for proto=fd [ 249.733148][T13899] bridge0: port 3(syz_tun) entered blocking state [ 249.739646][T13899] bridge0: port 3(syz_tun) entered disabled state [ 249.746227][T13899] syz_tun: entered allmulticast mode [ 249.751969][T13899] syz_tun: entered promiscuous mode [ 249.757312][T13899] bridge0: port 3(syz_tun) entered blocking state [ 249.763904][T13899] bridge0: port 3(syz_tun) entered forwarding state [ 249.854659][T13907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.858187][ T36] audit: type=1400 audit(2000000667.269:810): avc: denied { getattr } for pid=13906 comm="syz.5.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 249.861921][T13907] IPv6: NLM_F_CREATE should be set when creating new route [ 249.888778][T13907] IPv6: NLM_F_CREATE should be set when creating new route [ 250.115153][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 250.121251][ T622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 250.138685][T13932] fuse: Bad value for 'user_id' [ 250.143720][T13932] fuse: Bad value for 'user_id' [ 250.238753][T13940] tipc: Started in network mode [ 250.249407][T13940] tipc: Node identity ac14140f, cluster identity 4711 [ 250.263485][T13940] tipc: New replicast peer: 255.255.255.255 [ 250.276651][T13940] tipc: Enabled bearer , priority 10 [ 250.575994][ T45] usb 3-1: USB disconnect, device number 34 [ 250.591666][ T45] usblp0: removed [ 251.009046][ T45] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 251.053912][ T36] audit: type=1326 audit(2000000668.395:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13962 comm="syz.3.4536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4b598efc9 code=0x0 [ 251.109284][ T36] audit: type=1400 audit(2000000668.442:812): avc: denied { execheap } for pid=13962 comm="syz.3.4536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 251.168885][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 251.175301][ T45] usb 3-1: config 8 has an invalid interface number: 138 but max is 0 [ 251.183652][ T45] usb 3-1: config 8 has no interface number 0 [ 251.189897][ T45] usb 3-1: config 8 interface 138 has no altsetting 0 [ 251.198624][ T45] usb 3-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=40.9e [ 251.207834][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.215957][ T45] usb 3-1: Product: syz [ 251.220481][ T45] usb 3-1: Manufacturer: syz [ 251.227696][ T45] usb 3-1: SerialNumber: syz [ 251.451356][ T45] snd-usb-audio 3-1:8.138: probe with driver snd-usb-audio failed with error -71 [ 251.464111][ T45] usb 3-1: USB disconnect, device number 35 [ 251.478284][ T65] tipc: Node number set to 2886997007 [ 251.754477][T13984] binder: Bad value for 'max' [ 251.975678][ T36] audit: type=1401 audit(2000000669.258:813): op=setxattr invalid_context="system_u:object_r:fsadm_exec_t:s0" [ 252.032215][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 252.052144][T14002] 9pnet_fd: Insufficient options for proto=fd [ 252.059123][ T36] audit: type=1400 audit(2000000669.333:814): avc: denied { lock } for pid=14000 comm="syz.3.4547" path="socket:[61386]" dev="sockfs" ino=61386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 252.131787][T14019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4553'. [ 252.195705][ T45] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.205906][ T45] usb 1-1: config 0 has no interfaces? [ 252.211435][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.221219][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.229930][ T45] usb 1-1: config 0 descriptor?? [ 252.362604][ T507] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 252.449954][T13989] rust_binder: Write failure EFAULT in pid:65 [ 252.452595][T13989] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 252.469011][ T45] usb 1-1: USB disconnect, device number 42 [ 252.522529][ T507] usb 3-1: Invalid ep0 maxpacket: 16 [ 252.661026][ T507] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 252.831554][ T507] usb 3-1: Invalid ep0 maxpacket: 16 [ 252.837170][ T507] usb usb3-port1: attempt power cycle [ 252.848057][T14057] fuse: Unknown parameter 'ۛg00000000000000000000' [ 253.262217][ T507] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 253.301868][ T507] usb 3-1: Invalid ep0 maxpacket: 16 [ 253.449798][ T507] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 253.471375][ T507] usb 3-1: Invalid ep0 maxpacket: 16 [ 253.479010][ T507] usb usb3-port1: unable to enumerate USB device [ 253.531806][T14159] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4595'. [ 253.540874][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4595'. [ 254.018291][T14162] rust_binder: Error while translating object. [ 254.018323][T14162] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 254.024575][T14162] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:82 [ 254.062026][ T36] audit: type=1400 audit(2000005023.220:815): avc: granted { setsecparam } for pid=14167 comm="syz.0.4598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 254.690999][T14191] netlink: 'syz.5.4606': attribute type 11 has an invalid length. [ 254.962420][T14208] rust_binder: Write failure EFAULT in pid:88 [ 254.978973][T14210] overlay: Unknown parameter 'appraise' [ 255.215973][T14220] usb usb8: usbfs: process 14220 (syz.2.4616) did not claim interface 0 before use [ 255.225641][T14220] rust_binder: Error in use_page_slow: ESRCH [ 255.225659][T14220] rust_binder: use_range failure ESRCH [ 255.231718][T14220] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 255.237212][T14220] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 255.245378][T14220] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:497 [ 255.269089][T14224] netlink: 'syz.2.4617': attribute type 16 has an invalid length. [ 255.354345][T14238] overlayfs: failed to clone upperpath [ 255.383592][T14233] /dev/rnullb0: Can't open blockdev [ 255.583899][T14269] netlink: 'syz.5.4633': attribute type 1 has an invalid length. [ 255.720045][ T507] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 255.879912][ T507] usb 3-1: Using ep0 maxpacket: 8 [ 255.887265][ T507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.901935][ T507] usb 3-1: config 6 has an invalid interface number: 254 but max is 0 [ 255.910210][ T507] usb 3-1: config 6 has no interface number 0 [ 255.916844][ T507] usb 3-1: config 6 interface 254 has no altsetting 0 [ 255.926263][ T507] usb 3-1: string descriptor 0 read error: -22 [ 255.932624][ T507] usb 3-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=30.2c [ 255.941818][ T507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.954364][ T507] usb-storage 3-1:6.254: USB Mass Storage device detected [ 255.962238][ T507] usb-storage 3-1:6.254: Quirks match for vid 054c pid 0069: 1 [ 256.166889][ T2995] tipc: Subscription rejected, illegal request [ 256.173475][T14248] rust_binder: Write failure EINVAL in pid:518 [ 256.348889][ T507] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 256.441051][T14286] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4640'. [ 256.519429][ T507] usb 1-1: Using ep0 maxpacket: 16 [ 256.525906][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.540152][ T507] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.551137][ T507] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 256.564485][ T507] usb 1-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 256.573823][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.588606][ T36] audit: type=1326 audit(2000005025.584:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.5.4645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b8038efc9 code=0x0 [ 256.612757][ T507] usb 1-1: config 0 descriptor?? [ 257.051101][ T507] apple 0003:05AC:027B.0016: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.0-1/input0 [ 257.264497][ T65] usb 1-1: USB disconnect, device number 43 [ 257.595453][T14351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14351 comm=syz.5.4663 [ 257.608113][T14351] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14351 comm=syz.5.4663 [ 257.899324][T14363] rust_binder: 103: no such ref 0 [ 257.904443][T14363] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 257.911654][T14363] rust_binder: 103: no such ref 2 [ 257.916752][T14363] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false [ 258.196627][T14380] rust_binder: Write failure EFAULT in pid:118 [ 258.197054][ T36] audit: type=1400 audit(2000005027.094:817): avc: denied { view } for pid=14379 comm="syz.0.4672" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 258.245803][ T36] audit: type=1400 audit(2000005027.132:818): avc: denied { read write } for pid=13613 comm="syz-executor" name="loop0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.264499][T14394] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 258.272267][ T36] audit: type=1400 audit(2000005027.132:819): avc: denied { open } for pid=13613 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.286802][T14394] netlink: 'syz.5.4676': attribute type 4 has an invalid length. [ 258.310716][ T36] audit: type=1400 audit(2000005027.132:820): avc: denied { ioctl } for pid=13613 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=604 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.314560][T14394] netlink: 'syz.5.4676': attribute type 4 has an invalid length. [ 258.346178][ T36] audit: type=1400 audit(2000005027.226:821): avc: denied { read write } for pid=14395 comm="syz.0.4677" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.369665][ T36] audit: type=1400 audit(2000005027.226:822): avc: denied { open } for pid=14395 comm="syz.0.4677" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.405629][ T36] audit: type=1400 audit(2000005027.226:823): avc: denied { ioctl } for pid=14395 comm="syz.0.4677" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 258.434107][ T36] audit: type=1400 audit(2000005027.282:824): avc: denied { create } for pid=14408 comm="syz.5.4681" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.464593][ T36] audit: type=1400 audit(2000005027.282:825): avc: denied { ioctl } for pid=14408 comm="syz.5.4681" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=63053 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.626135][ T507] usb 3-1: USB disconnect, device number 40 [ 258.718256][T14439] fuse: Bad value for 'fd' [ 258.721279][T14438] binder: Unknown parameter 'defcontext01777777777777777777777' [ 258.795317][T14435] fuse: Bad value for 'group_id' [ 258.808475][T14435] fuse: Bad value for 'group_id' [ 258.906669][T14446] binder: Unknown parameter 'm_xM%xv' [ 258.908668][T14447] binder: Unknown parameter 'm_xM%xv' [ 258.941907][T14449] overlayfs: overlapping lowerdir path [ 259.253780][T14467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14467 comm=syz.3.4700 [ 259.418587][ T65] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 259.546502][ T507] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 259.589128][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 259.597054][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.609562][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.620434][ T65] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.633422][ T65] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 259.642491][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.653156][ T65] usb 3-1: config 0 descriptor?? [ 259.706384][ T507] usb 1-1: Using ep0 maxpacket: 32 [ 259.713517][ T507] usb 1-1: config 2 has an invalid interface number: 194 but max is 0 [ 259.721749][ T507] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 259.731860][ T507] usb 1-1: config 2 has no interface number 0 [ 259.737969][ T507] usb 1-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 259.748199][ T507] usb 1-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 259.759552][ T507] usb 1-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 259.772706][ T507] usb 1-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 259.781787][ T507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.793122][T14470] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 259.800752][T14470] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 260.002164][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4705'. [ 260.030233][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.039115][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.056908][ T507] usb 1-1: string descriptor 0 read error: -71 [ 260.079540][ T507] usb 1-1: USB disconnect, device number 44 [ 260.125804][ T9541] udevd[9541]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.194/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.402851][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 260.409978][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 260.418872][ T65] usb 3-1: USB disconnect, device number 41 [ 260.665203][T14490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:133 [ 260.700924][T14492] rust_binder: Write failure EFAULT in pid:135 [ 260.938592][T14497] binder: Unknown parameter 'defcot' [ 261.251915][ T65] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 261.273214][ T507] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 261.414161][ T65] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.425054][ T65] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 261.436581][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 261.446652][ T507] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 261.447580][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 261.459104][ T507] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 261.475430][ T65] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 261.483694][ T507] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 261.491157][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.499935][ T507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.507248][ T65] usb 1-1: Product: syz [ 261.515725][ T507] usb 3-1: Product: syz [ 261.519438][ T65] usb 1-1: Manufacturer: syz [ 261.528051][ T65] usb 1-1: SerialNumber: syz [ 261.536097][ T65] usb 1-1: config 0 descriptor?? [ 261.539584][ T507] usb 3-1: Manufacturer: syz [ 261.547681][T14502] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 261.548296][ T507] usb 3-1: SerialNumber: syz [ 261.556860][ T65] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input48 [ 261.578510][ T507] usb 3-1: config 0 descriptor?? [ 261.589534][T14504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.601814][T14504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.633333][T14508] netlink: 'syz.3.4716': attribute type 4 has an invalid length. [ 261.642229][T14508] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4716'. [ 261.793178][ T65] usb 1-1: USB disconnect, device number 45 [ 261.854169][T14504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.873034][T14504] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 261.985344][ T36] kauditd_printk_skb: 512 callbacks suppressed [ 261.985361][ T36] audit: type=1400 audit(2000005030.650:1338): avc: denied { create } for pid=14520 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.019303][ T36] audit: type=1400 audit(2000005030.650:1339): avc: denied { create } for pid=14520 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.055811][ T36] audit: type=1400 audit(2000005030.650:1340): avc: denied { create } for pid=14520 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.076435][T14526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.083065][T14526] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 262.091596][ T36] audit: type=1400 audit(2000005030.650:1341): avc: denied { create } for pid=14520 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.104568][T14526] audit: backlog limit exceeded [ 262.113387][T14504] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.123242][ T36] audit: type=1400 audit(2000005030.660:1342): avc: denied { create } for pid=14520 comm="syz.3.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 262.127597][T14526] audit: audit_backlog=65 > audit_backlog_limit=64 [ 262.201033][ T2995] tipc: Subscription rejected, illegal request [ 262.203136][T14526] netlink: 'syz.3.4722': attribute type 1 has an invalid length. [ 262.215456][T14530] batadv_slave_1: entered promiscuous mode [ 262.226297][T14529] batadv_slave_1: left promiscuous mode [ 262.359008][ T507] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 262.369011][T14545] devtmpfs: Unknown parameter 'fuse' [ 262.536850][T14555] rust_binder: Failed copying remainder into alloc: EFAULT [ 262.536874][T14555] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 262.544211][T14555] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 262.552702][T14555] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:150 [ 263.010622][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 263.016576][T14504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 263.027492][T14504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:535 [ 263.039344][ T507] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 263.059610][ T507] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 2a:c7:f7:82:4d:7b [ 263.076178][ T507] usb 3-1: USB disconnect, device number 42 [ 263.082366][ T507] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 263.159877][ T10] usb 1-1: device descriptor read/64, error -71 [ 263.434922][ T10] usb 1-1: device descriptor read/64, error -71 [ 263.692744][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 263.842696][ T10] usb 1-1: device descriptor read/64, error -71 [ 264.042890][T14619] fuse: Bad value for 'fd' [ 264.092269][T14626] can: request_module (can-proto-0) failed. [ 264.120780][T14629] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4756'. [ 264.129900][ T10] usb 1-1: device descriptor read/64, error -71 [ 264.247147][ T10] usb usb1-port1: attempt power cycle [ 264.609419][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 264.632574][ T10] usb 1-1: device descriptor read/8, error -71 [ 264.722523][T14694] overlayfs: failed to clone upperpath [ 264.771394][ T10] usb 1-1: device descriptor read/8, error -71 [ 265.025098][ T10] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 265.048212][ T10] usb 1-1: device descriptor read/8, error -71 [ 265.187593][ T10] usb 1-1: device descriptor read/8, error -71 [ 265.269194][T14711] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 265.269216][T14711] rust_binder: Read failure Err(EFAULT) in pid:564 [ 265.281620][T14712] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 265.288159][T14712] rust_binder: Read failure Err(EFAULT) in pid:564 [ 265.302979][ T10] usb usb1-port1: unable to enumerate USB device [ 265.860590][ T3015] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.870240][ T3015] Bluetooth: hci0: Frame reassembly failed (-84) [ 266.378748][ T507] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 266.540459][ T507] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 266.548563][ T507] usb 1-1: config 1 has no interface number 0 [ 266.554690][ T507] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 64 [ 266.564454][ T507] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 40 [ 266.577671][ T507] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 266.587330][ T507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.595360][ T507] usb 1-1: Product: syz [ 266.599565][ T507] usb 1-1: Manufacturer: syz [ 266.604192][ T507] usb 1-1: SerialNumber: syz [ 266.612180][T14762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.620010][T14762] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.845359][T14787] overlayfs: failed to clone upperpath [ 267.035065][T14796] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 267.211158][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4818'. [ 267.334907][ T36] kauditd_printk_skb: 824 callbacks suppressed [ 267.334926][ T36] audit: type=1400 audit(2000005035.660:2163): avc: denied { create } for pid=14818 comm="syz.3.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 267.362813][ T36] audit: type=1400 audit(2000005035.670:2164): avc: denied { create } for pid=14818 comm="syz.3.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.383595][ T36] audit: type=1400 audit(2000005035.670:2165): avc: denied { setopt } for pid=14818 comm="syz.3.4819" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.405029][ T36] audit: type=1400 audit(2000005035.670:2166): avc: denied { create } for pid=14818 comm="syz.3.4819" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.427597][ T36] audit: type=1400 audit(2000005035.670:2167): avc: denied { ioctl } for pid=14818 comm="syz.3.4819" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64912 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.454875][ T36] audit: type=1400 audit(2000005035.670:2168): avc: denied { ioctl } for pid=14818 comm="syz.3.4819" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64912 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 267.531807][ T36] audit: type=1400 audit(2000005035.857:2169): avc: denied { create } for pid=14810 comm="syz.5.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.552872][ T36] audit: type=1400 audit(2000005035.876:2170): avc: denied { create } for pid=14818 comm="syz.3.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.572472][ T36] audit: type=1400 audit(2000005035.876:2171): avc: denied { setopt } for pid=14818 comm="syz.3.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.592643][ T36] audit: type=1400 audit(2000005035.876:2172): avc: denied { ioctl } for pid=14818 comm="syz.3.4819" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=64912 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 268.030828][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 268.036922][ T622] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 268.567137][T14860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=14860 comm=syz.5.4833 [ 268.654762][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4835'. [ 268.747223][T14867] batadv_slave_1: entered promiscuous mode [ 268.754409][T14867] batadv_slave_1: left promiscuous mode [ 269.186924][T14887] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 269.186957][T14887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589 [ 269.205221][ T1579] usb 1-1: USB disconnect, device number 50 [ 269.210349][T14889] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 269.568083][T14901] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4845'. [ 269.981917][T14923] rust_binder: Write failure EINVAL in pid:170 [ 270.142288][T14933] overlayfs: failed to clone upperpath [ 270.237234][ T344] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 270.407897][ T344] usb 1-1: device descriptor read/64, error -71 [ 270.469260][T14942] rust_binder: Error while translating object. [ 270.469306][T14942] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 270.493035][T14942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:615 [ 270.706167][ T344] usb 1-1: device descriptor read/64, error -71 [ 270.993950][ T344] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 271.175167][ T344] usb 1-1: device descriptor read/64, error -71 [ 271.431272][ T344] usb 1-1: device descriptor read/64, error -71 [ 271.548891][ T344] usb usb1-port1: attempt power cycle [ 271.910636][ T344] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 271.936501][ T344] usb 1-1: device descriptor read/8, error -71 [ 272.097048][ T344] usb 1-1: device descriptor read/8, error -71 [ 272.369235][ T344] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 272.403487][ T344] usb 1-1: device descriptor read/8, error -71 [ 272.426461][T14881] syz.3.4838 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 272.440930][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.3.4838 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 272.440965][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.440978][T14881] Call Trace: [ 272.440985][T14881] [ 272.440994][T14881] __dump_stack+0x21/0x30 [ 272.441045][T14881] dump_stack_lvl+0x10c/0x190 [ 272.441068][T14881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 272.441092][T14881] ? ___ratelimit+0x3f7/0x5a0 [ 272.441119][T14881] dump_stack+0x19/0x20 [ 272.441142][T14881] dump_header+0xd7/0x490 [ 272.441160][T14881] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 272.441185][T14881] oom_kill_process+0x35d/0x640 [ 272.441206][T14881] ? sched_clock_cpu+0x75/0x400 [ 272.441232][T14881] out_of_memory+0x659/0xa80 [ 272.441253][T14881] ? __cfi_out_of_memory+0x10/0x10 [ 272.441275][T14881] ? mutex_lock_killable+0x92/0x1c0 [ 272.441293][T14881] ? __cfi_mutex_lock_killable+0x10/0x10 [ 272.441313][T14881] mem_cgroup_out_of_memory+0x279/0x350 [ 272.441332][T14881] ? drain_obj_stock+0xed0/0xed0 [ 272.441351][T14881] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 272.441369][T14881] try_charge_memcg+0x8f7/0xde0 [ 272.441394][T14881] ? __cfi_try_charge_memcg+0x10/0x10 [ 272.441418][T14881] ? __alloc_pages_noprof+0x31f/0x7b0 [ 272.441442][T14881] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 272.441466][T14881] ? __folio_batch_add_and_move+0x2ab/0x370 [ 272.441489][T14881] __mem_cgroup_charge+0xf6/0x410 [ 272.441515][T14881] ? _raw_spin_lock+0x8c/0x120 [ 272.441536][T14881] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 272.441563][T14881] shmem_alloc_and_add_folio+0x86d/0x1050 [ 272.441587][T14881] ? put_swap_device+0x130/0x130 [ 272.441609][T14881] ? shmem_huge_global_enabled+0x2da/0x360 [ 272.441630][T14881] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 272.441650][T14881] ? __kasan_check_write+0x18/0x20 [ 272.441682][T14881] ? _raw_spin_lock+0x8c/0x120 [ 272.441704][T14881] shmem_get_folio_gfp+0x5f0/0x1380 [ 272.441727][T14881] ? shmem_get_folio+0xc0/0xc0 [ 272.441746][T14881] ? follow_page_pte+0xa5c/0xb90 [ 272.441769][T14881] ? inode_to_bdi+0x6d/0x100 [ 272.441793][T14881] shmem_write_begin+0xf4/0x270 [ 272.441812][T14881] generic_perform_write+0x330/0x960 [ 272.441835][T14881] ? __cfi_generic_perform_write+0x10/0x10 [ 272.441855][T14881] ? down_write+0xe9/0x2a0 [ 272.441872][T14881] ? file_update_time+0xa3/0x220 [ 272.441892][T14881] shmem_file_write_iter+0x105/0x130 [ 272.441912][T14881] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 272.441932][T14881] __kernel_write_iter+0x41a/0x8e0 [ 272.441946][T14881] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 272.441967][T14881] ? __cfi___kernel_write_iter+0x10/0x10 [ 272.441981][T14881] ? get_dump_page+0x160/0x220 [ 272.441999][T14881] ? __asan_memset+0x39/0x50 [ 272.442013][T14881] ? iov_iter_bvec+0xc0/0x180 [ 272.442032][T14881] dump_user_range+0xb06/0xdf0 [ 272.442047][T14881] ? __cfi_dump_emit+0x10/0x10 [ 272.442061][T14881] ? __cfi_dump_user_range+0x10/0x10 [ 272.442076][T14881] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 272.442098][T14881] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 272.442120][T14881] ? elf_core_dump+0x2368/0x3800 [ 272.442139][T14881] elf_core_dump+0x2ccc/0x3800 [ 272.442158][T14881] ? __cfi_elf_core_dump+0x10/0x10 [ 272.442180][T14881] ? dump_interrupted+0xf0/0xf0 [ 272.442202][T14881] ? filp_open+0x182/0x1d0 [ 272.442220][T14881] ? 0xffffffffff600000 [ 272.442237][T14881] ? freezing_slow_path+0x12b/0x170 [ 272.442259][T14881] do_coredump+0x1bfa/0x2bd0 [ 272.442283][T14881] ? __cfi_do_coredump+0x10/0x10 [ 272.442304][T14881] ? asm_exc_page_fault+0x2b/0x30 [ 272.442326][T14881] ? __kasan_slab_free+0x6a/0x80 [ 272.442342][T14881] ? kmem_cache_free+0x1c1/0x510 [ 272.442357][T14881] ? get_signal+0xa75/0x14f0 [ 272.442377][T14881] get_signal+0x11fd/0x14f0 [ 272.442397][T14881] arch_do_signal_or_restart+0x96/0x720 [ 272.442420][T14881] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 272.442445][T14881] irqentry_exit_to_user_mode+0x4e/0xb0 [ 272.442462][T14881] irqentry_exit+0x16/0x60 [ 272.442477][T14881] exc_page_fault+0x66/0xc0 [ 272.442492][T14881] asm_exc_page_fault+0x2b/0x30 [ 272.442507][T14881] RIP: 0033:0x7ff4b598efd1 [ 272.442522][T14881] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 272.442535][T14881] RSP: 002b:000000000000fe00 EFLAGS: 00010217 [ 272.442554][T14881] RAX: 0000000000000000 RBX: 00007ff4b5be5fa0 RCX: 00007ff4b598efc9 [ 272.442567][T14881] RDX: 0000000000000000 RSI: 000000000000fe00 RDI: 0000000020022080 [ 272.442578][T14881] RBP: 00007ff4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.442588][T14881] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 272.442599][T14881] R13: 00007ff4b5be6038 R14: 00007ff4b5be5fa0 R15: 00007fff41e00c28 [ 272.442613][T14881] [ 272.442727][T14881] memory: usage 307200kB, limit 307200kB, failcnt 18783 [ 272.918474][T14881] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 272.926541][T14881] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 272.933517][T14881] Memory cgroup stats for /syz3: [ 272.933604][T14881] cache 314486784 [ 272.942284][T14881] rss 32768 [ 272.945463][T14881] rss_huge 0 [ 272.946870][ T36] kauditd_printk_skb: 439 callbacks suppressed [ 272.946884][ T36] audit: type=1400 audit(2000005040.933:2612): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.948739][T14881] shmem 247341056 [ 272.980522][ T36] audit: type=1400 audit(2000005040.961:2613): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 272.983941][T14881] mapped_file 0 [ 273.009169][ T36] audit: type=1400 audit(2000005040.999:2614): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.013316][T14881] dirty 0 [ 273.037948][ T36] audit: type=1400 audit(2000005041.027:2615): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.040058][ T344] usb 1-1: device descriptor read/8, error -71 [ 273.066350][ T36] audit: type=1400 audit(2000005041.027:2616): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.072612][T14881] writeback 0 [ 273.096526][ T36] audit: type=1400 audit(2000005041.045:2617): avc: denied { ioctl } for pid=14918 comm="syz.0.4850" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.100335][T14881] workingset_refault_anon 21 [ 273.129081][T14881] workingset_refault_file 474 [ 273.133822][T14881] swap 127930368 [ 273.141319][T14881] swapcached 65536 [ 273.145119][T14881] pgpgin 673688 [ 273.148662][T14881] pgpgout 599443 [ 273.152234][T14881] pgfault 322669 [ 273.155989][T14881] pgmajfault 5931 [ 273.168305][T14881] inactive_anon 186654720 [ 273.168311][ T36] audit: type=1400 audit(2000005041.130:2618): avc: denied { read write } for pid=13613 comm="syz-executor" name="loop0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.172660][T14881] active_anon 60772352 [ 273.204307][T14881] inactive_file 0 [ 273.207990][T14881] active_file 0 [ 273.211605][ T344] usb usb1-port1: unable to enumerate USB device [ 273.219764][T14881] unevictable 67145728 [ 273.222774][ T36] audit: type=1400 audit(2000005041.130:2619): avc: denied { read write open } for pid=13613 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.223883][T14881] hierarchical_memory_limit 314572800 [ 273.255556][T14881] hierarchical_memsw_limit 9223372036854771712 [ 273.261723][T14881] total_cache 314486784 [ 273.262106][ T36] audit: type=1400 audit(2000005041.130:2620): avc: denied { ioctl } for pid=13613 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=604 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.266788][T14881] total_rss 32768 [ 273.295308][T14881] total_rss_huge 0 [ 273.299232][T14881] total_shmem 247341056 [ 273.303383][T14881] total_mapped_file 0 [ 273.307400][T14881] total_dirty 0 [ 273.310859][T14881] total_writeback 0 [ 273.314660][T14881] total_workingset_refault_anon 21 [ 273.319803][T14881] total_workingset_refault_file 474 [ 273.325028][T14881] total_swap 127930368 [ 273.329126][T14881] total_swapcached 65536 [ 273.333360][T14881] total_pgpgin 673688 [ 273.337321][T14881] total_pgpgout 599443 [ 273.341531][T14881] total_pgfault 322669 [ 273.345609][T14881] total_pgmajfault 5931 [ 273.349983][T14881] total_inactive_anon 186654720 [ 273.354830][T14881] total_active_anon 60772352 [ 273.359517][T14881] total_inactive_file 0 [ 273.363812][T14881] total_active_file 0 [ 273.367787][T14881] total_unevictable 67145728 [ 273.372403][T14881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3696,pid=11453,uid=0 [ 273.387896][T14881] Memory cgroup out of memory: Killed process 11453 (syz.3.3696) total-vm:93872kB, anon-rss:1292kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 273.410682][T14881] syz.3.4838 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 273.420639][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.3.4838 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 273.420671][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.420683][T14881] Call Trace: [ 273.420689][T14881] [ 273.420697][T14881] __dump_stack+0x21/0x30 [ 273.420722][T14881] dump_stack_lvl+0x10c/0x190 [ 273.420742][T14881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 273.420762][T14881] ? ___ratelimit+0x3f7/0x5a0 [ 273.420786][T14881] dump_stack+0x19/0x20 [ 273.420804][T14881] dump_header+0xd7/0x490 [ 273.420820][T14881] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 273.420840][T14881] oom_kill_process+0x35d/0x640 [ 273.420860][T14881] ? sched_clock_cpu+0x75/0x400 [ 273.420881][T14881] out_of_memory+0x659/0xa80 [ 273.420899][T14881] ? __cfi_out_of_memory+0x10/0x10 [ 273.420917][T14881] ? mutex_lock_killable+0x104/0x1c0 [ 273.420933][T14881] ? __cfi_mutex_lock_killable+0x10/0x10 [ 273.420950][T14881] mem_cgroup_out_of_memory+0x279/0x350 [ 273.420966][T14881] ? drain_obj_stock+0xed0/0xed0 [ 273.420982][T14881] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 273.420997][T14881] try_charge_memcg+0x8f7/0xde0 [ 273.421017][T14881] ? __cfi_try_charge_memcg+0x10/0x10 [ 273.421037][T14881] ? __alloc_pages_noprof+0x31f/0x7b0 [ 273.421058][T14881] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 273.421078][T14881] ? __folio_batch_add_and_move+0x2ab/0x370 [ 273.421098][T14881] __mem_cgroup_charge+0xf6/0x410 [ 273.421119][T14881] ? _raw_spin_lock+0x8c/0x120 [ 273.421137][T14881] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 273.421160][T14881] shmem_alloc_and_add_folio+0x86d/0x1050 [ 273.421181][T14881] ? put_swap_device+0x130/0x130 [ 273.421199][T14881] ? shmem_huge_global_enabled+0x2da/0x360 [ 273.421216][T14881] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 273.421233][T14881] ? __kasan_check_write+0x18/0x20 [ 273.421256][T14881] ? _raw_spin_lock+0x8c/0x120 [ 273.421274][T14881] shmem_get_folio_gfp+0x5f0/0x1380 [ 273.421293][T14881] ? shmem_get_folio+0xc0/0xc0 [ 273.421309][T14881] ? follow_page_pte+0xa5c/0xb90 [ 273.421329][T14881] ? inode_to_bdi+0x6d/0x100 [ 273.421350][T14881] shmem_write_begin+0xf4/0x270 [ 273.421369][T14881] generic_perform_write+0x330/0x960 [ 273.421392][T14881] ? __cfi_generic_perform_write+0x10/0x10 [ 273.421413][T14881] ? down_write+0xe9/0x2a0 [ 273.421429][T14881] ? file_update_time+0xa3/0x220 [ 273.421449][T14881] shmem_file_write_iter+0x105/0x130 [ 273.421469][T14881] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 273.421489][T14881] __kernel_write_iter+0x41a/0x8e0 [ 273.421504][T14881] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 273.421524][T14881] ? __cfi___kernel_write_iter+0x10/0x10 [ 273.421538][T14881] ? get_dump_page+0x160/0x220 [ 273.421557][T14881] ? __asan_memset+0x39/0x50 [ 273.421571][T14881] ? iov_iter_bvec+0xc0/0x180 [ 273.421590][T14881] dump_user_range+0xb06/0xdf0 [ 273.421606][T14881] ? __cfi_dump_emit+0x10/0x10 [ 273.421620][T14881] ? __cfi_dump_user_range+0x10/0x10 [ 273.421635][T14881] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 273.421657][T14881] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 273.421684][T14881] ? elf_core_dump+0x2368/0x3800 [ 273.421703][T14881] elf_core_dump+0x2ccc/0x3800 [ 273.421723][T14881] ? __cfi_elf_core_dump+0x10/0x10 [ 273.421746][T14881] ? dump_interrupted+0xf0/0xf0 [ 273.421766][T14881] ? filp_open+0x182/0x1d0 [ 273.421786][T14881] ? 0xffffffffff600000 [ 273.421798][T14881] ? freezing_slow_path+0x12b/0x170 [ 273.421820][T14881] do_coredump+0x1bfa/0x2bd0 [ 273.421844][T14881] ? __cfi_do_coredump+0x10/0x10 [ 273.421865][T14881] ? asm_exc_page_fault+0x2b/0x30 [ 273.421887][T14881] ? __kasan_slab_free+0x6a/0x80 [ 273.421904][T14881] ? kmem_cache_free+0x1c1/0x510 [ 273.421920][T14881] ? get_signal+0xa75/0x14f0 [ 273.421940][T14881] get_signal+0x11fd/0x14f0 [ 273.421960][T14881] arch_do_signal_or_restart+0x96/0x720 [ 273.421984][T14881] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 273.422008][T14881] irqentry_exit_to_user_mode+0x4e/0xb0 [ 273.422025][T14881] irqentry_exit+0x16/0x60 [ 273.422040][T14881] exc_page_fault+0x66/0xc0 [ 273.422055][T14881] asm_exc_page_fault+0x2b/0x30 [ 273.422071][T14881] RIP: 0033:0x7ff4b598efd1 [ 273.422084][T14881] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 273.422098][T14881] RSP: 002b:000000000000fe00 EFLAGS: 00010217 [ 273.422113][T14881] RAX: 0000000000000000 RBX: 00007ff4b5be5fa0 RCX: 00007ff4b598efc9 [ 273.422125][T14881] RDX: 0000000000000000 RSI: 000000000000fe00 RDI: 0000000020022080 [ 273.422136][T14881] RBP: 00007ff4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 273.422147][T14881] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 273.422157][T14881] R13: 00007ff4b5be6038 R14: 00007ff4b5be5fa0 R15: 00007fff41e00c28 [ 273.422171][T14881] [ 273.422177][T14881] memory: usage 307200kB, limit 307200kB, failcnt 18829 [ 273.897019][T14881] memory+swap: usage 431956kB, limit 9007199254740988kB, failcnt 0 [ 273.905202][T14881] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 273.912053][T14881] Memory cgroup stats for /syz3: [ 273.912130][T14881] cache 314486784 [ 273.920755][T14881] rss 32768 [ 273.924368][T14881] rss_huge 0 [ 273.927603][T14881] shmem 247341056 [ 273.931404][T14881] mapped_file 0 [ 273.934863][T14881] dirty 0 [ 273.937826][T14881] writeback 0 [ 273.941098][T14881] workingset_refault_anon 21 [ 273.945665][T14881] workingset_refault_file 474 [ 273.950364][T14881] swap 127930368 [ 273.953901][T14881] swapcached 65536 [ 273.957652][T14881] pgpgin 673688 [ 273.961101][T14881] pgpgout 599443 [ 273.964628][T14881] pgfault 322669 [ 273.968200][T14881] pgmajfault 5931 [ 273.971907][T14881] inactive_anon 186654720 [ 273.976216][T14881] active_anon 60772352 [ 273.980324][T14881] inactive_file 0 [ 273.983948][T14881] active_file 0 [ 273.987390][T14881] unevictable 67145728 [ 273.991784][T14881] hierarchical_memory_limit 314572800 [ 273.997163][T14881] hierarchical_memsw_limit 9223372036854771712 [ 274.003565][T14881] total_cache 314486784 [ 274.007727][T14881] total_rss 32768 [ 274.011440][T14881] total_rss_huge 0 [ 274.015154][T14881] total_shmem 247341056 [ 274.019330][T14881] total_mapped_file 0 [ 274.023355][T14881] total_dirty 0 [ 274.026811][T14881] total_writeback 0 [ 274.030597][T14881] total_workingset_refault_anon 21 [ 274.035737][T14881] total_workingset_refault_file 474 [ 274.040931][T14881] total_swap 127930368 [ 274.045035][T14881] total_swapcached 65536 [ 274.049269][T14881] total_pgpgin 673688 [ 274.053553][T14881] total_pgpgout 599443 [ 274.057623][T14881] total_pgfault 322669 [ 274.061676][T14881] total_pgmajfault 5931 [ 274.065884][T14881] total_inactive_anon 186654720 [ 274.070734][T14881] total_active_anon 60772352 [ 274.075540][T14881] total_inactive_file 0 [ 274.079739][T14881] total_active_file 0 [ 274.083789][T14881] total_unevictable 67145728 [ 274.088406][T14881] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3448,pid=10746,uid=0 [ 274.103441][T14881] Memory cgroup out of memory: Killed process 10746 (syz.3.3448) total-vm:90164kB, anon-rss:1144kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 274.126644][T14877] syz.3.4838 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 274.136303][T14877] CPU: 1 UID: 0 PID: 14877 Comm: syz.3.4838 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 274.136336][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.136348][T14877] Call Trace: [ 274.136355][T14877] [ 274.136363][T14877] __dump_stack+0x21/0x30 [ 274.136393][T14877] dump_stack_lvl+0x10c/0x190 [ 274.136417][T14877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 274.136441][T14877] ? ___ratelimit+0x3f7/0x5a0 [ 274.136468][T14877] dump_stack+0x19/0x20 [ 274.136490][T14877] dump_header+0xd7/0x490 [ 274.136509][T14877] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 274.136534][T14877] oom_kill_process+0x35d/0x640 [ 274.136564][T14877] ? sched_clock_cpu+0x75/0x400 [ 274.136590][T14877] out_of_memory+0x659/0xa80 [ 274.136612][T14877] ? __cfi_out_of_memory+0x10/0x10 [ 274.136633][T14877] ? mutex_lock_killable+0x104/0x1c0 [ 274.136653][T14877] ? __cfi_mutex_lock_killable+0x10/0x10 [ 274.136673][T14877] mem_cgroup_out_of_memory+0x279/0x350 [ 274.136692][T14877] ? drain_obj_stock+0xed0/0xed0 [ 274.136711][T14877] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 274.136728][T14877] try_charge_memcg+0x8f7/0xde0 [ 274.136752][T14877] ? __cfi_try_charge_memcg+0x10/0x10 [ 274.136776][T14877] ? __alloc_pages_noprof+0x31f/0x7b0 [ 274.136801][T14877] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 274.136824][T14877] ? __folio_batch_add_and_move+0x2ab/0x370 [ 274.136848][T14877] __mem_cgroup_charge+0xf6/0x410 [ 274.136874][T14877] ? _raw_spin_lock+0x8c/0x120 [ 274.136896][T14877] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 274.136922][T14877] shmem_alloc_and_add_folio+0x86d/0x1050 [ 274.136947][T14877] ? put_swap_device+0x130/0x130 [ 274.136968][T14877] ? shmem_huge_global_enabled+0x2da/0x360 [ 274.136994][T14877] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 274.137016][T14877] ? __kasan_check_write+0x18/0x20 [ 274.137041][T14877] ? _raw_spin_lock+0x8c/0x120 [ 274.137064][T14877] shmem_get_folio_gfp+0x5f0/0x1380 [ 274.137087][T14877] ? shmem_get_folio+0xc0/0xc0 [ 274.137106][T14877] ? follow_page_pte+0xa5c/0xb90 [ 274.137130][T14877] ? inode_to_bdi+0x6d/0x100 [ 274.137155][T14877] shmem_write_begin+0xf4/0x270 [ 274.137177][T14877] generic_perform_write+0x330/0x960 [ 274.137205][T14877] ? __cfi_generic_perform_write+0x10/0x10 [ 274.137230][T14877] ? down_write+0xe9/0x2a0 [ 274.137249][T14877] ? file_update_time+0xa3/0x220 [ 274.137273][T14877] shmem_file_write_iter+0x105/0x130 [ 274.137297][T14877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 274.137321][T14877] __kernel_write_iter+0x41a/0x8e0 [ 274.137339][T14877] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 274.137363][T14877] ? __cfi___kernel_write_iter+0x10/0x10 [ 274.137381][T14877] ? get_dump_page+0x160/0x220 [ 274.137403][T14877] ? __asan_memset+0x39/0x50 [ 274.137420][T14877] ? iov_iter_bvec+0xc0/0x180 [ 274.137443][T14877] dump_user_range+0xb06/0xdf0 [ 274.137462][T14877] ? __cfi_dump_emit+0x10/0x10 [ 274.137479][T14877] ? __cfi_dump_user_range+0x10/0x10 [ 274.137497][T14877] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 274.137523][T14877] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 274.137549][T14877] ? elf_core_dump+0x2368/0x3800 [ 274.137587][T14877] elf_core_dump+0x2ccc/0x3800 [ 274.137611][T14877] ? __cfi_elf_core_dump+0x10/0x10 [ 274.137637][T14877] ? dump_interrupted+0xf0/0xf0 [ 274.137662][T14877] ? filp_open+0x182/0x1d0 [ 274.137685][T14877] ? 0xffffffffff600000 [ 274.137699][T14877] ? freezing_slow_path+0x12b/0x170 [ 274.137725][T14877] do_coredump+0x1bfa/0x2bd0 [ 274.137754][T14877] ? __cfi_do_coredump+0x10/0x10 [ 274.137778][T14877] ? asm_exc_page_fault+0x2b/0x30 [ 274.137804][T14877] ? __kasan_slab_free+0x6a/0x80 [ 274.137824][T14877] ? kmem_cache_free+0x1c1/0x510 [ 274.137842][T14877] ? get_signal+0xa75/0x14f0 [ 274.137865][T14877] get_signal+0x11fd/0x14f0 [ 274.137896][T14877] arch_do_signal_or_restart+0x96/0x720 [ 274.137924][T14877] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 274.137953][T14877] irqentry_exit_to_user_mode+0x4e/0xb0 [ 274.137972][T14877] irqentry_exit+0x16/0x60 [ 274.137989][T14877] exc_page_fault+0x66/0xc0 [ 274.138007][T14877] asm_exc_page_fault+0x2b/0x30 [ 274.138026][T14877] RIP: 0033:0x7ff4b598efd1 [ 274.138043][T14877] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 274.138059][T14877] RSP: 002b:000000000000fe00 EFLAGS: 00010217 [ 274.138077][T14877] RAX: 0000000000000000 RBX: 00007ff4b5be5fa0 RCX: 00007ff4b598efc9 [ 274.138091][T14877] RDX: 0000000000000000 RSI: 000000000000fe00 RDI: 0000000020022080 [ 274.138102][T14877] RBP: 00007ff4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.138115][T14877] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 274.138127][T14877] R13: 00007ff4b5be6038 R14: 00007ff4b5be5fa0 R15: 00007fff41e00c28 [ 274.138144][T14877] [ 274.138159][T14877] memory: usage 307200kB, limit 307200kB, failcnt 18898 [ 274.615417][T14877] memory+swap: usage 431848kB, limit 9007199254740988kB, failcnt 0 [ 274.623493][T14877] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 274.630571][T14877] Memory cgroup stats for /syz3: [ 274.630692][T14877] cache 314195968 [ 274.639425][T14877] rss 32768 [ 274.642534][T14877] rss_huge 0 [ 274.645722][T14877] shmem 247050240 [ 274.649343][T14877] mapped_file 0 [ 274.652818][T14877] dirty 0 [ 274.655746][T14877] writeback 0 [ 274.659011][T14877] workingset_refault_anon 21 [ 274.663614][T14877] workingset_refault_file 474 [ 274.668277][T14877] swap 127639552 [ 274.672138][T14877] swapcached 356352 [ 274.675941][T14877] pgpgin 673688 [ 274.679375][T14877] pgpgout 599443 [ 274.682952][T14877] pgfault 322669 [ 274.686484][T14877] pgmajfault 5931 [ 274.690094][T14877] inactive_anon 63062016 [ 274.694381][T14877] active_anon 184365056 [ 274.698526][T14877] inactive_file 0 [ 274.702310][T14877] active_file 0 [ 274.705814][T14877] unevictable 67145728 [ 274.709872][T14877] hierarchical_memory_limit 314572800 [ 274.715341][T14877] hierarchical_memsw_limit 9223372036854771712 [ 274.721753][T14877] total_cache 314195968 [ 274.725937][T14877] total_rss 32768 [ 274.729562][T14877] total_rss_huge 0 [ 274.733263][T14877] total_shmem 247050240 [ 274.737460][T14877] total_mapped_file 0 [ 274.741427][T14877] total_dirty 0 [ 274.745329][T14877] total_writeback 0 [ 274.749208][T14877] total_workingset_refault_anon 21 [ 274.754321][T14877] total_workingset_refault_file 474 [ 274.759610][T14877] total_swap 127639552 [ 274.763675][T14877] total_swapcached 356352 [ 274.768045][T14877] total_pgpgin 673688 [ 274.772032][T14877] total_pgpgout 599443 [ 274.776102][T14877] total_pgfault 322669 [ 274.780239][T14877] total_pgmajfault 5931 [ 274.784394][T14877] total_inactive_anon 63062016 [ 274.789302][T14877] total_active_anon 184365056 [ 274.793973][T14877] total_inactive_file 0 [ 274.798111][T14877] total_active_file 0 [ 274.802143][T14877] total_unevictable 67145728 [ 274.806726][T14877] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4838,pid=14881,uid=0 [ 274.821658][T14877] Memory cgroup out of memory: Killed process 14881 (syz.3.4838) total-vm:90164kB, anon-rss:1148kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 274.883851][T14874] syz.3.4838 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 274.916363][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.3.4838 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 274.916395][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.916406][T14874] Call Trace: [ 274.916411][T14874] [ 274.916418][T14874] __dump_stack+0x21/0x30 [ 274.916447][T14874] dump_stack_lvl+0x10c/0x190 [ 274.916470][T14874] ? __cfi_dump_stack_lvl+0x10/0x10 [ 274.916494][T14874] ? ___ratelimit+0x3f7/0x5a0 [ 274.916521][T14874] dump_stack+0x19/0x20 [ 274.916554][T14874] dump_header+0xd7/0x490 [ 274.916574][T14874] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 274.916599][T14874] oom_kill_process+0x35d/0x640 [ 274.916622][T14874] ? sched_clock_cpu+0x75/0x400 [ 274.916647][T14874] out_of_memory+0x659/0xa80 [ 274.916669][T14874] ? __cfi_out_of_memory+0x10/0x10 [ 274.916691][T14874] ? mutex_lock_killable+0x92/0x1c0 [ 274.916710][T14874] ? __cfi_mutex_lock_killable+0x10/0x10 [ 274.916731][T14874] mem_cgroup_out_of_memory+0x279/0x350 [ 274.916750][T14874] ? drain_obj_stock+0xed0/0xed0 [ 274.916769][T14874] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 274.916787][T14874] try_charge_memcg+0x8f7/0xde0 [ 274.916811][T14874] ? __cfi_try_charge_memcg+0x10/0x10 [ 274.916835][T14874] ? __alloc_pages_noprof+0x31f/0x7b0 [ 274.916860][T14874] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 274.916884][T14874] ? __folio_batch_add_and_move+0x2ab/0x370 [ 274.916908][T14874] __mem_cgroup_charge+0xf6/0x410 [ 274.916934][T14874] ? _raw_spin_lock+0x8c/0x120 [ 274.916956][T14874] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 274.916983][T14874] shmem_alloc_and_add_folio+0x86d/0x1050 [ 274.917008][T14874] ? put_swap_device+0x130/0x130 [ 274.917030][T14874] ? shmem_huge_global_enabled+0x2da/0x360 [ 274.917051][T14874] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 274.917072][T14874] ? __kasan_check_write+0x18/0x20 [ 274.917098][T14874] ? _raw_spin_lock+0x8c/0x120 [ 274.917121][T14874] shmem_get_folio_gfp+0x5f0/0x1380 [ 274.917144][T14874] ? shmem_get_folio+0xc0/0xc0 [ 274.917163][T14874] ? inode_maybe_inc_iversion+0x17d/0x1e0 [ 274.917187][T14874] ? __cfi_inode_maybe_inc_iversion+0x10/0x10 [ 274.917212][T14874] ? inode_to_bdi+0x6d/0x100 [ 274.917237][T14874] shmem_write_begin+0xf4/0x270 [ 274.917258][T14874] generic_perform_write+0x330/0x960 [ 274.917285][T14874] ? __cfi_generic_perform_write+0x10/0x10 [ 274.917309][T14874] ? down_write+0xe9/0x2a0 [ 274.917328][T14874] ? mnt_get_write_access_file+0x1af/0x3b0 [ 274.917349][T14874] ? mnt_put_write_access_file+0xc2/0x100 [ 274.917371][T14874] ? file_update_time+0x1ef/0x220 [ 274.917394][T14874] shmem_file_write_iter+0x105/0x130 [ 274.917417][T14874] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 274.917441][T14874] __kernel_write_iter+0x41a/0x8e0 [ 274.917459][T14874] ? __cfi_shmem_file_write_iter+0x10/0x10 [ 274.917484][T14874] ? __cfi___kernel_write_iter+0x10/0x10 [ 274.917501][T14874] ? get_dump_page+0x160/0x220 [ 274.917525][T14874] ? __asan_memset+0x39/0x50 [ 274.917548][T14874] ? iov_iter_bvec+0xc0/0x180 [ 274.917571][T14874] dump_user_range+0xb06/0xdf0 [ 274.917590][T14874] ? __cfi_dump_emit+0x10/0x10 [ 274.917607][T14874] ? __cfi_dump_user_range+0x10/0x10 [ 274.917625][T14874] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 274.917653][T14874] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 274.917679][T14874] ? elf_core_dump+0x2368/0x3800 [ 274.917701][T14874] elf_core_dump+0x2ccc/0x3800 [ 274.917726][T14874] ? __cfi_elf_core_dump+0x10/0x10 [ 274.917753][T14874] ? dump_interrupted+0xf0/0xf0 [ 274.917778][T14874] ? filp_open+0x182/0x1d0 [ 274.917800][T14874] ? 0xffffffffff600000 [ 274.917815][T14874] ? freezing_slow_path+0x12b/0x170 [ 274.917841][T14874] do_coredump+0x1bfa/0x2bd0 [ 274.917870][T14874] ? __cfi_do_coredump+0x10/0x10 [ 274.917894][T14874] ? asm_exc_page_fault+0x2b/0x30 [ 274.917921][T14874] ? __kasan_slab_free+0x6a/0x80 [ 274.917942][T14874] ? kmem_cache_free+0x1c1/0x510 [ 274.917960][T14874] ? get_signal+0xa75/0x14f0 [ 274.917984][T14874] get_signal+0x11fd/0x14f0 [ 274.918009][T14874] arch_do_signal_or_restart+0x96/0x720 [ 274.918037][T14874] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 274.918067][T14874] irqentry_exit_to_user_mode+0x4e/0xb0 [ 274.918088][T14874] irqentry_exit+0x16/0x60 [ 274.918107][T14874] exc_page_fault+0x66/0xc0 [ 274.918125][T14874] asm_exc_page_fault+0x2b/0x30 [ 274.918144][T14874] RIP: 0033:0x7ff4b598efd1 [ 274.918161][T14874] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 274.918178][T14874] RSP: 002b:000000000000fe00 EFLAGS: 00010217 [ 274.918196][T14874] RAX: 0000000000000000 RBX: 00007ff4b5be5fa0 RCX: 00007ff4b598efc9 [ 274.918211][T14874] RDX: 0000000000000000 RSI: 000000000000fe00 RDI: 0000000020022080 [ 274.918224][T14874] RBP: 00007ff4b5a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.918238][T14874] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 274.918251][T14874] R13: 00007ff4b5be6038 R14: 00007ff4b5be5fa0 R15: 00007fff41e00c28 [ 274.918268][T14874] [ 274.918276][T14874] memory: usage 305476kB, limit 307200kB, failcnt 19696 [ 275.412651][T14874] memory+swap: usage 407660kB, limit 9007199254740988kB, failcnt 0 [ 275.421507][T14874] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 275.429386][T14874] Memory cgroup stats for /syz3: [ 275.429522][T14874] cache 292327424 [ 275.438097][T14874] rss 32768 [ 275.442805][T14874] rss_huge 0 [ 275.446030][T14874] shmem 225181696 [ 275.456921][T14874] mapped_file 0 [ 275.461976][T14874] dirty 0 [ 275.464921][T14874] writeback 0 [ 275.468200][T14874] workingset_refault_anon 62 [ 275.474209][T14874] workingset_refault_file 474 [ 275.478892][T14874] swap 111951872 [ 275.483502][T14874] swapcached 1343488 [ 275.487403][T14874] pgpgin 678282 [ 275.490873][T14874] pgpgout 609129 [ 275.494965][T14874] pgfault 322742 [ 275.498511][T14874] pgmajfault 5941 [ 275.502154][T14874] inactive_anon 209211392 [ 275.508412][T14874] active_anon 17358848 [ 275.512486][T14874] inactive_file 0 [ 275.516140][T14874] active_file 0 [ 275.519616][T14874] unevictable 67145728 [ 275.523666][T14874] hierarchical_memory_limit 314572800 [ 275.529052][T14874] hierarchical_memsw_limit 9223372036854771712 [ 275.535239][T14874] total_cache 292327424 [ 275.539383][T14874] total_rss 32768 [ 275.543002][T14874] total_rss_huge 0 [ 275.546763][T14874] total_shmem 225181696 [ 275.550931][T14874] total_mapped_file 0 [ 275.554888][T14874] total_dirty 0 [ 275.558379][T14874] total_writeback 0 [ 275.562170][T14874] total_workingset_refault_anon 62 [ 275.567301][T14874] total_workingset_refault_file 474 [ 275.572487][T14874] total_swap 111951872 [ 275.576544][T14874] total_swapcached 1343488 [ 275.580973][T14874] total_pgpgin 678282 [ 275.585467][T14874] total_pgpgout 609129 [ 275.589562][T14874] total_pgfault 322742 [ 275.593663][T14874] total_pgmajfault 5941 [ 275.597802][T14874] total_inactive_anon 209211392 [ 275.602681][T14874] total_active_anon 17358848 [ 275.607274][T14874] total_inactive_file 0 [ 275.611463][T14874] total_active_file 0 [ 275.615437][T14874] total_unevictable 67145728 [ 275.620063][T14874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4838,pid=14880,uid=0 [ 275.635002][T14874] Memory cgroup out of memory: Killed process 14880 (syz.3.4838) total-vm:90164kB, anon-rss:1148kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:0 [ 287.319299][ T36] audit: type=1400 audit(2000005054.415:2621): avc: denied { read write } for pid=14951 comm="syz.0.4863" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.346827][T14953] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 287.346859][T14953] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:624 [ 287.372411][T14956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.389446][T14952] audit: audit_backlog=66 > audit_backlog_limit=64 [ 287.393086][T11069] audit: audit_backlog=66 > audit_backlog_limit=64 [ 287.399583][T14952] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 287.402674][ T36] audit: type=1400 audit(2000005054.415:2622): avc: denied { read write open } for pid=14951 comm="syz.0.4863" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.412455][T14956] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 287.442164][T14952] audit: backlog limit exceeded [ 287.447580][T14952] audit: audit_backlog=65 > audit_backlog_limit=64 [ 287.456970][ T36] audit: type=1400 audit(2000005054.415:2623): avc: denied { read } for pid=14951 comm="syz.0.4863" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.684083][T14981] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0 [ 287.684107][T14981] rust_binder: Error while translating object. [ 287.711997][T14981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 287.719126][T14981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:629 [ 287.852079][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4879'. [ 287.954272][T15005] syzkaller1: entered allmulticast mode [ 288.431628][ T65] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 288.640000][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 288.648924][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.668470][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.684618][ T65] usb 1-1: config 1 interface 0 altsetting 173 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 288.717099][ T65] usb 1-1: config 1 interface 0 altsetting 173 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.751356][ T65] usb 1-1: config 1 interface 0 has no altsetting 0 [ 288.764522][ T65] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.40 [ 288.783315][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.802143][ T65] usb 1-1: Product: 㨘뱼⢃꩏阚罄鎾⍪ꀈ픉〹郆Ꮞꈘύᔶ捸飊ᔾ崪췐近tਢ텊熜ಋꣷ亽韵뼞肘돉耞极琀鈡൹댸䙄ఉ編⊖ꍿཹ蛃瞧镦ᄜ璻컞㯍迵„ㅽ㝺쪀珤䆨襞ﶡ晐䞘觶⩄ԝ뗃䩂⚡䦜չ⍚屴迖᠄甐㟇厤膴꼡涨ꏯᎂZ曰҇꣑∊靠䕡ꅅ⮈腃✨দ [ 288.857929][ T65] usb 1-1: Manufacturer: ⠁ [ 288.862580][ T65] usb 1-1: SerialNumber: 솨⮤Ŭ넊뛳졶ﭷ̓鹏쿈鋿枚惯᠑롢俪貸䢌왭滭젼﹛궕䀵蜁ꨳ跐乥镊錅邜冝䊡䦊撙΅紞걈徔샖ᒻ覔ꩤ᜚ᘥ㻗끴黴ꬶ夼㝢悴뽻꼩爾㾨ﵑ㸘ᒖ蚣›괘ƅ೉輲卨莍࿊坸쾶╝諿⭊㎍㊬칏㼉鳨Ⅸ鶬㶏 [ 288.900595][ T506] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 288.919987][T15025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 288.933304][T15025] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.175358][ T65] usbhid 1-1:1.0: can't add hid device: -71 [ 289.191490][ T65] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 289.201687][ T65] usb 1-1: USB disconnect, device number 55 [ 289.578850][T15065] tmpfs: Unknown parameter './file0' [ 289.621957][T15073] overlay: filesystem on ./bus is read-only [ 289.661074][T15075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.661109][T15075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:656 [ 289.679179][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 289.701537][T15077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4903'. [ 289.810708][T15087] netlink: 'syz.3.4907': attribute type 7 has an invalid length. [ 289.818641][T15087] netlink: 'syz.3.4907': attribute type 5 has an invalid length. [ 289.826557][T15087] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4907'. [ 289.844389][T15083] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 291.060481][T15162] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.268789][T15172] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 291.290077][T15174] sit0: entered promiscuous mode [ 291.310804][T15174] netlink: 'syz.2.4938': attribute type 1 has an invalid length. [ 291.318719][T15174] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4938'. [ 291.332753][T15174] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:675 [ 291.507216][T15184] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true [ 291.986950][T15234] SELinux: security_context_str_to_sid () failed with errno=-22 [ 292.404142][T15263] 9pnet_fd: Insufficient options for proto=fd [ 292.457350][T15267] 9pnet: Could not find request transport: xS [ 292.707368][ T36] kauditd_printk_skb: 795 callbacks suppressed [ 292.707384][ T36] audit: type=1400 audit(2000005059.472:3369): avc: denied { write } for pid=15272 comm="syz.5.4968" path="socket:[66478]" dev="sockfs" ino=66478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.735054][T15275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.744695][T15275] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 292.752744][T15275] audit: backlog limit exceeded [ 292.758417][T15275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.765206][T15275] audit: audit_lost=24 audit_rate_limit=0 audit_backlog_limit=64 [ 292.766265][ T36] audit: type=1400 audit(2000005059.472:3370): avc: denied { write } for pid=15272 comm="syz.5.4968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 292.773833][T15275] audit: backlog limit exceeded [ 292.800122][T15275] audit: audit_backlog=65 > audit_backlog_limit=64 [ 292.807554][T15275] audit: audit_lost=25 audit_rate_limit=0 audit_backlog_limit=64 [ 293.043045][T15285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:210 [ 293.118384][T15290] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:214 [ 293.128298][T15290] rust_binder: Read failure Err(EFAULT) in pid:214 [ 293.464022][ T31] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 293.612947][T15312] bridge0: port 3(erspan0) entered blocking state [ 293.621644][T15312] bridge0: port 3(erspan0) entered disabled state [ 293.629900][T15312] erspan0: entered allmulticast mode [ 293.636525][T15312] erspan0: entered promiscuous mode [ 293.641984][T15312] bridge0: port 3(erspan0) entered blocking state [ 293.648479][T15312] bridge0: port 3(erspan0) entered forwarding state [ 293.675665][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 293.688283][T15314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4980'. [ 293.689411][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 293.722722][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 293.750276][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 293.766157][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 293.782248][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.803566][ T31] usb 1-1: Product: syz [ 293.807821][ T31] usb 1-1: Manufacturer: syz [ 293.816771][ T31] usb 1-1: SerialNumber: syz [ 293.826798][ T31] usb 1-1: config 0 descriptor?? [ 294.042812][T15322] rust_binder: Error in use_page_slow: ESRCH [ 294.042835][T15322] rust_binder: use_range failure ESRCH [ 294.049110][T15322] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true [ 294.054680][T15322] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 294.064338][T15322] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:719 [ 294.275047][ T31] usb 1-1: USB disconnect, device number 56 [ 294.693855][T15338] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 294.934725][T15351] __vm_enough_memory: pid: 15351, comm: syz.2.4992, bytes: 18014402804453376 not enough memory for the allocation [ 295.617863][T15389] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.617884][T15388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.636456][T15388] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.776339][T15400] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5011'. [ 295.925680][T15413] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 295.945999][T15412] rust_binder: Error in use_page_slow: ESRCH [ 295.946027][T15412] rust_binder: use_range failure ESRCH [ 295.952353][T15412] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 295.969527][T15412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 295.979581][T15412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:224 [ 296.158739][T15424] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 296.175819][ T335] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 296.206508][T15429] 9pnet_fd: Insufficient options for proto=fd [ 296.233685][T15431] No source specified [ 296.308263][T15431] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 296.309325][T15431] rust_binder: 232: no such ref 1 [ 296.351041][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 296.364339][ T335] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.390970][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.414879][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.436783][ T335] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.446058][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.460079][ T335] usb 3-1: config 0 descriptor?? [ 296.466457][T15411] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 296.487261][ T335] hub 3-1:0.0: USB hub found [ 296.704326][ T335] hub 3-1:0.0: 2 ports detected [ 296.818561][T15474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5034'. [ 296.924204][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.932776][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.942378][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.953911][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.180724][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.189390][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.251058][T15480] No source specified [ 297.284576][T15482] fuse: Bad value for 'fd' [ 297.289274][T15483] fuse: Bad value for 'fd' [ 297.351346][T15487] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 297.424148][T15411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.432870][T15411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.470240][ T335] usb 3-1: USB disconnect, device number 44 [ 297.591104][T15501] rust_binder: 745: no such ref 4294967293 [ 297.916949][T15499] input input51: cannot allocate more than FF_MAX_EFFECTS effects [ 297.949817][ T335] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 298.061129][ T36] kauditd_printk_skb: 712 callbacks suppressed [ 298.061148][ T36] audit: type=1400 audit(2000005064.491:4082): avc: denied { read } for pid=15526 comm="syz.0.5053" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.102468][ T36] audit: type=1400 audit(2000005064.491:4083): avc: denied { read open } for pid=15526 comm="syz.0.5053" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.126843][ T335] usb 3-1: Invalid ep0 maxpacket: 16 [ 298.140502][ T36] audit: type=1400 audit(2000005064.510:4084): avc: denied { ioctl } for pid=15526 comm="syz.0.5053" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 298.166185][ T36] audit: type=1400 audit(2000005064.566:4085): avc: denied { ioctl } for pid=15505 comm="syz.2.5045" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.192045][ T36] audit: type=1400 audit(2000005064.566:4086): avc: denied { read write } for pid=15526 comm="syz.0.5053" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.219754][ T36] audit: type=1400 audit(2000005064.566:4087): avc: denied { read write open } for pid=15526 comm="syz.0.5053" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.248320][ T36] audit: type=1400 audit(2000005064.566:4088): avc: denied { ioctl } for pid=15505 comm="syz.2.5045" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.274187][ T36] audit: type=1400 audit(2000005064.566:4089): avc: denied { ioctl } for pid=15526 comm="syz.0.5053" path="/dev/ashmem" dev="devtmpfs" ino=201 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.312216][ T335] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 298.333307][ T36] audit: type=1400 audit(2000005064.566:4090): avc: denied { map } for pid=15526 comm="syz.0.5053" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.370778][ T36] audit: type=1400 audit(2000005064.566:4091): avc: denied { read } for pid=15526 comm="syz.0.5053" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 298.472107][ T335] usb 3-1: Invalid ep0 maxpacket: 16 [ 298.492184][ T335] usb usb3-port1: attempt power cycle [ 298.525432][T15553] rust_binder: Error while translating object. [ 298.525492][T15553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 298.531726][T15553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:258 [ 298.866468][ T335] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 298.904907][ T335] usb 3-1: Invalid ep0 maxpacket: 16 [ 299.047704][ T335] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 299.069719][ T335] usb 3-1: Invalid ep0 maxpacket: 16 [ 299.075177][ T335] usb usb3-port1: unable to enumerate USB device [ 299.421234][T15582] rust_binder: 263: no such ref 3 [ 299.426387][T15582] rust_binder: 263: no such ref 2 [ 299.431498][T15582] rust_binder: Write failure EINVAL in pid:263 [ 299.679309][T15589] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.852513][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5077'. [ 299.870238][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5077'. [ 299.885519][T15606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5077'. [ 299.895101][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 299.904847][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 299.917840][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5078'. [ 300.002709][T15612] netlink: 'syz.0.5080': attribute type 1 has an invalid length. [ 300.094197][T15612] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 300.106833][T15612] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 300.115346][T15612] CPU: 0 UID: 0 PID: 15612 Comm: syz.0.5080 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 300.127008][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.137135][T15612] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 300.143419][T15612] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 300.163051][T15612] RSP: 0018:ffffc9000415f820 EFLAGS: 00010202 [ 300.169144][T15612] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888120100000 [ 300.177133][T15612] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 300.185124][T15612] RBP: ffffc9000415fa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 300.193123][T15612] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 300.201123][T15612] R13: 7fffffffffff0000 R14: ffff88813d063810 R15: ffff88813d063800 [ 300.209119][T15612] FS: 00007f868d1f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 300.218082][T15612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.224686][T15612] CR2: 00007f5af6301140 CR3: 00000001157a6000 CR4: 00000000003526b0 [ 300.232680][T15612] Call Trace: [ 300.235969][T15612] [ 300.238927][T15612] ? __cfi_iter_file_splice_write+0x10/0x10 [ 300.244854][T15612] ? __kmalloc_noprof+0x271/0x530 [ 300.249902][T15612] ? activate_task+0x38b/0x3d0 [ 300.254693][T15612] ? __kasan_check_write+0x18/0x20 [ 300.259845][T15612] ? __cfi_iter_file_splice_write+0x10/0x10 [ 300.265772][T15612] direct_splice_actor+0x279/0x4b0 [ 300.270920][T15612] splice_direct_to_actor+0x4fb/0xbc0 [ 300.276330][T15612] ? __cfi_direct_splice_actor+0x10/0x10 [ 300.282015][T15612] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 300.287944][T15612] do_splice_direct+0x182/0x270 [ 300.292827][T15612] ? __cfi_do_splice_direct+0x10/0x10 [ 300.298324][T15612] ? __cfi_direct_file_splice_eof+0x10/0x10 [ 300.304342][T15612] ? security_file_permission+0x2e/0xc0 [ 300.309927][T15612] ? rw_verify_area+0xac/0x230 [ 300.314732][T15612] do_sendfile+0x5c8/0xfb0 [ 300.319182][T15612] ? vfs_writev+0xcf0/0xcf0 [ 300.323721][T15612] ? __se_sys_futex+0x28f/0x300 [ 300.328603][T15612] __x64_sys_sendfile64+0x193/0x1f0 [ 300.333831][T15612] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 300.339606][T15612] ? switch_fpu_return+0x12/0x20 [ 300.344594][T15612] x64_sys_call+0xa26/0x2ee0 [ 300.349232][T15612] do_syscall_64+0x58/0xf0 [ 300.353690][T15612] ? clear_bhb_loop+0x50/0xa0 [ 300.358423][T15612] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 300.364364][T15612] RIP: 0033:0x7f868e78efc9 [ 300.368808][T15612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.388436][T15612] RSP: 002b:00007f868d1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 300.396871][T15612] RAX: ffffffffffffffda RBX: 00007f868e9e5fa0 RCX: 00007f868e78efc9 [ 300.404870][T15612] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000d [ 300.412865][T15612] RBP: 00007f868e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.420847][T15612] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000 [ 300.428830][T15612] R13: 00007f868e9e6038 R14: 00007f868e9e5fa0 R15: 00007ffc7ff84748 [ 300.436822][T15612] [ 300.439850][T15612] Modules linked in: [ 300.444031][T15612] ---[ end trace 0000000000000000 ]--- [ 300.449787][T15612] RIP: 0010:iter_file_splice_write+0xace/0x11b0 [ 300.456081][T15612] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24 [ 300.496584][T15612] RSP: 0018:ffffc9000415f820 EFLAGS: 00010202 [ 300.504034][T15612] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888120100000 [ 300.512114][T15612] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7fffffffffff0000 [ 300.520164][T15612] RBP: ffffc9000415fa40 R08: ffff8881f6e72240 R09: 1ffff1103edce448 [ 300.528163][T15612] R10: 1ffff1103edce44b R11: 0000000000000fd8 R12: dffffc0000000000 [ 300.536956][T15612] R13: 7fffffffffff0000 R14: ffff88813d063810 R15: ffff88813d063800 [ 300.545009][T15612] FS: 00007f868d1f76c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 300.554032][T15612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.560680][T15612] CR2: 00007f868d1d5f98 CR3: 00000001157a6000 CR4: 00000000003526b0 [ 300.568734][T15612] Kernel panic - not syncing: Fatal exception [ 300.575075][T15612] Kernel Offset: disabled [ 300.579395][T15612] Rebooting in 86400 seconds..